Skip to content
This repository has been archived by the owner on Sep 4, 2024. It is now read-only.

Latest commit

 

History

History
43 lines (35 loc) · 2.28 KB

README.md

File metadata and controls

43 lines (35 loc) · 2.28 KB

CloudSploit Events via Terraform

This repo is used for configuring the AWS services to support CloudSploit real-time events.

└── tf-cloudsploit-events
    ├── aws-cloudsploit-events
    │   ├── main.tf
    │   ├── outputs.tf
    │   ├── variables.tf

Requirements

  • Terraform
  • AWS account access to create SNS topic, topic policy, topic subscription, and CloudWatch event rules.

Modules

aws-cloudsploit-events

This module creates the necessary AWS resources to forward real-time events to CloudSploit. This module configures the following resources:

  • Creates SNS Topic (cloudsploit-sns-$awsaccountid)
  • Creates SNS Topic Policy
  • Creates SNS Topic Subscription to CloudSploit endpoint (https)
  • Creates CloudWatch event rules

Input Variables

  • SendSignInEvents - Whether console:Signin events should be sent to CloudSploit (default = "true")
  • SendACMEvents - Whether acm:* (AWS Certificate Manager) events should be sent to CloudSploit (default = "true")
  • SendCloudTrailEvents - Whether cloudtrail:* events should be sent to CloudSploit (default = "true")
  • SendConfigEvents - Whether config:* (AWS Config Service) events should be sent to CloudSploit (default = "true")
  • SendEC2Events - Whether ec2:* events should be sent to CloudSploit (default = "true")
  • SendIAMEvents - Whether iam:* (AWS Identity Access Management) events should be sent to CloudSploit (default = "true")
  • SendKMSEvents - Whether kms:* (AWS Key Management Service) events should be sent to CloudSploit (default = "true")
  • SendLogsEvents - Whether logs:* (AWS CloudWatch Logs) events should be sent to CloudSploit (default = "true")
  • SendRDSEvents - Whether rds:* (AWS Relational Database Service) events should be sent to CloudSploit (default = "true")
  • SendRoute53Events - Whether route53:* events should be sent to CloudSploit (default = "true")
  • SendSESEvents - Whether ses:* (AWS Simple Email Serivce) events should be sent to CloudSploit (default = "true")
  • URLBase - The base URL for the CloudSploit Events API. DO NOT change unless asked by CloudSploit support
  • Externalid - The External ID used to initially create the AWS account in CloudSploit