Skip to content

Commit e2343e1

Browse files
matteopasamatteopasa
authored
fix(event-bridge): Add state in AWS::Events::Rule (SSPROD-34618) (#113)
* Add state to event bridge rule * add state also in cspm EB case * add EventBridgeState as parameters
1 parent 3a3d6d2 commit e2343e1

File tree

4 files changed

+98
-8
lines changed

4 files changed

+98
-8
lines changed

‎templates_cspm_eventbridge/FullInstall.yaml‎

Lines changed: 12 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -12,6 +12,7 @@ Metadata:
1212
- TrustedIdentity
1313
- EventBusARN
1414
- EventBridgeRoleName
15+
- EventBridgeState
1516

1617
ParameterLabels:
1718
RoleName:
@@ -24,6 +25,8 @@ Metadata:
2425
default: "Target Event Bus (Sysdig use only)"
2526
EventBridgeRoleName:
2627
default: "Integration Name (Sysdig use only)"
28+
EventBridgeState:
29+
default: "State of the EventBridge Rule (Sysdig use only)"
2730

2831

2932
Parameters:
@@ -42,6 +45,14 @@ Parameters:
4245
EventBusARN:
4346
Type: String
4447
Description: The destination in Sysdig's AWS account where your events are sent
48+
EventBridgeState:
49+
Type: String
50+
Description: The state of the EventBridge Rule
51+
Default: ENABLED_WITH_ALL_CLOUDTRAIL_MANAGEMENT_EVENTS
52+
AllowedValues:
53+
- ENABLED_WITH_ALL_CLOUDTRAIL_MANAGEMENT_EVENTS
54+
- ENABLED
55+
- DISABLED
4556

4657
Resources:
4758
CloudAgentlessRole:
@@ -96,6 +107,7 @@ Resources:
96107
- 'AWS API Call via CloudTrail'
97108
- 'AWS Console Sign In via CloudTrail'
98109
- 'AWS Service Event via CloudTrail'
110+
State: !Ref EventBridgeState
99111
Targets:
100112
- Id: !Ref EventBridgeRoleName
101113
Arn: !Ref EventBusARN

‎templates_cspm_eventbridge/OrgFullInstall.yaml‎

Lines changed: 37 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -13,6 +13,7 @@ Metadata:
1313
- EventBusARN
1414
- Regions
1515
- OrganizationUnitIDs
16+
- EventBridgeState
1617
ParameterLabels:
1718
CSPMRoleName:
1819
default: "CSPM Role Name (Sysdig use only)"
@@ -27,7 +28,9 @@ Metadata:
2728
Regions:
2829
default: "EventBridge Regions (Sysdig use only)"
2930
OrganizationUnitIDs:
30-
default: "Organization Unit IDs (Sysdig use only)"
31+
default: "Organization Unit IDs (Sysdig use only)"
32+
EventBridgeState:
33+
default: "State of the EventBridge Rule (Sysdig use only)"
3134
Parameters:
3235
CSPMRoleName:
3336
Type: String
@@ -50,6 +53,14 @@ Parameters:
5053
OrganizationUnitIDs:
5154
Type: String
5255
Description: Organization Unit IDs to deploy
56+
EventBridgeState:
57+
Type: String
58+
Description: The state of the EventBridge Rule
59+
Default: ENABLED_WITH_ALL_CLOUDTRAIL_MANAGEMENT_EVENTS
60+
AllowedValues:
61+
- ENABLED_WITH_ALL_CLOUDTRAIL_MANAGEMENT_EVENTS
62+
- ENABLED
63+
- DISABLED
5364

