File tree Expand file tree Collapse file tree 12 files changed +131
-31
lines changed Expand file tree Collapse file tree 12 files changed +131
-31
lines changed Original file line number Diff line number Diff line change @@ -17,10 +17,15 @@ resource "sysdig_secure_cloud_auth_account_feature" "threat_detection" {
1717 depends_on = [module . cloud-logs ]
1818}
1919
20- resource "sysdig_secure_cloud_auth_account_feature" "identity_entitlement " {
20+ resource "sysdig_secure_cloud_auth_account_feature" "identity_entitlement_advanced " {
2121 account_id = module. onboarding . sysdig_secure_account_id
2222 type = " FEATURE_SECURE_IDENTITY_ENTITLEMENT"
2323 enabled = true
24- components = [module . cloud-logs . cloud_logs_component_id ]
25- depends_on = [module . cloud-logs , sysdig_secure_cloud_auth_account_feature . config_posture ]
26- }
24+ components = concat (sysdig_secure_cloud_auth_account_feature. identity_entitlement_basic . components , [module . cloud-logs . cloud_logs_component_id ])
25+ depends_on = [module . cloud-logs , sysdig_secure_cloud_auth_account_feature . identity_entitlement_basic ]
26+ flags = {" CIEM_FEATURE_MODE" : " advanced" }
27+
28+ lifecycle {
29+ ignore_changes = [flags , components ]
30+ }
31+ }
Original file line number Diff line number Diff line change @@ -18,10 +18,15 @@ resource "sysdig_secure_cloud_auth_account_feature" "threat_detection" {
1818 depends_on = [module . cloud-logs ]
1919}
2020
21- resource "sysdig_secure_cloud_auth_account_feature" "identity_entitlement " {
21+ resource "sysdig_secure_cloud_auth_account_feature" "identity_entitlement_advanced " {
2222 account_id = module. onboarding . sysdig_secure_account_id
2323 type = " FEATURE_SECURE_IDENTITY_ENTITLEMENT"
2424 enabled = true
25- components = [module . cloud-logs . cloud_logs_component_id ]
26- depends_on = [module . cloud-logs , sysdig_secure_cloud_auth_account_feature . config_posture ]
27- }
25+ components = concat (sysdig_secure_cloud_auth_account_feature. identity_entitlement_basic . components , [module . cloud-logs . cloud_logs_component_id ])
26+ depends_on = [module . cloud-logs , sysdig_secure_cloud_auth_account_feature . identity_entitlement_basic ]
27+ flags = {" CIEM_FEATURE_MODE" : " advanced" }
28+
29+ lifecycle {
30+ ignore_changes = [flags , components ]
31+ }
32+ }
Original file line number Diff line number Diff line change @@ -26,10 +26,15 @@ resource "sysdig_secure_cloud_auth_account_feature" "threat_detection" {
2626 depends_on = [module . event-bridge ]
2727}
2828
29- resource "sysdig_secure_cloud_auth_account_feature" "identity_entitlement " {
29+ resource "sysdig_secure_cloud_auth_account_feature" "identity_entitlement_advanced " {
3030 account_id = module. onboarding . sysdig_secure_account_id
3131 type = " FEATURE_SECURE_IDENTITY_ENTITLEMENT"
3232 enabled = true
33- components = [module . event-bridge . event_bridge_component_id ]
34- depends_on = [module . event-bridge , sysdig_secure_cloud_auth_account_feature . config_posture ]
35- }
33+ components = concat (sysdig_secure_cloud_auth_account_feature. identity_entitlement_basic . components , [module . event-bridge . event_bridge_component_id ])
34+ depends_on = [module . event-bridge , sysdig_secure_cloud_auth_account_feature . identity_entitlement_basic ]
35+ flags = {" CIEM_FEATURE_MODE" : " advanced" }
36+
37+ lifecycle {
38+ ignore_changes = [flags , components ]
39+ }
40+ }
Original file line number Diff line number Diff line change @@ -20,10 +20,15 @@ resource "sysdig_secure_cloud_auth_account_feature" "threat_detection" {
