stratus-red-team
stratus-red-team copied to clipboard
Add support for AWS Gov Partition
Some attack techniques have hardcoded values for the AWS Commercial Partition. Using the datasource for aws_partition would allow you to dynamically get the right value based on where you are running the scenarios.
Example: Cloudtrail has hardcoded policy. https://github.com/DataDog/stratus-red-team/blob/main/v2/internal/attacktechniques/aws/defense-evasion/cloudtrail-delete/main.tf#L54
Ref: https://registry.terraform.io/providers/hashicorp/aws/4.8.0/docs/data-sources/partition
Thanks for the suggestion! Did you run in any other problematic techniques?