pci

ScaleSec · May 3, 2021 · 321ea2e · 321ea2e
1 parent 469288a
commit 321ea2e
Showing 1 changed file with 8 additions and 4 deletions.
diff --git a/compliance_scp/pci/main.tf b/compliance_scp/pci/main.tf
@@ -1,14 +1,18 @@
 # The below approved services are based off the list located here: https://aws.amazon.com/compliance/services-in-scope/
 
-data "template_file" "pci_policy" {
-  template = file("../templates/pci.json")
+data "http" "pci_policy" {
+  url = "https://raw.githubusercontent.com/salesforce/aws-allowlister/main/examples/latest/PCI-AllowList-SCP.json"
+
+  request_headers = {
+    Accept = "application/json"
+  }
 }
 
 resource "aws_organizations_policy" "allow_pci_services_policy" {
   name        = "Allow PCI Services"
-  description = "Only allow PCI services as of 03/2021"
+  description = "Only allow PCI services."
 
-  content = data.template_file.pci_policy.rendered
+  content = data.http.pci_policy.body
 }
 
 resource "aws_organizations_policy_attachment" "allow_pci_services_attachment" {