Skip to content

Commit deadd45

Browse files
committed
📝 Update README
1 parent f506045 commit deadd45

File tree

1 file changed

+43
-0
lines changed

1 file changed

+43
-0
lines changed

README.md

+43
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,43 @@
1+
# ƛ GitHub Security Updater
2+
3+
This is a Lambda to periodically synchronize security groups with the IP ranges for webhooks provided by GitHub's API.
4+
5+
The use case for this would be having a service locked down by source IP in the whitelist, which still needs to receive webhooks for repository events from GitHub (ie a CI/CD tool).
6+
7+
This tool uses the [Serverless Framework](https://serverless.com/) for deployment
8+
9+
## How it works
10+
11+
This will take
12+
13+
## Configuration, Installation & Deployment
14+
15+
Clone this repository, and change to the cloned directory.
16+
17+
Configuration is expected to be found in AWS EC2 Systems Manager Parameter Store.
18+
19+
All variables live under the prefix of `/github_secgrp_updater/{STAGE}`. Replace stage with the relevant stage you are deploying (ie `/github_secgrp_updater/dev/`)
20+
21+
Relevant variables are shown in the table below.
22+
23+
|----------------------|----------|---------------------|-------------|
24+
| Variable | Required | Default Value | Description |
25+
| /vpc_ids | Yes | | A comma separated list of VPC IDs in which to maintain a security group. |
26+
| /secgrp_name | No | AllowGitHubWebhooks | Override the name of the maintained security group |
27+
|----------------------|----------|---------------------|-------------|
28+
29+
30+
Finally, deploy with the following
31+
32+
```
33+
npm install serverless -g
34+
35+
serverless deploy
36+
```
37+
38+
### Deploying multiple environments
39+
40+
This supports the serverless framework's concept of stages. Deploy additional stages like so:
41+
```
42+
serverless deploy --stage prod
43+
```

0 commit comments

Comments
 (0)