Skip to content

Terraform detonator #8

@christophetd

Description

@christophetd

Use-case: People who need custom control-plane level threat detection but don't want to write custom Go code such as

https://github.com/DataDog/threatest/blob/main/examples/custom-aws-detonator-terratest/custom_aws_detonator_with_terratest_test.go#L31-L39

Alternatives:

  • Use something already covered by Stratus Red Team
  • Provide a Terraform script that performs the detonation - in this case, we need to check if (1) Terraform is suitable for the "imperative-style" changes and (2) if we can inject the detonation UUID inside of the Terraform user agent programmatically (which should be able since Stratus Red Team does it...)
  • Provide a Bash script using the AWS CLI that performs the detonation

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions