WIP

JamesWoolfenden · Dec 13, 2023 · 5bd6747 · 5bd6747
1 parent 4ece670
commit 5bd6747
Show file tree

Hide file tree

Showing 44 changed files with 182 additions and 148 deletions.
diff --git a/src/mapping/aws/resource/aws_iam_service_specific_credential.json b/src/mapping/aws/resource/aws_iam_service_specific_credential.json
diff --git a/src/mapping/aws/resource/aws_imagebuilder_container_recipe.json b/src/mapping/aws/resource/aws_imagebuilder_container_recipe.json
diff --git a/src/mapping/aws/resource/aws_inspector2_organization_configuration.json b/src/mapping/aws/resource/aws_inspector2_organization_configuration.json
@@ -1,11 +1,16 @@
 [
   {
-    "apply": [],
+    "apply": [
+      "inspector2:UpdateOrganizationConfiguration",
+      "inspector2:DescribeOrganizationConfiguration"
+    ],
     "attributes": {
       "tags": []
     },
     "destroy": [],
-    "modify": [],
+    "modify": [
+      "inspector2:UpdateOrganizationConfiguration"
+    ],
     "plan": []
   }
 ]
diff --git a/src/mapping/aws/resource/aws_internetmonitor_monitor.json b/src/mapping/aws/resource/aws_internetmonitor_monitor.json
diff --git a/src/mapping/aws/resource/aws_kms_custom_key_store.json b/src/mapping/aws/resource/aws_kms_custom_key_store.json
diff --git a/src/mapping/aws/resource/aws_kms_external_key.json b/src/mapping/aws/resource/aws_kms_external_key.json
diff --git a/src/mapping/aws/resource/aws_lambda_code_signing_config.json b/src/mapping/aws/resource/aws_lambda_code_signing_config.json
diff --git a/src/mapping/aws/resource/aws_signer_signing_profile.json b/src/mapping/aws/resource/aws_signer_signing_profile.json
diff --git a/src/mapping/aws/resource/aws_signer_signing_profile_permission.json b/src/mapping/aws/resource/aws_signer_signing_profile_permission.json
diff --git a/src/mapping/aws/resource/iam/aws_iam_service_specific_credential.json b/src/mapping/aws/resource/iam/aws_iam_service_specific_credential.json
@@ -0,0 +1,17 @@
+[
+  {
+    "apply": [
+      "iam:CreateServiceSpecificCredential",
+      "iam:ListServiceSpecificCredentials",
+      "iam:DeleteServiceSpecificCredential"
+    ],
+    "attributes": {
+      "tags": []
+    },
+    "destroy": [
+      "iam:DeleteServiceSpecificCredential"
+    ],
+    "modify": [],
+    "plan": []
+  }
+]
diff --git a/src/mapping/aws/resource/imagebuilder/aws_imagebuilder_container_recipe.json b/src/mapping/aws/resource/imagebuilder/aws_imagebuilder_container_recipe.json
@@ -0,0 +1,20 @@
+[
+  {
+    "apply": [
+      "imagebuilder:CreateContainerRecipe",
+      "imagebuilder:GetContainerRecipe",
+      "imagebuilder:GetImage",
+      "imagebuilder:CreateImageRecipe",
+      "imagebuilder:DeleteContainerRecipe",
+      "imagebuilder:DeleteImageRecipe"
+    ],
+    "attributes": {
+      "tags": []
+    },
+    "destroy": [
+      "imagebuilder:DeleteContainerRecipe",
+      "imagebuilder:DeleteImageRecipe"],
+    "modify": [],
+    "plan": []
+  }
+]
diff --git a/src/mapping/aws/resource/internet-monitor/aws_internetmonitor_monitor.json b/src/mapping/aws/resource/internet-monitor/aws_internetmonitor_monitor.json
@@ -0,0 +1,20 @@
+[
+  {
+    "apply": [
+      "internetmonitor:CreateMonitor",
+      "internetmonitor:GetMonitor",
+      "internetmonitor:UpdateMonitor",
+      "internetmonitor:DeleteMonitor"
+    ],
+    "attributes": {
+      "tags": [
+        "internetmonitor:TagResource",
+        "internetmonitor:UntagResource"]
+    },
+    "destroy": [
+      "internetmonitor:DeleteMonitor"],
+    "modify": [
+      "internetmonitor:UpdateMonitor"],
+    "plan": []
+  }
+]
diff --git a/...ping/aws/resource/aws_kms_ciphertext.json → .../aws/resource/kms/aws_kms_ciphertext.json b/...ping/aws/resource/aws_kms_ciphertext.json → .../aws/resource/kms/aws_kms_ciphertext.json
@@ -1,6 +1,8 @@
 [
   {
-    "apply": [],
+    "apply": [
+      "kms:Encrypt"
+    ],
     "attributes": {
       "tags": []
     },

diff --git a/src/mapping/aws/resource/kms/aws_kms_custom_key_store.json b/src/mapping/aws/resource/kms/aws_kms_custom_key_store.json
@@ -0,0 +1,20 @@
+[
+  {
+    "apply": [
+      "kms:CreateCustomKeyStore",
+      "kms:DeleteCustomKeyStore",
+      "kms:UpdateCustomKeyStore",
+      "kms:DescribeCustomKeyStores"
+    ],
+    "attributes": {
+      "tags": []
+    },
+    "destroy": [
+      "kms:DeleteCustomKeyStore"
+    ],
+    "modify": [
+      "kms:UpdateCustomKeyStore"
+    ],
+    "plan": []
+  }
+]
diff --git a/src/mapping/aws/resource/kms/aws_kms_external_key.json b/src/mapping/aws/resource/kms/aws_kms_external_key.json
@@ -0,0 +1,19 @@
+[
+  {
+    "apply": [
+      "kms:CreateKey",
+      "iam:CreateServiceLinkedRole",
+      "kms:GetParametersForImport",
+      "kms:GetKeyPolicy",
+      "kms:ListResourceTags",
+      "kms:ScheduleKeyDeletion",
+      "kms:ImportKeyMaterial"
+    ],
+    "attributes": {
+      "tags": []
+    },
+    "destroy": [],
+    "modify": [],
+    "plan": []
+  }
+]
diff --git a/...ing/aws/resource/aws_kms_replica_key.json → ...aws/resource/kms/aws_kms_replica_key.json b/...ing/aws/resource/aws_kms_replica_key.json → ...aws/resource/kms/aws_kms_replica_key.json
@@ -1,6 +1,8 @@
 [
   {
-    "apply": [],
+    "apply": [
+      "kms:ReplicateKey"
+    ],
     "attributes": {
       "tags": []
     },

diff --git a/src/mapping/aws/resource/lambda/aws_lambda_code_signing_config.json b/src/mapping/aws/resource/lambda/aws_lambda_code_signing_config.json
@@ -0,0 +1,17 @@
+[
+  {
+    "apply": [
+      "lambda:CreateCodeSigningConfig",
+      "lambda:GetCodeSigningConfig",
+      "lambda:DeleteCodeSigningConfig"
+    ],
+    "attributes": {
+      "tags": []
+    },
+    "destroy": [
+      "lambda:DeleteCodeSigningConfig"
+    ],
+    "modify": [],
+    "plan": []
+  }
+]
diff --git a/.../aws/resource/aws_signer_signing_job.json → ...source/signer/aws_signer_signing_job.json b/.../aws/resource/aws_signer_signing_job.json → ...source/signer/aws_signer_signing_job.json
@@ -1,6 +1,9 @@
 [
   {
-    "apply": [],
+    "apply": [
+      "signer:StartSigningJob",
+      "signer:DescribeSigningJob"
+    ],
     "attributes": {
       "tags": []
     },

diff --git a/src/mapping/aws/resource/signer/aws_signer_signing_profile.json b/src/mapping/aws/resource/signer/aws_signer_signing_profile.json
@@ -0,0 +1,18 @@
+[
+  {
+    "apply": [
+      "signer:GetSigningProfile",
+      "signer:RevokeSigningProfile",
+      "signer:PutSigningProfile",
+      "signer:CancelSigningProfile"
+    ],
+    "attributes": {
+      "tags": []
+    },
+    "destroy": [
+      "signer:RevokeSigningProfile",
+      "signer:CancelSigningProfile"],
+    "modify": [],
+    "plan": []
+  }
+]
diff --git a/src/mapping/aws/resource/signer/aws_signer_signing_profile_permission.json b/src/mapping/aws/resource/signer/aws_signer_signing_profile_permission.json
@@ -0,0 +1,17 @@
+[
+  {
+    "apply": [
+      "signer:ListProfilePermissions",
+      "signer:AddProfilePermission",
+      "signer:RemoveProfilePermission"
+    ],
+    "attributes": {
+      "tags": []
+    },
+    "destroy": [
+      "signer:RemoveProfilePermission"
+    ],
+    "modify": [],
+    "plan": []
+  }
+]
diff --git a/terraform/aws/aws_elastic_beanstalk_application_version.tf b/terraform/aws/aws_elastic_beanstalk_application_version.tf
diff --git a/terraform/aws/aws_elastic_beanstalk_configuration_template.tf b/terraform/aws/aws_elastic_beanstalk_configuration_template.tf
diff --git a/terraform/aws/aws_elastic_beanstalk_environment.tf b/terraform/aws/aws_elastic_beanstalk_environment.tf
diff --git a/terraform/aws/aws_elb_attachment.tf b/terraform/aws/aws_elb_attachment.tf
diff --git a/terraform/aws/aws_internet_gateway_attachment.tf b/terraform/aws/aws_internet_gateway_attachment.tf
diff --git a/terraform/aws/aws_kms_custom_key_store.tf b/terraform/aws/aws_kms_custom_key_store.tf
diff --git a/...rm/aws/aws_ec2_availability_zone_group.tf → ...backup/aws_ec2_availability_zone_group.tf b/...rm/aws/aws_ec2_availability_zone_group.tf → ...backup/aws_ec2_availability_zone_group.tf
@@ -1,4 +1,5 @@
 resource "aws_ec2_availability_zone_group" "pike" {
+  provider= aws.central
   group_name    = "us-west-2-lax-1"
   opt_in_status = "opted-in"
 }
diff --git a/...iam_security_token_service_preferences.tf → ...iam_security_token_service_preferences.tf b/...iam_security_token_service_preferences.tf → ...iam_security_token_service_preferences.tf
diff --git a/...ws/aws_iam_service_specific_credential.tf → ...up/aws_iam_service_specific_credential.tf b/...ws/aws_iam_service_specific_credential.tf → ...up/aws_iam_service_specific_credential.tf
@@ -1,4 +1,4 @@
 resource "aws_iam_service_specific_credential" "pike" {
   service_name = "codecommit.amazonaws.com"
-  user_name    = "arn:aws:iam::680235478471:user/basic"
+  user_name    = "jameswoolfenden"
 }
diff --git a/terraform/aws/aws_iam_virtual_mfa_device.tf → .../aws/backup/aws_iam_virtual_mfa_device.tf b/terraform/aws/aws_iam_virtual_mfa_device.tf → .../aws/backup/aws_iam_virtual_mfa_device.tf
diff --git a/.../aws/aws_imagebuilder_container_recipe.tf → ...ckup/aws_imagebuilder_container_recipe.tf b/.../aws/aws_imagebuilder_container_recipe.tf → ...ckup/aws_imagebuilder_container_recipe.tf
@@ -3,7 +3,7 @@ resource "aws_imagebuilder_container_recipe" "pike" {
   version = "1.0.0"
 
   container_type = "DOCKER"
-  parent_image   = "arn:aws:imagebuilder:eu-central-1:aws:image/amazon-linux-x86-latest/x.x.x"
+  parent_image   = "jameswoolfenden/pike"
 
