Before reading these instructions, go through setting up aws-auth and understanding the aws-auth workflow.
Combining it with LastPass
If you've read the aws-auth README, you'll find that using aws-auth isn't really a one-liner, since you have to set your permanent AWS credentials first:
If you store your secrets in a CLI-friendly password manager, such as lpass or pass,
then you can reduce this even further!
If needed, you can create a LastPass account and install the client from here. The CLI client can be installed from here.
Create templates
First, store your permanent AWS credentials in lpass. I'm sure there are multiple ways this can be done but I created a
custom note and stored all user account information in it.
Open your LastPass Vault > Secure Notes > click on the (+) sign > Add Secure Note.
Change "Note Type:" to "Add Custom Template".
Give it a name like "AWS Security Credentials".
Start adding fields.
Save the template when complete.
Fields I used were:
Field Name
Field Type
User ID (IAM)
Text
Account Name
Text
Account Number
Text
Access Key ID
Text with copy button
Secret Access Key
Text with copy button
MFA ARN
Text with copy button
Once that's complete, create a second note used to for storing lines of the script.
Open your LastPass Vault > Secure Notes > click on the (+) sign > Add Secure Note.
Change "Note Type:" to "Add Custom Template".
Give it a name like "Script".
Start adding fields.
Save the template when complete.
Fields I used were:
Field Name
Field Type
Param1
Text
Param2
Text
Param3
Text
Param4
Text
Save secrets and script parameters in LastPass
Create a new Secure Note using the "AWS Security Credentials" template. Store your User ID ARN, Account Name, Account Number,
Access Key ID, Secret Access Key, and MFA ARN in that. Custom templates can't be added from the lpass cli so this has to be
done within the LastPass GUI.
$ lpass show aws-johndoe
Foldername/aws-johndoe [id: 1234567890123456]
MFA ARN: arn:aws:iam::123456789012:mfa/johndoe
Secret Access Key: JOHNDOERANDOMSECRETACCESSKEY
Access Key ID: JOHNDOEACCESSKEYID
Account Number: 123456789012
Account Name: Security
User ID (IAM): arn:aws:iam::123456789012:user/johndoe
NoteType: Custom
If you will be assuming an IAM Role ARN, put that in lpass too:
Note: For the IAM Role ARNs, I'm using the default lpass site template since I only need two fields and I can access it quickly with the CLI. The script with the --role-arn flag is saved as Username and the Role ARN is being saved as Password.
Start putting the script together
Now, we can start constructing our script in lpass that ties all of this together. Again, since this is a custom template, everything has to
be done within the LastPass console. Create a new Secure Note using the "Script" template.
In the Param1 field, copy in:
read -p "Enter your MFA token: "token
Note: The other ParamX fields were added for future use and not necessarily for this script.
Now, to setup your temporary STS credentials so it is truly a one-liner!
eval"$(lpass show aws-auth-security --field Param1; lpass show aws-auth-security --field Param2)"
Example
$ eval "$(lpass show aws-auth-security --field Param1; lpass show aws-auth-security --field Param2)"
Enter your MFA token: 1234562018-01-0816:35:18 [INFO] [aws-auth] Getting temporary credentials and token for MFA device arn:aws:iam::123456789012:mfa/johndoe
2018-01-0816:35:19 [INFO] [aws-auth] Success!
Alias all the things!
But that's still a lot of typing. How about we alias that and all the additional IAM Role ARN possibilities? I keep all my aliases defined in ~/.bash_aliases.
Note: Remember that aws-auth-otheraccount requires we specify the --role-arn so we can switch to that role/account. In this example, all
of that is stored in lpass as the secret aws-johndoe-role-arn-otheraccount. The Username field contains the script and the Password field
contains the Role ARN.
For every AWS account used in your organization, you'll need to create that additional secret and that BASH alias if you're going to follow along with this.
Remember to adjust your alias scripts as neccessary.
# Authenticate to the AWS account with the User ID
alias aws-auth-security='eval "$(lpass show aws-auth-security --field Param1; lpass show aws-auth-security --field Param2)"'
# Authenticate to the AWS account with the role arn
alias aws-auth-otheraccount='eval "$(lpass show aws-auth-security --field Param1; lpass show aws-johndoe-role-arn-otheraccount --username)"'
Note: the double quotes around the $() are required.
Example
$ aws-auth-security
Enter your MFA token: 1234562018-01-0921:14:18 [INFO] [aws-auth] Getting temporary credentials and token for MFA device arn:aws:iam::123456789012:mfa/johndoe
2018-01-0921:14:19 [INFO] [aws-auth] Success!
$ aws-auth-otheraccount
Enter your MFA token: 2345672018-01-0921:14:41 [INFO] [aws-auth] Getting temporary credentials and token for MFA device arn:aws:iam::123456789012:mfa/johndoe
2018-01-0921:14:42 [INFO] [aws-auth] Assuming role arn:aws:iam::098765432109:role/rolename
2018-01-0921:14:42 [INFO] [aws-auth] Success!
$ aws sts get-caller-identity
{
"UserId": "AWSRANDOMUSERID:johndoe",
"Account": "098765432109",
"Arn": "arn:aws:sts::098765432109:assumed-role/rolename/johndoe"
}
{"treedata":{"name":"root","toggled":true,"children":[{"name":".circleci","children":[{"name":"config.yml","path":".circleci/config.yml","sha":"f2f425f9baade7154f1bd15ebffb42e50e29dcb4"}]},{"name":".editorconfig","path":".editorconfig","sha":"a5eec1063e66c4cb953cba222dd50b4d314ef3e2"},{"name":".gitignore","path":".gitignore","sha":"3e440e93f7b263b18b7e4943ba7f83badc682823"},{"name":".pre-commit-config.yaml","path":".pre-commit-config.yaml","sha":"c54725b8fe2e0eb30c15d29380a23f1fb58360fa"},{"name":"CODEOWNERS","path":"CODEOWNERS","sha":"7ab1528db56eca5c136e005f4f08ec9b2c0f3aeb"},{"name":"LICENSE.txt","path":"LICENSE.txt","sha":"f4e3d9bd4717a044ed31ad847a300eee74371a78"},{"name":"README.adoc","path":"README.adoc","sha":"3bafa2443bba63d01eed6245bc85efd93ed7ae85"},{"name":"_ci","children":[{"name":"output-debug-values.sh","path":"_ci/output-debug-values.sh","sha":"39d6d5f080a53f932e3b5ec970b5f268fd00e50a"}]},{"name":"_docs","children":[{"name":"auto-update.png","path":"_docs/auto-update.png","sha":"77bfd1c65de0245ac8b3c67d5b0b64fc440824bf"},{"name":"aws-cloudtrail-architecture.png","path":"_docs/aws-cloudtrail-architecture.png","sha":"a2dd9a08b8ed77744fd5febab3be7bdf633dee79"},{"name":"aws-cloudtrail.png","path":"_docs/aws-cloudtrail.png","sha":"acc7dcaf4b46ce3cef1bcc20be0329e12c320e7f"},{"name":"aws-config-architecture.png","path":"_docs/aws-config-architecture.png","sha":"721458048d5e539468c438498863a91fa96e0a85"},{"name":"aws-config-rules-architecture.png","path":"_docs/aws-config-rules-architecture.png","sha":"29fe3f20358b176e385d1bcdc0357bff2c1d5b4a"},{"name":"aws-config-rules.png","path":"_docs/aws-config-rules.png","sha":"ac3f7b35bcac949887e62aee260d9cb70edd3ae8"},{"name":"aws-config.png","path":"_docs/aws-config.png","sha":"02f4b326aef57372def4f3fafa4f0e4cec07e395"},{"name":"aws-guardduty.png","path":"_docs/aws-guardduty.png","sha":"053b92412fb8e3fb5740acc404b493fe1dd7229b"},{"name":"aws-organizations-architecture.png","path":"_docs/aws-organizations-architecture.png","sha":"bd57412fe85d3fe8d5e358db5e3b7bfef3e786a9"},{"name":"aws-organizations-icon.png","path":"_docs/aws-organizations-icon.png","sha":"b2b3fa04f51a23e5bae1b3389ffedf5e17b3cef2"},{"name":"iam-access-analyzer.png","path":"_docs/iam-access-analyzer.png","sha":"36e38e69454beae66d35b9bf25b3e5ffe1e68a25"},{"name":"kms-icon.png","path":"_docs/kms-icon.png","sha":"cd4f350a9a3fda41089928a7e396ee8924b7a901"},{"name":"multi-account-multi-region-aws-config.png","path":"_docs/multi-account-multi-region-aws-config.png","sha":"a9c813b1799fe71554c20c8fefc703792293bfe4"},{"name":"multiaccount_guardduty.png","path":"_docs/multiaccount_guardduty.png","sha":"c56b50bbb4c2a041366b430cada27b88aa02524b"},{"name":"ssh-grunt-architecture.png","path":"_docs/ssh-grunt-architecture.png","sha":"9ced8c68bcc7957e50aa016cad6c5b043a05b470"},{"name":"terminal-icon.png","path":"_docs/terminal-icon.png","sha":"df09d52d5b1176d7e231bab6c7712c3728e45c1b"}]},{"name":"codegen","children":[{"name":"README.adoc","path":"codegen/README.adoc","sha":"e2b5314b4f15a8f5b6c1b3932e73de6e87d107f0"},{"name":"core-concepts.md","path":"codegen/core-concepts.md","sha":"07648a0b7bbf22a4887f4d1b742edab49b510adc"},{"name":"generate-all.sh","path":"codegen/generate-all.sh","sha":"e95f7a1fe3b75636468472cd072e0d0b559f2eb5"},{"name":"generate-aws-config","children":[{"name":".gitignore","path":"codegen/generate-aws-config/.gitignore","sha":"b488f31b176e8da6501add7ce148074af2337d91"},{"name":"main.go","path":"codegen/generate-aws-config/main.go","sha":"bdfaab90b0ac5df350960e50b5c11adfa717e037"},{"name":"static","children":[{"name":"README.adoc","path":"codegen/generate-aws-config/static/README.adoc","sha":"4a41da883b8000991627a5a931242b95126a716a"},{"name":"core-concepts.md","path":"codegen/generate-aws-config/static/core-concepts.md","sha":"976e6424dcb277f70377f92eb2a10d0c8e595a85"},{"name":"variables.tf","path":"codegen/generate-aws-config/static/variables.tf","sha":"2c2b34de6b4a38e7ed1210a5086b6a4859ca9141"}]},{"name":"template_data.go","path":"codegen/generate-aws-config/template_data.go","sha":"fb1fa7fdc13d16bc7ef52f607d81c60f7b992331"}]},{"name":"generate-aws-guardduty","children":[{"name":".gitignore","path":"codegen/generate-aws-guardduty/.gitignore","sha":"b488f31b176e8da6501add7ce148074af2337d91"},{"name":"main.go","path":"codegen/generate-aws-guardduty/main.go","sha":"203030a6e15b919d6532170d2185abb3a0af4580"},{"name":"static","children":[{"name":"README.adoc","path":"codegen/generate-aws-guardduty/static/README.adoc","sha":"323324013062ff37a109648efa1b19f4ce550c3f"},{"name":"variables.tf","path":"codegen/generate-aws-guardduty/static/variables.tf","sha":"a603806b6a10a93ebfa