zachzeid/panther-auxiliary

Infrastructure as code for deploying Panther

Auxiliary Templates

A collection of templates used to create auxiliary infrastructure in support of a Panther deployment. They are used during deployment (when Panther onboards itself), when onboarding a new source from the web app, or just to serve as examples.

We refer to the AWS account where Panther itself is deployed as the master account. Accounts which Panther scans or pulls log data from are called satellite accounts. An account can function as both - in fact, by default, Panther onboards its own account for cloud security and log analysis.

These templates are primarily for satellite accounts. For example, panther-cloudsec-iam creates IAM roles which Panther Cloud Security can assume to scan your AWS account.

Each template is provided in CloudFormation and Terraform formats for your convenience.