diff --git a/aws/projects/ditd-darhts/README.md b/aws/projects/ditd-darhts/README.md index 452b42c7..dc488473 100644 --- a/aws/projects/ditd-darhts/README.md +++ b/aws/projects/ditd-darhts/README.md @@ -13,15 +13,14 @@ ## DARHTS buckets -Three buckets per environment, for the following purposes: +Three buckets per environment, in the 'west' region, for the following purposes: -* in: uploaded files from DARHTS Salesforce +* in: uploaded files from DARHTS + * v-s3-ditd-darhts-{env}-in-{account}-{region-short} * clean: after s3 scan, files which do not have threats are moved here via EventBridge and Lambda + * v-s3-ditd-darhts-{env}-clean-{account}-{region-short} * quarantine: after s3 scan, files which may have threats or are unknown types (not no_threats) are moved here via EventBridge and Lambda - -v-s3-ditd-darhts-{env}-in-{account}-{region-short} -v-s3-ditd-darhts-{env}-clean-{account}-{region-short} -v-s3-ditd-darhts-{env}-quarantine-{account}-{region-short} + * v-s3-ditd-darhts-{env}-quarantine-{account}-{region-short} The `clean` bucket will need versioning turned on for replication to the DAPPS bucket (below) All 3 buckets will use a bucket-specific KMS key.