   target_repository {
     repository_name = "arn:aws:ecr:eu-west-2:680235478471:repository/pike"
@@ -49,4 +49,5 @@ resource "aws_imagebuilder_component" "example" {
   name     = "example"
   platform = "Linux"
   version  = "1.0.0"
-}
+}
+
diff --git a/...aws_inspector2_delegated_admin_account.tf → ...aws_inspector2_delegated_admin_account.tf b/...aws_inspector2_delegated_admin_account.tf → ...aws_inspector2_delegated_admin_account.tf
diff --git a/terraform/aws/aws_inspector2_enabler.tf → ...form/aws/backup/aws_inspector2_enabler.tf b/terraform/aws/aws_inspector2_enabler.tf → ...form/aws/backup/aws_inspector2_enabler.tf
diff --git a/terraform/aws/aws_internetmonitor_monitor.tf → ...aws/backup/aws_internetmonitor_monitor.tf b/terraform/aws/aws_internetmonitor_monitor.tf → ...aws/backup/aws_internetmonitor_monitor.tf
diff --git a/terraform/aws/aws_kms_ciphertext.tf → terraform/aws/backup/aws_kms_ciphertext.tf b/terraform/aws/aws_kms_ciphertext.tf → terraform/aws/backup/aws_kms_ciphertext.tf
@@ -4,8 +4,8 @@ resource "aws_kms_ciphertext" "pike" {
 
     plaintext = <<EOF
 {
-  "client_id": "e587dbae22222f55da22",
-  "client_secret": "8289575d00000ace55e1815ec13673955721b8a5"
+  "client_id": "e000dbae00000f00da00",
+  "client_secret": "0000000d00000ace00e0000ec00000000000b0a0"
 }
 EOF
   }
diff --git a/terraform/aws/backup/aws_kms_custom_key_store.tf b/terraform/aws/backup/aws_kms_custom_key_store.tf
@@ -0,0 +1,3 @@
+resource "aws_kms_custom_key_store" "pike" {
+  custom_key_store_name = "pike"
+}
diff --git a/terraform/aws/aws_kms_external_key.tf → terraform/aws/backup/aws_kms_external_key.tf b/terraform/aws/aws_kms_external_key.tf → terraform/aws/backup/aws_kms_external_key.tf
@@ -6,5 +6,4 @@ resource "aws_kms_external_key" "pike" {
   multi_region            = true
   enabled                 = true
 
-  key_material_base64 = "dGhpcyBpcyBteSBrZXk="
 }
diff --git a/...aform/aws/aws_kms_replica_external_key.tf → ...ws/backup/aws_kms_replica_external_key.tf b/...aform/aws/aws_kms_replica_external_key.tf → ...ws/backup/aws_kms_replica_external_key.tf
@@ -3,5 +3,5 @@ resource "aws_kms_replica_external_key" "pike" {
   deletion_window_in_days = 7
   primary_key_arn         = aws_kms_external_key.pike.arn
 
-  key_material_base64 = "â¡¨Võb¹_^V<95>Ob<94>\\¬µxZî<82>1àíÎ¯^MpªQ^Bd{"
+  key_material_base64 = ""
 }
diff --git a/terraform/aws/aws_kms_replica_key.tf → terraform/aws/backup/aws_kms_replica_key.tf b/terraform/aws/aws_kms_replica_key.tf → terraform/aws/backup/aws_kms_replica_key.tf
diff --git a/...orm/aws/aws_lambda_code_signing_config.tf → .../backup/aws_lambda_code_signing_config.tf b/...orm/aws/aws_lambda_code_signing_config.tf → .../backup/aws_lambda_code_signing_config.tf
diff --git a/terraform/aws/aws_signer_signing_job.tf → ...form/aws/backup/aws_signer_signing_job.tf b/terraform/aws/aws_signer_signing_job.tf → ...form/aws/backup/aws_signer_signing_job.tf