File tree Expand file tree Collapse file tree 2 files changed +14
-7
lines changed Expand file tree Collapse file tree 2 files changed +14
-7
lines changed Original file line number Diff line number Diff line change @@ -4,14 +4,15 @@ module "remediation" {
4
4
name = " vulne-soldier-compliance-remediate"
5
5
environment = " dev"
6
6
aws_region = " us-east-1"
7
- account_id = " 2132323212 "
7
+ account_id = " 2132323212_dummmmy "
8
8
lambda_log_group = " /aws/lambda/vulne-soldier-compliance-remediate"
9
+ lambda_zip = " ../../lambda.zip"
9
10
remediation_options = {
10
11
region = " us-east-1"
11
12
reboot_option = " NoReboot"
12
13
target_ec2_tag_name = " AmazonECSManaged"
13
14
target_ec2_tag_value = " true"
14
- vulnerability_severities = [ " CRITICAL, HIGH" ]
15
- override_findings_for_target_instances_ids = []
15
+ vulnerability_severities = " CRITICAL, HIGH"
16
+ override_findings_for_target_instances_ids = " "
16
17
}
17
18
}
Original file line number Diff line number Diff line change @@ -23,22 +23,28 @@ variable "lambda_log_group" {
23
23
type = string
24
24
}
25
25
26
+ variable "lambda_zip" {
27
+ description = " File location of the lambda zip file for remediation."
28
+ type = string
29
+ default = null
30
+ }
31
+
26
32
variable "remediation_options" {
27
33
description = " Options for the remediation document"
28
34
type = object ({
29
35
region = string
30
36
reboot_option = string
31
37
target_ec2_tag_name = string
32
38
target_ec2_tag_value = string
33
- vulnerability_severities = list ( string )
34
- override_findings_for_target_instances_ids = list ( string )
39
+ vulnerability_severities = string
40
+ override_findings_for_target_instances_ids = string
35
41
})
36
42
default = {
37
43
region = " us-east-1"
38
44
reboot_option = " NoReboot"
39
45
target_ec2_tag_name = " AmazonECSManaged"
40
46
target_ec2_tag_value = " true"
41
- vulnerability_severities = [ " CRITICAL, HIGH" ]
42
- override_findings_for_target_instances_ids = []
47
+ vulnerability_severities = " CRITICAL, HIGH"
48
+ override_findings_for_target_instances_ids = null
43
49
}
44
50
}
You can’t perform that action at this time.
0 commit comments