preechadev / cloudguard-cspm-onboarding

Project that onboards multiple cloud accounts (Azure & AWS) into Cloudguard

Check Point CPSM Terraform Onboarding

This Terraform project is intended to be used to onboard multiple Public Cloud accounts (Azure/AWS/GCP) and K8s Clusters in one-shot.
What it does is configuring through API (with Terraform) an existing CloudGuard CSPM Portal.

How to start?

First, you need to have a CloudGuard CSPM account, if you don't, you can create one with these links:

1. Create an account in Europe Region
2. Create an account in Asia Pacific Region
3. Create an account in United States Region

Get API credentials in your CPSM Portal

Then you will need to get the API credentials that you will be using with Terraform to onboard the accounts.

Remember to copy these two values, you will need to enter them in the .tfvars file later on.

How to use it

The only thing that you need to do is changing the terraform.tfvars file located in this directory.

# Set in this file your deployment variables
cspm-key-id     = "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx"
cspm-key-secret = "xxxxxxxxxxxxxxxxxxxx"

azure-onboard   = true
azure-op-mode   = "Read"

azure-app-client-id   = "xxxxxxxxxxxxxxxxxxxx"
azure-app-client-key  = "xxxxxxxxxxxxxxxxxxxx"
azure-app-tenant-id   = "xxxxxxxxxxxxxxxxxxxx"
azure-accounts  =  {
        "0" = ["NAME","SUBSCRIPTION ID"]
#       "1" = ["NAME","SUBSCRIPTION ID"]
#       "2" = ["NAME","SUBSCRIPTION ID"]
}

aws-onboard   = true
aws-op-mode   = "ReadOnly"
aws-accounts  = {
        "0" = ["NAME","ARN","SECRET"]
#       "1" = ["NAME","ARN","SECRET"]
#       "2" = ["NAME","ARN","SECRET"]        
}

If you want (or need) to further customize other project details, you can change defaults in the different name-variables.tf files.
Here you will also able to find the descriptions that explains what each variable is used for.