wazuh / wazuh-cloudformation

Wazuh - Amazon AWS Cloudformation
https://wazuh.com
40 stars 22 forks source link

Customize feature unattended all-in-one and distributed instalatation #82

Closed sergiogp98 closed 3 years ago

sergiogp98 commented 3 years ago

Related Issue

Derscription

This PR add two installation types, both of them unattended:

All-in-one

Resources:

  1. WazuhAIO: EC2 instance
  2. SecurityGroup: EC2 Security Group. It enables the following ports:

443 ( HTTPS) -> 0.0.0.0 22 (SSH) -> 0.0.0.0

Distributed

Resources:

  1. WazuhVPC: EC2 VPC
  2. SubnetWazuh: EC2 Subnet over WazuhVPC
  3. SubnetElasticsearch: EC2 Subnet over WazuhVPC
  4. InternetGateway: EC2 InternetGateway between WazuhVPC and public network
  5. GatewayToInternet: EC2 VPCGatewayAttachment attached to WazuhVPC
  6. PublicRouteTable: EC2 RouteTable for WazuhVPC
  7. PublicRoute: EC2 Route of PublicRouteTable with a specific destination CIDR
  8. SubnetWazuhPublicRouteTable: EC2 SubnetRouteTableAssociation attached to SubnetWazuh
  9. SubnetElasticPublicRouteTable: EC2 SubnetRouteTableAssociation attached to SubnetElasticsearch
  10. WazuhSecurityGroup: EC2 SecurityGroup over WazuhVPC. It enables the following ports and protocols:

22 (SSH) -> 0.0.0.0 ICMP -> 0.0.0.0 1514-1516 (Wazuh manager) -> WazuhVPC 55000 (Wazuh API) -> WazuhVPC

  1. ElasticSecurityGroup: EC2 SecurityGroup over WazuhVPC. It enables the following ports and protocols:

22 (SSH) -> 0.0.0.0 ICMP -> 0.0.0.0 443 (HTTPS) -> 0.0.0.0 9200-9400 (Wazuh manager) -> WazuhVPC 5000 (wazuh manager) -> WazuhVPC

  1. Elastic1: EC2 Instance Elasticsearch initial node (with Kibana)
  2. Elastic2: EC2 Instance Elasticsearch node
  3. Elastic3: EC2 Instance Elasticsearch node
  4. WazuhMaster: EC2 Instance Wazuh master node
  5. WazuhWorker: EC2 Instance Wazuh worker node

Test