codepipeline-template.yaml [55:158]:
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
    OwaspZapURLName:
      Description: OWASP Zap DAST Tool URL
      Type: String
    ApplicationURLForDASTScan:
      Description: Application URL to run the DAST/Pen testing 
      Type: String
    OwaspZapApiKey:
      Description: OWASP Zap ApiKey
      Type: String
      NoEcho: true
    PipelineNotificationsEmail:
      Description: Email address to receive SNS notifications for pipelineChanges
      Type: String
    PipelineApproverEmail:
      Description: Email address to send approval notifications
      Type: String

  #### Parameter Groups, Labels
  Metadata:
    'AWS::CloudFormation::Interface':
      ParameterGroups:
      - Label:
          default: Code
        Parameters:
        - BranchName
        - RepositoryName 
      - Label:
          default: SAST
        Parameters:
        - SASTTool
        - SonarQubeScanToken
        - SonarQubeURLName
      - Label:
          default: DAST
        Parameters:
        - DASTTool
        - OwaspZapURLName
        - OwaspZapApiKey
        - ApplicationURLForDASTScan
      - Label:
          default: Lambda function 
        Parameters:
        - LambdaPackageLoc
        - LambdaPackageS3Key
        - LambdaHandlerName
      - Label:
          default: STG Elastic BeanStalk Environment 
        Parameters:
        - ElasticBeanstalkEnvironment
        - ApplicationName 
      - Label:
          default: PRD Elastic BeanStalk Environment 
        Parameters:
        - PRDElasticBeanstalkEnvironment
        - PRDApplicationName 
      - Label:
          default: General
        Parameters:
        - PipelineNotificationsEmail
        - PipelineApproverEmail

    ParameterLabels:
      BranchName:
          default: CodeCommit branch
      RepositoryName:
          default: CodeCommit repository
      SASTTool:
          default: Select SAST tool
      SonarQubeURLName:
          default: SonarQube URL name
      SonarQubeScanToken:
          default: SonarQube API authentication token
      DASTTool:
          default: Select DAST tool
      OwaspZapURLName:
          default: OWASP Zap URL name
      OwaspZapApiKey:
          default: OWASP ZAP API authentication token
      ApplicationURLForDASTScan:
          default: STG Application web URL
      LambdaPackageLoc:
          default: S3 bucket name of lambda code
      LambdaPackageS3Key:
          default: S3 bucket folder of lambda code
      LambdaHandlerName:
          default: Lambda function handler name
      ElasticBeanstalkEnvironment:
          default: STG Elastic Beanstalk environment name 
      ApplicationName:
          default: STG Elastic beanstalk application name
      PRDElasticBeanstalkEnvironment:
          default: PRD Elastic Beanstalk environment name 
      PRDApplicationName:
          default: PRD Elastic beanstalk application name 
      PipelineNotificationsEmail:
          default: Email for pipeline notifications
      PipelineApproverEmai:
          default: Email for approval notifications

  Conditions:
    ScanWith_SonarQube: !Equals [ !Ref SASTTool, "SonarQube" ]
    ScanWith_OWASP-ZAP: !Equals [ !Ref DASTTool, "OWASP-Zap" ]

  Resources:
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -



workshop/templates/devsecops-codepipeline.yaml [55:158]:
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
    OwaspZapURLName:
      Description: OWASP Zap DAST Tool URL
      Type: String
    ApplicationURLForDASTScan:
      Description: Application URL to run the DAST/Pen testing 
      Type: String
    OwaspZapApiKey:
      Description: OWASP Zap ApiKey
      Type: String
      NoEcho: true
    PipelineNotificationsEmail:
      Description: Email address to receive SNS notifications for pipelineChanges
      Type: String
    PipelineApproverEmail:
      Description: Email address to send approval notifications
      Type: String

  #### Parameter Groups, Labels
  Metadata:
    'AWS::CloudFormation::Interface':
      ParameterGroups:
      - Label:
          default: Code
        Parameters:
        - BranchName
        - RepositoryName 
      - Label:
          default: SAST
        Parameters:
        - SASTTool
        - SonarQubeScanToken
        - SonarQubeURLName
      - Label:
          default: DAST
        Parameters:
        - DASTTool
        - OwaspZapURLName
        - OwaspZapApiKey
        - ApplicationURLForDASTScan
      - Label:
          default: Lambda function 
        Parameters:
        - LambdaPackageLoc
        - LambdaPackageS3Key
        - LambdaHandlerName
      - Label:
          default: STG Elastic BeanStalk Environment 
        Parameters:
        - ElasticBeanstalkEnvironment
        - ApplicationName 
      - Label:
          default: PRD Elastic BeanStalk Environment 
        Parameters:
        - PRDElasticBeanstalkEnvironment
        - PRDApplicationName 
      - Label:
          default: General
        Parameters:
        - PipelineNotificationsEmail
        - PipelineApproverEmail

    ParameterLabels:
      BranchName:
          default: CodeCommit branch
      RepositoryName:
          default: CodeCommit repository
      SASTTool:
          default: Select SAST tool
      SonarQubeURLName:
          default: SonarQube URL name
      SonarQubeScanToken:
          default: SonarQube API authentication token
      DASTTool:
          default: Select DAST tool
      OwaspZapURLName:
          default: OWASP Zap URL name
      OwaspZapApiKey:
          default: OWASP ZAP API authentication token
      ApplicationURLForDASTScan:
          default: STG Application web URL
      LambdaPackageLoc:
          default: S3 bucket name of lambda code
      LambdaPackageS3Key:
          default: S3 bucket folder of lambda code
      LambdaHandlerName:
          default: Lambda function handler name
      ElasticBeanstalkEnvironment:
          default: STG Elastic Beanstalk environment name 
      ApplicationName:
          default: STG Elastic beanstalk application name
      PRDElasticBeanstalkEnvironment:
          default: PRD Elastic Beanstalk environment name 
      PRDApplicationName:
          default: PRD Elastic beanstalk application name 
      PipelineNotificationsEmail:
          default: Email for pipeline notifications
      PipelineApproverEmai:
          default: Email for approval notifications

  Conditions:
    ScanWith_SonarQube: !Equals [ !Ref SASTTool, "SonarQube" ]
    ScanWith_OWASP-ZAP: !Equals [ !Ref DASTTool, "OWASP-Zap" ]

  Resources:
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -



