turnerlabs / antiope Goto Github PK

I'm trying to follow the directions in INSTALL.md - I have all the pre-reqs set up.

I cloned the repo and created a config.env as specified. Then tried running the deploy_stack. Looks like that actually needs to run from inside the aws_inventory directory given the pathing in the command.

I tried to edit the Manifest file. Setting the StackName is unclear where and how to do that. I removed the pBucketName definition but pDeployBucket doesn't exist. Then I tried running the make command. It was looking for config.prod so a copied config.env to that. But the make fails. I get a couple of these errors:

*** No rule to make target yaml', needed by zipfile'. Stop.

Any ideas?

I came across this while exploring the turner labs terraform tools, and was curious for a comparison to Netflix security monkey, or cloud custodian

AWS Only updates the billing data every six hours, but the inventory pulls the data every 30 minutes. The DDB table will get pretty large if we don't do something about purge or dedup.

New Feature of CF - https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-elasticsearch-domain.html

t2 clusters cannot support KMS Encryption. A Cloudformation condition should be able to detect a t2 and use Enabled: False on the EncryptionAtRestOptions section of SearchClusterDomain

Keeping all resource objects in Resources/ is going to cause that to grow tremendously. Reindexing will become impossible too.

I think there will need to be some task that moves resource objects older than 7 days to a Aged-Resources subfolder (possibly even by YYYY-MM) to remain manageable.

The default call for support cases is
response = client.describe_cases(includeResolvedCases=get_all)
where get_all is False.

Better to try and use the boto3 params afterTime & beforeTime
https://boto3.amazonaws.com/v1/documentation/api/latest/reference/services/support.html#Support.Client.describe_cases

This will avoid writing out new objects to S3 every pass if the ticket hasn't been updated.