fleet/terraform/addons/osquery-carve
Zachary Winnerman a23ce1b0a2
Dogfood changes (#9763)
# Checklist for submitter

If some of the following don't apply, delete the relevant line.

- [ ] Changes file added for user-visible changes in `changes/` or
`orbit/changes/`.
See [Changes
files](https://fleetdm.com/docs/contributing/committing-changes#changes-files)
for more information.
- [ ] Documented any API changes (docs/Using-Fleet/REST-API.md or
docs/Contributing/API-for-contributors.md)
- [ ] Documented any permissions changes
- [ ] Input data is properly validated, `SELECT *` is avoided, SQL
injection is prevented (using placeholders for values in statements)
- [ ] Added support on fleet's osquery simulator `cmd/osquery-perf` for
new osquery data ingestion features.
- [ ] Added/updated tests
- [ ] Manual QA for all new/changed functionality
  - For Orbit and Fleet Desktop changes:
- [ ] Manual QA must be performed in the three main OSs, macOS, Windows
and Linux.
- [ ] Auto-update manual QA, from released version of component to new
version (see [tools/tuf/test](../tools/tuf/test/README.md)).
2023-02-09 00:20:57 -05:00
..
.header.md Dogfood changes (#9763) 2023-02-09 00:20:57 -05:00
.terraform-docs.yml Dogfood changes (#9763) 2023-02-09 00:20:57 -05:00
main.tf Dogfood changes (#9763) 2023-02-09 00:20:57 -05:00
outputs.tf Dogfood changes (#9763) 2023-02-09 00:20:57 -05:00
README.md Dogfood changes (#9763) 2023-02-09 00:20:57 -05:00
variables.tf Dogfood changes (#9763) 2023-02-09 00:20:57 -05:00

Osquery Carve Bucket Addon

This addon provides a S3 bucket for Osquery Carve results.

Requirements

No requirements.

Providers

Name Version
aws 4.49.0

Modules

No modules.

Resources

Name Type
aws_iam_policy.main resource
aws_s3_bucket.main resource
aws_s3_bucket_acl.main resource
aws_s3_bucket_lifecycle_configuration.main resource
aws_s3_bucket_public_access_block.main resource
aws_s3_bucket_server_side_encryption_configuration.main resource
aws_iam_policy_document.main data source
aws_region.current data source

Inputs

Name Description Type Default Required
osquery_carve_s3_bucket n/a
object({
name = optional(string, "fleet-osquery-results-archive")
expires_days = optional(number, 1)
})
{
"expires_days": 1,
"name": "fleet-osquery-results-archive"
}
no

Outputs

Name Description
fleet_extra_environment_variables n/a
fleet_extra_iam_policies n/a