Suppress vpn

.github/workflows/trivy.yaml

@@ -0,0 +1,31 @@
+---
+name: trivy
+on:
+  push:
+    branches:
+      - master
+
+jobs:
+  trivy:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v2
+      - name: Install prerequisites
+        run: ./bin/install-ubuntu.sh
+      - name: Terraform init
+        run: terraform init --backend=false
+      - name: Trivy scan
+        uses: aquasecurity/trivy-action@master
+        with:
+          scan-type: 'config'
+          hide-progress: false
+          format: 'sarif'
+          output: 'trivy-results.sarif'
+          exit-code: '1'
+          ignore-unfixed: true
+          severity: 'CRITICAL,HIGH'
+
+      - name: Upload Trivy scan results to GitHub Security tab
+        uses: github/codeql-action/upload-sarif@v2
+        with:
+          sarif_file: 'trivy-results.sarif'

README.md

@@ -1,9 +1,9 @@
 # terraform-pagerduty-rhythmic-awsmanaged
-[![tflint](https://github.com/rhythmictech/terraform-pagerduty-rhythmic-awsmanaged/workflows/tflint/badge.svg?branch=master&event=push)](https://github.com/rhythmictech/terraform-pagerduty-rhythmic-customer/actions?query=workflow%3Atflint+event%3Apush+branch%3Amaster)
-[![tfsec](https://github.com/rhythmictech/terraform-pagerduty-rhythmic-awsmanaged/workflows/tfsec/badge.svg?branch=master&event=push)](https://github.com/rhythmictech/terraform-pagerduty-rhythmic-customer/actions?query=workflow%3Atfsec+event%3Apush+branch%3Amaster)
-[![yamllint](https://github.com/rhythmictech/terraform-pagerduty-rhythmic-awsmanaged/workflows/yamllint/badge.svg?branch=master&event=push)](https://github.com/rhythmictech/terraform-pagerduty-rhythmic-customer/actions?query=workflow%3Ayamllint+event%3Apush+branch%3Amaster)
-[![misspell](https://github.com/rhythmictech/terraform-pagerduty-rhythmic-awsmanaged/workflows/misspell/badge.svg?branch=master&event=push)](https://github.com/rhythmictech/terraform-pagerduty-rhythmic-customer/actions?query=workflow%3Amisspell+event%3Apush+branch%3Amaster)
-[![pre-commit-check](https://github.com/rhythmictech/terraform-pagerduty-rhythmic-awsmanaged/workflows/pre-commit-check/badge.svg?branch=master&event=push)](https://github.com/rhythmictech/terraform-pagerduty-rhythmic-customer/actions?query=workflow%3Apre-commit-check+event%3Apush+branch%3Amaster)
+[![tflint](https://github.com/rhythmictech/terraform-pagerduty-rhythmic-awsmanaged/actions/workflows/tflint.yaml/badge.svg)](https://github.com/rhythmictech/terraform-pagerduty-rhythmic-awsmanaged/actions/workflows/tflint.yaml)
+[![trivy](https://github.com/rhythmictech/terraform-pagerduty-rhythmic-awsmanaged/actions/workflows/trivy.yaml/badge.svg)](https://github.com/rhythmictech/terraform-pagerduty-rhythmic-awsmanaged/actions/workflows/trivy.yaml)
+[![yamllint](https://github.com/rhythmictech/terraform-pagerduty-rhythmic-awsmanaged/actions/workflows/yamllint.yaml/badge.svg)](https://github.com/rhythmictech/terraform-pagerduty-rhythmic-awsmanaged/actions/workflows/yamllint.yaml)
+[![misspell](https://github.com/rhythmictech/terraform-pagerduty-rhythmic-awsmanaged/actions/workflows/misspell.yaml/badge.svg)](https://github.com/rhythmictech/terraform-pagerduty-rhythmic-awsmanaged/actions/workflows/misspell.yaml)
+[![pre-commit-check](https://github.com/rhythmictech/terraform-pagerduty-rhythmic-awsmanaged/actions/workflows/pre-commit.yaml/badge.svg)](https://github.com/rhythmictech/terraform-pagerduty-rhythmic-awsmanaged/actions/workflows/pre-commit.yaml)
 <a href="https://twitter.com/intent/follow?screen_name=RhythmicTech"><img src="https://img.shields.io/twitter/follow/RhythmicTech?style=social&logo=twitter" alt="follow on Twitter"></a>
 
 Configures PagerDuty for a customer with AWS Managed Services
@@ -34,6 +34,7 @@ No modules.
 | Name | Type |
 |------|------|
 | [pagerduty_business_service.aws](https://registry.terraform.io/providers/PagerDuty/pagerduty/latest/docs/resources/business_service) | resource |
+| [pagerduty_event_orchestration_service.account](https://registry.terraform.io/providers/PagerDuty/pagerduty/latest/docs/resources/event_orchestration_service) | resource |
 | [pagerduty_extension.account](https://registry.terraform.io/providers/PagerDuty/pagerduty/latest/docs/resources/extension) | resource |
 | [pagerduty_extension.compliance](https://registry.terraform.io/providers/PagerDuty/pagerduty/latest/docs/resources/extension) | resource |
 | [pagerduty_extension.cost](https://registry.terraform.io/providers/PagerDuty/pagerduty/latest/docs/resources/extension) | resource |
@@ -61,7 +62,7 @@ No modules.
 | [pagerduty_escalation_policy.cost](https://registry.terraform.io/providers/PagerDuty/pagerduty/latest/docs/data-sources/escalation_policy) | data source |
 | [pagerduty_escalation_policy.security](https://registry.terraform.io/providers/PagerDuty/pagerduty/latest/docs/data-sources/escalation_policy) | data source |
 | [pagerduty_extension_schema.jira](https://registry.terraform.io/providers/PagerDuty/pagerduty/latest/docs/data-sources/extension_schema) | data source |
-| [pagerduty_team.service_delivery](https://registry.terraform.io/providers/PagerDuty/pagerduty/latest/docs/data-sources/team) | data source |
+| [pagerduty_team.customer_success](https://registry.terraform.io/providers/PagerDuty/pagerduty/latest/docs/data-sources/team) | data source |
 | [pagerduty_vendor.datadog](https://registry.terraform.io/providers/PagerDuty/pagerduty/latest/docs/data-sources/vendor) | data source |
 
 ## Inputs

main.tf

@@ -10,14 +10,14 @@ data "pagerduty_business_service" "customer" {
   name = var.customer_name
 }
 
-data "pagerduty_team" "service_delivery" {
-  name = "Service Delivery Team"
+data "pagerduty_team" "customer_success" {
+  name = "Customer Success Team"
 }
 
 resource "pagerduty_business_service" "aws" {
   name        = "${var.awsorg_name} - AWS Managed Services (${var.customer_name})"
   description = "AWS Managed Services - account health, compliance, cost and security monitoring"
-  team        = data.pagerduty_team.service_delivery.id
+  team        = data.pagerduty_team.customer_success.id
 }
 
 resource "pagerduty_service_dependency" "aws" {

suppress.tf

@@ -0,0 +1,20 @@
+# Partial VPN tunnel redundancy loss
+resource "pagerduty_event_orchestration_service" "account" {
+  service                                = pagerduty_service.account.id
+  enable_event_orchestration_for_service = true
+  set {
+    id = "start"
+    rule {
+      label = "Suppress VPN Alerts"
+      condition {
+        expression = "event.custom_details.body matches part 'Connectivity on the second tunnel was not affected during this time'"
+      }
+      actions {
+        suppress = true
+      }
+    }
+  }
+  catch_all {
+    actions {}
+  }
+}