Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Terraform detonator #8

Open
christophetd opened this issue Sep 27, 2022 · 1 comment
Open

Terraform detonator #8

christophetd opened this issue Sep 27, 2022 · 1 comment

Comments

@christophetd
Copy link
Contributor

christophetd commented Sep 27, 2022

Use-case: People who need custom control-plane level threat detection but don't want to write custom Go code such as

https://github.com/DataDog/threatest/blob/main/examples/custom-aws-detonator-terratest/custom_aws_detonator_with_terratest_test.go#L31-L39

Alternatives:

  • Use something already covered by Stratus Red Team
  • Provide a Terraform script that performs the detonation - in this case, we need to check if (1) Terraform is suitable for the "imperative-style" changes and (2) if we can inject the detonation UUID inside of the Terraform user agent programmatically (which should be able since Stratus Red Team does it...)
  • Provide a Bash script using the AWS CLI that performs the detonation
@christophetd
Copy link
Contributor Author

@stvnswager Can you provide a few examples of scenarios you wanted to test?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant