databricks / terraform-databricks-sra

The Security Reference Architecture (SRA) implements typical security features as Terraform Templates that are deployed by most high-security organizations, and enforces controls for the largest risks that customers ask about most often.
Other
57 stars 27 forks source link

[AWS] remove X-Frame-Options, X-Content-Type-Options, X-XSS-Protection in workspace conf #61

Closed JDBraun closed 1 month ago

JDBraun commented 2 months ago

https://github.com/databricks/terraform-databricks-sra/blob/6523d99b0eb10e091509745bc34aa8d34e5976f9/aws/tf/modules/sra/databricks_workspace/workspace_security_modules/admin_configuration/admin_configuration.tf#L8C1-L10C65

these are now enabled by default and should be removed from the workspace conf

jdbraun-db commented 1 month ago

Closed with: https://github.com/databricks/terraform-databricks-sra/pull/66