guardduty
dod-iac/guardduty/aws
Creates an AWS GuardDuty Detector
Usage Creates an AWS GuardDuty Detector, KMS Key for encrypting exports to S3, and CloudWatch rule to watch for findings. ``hcl module "guardduty" { source = "dod-iac/guardduty/aws" tags = { Application = var.application Environment = var.environment Automation = "Terraform" } } ` You can customize the finding publishing frequency. `hcl module "guardduty" { source = "dod-iac/guardduty/aws" enable = true finding_publishing_frequency = "SIX_HOURS" tags = { Application = var.application Environment = var.environment Automation = "Terraform" } } ` You can exports GuardDuty findings to a S3 bucket using the s3\_bucket\_name variable. `hcl module "guardduty" { source = "dod-iac/guardduty/aws" enable = true s3_bucket_name = module.logs.aws_logs_bucket tags = { Application = var.application Enviro
| Name | Type | Description | Default |
|---|---|---|---|
| kms_alias_name | string | The display name of the alias of the KMS key used to encrypt exports to S3. The | "alias/guardduty" |
| kms_key_tags | map(string) | Tags to apply to the AWS KMS Key used to encrypt exports to S3. | {} |
| s3_bucket_name | string | The name of the S3 bucket that receives findings from GuardDuty. If blank, then | "" |
| s3_bucket_prefix | string | The prefix for where findings from GuardDuty are stored in the S3 bucket. Shoul | "/guardduty" |
| enable | bool | Enable monitoring and feedback reporting. Setting to false is equivalent to "su | true |
| finding_publishing_frequency | string | Specifies the frequency of notifications sent for subsequent finding occurrences | "FIFTEEN_MINUTES" |
aws_cloudwatch_event_rule_name — Name of the CloudWatch rule that watches for AWS GuardDuty findings.aws_guardduty_detector_id — The ID of the GuardDuty detector.Azure landing zones Terraform module
Terraform supermodule for the Terraform platform engineering for Azure
Terraform module to deploy landing zone subscriptions (and much more) in Azure
Terraform Module to define a consistent naming convention by (namespace, stage,