94b96e27709422b2c3d09"}]},{"name":"template_data.go","path":"codegen/generate-aws-guardduty/template_data.go","sha":"33ba4a1bd9e479181e3d5acb71dd193ca48c3122"}]},{"name":"generate-ebs-encryption","children":[{"name":".gitignore","path":"codegen/generate-ebs-encryption/.gitignore","sha":"a3f620a6c9c87b381bf6748917bdf9542792f54b"},{"name":"main.go","path":"codegen/generate-ebs-encryption/main.go","sha":"ca92940b678fc4568b8e585882972dbeb03b0a9c"},{"name":"static","children":[{"name":"README.adoc","path":"codegen/generate-ebs-encryption/static/README.adoc","sha":"e5a0473d6016d77afb15c9ff8dd52c84f57c29e9"},{"name":"variables.tf","path":"codegen/generate-ebs-encryption/static/variables.tf","sha":"4bb22b9bb519462a429baea8ffea9d1a3991be26"}]},{"name":"template_data.go","path":"codegen/generate-ebs-encryption/template_data.go","sha":"fd500cf79337ab316d3c0eb466c47ba408f75346"}]},{"name":"generate-multiregion-iam-access-analyzer","children":[{"name":".gitignore","path":"codegen/generate-multiregion-iam-access-analyzer/.gitignore","sha":"045b82ea48805332afcf6edb7a52b41310f0c72c"},{"name":"main.go","path":"codegen/generate-multiregion-iam-access-analyzer/main.go","sha":"d0307987e3844ae79b5ea85f4045ff4b6fad9b77"},{"name":"static","children":[{"name":"README.adoc","path":"codegen/generate-multiregion-iam-access-analyzer/static/README.adoc","sha":"4369e9c55396a3b98ff72202535f2f20709ae31e"},{"name":"core-concepts.md","path":"codegen/generate-multiregion-iam-access-analyzer/static/core-concepts.md","sha":"6bbaac3d7e62744e3fe3f511cd4ae78b212d08a8"},{"name":"variables.tf","path":"codegen/generate-multiregion-iam-access-analyzer/static/variables.tf","sha":"6e8d81aac5af0cba584e6d0884e03cfbc23ba07f"}]},{"name":"template_data.go","path":"codegen/generate-multiregion-iam-access-analyzer/template_data.go","sha":"934f6eed2001f1155777dbdf30399d2cad447c6f"}]},{"name":"generate-multiregion-kms-grant","children":[{"name":".gitignore","path":"codegen/generate-multiregion-kms-grant/.gitignore","sha":"ce81abc8eeae39683199307d44536f0a8b1b7862"},{"name":"main.go","path":"codegen/generate-multiregion-kms-grant/main.go","sha":"56a29127aec8a2be9bfae204f82838b320aab593"},{"name":"static","children":[{"name":"README.adoc","path":"codegen/generate-multiregion-kms-grant/static/README.adoc","sha":"5153cd1b29383651e37148162dc4c110e2f244d7"},{"name":"core-concepts.md","path":"codegen/generate-multiregion-kms-grant/static/core-concepts.md","sha":"3eb1725fa927a84cc2a0341335d150bf5c6e70f5"},{"name":"variables.tf","path":"codegen/generate-multiregion-kms-grant/static/variables.tf","sha":"505b2d0cb9ecf78f0364e845cab72bf0c28365d5"}]},{"name":"template_data.go","path":"codegen/generate-multiregion-kms-grant/template_data.go","sha":"290280e7d9d065b6f8d14f2635daf05cff6607fb"}]},{"name":"generate-multiregion-kms","children":[{"name":".gitignore","path":"codegen/generate-multiregion-kms/.gitignore","sha":"dd60654458233c0bdb18892c5989f1828889d55b"},{"name":"main.go","path":"codegen/generate-multiregion-kms/main.go","sha":"b8ed4487ecca31bc909fb944ce88d2c079f667a4"},{"name":"static","children":[{"name":"README.adoc","path":"codegen/generate-multiregion-kms/static/README.adoc","sha":"b847d63c0f20e0e2d3d150d9efc603e73bcd4a01"},{"name":"variables.tf","path":"codegen/generate-multiregion-kms/static/variables.tf","sha":"146f394a213942a53c254efafeea96a0ac958418"}]},{"name":"template_data.go","path":"codegen/generate-multiregion-kms/template_data.go","sha":"e343d7bd0baa5f69b5a6b0417a94df64164d0caf"}]},{"name":"generator","children":[{"name":"autogen_variables.tf.tpl.go","path":"codegen/generator/autogen_variables.tf.tpl.go","sha":"2817455872b7ca544e003936ac04723ce4573dbb"},{"name":"aws.go","path":"codegen/generator/aws.go","sha":"9a5ad6fd89fa287e3055459a5a6ece36680f5fcd"},{"name":"cli.go","path":"codegen/generator/cli.go","sha":"6e92f692f11d26c182c9e987fd566b0b8cb10901"},{"name":"errors.go","path":"codegen/generator/errors.go","sha":"21fd1f6d4bef60ea9cb39939783696526ddd02e7"},{"name":"generator.go","path":"codegen/generator/generator.go","sha":"60690b5b8c94ac3396d7e2ad65819db36839260e"},{"name":"main.tf.tpl.go","path":"codegen/generator/main.tf.tpl.go","sha":"ed6b68e6e22031d25e563af34189c89cd0339ea0"},{"name":"outputs.tf.tpl.go","path":"codegen/generator/outputs.tf.tpl.go","sha":"46860a17e8d59f4d063483a479b25bef4b05d10c"}]},{"name":"go.mod","path":"codegen/go.mod","sha":"d401631d3d5020137efe7e01c020ece55c5c7c7e"},{"name":"go.sum","path":"codegen/go.sum","sha":"4d0818acc88670836f806d291f5fb2060bc8d232"},{"name":"logging","children":[{"name":"logging.go","path":"codegen/logging/logging.go","sha":"d4fb9da710acb21567b4e0581cb7bd7692baca04"}]}]},{"name":"examples","children":[{"name":"auto-update","children":[{"name":"README.md","path":"examples/auto-update/README.md","sha":"d7c630c4585bad7869d55bc6c62fca248eeb521a"},{"name":"auto-update-example.json","path":"examples/auto-update/auto-update-example.json","sha":"e6accb10006eca938f5cbbd2ef440e10ecd4c33b"}]},{"name":"aws-config-multi-region","children":[{"name":"README.md","path":"examples/aws-config-multi-region/README.md","sha":"5d472db5cdc843b494852a062d8c0880f246fcd0"},{"name":"terraform","children":[{"name":"main.tf","path":"examples/aws-config-multi-region/terraform/main.tf","sha":"152ec9b446eae1c8a260717cea8937e101ae2242"},{"name":"outputs.tf","path":"examples/aws-config-multi-region/terraform/outputs.tf","sha":"77ee90f69634c965b8ebed79a8d3afd6adca4db4"},{"name":"providers.tf","path":"examples/aws-config-multi-region/terraform/providers.tf","sha":"60c3d85371cc49ea87bee8a3468053ae240f729c"},{"name":"variables.tf","path":"examples/aws-config-multi-region/terraform/variables.tf","sha":"c918bda36075448ed43d6b4e5abcdd745ccfda17"}]},{"name":"terragrunt","children":[{"name":"terragrunt.hcl","path":"examples/aws-config-multi-region/terragrunt/terragrunt.hcl","sha":"beaa54fb672e49bd038f8a090d88be5e81c0b672"}]}]},{"name":"aws-config-rules","children":[{"name":"README.md","path":"examples/aws-config-rules/README.md","sha":"6cd2794e82af1e3c3620d8feaed136af5358207e"},{"name":"main.tf","path":"examples/aws-config-rules/main.tf","sha":"7a71a7e7550a38f35048738f670e7974a9cba7c9"},{"name":"outputs.tf","path":"examples/aws-config-rules/outputs.tf","sha":"4319400eb4190f58458f2dd9398225869ff08da3"},{"name":"variables.tf","path":"examples/aws-config-rules/variables.tf","sha":"7d39063bdc912f043b060e8390a72fe1b984f2c5"}]},{"name":"aws-config","children":[{"name":"README.md","path":"examples/aws-config/README.md","sha":"5d66d09633de365e154669a090edc37fc70548d1"},{"name":"main.tf","path":"examples/aws-config/main.tf","sha":"fa7ba10f727c850ae156b5a31e89ea97a0f95b71"},{"name":"outputs.tf","path":"examples/aws-config/outputs.tf","sha":"ddd32698f39772d663a2d9b8a6276260f5431068"},{"name":"variables.tf","path":"examples/aws-config/variables.tf","sha":"144db668ceabd9181ceb46e260020d7ea9788f58"}]},{"name":"aws-organizations","children":[{"name":"README.md","path":"examples/aws-organizations/README.md","sha":"1da3c2fc061fee6ee99564b8b2323ccf69f2c690"},{"name":"main.tf","path":"examples/aws-organizations/main.tf","sha":"70e062430fe45f59c585ad78db36ee8e641ded88"},{"name":"outputs.tf","path":"examples/aws-organizations/outputs.tf","sha":"a713386520ca735201acfc9a560eda7fcf2aa51a"},{"name":"variables.tf","path":"examples/aws-organizations/variables.tf","sha":"59afc28c87bc3c49d11c6faf7e112643f0a95481"}]},{"name":"cloudtrail-custom-key","children":[{"name":"README.md","path":"examples/cloudtrail-custom-key/README.md","sha":"bb376ddaca4b52bef18a5526aa9cb0465574ff7e"},{"name":"main.tf","path":"examples/cloudtrail-custom-key/main.tf","sha":"3021d22401312aa6dff111b1d3984d472b15d234"},{"name":"outputs.tf","path":"examples/cloudtrail-custom-key/outputs.tf","sha":"b6cd4e77d231018a5beb19cd3a9a4eb3f2017d64"},{"name":"variables.tf","path":"examples/cloudtrail-custom-key/variables.tf","sha":"a72f9cabc8968d84ecdd5f2a3cbd5e8e41c064f6"}]},{"name":"cloudtrail","children":[{"name":"README.md","path":"examples/cloudtrail/README.md","sha":"2fbe4b7494d970738d054910d86d0ae31718c8ec"},{"name":"main.tf","path":"examples/cloudtrail/main.tf","sha":"28dfbd4b82ff70fb4edc5c541643b97f3dd131c5"},{"name":"outputs.tf","path":"examples/cloudtrail/outputs.tf","sha":"b6cd4e77d231018a5beb19cd3a9a4eb3f2017d64"},{"name":"variables.tf","path":"examples/cloudtrail/variables.tf","sha":"cbeb938286bd999d6072ef3093254e8fd435f529"}]},{"name":"cross-account-iam-roles","children":[{"name":"README.md","path":"examples/cross-account-iam-roles/README.md","sha":"bac6fd37f7f7009454a66e55e8ff377fff36aefb"},{"name":"main.tf","path":"examples/cross-account-iam-roles/main.tf","sha":"2bfd86ac50295bfd98dacdae664acc1178c6d662"},{"name":"outputs.tf","path":"examples/cross-account-iam-roles/outputs.tf","sha":"44af3be56d0a80e4d509fcd62c0e6dd8628072fa"},{"name":"variables.tf","path":"examples/cross-account-iam-roles/variables.tf","sha":"fcb1870396b4af7832cd41b92c78e611f515b7bc"}]},{"name":"custom-iam-entity","children":[{"name":"README.md","path":"examples/custom-iam-entity/README.md","sha":"7e6c2e15f44a4ddc28ef276da4b323d2fd326a3f"},{"name":"main.tf","path":"examples/custom-iam-entity/main.tf","sha":"c592b909910b393e6484ab8eebcf379f38ddfede"},{"name":"outputs.tf","path":"examples/custom-iam-entity/outputs.tf","sha":"835eb64f431386925438cb2f63e48e413faee90c"},{"name":"variables.tf","path":"examples/custom-iam-entity/variables.tf","sha":"89edd202863f1e6793f08c5f84a95f91322de081"}]},{"name":"ebs-encryption-multi-region","children":[{"name":"README.md","path":"examples/ebs-encryption-multi-region/README.md","sha":"33f8f3f132f3971949a6e8b2d26cabbeb13414b3"},{"name":"main.tf","path":"examples/ebs-encryption-multi-region/main.tf","sha":"dfdae73a559375a97df0eedb913a1e9ea83988a7"},{"name":"outputs.tf","path":"examples/ebs-encryption-multi-region/outputs.tf","sha":"49520778a1fc9e5e82777cbb5aa0250e032e1817"},{"name":"providers.tf","path":"examples/ebs-encryption