5465
Resources:
5566
AdministrationRole:
@@ -176,7 +187,7 @@ Resources:
176187
Description: A unique identifier used to create an IAM Role and EventBridge Rule
177188
EventBusARN:
178189
Type: String
179-
Description: The destination in Sysdig's AWS account where your events are sent
190+
Description: The destination in Sysdig's AWS account where your events are sent
180191
Resources:
181192
CloudAgentlessRole:
182193
Type: "AWS::IAM::Role"
@@ -237,6 +248,8 @@ Resources:
237248
ParameterValue: !Ref EventBridgeRoleName
238249
- ParameterKey: EventBusARN
239250
ParameterValue: !Ref EventBusARN
251+
- ParameterKey: EventBridgeState
252+
ParameterValue: !Ref EventBridgeState
240253
StackInstancesGroup:
241254
- DeploymentTargets:
242255
OrganizationalUnitIds: !Split [ ",", !Ref OrganizationUnitIDs]
@@ -250,7 +263,15 @@ Resources:
250263
Description: A unique identifier used to create an IAM Role and EventBridge Rule
251264
EventBusARN:
252265
Type: String
253-
Description: The destination in Sysdig's AWS account where your events are sent
266+
Description: The destination in Sysdig's AWS account where your events are sent
267+
EventBridgeState:
268+
Type: String
269+
Description: The state of the EventBridge Rule
270+
Default: ENABLED_WITH_ALL_CLOUDTRAIL_MANAGEMENT_EVENTS
271+
AllowedValues:
272+
- ENABLED_WITH_ALL_CLOUDTRAIL_MANAGEMENT_EVENTS
273+
- ENABLED
274+
- DISABLED
254275
Resources:
255276
EventBridgeRule:
256277
Type: "AWS::Events::Rule"
@@ -262,6 +283,7 @@ Resources:
262283
- 'AWS API Call via CloudTrail'
263284
- 'AWS Console Sign In via CloudTrail'
264285
- 'AWS Service Event via CloudTrail'
286+
State: !Sub ${EventBridgeState}
265287
Targets:
266288
- Id: !Sub ${EventBridgeRoleName}
267289
Arn: !Sub ${EventBusARN}
@@ -290,6 +312,8 @@ Resources:
290312
ParameterValue: !Ref EventBridgeRoleName
291313
- ParameterKey: EventBusARN
292314
ParameterValue: !Ref EventBusARN
315+
- ParameterKey: EventBridgeState
316+
ParameterValue: !Ref EventBridgeState
293317
StackInstancesGroup:
294318
- DeploymentTargets:
295319
Accounts:
@@ -304,7 +328,15 @@ Resources:
304328
Description: A unique identifier used to create an IAM Role and EventBridge Rule
305329
EventBusARN:
306330
Type: String
307-
Description: The destination in Sysdig's AWS account where your events are sent
331+
Description: The destination in Sysdig's AWS account where your events are sent
332+
EventBridgeState:
333+
Type: String
334+
Description: The state of the EventBridge Rule
335+
Default: ENABLED_WITH_ALL_CLOUDTRAIL_MANAGEMENT_EVENTS
336+
AllowedValues:
337+
- ENABLED_WITH_ALL_CLOUDTRAIL_MANAGEMENT_EVENTS
338+
- ENABLED
339+
- DISABLED
308340
Resources:
309341
EventBridgeRule:
310342
Type: "AWS::Events::Rule"
@@ -316,6 +348,7 @@ Resources:
316348
- 'AWS API Call via CloudTrail'
317349
- 'AWS Console Sign In via CloudTrail'
318350
- 'AWS Service Event via CloudTrail'
351+
State: !Sub ${EventBridgeState}
319352
Targets:
320353
- Id: !Sub ${EventBridgeRoleName}
321354
Arn: !Sub ${EventBusARN}

‎templates_eventbridge/EventBridge.yaml‎

Lines changed: 11 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -21,6 +21,8 @@ Metadata:
2121
default: "Target Event Bus (Sysdig use only)"
2222
EventBridgeRoleName:
2323
default: "Integration Name (Sysdig use only)"
24+
EventBridgeState:
25+
default: "State of the EventBridge Rule (Sysdig use only)"
2426

2527
Parameters:
2628
EventBridgeRoleName:
@@ -35,6 +37,14 @@ Parameters:
3537
EventBusARN:
3638
Type: String
3739
Description: The destination in Sysdig's AWS account where your events are sent
40+
EventBridgeState:
41+
Type: String
42+
Description: The state of the EventBridge Rule
43+
Default: ENABLED_WITH_ALL_CLOUDTRAIL_MANAGEMENT_EVENTS
44+
AllowedValues:
45+
- ENABLED_WITH_ALL_CLOUDTRAIL_MANAGEMENT_EVENTS
46+
- ENABLED
47+
- DISABLED
3848

3949
Resources:
4050
EventBridgeRole:
@@ -72,6 +82,7 @@ Resources:
7282
- 'AWS API Call via CloudTrail'
7383
- 'AWS Console Sign In via CloudTrail'
7484
- 'AWS Service Event via CloudTrail'
85+
State: !Ref EventBridgeState
7586
Targets:
7687
- Id: !Ref EventBridgeRoleName
7788
Arn: !Ref EventBusARN

