Add AWS Trusted Access Exception Management baseline policy pack#927
Closed
Add AWS Trusted Access Exception Management baseline policy pack#927
Conversation
This policy pack implements a framework for managing exceptions to AWS Trusted Access controls: - Provides a centralized configuration file for trusted access exceptions - Supports both baseline trusted accounts applied to all AWS accounts - Enables account-specific exceptions for individual AWS accounts - Uses calculated policies to dynamically determine trusted accounts - Supports various AWS resource types including S3, IAM, Lambda, EC2, RDS, and more The policy pack enables security teams to maintain consistent trusted access controls while allowing for legitimate exceptions on a per-account basis. 🤖 Generated with [Claude Code](https://claude.ai/code) Co-Authored-By: Claude <noreply@anthropic.com>
- Redesigned variables with map-based approach for resource types and policy values - Added centralized trusted access exceptions configuration with baseline and account-specific settings - Improved template calculation to combine baseline and account-specific trusted accounts - Updated README with new configuration documentation - Added plan.out to gitignore 🤖 Generated with [Claude Code](https://claude.ai/code) Co-Authored-By: Claude <noreply@anthropic.com>
- Moved policy_map from variables to locals - Updated policies.tf to reference local.policy_map - Removed policy_map from terraform.tfvars and example - Updated README documentation to reflect new design - Simplifies user configuration by hiding internal mappings 🤖 Generated with [Claude Code](https://claude.ai/code) Co-Authored-By: Claude <noreply@anthropic.com>
- Consolidated all local variables in locals.tf for better organization - Moved trusted_access_exceptions_json variables from metadata.tf - Applied terraform fmt to ensure consistent code formatting - Improves code organization and readability 🤖 Generated with [Claude Code](https://claude.ai/code) Co-Authored-By: Claude <noreply@anthropic.com>
- Update comments in terraform.tfvars.example to be more clear - Fix capitalization in policies.tf comments (skip/check/enforce) - Remove redundant comments in metadata.tf for cleaner code - Reorder explanatory comments in tfvars example file for better flow 🤖 Generated with [Claude Code](https://claude.ai/code) Co-Authored-By: Claude <noreply@anthropic.com>
|
This PR is stale because it has been open 60 days with no activity. Remove stale label or comment or this will be closed in 30 days. |
|
This PR was closed because it has been stalled for 90 days with no activity. |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
This PR adds a new AWS Trusted Access Exception Management baseline policy pack that provides a centralized way to manage trusted access exceptions across an AWS environment.
Updates in this PR
Key Features of the Policy Pack
How to Use
terraform.tfvars.exampletoterraform.tfvarstrusted_access_controlsmap to enable/disable specific resource typestrusted_access_exceptionsvariable