-multi-region/providers.tf","sha":"5a16e859dfb15a81cd8ab7474b80a415f37c302f"},{"name":"variables.tf","path":"examples/ebs-encryption-multi-region/variables.tf","sha":"8a366d8cbe240950657f3851ea267c676029fd61"}]},{"name":"fail2ban","children":[{"name":"README.md","path":"examples/fail2ban/README.md","sha":"6599f8481a3e7666ffe7924707c89b0701d57689"},{"name":"fail2ban-example.json","path":"examples/fail2ban/fail2ban-example.json","sha":"eb07b75536e92721c8496cb5b05900622d44ba11"},{"name":"main.tf","path":"examples/fail2ban/main.tf","sha":"7b5d916742c88e3f61f217b540d92c553432683e"},{"name":"outputs.tf","path":"examples/fail2ban/outputs.tf","sha":"77a6ab8a992cd106de126f24b2950c1efa499229"},{"name":"user-data","children":[{"name":"user-data.sh","path":"examples/fail2ban/user-data/user-data.sh","sha":"460b230fb025451e06e8cdd73f83bb5bfea21110"}]},{"name":"variables.tf","path":"examples/fail2ban/variables.tf","sha":"236006c79b34f4fe3a517dd2ae8b805bfb19b6df"}]},{"name":"guardduty","children":[{"name":"README.md","path":"examples/guardduty/README.md","sha":"23c75950a1b8b33286b79bd5e9d853cee02d62ea"},{"name":"main.tf","path":"examples/guardduty/main.tf","sha":"7418d93c67053627be60f4d69c281f0b8f6ac3ac"},{"name":"outputs.tf","path":"examples/guardduty/outputs.tf","sha":"24b4eecc8136725bafa182f1c4febdf90da49a92"},{"name":"providers.tf","path":"examples/guardduty/providers.tf","sha":"60c3d85371cc49ea87bee8a3468053ae240f729c"},{"name":"variables.tf","path":"examples/guardduty/variables.tf","sha":"f34fed58aa65a7fafd7188b31dd15083acb3bad7"}]},{"name":"iam-access-analyzer-multi-region","children":[{"name":"README.md","path":"examples/iam-access-analyzer-multi-region/README.md","sha":"51c398bec469b1d95f4e59e2fb1f287fe621bf20"},{"name":"main.tf","path":"examples/iam-access-analyzer-multi-region/main.tf","sha":"d98869f2edced3b26d7881faed092f1825c8da8d"},{"name":"providers.tf","path":"examples/iam-access-analyzer-multi-region/providers.tf","sha":"60c3d85371cc49ea87bee8a3468053ae240f729c"},{"name":"variables.tf","path":"examples/iam-access-analyzer-multi-region/variables.tf","sha":"734110e1aaac9640ad689d058dec03dd968fb9ee"}]},{"name":"iam-groups","children":[{"name":"README.md","path":"examples/iam-groups/README.md","sha":"7bd21c82fd8f28f7b3155497a0524d86ce17cfdd"},{"name":"main.tf","path":"examples/iam-groups/main.tf","sha":"8432b89fbe641623d25095e1d10d28c0d45b1d8d"},{"name":"outputs.tf","path":"examples/iam-groups/outputs.tf","sha":"5076c13be431d7844e1ce524bcd40076450c051e"},{"name":"variables.tf","path":"examples/iam-groups/variables.tf","sha":"a7790e3207316f9e6216574fe2e0dd50fb39b767"}]},{"name":"iam-user-password-policy","children":[{"name":"README.md","path":"examples/iam-user-password-policy/README.md","sha":"bc62258833767d2e383a130c43d57a11e229af27"},{"name":"main.tf","path":"examples/iam-user-password-policy/main.tf","sha":"ad10a3b9b11f9c62dc06781c09c279761639aebc"},{"name":"outputs.tf","path":"examples/iam-user-password-policy/outputs.tf","sha":"36e88e92cf2568fb06a8da0453a85bcb4bd199dd"},{"name":"variables.tf","path":"examples/iam-user-password-policy/variables.tf","sha":"7f920bda19b0928773bb37203859a68453a12231"}]},{"name":"iam-users","children":[{"name":"README.md","path":"examples/iam-users/README.md","sha":"f8b65e9756e9f8c8703a854c1363be700b5fe8d9"},{"name":"main.tf","path":"examples/iam-users/main.tf","sha":"98277a0fcccb34a2ec72246f17d6d2a5eecdb55c"},{"name":"outputs.tf","path":"examples/iam-users/outputs.tf","sha":"2b305a310e6c78ed5d89ff62303b5c64b956bd12"},{"name":"variables.tf","path":"examples/iam-users/variables.tf","sha":"8348c698c50cd968ad09140378ed2fc20b96efb2"}]},{"name":"ip-lockdown","children":[{"name":"README.md","path":"examples/ip-lockdown/README.md","sha":"3962ba23a76d8f02e5c0ffc8cb71196991628e38"},{"name":"aws-example","children":[{"name":"README.md","path":"examples/ip-lockdown/aws-example/README.md","sha":"da44a1265bdd321d10b4a6e3471a655da91033bb"},{"name":"main.tf","path":"examples/ip-lockdown/aws-example/main.tf","sha":"1dc69a309a7b35c3d240b13f081435fe5986f83e"},{"name":"outputs.tf","path":"examples/ip-lockdown/aws-example/outputs.tf","sha":"a175a78c9a10f9f2fd9d7c84f9b304aebc1bdb41"},{"name":"user-data","children":[{"name":"user-data.sh","path":"examples/ip-lockdown/aws-example/user-data/user-data.sh","sha":"c6d308027737a434f4c96bc3eba5bd301897af62"}]},{"name":"variables.tf","path":"examples/ip-lockdown/aws-example/variables.tf","sha":"85be46b79dfe349e32974eccdc9c3206211787ac"}]},{"name":"ip-lockdown-sample.json","path":"examples/ip-lockdown/ip-lockdown-sample.json","sha":"d12d2f011a862fe4451d094b4fa0447c8a2d0d3e"},{"name":"local-test","children":[{"name":"README.md","path":"examples/ip-lockdown/local-test/README.md","sha":"3f0e1a6483ce3155bb04dbb9a4fd76ed41486d35"},{"name":"docker-compose.yml","path":"examples/ip-lockdown/local-test/docker-compose.yml","sha":"7c8e3a5d1fd40a95ef99b4bba0911c63ed43b530"}]}]},{"name":"kms-grant-multi-region","children":[{"name":"main.tf","path":"examples/kms-grant-multi-region/main.tf","sha":"cddbca6b04c842112ec8e99e9d82db364cf6d460"},{"name":"providers.tf","path":"examples/kms-grant-multi-region/providers.tf","sha":"60c3d85371cc49ea87bee8a3468053ae240f729c"},{"name":"variables.tf","path":"examples/kms-grant-multi-region/variables.tf","sha":"de7bc5d08278f3ecbf78a6397327f491cf8ac054"}]},{"name":"kms-master-key-multi-region","children":[{"name":"main.tf","path":"examples/kms-master-key-multi-region/main.tf","sha":"ab4770703f26f7e2f0146841fc539b8d1416cdcd"},{"name":"outputs.tf","path":"examples/kms-master-key-multi-region/outputs.tf","sha":"c2685a282b5ce295c2dd80a78841711a40e80dcb"},{"name":"providers.tf","path":"examples/kms-master-key-multi-region/providers.tf","sha":"60c3d85371cc49ea87bee8a3468053ae240f729c"},{"name":"variables.tf","path":"examples/kms-master-key-multi-region/variables.tf","sha":"e4de95370f28ccd88b961992ebf40fa2cdc74ac8"}]},{"name":"kms-master-key","children":[{"name":"README.md","path":"examples/kms-master-key/README.md","sha":"821565d831f2afcf7a2ffeea9a0854fabdaae033"},{"name":"main.tf","path":"examples/kms-master-key/main.tf","sha":"09cd89066bbbf447041c6b1ff7a3e6581131267e"},{"name":"outputs.tf","path":"examples/kms-master-key/outputs.tf","sha":"4d5fd0a19ea917beff0241f169b51417ff9935b9"},{"name":"variables.tf","path":"examples/kms-master-key/variables.tf","sha":"c1de5a7b1c0859710d1253b61baf86c4564560e3"}]},{"name":"ntp","children":[{"name":"README.md","path":"examples/ntp/README.md","sha":"b676e802c1d196f6af204d14d143b80864bccd30"},{"name":"ntp-example.json","path":"examples/ntp/ntp-example.json","sha":"f9483aa1f7e35d1904fe50b6990bd348b58bcfb1"}]},{"name":"os-hardening","children":[{"name":"README.md","path":"examples/os-hardening/README.md","sha":"d311d0932f7e98b236d0dcf3d9c629a7f8b3b107"},{"name":"packer-build.sh","path":"examples/os-hardening/packer-build.sh","sha":"8a0cf99893046f648c04ad62d505746e9c3a5e95"},{"name":"packer","children":[{"name":"amazon-linux.json","path":"examples/os-hardening/packer/amazon-linux.json","sha":"35287d613dd1b136a4a0cbfd658b2b4979ee152b"},{"name":"files","children":[{"name":"etc","children":[{"name":"fstab","path":"examples/os-hardening/packer/files/etc/fstab","sha":"cbf68cec68a92bc54f514dd0d6906f19cea857e6"}]}]}]},{"name":"terraform","children":[{"name":"main.tf","path":"examples/os-hardening/terraform/main.tf","sha":"5a0dc9c0342917ed79f62cc494eede2e0e504b52"},{"name":"outputs.tf","path":"examples/os-hardening/terraform/outputs.tf","sha":"33083aed25a4ed6e323bf84381b896614814c9d1"},{"name":"variables.tf","path":"examples/os-hardening/terraform/variables.tf","sha":"25d9e4a3ecf236434b71fd2eac179fa27cdb8587"}]}]},{"name":"private-s3-bucket","children":[{"name":"README.md","path":"examples/private-s3-bucket/README.md","sha":"5214e6225de5e051cb2842fa2eb6e04a92184a10"},{"name":"main.tf","path":"examples/private-s3-bucket/main.tf","sha":"832b4418cc829e34a0c03738c878b44f31ca3559"},{"name":"outputs.tf","path":"examples/private-s3-bucket/outputs.tf","sha":"efddeeb33901e91f4f28a438afb3455f2cca5e18"},{"name":"variables.tf","path":"examples/private-s3-bucket/variables.tf","sha":"ce9cb926cc79a19e527ec6b6b8f918232dad4168"}]},{"name":"saml-iam-roles","children":[{"name":"README.md","path":"examples/saml-iam-roles/README.md","sha":"b4ef2b28d5704aec892ea54cc28a61fbb46378c9"},{"name":"main.tf","path":"examples/saml-iam-roles/main.tf","sha":"55776fdb5b15f97b822543a884a3eac10c4c2d96"},{"name":"outputs.tf","path":"examples/saml-iam-roles/outputs.tf","sha":"1bd4fec9529cddfd2d3f61bba60f9dfb8b286c70"},{"name":"saml-metadata.xml","path":"examples/saml-iam-roles/saml-metadata.xml","sha":"88596cfde52242a43559c79216a1c60b2ea12903"},{"name":"variables.tf","path":"examples/saml-iam-roles/variables.tf","sha":"28705aa859940aa4b8027a19fe0b5b4affba939e"}]},{"name":"secrets-manager-resource-policies","children":[{"name":"README.md","path":"examples/secrets-manager-resource-policies/README.md","sha":"289a83c28bd9142fc7bbb4e603a4b25b4c9c1b98"},{"name":"main.tf","path":"examples/secrets-manager-resource-policies/main.tf","sha":"b22d38db211f6c9b5ee324da72ce8a0b0ecceff2"},{"name":"variables.tf","path":"examples/secrets-manager-resource-policies/variables.tf","sha":"d6f5c45fbc2173475cec7c4e77ac8f5caed4dc27"}]},{"name":"ssh-grunt","children":[{"name":"iam","children":[{"name":"README.md","path":"examples/ssh-grunt/iam/README.md","sha":"b1ae6d51c6f6d3eeb7df2b51dab8d0d238f53132"},{"name":"main.tf","path":"examples/ssh-grunt/iam/main.tf","sha":"982b6ed8000a7d1085e8d84f7461099a9ffc5e86"},{"name":"outputs.tf","path":"examples/ssh-grunt/iam/outputs.tf","sha":"978b316044d417393b70100a427de1068c4d417f"},{"name":"variables.tf","path":"examples/ssh-grunt/iam/variables.tf","sha":"1ee58afdef7dad43bb3fb221995cc3daf631177b"}]},{"name":"packer","children":[{"name":"README.md","path":"examples/ssh-grunt/packer/README.md","sha":"198bd8cc5b0c8cec13fd17229bfa3fc62f34de53"},{"name":"build-binary.sh","path":"examples/ssh-grunt/packer/build-binary.sh","sha":"fe84ead78eb3e87e4855272f28c83d681c58ffff"},{"name":"ssh-grunt-iam.json","path":"examples/ssh-grunt/packer/ssh-grunt-iam.json","sha":"73bdac20b37017b7e31dbbf89486b1da3c8a4589"}]}]},{"name":"ssm-healthchecks-iam-permissions","children":[{"name":"README.md","path":"examples/ssm-healthchecks-iam-permissions/README.md","sha":"f1fe555a3aff887a966def0a1d3ccaff3dd826e7"},{"name":"main.tf","path":"examples/ssm-healthchecks-iam-permissions/main.tf","sha":"18fbd25e2469641f37f54f856093265df0b05015"},{"name":"outputs.tf","path":"examples/ssm-healthchecks-iam-permissions/outputs.tf","sha":"52688c3a4f1f8349500505fb8949fa0d21c385a3"},{"name":"variables.tf","path":"examples/ssm-healthchecks-iam-permissions/variables.tf","sha":"217574c100974ae601b2a1478e0ac183d351d4a0"}]}]},{"name":"modules","children":[{"name":"_deprecated","children":[{"name":"account-baseline-app","children":[{"name":"README.md","path":"modules/_deprecated/account-baseline-app/README.md","sha":"fafca675aea1c5157ec3cc9f464b915d53c2f64d"}]},{"name":"account-baseline-root","children":[{"name":"README.md","path":"modules/_deprecated/account-baseline-root/README.md","sha":"7863a798cf9fefea05be05ee5da591fe9f1da926"}]},{"name":"account-baseline-security","children":[{"name":"README.md","path":"modules/_deprecated/account-baseline-security/README.md","sha":"47aa4058c7789874787b7c007ce757b87428934f"}]},{"name":"custom-iam-group","children":[{"name":"README.md","path":"modules/_deprecated/custom-iam-group/README.md","sha":"e7a0ff783eb1052aa77fe50d7eaa6a06d2d82649"}]}]},{"name":"auto-update","children":[{"name":"README.adoc","path":"modules/auto-update/README.adoc","sha":"3344544b5219e0dea5285906a9477fe569ab2534"},{"name":"core-concepts.md","path":"modules/auto-update/core-concepts.md","sha":"0e4dd35dc4b7320764f203b5cc91e55ecaa9b0be"},{"name":"install-scripts","children":[{"name":"configure-auto-update","path":"modules/auto-update/install-scripts/configure-auto-update","sha":"9557efec90bf62cbcd0360198ec2bf984a8a873b"},{"name":"unattended_upgrades_config.txt","path":"modules/auto-update/install-scripts/unattended_upgrades_config.txt","sha":"abe88fd8a5037ce518bec69a6cac0699cb421d47"},{"name":"yum_cron_config.txt","path":"modules/auto-update/install-scripts/yum_cron_config.txt","sha":"e7ef4273f1b2af0c9c032fadaacd03130ba5ea78"}]},{"name":"install.sh","path":"modules/auto-update/install.sh","sha":"7c19fd0d04b11c358af64149b3169d6b2c5e3b58"}]},{"name":"aws-auth","children":[{"name":"AWS-AUTH-1PASSWORD.md","path":"modules/aws-auth/AWS-AUTH-1PASSWORD.md","sha":"bcfd06153c8ee21f1e3468ce9b1634d5dc7cc68c"},{"name":"AWS-AUTH-LASTPASS.md","path":"modules/aws-auth/AWS-AUTH-LASTPASS.md","sha":"7c370864041284d8ce90749c0bc5dca744c43a5a","toggled":true},{"name":"README.md","path":"modules/aws-auth/README.md","sha":"10f5164db2016bda84383b598e0262a188a39599"},{"name":"bin","children":[{"name":"aws-auth","path":"modules/aws-auth/bin/aws-auth","sha":"85039ffd1720f9b93a34e8998852bdd3b9502bcc"}]},{"name":"install.sh","path":"modules/aws-auth/install.sh","sha":"ab9611d92d6822ceed981bdff3766724366037f0"}],"toggled":true},{"name":"aws-config-bucket","children":[{"name":"README.md","path":"modules/aws-config-bucket/README.md","sha":"2988d934e16617289522a4ea711ee07589ce96d7"},{"name":"main.tf","path":"modules/aws-config-bucket/main.tf","sha":"bc1ca3af97b481be880e30f2d35584ccdbe80f87"},{"name":"outputs.tf","path":"modules/aws-config-bucket/outputs.tf","sha":"8ac7ab1c4c5ded586bee63ce460b25cd60eb4a18"},{"name":"variables.tf","path":"modules/aws-config-bucket/variables.tf","sha":"7f19c72eae24510811e0e2ded8af6073d260eacf"}]},{"name":"aws-config-multi-region","children":[{"name":"README.adoc","path":"modules/aws-config-multi-region/README.adoc","sha":"4a41da883b8000991627a5a931242b95126a716a"},{"name":"core-concepts.md","path":"modules/aws-config-multi-region/core-concepts.md","sha":"976e6424dcb277f70377f92eb2a10d0c8e595a85"},{"name":"main.tf","path":"modules/aws-config-multi-region/main.tf","sha":"81c9de904b739879dbe642dc467578c4f14e8b5f"},{"name":"outputs.tf","path":"modules/aws-config-multi-region/outputs.tf","sha":"92343c3519e650cf686ba2674f86f1cc8d93c550"},{"name":"variables.autogen.tf","path":"modules/aws-config-multi-region/variables.autogen.tf","sha":"3ea138065b8386950e13b049c9532d185c145f76"},{"name":"variables.tf","path":"modules/aws-config-multi-region/variables.tf","sha":"2c2b34de6b4a38e7ed1210a5086b6a4859ca9141"}]},{"name":"aws-config-rules","children":[{"name":"README.adoc","path":"modules/aws-config-rules/README.adoc","sha":"dcfac5e0472e408c3c11bce69eace818faefb67e"},{"name":"core-concepts.md","path":"modules/aws-config-rules/core-concepts.md","sha":"af111230b6262be339d220c7b2308493781fef49"},{"name":"main.tf","path":"modules/aws-config-rules/main.tf","sha":"9057bdfc26adece6077f9685f61eed21b062e07c"},{"name":"outputs.tf","path":"modules/aws-config-rules/outputs.tf","sha":"c297ad118d46f79f286d6577770ab46e59555ccb"},{"name":"variables.tf","path":"modules/aws-config-rules/variables.tf","sha":"e0645e3cfa20c357ae31401a32b7ea2d81d30d5b"}]},{"name":"aws-config","children":[{"name":"README.adoc","path":"modules/aws-config/README.adoc","sha":"e281a273ac4d04b13925ab868de2c1e0541bdc5d"},{"name":"core-concepts.md","path":"modules/aws-config/core-concepts.md","sha":"e5a7b8646bab42398ff7f5224549e528ce8c0d52"},{"name":"main.tf","path":"modules/aws-config/main.tf","sha":"89ede26cab8e6af542cfe1d508d83fc1d000940b"},{"name":"outputs.tf","path":"modules/aws-config/outputs.tf","sha":"bcd505e4ac4102bc09750adb36c99398a06eb1a6"},{"name":"variables.tf","path":"modules/aws-config/variables.tf","sha":"5cbbc5f048687ab240012942f1b3a3ca6ad442de"}]},{"name":"aws-organizations","children":[{"name":"README.adoc","path":"modules/aws-organizations/README.adoc","sha":"da34d48b119c5a27c91ccf51fed0e076fb512ccc"},{"name":"core-concepts.md","path":"modules/aws-organizations/core-concepts.md","sha":"8766c8f36eef9e8992bf13a44f6571261c43995d"},{"name":"main.tf","path":"modules/aws-organizations/main.tf","sha":"77a0aaf298b86593e3d1bac5e62f355174eeaa4c"},{"name":"outputs.tf","path":"modules/aws-organizations/outputs.tf","sha":"feed57b33ab7eb9b100712647942f1a8d7245b3d"},{"name":"variables.tf","path":"modules/aws-organizations/variables.tf","sha":"4eac97565d5ab76a5e0c03cde4a9337001125156"}]},{"name":"cloudtrail-bucket","children":[{"name":"README.md","path":"modules/cloudtrail-bucket/README.md","sha":"acc86c32958e8f6d90944e714a7731a82f404c82"},{"name":"main.tf","path":"modules/cloudtrail-bucket/main.tf","sha":"3de1e6296ee868644f2e8a6b3b81c98fcc166544"},{"name":"outputs.tf","path":"modules/cloudtrail-bucket/outputs.tf","sha":"1e560e9b0cc1c8f40e81d5fe8bbbf1c03258fdae"},{"name":"variables.tf","path":"modules/cloudtrail-bucket/variables.tf","sha":"6e4c2f0b34e31f2870173aa13cff706eab8d2b44"}]},{"name":"cloudtrail","children":[{"name":"README.adoc","path":"modules/cloudtrail/README.adoc","sha":"de0c0a6ea2e4177540f4b5a43a87b489e24b0fbd"},{"name":"core-concepts.md","path":"modules/cloudtrail/core-concepts.md","sha":"2fe043286174ca13e0eb3c0f2fddc097a087bbed"},{"name":"main.tf","path":"modules/cloudtrail/main.tf","sha":"0d8f291e580e213ac77533a52b8ae0d6f0089dc3"},{"name":"outputs.tf","path":"modules/cloudtrail/outputs.tf","sha":"d161a32bbcd6f824955c273c49ef9e00bcdb57b3"},{"name":"variables.tf","path":"modules/cloudtrail/variables.tf","sha":"6f4a72ff31f0b7a52218f398e07f9d5e8c003cfc"}]},{"name":"cross-account-iam-roles","children":[{"name":"README.md","path":"modules/cross-account-iam-roles/README.md","sha":"47b6fde4186405fd3e4940050f7fc065dc0f9b4f"},{"name":"main.tf","path":"modules/cross-account-iam-roles/main.tf","sha":"705b7abf28aaca618c1b73046cbddc0c638b6af7"},{"name":"outputs.tf","path":"modules/cross-account-iam-roles/outputs.tf","sha":"4e4697d3c627fc668206d03557f8d58b3f391465"},{"name":"variables.tf","path":"modules/cross-account-iam-roles/variables.tf","sha":"6abcc59946e0d4552ee823ac4cc19e75a7ba6134"}]},{"name":"custom-iam-entity","children":[{"name":"README.md","path":"modules/custom-iam-entity/README.md","sha":"7e0ac019931836a663354723e51d922fc30f08ee"},{"name":"main.tf","path":"modules/custom-iam-entity/main.tf","sha":"79ceffb06f00b84d4fafe941b945b2372be36bcd"},{"name":"outputs.tf","path":"modules/custom-iam-entity/outputs.tf","sha":"b94249803e78991682b8542d8f39e5a728432b97"},{"name":"variables.tf","path":"modules/custom-iam-entity/variables.tf","sha":"d57dd585773e8280ef20432f5cfdbbb0354761a9"}]},{"name":"ebs-encryption-multi-region","children":[{"name":"README.adoc","path":"modules/ebs-encryption-multi-region/README.adoc","sha":"e5a0473d6016d77afb15c9ff8dd52c84f57c29e9"},{"name":"main.tf","path":"modules/ebs-encryption-multi-region/main.tf","sha":"166c1ac1bb91a628e0101c272fca4f326ea7c140"},{"name":"outputs.tf","path":"modules/ebs-encryption-multi-region/outputs.tf","sha":"c893f16d9e4553b82e6292fa7654d8d6ff3a309e"},{"name":"variables.autogen.tf","path":"modules/ebs-encryption-multi-region/variables.autogen.tf","sha":"e016bd3d20f933e3b802d5facfd9665055f5140b"},{"name":"variables.tf","path":"modules/ebs-encryption-multi-region/variables.tf","sha":"4bb22b9bb519462a429baea8ffea9d1a3991be26"}]},{"name":"ebs-encryption","children":[{"name":"README.md","path":"modules/ebs-encryption/README.md","sha":"f9f23a71b7725648a9fdc9300de92d38014e6f63"},{"name":"main.tf","path":"modules/ebs-encryption/main.tf","sha":"98b054e849423139b263ff1d934aa5b0cbdf6a8e"},{"name":"outputs.tf","path":"modules/ebs-encryption/outputs.tf","sha":"6caa6eba337ae7aa9ad7db82dbd2cf6223f42cb9"},{"name":"variables.tf","path":"modules/ebs-encryption/variables.tf","sha":"d47c23a0c98c7561fcf0d95fa22fc40b34182bf9"}]},{"name":"fail2ban","children":[{"name":"README.md","path":"modules/fail2ban/README.md","sha":"e4cd7c70b170022b2e306289d4e8b949c58dd6ab"},{"name":"install-scripts","children":[{"name":"cloudwatch-metric.conf","path":"modules/fail2ban/install-