Overview
While the preferred and recommended method to install CloudFix is with the CloudFormation templates that seamlessly integrate with our onboarding process, we have prepared a complete Terraform implementation for CloudFix as an alternative to our default templates. This implementation is available at: https://github.com/gleesonb-aurea/cloudfix-terraform
What's Included
The Terraform implementation includes:
-
A single Terraform file (
cloudfix.tf
) that creates all necessary resources, replicating what we have in our regular CloudFormation templates -
Lambda function code and package script for required automation. We've replaced CloudFormation dependencies in these functions with Terraform-compatible alternatives
-
A script for multi-account deployment across your AWS organization. This is crucial - the CloudFix finder role must be deployed to all accounts in your organization for CloudFix to validate findings
-
Documentation in the README, including a list of all resources created
Important Configuration Notes
Cost and Usage Report
By default, the Terraform implementation creates a new Cost and Usage Report (CUR). If you want to use an existing CUR instead, you'll need to update the .tf
file with the ARN of your existing CUR.
Required Parameters
To implement CloudFix with Terraform, you'll need unique TenantId and ExternalId values for your organization.
Please contact CloudFix Support to obtain your organization-specific values.
Do not use example values you might find in documentation, as they won't work for your implementation.
Getting Started
- Clone the repository
- Review the README and resource list
- Contact CloudFix Support to obtain your unique TenantId and ExternalId
- Update the parameters in the Terraform file
- If using an existing CUR, update the configuration accordingly
- Deploy using standard Terraform commands
Questions or Issues?
If you have any questions about the Terraform implementation or encounter any issues during deployment, please contact CloudFix Support.
Bill Gleeson
Comments