Skip to content

Commit d5e9a2f

Browse files
author
Brian Mycroft
committed
(docs)updates1
1 parent ede940d commit d5e9a2f

14 files changed

+260
-149
lines changed

‎reference-artifacts/SAMPLE_CONFIGS/config.example-oldIP.json‎

Lines changed: 6 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -1836,6 +1836,7 @@
18361836
"ou": "Security",
18371837
"src-filename": "config.json",
18381838
"description": "This is the Organization Management or root account. Access must be highly restricted. This account should not contain customer resources.",
1839+
"gui-perm": true,
18391840
"budget": {
18401841
"name": "Organization Budget",
18411842
"period": "Monthly",
@@ -1973,14 +1974,16 @@
19731974
"ou": "Security",
19741975
"email": "myemail+aseaT-log@example.com---------------------REPLACE------------",
19751976
"src-filename": "config.json",
1976-
"description": "This Account is used to centralized and store immutable logs for the Organization."
1977+
"description": "This Account is used to centralized and store immutable logs for the Organization.",
1978+
"gui-perm": true
19771979
},
19781980
"security": {
19791981
"account-name": "Security",
19801982
"ou": "Security",
19811983
"email": "myemail+aseaT-sec@example.com---------------------REPLACE------------",
19821984
"src-filename": "config.json",
1983-
"description": "This Account is used to centralized access to AWS security tooling and consoles."
1985+
"description": "This Account is used to centralized access to AWS security tooling and consoles.",
1986+
"gui-perm": true
19841987
}
19851988
},
19861989
"workload-account-configs": {
@@ -2004,6 +2007,7 @@
20042007
"type": "ignore",
20052008
"description": "The Security OU is used to hold AWS accounts containing AWS security resources shared or utilized by the rest of the Organization.",
20062009
"scps": ["Guardrails-Part-0-Core", "Guardrails-Part-1", "Guardrails-Sensitive"],
2010+
"gui-perm": true,
20072011
"default-budgets": {
20082012
"name": "Default Security Budget",
20092013
"period": "Monthly",

‎reference-artifacts/SAMPLE_CONFIGS/config.example.json‎

Lines changed: 6 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -1821,6 +1821,7 @@
18211821
"ou": "Security",
18221822
"src-filename": "config.json",
18231823
"description": "This is the Organization Management or root account. Access must be highly restricted. This account should not contain customer resources.",
1824+
"gui-perm": true,
18241825
"budget": {
18251826
"name": "Organization Budget",
18261827
"period": "Monthly",
@@ -1955,14 +1956,16 @@
19551956
"ou": "Security",
19561957
"email": "myemail+aseaT-log@example.com---------------------REPLACE------------",
19571958
"src-filename": "config.json",
1958-
"description": "This Account is used to centralized and store immutable logs for the Organization."
1959+
"description": "This Account is used to centralized and store immutable logs for the Organization.",
1960+
"gui-perm": true
19591961
},
19601962
"security": {
19611963
"account-name": "Security",
19621964
"ou": "Security",
19631965
"email": "myemail+aseaT-sec@example.com---------------------REPLACE------------",
19641966
"src-filename": "config.json",
1965-
"description": "This Account is used to centralized access to AWS security tooling and consoles."
1967+
"description": "This Account is used to centralized access to AWS security tooling and consoles.",
1968+
"gui-perm": true
19661969
}
19671970
},
19681971
"workload-account-configs": {
@@ -1986,6 +1989,7 @@
19861989
"type": "ignore",
19871990
"description": "The Security OU is used to hold AWS accounts containing AWS security resources shared or utilized by the rest of the Organization.",
19881991
"scps": ["Guardrails-Part-0-Core", "Guardrails-Part-1", "Guardrails-Sensitive"],
1992+
"gui-perm": true,
19891993
"default-budgets": {
19901994
"name": "Default Security Budget",
19911995
"period": "Monthly",

