diff --git a/examples/custom-vpc-network/README.md b/examples/custom-vpc-network/README.md index 7f8dada..b8a36a4 100644 --- a/examples/custom-vpc-network/README.md +++ b/examples/custom-vpc-network/README.md @@ -11,18 +11,48 @@ In this example we add Terraform modules to two Google Cloud regions. - Cloud Scheduler Job ## Sample Code +Define your `versions.tf` as follows: +```hcl +terraform { + required_version = ">= 1.5" + required_providers { + lacework = { + source = "lacework/lacework" + } + } +} +``` + +Define your `main.tf` as follows: ```hcl -provider "lacework" {} +# Set your Lacework profile here. With the Lacework CLI, use +# `lacework configure list` to get a list of available profiles. +provider "lacework" { + profile = "lw_agentless" +} +/* +This provider will be used to deploy AWLS's global scanning resources. As such, it must be assigned as +the provider in the per-region AWLS module block where `global == true`. +For reference, see module "lacework_gcp_agentless_scanning_project_multi_region_", which +has `global = true` and therefore is where we set this provider as the google provider. +*/ provider "google" { - alias = "use1" - region = "us-east1" + alias = + region = + # Set the project in which the scanning resources will be hosted. + project = } provider "google" { - alias = "usc1" - region = "us-central1" + alias = + region = + + # Set your default project ID for this region. This isn't required for + # the Agentless integration, but is required by the Google Provider. + # https://registry.terraform.io/providers/hashicorp/google/latest/docs/guides/getting_started#configuring-the-provider + project = "default-project-id" } locals { @@ -75,32 +105,34 @@ resource "google_compute_firewall" "rules" { } } -module "lacework_gcp_agentless_scanning_project_multi_region_use1" { +module "lacework_gcp_agentless_scanning_project_multi_region_" { source = "lacework/agentless-scanning/gcp" - version = "~> 0.1" + version = "~> 2.0" providers = { - google = google.use1 + google = google. } project_filter_list = local.project_filter_list + organization_id = global = true regional = true custom_vpc_subnet = google_compute_subnetwork.awls_subnet_1.id } -module "lacework_gcp_agentless_scanning_project_multi_region_usc1" { +module "lacework_gcp_agentless_scanning_project_multi_region_" { source = "lacework/agentless-scanning/gcp" - version = "~> 0.1" + version = "~> 2.0" providers = { - google = google.usc1 + google = google. } project_filter_list = local.project_filter_list + organization_id = regional = true global_module_reference = module.lacework_gcp_agentless_scanning_project_multi_region_use1 diff --git a/examples/org-level-multi-region/README.md b/examples/org-level-multi-region/README.md index e9841c9..4630457 100644 --- a/examples/org-level-multi-region/README.md +++ b/examples/org-level-multi-region/README.md @@ -12,41 +12,82 @@ In this example we add Terraform modules to two Google Cloud regions. ## Sample Code +Define your `versions.tf` as follows: ```hcl -provider "lacework" {} +terraform { + required_version = ">= 1.5" + required_providers { + lacework = { + source = "lacework/lacework" + } + } +} +``` + +Define your `main.tf` as follows: +```hcl +# Set your Lacework profile here. With the Lacework CLI, use +# `lacework configure list` to get a list of available profiles. +provider "lacework" { + profile = "lw_agentless" +} + +/* +This provider will be used to deploy AWLS's global scanning resources. As such, it must be assigned as +the provider in the per-region AWLS module block where `global == true`. +For reference, see module "lacework_gcp_agentless_scanning_org_multi_region", which +has `global = true` and therefore is where we set this provider as the google provider. +*/ provider "google" { - alias = "use1" - region = "us-east1" + alias = + region = + # Set the project in which the scanning resources will be hosted. + project = } provider "google" { - alias = "usc1" - region = "us-central1" + alias = + region = + + # Set your default project ID for this region. This isn't required for + # the Agentless integration, but is required by the Google Provider. + # https://registry.terraform.io/providers/hashicorp/google/latest/docs/guides/getting_started#configuring-the-provider + project = "default-project-id" } module "lacework_gcp_agentless_scanning_org_multi_region" { source = "lacework/agentless-scanning/gcp" - version = "~> 0.1" + version = "~> 2.0" providers = { - google = google.use1 + google = google. } + # Provide a list of Google Cloud projects and/or folders that you want to monitor here. + # For projects, enter the project ID. + # If the project_filter_list is omitted, all projects and folders in the organization are scanned. + #project_filter_list = [ + # "monitored-project-1", + # "monitored-project-2", + # "folder/monitored-folder-1", + # "folder/monitored-folder-2 + #] + integration_type = "ORGANIZATION" - organization_id = "123456789012" + organization_id = global = true regional = true lacework_integration_name = "agentless_from_terraform" } -module "lacework_gcp_agentless_scanning_org_multi_region_usc1" { +module "lacework_gcp_agentless_scanning_org_multi_region_" { source = "lacework/agentless-scanning/gcp" - version = "~> 0.1" + version = "~> 2.0" providers = { - google = google.usc1 + google = google. } regional = true diff --git a/examples/org-level-single-region/README.md b/examples/org-level-single-region/README.md index 092075d..28b369c 100644 --- a/examples/org-level-single-region/README.md +++ b/examples/org-level-single-region/README.md @@ -12,17 +12,51 @@ In this example we add Terraform