tracker5676
tracker5676
Hi @SteveMcGrath , Please let me know how to use this field in the config file? Just put - map_to_asset_account = "ACCOUNT ID FOR WHICH I WANT TO EXPORT THE...
once map_to_asset_account = true attribute added I get an error: 
Hi @SteveMcGrath, Could you please comment on this?
Hi @SteveMcGrath, Sure, SecurityHub is enabled on all accounts. So, as of now I scan two AWS accounts with TVM. AWS User has access only to the specific (one) AWS...
- Security Hub is enabled for all AWS accounts; - I use an AWS user (not role) to communicate with AWS Security Hub and this user has only access to...
It looks like the answer to point 1 denies the possibility of using point 2 even if there is a role that has the ability to communicate with many aws...
Hi @SteveMcGrath, I added parameters to the config file: map_to_asset_account = true allowed_accounts = "XXXXXXXXXXX, YYYYYYYYYYY" Additionally, I created a role for cross-account access but within the binary execution, I...
I tested 2nd account separately with a role - all findings have been exported successfully. Thoughts: When you work with aws cli you are working based on aws profiles that...
I tried using this variable, but it does not play a role in my case since I use the profile - default with aws cli. I have created 3 identical...
When I left only one account in tvm2aws config and specify AWS_PROFILE="PROFILE_WITH_ASSUMED_ROLE" - It worked fine. If I change AWS_PROFILE="default" the script can't assume this role.