├── .gitignore ├── LICENSE ├── README.md ├── data.tf ├── docs ├── aws-sso-step-1.png ├── aws-sso-step-2.png ├── aws-sso-step-3.png ├── aws-sso-step-4.png └── aws-sso-step-5.png ├── locals.tf ├── main.tf ├── modules ├── budget-alarm │ ├── locals.tf │ ├── main.tf │ ├── outputs.tf │ └── variables.tf ├── cloudtrail │ ├── data.tf │ ├── locals.tf │ ├── main.tf │ ├── outputs.tf │ └── variables.tf ├── organization │ ├── locals.tf │ ├── main.tf │ ├── outputs.tf │ └── variables.tf ├── service-control-policies │ ├── data.tf │ ├── locals.tf │ ├── main.tf │ └── variables.tf ├── sso-checker │ ├── data.tf │ └── main.tf └── sso-main-user │ ├── data.tf │ ├── locals.tf │ ├── main.tf │ ├── outputs.tf │ └── variables.tf ├── policies ├── README.md ├── deny-disabling-cloudtrail.json ├── deny-iam-without-mfa.json.tmp ├── deny-making-s3-bucket-public.json.tmp ├── deny-root-user.json.tmp └── leave-organization.json ├── provider.tf ├── scripts └── bootstrap.sh ├── terraform.tfvars └── variables.tf /.gitignore: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Depaa/terraform-aws-security-baseline/HEAD/.gitignore -------------------------------------------------------------------------------- /LICENSE: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Depaa/terraform-aws-security-baseline/HEAD/LICENSE -------------------------------------------------------------------------------- /README.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Depaa/terraform-aws-security-baseline/HEAD/README.md -------------------------------------------------------------------------------- /data.tf: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Depaa/terraform-aws-security-baseline/HEAD/data.tf -------------------------------------------------------------------------------- /docs/aws-sso-step-1.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Depaa/terraform-aws-security-baseline/HEAD/docs/aws-sso-step-1.png -------------------------------------------------------------------------------- /docs/aws-sso-step-2.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Depaa/terraform-aws-security-baseline/HEAD/docs/aws-sso-step-2.png -------------------------------------------------------------------------------- /docs/aws-sso-step-3.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Depaa/terraform-aws-security-baseline/HEAD/docs/aws-sso-step-3.png -------------------------------------------------------------------------------- /docs/aws-sso-step-4.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Depaa/terraform-aws-security-baseline/HEAD/docs/aws-sso-step-4.png -------------------------------------------------------------------------------- /docs/aws-sso-step-5.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Depaa/terraform-aws-security-baseline/HEAD/docs/aws-sso-step-5.png -------------------------------------------------------------------------------- /locals.tf: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Depaa/terraform-aws-security-baseline/HEAD/locals.tf -------------------------------------------------------------------------------- /main.tf: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Depaa/terraform-aws-security-baseline/HEAD/main.tf -------------------------------------------------------------------------------- /modules/budget-alarm/locals.tf: -------------------------------------------------------------------------------- 1 | locals { 2 | tags = {} 3 | } -------------------------------------------------------------------------------- /modules/budget-alarm/main.tf: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Depaa/terraform-aws-security-baseline/HEAD/modules/budget-alarm/main.tf -------------------------------------------------------------------------------- /modules/budget-alarm/outputs.tf: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Depaa/terraform-aws-security-baseline/HEAD/modules/budget-alarm/outputs.tf -------------------------------------------------------------------------------- /modules/budget-alarm/variables.tf: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Depaa/terraform-aws-security-baseline/HEAD/modules/budget-alarm/variables.tf -------------------------------------------------------------------------------- /modules/cloudtrail/data.tf: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Depaa/terraform-aws-security-baseline/HEAD/modules/cloudtrail/data.tf -------------------------------------------------------------------------------- /modules/cloudtrail/locals.tf: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Depaa/terraform-aws-security-baseline/HEAD/modules/cloudtrail/locals.tf -------------------------------------------------------------------------------- /modules/cloudtrail/main.tf: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Depaa/terraform-aws-security-baseline/HEAD/modules/cloudtrail/main.tf -------------------------------------------------------------------------------- /modules/cloudtrail/outputs.tf: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Depaa/terraform-aws-security-baseline/HEAD/modules/cloudtrail/outputs.tf -------------------------------------------------------------------------------- /modules/cloudtrail/variables.tf: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Depaa/terraform-aws-security-baseline/HEAD/modules/cloudtrail/variables.tf -------------------------------------------------------------------------------- /modules/organization/locals.tf: -------------------------------------------------------------------------------- 1 | locals { 2 | tags = {} 3 | } -------------------------------------------------------------------------------- /modules/organization/main.tf: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Depaa/terraform-aws-security-baseline/HEAD/modules/organization/main.tf -------------------------------------------------------------------------------- /modules/organization/outputs.tf: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Depaa/terraform-aws-security-baseline/HEAD/modules/organization/outputs.tf -------------------------------------------------------------------------------- /modules/organization/variables.tf: -------------------------------------------------------------------------------- 1 | -------------------------------------------------------------------------------- /modules/service-control-policies/data.tf: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Depaa/terraform-aws-security-baseline/HEAD/modules/service-control-policies/data.tf -------------------------------------------------------------------------------- /modules/service-control-policies/locals.tf: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Depaa/terraform-aws-security-baseline/HEAD/modules/service-control-policies/locals.tf -------------------------------------------------------------------------------- /modules/service-control-policies/main.tf: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Depaa/terraform-aws-security-baseline/HEAD/modules/service-control-policies/main.tf -------------------------------------------------------------------------------- /modules/service-control-policies/variables.tf: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Depaa/terraform-aws-security-baseline/HEAD/modules/service-control-policies/variables.tf -------------------------------------------------------------------------------- /modules/sso-checker/data.tf: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Depaa/terraform-aws-security-baseline/HEAD/modules/sso-checker/data.tf -------------------------------------------------------------------------------- /modules/sso-checker/main.tf: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Depaa/terraform-aws-security-baseline/HEAD/modules/sso-checker/main.tf -------------------------------------------------------------------------------- /modules/sso-main-user/data.tf: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Depaa/terraform-aws-security-baseline/HEAD/modules/sso-main-user/data.tf -------------------------------------------------------------------------------- /modules/sso-main-user/locals.tf: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Depaa/terraform-aws-security-baseline/HEAD/modules/sso-main-user/locals.tf -------------------------------------------------------------------------------- /modules/sso-main-user/main.tf: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Depaa/terraform-aws-security-baseline/HEAD/modules/sso-main-user/main.tf -------------------------------------------------------------------------------- /modules/sso-main-user/outputs.tf: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Depaa/terraform-aws-security-baseline/HEAD/modules/sso-main-user/outputs.tf -------------------------------------------------------------------------------- /modules/sso-main-user/variables.tf: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Depaa/terraform-aws-security-baseline/HEAD/modules/sso-main-user/variables.tf -------------------------------------------------------------------------------- /policies/README.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Depaa/terraform-aws-security-baseline/HEAD/policies/README.md -------------------------------------------------------------------------------- /policies/deny-disabling-cloudtrail.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Depaa/terraform-aws-security-baseline/HEAD/policies/deny-disabling-cloudtrail.json -------------------------------------------------------------------------------- /policies/deny-iam-without-mfa.json.tmp: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Depaa/terraform-aws-security-baseline/HEAD/policies/deny-iam-without-mfa.json.tmp -------------------------------------------------------------------------------- /policies/deny-making-s3-bucket-public.json.tmp: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Depaa/terraform-aws-security-baseline/HEAD/policies/deny-making-s3-bucket-public.json.tmp -------------------------------------------------------------------------------- /policies/deny-root-user.json.tmp: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Depaa/terraform-aws-security-baseline/HEAD/policies/deny-root-user.json.tmp -------------------------------------------------------------------------------- /policies/leave-organization.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Depaa/terraform-aws-security-baseline/HEAD/policies/leave-organization.json -------------------------------------------------------------------------------- /provider.tf: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Depaa/terraform-aws-security-baseline/HEAD/provider.tf -------------------------------------------------------------------------------- /scripts/bootstrap.sh: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Depaa/terraform-aws-security-baseline/HEAD/scripts/bootstrap.sh -------------------------------------------------------------------------------- /terraform.tfvars: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Depaa/terraform-aws-security-baseline/HEAD/terraform.tfvars -------------------------------------------------------------------------------- /variables.tf: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Depaa/terraform-aws-security-baseline/HEAD/variables.tf --------------------------------------------------------------------------------