Hi everyone! 👋 Still pretty new to infra-as-code, but I've been learning Terraform to manage our cloud security setup.
I built a module to deploy Tenable's Cloud Security connectors across AWS accounts. It handles the IAM roles, policies, and the CloudFormation stack deployment. Would love some feedback from folks who've done similar setups.
```hcl
module "tenable_connector" {
source = "./modules/tenable-connector"
tenable_external_id = var.tenable_external_id
tenable_account_id = var.tenable_account_id
target_accounts = var.target_aws_accounts
region = "us-east-1"
}
```
Main goal was to make it repeatable and keep the permissions tight. Does the IAM policy look correct for a read-only assessment? Also, is there a better way to manage the external ID across multiple accounts?