Security Automation with Ansible 2

Configuration

The following parameters are configurable before deployment:

• region: AWS region to deploy in. This needs to be the same as the region where the VPC network resides.
• accessToken: The accessToken that will be used to authenticate the requests to the blacklist endpoint.
• aclLimit: The maximum number of rules an ACL can handle. The maximum limit in AWS is 20 by default.
• ruleStartId: The starting ID for rules in the ACL.
• aclID: The ACL ID of the network where the rules will be applied.
• tableName: The unique table name in DynamoDB, created for each VPC to be defended.
• ruleValidity: The duration for which a rule is valid, after which the IP will be unblocked.

Configure the following in the config.js file:

module.exports = { region: ...