securing / aws_monitoring_terraform

Terraform scripts for fast setup of AWS monitoring services

by @_pkusik

Description

Easy to use terraform scripts with minimal requirement of configuration.
For now it's possible to:

• Set up single account services & needed resources:
  • AWS Budgets (with email and/or SMS notification using SNS)
  • AWS CloudTrail (with option of encrypting the logs with CMK)
  • AWS Config
  • AWS GuardDuty

Setup

0. Install Terraform - instruction
1. Rename example.tfvars file to the terraform.tfvars
2. Change options to your liking - choose which services to enable, change names of resources, add your AWS profile or region
3. Run the commands:

terraform init
terraform apply

Everything done!
You are also free to look up into modules and copy fragments of them into your own Terraform scripts.

ToDo

• Organizational deployments
• More AWS Services, like SecurityHub
• Support for multi-region deployments