grendel-consulting / cloud-factory-baseline

Global customisations used in the Account Factory for Terraform

Cloud Factory (Global) Baseline

Definitions for use with the Account Factory for Terraform (AFT) framework. Global Customizations are used to customize all provisioned accounts with customer defined resources. The resources can be created through Terraform or through Python, leveraging the API helpers. The customization run is parameterized at runtime.

Usage

Terraform

You can see AFT-provided Jinja templates for the Terraform backend and providers. These are rendered at the time the Terraform is applied. Further providers can be defined by creating a providers.tf file, as needed.

Define your own Terraform resources, placing .tf files in the 'terraform' directory or as submodules to it.

API Helpers

Define any scripts that need to run before/after Terraform using the bash entry points. You can extend these to run Python scripts or to perform other actions, such as leveraging the AWS CLI.

Within the api_helpers/python folder is a requirements.txt, where you can specify packages to be installed via PIP.

Deployment

Deployment must presently be triggered manually - and should be across the whole AWS Organization - through re-invoking an AWS Step Function in the factory management OU.

Further Reading

See: AFT Global Customizations

cloud-factory-baseline's Issues

Dependency Dashboard

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.

Awaiting Schedule

These updates are awaiting their schedule. Click on a checkbox to get an update now.

• chore(deps): update github/codeql-action action to v3.26.8

Detected dependencies

github-actions

.github/workflows/dependency-review.yml

• step-security/harden-runner v2.10.1@91182cccc01eb5e619899d80e4e971d6181294a7
• actions/checkout v4.1.7@692973e3d937129bcbf40652eb9f2f61becf3332
• actions/dependency-review-action v4.3.4@5a2ce3f5b92ee19cbb1541a4984c76d921601d7c

.github/workflows/pr-review.yaml

• step-security/harden-runner v2.10.1@91182cccc01eb5e619899d80e4e971d6181294a7
• actions/checkout v4.1.7@692973e3d937129bcbf40652eb9f2f61becf3332
• hashicorp/setup-terraform v3.1.2@b9cd54a3c349d3f38e8881555d616ced269862dd
• step-security/harden-runner v2.10.1@91182cccc01eb5e619899d80e4e971d6181294a7
• actions/checkout v4.1.7@692973e3d937129bcbf40652eb9f2f61becf3332
• actions/cache v4.0.2@0c45773b623bea8c8e75f6c82b208c3cf94ea4f9
• terraform-linters/setup-tflint v4.0.0@19a52fbac37dacb22a09518e4ef6ee234f2d4987
• step-security/harden-runner v2.10.1@91182cccc01eb5e619899d80e4e971d6181294a7
• actions/checkout v4.1.7@692973e3d937129bcbf40652eb9f2f61becf3332
• aquasecurity/trivy-action 0.24.0@6e7b7d1fd3e4fef0c5fa8cce1229c54b2c9bd0d8
• github/codeql-action v3.26.7@8214744c546c1e5c8f03dde8fab3a7353211988d

.github/workflows/scorecard.yml

• step-security/harden-runner v2.10.1@91182cccc01eb5e619899d80e4e971d6181294a7
• actions/checkout v4.1.7@692973e3d937129bcbf40652eb9f2f61becf3332
• ossf/scorecard-action v2.4.0@62b2cac7ed8198b15735ed49ab1e5cf35480ba46
• actions/upload-artifact v4.4.0@50769540e7f4bd5e21e526ee35c689e35e0d6874
• github/codeql-action v3.26.7@8214744c546c1e5c8f03dde8fab3a7353211988d

pre-commit

.pre-commit-config.yaml

• antonbabenko/pre-commit-terraform v1.96.1
• koalaman/shellcheck-precommit v0.10.0
• Yelp/detect-secrets v1.5.0
• gitleaks/gitleaks v8.19.2
• pre-commit/pre-commit-hooks v4.6.0

tflint-plugin

terraform/.tflint.hcl

• terraform-linters/tflint-ruleset-aws 0.33.0

---

• Check this box to trigger a request for Renovate to run again on this repository

Action Required: Fix Renovate Configuration

There is an error with this repository's Renovate configuration that needs to be fixed. As a precaution, Renovate will stop PRs until it is resolved.

Error type: Cannot find preset's package (config:best-practises)