search

zoph-io / aws-security-survival-kit

Bare minimum AWS Security Alerting and Configuration
https://bio.link/zoph
GNU General Public License v3.0
449 stars 38 forks source link

Multi-Account Support #3

Open gvwalker opened 1 year ago

gvwalker commented 1 year ago

Create a version which supports multi-account setups (AWS Organizations).

It should:

  1. Support sending all alerts to a centralized SNS topic (maybe in a Security Account). This can be managed separate from this stack.
  2. Ensure that documentation is clear on how to use CF StackSets to deploy not only across multiple accounts in the ORG, but also which stacks should be deployed across all regions that are in use, and which should be deployed to just US-EAST-1.

Rationale:

gvwalker commented 1 year ago

Since this is a use case in my own organisation I'd be happy to take a look at this. Just thought I should suggest it first

z0ph commented 1 year ago

That sounds like a good idea, as it is a bare minimal survival kit. It should be used by default for a single AWS account (students, personal AWS accounts, etc..) and with a particular parameter in the Makefile to allow the users to deploy AWS Org-wide for enterprise admins.