Merge pull request #333 from Mobizinc/feature/sentinel

Added sentinel
Azure · Mar 29, 2022 · 25f12db · 25f12db
2 parents 46d44d4 + 5cd019d
commit 25f12db
Show file tree

Hide file tree

Showing 3 changed files with 70 additions and 7 deletions.
diff --git a/caf_solution/local.remote.tf b/caf_solution/local.remote.tf
@@ -184,6 +184,9 @@ locals {
     resource_groups = {
       for key, value in try(var.landingzone.tfstates, {}) : key => merge(try(data.terraform_remote_state.remote[key].outputs.objects[key].resource_groups, {}))
     }
+    sentinel_watchlists = {
+      for key, value in try(var.landingzone.tfstates, {}) : key => merge(try(data.terraform_remote_state.remote[key].outputs.objects[key].sentinel_watchlists, {}))
+    }
     servicebus_namespaces = {
       for key, value in try(var.landingzone.tfstates, {}) : key => merge(try(data.terraform_remote_state.remote[key].outputs.objects[key].servicebus_namespaces, {}))
     }

diff --git a/caf_solution/local.security.tf b/caf_solution/local.security.tf
@@ -2,13 +2,28 @@ locals {
   security = merge(
     var.security,
     {
-      disk_encryption_sets          = var.disk_encryption_sets
-      dynamic_keyvault_secrets      = var.dynamic_keyvault_secrets
-      keyvault_certificate_issuers  = var.keyvault_certificate_issuers
-      keyvault_certificate_requests = var.keyvault_certificate_requests
-      keyvault_certificates         = var.keyvault_certificates
-      keyvault_keys                 = var.keyvault_keys
-      lighthouse_definitions        = var.lighthouse_definitions
+      disk_encryption_sets                = var.disk_encryption_sets
+      dynamic_keyvault_secrets            = var.dynamic_keyvault_secrets
+      keyvault_certificate_issuers        = var.keyvault_certificate_issuers
+      keyvault_certificate_requests       = var.keyvault_certificate_requests
+      keyvault_certificates               = var.keyvault_certificates
+      keyvault_keys                       = var.keyvault_keys
+      lighthouse_definitions              = var.lighthouse_definitions
+      sentinel_automation_rules           = var.sentinel_automation_rules
+      sentinel_watchlists                 = var.sentinel_watchlists
+      sentinel_watchlist_items            = var.sentinel_watchlist_items
+      sentinel_ar_fusions                 = var.sentinel_ar_fusions
+      sentinel_ar_ml_behavior_analytics   = var.sentinel_ar_ml_behavior_analytics
+      sentinel_ar_ms_security_incidents   = var.sentinel_ar_ms_security_incidents
+      sentinel_ar_scheduled               = var.sentinel_ar_scheduled
+      sentinel_dc_aad                     = var.sentinel_dc_aad
+      sentinel_dc_app_security            = var.sentinel_dc_app_security
+      sentinel_dc_aws                     = var.sentinel_dc_aws
+      sentinel_dc_azure_threat_protection = var.sentinel_dc_azure_threat_protection
+      sentinel_dc_ms_threat_protection    = var.sentinel_dc_ms_threat_protection
+      sentinel_dc_office_365              = var.sentinel_dc_office_365
+      sentinel_dc_security_center         = var.sentinel_dc_security_center
+      sentinel_dc_threat_intelligence     = var.sentinel_dc_threat_intelligence
     }
   )
 }
diff --git a/caf_solution/variables.security.tf b/caf_solution/variables.security.tf
@@ -16,6 +16,51 @@ variable "keyvault_keys" {
 variable "lighthouse_definitions" {
   default = {}
 }
+variable "sentinel_automation_rules" {
+  default = {}
+}
+variable "sentinel_watchlists" {
+  default = {}
+}
+variable "sentinel_watchlist_items" {
+  default = {}
+}
+variable "sentinel_ar_fusions" {
+  default = {}
+}
+variable "sentinel_ar_ml_behavior_analytics" {
+  default = {}
+}
+variable "sentinel_ar_ms_security_incidents" {
+  default = {}
+}
+variable "sentinel_ar_scheduled" {
+  default = {}
+}
+variable "sentinel_dc_aad" {
+  default = {}
+}
+variable "sentinel_dc_app_security" {
+  default = {}
+}
+variable "sentinel_dc_aws" {
+  default = {}
+}
+variable "sentinel_dc_azure_threat_protection" {
+  default = {}
+}
+variable "sentinel_dc_ms_threat_protection" {
+  default = {}
+}
+variable "sentinel_dc_office_365" {
+  default = {}
+}
+variable "sentinel_dc_security_center" {
+  default = {}
+}
+variable "sentinel_dc_threat_intelligence" {
+  default = {}
+}
 ## Security variables
 variable "security" {
   default = {}