‎reference-artifacts/SAMPLE_CONFIGS/config.lite-CTNFW-example.json‎

Lines changed: 6 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -1719,6 +1719,7 @@
17191719
"ou": "Security",
17201720
"src-filename": "config.json",
17211721
"description": "This is the Organization Management or root account. Access must be highly restricted. This account should not contain customer resources.",
1722+
"gui-perm": true,
17221723
"budget": {
17231724
"name": "Organization Budget",
17241725
"period": "Monthly",
@@ -1854,15 +1855,17 @@
18541855
"email": "myemail+aseaT-log@example.com---------------------REPLACE------------",
18551856
"scps": ["Guardrails-Sensitive"],
18561857
"src-filename": "config.json",
1857-
"description": "This Account is used to centralized and store immutable logs for the Organization."
1858+
"description": "This Account is used to centralized and store immutable logs for the Organization.",
1859+
"gui-perm": true
18581860
},
18591861
"security": {
18601862
"account-name": "Security",
18611863
"ou": "Security",
18621864
"email": "myemail+aseaT-sec@example.com---------------------REPLACE------------",
18631865
"scps": ["Guardrails-Sensitive"],
18641866
"src-filename": "config.json",
1865-
"description": "This Account is used to centralized access to AWS security tooling and consoles."
1867+
"description": "This Account is used to centralized access to AWS security tooling and consoles.",
1868+
"gui-perm": true
18661869
}
18671870
},
18681871
"workload-account-configs": {
@@ -1886,6 +1889,7 @@
18861889
"type": "ignore",
18871890
"description": "The Security OU is used to hold AWS accounts containing AWS security resources shared or utilized by the rest of the Organization.",
18881891
"scps": ["Guardrails-Part-0-Core", "Guardrails-Part-1"],
1892+
"gui-perm": true,
18891893
"default-budgets": {
18901894
"name": "Default Security Budget",
18911895
"period": "Monthly",

‎reference-artifacts/SAMPLE_CONFIGS/config.lite-GWLB-example.json‎

Lines changed: 6 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -2004,6 +2004,7 @@
20042004
"ou": "Security",
20052005
"src-filename": "config.json",
20062006
"description": "This is the Organization Management or root account. Access must be highly restricted. This account should not contain customer resources.",
2007+
"gui-perm": true,
20072008
"budget": {
20082009
"name": "Organization Budget",
20092010
"period": "Monthly",
@@ -2138,14 +2139,16 @@
21382139
"ou": "Security",
21392140
"email": "myemail+aseaT-log@example.com---------------------REPLACE------------",
21402141
"src-filename": "config.json",
2141-
"description": "This Account is used to centralized and store immutable logs for the Organization."
2142+
"description": "This Account is used to centralized and store immutable logs for the Organization.",
2143+
"gui-perm": true
21422144
},
21432145
"security": {
21442146
"account-name": "Security",
21452147
"ou": "Security",
21462148
"email": "myemail+aseaT-sec@example.com---------------------REPLACE------------",
21472149
"src-filename": "config.json",
2148-
"description": "This Account is used to centralized access to AWS security tooling and consoles."
2150+
"description": "This Account is used to centralized access to AWS security tooling and consoles.",
2151+
"gui-perm": true
21492152
}
21502153
},
21512154
"workload-account-configs": {
@@ -2169,6 +2172,7 @@
21692172
"type": "ignore",
21702173
"description": "The Security OU is used to hold AWS accounts containing AWS security resources shared or utilized by the rest of the Organization.",
21712174
"scps": ["Guardrails-Part-0-Core", "Guardrails-Part-1", "Guardrails-Sensitive"],
2175+
"gui-perm": true,
21722176
"default-budgets": {
21732177
"name": "Default Security Budget",
21742178
"period": "Monthly",

‎reference-artifacts/SAMPLE_CONFIGS/config.lite-NFW-example.json‎

Lines changed: 6 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -1702,6 +1702,7 @@
17021702
"ou": "Security",
17031703
"src-filename": "config.json",
17041704
"description": "This is the Organization Management or root account. Access must be highly restricted. This account should not contain customer resources.",
1705+
"gui-perm": true,
17051706
"budget": {
17061707
"name": "Organization Budget",
17071708
"period": "Monthly",
@@ -1836,14 +1837,16 @@
18361837
"ou": "Security",
18371838
"email": "myemail+aseaT-log@example.com---------------------REPLACE------------",
18381839
"src-filename": "config.json",
1839-
"description": "This Account is used to centralized and store immutable logs for the Organization."
1840+
"description": "This Account is used to centralized and store immutable logs for the Organization.",
1841+
"gui-perm": true
18401842
},
18411843
"security": {
18421844
"account-name": "Security",
18431845
"ou": "Security",
18441846
"email": "myemail+aseaT-sec@example.com---------------------REPLACE------------",
18451847
"src-filename": "config.json",
1846-
"description": "This Account is used to centralized access to AWS security tooling and consoles."
1848+
"description": "This Account is used to centralized access to AWS security tooling and consoles.",
1849+
"gui-perm": true
18471850
}
18481851
},
18491852
"workload-account-configs": {
@@ -1867,6 +1870,7 @@
18671870
"type": "ignore",
18681871
"description": "The Security OU is used to hold AWS accounts containing AWS security resources shared or utilized by the rest of the Organization.",
18691872
"scps": ["Guardrails-Part-0-Core", "Guardrails-Part-1", "Guardrails-Sensitive"],
1873+
"gui-perm": true,
18701874
"default-budgets": {
18711875
"name": "Default Security Budget",
18721876
"period": "Monthly",

