search

aws-ia / terraform-aws-control_tower_account_factory

AWS Control Tower Account Factory
Apache License 2.0
604 stars 386 forks source link

Add option to set AWS_USE_FIPS_ENDPOINT=true for AFT resources #468

Open jgearheart opened 2 weeks ago

jgearheart commented 2 weeks ago

Terraform Version & Prov: all AFT Version: all

Terraform Version & Provider Versions all

Bug Description To ensure compliance with FedRAMP requirements when utilizing AFT in FedRAMP environments, it is essential to incorporate an option that mandates the use of FIPS endpoints for any resources created and managed by AFT, including Lambda functions and CodePipeline, etc. For Lambda functions and any components leveraging the AWS SDK, this can be achieved by adding an option to set the environment variable AWS_USE_FIPS_ENDPOINT=true

Expected behavior AWS FIPS endpoints used when resources within the AFT pipeline make API calls to any AWS service where FIPS endpoints are available.

snebhu3 commented 1 week ago

@jgearheart thank you for reaching out. Have you explored leveraging the Pre-API helper to set AWS_USE_FIPS_ENDPOINT=true?