Configurable yum install packages

ordinaryexperts / terraform-aws-hardened-bastion

Terraform module to deploy a security-hardened SSH bastion host in AWS

1 stars 1 forks source link

Open jmcvetta opened 2 years ago

jmcvetta commented 2 years ago

Add a TF variable that configures yum packages to be installed on bastion by Ansible.

Users could shoot themselves in the foot by installing applications that open new attack vectors (e.g. a webserver)
This will increase boot time (Ansible is run from user_data)

jmcvetta commented 2 years ago

@dylanvaughn Do you think this is a good idea? See pro & con above.

dylanvaughn commented 2 years ago

@jmcvetta seems useful to me :+1: