Code

Cloud watch bucket policy#2266

Code

Merged

Matthew-Grayson merged 15 commits intomastercisagov/crossfeed:masterfrom CloudWatch-Bucket-Policycisagov/crossfeed:CloudWatch-Bucket-PolicyCopy head branch name to clipboardSep 29, 2023

+32

Commits

Commits on Sep 26, 2023

• Add CloudTrail kms policy; rename CloudTrail s3 policy.

  Matthew-Grayson

  committed
  d4cd27c

• Refactor assume_role_policy to use jsonencode() for code readablitiy and error checking.

  Matthew-Grayson

  committed
  da5be16

• Add kms_key_id to CloudTrail resource to enable encryption.

  Matthew-Grayson

  committed
  9e91b05

Commits on Sep 28, 2023

• Merge branch 'master' of github.com:cisagov/crossfeed into 2256-encrypt-cloudtrail-logs

  Matthew-Grayson

  committed
  99c0203

• Add conditions to kms policy.

  Matthew-Grayson

  committed
  8a5d815

• Fix linting.

  Matthew-Grayson

  committed
  a998a3c

• Add encryption context for cloudtrail; add tags and alias to KMS keys; refactor policy to use jsonencode.

  Matthew-Grayson

  committed
  aca4bd9

• Separate cloudtrail by stage; add cloudtrail name var; fix cycle error.

  Matthew-Grayson

  committed
  cfa6ecc

• Add separate kms alias resource.

  Matthew-Grayson

  committed
  f29741d

• Fix KMS key may not refer to itself error.

  Matthew-Grayson

  committed
  31e1bbc

• Fix alias name.

  Matthew-Grayson

  committed
  5c45ed1

Commits on Sep 29, 2023

• Add encrypt and decrypt permissions to KMS policy.

  Matthew-Grayson

  committed
  061d82e

• Merge branch 'master' into 2256-encrypt-cloudtrail-logs

  Matthew-Grayson

  authored
  02c953f

• Merge branch 'master' of github.com:cisagov/crossfeed into CloudWatch-Bucket-Policy

  Matthew-Grayson

  committed
  f2836df

• Add policy to cloudwatch bucket.

  Matthew-Grayson

  committed
  2887ce6