From 00e26ca182b3fabd9fa14cf8df7780cb92e14407 Mon Sep 17 00:00:00 2001
From: rjulian <richard@rjulian.net>
Date: Sun, 17 May 2020 14:46:05 -0700
Subject: [PATCH] Multiregion refactor

---
 .github/workflows/update_terraform.yaml       |  3 ++
 ...ex_aws_rds_deletion_protection_disabled.tf | 43 -------------------
 terraform/cwe/main.tf                         | 26 +++++++++++
 terraform/cwe/output.tf                       |  9 ++++
 terraform/sqs_lambda/sqs_lambda.tf            | 23 ++++++++++
 terraform/sqs_lambda/variables.tf             | 19 ++++++++
 variables.tf                                  | 10 -----
 7 files changed, 80 insertions(+), 53 deletions(-)
 delete mode 100644 reflex_aws_rds_deletion_protection_disabled.tf
 create mode 100644 terraform/cwe/main.tf
 create mode 100644 terraform/cwe/output.tf
 create mode 100644 terraform/sqs_lambda/sqs_lambda.tf
 create mode 100644 terraform/sqs_lambda/variables.tf
 delete mode 100644 variables.tf

diff --git a/.github/workflows/update_terraform.yaml b/.github/workflows/update_terraform.yaml
index bc0710a..bb19e88 100644
--- a/.github/workflows/update_terraform.yaml
+++ b/.github/workflows/update_terraform.yaml
@@ -11,4 +11,7 @@ jobs:
       - name: update terraform dependencies
         uses: patrickjahns/dependabot-terraform-action@v1
         with:
+          directory: |
+            'terraform/cwe/'
+            'terraform/sqs_lambda/'
           github_dependency_token: ${{ secrets.DEPENDENCY_GITHUB_TOKEN }}
diff --git a/reflex_aws_rds_deletion_protection_disabled.tf b/reflex_aws_rds_deletion_protection_disabled.tf
deleted file mode 100644
index 2d236ca..0000000
--- a/reflex_aws_rds_deletion_protection_disabled.tf
+++ /dev/null
@@ -1,43 +0,0 @@
-module "reflex_aws_rds_deletion_protection_disabled" {
-  source           = "git::https://github.com/cloudmitigator/reflex-engine.git//modules/cwe_lambda?ref=v0.5.7"
-  rule_name        = "RDSDeletionProtectionDisabled"
-  rule_description = "Rule to detect if deletion protection is disabled for RDS Instance."
-
-  event_pattern = <<PATTERN
-{
-  "source": [
-    "aws.rds"
-  ],
-  "detail-type": [
-    "AWS API Call via CloudTrail"
-  ],
-  "detail": {
-    "eventSource": [
-      "rds.amazonaws.com"
-    ],
-    "eventName": [
-      "ModifyDBInstance"
-    ]
-  }
-}
-
-PATTERN
-
-  function_name   = "RDSDeletionProtectionDisabled"
-  source_code_dir = "${path.module}/source"
-  handler         = "reflex_aws_rds_deletion_protection_disabled.lambda_handler"
-  lambda_runtime  = "python3.7"
-  environment_variable_map = {
-    SNS_TOPIC = var.sns_topic_arn,
-    
-  }
-
-
-  queue_name    = "RDSDeletionProtectionDisabled"
-  delay_seconds = 0
-
-  target_id = "RDSDeletionProtectionDisabled"
-
-  sns_topic_arn  = var.sns_topic_arn
-  sqs_kms_key_id = var.reflex_kms_key_id
-}
diff --git a/terraform/cwe/main.tf b/terraform/cwe/main.tf
new file mode 100644
index 0000000..2fc20eb
--- /dev/null
+++ b/terraform/cwe/main.tf
@@ -0,0 +1,26 @@
+module "cwe" {
+  source      = "git::https://github.com/cloudmitigator/reflex-engine.git//modules/cwe?ref=v0.6.0"
+  name        = "RdsDeletionProtectionDisabled"
+  description = "Rule to detect if deletion protection is disabled for RDS Instance."
+
+  event_pattern = <<PATTERN
+{
+  "source": [
+    "aws.rds"
+  ],
+  "detail-type": [
+    "AWS API Call via CloudTrail"
+  ],
+  "detail": {
+    "eventSource": [
+      "rds.amazonaws.com"
+    ],
+    "eventName": [
+      "ModifyDBInstance"
+    ]
+  }
+}
+
+PATTERN
+
+}
diff --git a/terraform/cwe/output.tf b/terraform/cwe/output.tf
new file mode 100644
index 0000000..d3a6680
--- /dev/null
+++ b/terraform/cwe/output.tf
@@ -0,0 +1,9 @@
+output "id" {
+  description = "Event Rule ID"
+  value       = module.cwe.id
+}
+
+output "arn" {
+  description = "Event Rule Arn"
+  value       = module.cwe.arn
+}
diff --git a/terraform/sqs_lambda/sqs_lambda.tf b/terraform/sqs_lambda/sqs_lambda.tf
new file mode 100644
index 0000000..f87da27
--- /dev/null
+++ b/terraform/sqs_lambda/sqs_lambda.tf
@@ -0,0 +1,23 @@
+module "sqs_lambda" {
+  source = "git::https://github.com/cloudmitigator/reflex-engine.git//modules/sqs_lambda?ref=v0.6.0"
+
+  cloudwatch_event_rule_id  = var.cloudwatch_event_rule_id
+  cloudwatch_event_rule_arn = var.cloudwatch_event_rule_arn
+  function_name             = "RdsDeletionProtectionDisabled"
+  source_code_dir           = "${path.module}/../../source"
+  handler                   = "reflex_aws_rds_deletion_protection_disabled.lambda_handler"
+  lambda_runtime            = "python3.7"
+  environment_variable_map = {
+    SNS_TOPIC = var.sns_topic_arn,
+
+  }
+
+
+  queue_name    = "RdsDeletionProtectionDisabled"
+  delay_seconds = 0
+
+  target_id = "RdsDeletionProtectionDisabled"
+
+  sns_topic_arn  = var.sns_topic_arn
+  sqs_kms_key_id = var.reflex_kms_key_id
+}
diff --git a/terraform/sqs_lambda/variables.tf b/terraform/sqs_lambda/variables.tf
new file mode 100644
index 0000000..9b63908
--- /dev/null
+++ b/terraform/sqs_lambda/variables.tf
@@ -0,0 +1,19 @@
+variable "sns_topic_arn" {
+  description = "SNS topic arn of central or local sns topic"
+  type        = string
+}
+
+variable "reflex_kms_key_id" {
+  description = "KMS Key Id for common reflex usage."
+  type        = string
+}
+
+variable "cloudwatch_event_rule_id" {
+  description = "Easy name of CWE"
+  type        = string
+}
+
+variable "cloudwatch_event_rule_arn" {
+  description = "Full arn of CWE"
+  type        = string
+}
diff --git a/variables.tf b/variables.tf
deleted file mode 100644
index 00dd5a4..0000000
--- a/variables.tf
+++ /dev/null
@@ -1,10 +0,0 @@
-variable "sns_topic_arn" { 
-  description = "SNS topic arn of central or local sns topic"
-  type        = string
-}
-
-variable "reflex_kms_key_id" {
-  description = "KMS Key Id for common reflex usage."
-  type        = string
-}
-