modules to one Google Cloud region. ## Sample Code +Define your `versions.tf` as follows: ```hcl -provider "lacework" {} +terraform { + required_version = ">= 1.5" -provider "google" {} + required_providers { + lacework = { + source = "lacework/lacework" + } + } +} +``` + +Define your `main.tf` as follows: +```hcl +# Set your Lacework profile here. With the Lacework CLI, use +# `lacework configure list` to get a list of available profiles. +provider "lacework" { + profile = "lw_agentless" +} + +provider "google" { + # Set the ID of the project where the scanning resources are hosted. + project = + + # Set the region where the scanning resources are hosted. + region = +} module "lacework_gcp_agentless_scanning_org_single_region" { source = "lacework/agentless-scanning/gcp" - version = "~> 0.1" + version = "~> 2.0" + + # Provide a list of Google Cloud projects and/or folders that you want to monitor here. + # For projects, enter the project ID. + # If the project_filter_list is omitted, all projects and folders in the organization are scanned. + #project_filter_list = [ + # "monitored-project-1", + # "monitored-project-2", + # "folder/monitored-folder-1", + # "folder/monitored-folder-2 + #] integration_type = "ORGANIZATION" - organization_id = "123456789012" + organization_id = global = true regional = true diff --git a/examples/project-level-multi-region/README.md b/examples/project-level-multi-region/README.md index 112714d..16edc50 100644 --- a/examples/project-level-multi-region/README.md +++ b/examples/project-level-multi-region/README.md @@ -12,27 +12,60 @@ In this example we add Terraform modules to two Google Cloud regions. ## Sample Code +Define your `versions.tf` as follows: ```hcl -provider "lacework" {} +terraform { + required_version = ">= 1.5" + required_providers { + lacework = { + source = "lacework/lacework" + } + } +} +``` + +Define your `main.tf` as follows: +```hcl +# Set your Lacework profile here. With the Lacework CLI, use +# `lacework configure list` to get a list of available profiles. +provider "lacework" { + profile = "lw_agentless" +} + +/* +This provider will be used to deploy AWLS's global scanning resources. As such, it must be assigned as +the provider in the per-region AWLS module block where `global == true`. +For reference, see module "lacework_gcp_agentless_scanning_project_multi_region_", which +has `global = true` and therefore is where we set this provider as the google provider. +*/ provider "google" { - alias = "use1" - region = "us-east1" + alias = + region = + # Set the project in which the scanning resources will be hosted. + project = } provider "google" { - alias = "usc1" - region = "us-central1" + alias = + region = + + # Set your default project ID for this region. This isn't required for + # the Agentless integration, but is required by the Google Provider. + # https://registry.terraform.io/providers/hashicorp/google/latest/docs/guides/getting_started#configuring-the-provider + project = "default-project-id" } -module "lacework_gcp_agentless_scanning_project_multi_region_use1" { +module "lacework_gcp_agentless_scanning_project_multi_region_" { source = "lacework/agentless-scanning/gcp" - version = "~> 0.1" + version = "~> 2.0" providers = { - google = google.use1 + google = google. } + # Provide the list of Google Cloud projects that you want to monitor here. + # Enter the ID of the projects. project_filter_list = [ "monitored-project-1", "monitored-project-2" @@ -40,18 +73,20 @@ module "lacework_gcp_agentless_scanning_project_multi_region_use1" { global = true regional = true + organization_id = lacework_integration_name = "agentless_from_terraform" } -module "lacework_gcp_agentless_scanning_project_multi_region_usc1" { +module "lacework_gcp_agentless_scanning_project_multi_region_" { source = "lacework/agentless-scanning/gcp" - version = "~> 0.1" + version = "~> 2.0" providers = { google = google.usc1 } regional = true - global_module_reference = module.lacework_gcp_agentless_scanning_project_multi_region_use1 + organization_id = + global_module_reference = module.lacework_gcp_agentless_scanning_project_multi_region_ } ``` diff --git a/examples/project-level-single-region/README.md b/examples/project-level-single-region/README.md index d78213c..dc583ea 100644 --- a/examples/project-level-single-region/README.md +++ b/examples/project-level-single-region/README.md @@ -12,15 +12,41 @@ In this example we add Terraform modules to one Google Cloud region. ## Sample Code +Define your `versions.tf` as follows: ```hcl -provider "lacework" {} +terraform { + required_version = ">= 1.5" + + required_providers { + lacework = { + source = "lacework/lacework" + } + } +} +``` -provider "google" {} +Define your `main.tf` as follows: +```hcl +# Set your Lacework profile here. With the Lacework CLI, use +# `lacework configure list` to get a list of available profiles. +provider "lacework" { + profile = "lw_agentless" +} + +provider "google" { + # Set the ID of the project where the scanning resources are hosted. + project = + + # Set the region where the scanning resources are hosted. + region = +} module "lacework_gcp_agentless_scanning_project_single_region" { source = "lacework/agentless-scanning/gcp" - version = "~> 0.1" + version = "~> 2.0" + # Provide the list of Google Cloud projects that you want to monitor here. + # Enter the ID of the projects. project_filter_list = [ "monitored-project-1", "monitored-project-2" @@ -28,6 +54,7 @@ module "lacework_gcp_agentless_scanning_project_single_region" { global = true regional = true + organization_id = lacework_integration_name = "agentless_from_terraform" } ```