-
Notifications
You must be signed in to change notification settings - Fork 0
/
Copy pathminimum_config.ts
80 lines (77 loc) · 1.85 KB
/
minimum_config.ts
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
import {
DataLandingZoneProps,
Defaults,
DlzAccountType,
DlzControlTowerStandardControls,
Region,
} from 'aws-data-landing-zone';
export const config: DataLandingZoneProps = {
localProfile: 'YourAwsProfileName', // Only used when running local scripts
regions: {
global: Region.EU_WEST_1,
regional: [Region.US_EAST_1],
},
mandatoryTags: {
owner: ['backend'],
project: ['accounting'],
environment: ['development', 'staging', 'production'],
},
budgets: [
...Defaults.budgets(100, 20, {}),
],
securityHubNotifications: [
],
organization: {
organizationId: 'RootOrganizationID',
root: {
accounts: {
management: {
accountId: 'YourRootAccountID',
},
},
/* Optional, showing that controls can be changed, added or removed from the default
* These controls are applied to all the OUs in the org */
controls: [
...Defaults.rootControls(),
DlzControlTowerStandardControls.SH_SECRETS_MANAGER_3,
],
},
ous: {
security: {
ouId: 'SecurityOrganizationUnitId',
accounts: {
log: {
accountId: 'YourLogsAccountID',
},
audit: {
accountId: 'YourAuditAccountID',
},
},
},
workloads: {
ouId: 'WorkloadOrganizationUnitId',
// Small Org, all workloads/projects in the same accounts
accounts: [
{
name: 'development',
accountId: 'YourDevelopmentAccountID',
type: DlzAccountType.DEVELOP,
},
],
},
suspended: {
ouId: 'SuspendedOrganizationUnitId',
},
},
},
deploymentPlatform: {
gitHub: {
references: [
{
owner: 'DataChefHQ',
repo: 'data-landing-zone-example-typescript',
},
],
},
},
};