Skip to content

Commit 7dfc3f4

Browse files
authored
Merge pull request #2 from SumoLogic/aws
First Check in for AWS CloudTrail Module
2 parents 6ca5967 + 9ab26f2 commit 7dfc3f4

File tree

5 files changed

+437
-0
lines changed

5 files changed

+437
-0
lines changed

aws/cloudtrail/README.md

Lines changed: 53 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,53 @@
1+
# AWS CloudTrail
2+
3+
## Purpose
4+
5+
This module installs [Sumo Logic CloudTrail applications](https://help.sumologic.com/07Sumo-Logic-Apps/01Amazon_and_AWS/AWS_CloudTrail) in Sumo Logic.
6+
7+
Apps installed are:
8+
- AWS CloudTrail
9+
- PCI Compliance for AWS CloudTrail
10+
- CIS AWS Foundations Benchmark
11+
12+
## Requirements
13+
14+
* [Terraform](https://www.terraform.io/downloads.html) >= 0.13.0
15+
* Null >= 2.1
16+
* SumoLogic >= 2.1.0
17+
18+
## Module Declaration
19+
20+
This module requires Sumo Logic External Id and Folder id as explained [here](https://github.com/SumoLogic/terraform-sumologic-integrations#prerequisites-for-using-modules).
21+
22+
```shell
23+
module "sumologic-cloudtrail-apps" {
24+
source = "SumoLogic/integrations/sumologic//aws/cloudtrail"
25+
sumo_access_id = "<SUMO_ACCESS_ID>"
26+
sumo_access_key = "<SUMO_ACCESS_KEY>"
27+
sumo_external_id = "<SUMO_EXTERNAL_ID>"
28+
aws_resource_name = "sumo-logic-terraform-cloudtrail"
29+
sumo_api_endpoint = "https://api.sumologic.com/api/v1/"
30+
sumo_collector_name = "sumo-logic-terraform-cloudtrail"
31+
sumo_source_name = "sumo-logic-terraform-cloudtrail"
32+
sumo_source_category = "AWS/CloudTrail"
33+
sumo_aws_account_id = "926226587429"
34+
folder_id = sumologic_folder.folder.id
35+
app_version = "1.0"
36+
}
37+
```
38+
39+
## Inputs
40+
41+
| Name | Description | Type | Default | Required |
42+
|------|-------------|------|---------|:-----:|
43+
|sumo_access_id|[Sumo Logic Access ID](https://help.sumologic.com/Manage/Security/Access-Keys)|string||yes
44+
|sumo_access_key|[Sumo Logic Access Key](https://help.sumologic.com/Manage/Security/Access-Keys)|string||yes
45+
|sumo_external_id|[Sumo Logic External ID](https://help.sumologic.com/03Send-Data/Sources/02Sources-for-Hosted-Collectors/Amazon-Web-Services/Grant-Access-to-an-AWS-Product#iam-role)|string||yes
46+
|aws_resource_name|AWS S3 Bucket, AWS SNS Topic, AWS CloudTrail, AWS IAM Role and IAM Policy will be created with the provided name|string|sumo-logic-terraform-cloudtrail|no
47+
|sumo_api_endpoint|[Sumo Logic API Endpoint](https://help.sumologic.com/APIs/General-API-Information/Sumo-Logic-Endpoints-and-Firewall-Security)|string|https://api.sumologic.com/api/v1/|yes
48+
|folder_id|Sumo Logic Folder ID|string||yes
49+
|sumo_collector_name|Provide a Collector Name|string|sumo-logic-terraform-cloudtrail|no
50+
|sumo_source_name|Provide a CloudTrail Source Name|string|sumo-logic-terraform-cloudtrail|no
51+
|sumo_source_category|Provide a CloudTrail Source Category|string|AWS/CloudTrail|no
52+
|sumo_aws_account_id|Provide the Sumo Logic AWS Account ID. Get the Account ID - [Visit](https://help.sumologic.com/03Send-Data/Sources/02Sources-for-Hosted-Collectors/Amazon-Web-Services/Grant-Access-to-an-AWS-Product#iam-role)|string|926226587429|no
53+
|app_version|The app_version input parameter can be used to install a new copy of the app. When the app_version field is changed, it will force Terraform to install a new app folder with the current timestamp.|String|1.0|no

aws/cloudtrail/inputs.tf

Lines changed: 52 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,52 @@
1+
# AWS CloudTrail Sumo Logic
2+
variable "sumo_access_id" {
3+
type = string
4+
description = "Sumo Logic Access ID"
5+
}
6+
variable "sumo_access_key" {
7+
type = string
8+
description = "Sumo Logic Access Key"
9+
}
10+
variable "sumo_external_id" {
11+
type = string
12+
description = "Provide the Sumo Logic external ID - https://help.sumologic.com/03Send-Data/Sources/02Sources-for-Hosted-Collectors/Amazon-Web-Services/Grant-Access-to-an-AWS-Product#iam-role"
13+
}
14+
variable "folder_id" {
15+
type = string
16+
description = "Sumo Logic Content Folder ID"
17+
}
18+
variable "aws_resource_name" {
19+
type = string
20+
description = "AWS S3 Bucket, AWS SNS Topic, AWS CloudTrail, AWS IAM Role and IAM Policy will be created with the provided name."
21+
default = "sumo-logic-terraform-cloudtrail"
22+
}
23+
variable "sumo_api_endpoint" {
24+
type = string
25+
description = "Sumo Logic Endpoint"
26+
default = "https://api.sumologic.com/api/v1/"
27+
}
28+
variable "sumo_collector_name" {
29+
type = string
30+
description = "Provide a Collector Name."
31+
default = "sumo-logic-terraform-cloudtrail"
32+
}
33+
variable "sumo_source_name" {
34+
type = string
35+
description = "Provide a CloudTrail Source Name."
36+
default = "sumo-logic-terraform-cloudtrail"
37+
}
38+
variable "sumo_source_category" {
39+
type = string
40+
description = "Provide a CloudTrail Source Category."
41+
default = "AWS/CloudTrail"
42+
}
43+
variable "sumo_aws_account_id" {
44+
type = number
45+
description = "Provide the Sumo Logic AWS Account ID. Get the Account ID - https://help.sumologic.com/03Send-Data/Sources/02Sources-for-Hosted-Collectors/Amazon-Web-Services/Grant-Access-to-an-AWS-Product#iam-role"
46+
default = 926226587429
47+
}
48+
variable "app_version" {
49+
type = string
50+
description = "App Version"
51+
default = "1.0"
52+
}

0 commit comments

Comments
 (0)