Installs the Netflix Security Monkey to monitor AWS security settings.
Ubuntu while running on EC2.
Key | Type | Description | Default |
---|---|---|---|
['security-monkey']['secret_key'] |
String | Random string to use for Flask secret key | true |
['security-monkey']['password_salt'] |
String | Random string to use for Flask salt | true |
['security-monkey']['mail_sender'] |
String | Email address from which to send reports | [email protected] |
['security-monkey']['security_team_email'] |
String | Email address to send reports | [email protected] |
Include security-monkey
in your node's run_list
:
{
"run_list": [
"recipe[security-monkey::default]"
]
}
Include security-monkey
in your node's run_list
:
{
"run_list": [
"recipe[security-monkey::nginx]"
]
}
- Fork the repository on Github
- Create a named feature branch (i.e.
add-new-recipe
) - Write your change
- Write tests for your change (if applicable)
- Run the tests, ensuring they all pass
- Submit a Pull Request
- Write tests
- Verify on EC2 (vagrant DNS resolution breaks ATM)
- Better idempotency
- Optional use of RDS vs. postgres
- Integrate with SES
- Finish nginx integration
- Self-signed certificate generation
- Secret and salt random generation
Author:: David F. Severski ([email protected])