google / google/stellar-engine

[Feature Request] Create a blueprint for SCC Notifications for NIST 800_53 R5 Controls in Security Command Center

Open
#188 0 comments 0 reactions 0 assignees View on GitHub
enhancement
Dominant language
HCL
Stars
49
Forks
20
Avg merge
3d 14h
Merged PRs (30d)
28

Description

## Feature Description
Create a blueprint for SCC Notifications for NIST 800_53 R5 Controls in Security Command Center
Must contain the following
- A Scc notification configuration for each NIST 800 53 Control
- A pubsub topic to write notification configurations to
- An alert template for the appropriate alerts from the pub/sub topic
- Any associated permissions to be templated

## Use Case
Yes.

## Proposed Solution
Terraform blueprint for scc compliance alerts

## Compliance & Deployment Context
* **Target Deployment Type(s):**
* [ ] US Region Restricted (e.g., Access Policy constraint)
* [ ] FedRAMP Medium
* [ ] FedRAMP High
* [ ] FedRAMP Moderate
* [ ] DoD IL4
* [ ] DoD IL5
* [x] All / General
* **Relevant NIST 800-53r5 Controls:** (If applicable, list the controls this feature helps satisfy)

## Reusability Check
Stellar Engine prioritizes reusability.
* [x] I have checked if this functionality can be achieved by extending an existing module or blueprint.
* [x] I have verified that this does not duplicate existing functionality.

Contributor guide

Open the contributing guide

Research direction

Start by reviewing the repository's existing Terraform blueprints and modules, especially the extension points referenced by the reusability checklist. Define the NIST 800-53 R5 SCC notification configurations, Pub/Sub topic, alert template, and permissions; done means the blueprint covers each required control and supports the stated general deployment context.

Written by the indexing model from the issue text.

Assessment

Tech stack
google-cloud
Domain
cloud, security
Issue type
Feature
Difficulty
5/5
Estimated time
Over a week
Activity status
Quiet
Clarity
Mostly clear
Newbie friendliness
38/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.