@@ -4,10 +4,10 @@ S3_BUCKET ?= "s4c-cft"
44S3_PREFIX ?= "test"
55S3_REGION ?= eu-west-1
66STACK_NAME = Sysdig-Secure
7- PARAM_NAME_SUFFIX ?= abc1240
7+ PARAM_NAME_SUFFIX ?= test
88PARAM_IS_ORGANIZATIONAL ?= false
99PARAM_EXTERNAL_ID ?= test
10- PARAM_TRUSTED_IDENTITY ?= arn:aws:iam::064689838359 :role/us-east-1-integration01-secure-assume-role
10+ PARAM_TRUSTED_IDENTITY ?= arn:aws:iam:::role/$( PARAM_NAME_SUFFIX )
1111PARAM_TARGET_EVENT_BUS_ARN ?= arn:aws:events:us-east-1::event-bus/default
1212PARAM_BUCKET_ARN ?= arn:aws:s3:::cloudtrail-$(PARAM_NAME_SUFFIX )
1313PARAM_REGIONS ?= us-east-1
@@ -40,7 +40,52 @@ publish:
4040 aws s3 cp vm_workload_scanning.cft.yaml s3://$(S3_BUCKET ) /modules/$(S3_PREFIX ) /vm_workload_scanning.cft.yaml
4141
4242deploy :
43-
43+ aws cloudformation deploy \
44+ --stack-name $(STACK_NAME ) -Foundational-$(PARAM_NAME_SUFFIX ) \
45+ --template-file foundational.cft.yaml \
46+ --capabilities " CAPABILITY_NAMED_IAM" " CAPABILITY_AUTO_EXPAND" \
47+ --parameter-overrides \
48+ " NameSuffix=$( PARAM_NAME_SUFFIX) " \
49+ " ExternalID=$( PARAM_EXTERNAL_ID) " \
50+ " TrustedIdentity=$( PARAM_TRUSTED_IDENTITY) " \
51+ " IsOrganizational=$( PARAM_IS_ORGANIZATIONAL) " \
52+ " OrganizationalUnitIDs=$( PARAM_ORGANIZATIONAL_UNIT_IDS) " \
53+ " Partition=${PARAM_PARTITION} "
54+ aws cloudformation deploy \
55+ --stack-name $(STACK_NAME ) -LogIngestion-EventBridge-$(PARAM_NAME_SUFFIX ) \
56+ --template-file log_ingestion.events.cft.yaml \
57+ --capabilities " CAPABILITY_NAMED_IAM" " CAPABILITY_AUTO_EXPAND" \
58+ --parameter-overrides \
59+ " NameSuffix=$( PARAM_NAME_SUFFIX) " \
60+ " ExternalID=$( PARAM_EXTERNAL_ID) " \
61+ " TrustedIdentity=$( PARAM_TRUSTED_IDENTITY) " \
62+ " Regions=$( PARAM_REGIONS) " \
63+ " TargetEventBusARN=$( PARAM_TARGET_EVENT_BUS_ARN) " \
64+ " IsOrganizational=$( PARAM_IS_ORGANIZATIONAL) " \
65+ " OrganizationalUnitIDs=$( PARAM_ORGANIZATIONAL_UNIT_IDS) " \
66+ " Partition=${PARAM_PARTITION} "
67+ aws cloudformation deploy \
68+ --stack-name $(STACK_NAME ) -LogIngestion-S3-$(PARAM_NAME_SUFFIX ) \
69+ --template-file log_ingestion.s3.cft.yaml \
70+ --capabilities " CAPABILITY_NAMED_IAM" " CAPABILITY_AUTO_EXPAND" \
71+ --parameter-overrides \
72+ " NameSuffix=$( PARAM_NAME_SUFFIX) " \
73+ " ExternalID=$( PARAM_EXTERNAL_ID) " \
74+ " TrustedIdentity=$( PARAM_TRUSTED_IDENTITY) " \
75+ " BucketARN=$( PARAM_BUCKET_ARN) " \
76+ " IsOrganizational=$( PARAM_IS_ORGANIZATIONAL) " \
77+ " OrganizationalUnitIDs=$( PARAM_ORGANIZATIONAL_UNIT_IDS) "
78+ aws cloudformation deploy \
79+ --stack-name $(STACK_NAME ) -VolumeAccess-$(PARAM_NAME_SUFFIX ) \
80+ --template-file volume_access.cft.yaml \
81+ --capabilities " CAPABILITY_NAMED_IAM" " CAPABILITY_AUTO_EXPAND" \
82+ --parameter-overrides \
83+ " NameSuffix=$( PARAM_NAME_SUFFIX) " \
84+ " ExternalID=$( PARAM_EXTERNAL_ID) " \
85+ " TrustedIdentity=$( PARAM_TRUSTED_IDENTITY) " \
86+ " Regions=$( PARAM_REGIONS) " \
87+ " IsOrganizational=$( PARAM_IS_ORGANIZATIONAL) " \
88+ " OrganizationalUnitIDs=$( PARAM_ORGANIZATIONAL_UNIT_IDS) "
4489
4590 aws cloudformation deploy \
4691 --stack-name $(STACK_NAME)-VMWorkloadScanning-$(PARAM_NAME_SUFFIX) \
0 commit comments