James-stackset-autodeploy (#124)

* enabled stackset autodeployment

* added managed execution and autodeploy required option to retain accounts on deletion

Author: jameslarrea

templates_cspm/OrgCloudAgentlessRole.yaml

@@ -84,7 +84,10 @@ Resources:
       Capabilities:
         - "CAPABILITY_NAMED_IAM"
       AutoDeployment:
-        Enabled: false
+        Enabled: true
+        RetainStacksOnAccountRemoval: false         
+      ManagedExecution:
+        Active: true
       Parameters:
         - ParameterKey: RoleName
           ParameterValue: !Ref RoleName

templates_cspm_cloudlogs/OrgFullInstall.yaml

@@ -138,7 +138,10 @@ Resources:
       Capabilities:
         - "CAPABILITY_NAMED_IAM"
       AutoDeployment:
-        Enabled: false
+        Enabled: true
+        RetainStacksOnAccountRemoval: false        
+      ManagedExecution:
+        Active: true
       OperationPreferences:
         MaxConcurrentCount: 5
       Parameters:

templates_cspm_eventbridge/OrgFullInstall.yaml

@@ -210,7 +210,10 @@ Resources:
       Capabilities:
         - "CAPABILITY_NAMED_IAM"
       AutoDeployment:
-        Enabled: false
+        Enabled: true
+        RetainStacksOnAccountRemoval: false         
+      ManagedExecution:
+        Active: true
       OperationPreferences:
         MaxConcurrentCount: 5
       Parameters:
@@ -331,7 +334,10 @@ Resources:
       Capabilities:
         - "CAPABILITY_NAMED_IAM"
       AutoDeployment:
-        Enabled: false
+        Enabled: true
+        RetainStacksOnAccountRemoval: false         
+      ManagedExecution:
+        Active: true
       OperationPreferences:
         MaxConcurrentCount: 5
       Parameters:
@@ -405,6 +411,8 @@ Resources:
       AdministrationRoleARN: !GetAtt AdministrationRole.Arn
       Description: EventBridge Resources that forward CloudTrail logs to Sysdig Secure
       PermissionModel: SELF_MANAGED
+      ManagedExecution:
+        Active: true      
       Capabilities:
         - CAPABILITY_NAMED_IAM
       OperationPreferences:

templates_eventbridge/OrgEventBridge.yaml

@@ -188,6 +188,8 @@ Resources:
       AdministrationRoleARN: !GetAtt AdministrationRole.Arn
       Description: EventBridge Resources that forward CloudTrail logs to Sysdig Secure
       PermissionModel: SELF_MANAGED
+      ManagedExecution:
+        Active: true      
       Capabilities:
         - CAPABILITY_NAMED_IAM              
       OperationPreferences:
@@ -267,7 +269,10 @@ Resources:
       Capabilities:
         - "CAPABILITY_NAMED_IAM"
       AutoDeployment:
-        Enabled: false
+        Enabled: true
+        RetainStacksOnAccountRemoval: false         
+      ManagedExecution:
+        Active: true        
       OperationPreferences:
         MaxConcurrentCount: 5
       Parameters:
@@ -341,7 +346,10 @@ Resources:
       Capabilities:
         - "CAPABILITY_NAMED_IAM"
       AutoDeployment:
-        Enabled: false
+        Enabled: true
+        RetainStacksOnAccountRemoval: false         
+      ManagedExecution:
+        Active: true        
       OperationPreferences:
         MaxConcurrentCount: 5
       Parameters: