-
Notifications
You must be signed in to change notification settings - Fork 19
Commit
- Loading branch information
There are no files selected for viewing
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -1,19 +1,17 @@ | ||
##----------------------------------------------------------------------------- | ||
## Provider block added, Use the Amazon Web Services (AWS) provider to interact with the many resources supported by AWS. | ||
##----------------------------------------------------------------------------- | ||
provider "aws" { | ||
region = "us-west-1" | ||
} | ||
##----------------------------------------------------------------------------- | ||
## A VPC is a virtual network that closely resembles a traditional network that you'd operate in your own data center. | ||
## VPC Module Call. | ||
##----------------------------------------------------------------------------- | ||
module "vpc" { | ||
source = "../.." | ||
name = "vpc" | ||
environment = "example" | ||
label_order = ["name", "environment"] | ||
cidr_block = "10.0.0.0/16" | ||
additional_cidr_block = ["172.3.0.0/16", "172.2.0.0/16"] | ||
dhcp_options_domain_name = "service.consul" | ||
dhcp_options_domain_name_servers = ["127.0.0.1", "10.10.0.2"] | ||
source = "../.." | ||
name = "vpc" | ||
environment = "example" | ||
cidr_block = "10.0.0.0/16" | ||
enable_flow_log = true # Flow logs will be stored in cloudwatch log group. Variables passed in default. | ||
create_flow_log_cloudwatch_iam_role = true | ||
additional_cidr_block = ["172.3.0.0/16", "172.2.0.0/16"] | ||
dhcp_options_domain_name = "service.consul" | ||
dhcp_options_domain_name_servers = ["127.0.0.1", "10.10.0.2"] | ||
} | ||
Check warning Code scanning / defsec VPC Flow Logs is a feature that enables you to capture information about the IP traffic going to and from network interfaces in your VPC. After you've created a flow log, you can view and retrieve its data in Amazon CloudWatch Logs. It is recommended that VPC Flow Logs be enabled for packet "Rejects" for VPCs. Warning
VPC Flow Logs is not enabled for VPC
|
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,19 @@ | ||
provider "aws" { | ||
region = "us-west-1" | ||
} | ||
##----------------------------------------------------------------------------- | ||
## VPC Module Call. | ||
##----------------------------------------------------------------------------- | ||
module "vpc" { | ||
source = "../.." | ||
name = "vpc" | ||
environment = "example" | ||
cidr_block = "10.0.0.0/16" | ||
enable_flow_log = true | ||
flow_log_destination_type = "s3" # Comment or remove when flow log destination is set "cloud-watch-logs" | ||
flow_logs_bucket_name = "gc-vpc-flow-logs-bucket" # Comment or remove when flow log destination is set "cloud-watch-logs" | ||
# create_flow_log_cloudwatch_iam_role = true # To be uncomment when flow log destination is set "cloud-watch-logs" | ||
additional_cidr_block = ["172.3.0.0/16", "172.2.0.0/16"] | ||
dhcp_options_domain_name = "service.consul" | ||
dhcp_options_domain_name_servers = ["127.0.0.1", "10.10.0.2"] | ||
} | ||
Check warning Code scanning / defsec VPC Flow Logs is a feature that enables you to capture information about the IP traffic going to and from network interfaces in your VPC. After you've created a flow log, you can view and retrieve its data in Amazon CloudWatch Logs. It is recommended that VPC Flow Logs be enabled for packet "Rejects" for VPCs. Warning
VPC Flow Logs is not enabled for VPC
Check warning Code scanning / defsec S3 Bucket does not have logging enabled. Warning
Bucket does not have logging enabled
Check warning Code scanning / defsec S3 Data should be versioned Warning
Bucket does not have versioning enabled
|
This file was deleted.
This file was deleted.
This file was deleted.