Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add option to set AWS_USE_FIPS_ENDPOINT=true for AFT resources #468

Open
jgearheart opened this issue Jun 14, 2024 · 1 comment
Open

Add option to set AWS_USE_FIPS_ENDPOINT=true for AFT resources #468

jgearheart opened this issue Jun 14, 2024 · 1 comment
Labels
bug Something isn't working pending investigation Issue needs further investigation

Comments

@jgearheart
Copy link

Terraform Version & Prov:
all
AFT Version:
all

Terraform Version & Provider Versions
all

Bug Description
To ensure compliance with FedRAMP requirements when utilizing AFT in FedRAMP environments, it is essential to incorporate an option that mandates the use of FIPS endpoints for any resources created and managed by AFT, including Lambda functions and CodePipeline, etc. For Lambda functions and any components leveraging the AWS SDK, this can be achieved by adding an option to set the environment variable AWS_USE_FIPS_ENDPOINT=true

Expected behavior
AWS FIPS endpoints used when resources within the AFT pipeline make API calls to any AWS service where FIPS endpoints are available.

@jgearheart jgearheart added bug Something isn't working pending investigation Issue needs further investigation labels Jun 14, 2024
@snebhu3
Copy link
Collaborator

snebhu3 commented Jun 21, 2024

@jgearheart thank you for reaching out.
Have you explored leveraging the Pre-API helper to set AWS_USE_FIPS_ENDPOINT=true?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug Something isn't working pending investigation Issue needs further investigation
Projects
None yet
Development

No branches or pull requests

2 participants