Skip to content
This repository was archived by the owner on Sep 27, 2024. It is now read-only.

Commit e3210be

Browse files
authored
Batsad 1440 (#26)
* acl private no longer needed * variablize slack channel id
1 parent 30eac41 commit e3210be

3 files changed

Lines changed: 6 additions & 5 deletions

File tree

s3_data_events/s3.tf

Lines changed: 0 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -4,10 +4,6 @@ resource "aws_s3_bucket" "cloudtrail" {
44
force_destroy = false
55
}
66

7-
resource "aws_s3_bucket_acl" "cloudtrail" {
8-
bucket = aws_s3_bucket.cloudtrail.id
9-
acl = "private"
10-
}
117

128
resource "aws_s3_bucket_public_access_block" "cloudtrail" {
139
bucket = aws_s3_bucket.cloudtrail.id

security-alerts/chatbot.tf

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,7 @@
11
resource "awscc_chatbot_slack_channel_configuration" "chatbot" {
22
configuration_name = "batcave-security-alerts"
33
iam_role_arn = aws_iam_role.chatbot_role.arn
4-
slack_channel_id = "C036GQ3E9D1"
4+
slack_channel_id = var.slack_channel_id
55
slack_workspace_id = "TGYJGRB1T"
66
guardrail_policies = ["arn:aws:iam::aws:policy/ReadOnlyAccess"]
77
logging_level = "INFO"

security-alerts/variables.tf

Lines changed: 5 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -25,4 +25,9 @@ variable "sechub_nessus_rule_name" {
2525

2626
variable "account_name" {
2727
type = string
28+
}
29+
30+
variable "slack_channel_id" {
31+
type = string
32+
default = "C036GQ3E9D1"
2833
}

0 commit comments

Comments
 (0)