matanolabs / matano

Open source security data lake for threat hunting, detection & response, and cybersecurity analytics at petabyte scale on AWS
https://matano.dev
Apache License 2.0
1.46k stars 99 forks source link

How to just deploy matano in environments where cloud provisioning is guardrail-ed and controlled #172

Open RVaidhy opened 1 year ago

RVaidhy commented 1 year ago

Hi Matano Team,

We are trying to install Matano in our environment. Ours is a highly restricted environment so when we do matano init or deploy we are getting one or another permission issue. So is there a way we can create the required resources on our own and map it in any configuration file and make the init / deploy on our own ? Is it possible ? If so please let me know where can I find the configuration file details for the same. If not deploy matano in environments where cloud provisioning is guardrail-ed and controlled.

Thanks in advance. Anticipating your reply team.

Samrose-Ahmed commented 1 year ago

Hi, Matano Open Source has a packaged self contained release. You can also build Matano from source. The deployment is done via the Matano CLI commands. This may or may not fit your environment's requirements, happy to accept a PR if you see a fix.

Our Matano Enterprise product has support for deployment using self managed Terraform.

jiatann commented 1 year ago

+1. Not having the ability to output terraform or CloudFormation resources that we can deploy ourselves is a major deal breaker for adopting or even trying out the open source version.

fliphess commented 1 year ago

I agree with @jiatann: A deployment method should not be reserved to enterprise: Please provide terraform deployment functionality for the OSS version too: I prefer to test Matano OSS before considering using an enterprise solution and in the current setup that is not possible.

As this is a security product, please consider support for environments that are actually using AWS security best-practises by not giving admin permissions to individual developers and users and restricts full admin access.