aws-samples / aws-secure-environment-accelerator

The AWS Secure Environment Accelerator is a tool designed to help deploy and operate secure multi-account, multi-region AWS environments on an ongoing basis. The power of the solution is the configuration file which enables the completely automated deployment of customizable architectures within AWS without changing a single line of code.
Apache License 2.0
725 stars 233 forks source link

enables opt-in region for guardduty logging #1222

Closed rjjaegeraws closed 5 months ago

rjjaegeraws commented 6 months ago

By submitting this pull request, I confirm that you can use, modify, copy, and redistribute this contribution, under the terms of your choice.

When configuring ca-west-1 the export configuration fails because service principal does not have permissions to write to the central log archive bucket and KMS Key. This Pull Request adds additional logic to support opt-in region service principals.