{"id":21392163,"url":"https://github.com/sysdiglabs/terraform-azurerm-secure","last_synced_at":"2026-01-03T15:03:30.490Z","repository":{"id":190049982,"uuid":"679409663","full_name":"sysdiglabs/terraform-azurerm-secure","owner":"sysdiglabs","description":null,"archived":false,"fork":false,"pushed_at":"2024-10-25T06:02:33.000Z","size":196,"stargazers_count":0,"open_issues_count":2,"forks_count":4,"subscribers_count":7,"default_branch":"main","last_synced_at":"2024-10-25T09:37:07.304Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":null,"language":"HCL","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/sysdiglabs.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE.txt","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":"CODEOWNERS","security":null,"support":null,"governance":null,"roadmap":null,"authors":"AUTHORS","dei":null,"publiccode":null,"codemeta":null}},"created_at":"2023-08-16T19:21:16.000Z","updated_at":"2024-10-23T08:04:58.000Z","dependencies_parsed_at":"2023-08-23T03:09:27.747Z","dependency_job_id":"88fc7e75-0e72-4243-bd2d-a57d6b13ec97","html_url":"https://github.com/sysdiglabs/terraform-azurerm-secure","commit_stats":null,"previous_names":["sysdiglabs/terraform-azurerm-secure"],"tags_count":35,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/sysdiglabs%2Fterraform-azurerm-secure","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/sysdiglabs%2Fterraform-azurerm-secure/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/sysdiglabs%2Fterraform-azurerm-secure/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/sysdiglabs%2Fterraform-azurerm-secure/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/sysdiglabs","download_url":"https://codeload.github.com/sysdiglabs/terraform-azurerm-secure/tar.gz/refs/heads/main","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":243878409,"owners_count":20362431,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":[],"created_at":"2024-11-22T13:39:28.562Z","updated_at":"2026-01-03T15:03:30.484Z","avatar_url":"https://github.com/sysdiglabs.png","language":"HCL","funding_links":[],"categories":[],"sub_categories":[],"readme":"# Sysdig Secure for Cloud in Azure\n\nTerraform module that deploys the Sysdig Secure for Cloud stack in Azure.\n\nWith Modular Onboarding, introducing the following design and install structure for `terraform-azurerm-secure`:\n\n* **[Onboarding]**: It onboards an Azure subscription or Tenant for the first time to Sysdig Secure for Cloud, and collects\ninventory and organizational hierarchy in the given tenant. Managed through `onboarding` module. \u003cbr/\u003e\n\nProvides unified threat-detection, compliance, forensics and analysis through these major components:\n\n* **[CSPM](https://docs.sysdig.com/en/docs/sysdig-secure/posture/)**: It evaluates periodically your cloud configuration, using Cloud Custodian, against some benchmarks and returns the results and remediation you need to fix. Managed through `config-posture` module. \u003cbr/\u003e\n\n* **[CDR (Cloud Detection and Response)](https://docs.sysdig.com/en/docs/sysdig-secure/threats/activity/events-feed/)**: It sends periodically activity logs to Sysdig by directing those to a dedicated Event Hub which will be queried by the Sysdig backend to retrieve the data for log ingestion. Enabled via `event-hub` integrations module. \u003cbr/\u003e\n\n* **[Vulnerability Management Agentless Host Scanning](https://docs.sysdig.com/en/docs/sysdig-secure/vulnerabilities/)**: It uses disk snapshots to provide highly accurate views of vulnerability risk, access to public exploits, and risk management.  Managed through `agentless-scanning` module. \u003cbr/\u003e\n\nFor other Cloud providers check: [AWS](https://github.com/draios/terraform-aws-secure-for-cloud) , [GCP](https://github.com/draios/terraform-google-secure-for-cloud)\n\n## Modules\n\n### Feature modules\n\nThese are independent feature modules which deploy and manage all the required Cloud resources and Sysdig resources\nfor the respective Sysdig features. They manage both, onboarding a single Azure Subscription or an Azure Tenant to Sysdig Secure for Cloud.\n\n`onboarding`, `config-posture` and `agentless-scanning` are independent feature modules.\n\nA Service Principal is created per each independent module due to permission scoping, if you want to use a pre-existing one instead of creating a new one, refer to each module's README file.\n\n### Integrations\n\nThe modules under `integrations` are feature agnostic modules which deploy and manage all the required Cloud resources and Sysdig resources\nfor shared Sysdig integrations. That is to say, one or more Sysdig features can be enabled by installing an integration.\n\nThese modules manage both, onboarding a single Azure Subscription or an Azure Tenant to Sysdig Secure for Cloud.\n\n`event-hub` is an integration module.\n\nA Service Principal is created per each independent integration module due to permission scoping, if you want to use a pre-existing one instead of creating a new one, refer to each module's README file.\n\n## Examples and usage\n\nThe modules in this repository can be installed on a single Azure subscription, or on an entire Azure Tenant, or management groups within the Tenant.\n\nThe `test` directory has sample `examples` for all these module deployments i.e under `single_subscription`,  or `organization` sub-folders.\n\nFor example, to onboard a single Azure subscription, with CSPM enabled, with modular installation :-\n1. Run the terraform snippet under `test/examples/modular_single_subscription/onboarding_with_posture.tf` with\n   the appropriate attribute values populated.\n2. This will install the `onboarding` module, which will also create a Cloud Account on Sysdig side.\n3. It will also install the `config-posture` module, which will also install cloud resources as well as Sysdig resources\n   for successfully running CSPM scans.\n4. On Sysdig side, you will be able to see the Cloud account onboarded with required components, and CSPM feature installed and enabled.\n\n## Best practices\n\nFor contributing to existing modules or adding new modules, below are some of the best practices recommended :-\n* Module names referred and used in deployment snippets should be consistent with those in their source path.\n* A module can fall into one of two categories - feature module or an integrations module.\n* Every user-facing deployment snippet will,\n  - at the top level first call the feature module or integrations module from this repo. These modules deploy corresponding cloud resources and Sysdig component resources.\n  - the corresponding feature resource will be added as the last block and enabled from the module installed component resource reference.\n  See sample deployment snippets in `test/examples` for more.\n* integrations modules are shared and could enable multiple features. Hence, one should be careful with changes to them.\n* Module naming follows the pattern with \"-\" , resource and variable naming follows the pattern with \"_\".\n\n## Authors\n\nModule is maintained and supported by [Sysdig](https://sysdig.com).\n\n## License\n\nApache 2 Licensed. See LICENSE for full details.\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fsysdiglabs%2Fterraform-azurerm-secure","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fsysdiglabs%2Fterraform-azurerm-secure","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fsysdiglabs%2Fterraform-azurerm-secure/lists"}