Ecosyste.ms: Awesome
An open API service indexing awesome lists of open source software.
https://github.com/dragondrop-cloud/cloud-concierge
Codify resources outside of Terraform control, detect drift, estimate cloud costs, identify security risks, and more. "Terraform best practices as a Pull Request."
https://github.com/dragondrop-cloud/cloud-concierge
aws azurerm containers gcp iac infrastructure-as-code terraform
Last synced: 2 months ago
JSON representation
Codify resources outside of Terraform control, detect drift, estimate cloud costs, identify security risks, and more. "Terraform best practices as a Pull Request."
- Host: GitHub
- URL: https://github.com/dragondrop-cloud/cloud-concierge
- Owner: dragondrop-cloud
- License: apache-2.0
- Created: 2023-06-22T21:03:50.000Z (about 1 year ago)
- Default Branch: dev
- Last Pushed: 2024-03-26T02:08:02.000Z (3 months ago)
- Last Synced: 2024-03-27T02:48:23.244Z (3 months ago)
- Topics: aws, azurerm, containers, gcp, iac, infrastructure-as-code, terraform
- Language: Go
- Homepage: https://docs.cloudconcierge.io
- Size: 1.21 MB
- Stars: 166
- Watchers: 3
- Forks: 5
- Open Issues: 40
-
Metadata Files:
- Readme: README.md
- Contributing: CONTRIBUTING.md
- License: LICENSE
- Codeowners: .github/CODEOWNERS
Lists
- jimsghstars - dragondrop-cloud/cloud-concierge - Codify resources outside of Terraform control, detect drift, estimate cloud costs, identify security risks, and more. "Terraform best practices as a Pull Request." (Go)
- jimsghstars - dragondrop-cloud/cloud-concierge - Codify resources outside of Terraform control, detect drift, estimate cloud costs, identify security risks, and more. "Terraform best practices as a Pull Request." (Go)
- awesome-tf - cloud-concierge - Open Source, codify unmanaged resources as Terraform, detect drift, and cloud cost and security analysis, delivered as a Pull Request. (Self-hosted Terraform Platforms / IDE)
- awesome-stars - dragondrop-cloud/cloud-concierge - Codify resources outside of Terraform control, detect drift, estimate cloud costs, identify security risks, and more. "Terraform best practices as a Pull Request." (Go)
README
# cloud-concierge
Example Output |
Docs
## Why cloud-concierge?
cloud-concierge is a container that integrates with your existing Terraform management set up.
All results and codified resources are output via a digestible [Pull Request](https://github.com/dragondrop-cloud/cloud-concierge-example/pull/3) to a repository of your choice, providing you with a "State of Cloud"
report in a GitOps manner. It provides:
- ✅ Cloud codification, identify un-managed resources and generate corresponding Terraform code and import statements/import blocks
- ✅ Drift detection
- ✅ Flag accounts creating changes outside your Terraform workflow
- ✅ Whole-cloud cost estimation, powered by Infracost
- ✅ Whole-cloud security scanning, powered by tfsec
## Quick Start
### All Cloud Provider Pre-requisites
1) Configure an environment variable file (use one of our [templates](https://github.com/dragondrop-cloud/cloud-concierge/tree/dev/examples/environments/) to get started) to control the specifics of cloud-concierge's coverage.
2) Run `docker pull dragondropcloud/cloud-concierge:latest` to pull the latest image.
### AWS Quickstart
I) Run `aws configure` on your CLI and ensure that credentials with read-only access to your cloud are configured. If referencing state files stored in an s3 bucket, the credentials specified should be able to read those state files as well.
II) Run the cloud-concierge container using the following command:
`
docker run --env-file ./my-env-file.env -v main:/main -v ~/.aws:/main/credentials/aws:ro -w /main dragondropcloud/cloud-concierge:latest
`
If running on Windows, the substitute `$HOME/.aws:` for `~/.aws:` in the above command.
III) Check the Pull Request that has been created by cloud-concierge ([example output](https://github.com/dragondrop-cloud/cloud-concierge-example/pull/3)).
### Azure & GCP Quickstart
See more [here](https://docs.cloudconcierge.io/quick-start#gcp).
## How does it work?
1) cloud-concierge creates a representation of your cloud infrastructure as Terraform. Only read-only access should be given to cloud-concierge.
2) This representation is compared against your state files to detect drift, and identify resources outside of Terraform control.
3) Static security scans and cost estimation is performed on the Terraform representation.
4) Results and code are summarized in a [Pull Request](https://docs.cloudconcierge.io/how-it-works/pull-request-output) within the repository of your choice.
### NLP Engine
Usage of cloud-concierge is not tracked. To maintain a [slimmer final docker image](https://medium.com/@hello_9187/ripping-out-python-and-reducing-our-docker-image-size-by-87-b61beda90ce4)
we host the NLP model that recommends new Terraform resources to match with state files in a Python-based Google Cloud Function.
This modelling code does not log any of the anonymized data sent to it,
and is stored within this repository [here](https://github.com/dragondrop-cloud/cloud-concierge/blob/1c31a98cec6d2c1189c9e4da35c616de100c04bb/nlpengine/main.py).
## Contributing
Contributions in any form are highly encouraged. Check out our [contributing guide](CONTRIBUTING.md) to get started.
## Resources
- [Example Output](https://github.com/dragondrop-cloud/cloud-concierge-example/pull/3)
- [Documentation](https://docs.cloudconcierge.io)