v1.0.0

New Major Version

Deprecation Notice

The cloud-bench submodule has been deprecated in this version of the module.

Sysdig released a new onboarding experience for Azure in August 2024. We recommend connecting your cloud accounts by following these instructions.

This repository should be used solely in cases where Agentless Threat Detection cannot be used.

What's Changed

• docs: update role/permission requirement by @wideawakening in #89
• Create .terraform-registry by @nkraemer-sysdig in #98
• Deprecate cloud-bench by @nkraemer-sysdig in #99

Full Changelog: v0.9.9...v1.0.0

v0.9.7

Features

• Support use of Reader role in Trust Relationship module (#91)

  • feat: Support using Reader CSPM role

• linting fixes

• linting fixes

v0.9.6

Features

• enable log level param under single-subscription installation (#90)

Documentation

• clarify AD log types
• clarify roles per feature

v0.9.5

Bug Fixes

• Remove legacy benchmark task creation (#88)

  • fix: Remove legacy benchmark task creation

• Update provider versions

v0.9.4

Full Changelog: v0.9.3...v0.9.4

Features

• terrascan compliance (#84)

Code Refactoring

• bench: Move data blocks within module to simplify variables (#86)

Documentation

• add terrascan to contribute

v0.9.3

Bug Fixes

• update terraform resources (#85)

• chore: pre-commit docs update

• default to disable again scanning (#82)

• ci: bump

Continuous Integration

• add codeowners to benchmark team

Documentation

• clarify upgrade instructions

• fix typo in readme (#81)

• Update README.md

• Replace AWS with Azure

• howto unlock tf state

Small Modifications

• add codeowners file (#83)

v0.9.2

Full Changelog: v0.9.1...v0.9.2

Features

• allow multiple registry for scanning by @regiluze (#79)
  support for all examples (single-subscription, single-subscription-k8s, tenant-subscriptions, tenant-subscriptions-k8s)
  use variable "existing_registries variable to customize the registries to be inspected for ACR image scanning.
  example

# single-subscription manifest
....
module "secure_for_cloud_single_subscription" {
  source                   = "sysdiglabs/secure-for-cloud/azurerm//examples/single-subscription"
  existing_registries = { rg-foo = ["acrfoo1", "acrfoo2"], rg-bar=["acrbar1","acrbar2"]}
}

Documentation

• clarify force events
• organize readme and fix registry links
• add upgrading guide

v0.9.1

Full Changelog: v0.9.0...v0.9.1

Documentation

• update snippets, remove sysdig arguments as they're now inferred from provider

v0.9.0

Full Changelog: v0.8.0...v0.9.0

Refactor / Breaking Changes

• Remove Sysdig provider from examples (#75)(#78) (#76)

Features

• Removed bucket for cloud-connector config, in favor of an environment variable(#73)

Documentation

• add questionnaire for client requirement gathering and troubleshooting context (#74)
• clarify secure-for-cloud module features (#67)

Small Modifications

• notify sysdig internal slack on issue creation (#68)
• ci maintenance (#77) (#71)

v0.8.0

Small Modifications

• add telemetry and upgrade update azurerm provider 3.0 version (#65)

Documentation

• Update README.md (#64)
• Homogeneize diagrams and minor README/CONTRIBUTE changes (#62)