xdr-terraform-modules/variables/accounts.tf

locals {
  # If you need the raw list of all accounts, see `account_list` below
  account_map = {
    aws = {
      "prod" = [
        "477548533976", # Legacy MDR Prod
        "045312110490", # mdr-prod-c2
        "425831147305", # mdr-prod-modelclient
        "369723129071", # mdr-prod-malware
        # These two apparently don't have the account-standards / skeleton
        # set up for them (yet?)  For now I'm leaving them commented out
        #      "821415252513", # mdr-prod-nihors
        #      "153282776295", # mdr-prod-bas
        "815967312032", # mdr-prod-doed
        "752106061897", # mdr-prod-frtib
        "054411035179", # mdr-prod-ca-c19
      ],
      "test" = [
        "527700175026", # Legacy MDR Test
        "816914342178", # mdr-test-c2
        "449047653882", # mdr-test-modelclient
        "404265901253", # mdr-test-malware
      ],
      "common" = [
        "471284459109", # mdr-common-services
        "350838957895", # MDR Service Root
        #      "035764279020", # MDR Playground / "Duane Test"
        "228011623757", # mdr-dev-ai
        "952430311316", # mdr-cyber-range
      ],
    },
    aws-us-gov = {
      "prod" = [
        "299932671007", # mdr-prod-afs
        "081915784976", # mdr-prod-bas
        "721817724804", # mdr-prod-c2
        "300401536936", # mdr-prod-ca-c19
        "520742937262", # mdr-prod-dc-c19
        "137793331041", # mdr-prod-doed
        "237704155425", # mdr-prod-frtib
        "520722177857", # mdr-prod-la-c19
        "738736370544", # mdr-prod-modelclient
        "876865127438", # mdr-prod-malware
        "417441737377", # mdr-prod-nga
        "455637268483", # mdr-prof-root-ca
        "417443073855", # mdr-prod-tiaas
        "455571784901", # mdr-prod-dgi
      ],
      "test" = [
        "738800754746", # mdr-test-c2
        "876942499057", # mdr-test-malware
        "701341250728", # mdr-test-modelclient
      ],
      "common" = [
        "701290387780", # mdr-common-services
      ],
    }
  }[var.aws_partition]

  # flatten the map into a single list
  account_list = flatten([
    for env, accounts in local.account_map : accounts
  ])

  # This is similar to the account_map, but used for "what accounts am I responsible for"?
  responsible_accounts = {
    aws = {
      "prod"   = concat(local.account_map["prod"], local.account_map["common"]),
      "test"   = local.account_map["test"],
      "common" = concat(local.account_map["prod"], local.account_map["common"], local.account_map["test"]),
    },
    aws-us-gov = {
      "prod"   = concat(local.account_map["prod"], local.account_map["common"]),
      "test"   = local.account_map["test"],
      "common" = concat(local.account_map["prod"], local.account_map["common"], local.account_map["test"]),
    }
  }[var.aws_partition]
}