-
Notifications
You must be signed in to change notification settings - Fork 0
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
Monitor AMIs, Service Limits, PHD events (#2)
* only alert on backup failures * update to support monitoring for unavailable/deleted amis that might still be in use * monitor for account lifecycle events * switch to trivy and fix checks * refine iam access analyzer support * add service limit checks
- Loading branch information
Showing
32 changed files
with
2,181 additions
and
156 deletions.
There are no files selected for viewing
This file was deleted.
Oops, something went wrong.
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,31 @@ | ||
| --- | ||
| name: trivy | ||
| on: | ||
| push: | ||
| branches: | ||
| - master | ||
|
|
||
| jobs: | ||
| trivy: | ||
| runs-on: ubuntu-latest | ||
| steps: | ||
| - uses: actions/checkout@v2 | ||
| - name: Install prerequisites | ||
| run: ./bin/install-ubuntu.sh | ||
| - name: Terraform init | ||
| run: terraform init --backend=false | ||
| - name: Trivy scan | ||
| uses: aquasecurity/trivy-action@master | ||
| with: | ||
| scan-type: 'config' | ||
| hide-progress: false | ||
| format: 'sarif' | ||
| output: 'trivy-results.sarif' | ||
| exit-code: '1' | ||
| ignore-unfixed: true | ||
| severity: 'CRITICAL,HIGH' | ||
|
|
||
| - name: Upload Trivy scan results to GitHub Security tab | ||
| uses: github/codeql-action/upload-sarif@v2 | ||
| with: | ||
| sarif_file: 'trivy-results.sarif' |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
|
|
@@ -16,3 +16,7 @@ tmp | |
|
|
||
| # modules should not submit lock files | ||
| .terraform.lock.hcl | ||
|
|
||
| lambda/*.zip | ||
|
|
||
| **/__pycache__ | ||
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -1,58 +1,2 @@ | ||
| # basic example | ||
| A basic example for this repository | ||
|
|
||
| ## Code | ||
| Look to [main.tf](./main.tf), or be helpful and copy/paste that code here. | ||
|
|
||
| ## Applying | ||
| ``` | ||
| > terraform apply | ||
| Apply complete! Resources: 0 added, 0 changed, 0 destroyed. | ||
| Outputs: | ||
| example = { | ||
| "tags_module" = { | ||
| "name" = "TEST" | ||
| "name32" = "TEST" | ||
| "name6" = "TEST" | ||
| "namenosymbols" = "TEST" | ||
| "tags" = { | ||
| "Name" = "TEST" | ||
| "terraform_managed" = true | ||
| "terraform_module" = "terraform-terraform-tags-1.0.0" | ||
| "terraform_root_module" = "." | ||
| "terraform_workspace" = "default" | ||
| } | ||
| "tags_as_list_of_maps" = [ | ||
| { | ||
| "key" = "Name" | ||
| "value" = "TEST" | ||
| }, | ||
| { | ||
| "key" = "terraform_managed" | ||
| "value" = true | ||
| }, | ||
| { | ||
| "key" = "terraform_module" | ||
| "value" = "terraform-terraform-tags-1.0.0" | ||
| }, | ||
| { | ||
| "key" = "terraform_root_module" | ||
| "value" = "." | ||
| }, | ||
| { | ||
| "key" = "terraform_workspace" | ||
| "value" = "default" | ||
| }, | ||
| ] | ||
| "tags_no_name" = { | ||
| "terraform_managed" = true | ||
| "terraform_module" = "terraform-terraform-tags-1.0.0" | ||
| "terraform_root_module" = "." | ||
| "terraform_workspace" = "default" | ||
| } | ||
| } | ||
| } | ||
| ``` |
Oops, something went wrong.