-
Hello,
I used the HashiCorp tutorial: https://learn.hashicorp.com/tutorials/terraform/aws-control-tower-aft
Successfully passed the following actions:
Configure the landing zone,
Deploy AFT modu…
-
**Describe the outcome you'd like**
We'd like to change the audit and log-archive account ids set here, but are unsure of the consequences:
```
module "aft" {
source = "github.com/aws-ia/ter…
-
For the proactive control, CT.CLOUDFORMATION.PR.1 is the prerequisite.
But when I config tfvars like the below:
```
{
control_names = [
"AWS-GR_SUBNET_AUTO_ASSIGN_PUBLIC_IP_DISABLED…
-
**Terraform Version & Prov:** unknown
**AFT Version:** 1.7.0
(Can be found in the AFT Management Account in the SSM Parameter `/aft/config/aft/version`)
**Bug Description**
A third party creat…
-
**Is your feature request related to a problem? Please describe.**
Normal behavior for a uni-directional identity replication is that the downstream IdP, will contain only the user/groups (or a sub-s…
-
### What
The living doc is the main place for the end-user for information on what to do after the superwerker installation. We want to make it easier to understand the individual features of super…
-
**Terraform Version & Prov:**
**AFT Version:**
(Can be found in the AFT Management Account in the SSM Parameter `/aft/config/aft/version`)
```
1.12.0
```
**Terraform Version & Provider Versi…
-
**AFT Version:**
1.9.1
**Terraform Version & Provider Versions**
N/A
**Bug Description**
When you try to onboard a shared CT account into AFT it requires you to specify the OU by name, and wi…
-
**Terraform Version & Prov:**
**AFT Version:** 1.7.0
**Terraform Version & Provider Versions**
`terraform version`: v1.3.6
Click to expand for full version details
```
Terraform v1.3…
-
**Describe the outcome you'd like**
Minimal permissions required for the account provisioning should be in place instead of `*` for `AWSAFTService` and `AWSAFTAdmin` IAM roles.
The customer shou…