Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add FIPS enabled AMI to TF #1871

Merged
merged 6 commits into from
Mar 21, 2022
Merged

Add FIPS enabled AMI to TF #1871

merged 6 commits into from
Mar 21, 2022

Conversation

jawadqur
Copy link
Contributor

  • Add FIPS enabled AMI to TF
  • Add SSM policy to workers iam role

@jawadqur jawadqur requested a review from emalinowski March 17, 2022 19:26
emalinowski
emalinowski previously approved these changes Mar 17, 2022
emalinowski
emalinowski previously approved these changes Mar 21, 2022
# Needed if we need to bring up custom AMI's that have been encrypted using a kms key
resource "aws_iam_service_linked_role" "autoscaling" {
aws_service_name = "autoscaling.amazonaws.com"
custom_suffix = "ASG"
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

If there are multiple commons the arn will match for each and lead to tf errors. We should change this to something either random or specific to the common, so that there is not an overlap. Easiest solution is probably ${var.vpc_name}.

Copy link
Contributor Author

@jawadqur jawadqur Mar 21, 2022

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

You are 100% correct. Thanks for updating the PR! 🙌

@emalinowski emalinowski merged commit 6fa9ea9 into master Mar 21, 2022
@emalinowski emalinowski deleted the feat/fips_ami branch March 21, 2022 13:57
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants