Skip to content

Commit bfcfc60

Browse files
author
iru
authored
Update _questionnaire.md
1 parent fdaf658 commit bfcfc60

File tree

1 file changed

+11
-8
lines changed

1 file changed

+11
-8
lines changed

use-cases/_questionnaire.md

Lines changed: 11 additions & 8 deletions
Original file line numberDiff line numberDiff line change
@@ -1,3 +1,5 @@
1+
_Last update: 2023.04.04_
2+
13
# Use-Case Questionnaire
24

35
This questionnaire is aimed to help you/us find the most suitable way of deploying [Sysdig Secure for Cloud](https://docs.sysdig.com/en/docs/installation/sysdig-secure-for-cloud/) in your infrastucture, as well as to understand the needs to develop new official `/examples`, for reducing the installation friction.
@@ -35,13 +37,14 @@ In what [Sysdig For Cloud Features](https://docs.sysdig.com/en/docs/sysdig-secur
3537

3638
### aws-specific
3739
- do you have **existing aws cloudtrail**?
38-
- is it an organizational cloudtrail in the organization management account?
39-
- does this organizational cloudtrail report to an SNS? if yes, is it in the same management account? if no, could you enable it? ingestor-type: `aws-cloudtrail-sns-sqs`
40-
- is the S3 bucket of that cloudtrail in the management account or a sepparated member account?
41-
- if it's not organizational, does each trail report to the same s3 bucket?
42-
- if so, does that S3 bucket already have any "Event Notification System"? Is it an SNS we could subscribe to? ingestor-type: `aws-cloudtrail-s3-sns-sqs`
43-
- if so, does that S3 bucket already have an "Amazon EventBridge" system activated? ingestor-type: `aws-cloudtrail-s3-sns-sqs-eventbridge`
40+
- is it an organizational cloudtrail in the organization management account?
41+
- does this organizational cloudtrail report to an SNS? if yes, is it in the same management account? if no, could you enable it? ingestor-type: `aws-cloudtrail-sns-sqs`
42+
- is the S3 bucket of that cloudtrail in the management account or a sepparated member account?
43+
- if it's not organizational, does each trail report to the same s3 bucket?
44+
- if so, does that S3 bucket already have any "Event Notification System"? Is it an SNS we could subscribe to? ingestor-type: `aws-cloudtrail-s3-sns-sqs`
45+
- if so, does that S3 bucket already have an "Amazon EventBridge" system activated? ingestor-type: `aws-cloudtrail-s3-sns-sqs-eventbridge`
4446
- whether it's organizational or not, could you give us a quick picture of the infra setup in terms of what resource is in what account? the resources of interest are the ones you may want to reuse, such as the cloudtrail, cloudtrail-sns, cloudtrail-s3, existing clusters where to deploy the workload, ...
47+
- where (which member account) would you like secure for cloud module to be deployed? to help simplification, would it be possible to deploy it in the same account as the S3 bucket is?
4548

4649
### google-cloud specific
4750
- do you have Logs API activated in place (either organizational or per-project)?
@@ -54,7 +57,7 @@ In what [Sysdig For Cloud Features](https://docs.sysdig.com/en/docs/sysdig-secur
5457
- if so, how many member accounts (aws) /projects (gcp) /subscriptions (azure) does it have?
5558
- regarding of the number, how many accounts would be required to enroll in the secure for cloud setup?
5659
- do you have dynamic accounts/projects/subscriptions? what's their lifecycle?
57-
- does it have any landing such as aws control-tower? what's event management there (if any)?
60+
- does it have any landing such as aws control-tower? what's the event management there (if any)?
5861
- sysdig secure for cloud is presented in different **compute workload** flavors; ecs on aws, cloudrun on gcp or azure container instances on azure, plus a K8s deployment an all three clouds, plus apprunner on aws (less resource-demaing than ecs, but region limited)
5962
- in case of ECS or K8S, do you have an existing cluster you would like to re-use?
6063
- how many **regions** do you work with?
@@ -68,4 +71,4 @@ In what [Sysdig For Cloud Features](https://docs.sysdig.com/en/docs/sysdig-secur
6871
- do you use any other InfraAsCode frameworks?
6972
- if you want to use Kubernetes compute for Sysdig deployment, what's your current way of deploying helm charts?
7073

71-
<br/>
74+
<br/>

0 commit comments

Comments
 (0)