search

tenable / integrations-aws-ct

0 stars 2 forks source link

access denied error #1

Closed pramod2804 closed 1 year ago

pramod2804 commented 2 years ago

Getting access denied for https://tenable-connectors.s3.amazonaws.com/cloud-templates/aws/Tenable-Connector-CloudFormation.json

tenableChris commented 2 years ago

I believe we restored that file about two weeks ago.

Dlozitskiy commented 1 year ago

Is there anyone at Tenable.io who can fix this to reflect what's written in the guide https://d1.awsstatic.com/Marketplace/solutions-center/downloads/Tenable-Nework-Security-AWS-ControlTower-Implementation-guide.pdf?

The template https://github.com/tenable/integrations-aws-ct/blob/master/tenable-control-tower-cfn.yml has a resource for a CFN stack with parameters that don't existing in the template https://tenable-connectors.s3.amazonaws.com/cloud-templates/aws/Tenable-Connector-CloudFormation.json which is causing deployment to fail.

  TenableConnectorRole:
    Type: AWS::CloudFormation::Stack
    Properties:
      Parameters:
        PrincipalAws: arn:aws:iam::012615275169:root <<<<<<<<<<<<< Doesn't exist in the template below
        RoleName: tenableio-connector <<<<<<<<<<<<< Doesn't exist in the template below
        TenableExternalId: !Ref externalId <<<<<<<<<<<<< Doesn't exist in the template below
      TemplateURL: https://tenable-connectors.s3.amazonaws.com/cloud-templates/aws/Tenable-Connector-CloudFormation.json
tenableChris commented 1 year ago

I will look into this tomorrow. Likely the referenced template was updated and now out of sync with this CFT and the documentation.

tenableChris commented 1 year ago

@Dlozitskiy - I have updated Tenable-Connector-CloudFormation.json . Please try again and let me know. Thanks.

I am going to close this issue. If the updated cft is still incorrect please open a new issue.