{"id":38011124,"url":"https://github.com/corelight/terraform-aws-enrichment","last_synced_at":"2026-01-16T19:20:33.885Z","repository":{"id":237724004,"uuid":"794645984","full_name":"corelight/terraform-aws-enrichment","owner":"corelight","description":"Terraform for Corelight's AWS Cloud Enrichment.","archived":false,"fork":false,"pushed_at":"2025-12-17T16:48:17.000Z","size":68,"stargazers_count":1,"open_issues_count":0,"forks_count":0,"subscribers_count":3,"default_branch":"main","last_synced_at":"2025-12-21T05:15:55.529Z","etag":null,"topics":["aws","cloud","enrichment","terraform","zeek"],"latest_commit_sha":null,"homepage":"","language":"HCL","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/corelight.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2024-05-01T16:51:19.000Z","updated_at":"2025-12-17T16:47:59.000Z","dependencies_parsed_at":"2024-05-03T02:59:44.463Z","dependency_job_id":"ad45d181-945d-455b-8de4-c720b3e7a765","html_url":"https://github.com/corelight/terraform-aws-enrichment","commit_stats":null,"previous_names":["corelight/terraform-aws-enrichment"],"tags_count":1,"template":false,"template_full_name":null,"purl":"pkg:github/corelight/terraform-aws-enrichment","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/corelight%2Fterraform-aws-enrichment","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/corelight%2Fterraform-aws-enrichment/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/corelight%2Fterraform-aws-enrichment/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/corelight%2Fterraform-aws-enrichment/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/corelight","download_url":"https://codeload.github.com/corelight/terraform-aws-enrichment/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/corelight%2Fterraform-aws-enrichment/sbom","scorecard":null,"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":28481675,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-01-16T11:59:17.896Z","status":"ssl_error","status_checked_at":"2026-01-16T11:55:55.838Z","response_time":107,"last_error":"SSL_read: unexpected eof while reading","robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":false,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["aws","cloud","enrichment","terraform","zeek"],"created_at":"2026-01-16T19:20:33.797Z","updated_at":"2026-01-16T19:20:33.859Z","avatar_url":"https://github.com/corelight.png","language":"HCL","funding_links":[],"categories":[],"sub_categories":[],"readme":"[#](#) terraform-aws-enrichment\n\n\u003cimg src=\"docs/overview.svg\" alt=\"overview\"\u003e\n\n## Usage\n\n```terraform\nresource \"aws_s3_bucket\" \"enrichment_bucket\" {\n  bucket = \"corelight-enrichment\"\n}\n\nmodule \"enrichment_eventbridge_role\" {\n  source = \"github.com/corelight/terraform-aws-enrichment//modules/iam/eventbridge\"\n\n  primary_event_bus_arn = module.enrichment.primary_event_bus_arn\n}\n\nmodule \"enrichment_lambda_role\" {\n  source = \"github.com/corelight/terraform-aws-enrichment//modules/iam/lambda\"\n\n  enrichment_bucket_arn           = aws_s3_bucket.enrichment_bucket.arn\n  enrichment_ecr_repository_arn   = data.aws_ecr_repository.enrichment_repo.arn\n  lambda_cloudwatch_log_group_arn = module.enrichment.cloudwatch_log_group_arn\n}\n\nmodule \"enrichment\" {\n  source = \"github.com/corelight/terraform-aws-enrichment\"\n\n  corelight_cloud_enrichment_image = \"123456789111.dkr.ecr.us-east-1.amazonaws.com/corelight-sensor-enrichment-aws\"\n  corelight_cloud_enrichment_image_tag = \"0.1.0\"\n  enrichment_bucket_name = aws_s3_bucket.enrichment_bucket.bucket\n  eventbridge_iam_cross_region_role_arn = module.enrichment_eventbridge_role.cross_region_role_arn\n  lambda_iam_role_arn                   = module.enrichment_lambda_role.lambda_iam_role_arn\n}\n```\n\n## Preparation\n\nImage based Lambdas must be deployed from a private Elastic Container Registry (ECR)\nrepository and therefore the data collection serverless container image provided by\nCorelight must be copied from Dockerhub and pushed to your own ECR repository.\n\n#### Create the ECR Repository (CLI)\n```bash\naws ecr create-repository --repository-name corelight/sensor-enrichment-aws\n```\n\n#### Create the ECR Repository (Terraform)\n```terraform\nresource \"aws_ecr_repository\" \"enrichemnt_repo\" {\n  name = \"corelight/sensor-enrichment-aws\"\n}\n```\n\n#### Copying the Corelight image\nLog into the AWS account's registry\n\n```bash\naws ecr get-login-password --region \u003cregion\u003e | docker login \\\n    --username AWS \\\n    --password-stdin \u003c[account id].dkr.ecr.[region].amazonaws.com\u003e\n```\n\nPull from Dockerhub and push the image to ECR\n```bash\nAWS_ACCOUNT=\u003center aws account id\u003e\nAWS_REGION=\u003center ecr repository region\u003e\nECR_REGISTRY=\"${AWS_ACCOUNT}.dkr.ecr.${AWS_REGION}.amazonaws.com\"\n\n# Pull from Dockerhub\nCORELIGHT_REPO=corelight\nCORELIGHT_IMAGE_NAME=sensor-enrichment-aws\nCORELIGHT_IMAGE_TAG=0.1.1\n\n# Dockerhub image: corelight/sensor-enrichment-aws:0.1.1\nSRC_IMAGE=\"$CORELIGHT_REPO/$CORELIGHT_IMAGE_NAME:$CORELIGHT_IMAGE_TAG\"\n\n# ECR Destination: \u003cAWS_ACCOUNT\u003e.dkr.ecr.\u003cAWS_REGION\u003e.amazonaws.com/corelight/sensor-enrichment-aws:0.1.1\nDST_IMAGE=\"$ECR_REGISTRY/$CORELIGHT_REPO/$CORELIGHT_IMAGE_NAME:$CORELIGHT_IMAGE_TAG\"\n\n# Pull Corelight Image\ndocker pull $SRC_IMAGE --platform linux/arm64\n\ndocker image tag $SRC_IMAGE $DST_IMAGE\n\ndocker image push $DST_IMAGE --platform linux/arm64\n```\n\n## Deployment\n\nThe variables for this module all have default values that can be overwritten\nto meet your naming and compliance standards. The only variables without defaults are\nthe Lambda's ECR image name and tag which you will set during preparation.\n\nDeployment examples can be found [here][].\n\n[here]: https://github.com/corelight/corelight-cloud/tree/main/terraform/aws-cloud-enrichment\n\n## License\n\nThe project is licensed under the [MIT][] license.\n\n[MIT]: LICENSE\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fcorelight%2Fterraform-aws-enrichment","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fcorelight%2Fterraform-aws-enrichment","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fcorelight%2Fterraform-aws-enrichment/lists"}