Added parameter to store XSIAM endpoint address

ministryofjustice · Oct 8, 2024 · 89e7c66 · 89e7c66
1 parent 818a9b8
commit 89e7c66
Showing 1 changed file with 13 additions and 0 deletions.
diff --git a/terraform/environments/core-logging/ssm.tf b/terraform/environments/core-logging/ssm.tf
@@ -11,6 +11,19 @@ resource "aws_ssm_parameter" "cortex_account_id" {
   tags           = local.tags
 }
 
+resource "aws_ssm_parameter" "cortex_endpoint address" {
+  #checkov:skip=CKV2_AWS_34: "Parameter is not sensitive; endpoint is publicly resolvable."
+  lifecycle {
+    ignore_changes = [insecure_value]
+  }
+  provider       = aws.modernisation-platform
+  description    = "Endpoint Address for Palo Alto Cortex XSIAM cross-account role."
+  name           = "cortex_xsiam_endpoint"
+  type           = "String"
+  insecure_value = "Placeholder"
+  tags           = local.tags
+}
+
 resource "aws_ssm_parameter" "core_logging_bucket_arns" {
   #checkov:skip=CKV2_AWS_34: "Parameter is not sensitive; bucket ARNs are stored here for programmatic retrieval."
   provider    = aws.modernisation-platform