xdr-terraform-live/000-skeleton/006-account-standards

Account Standards

Creates elements that are standard in all accounts, such as access keys, kms keys, etc.

NOTE: Possible aws_config_configuration_recorder conflict with camrs

NOTE: For commercial accounts, camrs may have set up AWS config already, though in a configuration where they don't appear to be able to use it. This will conflict with the AWS Config setup present in this module. To fix this, the existing recorder must be imported. In the module directory, run (this will only need to be done once per account):

terragrunt import aws_config_configuration_recorder.awsconfig_recorder default
aws --profile <account-profile> configservice describe-delivery-channels
terragrunt import aws_config_delivery_channel.awsconfig_delivery_channel camrs-rt-aws-mdr-14019-tstsc-config-rDeliveryChannel-3JUH8QIHEQE6

NOTE: Eventual consistency error with service-linked-role

NOTE: This module creates a service-linked role for AWSAutoScaling. This role may not propagate before terraform tries to create policies that reference it as a principal, resulting in teh error:

Error: MalformedPolicyDocumentException: Policy contains a statement with one or more invalid principals.

I have a depends_on clause, but it doesn't resolve the issue.

This issue appears to be the same thing, but it apparently isn't fixed in this use case: https://github.com/hashicorp/terraform-provider-aws/issues/7646