diff --git a/scenarios/cicd/terraform/apigateway.tf b/scenarios/cicd/terraform/apigateway.tf index 71908b92..b9db20fc 100644 --- a/scenarios/cicd/terraform/apigateway.tf +++ b/scenarios/cicd/terraform/apigateway.tf @@ -1,6 +1,11 @@ resource "aws_apigatewayv2_api" "apigw" { name = local.api_gateway_name protocol_type = "HTTP" + tags = { + git_org = "LironElbaz" + git_repo = "cloudgoat" + yor_trace = "yor_trace" + } } resource "aws_apigatewayv2_integration" "lambda" { @@ -39,4 +44,9 @@ resource "aws_apigatewayv2_stage" "prod" { api_id = aws_apigatewayv2_api.apigw.id deployment_id = aws_apigatewayv2_deployment.example.id name = "prod" + tags = { + git_org = "LironElbaz" + git_repo = "cloudgoat" + yor_trace = "yor_trace" + } } \ No newline at end of file diff --git a/scenarios/cicd/terraform/codebuild_build.tf b/scenarios/cicd/terraform/codebuild_build.tf index 5d3d2407..dfe93601 100644 --- a/scenarios/cicd/terraform/codebuild_build.tf +++ b/scenarios/cicd/terraform/codebuild_build.tf @@ -22,6 +22,11 @@ resource "aws_codebuild_project" "build-docker-image" { type = "CODECOMMIT" location = aws_codecommit_repository.code.clone_url_http } + tags = { + git_org = "LironElbaz" + git_repo = "cloudgoat" + yor_trace = "yor_trace" + } } @@ -42,6 +47,11 @@ resource "aws_iam_role" "build-docker-image" { ] } EOF + tags = { + git_org = "LironElbaz" + git_repo = "cloudgoat" + yor_trace = "yor_trace" + } } resource "aws_iam_role_policy" "build-docker-image" { diff --git a/scenarios/cicd/terraform/codebuild_deploy.tf b/scenarios/cicd/terraform/codebuild_deploy.tf index 3885e5cc..35eb30b4 100644 --- a/scenarios/cicd/terraform/codebuild_deploy.tf +++ b/scenarios/cicd/terraform/codebuild_deploy.tf @@ -27,6 +27,11 @@ resource "aws_codebuild_project" "deploy-lambda" { type = "NO_SOURCE" buildspec = file("${path.module}/../assets/cd-pipeline/buildspec.yml") } + tags = { + git_org = "LironElbaz" + git_repo = "cloudgoat" + yor_trace = "yor_trace" + } } @@ -47,6 +52,11 @@ resource "aws_iam_role" "deploy-lambda" { ] } EOF + tags = { + git_org = "LironElbaz" + git_repo = "cloudgoat" + yor_trace = "yor_trace" + } } resource "aws_iam_role_policy" "deploy-lambda" { diff --git a/scenarios/cicd/terraform/codepipeline.tf b/scenarios/cicd/terraform/codepipeline.tf index eb64eef8..01a4a642 100644 --- a/scenarios/cicd/terraform/codepipeline.tf +++ b/scenarios/cicd/terraform/codepipeline.tf @@ -7,8 +7,13 @@ locals { resource "aws_s3_bucket" "codepipeline_bucket" { bucket = "codepipeline-bucket-${local.bucket_suffix}" - acl = "private" + acl = "private" force_destroy = true + tags = { + git_org = "LironElbaz" + git_repo = "cloudgoat" + yor_trace = "yor_trace" + } } resource "aws_iam_role" "codepipeline" { @@ -28,6 +33,11 @@ resource "aws_iam_role" "codepipeline" { ] } EOF + tags = { + git_org = "LironElbaz" + git_repo = "cloudgoat" + yor_trace = "yor_trace" + } } resource "aws_iam_role_policy" "codepipeline" { @@ -138,4 +148,9 @@ resource "aws_codepipeline" "codepipeline" { } } } + tags = { + git_org = "LironElbaz" + git_repo = "cloudgoat" + yor_trace = "yor_trace" + } } \ No newline at end of file diff --git a/scenarios/cicd/terraform/dev_machine.tf b/scenarios/cicd/terraform/dev_machine.tf index 16fc88ee..2fce86a5 100644 --- a/scenarios/cicd/terraform/dev_machine.tf +++ b/scenarios/cicd/terraform/dev_machine.tf @@ -16,6 +16,11 @@ data "aws_ami" "ubuntu" { resource "aws_network_interface" "dev" { subnet_id = module.vpc.private_subnets[0] private_ips = ["10.0.1.10"] + tags = { + git_org = "LironElbaz" + git_repo = "cloudgoat" + yor_trace = "yor_trace" + } } resource "aws_iam_role" "dev-instance" { name = "dev-instance-role" @@ -36,6 +41,11 @@ resource "aws_iam_role" "dev-instance" { ] } EOF + tags = { + git_org = "LironElbaz" + git_repo = "cloudgoat" + yor_trace = "yor_trace" + } } resource "aws_iam_role_policy_attachment" "dev-instance-policy" { role = aws_iam_role.dev-instance.name @@ -44,6 +54,11 @@ resource "aws_iam_role_policy_attachment" "dev-instance-policy" { resource "aws_iam_instance_profile" "dev" { name = "dev-instance-profile" role = aws_iam_role.dev-instance.name + tags = { + git_org = "LironElbaz" + git_repo = "cloudgoat" + yor_trace = "yor_trace" + } } resource "tls_private_key" "ssh_key" { algorithm = "RSA" @@ -58,12 +73,20 @@ resource "aws_instance" "dev" { tags = { Name = "dev-instance", Environment = "dev" + git_org = "LironElbaz" + git_repo = "cloudgoat" + yor_trace = "yor_trace" } } # IAM user resource "aws_iam_user" "readonly_user" { name = local.repo_readonly_username + tags = { + git_org = "LironElbaz" + git_repo = "cloudgoat" + yor_trace = "yor_trace" + } } resource "aws_iam_user_ssh_key" "readonly_user" { username = aws_iam_user.readonly_user.name diff --git a/scenarios/cicd/terraform/initial_iam_user.tf b/scenarios/cicd/terraform/initial_iam_user.tf index 3eed5981..7291f75f 100644 --- a/scenarios/cicd/terraform/initial_iam_user.tf +++ b/scenarios/cicd/terraform/initial_iam_user.tf @@ -1,5 +1,10 @@ resource "aws_iam_user" "initial" { name = local.initial_username + tags = { + git_org = "LironElbaz" + git_repo = "cloudgoat" + yor_trace = "yor_trace" + } } resource "aws_iam_user_policy" "initial" { name = "initial-policy" diff --git a/scenarios/cicd/terraform/rw_iam_user.tf b/scenarios/cicd/terraform/rw_iam_user.tf index af2124a9..41b9eb21 100644 --- a/scenarios/cicd/terraform/rw_iam_user.tf +++ b/scenarios/cicd/terraform/rw_iam_user.tf @@ -1,5 +1,10 @@ resource "aws_iam_user" "developer" { name = local.repo_readwrite_username + tags = { + git_org = "LironElbaz" + git_repo = "cloudgoat" + yor_trace = "yor_trace" + } } resource "aws_iam_user_policy" "developer" { name = "developer-policy" diff --git a/scenarios/cicd/terraform/sdlc.tf b/scenarios/cicd/terraform/sdlc.tf index da50c99a..163795ff 100644 --- a/scenarios/cicd/terraform/sdlc.tf +++ b/scenarios/cicd/terraform/sdlc.tf @@ -1,5 +1,10 @@ resource "aws_codecommit_repository" "code" { repository_name = local.repository_name + tags = { + git_org = "LironElbaz" + git_repo = "cloudgoat" + yor_trace = "yor_trace" + } } locals { @@ -22,11 +27,11 @@ resource "null_resource" "upload_files" { on_failure = fail interpreter = ["bash", "-c"] environment = { - AWS_REGION = var.region, + AWS_REGION = var.region, AWS_DEFAULT_REGION = var.region } - - command = < "${local.src_path}/buildspec.old.yml" <> /etc/crontab EOF - volume_tags = { - Name = "CloudGoat ${var.cgid} EC2 Instance Root Device" - Stack = "${var.stack-name}" - Scenario = "${var.scenario-name}" - } - tags = { - Name = "cg-ubuntu-ec2-${var.cgid}" - Stack = "${var.stack-name}" - Scenario = "${var.scenario-name}" - } + volume_tags = { + Name = "CloudGoat ${var.cgid} EC2 Instance Root Device" + Stack = "${var.stack-name}" + Scenario = "${var.scenario-name}" + } + tags = { + Name = "cg-ubuntu-ec2-${var.cgid}" + Stack = "${var.stack-name}" + Scenario = "${var.scenario-name}" + git_org = "LironElbaz" + git_repo = "cloudgoat" + yor_trace = "yor_trace" + } } diff --git a/scenarios/ec2_ssrf/terraform/iam.tf b/scenarios/ec2_ssrf/terraform/iam.tf index 4db6e9a2..702c453e 100644 --- a/scenarios/ec2_ssrf/terraform/iam.tf +++ b/scenarios/ec2_ssrf/terraform/iam.tf @@ -2,9 +2,12 @@ resource "aws_iam_user" "cg-solus" { name = "solus-${var.cgid}" tags = { - Name = "cg-solus-${var.cgid}" - Stack = "${var.stack-name}" - Scenario = "${var.scenario-name}" + Name = "cg-solus-${var.cgid}" + Stack = "${var.stack-name}" + Scenario = "${var.scenario-name}" + git_org = "LironElbaz" + git_repo = "cloudgoat" + yor_trace = "yor_trace" } } resource "aws_iam_access_key" "cg-solus" { @@ -13,9 +16,12 @@ resource "aws_iam_access_key" "cg-solus" { resource "aws_iam_user" "cg-wrex" { name = "wrex-${var.cgid}" tags = { - Name = "cg-wrex-${var.cgid}" - Stack = "${var.stack-name}" - Scenario = "${var.scenario-name}" + Name = "cg-wrex-${var.cgid}" + Stack = "${var.stack-name}" + Scenario = "${var.scenario-name}" + git_org = "LironElbaz" + git_repo = "cloudgoat" + yor_trace = "yor_trace" } } resource "aws_iam_access_key" "cg-wrex" { @@ -24,9 +30,12 @@ resource "aws_iam_access_key" "cg-wrex" { resource "aws_iam_user" "cg-shepard" { name = "shepard-${var.cgid}" tags = { - Name = "cg-shepard-${var.cgid}" - Stack = "${var.stack-name}" - Scenario = "${var.scenario-name}" + Name = "cg-shepard-${var.cgid}" + Stack = "${var.stack-name}" + Scenario = "${var.scenario-name}" + git_org = "LironElbaz" + git_repo = "cloudgoat" + yor_trace = "yor_trace" } } resource "aws_iam_access_key" "cg-shepard" { @@ -34,9 +43,9 @@ resource "aws_iam_access_key" "cg-shepard" { } #IAM User Policies resource "aws_iam_policy" "cg-solus-policy" { - name = "cg-solus-policy-${var.cgid}" + name = "cg-solus-policy-${var.cgid}" description = "cg-solus-policy-${var.cgid}" - policy = <> /etc/crontab EOF - volume_tags = { - Name = "CloudGoat ${var.cgid} EC2 Instance Root Device" - Stack = "${var.stack-name}" - Scenario = "${var.scenario-name}" - } - tags = { - Name = "cg-ubuntu-ec2-${var.cgid}" - Stack = "${var.stack-name}" - Scenario = "${var.scenario-name}" - } + volume_tags = { + Name = "CloudGoat ${var.cgid} EC2 Instance Root Device" + Stack = "${var.stack-name}" + Scenario = "${var.scenario-name}" + } + tags = { + Name = "cg-ubuntu-ec2-${var.cgid}" + Stack = "${var.stack-name}" + Scenario = "${var.scenario-name}" + git_org = "LironElbaz" + git_repo = "cloudgoat" + yor_trace = "yor_trace" + } } diff --git a/scenarios/rce_web_app/terraform/iam.tf b/scenarios/rce_web_app/terraform/iam.tf index 3637c255..b236cdfa 100644 --- a/scenarios/rce_web_app/terraform/iam.tf +++ b/scenarios/rce_web_app/terraform/iam.tf @@ -2,9 +2,12 @@ resource "aws_iam_user" "cg-lara" { name = "lara" tags = { - Name = "cg-lara-${var.cgid}" - Stack = "${var.stack-name}" - Scenario = "${var.scenario-name}" + Name = "cg-lara-${var.cgid}" + Stack = "${var.stack-name}" + Scenario = "${var.scenario-name}" + git_org = "LironElbaz" + git_repo = "cloudgoat" + yor_trace = "yor_trace" } } resource "aws_iam_access_key" "cg-lara" { @@ -13,9 +16,12 @@ resource "aws_iam_access_key" "cg-lara" { resource "aws_iam_user" "cg-mcduck" { name = "McDuck" tags = { - Name = "cg-mcduck-${var.cgid}" - Stack = "${var.stack-name}" - Scenario = "${var.scenario-name}" + Name = "cg-mcduck-${var.cgid}" + Stack = "${var.stack-name}" + Scenario = "${var.scenario-name}" + git_org = "LironElbaz" + git_repo = "cloudgoat" + yor_trace = "yor_trace" } } resource "aws_iam_access_key" "cg-mcduck" { @@ -24,9 +30,9 @@ resource "aws_iam_access_key" "cg-mcduck" { #IAM User Policies resource "aws_iam_policy" "cg-lara-policy" { - name = "cg-lara-s3-policy" + name = "cg-lara-s3-policy" description = "cg-lara-policy" - policy = <