resources

Documentation

Index

• Variables
• func Setup()
• type APIGatewayAlarmProperties
• type AnalysisSetProperties
• type AppSyncAlarmProperties
• type CognitoUserPoolMfaProperties
• type DynamoDBAlarmProperties
• type ElbAlarmProperties
• type GuardDutyDestinationProperties
• type LambdaAlarmProperties
• type LambdaMetricFiltersProperties
• type LayerAttachmentProperties
• type PantherSettingsProperties
• type PantherTeardownProperties
• type PantherUserProperties
• type S3BucketNotificationProperties
• type SFNAlarmProperties
• type SNSAlarmProperties
• type SQSAlarmProperties
• type SelfRegistrationProperties
• type UpdateLogProcessorTablesProperties

Variables

var CustomResources = map[string]cfn.CustomResourceFunction{

	"Custom::AnalysisSet": customAnalysisSet,

	"Custom::ApiGatewayAlarms": customAPIGatewayAlarms,

	"Custom::AppSyncAlarms": customAppSyncAlarms,

	"Custom::DynamoDBAlarms": customDynamoDBAlarms,

	"Custom::ElbAlarms": customElbAlarms,

	"Custom::Certificate": customCertificate,

	"Custom::CognitoUserPoolMfa": customCognitoUserPoolMfa,

	"Custom::UpdateLogProcessorTables": customUpdateLogTables,

	"Custom::GuardDutyDestination": customGuardDutyDestination,

	"Custom::LambdaAlarms": customLambdaAlarms,

	"Custom::LambdaMetricFilters": customLambdaMetricFilters,

	"Custom::PantherSettings": customPantherSettings,

	"Custom::LayerAttachment": customLayerAttachment,

	"Custom::PantherTeardown": customPantherTeardown,

	"Custom::PantherUser": customPantherUser,

	"Custom::S3BucketNotification": customS3BucketNotification,

	"Custom::SelfRegistration": customSelfRegistration,

	"Custom::StateMachineAlarms": customStateMachineAlarms,

	"Custom::SNSAlarms": customSNSAlarms,

	"Custom::SQSAlarms": customSQSAlarms,
}

CustomResources map type names to their respective handler functions.

Functions

func Setup

func Setup()

Types

type APIGatewayAlarmProperties

type APIGatewayAlarmProperties struct {
	APIName            string  `json:"ApiName" validate:"required"`
	AlarmTopicArn      string  `validate:"required"`
	ErrorThreshold     int     `json:",string" validate:"omitempty,min=0"`
	LatencyThresholdMs float64 `json:",string" validate:"omitempty,min=1"`
}

type AnalysisSetProperties

type AnalysisSetProperties struct {
	PackURLs []string
}

type AppSyncAlarmProperties

type AppSyncAlarmProperties struct {
	APIID                string `json:"ApiId" validate:"required"`
	APIName              string `json:"ApiName" validate:"required"`
	AlarmTopicArn        string `validate:"required"`
	ClientErrorThreshold int    `json:",string" validate:"omitempty,min=0"`
	ServerErrorThreshold int    `json:",string" validate:"omitempty,min=0"`
}

type CognitoUserPoolMfaProperties

type CognitoUserPoolMfaProperties struct {
	UserPoolID string `json:"UserPoolId" validate:"required"`
}

type DynamoDBAlarmProperties

type DynamoDBAlarmProperties struct {
	AlarmTopicArn string `validate:"required"`
	TableName     string `validate:"required"`
}

type ElbAlarmProperties

type ElbAlarmProperties struct {
	AlarmTopicArn            string `validate:"required"`
	LoadBalancerFriendlyName string `validate:"required"`
	LoadBalancerFullName     string `validate:"required"`

	LatencyThresholdSeconds float64 `json:",string" validate:"omitempty,min=0"`
}

type GuardDutyDestinationProperties

type GuardDutyDestinationProperties = guardduty.CreatePublishingDestinationInput

type LambdaAlarmProperties

type LambdaAlarmProperties struct {
	AlarmTopicArn      string `validate:"required"`
	FunctionName       string `validate:"required"`
	FunctionMemoryMB   int    `json:",string" validate:"min=128"`
	FunctionTimeoutSec int    `json:",string" validate:"min=1"`

	// These are pointers because we have to distinguish 0 from not specified
	LoggedErrorThreshold    *int `json:",string" validate:"omitempty,min=0"`
	LoggedWarnThreshold     *int `json:",string" validate:"omitempty,min=0"`
	ExecutionErrorThreshold *int `json:",string" validate:"omitempty,min=0"`
	ThrottleThreshold       *int `json:",string" validate:"omitempty,min=0"`
}

type LambdaMetricFiltersProperties

type LambdaMetricFiltersProperties struct {
	LambdaRuntime string `validate:"omitempty,oneof=Go Python"`
	LogGroupName  string `validate:"required"`
}

type LayerAttachmentProperties

type LayerAttachmentProperties struct {
	LayerArns []*string
}

type PantherSettingsProperties

type PantherSettingsProperties = models.GeneralSettings

type PantherTeardownProperties

type PantherTeardownProperties struct {
	CustomResourceLogGroupName string `validate:"required"`
	CustomResourceRoleName     string `validate:"required"`
	EcrRepoName                string
}

type PantherUserProperties

type PantherUserProperties struct {
	GivenName  string
	FamilyName string
	Email      string `validate:"required,email"`
}

type S3BucketNotificationProperties

type S3BucketNotificationProperties = s3.PutBucketNotificationConfigurationInput

type SFNAlarmProperties

type SFNAlarmProperties struct {
	AlarmTopicArn   string `validate:"required"`
	StateMachineArn string `validate:"required"`
	// contains filtered or unexported fields
}

type SNSAlarmProperties

type SNSAlarmProperties struct {
	AlarmTopicArn string `validate:"required"`
	TopicName     string `validate:"required"`
}

type SQSAlarmProperties

type SQSAlarmProperties struct {
	AlarmTopicArn       string   `validate:"required"`
	QueueName           string   `validate:"required"`
	IsDLQ               bool     `json:",string"`
	AgeThresholdSeconds *float64 `json:",string"` // if present, override default
}

type SelfRegistrationProperties

type SelfRegistrationProperties struct {
	AccountID               string   `validate:"required,len=12"`
	AuditLogsBucket         string   `validate:"required"`
	EnableCloudTrail        bool     `json:",string"`
	EnableGuardDuty         bool     `json:",string"`
	EnableS3AccessLogs      bool     `json:",string"`
	Enabled                 *bool    `json:",string"`
	RegionIgnoreList        []string `json:","`
	ResourceTypeIgnoreList  []string `json:","`
	ResourceRegexIgnoreList []string `json:","`
}

type UpdateLogProcessorTablesProperties

type UpdateLogProcessorTablesProperties struct {
	DataCatalogUpdaterQueueURL string `validate:"required"`
}