Soenke Ruempler

refactor(living-documentation): Move to CDK to prepare for further dev

1

Depends on #280 ## Definition of done (v0.0.2) - [x] Automated integration test

## Definition of done (v0.0.1) - [ ] Automated integration test

fix(living-documentation): don't spam CloudTrail and CWL with Lambda invocations

2

by reintroducing event triggers, and this time also an initial CW dashboard generator function to avoid the dashboard being generated too late. depends on #281 ## Definition of done (v0.0.2)...

feat: switch back to official awsapilib release

3

now that 3.0.0 has been released ## Definition of done (v0.0.2) - [x] Automated integration test

- [x] Automated execution (possibly with waitcondition) - [x] Correct branch / version discovery - [x] Version discovery for Quick Start (set special github repo and version) - [x] remove...

By retrying stack update once after failed stack creation. ## Definition of done (v0.0.2) - [x] Automated integration test

TODO: - [ ] Upgrade from existing installation - [ ] Feature Stack Deletion - [ ] Feature Stack Updates ## Definition of done (v0.0.2) - [x] Automated integration test

OpsCenter: How to handle CT SNS Subscriptions

1

CT creates SNS subscriptions to the AUDIT account email for each region by default. We need to decide how to handle them, e.g. whether they should be forwarded to the...

Currently, superwerker users are not notified of findings from GuardDuty and Security Hub. This can be overcome by enabling the [Security Hub → OpsCenter integration](https://docs.aws.amazon.com/systems-manager/latest/userguide/opscenter-securityhub-integration.html). Thus, the email receiving superwerker...

Cover all resources in AWS Backup

3

Currently, only EBS, RDS Instances, and DynamoDB resources are backed up by the superwerker backup feature. Since [this release](https://aws.amazon.com/about-aws/whats-new/2021/11/aws-backup-new-resource-assignment-rules-data-protection-policies/) it's easier to cover ALL resources in AWS Backup, since resource...