‎templates_eventbridge/OrgEventBridge.yaml‎

Lines changed: 38 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -13,6 +13,7 @@ Metadata:
1313
- EventBusARN
1414
- Regions
1515
- OrganizationUnitIDs
16+
- EventBridgeState
1617
ParameterLabels:
1718
CSPMRoleName:
1819
default: "CSPM Role Name (Sysdig use only)"
@@ -28,6 +29,8 @@ Metadata:
2829
default: "EventBridge Regions (Sysdig use only)"
2930
OrganizationUnitIDs:
3031
default: "Organization Unit IDs (Sysdig use only)"
32+
EventBridgeState:
33+
default: "State of the EventBridge Rule (Sysdig use only)"
3134
Parameters:
3235
CSPMRoleName:
3336
Type: String
@@ -50,6 +53,15 @@ Parameters:
5053
OrganizationUnitIDs:
5154
Type: String
5255
Description: Comma separated list of Organization Unit IDs to deploy
56+
EventBridgeState:
57+
Type: String
58+
Description: The state of the EventBridge Rule
59+
Default: ENABLED_WITH_ALL_CLOUDTRAIL_MANAGEMENT_EVENTS
60+
AllowedValues:
61+
- ENABLED_WITH_ALL_CLOUDTRAIL_MANAGEMENT_EVENTS
62+
- ENABLED
63+
- DISABLED
64+
5365
Resources:
5466
AdministrationRole:
5567
Type: AWS::IAM::Role
@@ -153,7 +165,9 @@ Resources:
153165
- ParameterKey: EventBridgeRoleName
154166
ParameterValue: !Ref EventBridgeRoleName
155167
- ParameterKey: EventBusARN
156-
ParameterValue: !Ref EventBusARN
168+
ParameterValue: !Ref EventBusARN
169+
- ParameterKey: EventBridgeState
170+
ParameterValue: !Ref EventBridgeState
157171
StackInstancesGroup:
158172
- DeploymentTargets:
159173
Accounts:
@@ -168,7 +182,15 @@ Resources:
168182
Description: A unique identifier used to create an IAM Role and EventBridge Rule
169183
EventBusARN:
170184
Type: String
171-
Description: The destination in Sysdig's AWS account where your events are sent
185+
Description: The destination in Sysdig's AWS account where your events are sent
186+
EventBridgeState:
187+
Type: String
188+
Description: The state of the EventBridge Rule
189+
Default: ENABLED_WITH_ALL_CLOUDTRAIL_MANAGEMENT_EVENTS
190+
AllowedValues:
191+
- ENABLED_WITH_ALL_CLOUDTRAIL_MANAGEMENT_EVENTS
192+
- ENABLED
193+
- DISABLED
172194
Resources:
173195
EventBridgeRule:
174196
Type: "AWS::Events::Rule"
@@ -180,6 +202,7 @@ Resources:
180202
- 'AWS API Call via CloudTrail'
181203
- 'AWS Console Sign In via CloudTrail'
182204
- 'AWS Service Event via CloudTrail'
205+
State: !Sub ${EventBridgeState}
183206
Targets:
184207
- Id: !Sub ${EventBridgeRoleName}
185208
Arn: !Sub ${EventBusARN}
@@ -268,7 +291,9 @@ Resources:
268291
- ParameterKey: EventBridgeRoleName
269292
ParameterValue: !Ref EventBridgeRoleName
270293
- ParameterKey: EventBusARN
271-
ParameterValue: !Ref EventBusARN
294+
ParameterValue: !Ref EventBusARN
295+
- ParameterKey: EventBridgeState
296+
ParameterValue: !Ref EventBridgeState
272297
StackInstancesGroup:
273298
- DeploymentTargets:
274299
OrganizationalUnitIds: !Split [ ",", !Ref OrganizationUnitIDs]
@@ -282,7 +307,15 @@ Resources:
282307
Description: A unique identifier used to create an IAM Role and EventBridge Rule
283308
EventBusARN:
284309
Type: String
285-
Description: The destination in Sysdig's AWS account where your events are sent
310+
Description: The destination in Sysdig's AWS account where your events are sent
311+
EventBridgeState:
312+
Type: String
313+
Description: The state of the EventBridge Rule
314+
Default: ENABLED_WITH_ALL_CLOUDTRAIL_MANAGEMENT_EVENTS
315+
AllowedValues:
316+
- ENABLED_WITH_ALL_CLOUDTRAIL_MANAGEMENT_EVENTS
317+
- ENABLED
318+
- DISABLED
286319
Resources:
287320
EventBridgeRule:
288321
Type: "AWS::Events::Rule"
@@ -294,6 +327,7 @@ Resources:
294327
- 'AWS API Call via CloudTrail'
295328
- 'AWS Console Sign In via CloudTrail'
296329
- 'AWS Service Event via CloudTrail'
330+
State: !Sub ${EventBridgeState}
297331
Targets:
298332
- Id: !Sub ${EventBridgeRoleName}
299333
Arn: !Sub ${EventBusARN}

0 commit comments

Comments
 (0)