aws-security-reference-architecture-examples
aws-security-reference-architecture-examples copied to clipboard
Example solutions demonstrating how to implement patterns within the AWS Security Reference Architecture guide using CloudFormation (including Customizations for AWS Control Tower) and Terraform.
### Describe the bug During deployment of the SRA, the sra-quick-setup-ssm Stack fails to create the 2 parameters - pBucketNamePrefix - pMacieOrgDeliveryKeyAlias I used default parameters and they looked match...
### Describe the bug During deployment of the SRA, the sra-common-cfct-setup-main-rCFCTStack fails to create the CustomControlTowerS3AccessLogsBucket S3 bucket with the following status reason Bucket cannot have ACLs set with ObjectOwnership's...
**Community Note** - Please vote on this issue by adding a 👍 [reaction](https://blog.github.com/2016-03-10-add-reactions-to-pull-requests-issues-and-comments/) to the original issue to help the community and maintainers prioritize this request - Please do not...
**Community Note** - Please vote on this issue by adding a 👍 [reaction](https://blog.github.com/2016-03-10-add-reactions-to-pull-requests-issues-and-comments/) to the original issue to help the community and maintainers prioritize this request - Please do not...
### Describe the bug GuardDuty service is still running in the accounts even after deleting all the stacks for the GuardDuty solution. The delegated admin is cleaned up, but the...
**Community Note** - Please vote on this issue by adding a 👍 [reaction](https://blog.github.com/2016-03-10-add-reactions-to-pull-requests-issues-and-comments/) to the original issue to help the community and maintainers prioritize this request - Please do not...
### Describe the bug Terraform_stack.py fails setting up workspace on suspended AWS accounts ### To Reproduce Steps to reproduce the behavior: 1. Go to: /aws-security-reference-architecture-examples/aws_sra_examples/terraform/solutions 2. Run: python3python3 terraform_stack.py plan...
**Community Note** - Please vote on this issue by adding a 👍 [reaction](https://blog.github.com/2016-03-10-add-reactions-to-pull-requests-issues-and-comments/) to the original issue to help the community and maintainers prioritize this request - Please do not...
Fixes # --- By submitting this pull request, I confirm that my contribution is made under the terms of the [Apache 2.0 license]. [Apache 2.0 License](https://www.apache.org/licenses/LICENSE-2.0)
### Describe the bug Opt-in regions such as ap-southeast-4 cannot have GuardDuty deployed because they have different S3 and KMS endpoints. Attempting to deploy the SRA GuardDuty solution through the...