FEATURE CE-408: Adding delegated admin support for Security Hub, GuardDuty and AccessAnalyzer (#13)

marko-fabry · web-flow · commit c5824a3dd41e · 2024-02-26T19:12:16.000+01:00
diff --git a/modules/securityhub-baseline/main.tf b/modules/securityhub-baseline/main.tf
@@ -37,7 +37,7 @@ resource "aws_securityhub_member" "members" {
   depends_on = [aws_securityhub_account.main]
   account_id = var.member_accounts[count.index].account_id
   email      = !local.is_delegated_admin_account ? var.member_accounts[count.index].email : null
-  invite     = true
+  invite     = !local.is_delegated_admin_account ? true : false
 }
 
 resource "aws_securityhub_invite_accepter" "invitee" {

Original file line number	Diff line number	Diff line change
`@@ -37,7 +37,7 @@ resource "aws_securityhub_member" "members" {`
`37`	`37`	`depends_on = [aws_securityhub_account.main]`
`38`	`38`	`account_id = var.member_accounts[count.index].account_id`
`39`	`39`	`email = !local.is_delegated_admin_account ? var.member_accounts[count.index].email : null`
`40`		`- invite = true`
	`40`	`+ invite = !local.is_delegated_admin_account ? true : false`
`41`	`41`	`}`
`42`	`42`
`43`	`43`	`resource "aws_securityhub_invite_accepter" "invitee" {`