Update docs

deepfence · Dec 2, 2024 · fd076a5 · fd076a5
1 parent ea5c2bb
commit fd076a5
Show file tree

Hide file tree

Showing 2 changed files with 12 additions and 1 deletion.
diff --git a/deepfence_agent/plugins/yara-rules b/deepfence_agent/plugins/yara-rules
diff --git a/docs/docs/cloudscanner/aws.md b/docs/docs/cloudscanner/aws.md
@@ -94,6 +94,9 @@ module "deepfence-cloud-scanner_example_single-account" {
   # AWS Account Name (Optional, for easy identification)
   account_name                  = ""
   image                         = "quay.io/deepfenceio/cloud_scanner_ce:THREATMAPPER_VERSION"
+  # Disabled regions: List of cloud regions which should not be scanned
+  # Example: ["us-east-1", "us-east-2"]
+  disabled_cloud_regions        = []
   # Task CPU Units (Default: 4 vCPU)
   cpu                           = "4096"
   # Task Memory (Default: 8 GB)
@@ -186,6 +189,9 @@ For full details, refer to the GitHub repository: https://github.com/deepfence/t
       # AWS region
       region: "us-east-1"
 
+      # Optional: Comma separated list of cloud regions which should not be scanned
+      disabledCloudRegions: ""
+
       # Policy set for Cloud Scanner in CloudFormation / terraform
       # arn:aws:iam::aws:policy/ReadOnlyAccess / arn:aws:iam::aws:policy/SecurityAudit
       cloudScannerPolicy: "arn:aws:iam::aws:policy/SecurityAudit"
@@ -253,6 +259,9 @@ For full details, refer to the GitHub repository: https://github.com/deepfence/t
       # AWS region
       region: "us-east-1"
 
+      # Optional: Comma separated list of cloud regions which should not be scanned
+      disabledCloudRegions: ""
+
       # Policy set for Cloud Scanner in CloudFormation / terraform
       # arn:aws:iam::aws:policy/ReadOnlyAccess / arn:aws:iam::aws:policy/SecurityAudit
       cloudScannerPolicy: "arn:aws:iam::aws:policy/SecurityAudit"
@@ -329,6 +338,7 @@ For full details, refer to the GitHub repository: https://github.com/deepfence/t
       DEEPFENCE_KEY: "<DEEPFENCE_KEY>"
       CLOUD_PROVIDER: "aws"
       CLOUD_REGION: "<REGION>"
+      DISABLED_CLOUD_REGIONS: ""
       CLOUD_ACCOUNT_ID: "<ACCOUNT_ID>"
       DEPLOYED_ACCOUNT_ID: ""
       CLOUD_ACCOUNT_NAME: ""
@@ -369,6 +379,7 @@ For full details, refer to the GitHub repository: https://github.com/deepfence/t
       DEEPFENCE_KEY: "<DEEPFENCE_KEY>"
       CLOUD_PROVIDER: "aws"
       CLOUD_REGION: "<REGION>"
+      DISABLED_CLOUD_REGIONS: ""
       CLOUD_ACCOUNT_ID: "<ROOT_ACCOUNT_ID>"
       DEPLOYED_ACCOUNT_ID: ""
       CLOUD_ACCOUNT_NAME: ""