This commit is contained in:
@@ -163,6 +163,33 @@ locals {
|
||||
purpose_justification = true
|
||||
purpose_justification_prompt = "Access justification required: Please provide your business reason for accessing this production system."
|
||||
}
|
||||
aws = {
|
||||
name = "AWS Cloud Policy"
|
||||
include_groups = ["sales_engineering"]
|
||||
require_posture = true
|
||||
require_mfa = true
|
||||
}
|
||||
okta = {
|
||||
name = "Okta Cloud Policy"
|
||||
include_groups = ["it_admin"]
|
||||
require_posture = true
|
||||
require_mfa = true
|
||||
}
|
||||
meraki = {
|
||||
name = "Meraki Cloud Policy"
|
||||
include_groups = ["it_admin"]
|
||||
require_posture = true
|
||||
require_mfa = true
|
||||
}
|
||||
domain_controller = {
|
||||
name = "Domain Controller Policy"
|
||||
include_groups = ["it_admin", "contractors"]
|
||||
require_posture = true
|
||||
require_mfa = true
|
||||
require_country = true
|
||||
purpose_justification = true
|
||||
purpose_justification_prompt = "Access justification required: Please provide your business reason for accessing this sensitive resource."
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
|
||||
Reference in New Issue
Block a user