‎reference-artifacts/SAMPLE_CONFIGS/config.lite-VPN-example-oldIP.json‎

Lines changed: 6 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -1782,6 +1782,7 @@
17821782
"ou": "Security",
17831783
"src-filename": "config.json",
17841784
"description": "This is the Organization Management or root account. Access must be highly restricted. This account should not contain customer resources.",
1785+
"gui-perm": true,
17851786
"budget": {
17861787
"name": "Organization Budget",
17871788
"period": "Monthly",
@@ -1919,14 +1920,16 @@
19191920
"ou": "Security",
19201921
"email": "myemail+aseaT-log@example.com---------------------REPLACE------------",
19211922
"src-filename": "config.json",
1922-
"description": "This Account is used to centralized and store immutable logs for the Organization."
1923+
"description": "This Account is used to centralized and store immutable logs for the Organization.",
1924+
"gui-perm": true
19231925
},
19241926
"security": {
19251927
"account-name": "Security",
19261928
"ou": "Security",
19271929
"email": "myemail+aseaT-sec@example.com---------------------REPLACE------------",
19281930
"src-filename": "config.json",
1929-
"description": "This Account is used to centralized access to AWS security tooling and consoles."
1931+
"description": "This Account is used to centralized access to AWS security tooling and consoles.",
1932+
"gui-perm": true
19301933
}
19311934
},
19321935
"workload-account-configs": {
@@ -1950,6 +1953,7 @@
19501953
"type": "ignore",
19511954
"description": "The Security OU is used to hold AWS accounts containing AWS security resources shared or utilized by the rest of the Organization.",
19521955
"scps": ["Guardrails-Part-0-Core", "Guardrails-Part-1", "Guardrails-Sensitive"],
1956+
"gui-perm": true,
19531957
"default-budgets": {
19541958
"name": "Default Security Budget",
19551959
"period": "Monthly",

‎reference-artifacts/SAMPLE_CONFIGS/config.lite-VPN-example.json‎

Lines changed: 6 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -1767,6 +1767,7 @@
17671767
"ou": "Security",
17681768
"src-filename": "config.json",
17691769
"description": "This is the Organization Management or root account. Access must be highly restricted. This account should not contain customer resources.",
1770+
"gui-perm": true,
17701771
"budget": {
17711772
"name": "Organization Budget",
17721773
"period": "Monthly",
@@ -1901,14 +1902,16 @@
19011902
"ou": "Security",
19021903
"email": "myemail+aseaT-log@example.com---------------------REPLACE------------",
19031904
"src-filename": "config.json",
1904-
"description": "This Account is used to centralized and store immutable logs for the Organization."
1905+
"description": "This Account is used to centralized and store immutable logs for the Organization.",
1906+
"gui-perm": true
19051907
},
19061908
"security": {
19071909
"account-name": "Security",
19081910
"ou": "Security",
19091911
"email": "myemail+aseaT-sec@example.com---------------------REPLACE------------",
19101912
"src-filename": "config.json",
1911-
"description": "This Account is used to centralized access to AWS security tooling and consoles."
1913+
"description": "This Account is used to centralized access to AWS security tooling and consoles.",
1914+
"gui-perm": true
19121915
}
19131916
},
19141917
"workload-account-configs": {
@@ -1932,6 +1935,7 @@
19321935
"type": "ignore",
19331936
"description": "The Security OU is used to hold AWS accounts containing AWS security resources shared or utilized by the rest of the Organization.",
19341937
"scps": ["Guardrails-Part-0-Core", "Guardrails-Part-1", "Guardrails-Sensitive"],
1938+
"gui-perm": true,
19351939
"default-budgets": {
19361940
"name": "Default Security Budget",
19371941
"period": "Monthly",

