You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: use-cases/_questionnaire.md
+11-8Lines changed: 11 additions & 8 deletions
Original file line number
Diff line number
Diff line change
@@ -1,3 +1,5 @@
1
+
_Last update: 2023.04.04_
2
+
1
3
# Use-Case Questionnaire
2
4
3
5
This questionnaire is aimed to help you/us find the most suitable way of deploying [Sysdig Secure for Cloud](https://docs.sysdig.com/en/docs/installation/sysdig-secure-for-cloud/) in your infrastucture, as well as to understand the needs to develop new official `/examples`, for reducing the installation friction.
@@ -35,13 +37,14 @@ In what [Sysdig For Cloud Features](https://docs.sysdig.com/en/docs/sysdig-secur
35
37
36
38
### aws-specific
37
39
- do you have **existing aws cloudtrail**?
38
-
- is it an organizational cloudtrail in the organization management account?
39
-
- does this organizational cloudtrail report to an SNS? if yes, is it in the same management account? if no, could you enable it? ingestor-type: `aws-cloudtrail-sns-sqs`
40
-
- is the S3 bucket of that cloudtrail in the management account or a sepparated member account?
41
-
- if it's not organizational, does each trail report to the same s3 bucket?
42
-
- if so, does that S3 bucket already have any "Event Notification System"? Is it an SNS we could subscribe to? ingestor-type: `aws-cloudtrail-s3-sns-sqs`
43
-
- if so, does that S3 bucket already have an "Amazon EventBridge" system activated? ingestor-type: `aws-cloudtrail-s3-sns-sqs-eventbridge`
40
+
- is it an organizational cloudtrail in the organization management account?
41
+
- does this organizational cloudtrail report to an SNS? if yes, is it in the same management account? if no, could you enable it? ingestor-type: `aws-cloudtrail-sns-sqs`
42
+
- is the S3 bucket of that cloudtrail in the management account or a sepparated member account?
43
+
- if it's not organizational, does each trail report to the same s3 bucket?
44
+
- if so, does that S3 bucket already have any "Event Notification System"? Is it an SNS we could subscribe to? ingestor-type: `aws-cloudtrail-s3-sns-sqs`
45
+
- if so, does that S3 bucket already have an "Amazon EventBridge" system activated? ingestor-type: `aws-cloudtrail-s3-sns-sqs-eventbridge`
44
46
- whether it's organizational or not, could you give us a quick picture of the infra setup in terms of what resource is in what account? the resources of interest are the ones you may want to reuse, such as the cloudtrail, cloudtrail-sns, cloudtrail-s3, existing clusters where to deploy the workload, ...
47
+
- where (which member account) would you like secure for cloud module to be deployed? to help simplification, would it be possible to deploy it in the same account as the S3 bucket is?
45
48
46
49
### google-cloud specific
47
50
- do you have Logs API activated in place (either organizational or per-project)?
@@ -54,7 +57,7 @@ In what [Sysdig For Cloud Features](https://docs.sysdig.com/en/docs/sysdig-secur
54
57
- if so, how many member accounts (aws) /projects (gcp) /subscriptions (azure) does it have?
55
58
- regarding of the number, how many accounts would be required to enroll in the secure for cloud setup?
56
59
- do you have dynamic accounts/projects/subscriptions? what's their lifecycle?
57
-
- does it have any landing such as aws control-tower? what's event management there (if any)?
60
+
- does it have any landing such as aws control-tower? what's the event management there (if any)?
58
61
- sysdig secure for cloud is presented in different **compute workload** flavors; ecs on aws, cloudrun on gcp or azure container instances on azure, plus a K8s deployment an all three clouds, plus apprunner on aws (less resource-demaing than ecs, but region limited)
59
62
- in case of ECS or K8S, do you have an existing cluster you would like to re-use?
60
63
- how many **regions** do you work with?
@@ -68,4 +71,4 @@ In what [Sysdig For Cloud Features](https://docs.sysdig.com/en/docs/sysdig-secur
68
71
- do you use any other InfraAsCode frameworks?
69
72
- if you want to use Kubernetes compute for Sysdig deployment, what's your current way of deploying helm charts?
0 commit comments