add secret for sensor management api credentials

[ryanjpayne]

• Update crowdstrike_init_stack.yaml with parameter to select storage method for API credentials used by Sensor Management
• Update aws_cspm_cloudformation_v2.json with parameter and resources to store API credentials used by Sensor Management in a secret
• Update documentation for new parameter

[kkvinjam]

Could you please add a test case in .taskcat.yml to test this new option.

[ryanjpayne]

Could you please add a test case in .taskcat.yml to test this new option.

Added test case cw-test-smlambda
Test case will store API credentials in lambda env vars
Default test case will use the secret option

[kkvinjam]

Could you please add a test case in .taskcat.yml to test this new option.

Added test case cw-test-smlambda Test case will store API credentials in lambda env vars Default test case will use the secret option

Please add run_test "cw-test-smlambda" to below file.

cfn-abi-crowdstrike-fcs/.project_automation/functional_tests/entrypoint.sh

Line 49 in 035e5ba

[ryanjpayne]

Could you please add a test case in .taskcat.yml to test this new option.

Added test case cw-test-smlambda Test case will store API credentials in lambda env vars Default test case will use the secret option

ack

[kkvinjam]

Please check below failure, which is deviating from best practices.

	FAILED for resource: AWS::SecretsManager::Secret.CrowdStrikeSensorManagementFalconCredentialsSecret
	File: /templates/aws_cspm_cloudformation_v2.json:452-460
	Guide: https://docs.prismacloud.io/en/enterprise-edition/policy-reference/aws-policies/aws-general-policies/ensure-that-secrets-manager-secret-is-encrypted-using-kms

		452 |     "CrowdStrikeSensorManagementFalconCredentialsSecret": {
		453 |       "Type": "AWS::SecretsManager::Secret",
		454 |       "Condition": "ShouldCreateSensorManagementCredentialsSecret",
		455 |       "Properties": {
		456 |         "Name": "/CrowdStrike/CSPM/SensorManagement/FalconAPICredentials",
		457 |         "Description": "Falcon API credentials. Used by the 1-Click sensor management orchestrator.",
		458 |         "SecretString": {"Fn::Sub": "{\"ClientId\":\"${ClientID}\",\"ClientSecret\":\"${ClientSecret}\"}"}
		459 |       }
		460 |     },

[kkvinjam]

/do-e2e-tests

[aws-ia-automator-prod]

End to end test has been scheduled

[aws-ia-automator-prod]

E2E tests in progress

[aws-ia-automator-prod]

E2E tests completed successfully