2020 depends_on = [module . event-bridge ]
2121}
2222
23- resource "sysdig_secure_cloud_auth_account_feature" "identity_entitlement " {
23+ resource "sysdig_secure_cloud_auth_account_feature" "identity_entitlement_advanced " {
2424 account_id = module. onboarding . sysdig_secure_account_id
2525 type = " FEATURE_SECURE_IDENTITY_ENTITLEMENT"
2626 enabled = true
27- components = [module . event-bridge . event_bridge_component_id ]
28- depends_on = [module . event-bridge , sysdig_secure_cloud_auth_account_feature . config_posture ]
27+ components = concat (sysdig_secure_cloud_auth_account_feature. identity_entitlement_basic . components , [module . event-bridge . event_bridge_component_id ])
28+ depends_on = [module . event-bridge , sysdig_secure_cloud_auth_account_feature . identity_entitlement_basic ]
29+ flags = {" CIEM_FEATURE_MODE" : " advanced" }
30+
31+ lifecycle {
32+ ignore_changes = [flags , components ]
33+ }
2934}
Original file line number Diff line number Diff line change @@ -50,3 +50,18 @@ resource "sysdig_secure_cloud_auth_account_feature" "config_posture" {
5050 components = [module . config-posture . config_posture_component_id ]
5151 depends_on = [module . config-posture ]
5252}
53+
54+ resource "sysdig_secure_cloud_auth_account_feature" "identity_entitlement_basic" {
55+ account_id = module. onboarding . sysdig_secure_account_id
56+ type = " FEATURE_SECURE_IDENTITY_ENTITLEMENT"
57+ enabled = true
58+ components = [module . config-posture . config_posture_component_id ]
59+ depends_on = [module . config-posture , sysdig_secure_cloud_auth_account_feature . config_posture ]
60+ flags = {
61+ " CIEM_FEATURE_MODE" : " basic"
62+ }
63+
64+ lifecycle {
65+ ignore_changes = [flags , components ]
66+ }
67+ }
Original file line number Diff line number Diff line change @@ -39,3 +39,18 @@ resource "sysdig_secure_cloud_auth_account_feature" "config_posture" {
3939 components = [module . config-posture . config_posture_component_id ]
4040 depends_on = [module . config-posture ]
4141}
42+
43+ resource "sysdig_secure_cloud_auth_account_feature" "identity_entitlement_basic" {
44+ account_id = module. onboarding . sysdig_secure_account_id
45+ type = " FEATURE_SECURE_IDENTITY_ENTITLEMENT"
46+ enabled = true
47+ components = [module . config-posture . config_posture_component_id ]
48+ depends_on = [module . config-posture , sysdig_secure_cloud_auth_account_feature . config_posture ]
49+ flags = {
50+ " CIEM_FEATURE_MODE" : " basic"
51+ }
52+
53+ lifecycle {
54+ ignore_changes = [flags , components ]
55+ }
56+ }
Original file line number Diff line number Diff line change @@ -17,10 +17,15 @@ resource "sysdig_secure_cloud_auth_account_feature" "threat_detection" {
1717 depends_on = [module . cloud-logs ]
1818}
1919
20- resource "sysdig_secure_cloud_auth_account_feature" "identity_entitlement " {
20+ resource "sysdig_secure_cloud_auth_account_feature" "identity_entitlement_advanced " {
2121 account_id = module. onboarding . sysdig_secure_account_id
2222 type = " FEATURE_SECURE_IDENTITY_ENTITLEMENT"
2323 enabled = true
24- components = [module . cloud-logs . cloud_logs_component_id ]
25- depends_on = [module . cloud-logs , sysdig_secure_cloud_auth_account_feature . config_posture ]
26- }
24+ components = concat (sysdig_secure_cloud_auth_account_feature. identity_entitlement_basic . components , [module . cloud-logs . cloud_logs_component_id ])
