https://github.com/corelight/terraform-aws-sensor
Terraform for Corelight's AWS Cloud Sensor Deployment.
https://github.com/corelight/terraform-aws-sensor
aws cloud sensor terraform zeek
Last synced: 6 months ago
JSON representation
Terraform for Corelight's AWS Cloud Sensor Deployment.
- Host: GitHub
- URL: https://github.com/corelight/terraform-aws-sensor
- Owner: corelight
- License: mit
- Created: 2024-05-01T16:51:21.000Z (about 2 years ago)
- Default Branch: main
- Last Pushed: 2025-12-19T16:05:00.000Z (7 months ago)
- Last Synced: 2025-12-22T06:43:18.097Z (7 months ago)
- Topics: aws, cloud, sensor, terraform, zeek
- Language: HCL
- Homepage:
- Size: 917 KB
- Stars: 2
- Watchers: 3
- Forks: 4
- Open Issues: 3
-
Metadata Files:
- Readme: README.md
- License: LICENSE
- Security: security_groups.tf
Awesome Lists containing this project
README
# terraform-aws-sensor
Terraform for Corelight's AWS Cloud Sensor Deployment.
## Usage
```terraform
data "aws_subnet" "management" {
for_each = toset(["", ""])
id = each.value
}
module "asg_lambda_role" {
source = "github.com/corelight/terraform-aws-sensor//modules/iam/lambda"
lambda_cloudwatch_log_group_arn = module.sensor.cloudwatch_log_group_arn
sensor_autoscaling_group_arn = module.sensor.autoscaling_group_arn
security_group_arn = module.sensor.management_security_group_arn
subnet_arns = [for subnet in data.aws_subnet.management : subnet.arn]
}
module "sensor" {
source = "github.com/corelight/terraform-aws-sensor"
# Multi-AZ support: provide one subnet per availability zone
# The ASG will automatically distribute instances across AZs
availability_zones = ["us-east-1a", "us-east-1b"]
aws_key_pair_name = ""
# Request access to Corelight sensor AMI from you Account Executive
corelight_sensor_ami_id = ""
license_key = ""
# Provide one management subnet per AZ (must match availability_zones order)
management_subnet_ids = ["", ""]
# Provide one monitoring subnet per AZ (must match availability_zones order)
monitoring_subnet_ids = ["", ""]
community_string = ""
vpc_id = ""
asg_lambda_iam_role_arn = module.asg_lambda_role.role_arn
fleet_token = ""
fleet_url = ""
fleet_server_sslname = ""
# optional KMS key, if set will encrpyt the EBS volumes launched by the auto scaler group
kms_key_id = ""
}
### Optional resources for enrichment
module "enrichment_sensor_role" {
source = "github.com/corelight/terraform-aws-enrichment//modules/iam/sensor"
enrichment_bucket_arn = data.aws_s3_bucket.enrichment_bucket.arn
}
resource "aws_iam_instance_profile" "corelight_sensor" {
name = ""
role = module.enrichment_sensor_role.sensor_role_name
}
```
### Deployment
The variables for this module all have default values that can be overwritten
to meet your naming and compliance standards.
Deployment examples can be found [here][].
[here]: https://github.com/corelight/corelight-cloud/tree/main/terraform/aws-autoscaling-sensor
## License
The project is licensed under the [MIT][] license.
[MIT]: LICENSE