Skip to content

Commit

Permalink
add snapshot
Browse files Browse the repository at this point in the history
  • Loading branch information
badmintoncryer committed Oct 5, 2024
1 parent 57e0259 commit f83d03f
Show file tree
Hide file tree
Showing 8 changed files with 740 additions and 0 deletions.

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

Original file line number Diff line number Diff line change
@@ -0,0 +1,184 @@
{
"Resources": {
"TopicBFC7AF6E": {
"Type": "AWS::SNS::Topic"
},
"AuditConfigurationAuditRole0FFA1461": {
"Type": "AWS::IAM::Role",
"Properties": {
"AssumeRolePolicyDocument": {
"Statement": [
{
"Action": "sts:AssumeRole",
"Effect": "Allow",
"Principal": {
"Service": "iot.amazonaws.com"
}
}
],
"Version": "2012-10-17"
},
"ManagedPolicyArns": [
{
"Fn::Join": [
"",
[
"arn:",
{
"Ref": "AWS::Partition"
},
":iam::aws:policy/service-role/AWSIoTDeviceDefenderAudit"
]
]
}
]
}
},
"AuditConfigurationNotificationRole9774BAD4": {
"Type": "AWS::IAM::Role",
"Properties": {
"AssumeRolePolicyDocument": {
"Statement": [
{
"Action": "sts:AssumeRole",
"Effect": "Allow",
"Principal": {
"Service": "iot.amazonaws.com"
}
}
],
"Version": "2012-10-17"
},
"Policies": [
{
"PolicyDocument": {
"Statement": [
{
"Action": "sns:Publish",
"Effect": "Allow",
"Resource": {
"Ref": "TopicBFC7AF6E"
}
}
],
"Version": "2012-10-17"
},
"PolicyName": "NotificationPolicy"
}
]
}
},
"AuditConfiguration8C793652": {
"Type": "AWS::IoT::AccountAuditConfiguration",
"Properties": {
"AccountId": {
"Ref": "AWS::AccountId"
},
"AuditCheckConfigurations": {
"AuthenticatedCognitoRoleOverlyPermissiveCheck": {
"Enabled": true
},
"CaCertificateExpiringCheck": {
"Enabled": true
},
"CaCertificateKeyQualityCheck": {
"Enabled": true
},
"ConflictingClientIdsCheck": {
"Enabled": true
},
"DeviceCertificateExpiringCheck": {
"Enabled": true
},
"DeviceCertificateKeyQualityCheck": {
"Enabled": true
},
"DeviceCertificateSharedCheck": {
"Enabled": true
},
"IntermediateCaRevokedForActiveDeviceCertificatesCheck": {
"Enabled": true
},
"IoTPolicyPotentialMisConfigurationCheck": {
"Enabled": true
},
"IotPolicyOverlyPermissiveCheck": {
"Enabled": true
},
"IotRoleAliasAllowsAccessToUnusedServicesCheck": {
"Enabled": true
},
"IotRoleAliasOverlyPermissiveCheck": {
"Enabled": true
},
"LoggingDisabledCheck": {
"Enabled": true
},
"RevokedCaCertificateStillActiveCheck": {
"Enabled": true
},
"RevokedDeviceCertificateStillActiveCheck": {
"Enabled": true
},
"UnauthenticatedCognitoRoleOverlyPermissiveCheck": {
"Enabled": true
}
},
"AuditNotificationTargetConfigurations": {
"Sns": {
"Enabled": true,
"RoleArn": {
"Fn::GetAtt": [
"AuditConfigurationNotificationRole9774BAD4",
"Arn"
]
},
"TargetArn": {
"Ref": "TopicBFC7AF6E"
}
}
},
"RoleArn": {
"Fn::GetAtt": [
"AuditConfigurationAuditRole0FFA1461",
"Arn"
]
}
}
}
},
"Parameters": {
"BootstrapVersion": {
"Type": "AWS::SSM::Parameter::Value<String>",
"Default": "/cdk-bootstrap/hnb659fds/version",
"Description": "Version of the CDK Bootstrap resources in this environment, automatically retrieved from SSM Parameter Store. [cdk:skip]"
}
},
"Rules": {
"CheckBootstrapVersion": {
"Assertions": [
{
"Assert": {
"Fn::Not": [
{
"Fn::Contains": [
[
"1",
"2",
"3",
"4",
"5"
],
{
"Ref": "BootstrapVersion"
}
]
}
]
},
"AssertDescription": "CDK bootstrap stack version 6 required. Please run 'cdk bootstrap' with a recent version of the CDK CLI."
}
]
}
}
}

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

Loading

0 comments on commit f83d03f

Please sign in to comment.