Skip to content

Commit a578174

Browse files
cyphronixcyphronix
committed
Merge branch 'main' into sra-genai
2 parents aa2d1fa + 313ea9d commit a578174

Some content is hidden

Large Commits have some content hidden by default. Use the searchbox below for content that may be hidden.

42 files changed

+9765
-507
lines changed

‎CHANGELOG.md

Lines changed: 35 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -3,6 +3,10 @@
33
## Table of Contents<!-- omit in toc -->
44

55
- [Introduction](#introduction)
6+
- [2024-09-18](#2024-09-18)
7+
- [2024-08-22](#2024-08-22)
8+
- [2024-07-17](#2024-07-17)
9+
- [2024-06-24](#2024-06-24)
610
- [2024-05-03](#2024-05-03)
711
- [2024-04-15](#2024-04-15)
812
- [2024-02-12](#2024-02-12)
@@ -53,6 +57,37 @@
5357
All notable changes to this project will be documented in this file.
5458

5559
---
60+
## 2024-09-18
61+
62+
### Added<!-- omit in toc -->
63+
64+
- Added [Security Lake Organization](aws_sra_examples/solutions/security_lake/security_lake_org) solution to configure Security Lake in AWS Organizations.
65+
66+
### Changed<!-- omit in toc -->
67+
68+
- Updated [Inspector](https://github.com/aws-samples/aws-security-reference-architecture-examples/tree/main/aws_sra_examples/solutions/inspector/inspector_org) solution to allow creation of AWSServiceRoleForAmazonInspector2Agentless SLR.
69+
- Updated documentation for [EC2 Default EBS Encryption](aws_sra_examples/solutions/ec2/ec2_default_ebs_encryption) solution.
70+
71+
## 2024-08-22
72+
73+
### Added<!-- omit in toc -->
74+
75+
- Added [Patch Manager](aws_sra_examples/solutions/patch_mgmt/patch_mgmt_org) solution to streamline the patch management process across multiple AWS accounts and regions in AWS Organizations.
76+
77+
## 2024-07-17
78+
79+
### Fixed<!-- omit in toc -->
80+
81+
- Fixed [Terraform edition](aws_sra_examples/terraform) Workspace creation on suspended accounts.
82+
- Fixed [Firewall Manager](https://github.com/aws-samples/aws-security-reference-architecture-examples/tree/main/aws_sra_examples/solutions/firewall_manager/firewall_manager_org) solution deployment issue (invalid operation error).
83+
- Fixed [GuardDuty terraform](aws_sra_examples/terraform/solutions/guard_duty) module installation failure.
84+
85+
## 2024-06-24
86+
87+
### Changed<!-- omit in toc -->
88+
89+
- Updated [GuardDuty Organization](aws_sra_examples/solutions/guardduty/guardduty_org) solution to support Opt-in regions.
90+
5691
## 2024-05-03
5792

5893
- Updated [GuardDuty Organization](aws_sra_examples/solutions/guardduty/guardduty_org) solution to add Runtime Monitoring protection.

‎README.md

Lines changed: 3 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -149,12 +149,14 @@ Please follow the instructions for SRA Terraform deployments in the [SRA Terrafo
149149
| [EC2 Default EBS Encryption](aws_sra_examples/solutions/ec2/ec2_default_ebs_encryption) | Configures the EC2 default EBS encryption to use the default KMS key within all provided regions. | | |
150150
| [Firewall Manager](aws_sra_examples/solutions/firewall_manager/firewall_manager_org) | Demonstrates configuring a security group policy and WAF policies for all accounts within an organization. | | |
151151
| [GuardDuty](aws_sra_examples/solutions/guardduty/guardduty_org) | Configures GuardDuty within a delegated admin account for all accounts within an organization. | | |
152-
| [IAM Access Analyzer](aws_sra_examples/solutions/iam/iam_access_analyzer) | Configures an organization analyzer within a delegated admin account and account level analyzer within each account. | | [Common Register Delegated Administrator](aws_sra_examples/solutions/common/common_register_delegated_administrator)</li></ul> |
152+
| [IAM Access Analyzer](aws_sra_examples/solutions/iam/iam_access_analyzer) | Configures an organization analyzer within a delegated admin account and account level analyzer within each account. | | <ul><li>[Common Register Delegated Administrator](aws_sra_examples/solutions/common/common_register_delegated_administrator)</li></ul> |
153153
| [IAM Account Password Policy](aws_sra_examples/solutions/iam/iam_password_policy) | Sets the account password policy for users to align with common compliance standards. | | |
154154
| [Inspector](aws_sra_examples/solutions/inspector/inspector_org) | Configure Inspector within a delegated admin account for all accounts and governed regions within the organization. | | |
155155
| [Macie](aws_sra_examples/solutions/macie/macie_org) | Configures Macie within a delegated admin account for all accounts within the organization. | | |
156+
| [Patch Manager](aws_sra_examples/solutions/patch_mgmt/patch_mgmt_org) | Configures Systems Manager Patch Manager functionality for accounts and governed regions within the organization. | |
156157
| [S3 Block Account Public Access](aws_sra_examples/solutions/s3/s3_block_account_public_access) | Configures the account-level S3 BPA settings for all accounts within the organization. | Configures S3 BPA settings on buckets created by Control Tower only. | <ul><li>AWS Control Tower</li></ul> |
157158
| [Security Hub](aws_sra_examples/solutions/securityhub/securityhub_org) | Configures Security Hub within a delegated admin account for all accounts and governed regions within the organization. | | <ul><li>AWS Config in all Org Accounts</li><li>[Config Management Account](aws_sra_examples/solutions/config/config_management_account) (_if using AWS Control Tower_)</li></ul> |
159+
| [Security Lake](aws_sra_examples/solutions/security_lake/security_lake_org) | Configures Security Lake within a delegated admin account for accounts and governed regions within the organization. | |
158160
| [Shield Advanced](aws_sra_examples/solutions/shield_advanced/shield_advanced) | Enables and configures AWS Shield Advanced for some or all the existing and future AWS Organization accounts | | |
159161

160162
## Utils

0 commit comments

Comments
 (0)