scripts/cloudwatch-metric.conf","sha":"b2fb301180aeb253f5168a6fedd3e5c44b6938ff"},{"name":"configure-fail2ban","path":"modules/fail2ban/install-scripts/configure-fail2ban","sha":"63463897dedf4e7272d448395271799c0edf9d69"},{"name":"fail2ban.local","path":"modules/fail2ban/install-scripts/fail2ban.local","sha":"ea80bf8058a1f9bb1a80a59031981b2a37445750"},{"name":"filters.sshd.amazon.conf","path":"modules/fail2ban/install-scripts/filters.sshd.amazon.conf","sha":"093bb1baf88a1e283a43b7dd7d04c64992abecc6"},{"name":"jail.amazon.local","path":"modules/fail2ban/install-scripts/jail.amazon.local","sha":"1284b66ca5a007b77a40c27b66662425e7fe8c91"},{"name":"jail.amazon2.local","path":"modules/fail2ban/install-scripts/jail.amazon2.local","sha":"8f0285c493c406aa0db98f40b8bf9aa238f52353"},{"name":"jail.ubuntu.local","path":"modules/fail2ban/install-scripts/jail.ubuntu.local","sha":"b3485d20a2b1fad7949167d30eff2b4caf357d81"}]},{"name":"install.sh","path":"modules/fail2ban/install.sh","sha":"8f7b536f08506dabc2f6beb6cd5a50f7282168aa"},{"name":"user-data-scripts","children":[{"name":"configure-fail2ban-cloudwatch.sh","path":"modules/fail2ban/user-data-scripts/configure-fail2ban-cloudwatch.sh","sha":"5c112c70c078b769f3ae31e71334499d0e5be64a"}]}]},{"name":"guardduty-multi-region","children":[{"name":"README.adoc","path":"modules/guardduty-multi-region/README.adoc","sha":"323324013062ff37a109648efa1b19f4ce550c3f"},{"name":"main.tf","path":"modules/guardduty-multi-region/main.tf","sha":"e1eacacd985a8bfea8d6528765e8cd17bf381a98"},{"name":"outputs.tf","path":"modules/guardduty-multi-region/outputs.tf","sha":"97556ebe7a5ae7ac9e53adf3ca8626b1512a3148"},{"name":"variables.autogen.tf","path":"modules/guardduty-multi-region/variables.autogen.tf","sha":"05bf9410cb4878450e9e67b90b202437a7458a04"},{"name":"variables.tf","path":"modules/guardduty-multi-region/variables.tf","sha":"a603806b6a10a93ebfa94b96e27709422b2c3d09"}]},{"name":"guardduty","children":[{"name":"README.adoc","path":"modules/guardduty/README.adoc","sha":"b866989f311213f4ed8e7ce12239f594ec162a14"},{"name":"core-concepts.md","path":"modules/guardduty/core-concepts.md","sha":"2eab0fd6c0548ba11104b6d778eb224df5622886"},{"name":"main.tf","path":"modules/guardduty/main.tf","sha":"57678a458161d73371af54c752654ddfcf7127eb"},{"name":"outputs.tf","path":"modules/guardduty/outputs.tf","sha":"0fd6fdc76d8bc1bb4c544028c802248999d309f7"},{"name":"variables.tf","path":"modules/guardduty/variables.tf","sha":"2deeb1952d1acbb8e8b2973b1f5c98443e534906"}]},{"name":"iam-access-analyzer-multi-region","children":[{"name":"README.adoc","path":"modules/iam-access-analyzer-multi-region/README.adoc","sha":"4369e9c55396a3b98ff72202535f2f20709ae31e"},{"name":"core-concepts.md","path":"modules/iam-access-analyzer-multi-region/core-concepts.md","sha":"6bbaac3d7e62744e3fe3f511cd4ae78b212d08a8"},{"name":"main.tf","path":"modules/iam-access-analyzer-multi-region/main.tf","sha":"5fbb86b6d2ac266e1d94d232f0256c534f899632"},{"name":"outputs.tf","path":"modules/iam-access-analyzer-multi-region/outputs.tf","sha":"0a4379e38beae72541e7e975f297584db7e98b04"},{"name":"variables.autogen.tf","path":"modules/iam-access-analyzer-multi-region/variables.autogen.tf","sha":"5fe91b51970b05ebc2fdbf4542a806e8c3f792f4"},{"name":"variables.tf","path":"modules/iam-access-analyzer-multi-region/variables.tf","sha":"6e8d81aac5af0cba584e6d0884e03cfbc23ba07f"}]},{"name":"iam-groups","children":[{"name":"README.md","path":"modules/iam-groups/README.md","sha":"07820342d38caf90b08a1ff0df904298ed132c8f"},{"name":"_docs","children":[{"name":"iam-user-access-to-billing.png","path":"modules/iam-groups/_docs/iam-user-access-to-billing.png","sha":"063f6cf8dc766b4d44942de89660e8ab9e1f3d63"},{"name":"my-account.png","path":"modules/iam-groups/_docs/my-account.png","sha":"387320200ed756ce4191afef87f0ab76e2c3d89a"}]},{"name":"main.tf","path":"modules/iam-groups/main.tf","sha":"eaf99bed4f5971389dae1ef2ab28e88bb4df4d12"},{"name":"outputs.tf","path":"modules/iam-groups/outputs.tf","sha":"0fc97269b51e6c51647aa5420198d1d11c5afa37"},{"name":"variables.tf","path":"modules/iam-groups/variables.tf","sha":"b44cce3a58cf651cfa37ead33156b3b794021a40"}]},{"name":"iam-policies","children":[{"name":"README.md","path":"modules/iam-policies/README.md","sha":"0297e14a7dfdf5727d9be5ab4f47dcf67357b247"},{"name":"main.tf","path":"modules/iam-policies/main.tf","sha":"cdd8f950eb7d220473207cf0c88144c1b4c64bd6"},{"name":"outputs.tf","path":"modules/iam-policies/outputs.tf","sha":"19511cfc28b22103cb164c6df8b5b530e7e3e172"},{"name":"variables.tf","path":"modules/iam-policies/variables.tf","sha":"8801af9087c945960705d082a2325200f78dfceb"}]},{"name":"iam-user-password-policy","children":[{"name":"README.md","path":"modules/iam-user-password-policy/README.md","sha":"5bea6ba56fc796be5b860549156a3a251735fc2a"},{"name":"main.tf","path":"modules/iam-user-password-policy/main.tf","sha":"a509682885ea58b7472501b6060d2ac17d2994df"},{"name":"outputs.tf","path":"modules/iam-user-password-policy/outputs.tf","sha":"825547bd9d41fed1cc1b3506c17f81c48b1bfd1a"},{"name":"variables.tf","path":"modules/iam-user-password-policy/variables.tf","sha":"568582c249e3cfd7899ea23b8b58e43328c9d100"}]},{"name":"iam-users","children":[{"name":"README.md","path":"modules/iam-users/README.md","sha":"ba9c492fc1bf7cd9f3d394b1f46c792cbf7e7a0c"},{"name":"main.tf","path":"modules/iam-users/main.tf","sha":"cbb2dfccbf212f19804596cbbaea0e10ea1aa65a"},{"name":"outputs.tf","path":"modules/iam-users/outputs.tf","sha":"4d053caccca2412befcf956c94e908b2d5c89054"},{"name":"variables.tf","path":"modules/iam-users/variables.tf","sha":"8c5e1b87fe56c886a91463c0f868dfe8e862e23c"}]},{"name":"ip-lockdown","children":[{"name":"README.md","path":"modules/ip-lockdown/README.md","sha":"7ec92da38b5b06af9e61ab164bb6b4b0470ed92a"},{"name":"install.sh","path":"modules/ip-lockdown/install.sh","sha":"ce61af763bee9ad29754220ae24521f22c3a956f"},{"name":"ip-lockdown","path":"modules/ip-lockdown/ip-lockdown","sha":"93a0e1f5876e7de5778c595e8801d64986cb118b"}]},{"name":"kms-grant-multi-region","children":[{"name":"README.adoc","path":"modules/kms-grant-multi-region/README.adoc","sha":"5153cd1b29383651e37148162dc4c110e2f244d7"},{"name":"core-concepts.md","path":"modules/kms-grant-multi-region/core-concepts.md","sha":"3eb1725fa927a84cc2a0341335d150bf5c6e70f5"},{"name":"main.tf","path":"modules/kms-grant-multi-region/main.tf","sha":"dd06dd311156f7ea2a77a006b201191cf87e3bd6"},{"name":"outputs.tf","path":"modules/kms-grant-multi-region/outputs.tf","sha":"b9d84078afacb154536292bddba4afbd6c9158c2"},{"name":"variables.autogen.tf","path":"modules/kms-grant-multi-region/variables.autogen.tf","sha":"185d6c42c1ab4843292b2c911e057303ae971739"},{"name":"variables.tf","path":"modules/kms-grant-multi-region/variables.tf","sha":"505b2d0cb9ecf78f0364e845cab72bf0c28365d5"}]},{"name":"kms-master-key-multi-region","children":[{"name":"README.adoc","path":"modules/kms-master-key-multi-region/README.adoc","sha":"b847d63c0f20e0e2d3d150d9efc603e73bcd4a01"},{"name":"main.tf","path":"modules/kms-master-key-multi-region/main.tf","sha":"063bd5f44d8bea1d4370299fc422c1a9ccad4063"},{"name":"outputs.tf","path":"modules/kms-master-key-multi-region/outputs.tf","sha":"3152f6b44214be5006f9cbb225bcb413096a3c64"},{"name":"variables.autogen.tf","path":"modules/kms-master-key-multi-region/variables.autogen.tf","sha":"fd024d55097a7eee5fbb6ffc65b376fbdfe57c89"},{"name":"variables.tf","path":"modules/kms-master-key-multi-region/variables.tf","sha":"146f394a213942a53c254efafeea96a0ac958418"}]},{"name":"kms-master-key","children":[{"name":"README.md","path":"modules/kms-master-key/README.md","sha":"1b43a005494f12b05551adb020a31726f28e10d3"},{"name":"main.tf","path":"modules/kms-master-key/main.tf","sha":"a6f4518d6cad334b50813edeb9035525d473b364"},{"name":"outputs.tf","path":"modules/kms-master-key/outputs.tf","sha":"4d0dbba81e8186243d96a8325a5f643d87543451"},{"name":"variables.tf","path":"modules/kms-master-key/variables.tf","sha":"4b4f49c17034d827f23175cbb712ff757ae7c34f"}]},{"name":"ntp","children":[{"name":"README.md","path":"modules/ntp/README.md","sha":"31112a11cff027ba074d454f5a23c5ce3e839c11"},{"name":"install.sh","path":"modules/ntp/install.sh","sha":"a8b042233bc89629c31b82a9433c013b709b8d82"}]},{"name":"os-hardening","children":[{"name":"README.md","path":"modules/os-hardening/README.md","sha":"3e864b0e9208eb6809adf41968c51e02fc233ee1"},{"name":"_docs","children":[{"name":"Helpful Email.md","path":"modules/os-hardening/_docs/Helpful Email.md","sha":"246a0b80b29f5ff3d2b2f4c5c170fc927e2d9dd7"}]},{"name":"ami-builder","children":[{"name":"files","children":[{"name":"user-data.sh.template","path":"modules/os-hardening/ami-builder/files/user-data.sh.template","sha":"4a3c87a19e1a4caa20b9b425b2a02101566d1166"}]},{"name":"main.tf","path":"modules/os-hardening/ami-builder/main.tf","sha":"2c51b52c84551d372e1fa8149f230ff9bf047f16"},{"name":"outputs.tf","path":"modules/os-hardening/ami-builder/outputs.tf","sha":"8ce2ee598124ca50dd530a33aa60f5d1452a4a2b"},{"name":"variables.tf","path":"modules/os-hardening/ami-builder/variables.tf","sha":"d760f34eeae322790865c1cb30dfe20d0225328f"}]},{"name":"partition-scripts","children":[{"name":"README.md","path":"modules/os-hardening/partition-scripts/README.md","sha":"b55df29c7a3d6dc3ecbbbfe4ab4b8749f053f00b"},{"name":"bin","children":[{"name":"cleanup-volume","path":"modules/os-hardening/partition-scripts/bin/cleanup-volume","sha":"c7cbf3ecebd915235238557d27a1ce25e6fc10fa"},{"name":"partition-volume","path":"modules/os-hardening/partition-scripts/bin/partition-volume","sha":"f4f8566a1ef6aa4ff0c0268bd28721488aa6dfc4"}]},{"name":"install.sh","path":"modules/os-hardening/partition-scripts/install.sh","sha":"606776c068260836e8612a681ff4e3edc8abdb41"}]}]},{"name":"private-s3-bucket","children":[{"name":"README.md","path":"modules/private-s3-bucket/README.md","sha":"7509895be4dfe2f9777b97568c84517e3bb43058"},{"name":"main.tf","path":"modules/private-s3-bucket/main.tf","sha":"8f9a78d2ac33a31802f129b07f46e211f90c6b46"},{"name":"mfa-delete-script","children":[{"name":"mfa-delete.sh","path":"modules/private-s3-bucket/mfa-delete-script/mfa-delete.sh","sha":"7dbcc65412467a036756562024cfc84ad128b215"}]},{"name":"outputs.tf","path":"modules/private-s3-bucket/outputs.tf","sha":"f2ab2237674b888d45bbede9f9b6f0dafe7471ea"},{"name":"variables.tf","path":"modules/private-s3-bucket/variables.tf","sha":"f93fad336592825bfedc8a9f52aaa279332ee4ce"}]},{"name":"saml-iam-roles","children":[{"name":"README.md","path":"modules/saml-iam-roles/README.md","sha":"5ebc8c20f781a0f0b5654decdcf9bd607fee65b3"},{"name":"main.tf","path":"modules/saml-iam-roles/main.tf","sha":"89361b2fe811d53a9b9c748aca3c6d1024d14010"},{"name":"outputs.tf","path":"modules/saml-iam-roles/outputs.tf","sha":"c579901907b216c55e4c815d28f0a22171a960e6"},{"name":"variables.tf","path":"modules/saml-iam-roles/variables.tf","sha":"1f3f26ade9fd75d8e66ba12649f45d075b5e0f2b"}]},{"name":"secrets-manager-resource-policies","children":[{"name":"README.md","path":"modules/secrets-manager-resource-policies/README.md","sha":"b894ce3171c28ae91acbfe6bdcec35615c599bbb"},{"name":"main.tf","path":"modules/secrets-manager-resource-policies/main.tf","sha":"94b0a2223f7d93614123b2a0c10c5590ccd895d0"},{"name":"outputs.tf","path":"modules/secrets-manager-resource-policies/outputs.tf","sha":"8b237f325d54b84ac2453e8945f61cdf0d24b41b"},{"name":"variables.tf","path":"modules/secrets-manager-resource-policies/variables.tf","sha":"2b45ef099c805c1265e5dc611c138de4a40141eb"}]},{"name":"ssh-grunt-selinux-policy","children":[{"name":"README.md","path":"modules/ssh-grunt-selinux-policy/README.md","sha":"53f02f57185efebc35d6ebfe156ce73d02a5f112"},{"name":"install.sh","path":"modules/ssh-grunt-selinux-policy/install.sh","sha":"3de871d61a9990e7f2c130f23afaf00daeb6bbef"},{"name":"ssh-grunt.pp","path":"modules/ssh-grunt-selinux-policy/ssh-grunt.pp","sha":"7c7050f812cd0e3cb34e37b88c35fb09f369be7d"},{"name":"ssh-grunt.te","path":"modules/ssh-grunt-selinux-policy/ssh-grunt.te","sha":"3317a71feaa633662a00b1dc05b1176cb85c9793"}]},{"name":"ssh-grunt","children":[{"name":".dockerignore","path":"modules/ssh-grunt/.dockerignore","sha":"a725465aee245635a2bd129af54858ed32c84cb8"},{"name":"Dockerfile","path":"modules/ssh-grunt/Dockerfile","sha":"95acbc9a8a04bf1e5dcf7ef92578bbbdc3574b9d"},{"name":"README.adoc","path":"modules/ssh-grunt/README.adoc","sha":"e63d38d35d3e84783818f799a158e343ac7cb97a"},{"name":"_ci","children":[{"name":"build-and-test.sh","path":"modules/ssh-grunt/_ci/build-and-test.sh","sha":"903993de2d7bcde19d472fa5e510ee862d4b10c3"},{"name":"test.sh","path":"modules/ssh-grunt/_ci/test.sh","sha":"235603944316e81f1da1cc0248b80beecf99cb27"}]},{"name":"_docs","children":[{"name":"houston-upload-ssh-key.png","path":"modules/ssh-grunt/_docs/houston-upload-ssh-key.png","sha":"e32519497262f9796a4ea46c53953923975cbd7d"},{"name":"iam-upload-ssh-key.png","path":"modules/ssh-grunt/_docs/iam-upload-ssh-key.png","sha":"8bb1e793185eb0b4822023552899874394342f21"}]},{"name":"core-concepts.md","path":"modules/ssh-grunt/core-concepts.md","sha":"8c7b359b4fbfd52aa18124efe06f1304edbf2db2"},{"name":"docker-compose.yml","path":"modules/ssh-grunt/docker-compose.yml","sha":"74a2c67f6b9dc838ff3bd9c9c5aa68c813db1f0d"},{"name":"go.mod","path":"modules/ssh-grunt/go.mod","sha":"269b088eee99537b10fcd44d9f129da65cb34a8a"},{"name":"go.sum","path":"modules/ssh-grunt/go.sum","sha":"9c21e75d8e59393633a732fe8b646daedf4ac139"},{"name":"scripts","children":[{"name":"build-linux-binary.sh","path":"modules/ssh-grunt/scripts/build-linux-binary.sh","sha":"2d91cbed3db40f419e6a440ce2735b9d3f2d048b"},{"name":"run.sh","path":"modules/ssh-grunt/scripts/run.sh","sha":"050027e034cd03e53625986eb0f331c043492cf6"}]},{"name":"src","children":[{"name":"cli.go","path":"modules/ssh-grunt/src/cli.go","sha":"d12bfb946f3c5268afbc9ac012134e831b2a3ec7"},{"name":"cli_test.go","path":"modules/ssh-grunt/src/cli_test.go","sha":"3925077baf4f54a539d135de17956f4f252ab5cf"},{"name":"collections.go","path":"modules/ssh-grunt/src/collections.go","sha":"aa9b67f00f57088f9bf4e129dcc53003524dd0a7"},{"name":"cron.go","path":"modules/ssh-grunt/src/cron.go","sha":"4ceb8efd0cdf51b5170bb152b6824fc54f8d429c"},{"name":"cron_test.go","path":"modules/ssh-grunt/src/cron_test.go","sha":"c56766eda2ee2201589796292fd0bb6416a6e0b3"},{"name":"ec2_instance_connect.go","path":"modules/ssh-grunt/src/ec2_instance_connect.go","sha":"99c31ddd2ee34d18dd9e676ec22eef5eebc3187f"},{"name":"errors.go","path":"modules/ssh-grunt/src/errors.go","sha":"1175435b45a980a5ff23dd4bdc880b4d63b24d79"},{"name":"file.go","path":"modules/ssh-grunt/src/file.go","sha":"eb991fd15ac2c3660313e6d4c5669b36ccc9cc21"},{"name":"groups.go","path":"modules/ssh-grunt/src/groups.go","sha":"49e569a80abb6306ab0f7fd79c810d2e2ad8ab3a"},{"name":"groups_test.go","path":"modules/ssh-grunt/src/groups_test.go","sha":"b060ded1c37d1b636b7dc59d5071049e640d00e7"},{"name":"houston.go","path":"modules/ssh-grunt/src/houston.go","sha":"d307bc1372ec78219d20222e972c1e3892fd29b0"},{"name":"houston_test.go","path":"modules/ssh-grunt/src/houston_test.go","sha":"82a9b2d2d41e09b6949897ed989a483fc7e0a650"},{"name":"iam.go","path":"modules/ssh-grunt/src/iam.go","sha":"dafbc8fbb732d2d6212cade786eb13d7215b9862"},{"name":"iam_test.go","path":"modules/ssh-grunt/src/iam_test.go","sha":"0382c08562fc329876267cf944195f3d8c8738be"},{"name":"logger.go","path":"modules/ssh-grunt/src/logger.go","sha":"93095ba8216709b3178fcc44a76421a765f4e302"},{"name":"main.go","path":"modules/ssh-grunt/src/main.go","sha":"a89d9402d32d371dc9b945ab9c72996808d17b85"},{"name":"shell.go","path":"modules/ssh-grunt/src/shell.go","sha":"7f49eeee4119efde0bd58d7c78fd4ef785dc5f6c"},{"name":"ssh.go","path":"modules/ssh-grunt/src/ssh.go","sha":"8e6b62d6c33279aaf5af6cabacd0afc4d186ca97"},{"name":"ssh_test.go","path":"modules/ssh-grunt/src/ssh_test.go","sha":"d0dee4b55d3cfc7a1c06bed3cfedeeae07b660c5"},{"name":"string.go","path":"modules/ssh-grunt/src/string.go","sha":"fc61ca9625f9d654c2b3576ff932db1b90ae9dfe"},{"name":"string_test.go","path":"modules/ssh-grunt/src/string_test.go","sha":"752aaaa776d25ff8a3e694588edb3e7c0ce4eb27"},{"name":"sync.go","path":"modules/ssh-grunt/src/sync.go","sha":"7c2f9ff292b484a7ca1ab14e1bbd558cd24553f2"},{"name":"sync_test.go","path":"modules/ssh-grunt/src/sync_test.go","sha":"09dd89b492cc7373c49b8b2fc16b17914065340f"},{"name":"url.go","path":"modules/ssh-grunt/src/url.go","sha":"0af5ddc5f3e27af95d6f6ddd41acf0c229962f7f"},{"name":"url_test.go","path":"modules/ssh-grunt/src/url_test.go","sha":"95e062eaaca09900949e0352fffc7b6f9a3524cc"},{"name":"users.go","path":"modules/ssh-grunt/src/users.go","sha":"6c3a8a22006a91656fcc5fd31d684271cdf129e3"},{"name":"users_test.go","path":"modules/ssh-grunt/src/users_test.go","sha":"e695204896bae7436e20a6615a484ae4cc6cf2f7"}]}]},{"name":"ssh-iam","children":[{"name":"README.md","path":"modules/ssh-iam/README.md","sha":"4aa06d6a729e53384b6d2a43c06ee38807092f32"}]},{"name":"ssm-healthchecks-iam-permissions","children":[{"name":"README.md","path":"modules/ssm-healthchecks-iam-permissions/README.md","sha":"0a97288d14b005662ae642819eeadb2aaff24534"},{"name":"main.tf","path":"modules/ssm-healthchecks-iam-permissions/main.tf","sha":"9df8e178834dfc3c26bf4601bab0c02b1ee5589a"},{"name":"variables.tf","path":"modules/ssm-healthchecks-iam-permissions/variables.tf","sha":"36778c58999e05f20468d118f22e8c9d754b1a4d"}]},{"name":"tls-cert-private","children":[{"name":"Dockerfile","path":"modules/tls-cert-private/Dockerfile","sha":"bc6b1c28764936758a47ceedccf790b56200d6cf"},{"name":"README.md","path":"modules/tls-cert-private/README.md","sha":"c6996ec25d7d9b1ab4f79d8164a14e86e1ac844f"},{"name":"docker-compose.yml","path":"modules/tls-cert-private/docker-compose.yml","sha":"f872026e8d51ceaab2e1c11cc9cf9c35ba81f29c"},{"name":"files","children":[{"name":"openssl.cnf","path":"modules/tls-cert-private/files/openssl.cnf","sha":"2542542c80ab180c47d3e0a27dbded65bed572de"}]},{"name":"scripts","children":[{"name":"generate-ca-keypair.sh","path":"modules/tls-cert-private/scripts/generate-ca-keypair.sh","sha":"395ee97c0e499c660efac5c5cf1f79dfcdbb69f8"},{"name":"generate-tls-keypair.sh","path":"modules/tls-cert-private/scripts/generate-tls-keypair.sh","sha":"f1c3577437fd589087704a9c003de416cb87d232"},{"name":"main.sh","path":"modules/tls-cert-private/scripts/main.sh","sha":"dc7af965ffb783bbef449010818e69294fa2ef75"}]}]}],"toggled":true},{"name":"terraform-cloud-enterprise-private-module-registry-placeholder.tf","path":"terraform-cloud-enterprise-private-module-registry-placeholder.tf","sha":"ae586c0fe830819580e1009d41a9074f16e65bed"},{"name":"test","children":[{"name":"README.md","path":"test/README.md","sha":"b44e2152ea21d65a8c51bb58321e18ec7527c22e"},{"name":"common","children":[{"name":"test_helpers.go","path":"test/common/test_helpers.go","sha":"b82af694aca94d4cae4606e2c5fa3b1244d8a3db"}]},{"name":"go.mod","path":"test/go.mod","sha":"f36044aa9204d8467c2f16ba855cc1309e4f97e0"},{"name":"go.sum","path":"test/go.sum","sha":"26a9de4c5e22e7f032c7f64869adb0853aa920e9"},{"name":"landingzone","children":[{"name":"aws_config_rules_test.go","path":"test/landingzone/aws_config_rules_test.go","sha":"e198464d094ef43a2ff5dc85da38c6cfc3d92fa8"},{"name":"aws_config_test.go","path":"test/landingzone/aws_config_test.go","sha":"706ddef05170ecfa720e9be7a9b2f9ae1c7a593e"},{"name":"aws_organizations_test.go","path":"test/landingzone/aws_organizations_test.go","sha":"7f4e93e798860d91f590c22cfa2efde0bf4777ac"},{"name":"ebs_encryption_multi_region_test.go","path":"test/landingzone/ebs_encryption_multi_region_test.go","sha":"d871d48ac13e4b36e9f05eccf90e9462d2c985e7"},{"name":"guardduty_test.go","path":"test/landingzone/guardduty_test.go","sha":"ed834a9d3755438fce630f73b79d730797b9e653"},{"name":"iam_access_analyzer_multiregion_test.go","path":"test/landingzone/iam_access_analyzer_multiregion_test.go","sha":"bc8233bf962282e84b1a3bcf1fc88a0267531e7a"},{"name":"kms_grant_multiregion_test.go","path":"test/landingzone/kms_grant_multiregion_test.go","sha":"dacdaaef67b5b2b849d6c1bc54bccb3f89e1f008"},{"name":"kms_master_key_multiregion_test.go","path":"test/landingzone/kms_master_key_multiregion_test.go","sha":"01796cd61c445b3d3f4f4b99faa4164a3cd93677"},{"name":"test_helpers.go","path":"test/landingzone/test_helpers.go","sha":"36d75ca20f1d1040a91d85c71b2133b92acfab3f"}]},{"name":"security","children":[{"name":"auto_update_test.go","path":"test/security/auto_update_test.go","sha":"b0bf3c446844977c5eeec5f43b49de7c6788f47a"},{"name":"cloudtrail_test.go","path":"test/security/cloudtrail_test.go","sha":"944ac0b5c5aa56a9a2ae09c729063a52164fbb21"},{"name":"cross_account_iam_roles_test.go","path":"test/security/cross_account_iam_roles_test.go","sha":"66aa70cfbb568e0a0b0d7dd9670474b5b07f8ce4"},{"name":"custom_iam_entity_test.go","path":"test/security/custom_iam_entity_test.go","sha":"9ae30fb42b8d878ab87b336d071ff05ec8ddbbf4"},{"name":"fail2ban_test.go","path":"test/security/fail2ban_test.go","sha":"f6425c375c96455e39c85d0df8b830beff839791"},{"name":"iam_groups_test.go","path":"test/security/iam_groups_test.go","sha":"f94998fd90b8f1e64ffb62e911274fd603e13d75"},{"name":"iam_ssm_test.go","path":"test/security/iam_ssm_test.go","sha":"28a81aab9873bb6bd02d2f37bdc3ef9c7f27b3c5"},{"name":"iam_user_password_policy_test.go","path":"test/security/iam_user_password_policy_test.go","sha":"5a44f18c469c936fa51b4e9d7911404e1ab76a0f"},{"name":"iam_users_test.go","path":"test/security/iam_users_test.go","sha":"d907c9a37de8e6b7a21d1a96d3c1db238695e303"},{"name":"ip-lockdown-test-scripts","children":[{"name":"allow-several-users.sh","path":"test/security/ip-lockdown-test-scripts/allow-several-users.sh","sha":"2f75dbe0880ed0907b43db58b6ac030a0d0e9bd4"},{"name":"common.sh","path":"test/security/ip-lockdown-test-scripts/common.sh","sha":"cdfe11aca76607a4feaf254a394f32273b738c5c"},{"name":"index.html","path":"test/security/ip-lockdown-test-scripts/index.html","sha":"557db03de997c86a4a028e1ebd3a1ceb225be238"},{"name":"restrict-all-users.sh","path":"test/security/ip-lockdown-test-scripts/restrict-all-users.sh","sha":"a37c1ffc90f2532e7cc3f9f5a859b75c98661dc6"},{"name":"restrict-one-user.sh","path":"test/security/ip-lockdown-test-scripts/restrict-one-user.sh","sha":"4214e1c15102f4568d1e995aa82add46ee430237"},{"name":"sanity-check.sh","path":"test/security/ip-lockdown-test-scripts/sanity-check.sh","sha":"542ed72f4f0952ace67c9cbf2e5ac07e81e6870c"}]},{"name":"ip_lockdown_test.go","path":"test/security/ip_lockdown_test.go","sha":"7c560698928bacec9590ecc770c71daf969643a7"},{"name":"kms_master_key_test.go","path":"test/security/kms_master_key_test.go","sha":"751dfa23eaa391b567f023c6d1a12a4400a55c28"},{"name":"ntp_test.go","path":"test/security/ntp_test.go","sha":"372edab033e653c151b1c2e3b10d9bc13229515c"},{"name":"os_hardening_test.go","path":"test/security/os_hardening_test.go","sha":"ced303f74cd6908bbd8837cc99f317293707ab30"},{"name":"private_s3_bucket_test.go","path":"test/security/private_s3_bucket_test.go","sha":"dfdf79a436c14c32a06ca6c804397e837c1e46d0"},{"name":"saml_iam_roles_test.go","path":"test/security/saml_iam_roles_test.go","sha":"efbe2f3e6e9b0da73d1fb58fccc5f5fc1427a61f"},{"name":"secrets_manager_resource_policies_test.go","path":"test/security/secrets_manager_resource_policies_test.go","sha":"07f69b66238517d1f8af61eb9751248372997b70"},{"name":"ssh_grunt_iam_test.go","path":"test/security/ssh_grunt_iam_test.go","sha":"3b0a2bb181d7de5c74cfec7746bc0982980db211"},{"name":"test_helpers.go","path":"test/security/test_helpers.go","sha":"c6a971f85a92baeca717a69ce7593126dfa8e86b"},{"name":"test_helpers_aws_auth.go","path":"test/security/test_helpers_aws_auth.go","sha":"de42c70f5e1b875f994b433cf94f1ff6bacc7de7"},{"name":"tls_cert_private_test.go","path":"test/security/tls_cert_private_test.go","sha":"70b2c873f20876497b4a1a0a030871e037dca995"}]},{"name":"validation","children":[{"name":"validate_all_modules_and_examples_test.go","path":"test/validation/validate_all_modules_and_examples_test.go","sha":"53877e64494aad3d4063e01c8009eee731e667c3"}]}]}]},"detailsContent":"<h1 class=\"preview__body--title\" id=\"last-pass-with-aws\">LastPass with AWS</h1><div class=\"preview__body--border\"></div><h2 class=\"preview__body--subtitle\" id=\"aws-auth-script\"><code>aws-auth</code> script</h2>\n<p>Before reading these instructions, go through setting up <code>aws-auth</code> and understanding the <a href=\"/repos/terraform-aws-security/modules/aws-auth/README.md\" class=\"preview__body--description--blue\">aws-auth workflow</a>.</p>\n<h2 class=\"preview__body--subtitle\" id=\"combining-it-with-last-pass\">Combining it with LastPass</h2>\n<p>If you've read the <a href=\"/repos/terraform-aws-security/modules/aws-auth/README.md\" class=\"preview__body--description--blue\">aws-auth README</a>, you'll find that using <code>aws-auth</code> isn't <em>really</em> a one-liner, since you have to set your permanent AWS credentials first:</p>\n<pre>export AWS_ACCESS_KEY_ID='<PERMANENT_ACCESS_KEY>'\nexport AWS_SECRET_ACCESS_KEY='<PERMANENT_SECRET_KEY>'\neval <span class=\"hljs-constructor\">$(<span class=\"hljs-params\">aws</span>-<span class=\"hljs-params\">auth</span> --<span class=\"hljs-params\">serial</span>-<span class=\"hljs-params\">number</span> <span class=\"hljs-params\">arn</span>:<span class=\"hljs-params\">aws</span>:<span class=\"hljs-params\">iam</span>::123456789011:<span class=\"hljs-params\">mfa</span><span class=\"hljs-operator\">/</span><span class=\"hljs-params\">jondoe</span> --<span class=\"hljs-params\">token</span>-<span class=\"hljs-params\">code</span> 123456)</span>\n</pre>\n<p>If you store your secrets in a CLI-friendly password manager, such as <a href=\"https://github.com/lastpass/lastpass-cli\" class=\"preview__body--description--blue\" target=\"_blank\">lpass</a> or <a href=\"/repos/terraform-aws-security/modules/aws-auth#combining-it-with-password-managers\" class=\"preview__body--description--blue\">pass</a>,\nthen you can reduce this even further!</p>\n<p>If needed, you can create a LastPass account and install the client from <a href=\"https://www.lastpass.com/\" class=\"preview__body--description--blue\" target=\"_blank\">here</a>. The CLI client can be installed from <a href=\"https://github.com/lastpass/lastpass-cli\" class=\"preview__body--description--blue\" target=\"_blank\">here</a>.</p>\n<h4 id=\"create-templates\">Create templates</h4>\n<p>First, store your permanent AWS credentials in <code>lpass</code>. I'm sure there are multiple ways this can be done but I created a\ncustom note and stored all user account information in it.</p>\n<ol>\n<li>Open your LastPass Vault > Secure Notes > click on the (+) sign > Add Secure Note.</li>\n<li>Change "Note Type:" to "Add Custom Template".</li>\n<li>Give it a name like "AWS Security Credentials".</li>\n<li>Start adding fields.</li>\n<li>Save the template when complete.</li>\n</ol>\n<p>Fields I used were:</p>\n<table>\n<thead>\n<tr>\n<th>Field Name</th>\n<th style=\"text-align:right\">Field Type</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>User ID (IAM)</td>\n<td style=\"text-align:right\">Text</td>\n</tr>\n<tr>\n<td>Account Name</td>\n<td style=\"text-align:right\">Text</td>\n</tr>\n<tr>\n<td>Account Number</td>\n<td style=\"text-align:right\">Text</td>\n</tr>\n<tr>\n<td>Access Key ID</td>\n<td style=\"text-align:right\">Text with copy button</td>\n</tr>\n<tr>\n<td>Secret Access Key</td>\n<td style=\"text-align:right\">Text with copy button</td>\n</tr>\n<tr>\n<td>MFA ARN</td>\n<td style=\"text-align:right\">Text with copy button</td>\n</tr>\n</tbody>\n</table>\n<p>Once that's complete, create a second note used to for storing lines of the script.</p>\n<ol>\n<li>Open your LastPass Vault > Secure Notes > click on the (+) sign > Add Secure Note.</li>\n<li>Change "Note Type:" to "Add Custom Template".</li>\n<li>Give it a name like "Script".</li>\n<li>Start adding fields.</li>\n<li>Save the template when complete.</li>\n</ol>\n<p>Fields I used were:</p>\n<table>\n<thead>\n<tr>\n<th>Field Name</th>\n<th style=\"text-align:right\">Field Type</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>Param1</td>\n<td style=\"text-align:right\">Text</td>\n</tr>\n<tr>\n<td>Param2</td>\n<td style=\"text-align:right\">Text</td>\n</tr>\n<tr>\n<td>Param3</td>\n<td style=\"text-align:right\">Text</td>\n</tr>\n<tr>\n<td>Param4</td>\n<td style=\"text-align:right\">Text</td>\n</tr>\n</tbody>\n</table>\n<h4 id=\"save-secrets-and-script-parameters-in-last-pass\">Save secrets and script parameters in LastPass</h4>\n<p>Create a new Secure Note using the "AWS Security Credentials" template. Store your User ID ARN, Account Name, Account Number,\nAccess Key ID, Secret Access Key, and MFA ARN in that. Custom templates can't be added from the <code>lpass</code> cli so this has to be\ndone within the LastPass GUI.