| event_bridge_bus_name |
The desired name of the EventBridge event bus. |
string |
"" |
no |
| event_bridge_rule_name |
The desired name of the EventBridge event rule. |
string |
"" |
no |
| lacework_alert_rule_categories |
The categories of Lacework alerts that should be sent to the alert channel |
list(string) |
[
"Compliance"
] |
no |
| lacework_alert_rule_severities |
The severities of Lacework alerts that should be sent to the alert channel |
list(string) |
[
"Critical",
"High"
] |
no |
| lacework_aws_account |
The AWS account used by Lacework. |
string |
"434813966438" |
no |
| lacework_integration_name |
The name to use for the Alert Channel integration in Lacework. |
string |
"Compliance Events to CloudWatch" |
no |
| lacework_resource_prefix |
The name prefix to use for resources provisioned by the module. |
string |
"lacework-remediation" |
no |
| lambda_function_name |
The desired name of the Lacework event router lambda function. |
string |
"" |
no |
| lambda_log_retention |
The number of days in which to retain logs for the remediation lambda |
number |
30 |
no |
| lambda_role_name |
The desired IAM role name for the Lacework remediation lambda function. |
string |
"" |
no |
| remediation_map |
A map of Lacework violation reasons to remediation functions. |
map |
{
"AWS_CIS_1_3_AccessKey1NotUsed": {
"action": "iam_disable_unused_access_key"
},
"AWS_CIS_1_3_PasswordNotUsed": {
"action": "iam_disable_login_profile"
},
"AWS_CIS_1_4_AccessKey1NotRotated": {
"action": "iam_disable_unused_access_key"
},
"AWS_CIS_4_1_UnrestrictedAccess": {
"action": "sg_delete_inbound_rules_by_scope",
"params": {
"port": "22",
"protocol": "tcp",
"scope": "0.0.0.0/0"
}
},
"LW_AWS_GENERAL_SECURITY_1_Ec2InstanceWithoutTags": {
"action": "ec2_stop_instance"
},
"LW_S3_13_LoggingNotEnabled": {
"action": "s3_enable_access_logs"
},
"LW_S3_16_VersioningNotEnabled": {
"action": "s3_enable_versioning"
},
"LW_S3_1_ReadAccessGranted": {
"action": "s3_delete_acls"
},
"LW_S3_2_WriteAccessGranted": {
"action": "s3_delete_acls"
}
} |
no |
| sqs_queue_name |
The desired name of the SQS event queue. |
string |
"" |
no |
