Inicio Explorar Axuda
Rexistro Iniciar sesión
AFS
/
xdr-terraform-live
2
0
Fork 0
Ficheiros Incidencias 0 Pull Requests 0 Wiki
Árbore: e0df689fbb
Ramas Etiquetas
xdr-terraform-l...
/
common
/
aws-us-gov
/
afs-mdr-common-services-gov
Duane Waddle e0df689fbb MSOCI-2084 Okta and IAM roles for feedmgmt %!s(int64=3) %!d(string=hai) anos
..
000-mdradmin-bootstrap ac925e94dd Fixes for Updated Terraform %!s(int64=4) %!d(string=hai) anos
001-tfstate ac925e94dd Fixes for Updated Terraform %!s(int64=4) %!d(string=hai) anos
004-iam-okta e0df689fbb MSOCI-2084 Okta and IAM roles for feedmgmt %!s(int64=3) %!d(string=hai) anos
006-account-standards 0cc5c916a0 Updates all 006-account-standards to 4.0.2 %!s(int64=3) %!d(string=hai) anos
006-account-standards-regional 3c3caaf6da Updates Tags and CyberRange TF %!s(int64=3) %!d(string=hai) anos
008-xdr-binaries 3c3caaf6da Updates Tags and CyberRange TF %!s(int64=3) %!d(string=hai) anos
010-shared-ami-key 3c3caaf6da Updates Tags and CyberRange TF %!s(int64=3) %!d(string=hai) anos
015-security-vpc 3c3caaf6da Updates Tags and CyberRange TF %!s(int64=3) %!d(string=hai) anos
019-qualys-service-account 3c3caaf6da Updates Tags and CyberRange TF %!s(int64=3) %!d(string=hai) anos
021-qualys-connector-role 3c3caaf6da Updates Tags and CyberRange TF %!s(int64=3) %!d(string=hai) anos
050-lcp-ami-sharing 3c3caaf6da Updates Tags and CyberRange TF %!s(int64=3) %!d(string=hai) anos
072-salt-master-inventory-role 3c3caaf6da Updates Tags and CyberRange TF %!s(int64=3) %!d(string=hai) anos
075-codebuild-ecr-base c09d01c0d9 Correct Conflict between v4.0.0 tags %!s(int64=3) %!d(string=hai) anos
080-codebuild-ecr-sample 3c3caaf6da Updates Tags and CyberRange TF %!s(int64=3) %!d(string=hai) anos
081-codebuild-rpm-collectd 3c3caaf6da Updates Tags and CyberRange TF %!s(int64=3) %!d(string=hai) anos
085-codebuild-ecr-customer-portal c1cba36659 Upgrades AWS TF Provider to v4 and Tagged %!s(int64=3) %!d(string=hai) anos
090-codebuild-rpm-tmux 3c3caaf6da Updates Tags and CyberRange TF %!s(int64=3) %!d(string=hai) anos
095-codebuild-rpm-aws-efs-utils 3c3caaf6da Updates Tags and CyberRange TF %!s(int64=3) %!d(string=hai) anos
100-codebuild-rpm-syslog-ng 3c3caaf6da Updates Tags and CyberRange TF %!s(int64=3) %!d(string=hai) anos
105-codebuild-ecr-mcas-container c1cba36659 Upgrades AWS TF Provider to v4 and Tagged %!s(int64=3) %!d(string=hai) anos
110-xdr-binaries-write-role 3c3caaf6da Updates Tags and CyberRange TF %!s(int64=3) %!d(string=hai) anos
300-s3-xdr-trumpet 3c3caaf6da Updates Tags and CyberRange TF %!s(int64=3) %!d(string=hai) anos
350-codebuild-ecr-content-generator-build-image c1cba36659 Upgrades AWS TF Provider to v4 and Tagged %!s(int64=3) %!d(string=hai) anos
351-codebuild-splunk-uf-configs 7f1737673f MSOCI-2078 support for splunk-UF configuration RPM builds %!s(int64=3) %!d(string=hai) anos
disabled 3c3caaf6da Updates Tags and CyberRange TF %!s(int64=3) %!d(string=hai) anos
us-gov-west-1 3c3caaf6da Updates Tags and CyberRange TF %!s(int64=3) %!d(string=hai) anos
README.md e9366e6600 Merges mdr-common-services and afs-mdr-common-services-gov directories %!s(int64=5) %!d(string=hai) anos
account.hcl 527b8e468b Revert "Upgrades TF and TG in Common env" %!s(int64=3) %!d(string=hai) anos

README.md

Common Services - GovCloud

I'm not sure if this is a helpful readme or not tbh

Authentication

A handful of these need the static access keys for the MDRAdmin account, mostly because at that point of setting up a new AWS account we don't have the okta integration in place.

Subfolders / subprojects

Subdirectory auth Purpose
000-mdradmin-bootstrap MDRAdmin + aws-mfa Configures MDRAdmin Account to have IAM rights to create terraform state
001-tfstate MDRAdmin + aws-mfa Creates TF state s3 bucket, dynamodb tables
005-iam okta + saml2aws Fundamental IAM setup - does OKTA linkage, sets up user roles and policies