‎reference-artifacts/SAMPLE_CONFIGS/config.multi-region-example.json‎

Lines changed: 6 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -2056,6 +2056,7 @@
20562056
"ou": "Security",
20572057
"src-filename": "config.json",
20582058
"description": "This is the Organization Management or root account. Access must be highly restricted. This account should not contain customer resources.",
2059+
"gui-perm": true,
20592060
"budget": {
20602061
"name": "Organization Budget",
20612062
"period": "Monthly",
@@ -2199,14 +2200,16 @@
21992200
"ou": "Security",
22002201
"email": "myemail+aseaT-log@example.com---------------------REPLACE------------",
22012202
"src-filename": "config.json",
2202-
"description": "This Account is used to centralized and store immutable logs for the Organization."
2203+
"description": "This Account is used to centralized and store immutable logs for the Organization.",
2204+
"gui-perm": true
22032205
},
22042206
"security": {
22052207
"account-name": "security",
22062208
"ou": "Security",
22072209
"email": "myemail+aseaT-sec@example.com---------------------REPLACE------------",
22082210
"src-filename": "config.json",
2209-
"description": "This Account is used to centralized access to AWS security tooling and consoles."
2211+
"description": "This Account is used to centralized access to AWS security tooling and consoles.",
2212+
"gui-perm": true
22102213
}
22112214
},
22122215
"workload-account-configs": {
@@ -2522,6 +2525,7 @@
25222525
"type": "ignore",
25232526
"description": "The Security OU is used to hold AWS accounts containing AWS security resources shared or utilized by the rest of the Organization.",
25242527
"scps": ["Guardrails-Part-0-Core", "Guardrails-Part-1", "Guardrails-Sensitive"],
2528+
"gui-perm": true,
25252529
"default-budgets": {
25262530
"name": "Default Security Budget",
25272531
"period": "Monthly",

‎reference-artifacts/SAMPLE_CONFIGS/config.test-example.json‎

Lines changed: 6 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -1696,6 +1696,7 @@
16961696
"ou": "Security",
16971697
"src-filename": "config.json",
16981698
"description": "This is the Organization Management or root account. Access must be highly restricted. This account should not contain customer resources.",
1699+
"gui-perm": true,
16991700
"budget": {
17001701
"name": "Organization Budget",
17011702
"period": "Monthly",
@@ -1830,14 +1831,16 @@
18301831
"ou": "Security",
18311832
"email": "myemail+aseaT-log@example.com---------------------REPLACE------------",
18321833
"src-filename": "config.json",
1833-
"description": "This Account is used to centralized and store immutable logs for the Organization."
1834+
"description": "This Account is used to centralized and store immutable logs for the Organization.",
1835+
"gui-perm": true
18341836
},
18351837
"security": {
18361838
"account-name": "Security",
18371839
"ou": "Security",
18381840
"email": "myemail+aseaT-sec@example.com---------------------REPLACE------------",
18391841
"src-filename": "config.json",
1840-
"description": "This Account is used to centralized access to AWS security tooling and consoles."
1842+
"description": "This Account is used to centralized access to AWS security tooling and consoles.",
1843+
"gui-perm": true
18411844
}
18421845
},
18431846
"workload-account-configs": {},
@@ -1846,6 +1849,7 @@
18461849
"type": "ignore",
18471850
"description": "The Security OU is used to hold AWS accounts containing AWS security resources shared or utilized by the rest of the Organization.",
18481851
"scps": ["Guardrails-Part-0-Core", "Guardrails-Part-1", "Guardrails-Sensitive"],
1852+
"gui-perm": true,
18491853
"default-budgets": {
18501854
"name": "Default Security Budget",
18511855
"period": "Monthly",

‎reference-artifacts/SAMPLE_CONFIGS/config.ultralite-example.json‎

Lines changed: 7 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -5,7 +5,7 @@
55
"b": ["${HOME_REGION}", "${GBL_REGION}"],
66
"c": ["${HOME_REGION}", "${GBL_REGION}"]
77
},
8-
"INFO": "Deploying in us-east-1 requires removing ${GBL_REGION} throught the file",
8+
"INFO": "Deploying in us-east-1 requires removing ${GBL_REGION} throught the file",
99
"alarm-not-ip": "10.10.10.*"
1010
},
1111
"global-options": {
@@ -589,6 +589,7 @@
589589
"email": "myemail+aseaT-management@example.com---------------------REPLACE----------------------",
590590
"ou": "Security",
591591
"src-filename": "config.json",
592+
"gui-perm": true,
592593
"budget": {
593594
"name": "Organization Budget",
594595
"period": "Monthly",
@@ -640,20 +641,23 @@
640641
"account-name": "Log Archive",
641642
"ou": "Security",
642643
"email": "myemail+aseaT-logs@example.com---------------------REPLACE----------------------",
643-
"src-filename": "config.json"
644+
"src-filename": "config.json",
645+
"gui-perm": true
644646
},
645647
"security": {
646648
"account-name": "Security",
647649
"ou": "Security",
648650
"email": "myemail+aseaT-audit@example.com---------------------REPLACE----------------------",
649-
"src-filename": "config.json"
651+
"src-filename": "config.json",
652+
"gui-perm": true
650653
}
651654
},
652655
"workload-account-configs": {},
653656
"organizational-units": {
654657
"Security": {
655658
"type": "ignore",
656659
"scps": ["Guardrails-Part-0-Core", "Guardrails-Part-1", "Guardrails-Sensitive"],
660+
"gui-perm": true,
657661
"default-budgets": {
658662
"name": "Default Security Budget",
659663
"period": "Monthly",

0 commit comments

Comments
 (0)