aws-security-reference-architecture-examples
aws-security-reference-architecture-examples copied to clipboard
Example solutions demonstrating how to implement patterns within the AWS Security Reference Architecture guide using CloudFormation (including Customizations for AWS Control Tower) and Terraform.
Solution: Config Organization solution for Terraform --- By submitting this pull request, I confirm that my contribution is made under the terms of the [Apache 2.0 license]. [Apache 2.0 License](https://www.apache.org/licenses/LICENSE-2.0)
Fixes #246 #223 Adding Macie classification job to include new buckets into Macie scans. Credit goes to: Ievgeniia --- By submitting this pull request, I confirm that my contribution is...
### Describe the bug We have an existing SRA solution deployed into a Control Tower environment using the CfCT. This was using pre v3 (#205) release code. To make use...
### Describe the bug These ARNs should be in SSM Param Store not Secrets Manager. If it's in Secrets Manager it triggers this AWS config security control "SecretsManager.4 Secrets Manager...
This updates the code so that it allows setting the ECR image pull and push settings separately. Additionally, it updates the code to allow setting the scan settings to the...
### Describe the bug The SRA Common Solution is not correctly detecting my Control Tower home region. My Control Tower home region is eu-west-2, but the solution incorrectly defaults to...
### Is your feature request related to a problem? Please describe We have an AWS Organization running a set of serverless workloads. Workloads use APIGateways which are fronted by CloudFront....
### Is your feature request related to a problem? Please describe Currently only able to set the re-scan duration for inspector to LIFETIME|DAYS_30|DAYS_180 ``` params.update(parameter_pattern_validator("ECR_SCAN_DURATION", os.environ.get("ECR_SCAN_DURATION"), pattern=r"^(LIFETIME|DAYS_30|DAYS_180){1}$")) ``` ### Describe...
Describe the bug The sra_linux_maintenance maintenance window is failing after initial success. This appears to be due to a documented hash mismatch issue where the document hash is stored at...
Hi, I saw in your backlog that you will work on an update procedure of SRA. I wrote a blogpost which steps worked for us, maybe this helps you for...