mirror of
https://github.com/BishopFox/cloudfoxable.git
synced 2026-11-07 09:56:00 -10:00
87 lines
2.7 KiB
Plaintext
Executable File
87 lines
2.7 KiB
Plaintext
Executable File
#######################
|
|
# Profile Configuration
|
|
#######################
|
|
|
|
# If you want terraform to use a profile other than the default profile, specify the
|
|
# profile name here:
|
|
aws_local_profile = "default"
|
|
|
|
###########################
|
|
# Assume role Configuration
|
|
###########################
|
|
|
|
# If you want terraform to use an ARN other than the caller, specify the ARN here:
|
|
#aws_assume_role_arn = "arn:aws:iam::112233445566:user/you"
|
|
|
|
|
|
####################################
|
|
# Advanced Assume role Configuration
|
|
####################################
|
|
|
|
# If you have configured AWS CLI profiles that assume roles into other accounts,
|
|
# you will want to specify the profile name AND manually specify the ARN you'd
|
|
# like to use to assume into the different roles.
|
|
|
|
# In the example below, the resources will be created in the account that is tied
|
|
# to "prod-cross-org-access-role", however each role that terraform creates can be
|
|
# accessed by "arn:aws:iam::112233445566:user/you", which belongs to another account.
|
|
|
|
#aws_local_profile = "prod-cross-org-access-role"
|
|
#aws_assume_role_arn = "arn:aws:iam::112233445566:user/you"
|
|
|
|
|
|
#######################
|
|
# User IP Configuration
|
|
#######################
|
|
|
|
# Specify your IP address here to bre used with security groups (so that "public" challenges are only accessible to you)
|
|
# If you don't specify anything, the default behavior is to use https://ifconfig.me to pull your IP address
|
|
#user_ip = "[YOUR_IP_ADDRESS]"
|
|
|
|
|
|
######################
|
|
# Region Configuration
|
|
######################
|
|
|
|
# Uncomment the next lines to use a region other than us-west-2 for your lab
|
|
# AWS_REGION = "us-east-1"
|
|
|
|
|
|
############################
|
|
# Enabled/Disabled Challenges
|
|
############################
|
|
|
|
# Low or No cost - Always on
|
|
its_a_secret_enabled = true
|
|
its_another_secret_enabled = true
|
|
backwards_enabled = true
|
|
furls1_enabled = true
|
|
furls2_enabled = true
|
|
the_topic_is_exposure_enabled = true
|
|
the_topic_is_execution_enabled = true
|
|
middle_enabled = true
|
|
root_enabled = true
|
|
needles_enabled = true
|
|
pain_enabled = true
|
|
segue_enabled = true
|
|
|
|
# This challenges incur noticeable cost. Enable when needed
|
|
search1and2_enabled = false
|
|
wyatt_enabled = false
|
|
double_tap_enabled = false
|
|
white_rabbit_enabled = false
|
|
|
|
## Bastion host related challenges
|
|
## The following challenges all need `bastion_enabled = true`
|
|
|
|
bastion_enabled = false
|
|
variable_enabled = false
|
|
|
|
# Enable/Disable trust_me
|
|
# trust_me is a challenge that requires you to create a GitHub repo.
|
|
# The the private repository that you own and trust
|
|
# example: github_repo = "sethsec/trust-me-demo"
|
|
|
|
trust_me_enabled = false
|
|
github_repo = null
|