tom-butler

#--------------------------------------------------------------
# Install Chamber
#--------------------------------------------------------------

# Chamber is used to access secrets which are stored encrypted
# in aws ssm paramater store

# Get the latest version of Chamber
curl -s https://api.github.com/repos/segmentio/chamber/releases/latest \
| grep "browser_download_url.*linux-amd64" \

tom-butler

#!/bin/bash

for user in $(aws iam list-users --output text | awk '{print $NF}'); do
    aws iam list-access-keys --user $user --output text
done

tom-butler

#==============================================================
# remote-state.tf
#==============================================================

# This file is used to set variables that are passed to sub 
# modules to build our stack

#--------------------------------------------------------------
# Global Config
#--------------------------------------------------------------

tom-butler

*/5 * * * * cd /opt/healthz && /bin/echo "`date +'\%Y-\%m-\%dT\%H:\%M:\%SZ'` `/usr/local/bin/goss validate -f nagios_verbose`" >> healthz.log

tom-butler

# Get the time in UTC 15 minutes from now
data "external" "date" {
  # use date to get the time 15 mins from now
  program = ["bash", "${path.module}/date.sh"]
}

# Wait 15 minutes before scaling instances.
resource "aws_autoscaling_schedule" "delaystart" {
  scheduled_action_name  = "delaystart"
  min_size               = 2

tom-butler

#!/usr/bin/env python3

import boto3
import json

central_logging = '<insert your central logging account id here>'

# Variables for the grafana monitoring server
role_name = 'monitoring_prodcloudwatch_access_role'
policy_arn = 'arn:aws:iam::<insert your central logging account id here>:policy/monitor-assumerole'

tom-butler

#==============================================================
# tom-butler / centralMonitoringRole.tf
#==============================================================

variable "central_logging_account_id" {}

# The Role itself
resource "aws_iam_role" "monitor_access_role" {
  name = "central-logging-monitor"
  path = "/"

tom-butler

{
  "Version": "2012-10-17",
  "Statement": [
      {
          "Sid": "InstanceProfile",
          "Effect": "Allow",
          "Action": [
              "sts:AssumeRole"
          ],
          "Resource": [

tom-butler

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Sid": "",
      "Effect": "Allow",
      "Principal": {
        "AWS": "arn:aws:iam::<CentralMonitoringAccountId>:role/<CentralMonitoringRole>"
      },
      "Action": "sts:AssumeRole"

tom-butler

#!/bin/bash

#AWS keys should be set before this
echo "Installing Scout security auditor"
git clone https://github.com/nccgroup/Scout2
cd Scout2
pip3 install -r requirements.txt

python Scout2.py