search

splunk / splunk-aws-project-trumpet

MIT License
95 stars 31 forks source link

GovCloud support? #10

Open blakegreendev opened 4 years ago

blakegreendev commented 4 years ago

Currently, deploying the CloudFormation template in the GovCloud region fails because the bucket mappings do not include us-gov-west-1.

blakegreendev commented 4 years ago

Additionally, when adding bucket mapping manually, template will not deploy because it requires the aws-us-gov endpoint.

Error message: Partition "aws" is not valid for resource "arn:aws:firehose:::*". (Service: AmazonIdentityManagement; Status Code: 400; Error Code: MalformedPolicyDocument; Request ID: 4aa7f965-0eb4-4f24-9550-444578044f5e)

ylukin commented 4 years ago

GovCloud partition ARN format is different: arn:aws-us-gov Likewise for China regions: arn:aws-cn

This is documented here: https://docs.aws.amazon.com/general/latest/gr/aws-arns-and-namespaces.html