-
Notifications
You must be signed in to change notification settings - Fork 5
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
feat: add basic AWS SSM command to install and configure Lacework agent #3
Conversation
…he Lacework agent This is the naive implementation that assumes many things about targeted hosts. Multiple TODOs were added to guide future improvements. Signed-off-by: Jean-Philippe Lachance <jplachance@coveo.com>
Demonstrate how to use the AWS SSM Command in our default example. Signed-off-by: Jean-Philippe Lachance <jplachance@coveo.com>
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
target_type = "/AWS::EC2::Instance" | ||
|
||
content = jsonencode({ | ||
schemaVersion = "2.2" |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I love this! I was worried about updates after the document has been created. Nicely done!
@@ -0,0 +1,54 @@ | |||
resource "aws_ssm_document" "setup_lacework_agent" { | |||
name = "${var.aws_resources_prefix}setup-lacework-agent" |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
does SSM document names have a limit? 🤔
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I've no idea!
fix(command): Fix tags in the config.json file setup refactor(command): Always override the config.json file Signed-off-by: Jean-Philippe Lachance <jplachance@coveo.com>
refactor(command): Always override the config.json file Signed-of-by: Jean-Philippe Lachance <jplachance@coveo.com>
Signed-off-by: Jean-Philippe Lachance <jplachance@coveo.com>
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
This is the naive implementation that assumes many things about targeted hosts. Multiple TODOs were added to guide future improvements.
Signed-off-by: Jean-Philippe Lachance jplachance@coveo.com