Accueil Explorer Aide
S'inscrire Connexion
AFS
/
xdr-terraform-live
2
0
Fork 0
Fichiers Tickets 0 Pull Requests 0 Wiki
Aborescence: ddabd3efb5
Branches Tags
xdr-terraform-l...
/
prod
/
aws-us-gov
/
mdr-prod-malware
Fred Damstra [afs macbook] 2036be1230 Updates Account Standards to Latest Tag for NodeJS Version Bump il y a 3 ans
..
005-iam 5cea7b75ca Updates tag for IAM tfsec Ignore Comments and legacy URL for IP list il y a 3 ans
006-account-standards 2036be1230 Updates Account Standards to Latest Tag for NodeJS Version Bump il y a 3 ans
006-account-standards-regional 1519a2cd30 Migrated most variables out of xdr-terraform-live and into xdr-terraform-modules il y a 3 ans
007-backups 1519a2cd30 Migrated most variables out of xdr-terraform-live and into xdr-terraform-modules il y a 3 ans
010-vpc-vmray f13bb5c77c Updates modules for VPN update and employee_ips fixes il y a 3 ans
023-dns-resolver-instance 277c88dca3 Updates tfsec & checkov ignores + syntax updates il y a 3 ans
044-VMRay-Instances 7a4b5e6e65 Updates tfsec/chekov ignores | S3 Enable Logging/Versioning il y a 3 ans
072-salt-master-inventory-role 4524a12bc6 Updates tags for tfsec/checkov Ignore comments il y a 3 ans
README.md f6509ccb11 Adds a resolver instance to the VMRay VPC il y a 3 ans
account.hcl 5cea7b75ca Updates tag for IAM tfsec Ignore Comments and legacy URL for IP list il y a 3 ans

README.md

mdr-prod-malware

Account for hosting vmray and/or other malware detonation.

NOTE ON DNS

DNS resolvers exist in this account, in the vpc 010... However, the vpc relies on having dns resolvers to set the DHCP options.

So chicken/egg.

Here's how to do it.

1) Create the vpc with the default var.dns_servers. 2) Create the resolver 3) Update the VPC, overriding var.dns_servers with the IP from #2