From ba48abd8738f6100f9d5219f12117ff717c0deb9 Mon Sep 17 00:00:00 2001 From: Kostas Stamatakis Date: Thu, 7 Nov 2024 16:53:38 +0200 Subject: [PATCH] CSPM: add cloud connectors support --- packages/cloud_security_posture/changelog.yml | 5 +++++ .../data_stream/findings/agent/stream/aws.yml.hbs | 3 +++ .../data_stream/findings/manifest.yml | 7 +++++++ packages/cloud_security_posture/manifest.yml | 12 +++++++++++- 4 files changed, 26 insertions(+), 1 deletion(-) diff --git a/packages/cloud_security_posture/changelog.yml b/packages/cloud_security_posture/changelog.yml index 9048269d891..798cf6ca51b 100644 --- a/packages/cloud_security_posture/changelog.yml +++ b/packages/cloud_security_posture/changelog.yml @@ -9,6 +9,11 @@ # 1.4.x - 8.9.x # 1.3.x - 8.8.x # 1.2.x - 8.7.x +- version: "1.11.0-preview14" + changes: + - description: Add cloud connectors support + type: enhancement + link: https://github.com/elastic/integrations/pull/11663 - version: "1.11.0-preview13" changes: - description: Lowercase host.name diff --git a/packages/cloud_security_posture/data_stream/findings/agent/stream/aws.yml.hbs b/packages/cloud_security_posture/data_stream/findings/agent/stream/aws.yml.hbs index 60cb536938c..df036e5dc77 100644 --- a/packages/cloud_security_posture/data_stream/findings/agent/stream/aws.yml.hbs +++ b/packages/cloud_security_posture/data_stream/findings/agent/stream/aws.yml.hbs @@ -16,6 +16,9 @@ config: {{#if aws.account_type}} account_type: {{aws.account_type}} {{/if}} + {{#if supports_cloud_connectors}} + supports_cloud_connectors: {{supports_cloud_connectors}} + {{/if}} credentials: {{#if access_key_id}} access_key_id: {{access_key_id}} diff --git a/packages/cloud_security_posture/data_stream/findings/manifest.yml b/packages/cloud_security_posture/data_stream/findings/manifest.yml index 5f23c38338f..cba122075bc 100644 --- a/packages/cloud_security_posture/data_stream/findings/manifest.yml +++ b/packages/cloud_security_posture/data_stream/findings/manifest.yml @@ -148,6 +148,13 @@ streams: multi: false required: false show_user: false + - name: supports_cloud_connectors + type: bool + title: Supports Cloud Connectors + multi: false + required: false + show_user: false + secret: false - input: cloudbeat/cis_gcp title: CIS GCP Benchmark description: CIS Benchmark for Google Cloud Platform Foundation diff --git a/packages/cloud_security_posture/manifest.yml b/packages/cloud_security_posture/manifest.yml index 6aa4b1a5eba..a6f12db6003 100644 --- a/packages/cloud_security_posture/manifest.yml +++ b/packages/cloud_security_posture/manifest.yml @@ -1,7 +1,7 @@ format_version: 3.2.3 name: cloud_security_posture title: "Security Posture Management" -version: "1.11.0-preview13" +version: "1.11.0-preview14" source: license: "Elastic-2.0" description: "Identify & remediate configuration risks in your Cloud infrastructure" @@ -133,6 +133,16 @@ policy_templates: description: Template URL to Cloud Formation Cloud Credentials Stack # ACCOUNT_TYPE value should be either "single-account" or "organization-account" default: https://console.aws.amazon.com/cloudformation/home#/stacks/quickcreate?templateURL=https://elastic-cspm-cft.s3.eu-central-1.amazonaws.com/cloudformation-cspm-direct-access-key-ACCOUNT_TYPE-8.16.0.yml + - name: cloud_formation_cloud_connectors_template + type: text + title: CloudFormation Cloud Connectors Template + multi: false + required: true + show_user: false + description: Template URL to Cloud Formation Cloud Connectors Stack + # ACCOUNT_TYPE value should be either "single-account" or "organization-account" + # PROJECT_ID project id for serverless / deployment id for ess + default: https://console.aws.amazon.com/cloudformation/home#/stacks/quickcreate?templateURL=https://elastic-cspm-cft.s3.eu-central-1.amazonaws.com/cloudformation-cloud-connectors-ACCOUNT_TYPE-8.16.0.yml¶m_ProjectId=PROJECT_ID - type: cloudbeat/cis_gcp title: GCP description: CIS Benchmark for Google Cloud Platform Foundations