11AWS
2- ===
2+ =====
33
44Security
55--------
@@ -8,26 +8,58 @@ Set of tools to audit AWS cloudtrail events and audit logs.
88
99
1010Configuration
11- *************
11+ ***************
12+
13+
14+ .. md-tab-set ::
15+
16+ .. md-tab-item :: Robusta Helm Chart
17+
18+ .. code-block :: yaml
19+
20+ holmes :
21+ additionalEnvVars :
22+ - name : AWS_ACCESS_KEY_ID
23+ value : AKIAIOSFODNN7EXAMPLE
24+ - name : AWS_SECRET_ACCESS_KEY
25+ value : =wJalrXUtnFEMI/K7MDENG/bPxRfiCYEXAMPLEKEY
26+ - name : AWS_DEFAULT_REGION
27+ value : us-west-2
28+ toolsets :
29+ aws/security :
30+ enabled : true
31+
32+ .. include :: ./_toolset_configuration.inc.rst
33+
34+ .. md-tab-item :: Holmes CLI
35+
36+
37+ First, add the following environment vairables:
38+
39+ .. code-block :: yaml
40+
41+ export AWS_ACCESS_KEY_ID="<your AWS access key ID>"
42+ export AWS_SECRET_ACCESS_KEY="<your AWS secret access key>"
43+ export AWS_DEFAULT_REGION="us-west-2"
44+
45+
46+ Then, add the following to **~/.holmes/config.yaml **, creating the file if it doesn't exist:
47+
48+ .. code-block :: yaml
1249
13- .. code-block :: yaml
50+ toolsets :
51+ aws/security :
52+ enabled : true
1453
15- holmes :
16- additionalEnvVars :
17- - name : AWS_ACCESS_KEY_ID
18- value : AKIAIOSFODNN7EXAMPLE
19- - name : AWS_SECRET_ACCESS_KEY
20- value : =wJalrXUtnFEMI/K7MDENG/bPxRfiCYEXAMPLEKEY
21- - name : AWS_DEFAULT_REGION
22- value : us-west-2
23- toolsets :
24- aws/security :
25- enabled : true
2654
27- .. include :: ./_toolset_configuration.inc.rst
55+ To test, run:
56+
57+ .. code-block :: yaml
58+
59+ holmes ask "Are there any security misconfigurations my signup application, particularly in the database?"
2860
2961 Capabilities
30- ************
62+ **************
3163.. include :: ./_toolset_capabilities.inc.rst
3264
3365.. list-table ::
@@ -45,31 +77,61 @@ Capabilities
4577
4678
4779RDS
48- ---
80+ ----
4981
5082Read access to Amazon RDS instances, events and logs
5183
5284Configuration
53- ************
85+ ****************
86+
87+ .. md-tab-set ::
88+
89+ .. md-tab-item :: Robusta Helm Chart
90+
91+ .. code-block :: yaml
92+
93+ holmes :
94+ additionalEnvVars :
95+ - name : AWS_ACCESS_KEY_ID
96+ value : AKIXDDDSDSdSA
97+ - name : AWS_SECRET_ACCESS_KEY
98+ value : =wJalrXUtnFEMI/KNG/bPxRfiCYEXAMPLEKEY
99+ - name : AWS_DEFAULT_REGION
100+ value : us-west-2
101+ toolsets :
102+ aws/rds :
103+ enabled : true
104+
105+ .. include :: ./_toolset_configuration.inc.rst
106+
107+ .. md-tab-item :: Holmes CLI
108+
109+ First, add the following environment vairables:
54110
55- .. code-block :: yaml
111+ .. code-block :: yaml
56112
57- holmes :
58- additionalEnvVars :
59- - name : AWS_ACCESS_KEY_ID
60- value : AKIAIOSFODNN7EXAMPLE
61- - name : AWS_SECRET_ACCESS_KEY
62- value : =wJalrXUtnFEMI/K7MDENG/bPxRfiCYEXAMPLEKEY
63- - name : AWS_DEFAULT_REGION
64- value : us-west-2
65- toolsets :
66- aws/rds :
67- enabled : true
113+ export AWS_ACCESS_KEY_ID="<your AWS access key ID>"
114+ export AWS_SECRET_ACCESS_KEY="<your AWS secret access key>"
115+ export AWS_DEFAULT_REGION="us-west-2"
116+
117+ Then, add the following to **~/.holmes/config.yaml **, creating the file if it doesn't exist:
118+
119+ .. code-block :: yaml
120+
121+ toolsets :
122+ aws/rds :
123+ enabled : true
124+
125+ To test, run:
126+
127+ .. code-block :: yaml
128+
129+ holmes ask "Why is my signup application slow, also look into the database"
68130
69- .. include :: ./_toolset_configuration.inc.rst
70131
71132 Capabilities
72- ************
133+ *************
134+
73135.. include :: ./_toolset_capabilities.inc.rst
74136
75137.. list-table ::
0 commit comments