xpk/terraform.aws-baseline-infra
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

DOC: updated readme

Browse Source
This commit is contained in:
xpk 2022-09-05 11:31:08 +08:00
parent 4ab769f1fd
commit 007bfc1a95
Signed by: xpk
GPG Key ID: CD4FF6793F09AB86
1 changed files with 4 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
modules/security_identity_compliance/aws_config/README.md
View File

@ -2,7 +2,7 @@
This module performs the following tasks: This module performs the following tasks:
- Enable AWS config in all regions - Enable AWS config in all regions
- Deploy CIS1.4 level 1 conformance pack - Deploy [CIS1.4 level 1 conformance pack](https://docs.aws.amazon.com/config/latest/developerguide/operational-best-practices-for-cis_aws_benchmark_level_1.html)
- Set Config retention period - Set Config retention period
- Setup Config aggregator, aggregate Config in all regions into primary region - Setup Config aggregator, aggregate Config in all regions into primary region
- Create s3 bucket for config use - Create s3 bucket for config use
@ -18,4 +18,6 @@ This module performs the following tasks:
| aws-region-short | short name of aws region (e.g. apne1) | string | none | yes | | aws-region-short | short name of aws region (e.g. apne1) | string | none | yes |
# Notes # Notes
It takes a while for AWS to process Config changes. - It takes a while for AWS to process Config changes.
- [AWS managed config rules](https://docs.aws.amazon.com/config/latest/developerguide/managed-rules-by-aws-config.html) are automatically applied. Those rule may duplicate with Cis1.4.