Code Quality

Terraform AWS CloudTrail Alerts Module

A module that create CloudWatch metric filters and alarms required for most modern compliance reports. This module includes the necessary metric filters and alarms for the following compliance reports:

Compliance Report	Sections
CIS AWS Foundations Benchmark v1.5.0	Section 4.1 - 4.15
NIST 800-171 v2	Section 3.12.3
ISO/IEC 27001 v2	Section A.12.4.1
PCI DSS v3.2.1	Section 10.1
SOC 2 v2	Section 5.2

This module can also create an SNS topic with a Slack channel configuration for AWS Chatbot (must be configured) manually in the AWS Console.

Inputs

Name	Description	Type	Default	Required
cloudtrail_log_group_name	The name of the CloudWatch log group to filter for events. Defaults to the AWS Control Tower created Baseline.	string	"aws-controltower/CloudTrailLogs"	no
cloudwatch_namespace	The namespace to use for the CloudWatch metric filter.	string	"CISBenchmark"	no
prefix	Prefix that will added to created resources.	string	n/a	yes
slack_channel_id	The ID of the Slack channel to send alerts to.	string	null	no
slack_workspace_id	The ID of the Slack workspace to send alerts to.	string	null	no
sns_kms_master_key_alias	The alias of the KMS key to use to encrypt the SNS topic if no key is provided.	string	"alias/sns/cloudtrail-alerts"	no
sns_kms_master_key_id	The ARN of the KMS key to use to encrypt the SNS topic. Will create a new CMK if not provided.	string	null	no
sns_topic_arn	Use an existing SNS topic to send alerts to.	string	null	no
tags	Tags to add to the created resources.	map(any)	{}	no

Outputs

No outputs.

Providers

Name	Version
aws	>= 4.40
awscc	0.53.0

Resources

• resource.aws_cloudwatch_log_metric_filter.main (main.tf#24)
• resource.aws_cloudwatch_metric_alarm.main (main.tf#38)
• resource.aws_kms_alias.main (main.tf#71)
• resource.aws_kms_key.main (main.tf#59)
• resource.aws_sns_topic.main (main.tf#110)
• resource.awscc_chatbot_slack_channel_configuration.main (main.tf#120)
• data source.aws_caller_identity.current (main.tf#18)
• data source.aws_cloudwatch_log_group.cloudtrail (main.tf#20)
• data source.aws_iam_policy_document.kms (main.tf#78)

Examples

Complete

module "example" {
  source = "../../"

  prefix = "root"
}