initial commit

modules/security_identity_compliance/inspector2/README.md

@@ -0,0 +1,2 @@
+# inspector2 module
+Via awscli, enable inspector2 scanning of ECR repositories

modules/security_identity_compliance/inspector2/main.tf

@@ -0,0 +1,11 @@
+resource "null_resource" "cli-inspector2" {
+  provisioner "local-exec" {
+    when    = create
+    command = "/bin/bash -c 'aws inspector2 enable --resource-types \"ECR\"'"
+  }
+
+  provisioner "local-exec" {
+    when    = destroy
+    command = "/bin/bash -c 'aws inspector2 disable --resource-types \"ECR\"; sleep 30; aws inspector2 disable'"
+  }
+}