This terraform module is an audit module to apply into root account (master)
In this module you have the option to :
- Enable or not cloudtrail
- Enable or not Guardduty
- Create a S3 bucket for cloudtrail logs
- Create IAM Roles and Policies for the Cloudtrail
- Create AWS SSM parameter with the ID of Guardduty
| Name | Version |
|---|---|
| terraform | >= 0.12.0 |
| Name | Version |
|---|---|
| aws | n/a |
| aws.audit | n/a |
| Name | Description | Type | Default | Required |
|---|---|---|---|---|
| account_ids | AWS Account IDs under Auditing for the organization | list |
[] |
no |
| cloudtrail | Enable/Disables cloudtrail | bool |
true |
no |
| cloudtrail_log_group_retention_in_days | Days for log group retention | number |
365 |
no |
| enable_log_file_validation | Enable log file validation for CloudConformity | bool |
false |
no |
| master_account_id | Master account ID | any |
n/a | yes |
| org_name | Name for this organization (not actually used in API call) | any |
n/a | yes |
| organization_id | Organization ID for CloudTrail access | any |
n/a | yes |
| s3_days_until_glacier | How many days before transitioning files to Glacier | number |
90 |
no |
No output.
Module managed by DNX Solutions.
Apache 2 Licensed. See LICENSE for full details.