</p>\n<pre>$ lpass show aws-johndoe\nFoldername/aws-johndoe [id: 1234567890123456]\nMFA ARN: arn:aws:iam::123456789012:mfa/johndoe<span class=\"hljs-built_in\">\nSecret </span>Access Key: JOHNDOERANDOMSECRETACCESSKEY\nAccess Key ID: JOHNDOEACCESSKEYID\nAccount Number: 123456789012\nAccount Name: Security<span class=\"hljs-built_in\">\nUser </span>ID (IAM): arn:aws:iam::123456789012:user/johndoe\nNoteType: Custom\n</pre>\n<p>If you will be assuming an IAM Role ARN, put that in <code>lpass</code> too:</p>\n<pre>lpass add aws-johndoe-role-arn-otheraccount\nUsername: eval <span class=\"hljs-constructor\">$(AWS_ACCESS_KEY_ID=$(<span class=\"hljs-params\">lpass</span> <span class=\"hljs-params\">show</span> <span class=\"hljs-params\">aws</span>-<span class=\"hljs-params\">johndoe</span> --<span class=\"hljs-params\">field</span> <span class=\"hljs-string\">\"Access Key ID\"</span>)</span> AWS_SECRET_ACCESS_KEY=<span class=\"hljs-constructor\">$(<span class=\"hljs-params\">lpass</span> <span class=\"hljs-params\">show</span> <span class=\"hljs-params\">aws</span>-<span class=\"hljs-params\">johndoe</span> --<span class=\"hljs-params\">field</span> <span class=\"hljs-string\">\"Secret Access Key\"</span>)</span> aws-auth --serial-number <span class=\"hljs-constructor\">$(<span class=\"hljs-params\">lpass</span> <span class=\"hljs-params\">show</span> <span class=\"hljs-params\">aws</span>-<span class=\"hljs-params\">johndoe</span> --<span class=\"hljs-params\">field</span> <span class=\"hljs-string\">\"MFA ARN\"</span>)</span> --token-code <span class=\"hljs-string\">\"$token\"</span> --role-arn <span class=\"hljs-constructor\">$(<span class=\"hljs-params\">lpass</span> <span class=\"hljs-params\">show</span> <span class=\"hljs-params\">aws</span>-<span class=\"hljs-params\">johndoe</span>-<span class=\"hljs-params\">role</span>-<span class=\"hljs-params\">arn</span>-<span class=\"hljs-params\">otheraccount</span> --<span class=\"hljs-params\">password</span>)</span>)\nPassword: arn:aws:iam::<span class=\"hljs-number\">098765432109</span>:role/role-name\n</pre>\n<p><em>Note: For the IAM Role ARNs, I'm using the default <code>lpass</code> site template since I only need two fields and I can access it quickly with the CLI. The script with the <code>--role-arn</code> flag is saved as <code>Username</code> and the Role ARN is being saved as <code>Password</code>.</em></p>\n<h4 id=\"start-putting-the-script-together\">Start putting the script together</h4>\n<p>Now, we can start constructing our script in <code>lpass</code> that ties all of this together. Again, since this is a custom template, everything has to\nbe done within the LastPass console. Create a new Secure Note using the "Script" template.</p>\n<p>In the Param1 field, copy in:</p>\n<pre><span class=\"hljs-built_in\">read</span> -p <span class=\"hljs-string\">\"Enter your MFA token: \"</span> <span class=\"hljs-keyword\">token</span>\n</pre>\n<p><em>Note: The other ParamX fields were added for future use and not necessarily for this script.</em></p>\n<pre>$ lpass show aws-auth-security\nFoldername/aws-auth-security <span class=\"hljs-literal\">[<span class=\"hljs-identifier\">id</span>: <span class=\"hljs-number\">7056520004343215957</span>]</span>\nParam4:\nParam3:\nParam2: eval <span class=\"hljs-constructor\">$(AWS_ACCESS_KEY_ID=$(<span class=\"hljs-params\">lpass</span> <span class=\"hljs-params\">show</span> <span class=\"hljs-params\">aws</span>-<span class=\"hljs-params\">johndoe</span> --<span class=\"hljs-params\">field</span> <span class=\"hljs-string\">\"Access Key ID\"</span>)</span> AWS_SECRET_ACCESS_KEY=<span class=\"hljs-constructor\">$(<span class=\"hljs-params\">lpass</span> <span class=\"hljs-params\">show</span> <span class=\"hljs-params\">aws</span>-<span class=\"hljs-params\">johndoe</span> --<span class=\"hljs-params\">field</span> <span class=\"hljs-string\">\"Secret Access Key\"</span>)</span> aws-auth --serial-number <span class=\"hljs-constructor\">$(<span class=\"hljs-params\">lpass</span> <span class=\"hljs-params\">show</span> <span class=\"hljs-params\">aws</span>-<span class=\"hljs-params\">johndoe</span> --<span class=\"hljs-params\">field</span> <span class=\"hljs-string\">\"MFA ARN\"</span>)</span> --token-code <span class=\"hljs-string\">\"$token\"</span>)\nParam1: read -p <span class=\"hljs-string\">\"Enter your MFA token: \"</span> token\nNoteType: Custom\n</pre>\n<p>Now, to setup your temporary STS credentials so it is <em>truly</em> a one-liner!</p>\n<pre><span class=\"hljs-built_in\">eval</span> <span class=\"hljs-string\">\"<span class=\"hljs-variable\">$(lpass show aws-auth-security --field Param1; lpass show aws-auth-security --field Param2)</span>\"</span>\n</pre>\n<p><strong>Example</strong></p>\n<pre>$ eval <span class=\"hljs-string\">\"$(lpass show aws-auth-security --field Param1; lpass show aws-auth-security --field Param2)\"</span>\nEnter your MFA token: <span class=\"hljs-number\">123456</span>\n<span class=\"hljs-number\">2018</span><span class=\"hljs-number\">-01</span><span class=\"hljs-number\">-08</span> <span class=\"hljs-number\">16</span>:<span class=\"hljs-number\">35</span>:<span class=\"hljs-number\">18</span> [INFO] [aws-auth] Getting temporary credentials <span class=\"hljs-keyword\">and</span> token <span class=\"hljs-keyword\">for</span> MFA device arn:aws:iam::<span class=\"hljs-number\">123456789012</span>:mfa/johndoe\n<span class=\"hljs-number\">2018</span><span class=\"hljs-number\">-01</span><span class=\"hljs-number\">-08</span> <span class=\"hljs-number\">16</span>:<span class=\"hljs-number\">35</span>:<span class=\"hljs-number\">19</span> [INFO] [aws-auth] Success!\n</pre>\n<h4 id=\"alias-all-the-things\">Alias all the things!</h4>\n<p>But that's still a lot of typing. How about we alias that and all the additional IAM Role ARN possibilities? I keep all my aliases defined in <code>~/.bash_aliases</code>.</p>\n<p><em>Note: Remember that <code>aws-auth-otheraccount</code> requires we specify the <code>--role-arn</code> so we can switch to that role/account. In this example, all\nof that is stored in <code>lpass</code> as the secret <code>aws-johndoe-role-arn-otheraccount</code>. The <code>Username</code> field contains the script and the <code>Password</code> field\ncontains the Role ARN.</em></p>\n<p><em>For every AWS account used in your organization, you'll need to create that additional secret and that BASH alias if you're going to follow along with this.\nRemember to adjust your <code>alias</code> scripts as neccessary.</em></p>\n<pre><span class=\"hljs-comment\"># Authenticate to the AWS account with the User ID</span>\nalias aws-auth-security='eval <span class=\"hljs-string\">\"$(lpass show aws-auth-security --field Param1; lpass show aws-auth-security --field Param2)\"</span>'\n\n<span class=\"hljs-comment\"># Authenticate to the AWS account with the role arn</span>\nalias aws-auth-otheraccount='eval <span class=\"hljs-string\">\"$(lpass show aws-auth-security --field Param1; lpass show aws-johndoe-role-arn-otheraccount --username)\"</span>'\n</pre>\n<p><em>Note: the double quotes around the <code>$()</code> are required.</em></p>\n<p><strong>Example</strong></p>\n<pre>$ aws-auth-security\nEnter your MFA token: <span class=\"hljs-number\">123456</span>\n<span class=\"hljs-number\">2018</span><span class=\"hljs-number\">-01</span><span class=\"hljs-number\">-09</span> <span class=\"hljs-number\">21</span>:<span class=\"hljs-number\">14</span>:<span class=\"hljs-number\">18</span> [INFO] [aws-auth] Getting temporary credentials <span class=\"hljs-keyword\">and</span> token <span class=\"hljs-keyword\">for</span> MFA device arn:aws:iam::<span class=\"hljs-number\">123456789012</span>:mfa/johndoe\n<span class=\"hljs-number\">2018</span><span class=\"hljs-number\">-01</span><span class=\"hljs-number\">-09</span> <span class=\"hljs-number\">21</span>:<span class=\"hljs-number\">14</span>:<span class=\"hljs-number\">19</span> [INFO] [aws-auth] Success!\n\n$ aws-auth-otheraccount\nEnter your MFA token: <span class=\"hljs-number\">234567</span>\n<span class=\"hljs-number\">2018</span><span class=\"hljs-number\">-01</span><span class=\"hljs-number\">-09</span> <span class=\"hljs-number\">21</span>:<span class=\"hljs-number\">14</span>:<span class=\"hljs-number\">41</span> [INFO] [aws-auth] Getting temporary credentials <span class=\"hljs-keyword\">and</span> token <span class=\"hljs-keyword\">for</span> MFA device arn:aws:iam::<span class=\"hljs-number\">123456789012</span>:mfa/johndoe\n<span class=\"hljs-number\">2018</span><span class=\"hljs-number\">-01</span><span class=\"hljs-number\">-09</span> <span class=\"hljs-number\">21</span>:<span class=\"hljs-number\">14</span>:<span class=\"hljs-number\">42</span> [INFO] [aws-auth] Assuming role arn:aws:iam::<span class=\"hljs-number\">098765432109</span>:role/rolename\n<span class=\"hljs-number\">2018</span><span class=\"hljs-number\">-01</span><span class=\"hljs-number\">-09</span> <span class=\"hljs-number\">21</span>:<span class=\"hljs-number\">14</span>:<span class=\"hljs-number\">42</span> [INFO] [aws-auth] Success!\n\n$ aws sts <span class=\"hljs-keyword\">get</span>-caller-identity\n{\n <span class=\"hljs-string\">\"UserId\"</span>: <span class=\"hljs-string\">\"AWSRANDOMUSERID:johndoe\"</span>,\n <span class=\"hljs-string\">\"Account\"</span>: <span class=\"hljs-string\">\"098765432109\"</span>,\n <span class=\"hljs-string\">\"Arn\"</span>: <span class=\"hljs-string\">\"arn:aws:sts::098765432109:assumed-role/rolename/johndoe\"</span>\n}\n</pre>\n<h3 class=\"preview__body--subtitle\" id=\"thanks\">Thanks</h3>\n<ul>\n<li><a href=\"https://github.com/lastpass/lastpass-cli\" class=\"preview__body--description--blue\" target=\"_blank\">LastPass</a>, for creating a CLI.</li>\n<li><a href=\"https://github.com/gruntwork-io\" class=\"preview__body--description--blue\" target=\"_blank\">Gruntwork.io</a>, for creating the initial script and instructions.</li>\n</ul>\n","repoName":"module-security","repoRef":"v0.55.3","serviceDescriptor":{"serviceName":"ssh-grunt","serviceRepoName":"module-security","serviceRepoOrg":"gruntwork-io","serviceMainReadmePath":"/modules/ssh-grunt","cloudProviders":["aws"],"description":"Manage SSH access to EC2 Instances using groups in AWS IAM or your Identity Provider (e.g., ADFS, Google, Okta, etc).","imageUrl":"grunt.png","licenseType":"subscriber","technologies":["Terraform","Go"],"compliance":[],"tags":[""]},"serviceCategoryName":"SSH access","fileName":"AWS-AUTH-LASTPASS.md","filePath":"/modules/aws-auth/AWS-AUTH-LASTPASS.md","title":"Repo Browser: ssh-grunt","description":"Browse the repos in the Gruntwork Infrastructure as Code Library."}
.circleci
install.sh
