enable guard duty

zoitech · Jun 12, 2018 · ca239d3 · ca239d3
1 parent cea7c66
commit ca239d3
Show file tree

Hide file tree

Showing 3 changed files with 23 additions and 9 deletions.
diff --git a/changelog.md b/changelog.md
@@ -1,22 +1,27 @@
-## 0.0.5 (Unreleased)
+## 0.0.6 (Unreleased)
 
 NEW FEATURES:
-
-* Added new policies to prevent users causing huge costs
-* Created Changelog.md
-
+* n.a.
 
 BACKWARDS INCOMPATIBILITIES / NOTES:
-
 * n.a.
 
-
 IMPROVEMENTS:
+* n.a.
 
-* formatted tf-files
+BUG FIXES:
+* n.a.
 
+## 0.0.5
 
-BUG FIXES:
+NEW FEATURES:
+* Support of GuardDuty (set ```guardduty_enable=1```)
 
+BACKWARDS INCOMPATIBILITIES / NOTES:
 * n.a.
 
+IMPROVEMENTS:
+* formatted tf-files
+
+BUG FIXES:
+* n.a.
diff --git a/guardduty.tf b/guardduty.tf
@@ -0,0 +1,4 @@
+resource "aws_guardduty_detector" "main" {
+  enable = true
+  count  = "${var.guardduty_enable}"
+}
diff --git a/variables.tf b/variables.tf
@@ -115,3 +115,8 @@ variable "create_marketplace_disable_policy" {
   description = "Activate (1) or deactivate (0) this policy"
   default     = "0"
 }
+
+variable "guardduty_enable" {
+  description = "Defines if guardduty should be enabled."
+  default     = 0
+}