ScaleSec/terraform_aws_scp

Compliance policies should pull from AWS-allowlist

Closed this issue · 2 comments

In salesforce/aws-allowlister#74 we discussed referencing the json policies from aws-allowlister. Since they policies are updated frequently under https://github.com/salesforce/aws-allowlister/tree/main/examples/latest, it may make sense to use an http data source, or have a scheduled job that pulls down the policies from https://raw.githubusercontent.com/salesforce/aws-allowlister/main/examples/latest/x.json.

CC @jdyke let me know if you think this needs different wording, or if I interpreted your comments incorrectly

jdyke commented

This makes perfect sense, thanks for creating the issue!

jdyke commented

I'm going to take a look at this today.