particles-cloudsploit-scans

Summary

Condensation particles that create a CloudFormation project for CloudSploit scans.

The use of condensation allows the template and the code to be deployed to any S3 bucket. The template will always reference the code that it was deployed with. The stack can be updated to add permissions or to deploy new releases of CloudSploit scans.

Use

Quick Start

Use the Launch Stack links in the Packaged Project section of this README.

Build

Must have node.js 0.12 or later.

1. Clone the repository
2. Create a local.js file in config with buckets that you own
3. Add AWS credentials to your environment. Either by IAM Profile, Envionment Variables or AWS Properties file.
4. Build:

       > git clone https://github.com/SungardAS/particles-cloudsploit-scans
       
       > cd particles-cloudsploit-scans
       
       > npm install
       
       > ./node_modules/.bin/gulp condensation:build
   

5. Deploy:

       > ./node_modules/.bin/gulp condensation:deploy
       
   

Particles

assets

cloudsploit_scans.zip

This file is automatically generated as part of the condensation init process. The zip file is created by checking out the submodule, running npm installl and then packaging.

cftemplates

lambda

The master template for all cloudsploit resources

outputs

lambda_arn

Parameters

lambdaLogicalId {String} required Logical ID of the Lambda resource

lambda_name

Parameters

lambdaLogicalId {String} required Logical ID of the Lambda resource

role_arn

Parameters

roleLogicalId {String} required Logical ID of the Lambda Execution Role resource

role_name

Parameters

roleLogicalId {String} required Logical ID of the Lambda Execution Role resource

parameters

execution_role

A parameter for an existing IAM Role to use with the lambda function.

partials

lambda_execution_role_properties

Properties for the IAM Role to be associated with the Lambda function.

lambda_properties

Properties for the Lambda function.

lambda_role_property_if

A Fn::If statement to choose between using the a Parameter or Resource for the execution role

resources

lambda

The resource that defines the lambda function

lambda_execution_role

The resource that defines the role the lambda function will use

Packaged Project

Using condensation the CloudFormation Template and CloudSploit assets have been deployed to every S3 region lambda is available.

• us-east-1
• us-west-2
• eu-west-1
• ap-northeast-1