25+ depends_on = [module . cloud-logs , sysdig_secure_cloud_auth_account_feature . identity_entitlement_basic ]
26+ flags = {" CIEM_FEATURE_MODE" : " advanced" }
27+
28+ lifecycle {
29+ ignore_changes = [flags , components ]
30+ }
31+ }
Original file line number Diff line number Diff line change @@ -18,10 +18,15 @@ resource "sysdig_secure_cloud_auth_account_feature" "threat_detection" {
1818 depends_on = [module . cloud-logs ]
1919}
2020
21- resource "sysdig_secure_cloud_auth_account_feature" "identity_entitlement " {
21+ resource "sysdig_secure_cloud_auth_account_feature" "identity_entitlement_advanced " {
2222 account_id = module. onboarding . sysdig_secure_account_id
2323 type = " FEATURE_SECURE_IDENTITY_ENTITLEMENT"
2424 enabled = true
25- components = [module . cloud-logs . cloud_logs_component_id ]
26- depends_on = [module . cloud-logs , sysdig_secure_cloud_auth_account_feature . config_posture ]
27- }
25+ components = concat (sysdig_secure_cloud_auth_account_feature. identity_entitlement_basic . components , [module . cloud-logs . cloud_logs_component_id ])
26+ depends_on = [module . cloud-logs , sysdig_secure_cloud_auth_account_feature . identity_entitlement_basic ]
27+ flags = {" CIEM_FEATURE_MODE" : " advanced" }
28+
29+ lifecycle {
30+ ignore_changes = [flags , components ]
31+ }
32+ }
Original file line number Diff line number Diff line change @@ -17,10 +17,15 @@ resource "sysdig_secure_cloud_auth_account_feature" "threat_detection" {
1717 depends_on = [module . event-bridge ]
1818}
1919
20- resource "sysdig_secure_cloud_auth_account_feature" "identity_entitlement " {
20+ resource "sysdig_secure_cloud_auth_account_feature" "identity_entitlement_advanced " {
2121 account_id = module. onboarding . sysdig_secure_account_id
2222 type = " FEATURE_SECURE_IDENTITY_ENTITLEMENT"
2323 enabled = true
24- components = [module . event-bridge . event_bridge_component_id ]
25- depends_on = [module . event-bridge , sysdig_secure_cloud_auth_account_feature . config_posture ]
26- }
24+ components = concat (sysdig_secure_cloud_auth_account_feature. identity_entitlement_basic . components , [module . event-bridge . event_bridge_component_id ])
25+ depends_on = [module . event-bridge , sysdig_secure_cloud_auth_account_feature . identity_entitlement_basic ]
26+ flags = {" CIEM_FEATURE_MODE" : " advanced" }
27+
28+ lifecycle {
29+ ignore_changes = [flags , components ]
30+ }
31+ }
Original file line number Diff line number Diff line change @@ -18,10 +18,15 @@ resource "sysdig_secure_cloud_auth_account_feature" "threat_detection" {
1818 depends_on = [module . event-bridge ]
1919}
2020
21- resource "sysdig_secure_cloud_auth_account_feature" "identity_entitlement " {
21+ resource "sysdig_secure_cloud_auth_account_feature" "identity_entitlement_advanced " {
2222 account_id = module. onboarding . sysdig_secure_account_id
2323 type = " FEATURE_SECURE_IDENTITY_ENTITLEMENT"
2424 enabled = true
25- components = [module . event-bridge . event_bridge_component_id ]
26- depends_on = [module . event-bridge , sysdig_secure_cloud_auth_account_feature . config_posture ]
25+ components = concat (sysdig_secure_cloud_auth_account_feature. identity_entitlement_basic . components , [module . event-bridge . event_bridge_component_id ])
26+ depends_on = [module . event-bridge , sysdig_secure_cloud_auth_account_feature . identity_entitlement_basic ]
27+ flags = {" CIEM_FEATURE_MODE" : " advanced" }
28+
29+ lifecycle {
30+ ignore_changes = [flags , components ]
31+ }
2732}
You can’t perform that action at this time.
0 commit comments