{"id":21392156,"url":"https://github.com/sysdiglabs/aws-templates-secure-for-cloud","last_synced_at":"2025-07-13T18:30:59.224Z","repository":{"id":38184932,"uuid":"305427221","full_name":"sysdiglabs/aws-templates-secure-for-cloud","owner":"sysdiglabs","description":"Deploy Sysdig Secure for cloud with AWS Cloudformation","archived":false,"fork":false,"pushed_at":"2024-09-12T16:02:49.000Z","size":359,"stargazers_count":4,"open_issues_count":1,"forks_count":1,"subscribers_count":14,"default_branch":"main","last_synced_at":"2024-09-13T05:00:16.463Z","etag":null,"topics":["aws","cloudformation","image-scanning"],"latest_commit_sha":null,"homepage":"https://docs.sysdig.com/en/docs/installation/sysdig-secure-for-cloud/deploy-sysdig-secure-for-cloud-on-aws/#onboarding-a-single-account-using-a-cft","language":"Makefile","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":null,"status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/sysdiglabs.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":null,"code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":"CODEOWNERS","security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2020-10-19T15:19:42.000Z","updated_at":"2024-09-12T16:03:01.000Z","dependencies_parsed_at":"2023-10-02T18:59:06.429Z","dependency_job_id":"61e781b7-af9a-4ff0-b7b5-88141e91d71a","html_url":"https://github.com/sysdiglabs/aws-templates-secure-for-cloud","commit_stats":null,"previous_names":[],"tags_count":29,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/sysdiglabs%2Faws-templates-secure-for-cloud","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/sysdiglabs%2Faws-templates-secure-for-cloud/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/sysdiglabs%2Faws-templates-secure-for-cloud/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/sysdiglabs%2Faws-templates-secure-for-cloud/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/sysdiglabs","download_url":"https://codeload.github.com/sysdiglabs/aws-templates-secure-for-cloud/tar.gz/refs/heads/main","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":225908242,"owners_count":17543472,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["aws","cloudformation","image-scanning"],"created_at":"2024-11-22T13:39:23.665Z","updated_at":"2024-11-22T13:39:24.256Z","avatar_url":"https://github.com/sysdiglabs.png","language":"Makefile","readme":"# Sysdig Secure for Cloud in AWS - Cloudformation Templates\n\nThis repository contains the CloudFormation templates to deploy [Sysdig Secure for Cloud](https://docs.sysdig.com/en/docs/sysdig-secure/sysdig-secure-for-cloud/) suite.\n\n## Features\nProvides unified threat-detection, compliance, forensics and analysis through these major components:\n\n* **[Threat Detection](https://docs.sysdig.com/en/docs/sysdig-secure/insights/)**: Tracks abnormal and suspicious activities in your cloud environment based on Falco language. Managed through `cloud-connector` module. \u003cbr/\u003e\n\n* **[Compliance](https://docs.sysdig.com/en/docs/sysdig-secure/posture/compliance/compliance-unified-/)**: Enables the evaluation of standard compliance frameworks. Requires both modules  `cloud-connector` and `cloud-bench`. \u003cbr/\u003e\n\n* **[Identity and Access Management](https://docs.sysdig.com/en/docs/sysdig-secure/posture/identity-and-access/)**: Analyses user access overly permissive policies. Requires both modules  `cloud-connector` and `cloud-bench`. \u003cbr/\u003e\n\n* **[Image Scanning](https://docs.sysdig.com/en/docs/sysdig-secure/scanning/)**: Automatically scans all container images pushed to the registry (ECR) and the images that run on the AWS workload (currently ECS). Managed through `cloud-connector`. \u003cbr/\u003eDisabled by Default, can be enabled through `deploy_image_scanning_ecr` and `deploy_image_scanning_ecs` input variable parameters.\u003cbr/\u003e\n\nFor Terraform flavor, check [Secure for cloud - Terraform](https://github.com/sysdiglabs/terraform-aws-secure-for-cloud/)\n\n\n## UseCases\n\nIf you're unsure about what/how to use this module, please fill the [questionnaire](https://github.com/sysdiglabs/terraform-aws-secure-for-cloud/blob/master/use-cases/_questionnaire.md) report as an issue and let us know your context, we will be happy to help and improve our module.\n\n### Single-Account\n\nDeploy the latest versions using one of the workloads that most suit you:\n\n#### ECS-based workload\n\n[Template for ECS workload](https://console.aws.amazon.com/cloudformation/home#/stacks/quickCreate?stackName=Sysdig-CloudVision\u0026templateURL=https://cf-templates-cloudvision-ci.s3-eu-west-1.amazonaws.com/ecs/latest/entry-point.yaml)\n \n![single-account diagram](https://raw.githubusercontent.com/sysdiglabs/terraform-aws-secure-for-cloud/master/examples/single-account-ecs/diagram-single.png)\n\n\n#### AppRunner-based workload\n\nLess resource-demanding and economic deployment (ECS requires VPCs and Gateways), but Apprunner is not available on all regions yet\n\n[Template for AppRunner workload](https://console.aws.amazon.com/cloudformation/home#/stacks/quickCreate?stackName=Sysdig-CloudVision\u0026templateURL=https://cf-templates-cloudvision-ci.s3-eu-west-1.amazonaws.com/apprunner/latest/entry-point.yaml)\n\n![single-account diagram on apprunner](https://raw.githubusercontent.com/sysdiglabs/terraform-aws-secure-for-cloud/master/examples/single-account-apprunner/diagram-single.png)\n\n\nIf needed, we also have an \u003ca href=\"https://github.com/sysdiglabs/terraform-aws-secure-for-cloud\"\u003eSysdig Secure for Cloud Terraform version\u003c/a\u003e\n\n\n## Organizational\n\nNo official cloudformation templates available yet.\n\nIf Terraform is not desired, you can approach the installation through the `manual` setup, following the so prefixed \nextra [use-cases](https://github.com/sysdiglabs/terraform-aws-secure-for-cloud/tree/master/use-cases)\n\n---\n## Authors\n\nModule is maintained and supported by [Sysdig](https://sysdig.com).\n\n## License\n\nApache 2 Licensed. See LICENSE for full details.\n","funding_links":[],"categories":[],"sub_categories":[],"project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fsysdiglabs%2Faws-templates-secure-for-cloud","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fsysdiglabs%2Faws-templates-secure-for-cloud","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fsysdiglabs%2Faws-templates-secure-for-cloud/lists"}