kylegoch / saas-terraform-connection

Terraform modules for CloudSploit Scanner

CloudSploit Terraform Modules

This Terraform module is responsible for provisioning CloudSploit IAM resources(IAM trust/roles).

This module is considered a Global module and only needs to be provisioned 1 time per AWS Account.

Incorporating this Module

• Add this code to your provider file
• The account_id must be set & passed from the root module.
• The cloudsploit_external_id must be obtained from CloudSploit and different AWS accounts have different external IDs.
• The use_aws_gov can be set to a boolean value, it defaults to false

module "cloudsploit" {
  source                  = "[email protected]:cloudsploit/cloudsploit-terraform-scans.git"
  account_id              = "${var.account_id}"
  cloudsploit_external_id = "${var.cloudsploit_external_id}"
}

Outputs

• cloudsploit_cross_account_role_arn - Cloudsploit cross account trust role. This is only output if use_aws_gov is set to false.
• cloudsploit_cross_account_role_arn-gov - Cloudsploit cross account trust role for AWS gov. This is only output if use_aws_gov is set to true.