Support Organizations that do not use AWS Control Tower by gcasilva · Pull Request #84 · aws-ia/cfn-abi-lacework-polygraph

gcasilva · 2024-02-29T04:01:27Z

Adding Support Organizations that do not use AWS Control Tower

gcasilva · 2024-02-29T19:49:34Z

@jefferyfry Like we talked after reviewing this please add to your Lacework ABI documentation:
“If you're using this solution in an AWS organization that doesn't use AWS Control Tower, before deploying this ABI solution you need to make sure:
1 - you have enabled Amazon SNS notification in your CloudTrail trail if using this service integration and,
2 - you need to create IAM roles to Set up basic permissions for stack set operations:
a. You need to create pAdminRoleName [Parameter used while launching the solution] in your management account. The CloudFormation template to create this role is available here.
b. You need to create pExecRoleName [Parameter used while launching the solution] across all child accounts with in the organization. You can use this CloudFormation template and deploy the stack across the organization using instructions from Create a stack set with service-managed permissions”

gcasilva · 2024-05-29T17:28:42Z

@jefferyfry Can you please review approve this PR to add support for non-control tower environments?

jefferyfry

LGTM

gcasilva · 2024-11-08T04:31:04Z

/do-e2e-tests

aws-ia-automator-prod · 2024-11-08T04:31:14Z

End to end test has been scheduled

aws-ia-automator-prod · 2024-11-08T04:33:28Z

E2E tests in progress

aws-ia-automator-prod

E2E test has completed with errors. If you are an external contributor, please contact the project maintainers for more information.

Fix linting error on cfn-abi-lacework-polygraph.template.yaml

Update Lambda python runtime to 3.11

gcasilva · 2024-11-08T17:31:28Z

/do-e2e-tests

aws-ia-automator-prod · 2024-11-08T17:31:38Z

End to end test has been scheduled

aws-ia-automator-prod · 2024-11-08T17:31:57Z

E2E tests in progress

aws-ia-automator-prod

E2E test has completed with errors. If you are an external contributor, please contact the project maintainers for more information.

Removed scoutsuite for testing

gcasilva · 2024-11-18T21:54:00Z

/do-e2e-tests

aws-ia-automator-prod · 2024-11-18T21:54:14Z

End to end test has been scheduled

aws-ia-automator-prod · 2024-11-18T21:54:39Z

E2E tests in progress

aws-ia-automator-prod

E2E test has completed with errors. If you are an external contributor, please contact the project maintainers for more information.

gcasilva · 2024-11-18T22:13:39Z

/do-e2e-tests

aws-ia-automator-prod · 2024-11-18T22:13:45Z

End to end test has been scheduled

aws-ia-automator-prod · 2024-11-18T22:14:04Z

E2E tests in progress

aws-ia-automator-prod

E2E test has completed with errors. If you are an external contributor, please contact the project maintainers for more information.

gcasilva · 2025-08-21T00:50:52Z

/do-e2e-tests

aws-ia-automator-prod · 2025-08-21T00:51:04Z

End to end test has been scheduled

aws-ia-automator-prod · 2025-09-01T00:58:37Z

Static analysis has failed. Please review and take action as appropriate.

update to support CloudTrail SRA Org test

Update cleanup config to support Cloudtrail SRA creation

Update to support CloudTrail SRA Organizations creation

aws-ia-automator-prod · 2025-09-01T01:01:59Z

Static analysis has failed. Please review and take action as appropriate.

aws-ia-automator-prod · 2025-09-01T01:12:24Z

Static analysis has failed. Please review and take action as appropriate.

gcasilva · 2025-09-01T02:34:48Z

/do-e2e-tests

aws-ia-automator-prod · 2025-09-01T02:34:56Z

End to end test has been scheduled

aws-ia-automator-prod · 2025-09-01T02:35:16Z

E2E tests in progress

aws-ia-automator-prod · 2025-09-01T02:35:17Z

E2E tests in progress

aws-ia-automator-prod

E2E test has completed with errors. If you are an external contributor, please contact the project maintainers for more information.

Update taskcat - non control tower test to add guardduty and securityhub creation

Update cleanup_config.json - to clean sra org trail s3 bucket

gcasilva · 2025-09-08T17:09:05Z

/do-e2e-tests

aws-ia-automator-prod · 2025-09-08T17:09:17Z

End to end test has been scheduled

aws-ia-automator-prod · 2025-09-08T17:09:45Z

E2E tests in progress

aws-ia-automator-prod · 2025-09-08T17:09:48Z

E2E tests in progress

aws-ia-automator-prod

E2E test has completed with errors. If you are an external contributor, please contact the project maintainers for more information.

gcasilva · 2025-09-09T17:22:10Z

/do-e2e-tests

aws-ia-automator-prod · 2025-09-09T17:22:23Z

End to end test has been scheduled

aws-ia-automator-prod · 2025-09-09T17:22:48Z

E2E tests in progress

aws-ia-automator-prod · 2025-09-09T17:22:51Z

E2E tests in progress

aws-ia-automator-prod

E2E test has completed with errors. If you are an external contributor, please contact the project maintainers for more information.

gcasilva · 2025-09-19T04:40:54Z

/do-e2e-tests

aws-ia-automator-prod · 2025-09-19T04:41:02Z

End to end test has been scheduled

aws-ia-automator-prod · 2025-09-19T04:41:23Z

E2E tests in progress

aws-ia-automator-prod

E2E test has completed with errors. If you are an external contributor, please contact the project maintainers for more information.

gcasilva added 2 commits February 28, 2024 19:54

Fixes to allow Non Control Tower environment deployment

b85cce8

Fix entrypoint

0546533

kkvinjam requested a review from jefferyfry February 29, 2024 14:17

Updating Cleanup script

83a9c03

kkvinjam requested changes Mar 1, 2024

View reviewed changes

Comment thread .taskcat.yml

Comment thread templates/cfn-abi-lacework-polygraph.template.yaml Outdated

Comment thread templates/cfn-abi-lacework-polygraph.template.yaml Outdated

Improvements on Kishore's comments

cd70124

jefferyfry approved these changes Oct 22, 2024

View reviewed changes

aws-ia-automator-prod Bot requested changes Nov 8, 2024

View reviewed changes

gcasilva added 2 commits November 8, 2024 09:20

Update cfn-abi-lacework-polygraph.template.yaml

92e2478

Fix linting error on cfn-abi-lacework-polygraph.template.yaml

Update cfn-abi-lacework-polygraph.template.yaml

0d0b949

Update Lambda python runtime to 3.11

aws-ia-automator-prod Bot requested changes Nov 8, 2024

View reviewed changes

Update entrypoint.sh

d19f89f

Removed scoutsuite for testing

aws-ia-automator-prod Bot requested changes Nov 18, 2024

View reviewed changes

gcasilva added 3 commits August 31, 2025 17:59

Update .taskcat.yml - update to support CloudTrail SRA Org test

245f145

update to support CloudTrail SRA Org test

Update cleanup_config.json

50b0538

Update cleanup config to support Cloudtrail SRA creation

Update cfn-abi-lacework-polygraph.template.yaml

d1f4844

Update to support CloudTrail SRA Organizations creation

gcasilva added 3 commits August 31, 2025 19:11

Update Lacework Control Tower submodule to latest HEAD

b8a3a91

Point Lacework Control Tower submodule to PR aws-ia#9

12994bb

Update SRA submodule to latest HEAD

24543af

aws-ia-automator-prod Bot requested changes Sep 1, 2025

View reviewed changes

gcasilva added 2 commits September 7, 2025 20:56

Update .taskcat.yml - non control tower test

a6b1b02

Update taskcat - non control tower test to add guardduty and securityhub creation

Update cleanup_config.json

2d37cd2

Update cleanup_config.json - to clean sra org trail s3 bucket

aws-ia-automator-prod Bot requested changes Sep 9, 2025

View reviewed changes

aws-ia-automator-prod Bot requested changes Sep 10, 2025

View reviewed changes

aws-ia-automator-prod Bot requested changes Sep 19, 2025

View reviewed changes

Uh oh!

Conversation

gcasilva commented Feb 29, 2024

Uh oh!

gcasilva commented Feb 29, 2024 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

gcasilva commented May 29, 2024

Uh oh!

jefferyfry left a comment

Choose a reason for hiding this comment

Uh oh!

gcasilva commented Nov 8, 2024

Uh oh!

aws-ia-automator-prod Bot commented Nov 8, 2024

Uh oh!

aws-ia-automator-prod Bot commented Nov 8, 2024

Uh oh!

aws-ia-automator-prod Bot left a comment

Choose a reason for hiding this comment

Uh oh!

gcasilva commented Nov 8, 2024

Uh oh!

aws-ia-automator-prod Bot commented Nov 8, 2024

Uh oh!

aws-ia-automator-prod Bot commented Nov 8, 2024

Uh oh!

aws-ia-automator-prod Bot left a comment

Choose a reason for hiding this comment

Uh oh!

gcasilva commented Nov 18, 2024

Uh oh!

aws-ia-automator-prod Bot commented Nov 18, 2024

Uh oh!

aws-ia-automator-prod Bot commented Nov 18, 2024

Uh oh!

aws-ia-automator-prod Bot left a comment

Choose a reason for hiding this comment

Uh oh!

gcasilva commented Nov 18, 2024

Uh oh!

aws-ia-automator-prod Bot commented Nov 18, 2024

Uh oh!

aws-ia-automator-prod Bot commented Nov 18, 2024

Uh oh!

aws-ia-automator-prod Bot left a comment

Choose a reason for hiding this comment

Uh oh!

gcasilva commented Aug 21, 2025

Uh oh!

aws-ia-automator-prod Bot commented Aug 21, 2025

Uh oh!

aws-ia-automator-prod Bot commented Sep 1, 2025

Uh oh!

aws-ia-automator-prod Bot commented Sep 1, 2025

Uh oh!

aws-ia-automator-prod Bot commented Sep 1, 2025

Uh oh!

gcasilva commented Sep 1, 2025

Uh oh!

aws-ia-automator-prod Bot commented Sep 1, 2025

Uh oh!

aws-ia-automator-prod Bot commented Sep 1, 2025

Uh oh!

aws-ia-automator-prod Bot commented Sep 1, 2025

Uh oh!

aws-ia-automator-prod Bot left a comment

Choose a reason for hiding this comment

Uh oh!

gcasilva commented Sep 8, 2025

Uh oh!

aws-ia-automator-prod Bot commented Sep 8, 2025

Uh oh!

aws-ia-automator-prod Bot commented Sep 8, 2025

Uh oh!

aws-ia-automator-prod Bot commented Sep 8, 2025

Uh oh!

gcasilva commented Feb 29, 2024 •

edited

Loading