fancyremarker

# Our product relies on SSH for authentication and transport in various parts
# of the app. Most operations generate a certificate with particular
# restrictions to constrain what the user can do once they're authenticated to
# the SSH portal.

# The Core API would be making the permission decisions (i.e.
# what force command to use, whether to allocate port forwarding), and this
# module is responsible for providing a corresponding SSH Certificate.

# For example: DB Tunnel operations are allowed to port-forward, but they're

fancyremarker

AWSTemplateFormatVersion: '2010-09-09'

Description: |
  Template for a CloudFront distribution that serves Secure Headers

Parameters:
  Domain:
    Type: String
    Description: |
      CNAME at which CloudFront distribution will be served (e.g., foobar.com)

fancyremarker

{
  "host_groups": [
    {
      "name": "master",
      "components": [
        {
          "name": "NAMENODE"
        },
        {
          "name": "DATANODE"