Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

add module to enable bringing your own bucket file carving destination #15206

Merged
merged 2 commits into from
Nov 20, 2023

Conversation

edwardsb
Copy link
Contributor

This PR adds support for a new terraform module that will make it easy to configure Fleet instances for S3 backend for file carving results. Its intended to be applied in two phases.

  1. apply target-account which will provision the s3 bucket, IAM role and policy permissions
  2. apply carve on the fleet instance, bootstrapping environment variables for Fleet server & attaching the IAM policy.

Checklist for submitter

  • Manual QA for all new/changed functionality

@edwardsb edwardsb requested a review from a team as a code owner November 20, 2023 16:10
}

# Create an S3 bucket with server-side encryption using the customer-managed key
resource "aws_s3_bucket" "carve_results_bucket" {
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

should we have a aws_s3_bucket_public_access_block for this bucket just to cover these are set explicitly rather than implicitly?

Copy link
Contributor

@rfairburn rfairburn left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Everything else looks good as far as I can see.

@edwardsb edwardsb merged commit 29de567 into main Nov 20, 2023
6 checks passed
@edwardsb edwardsb deleted the edwardsb-file-carving-module branch November 20, 2023 16:26
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Development

Successfully merging this pull request may close these issues.

2 participants