https://github.com/corelight/terraform-aws-single-sensor
Terraform for a single AWS Corelight EC2 instance Cloud Sensor Deployment.
https://github.com/corelight/terraform-aws-single-sensor
aws cloud iac terraform
Last synced: 6 months ago
JSON representation
Terraform for a single AWS Corelight EC2 instance Cloud Sensor Deployment.
- Host: GitHub
- URL: https://github.com/corelight/terraform-aws-single-sensor
- Owner: corelight
- License: mit
- Created: 2025-01-15T20:05:21.000Z (over 1 year ago)
- Default Branch: main
- Last Pushed: 2025-10-29T14:13:32.000Z (8 months ago)
- Last Synced: 2025-10-29T16:16:56.876Z (8 months ago)
- Topics: aws, cloud, iac, terraform
- Language: HCL
- Homepage:
- Size: 30.3 KB
- Stars: 1
- Watchers: 3
- Forks: 0
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
- License: LICENSE
Awesome Lists containing this project
README
# terraform-aws-single-sensor
Deploy a single AWS Corelight EC2 instance Cloud Sensor.
## Getting Started
### Initialize Terraform state
```shell
terraform init
```
### Deployment Permissions
Ensure you are able to authenticate to the AWS account you are looking to deploy
these resources into and have the proper permissions to create resources. Any deployment
including IAM resources will require administrator level permissions.
## Usage
```terraform
ami_id = "ami-12345abc"
fleet_community_string = ""
aws_key_pair_name = ""
// Monitoring Interface - User Provided (Option A)
monitoring_interface_id = ""
// Monitoring Interface - Module Provided (Option B)
monitoring_interface_subnet_id = ""
monitoring_interface_name = "" // default: corelight-mon-nic
// Monitoring Interface Security Group - User Provided (Option A)
// Rules will be added to the security group provided
monitoring_security_group_id = ""
// Monitoring Interface Security Group - Module Provided (Option B)
monitoring_security_group_vpc_id = ""
monitoring_security_group_name = "" // default: corelight-sensor-mon-sg
monitoring_security_group_description = "" // default: Corelight Sensor Monitoring SG
// Management Interface - User Provided (Option A)
management_interface_id = ""
// Management Interface - Module Provided (Option B)
management_interface_subnet_id = ""
management_interface_name = "" // default: corelight-mgmt-nic
management_interface_public_ip = true // default: false
// Management Interface Security Group - User Provided (Option A)
// Rules will be added to the security group provided
management_security_group_id = ""
// Management Interface Security Group - Module Provided (Option B)
management_security_group_vpc_id = ""
management_security_group_name = "" // default: corelight-sensor-mgmt-sg
management_security_group_description = "" // default: Corelight Sensor Management SG
// Security Rules Configuration
ssh_allow_cidrs = [""] // default: []
egress_allow_cidrs = [""] // default: ["0.0.0.0/0"]
health_check_allow_cidrs = [""] // default: ["0.0.0.0/0"]
// Recommend using the CIDR of the VPC being monitored
mirror_ingress_allow_cidrs = [""] // default: ["0.0.0.0/0"]
// Licensing Module Provided - with Fleet (Option A)
fleet_token = ""
fleet_url = "https://:1443/fleet/v1/internal/softsensor/websocket"
fleet_server_sslname = ""
// Licensing Module Provided - Without Fleet (Option B)
license_key_file_path = "/path/to/license.txt"
// Custom User Data for Cloud-Init
// it is recommended to use the module for sensor configuration. Providing your own custom user data may lead to unforeseen consequences.
custom_sensor_user_data = ""
// Instance Configuration
instance_name = "" // default: corelight-sensor
instance_type = "" // default: c5.2xlarge
ebs_volume_size = "