[Cloud-Security] Adding var-groups to support authentication vars - related to cloud connector feature#18762
Open
seanrathier wants to merge 2 commits intoelastic:mainfrom
Open
[Cloud-Security] Adding var-groups to support authentication vars - related to cloud connector feature#18762seanrathier wants to merge 2 commits intoelastic:mainfrom
seanrathier wants to merge 2 commits intoelastic:mainfrom
Conversation
seanrathier
added
Team:Integrations
seanrathier
added
Integration:aws
|
Pinging @elastic/integrations (Team:Integrations) |
|
Pinging @elastic/fleet (Team:Fleet) |
|
Pinging @elastic/security-service-integrations (Team:Security-Service Integrations) |
5 tasks
![macroscopeapp[bot]](https://avatars.githubusercontent.com/in/900172?s=60&v=4){kind=small}
…r support Squashed from 23 WIP commits on var_groups branch. Adds var_groups schema to AWS manifest for credential type selection, including Cloud Connector for agentless deployments alongside traditional credential methods (direct access keys, assume role, shared credentials). Includes GuardDuty policy tests for cloud connector and legacy credentials. Co-authored-by: Cursor <cursoragent@cursor.com>
Add hide_in_var_group_options for cloud_connectors on inputs of agentless-enabled policy templates that have not been validated with Cloud Connectors yet (awshealth, billing, dynamodb, elb, lambda, rds, sns, sqs, transitgateway). The guardduty httpjson input remains enabled for Cloud Connectors as before. Co-authored-by: Cursor <cursoragent@cursor.com>
💔 Build Failed
Failed CI StepsHistorycc @seanrathier |
5 tasks
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
Adds
var_groupsconfiguration to the AWS integration package to enable a credential type selector in Fleet UI, improving the user experience when configuring AWS authentication methods.Related PRs
Changes
Added
var_groupssection to package manifest withcredential_typegroup containing:access_key_id,secret_access_key)access_key_id,secret_access_key,session_token)role_arn,external_id) - for agentless deploymentsrole_arn)role_arn,external_id)shared_credential_file,credential_profile_name)Added
hide_in_var_group_optionsto GuardDutyaws-s3input to hide Cloud Connector option (not supported for S3 input)Updated credential variables (
role_arn,external_id,shared_credential_file,credential_profile_name) toshow_user: trueso that users can see the vars in var group optionsScreenshots
Screen.Recording.2026-01-23.at.10.06.07.AM.mov
Related Issues
Checklist
changelog.ymlfile.Author's Checklist
How to test this PR locally
Made with Cursor