mozilla / security

Repository for various tools around security
Mozilla Public License 2.0
42 stars 24 forks source link

Add region constraints and change SNS topic ARN relative to local region #18

Closed gene1wood closed 5 years ago

gene1wood commented 5 years ago

This changes the SNS topic ARN that the resulting IAM Role ARN is emitted to from a fixed ARN to a relative ARN, relative to the region that the GuardDuty member role is being deployed in.

Move parameters into mappings as we don't want users to be able to change these values.

Remove GuardDutyMemberAccountId emitted attribute as this is already present in the record in DynamoDB Add region constraints and change SNS topic ARN relative to local region

This changes the SNS topic ARN that the resulting IAM Role ARN is emitted to from a fixed ARN to a relative ARN, relative to the region that the GuardDuty member role is being deployed in.

Move parameters into mappings as we don't want users to be able to change these values.

Remove GuardDutyMemberAccountId emitted attribute as this is already present in the record in DynamoDB