{"id":30136607,"url":"https://github.com/checkpointsw/terraform-aws-cloudguard-network-security","last_synced_at":"2026-02-19T15:04:52.544Z","repository":{"id":272280187,"uuid":"883750354","full_name":"CheckPointSW/terraform-aws-cloudguard-network-security","owner":"CheckPointSW","description":" Terraform modules for deploying Check Point CloudGuard Network Security in Amazon Web Services (AWS). These modules automate the creation of Virtual Private Clouds (VPCs), Security Gateways, High-Availability architectures, and more, enabling secure and scalable cloud deployments.","archived":false,"fork":false,"pushed_at":"2025-07-23T06:31:35.000Z","size":179,"stargazers_count":4,"open_issues_count":2,"forks_count":5,"subscribers_count":4,"default_branch":"master","last_synced_at":"2025-07-23T08:27:49.816Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"","language":"HCL","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":null,"status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/CheckPointSW.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":null,"code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null}},"created_at":"2024-11-05T14:06:18.000Z","updated_at":"2025-07-16T23:27:28.000Z","dependencies_parsed_at":"2025-05-20T08:31:30.312Z","dependency_job_id":"1ec629be-6ef8-4301-aaf1-bbd15d2fd97e","html_url":"https://github.com/CheckPointSW/terraform-aws-cloudguard-network-security","commit_stats":null,"previous_names":["checkpointsw/terraform-aws-cloudguard-network-security"],"tags_count":4,"template":false,"template_full_name":null,"purl":"pkg:github/CheckPointSW/terraform-aws-cloudguard-network-security","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/CheckPointSW%2Fterraform-aws-cloudguard-network-security","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/CheckPointSW%2Fterraform-aws-cloudguard-network-security/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/CheckPointSW%2Fterraform-aws-cloudguard-network-security/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/CheckPointSW%2Fterraform-aws-cloudguard-network-security/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/CheckPointSW","download_url":"https://codeload.github.com/CheckPointSW/terraform-aws-cloudguard-network-security/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/CheckPointSW%2Fterraform-aws-cloudguard-network-security/sbom","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":269803855,"owners_count":24477658,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-08-10T02:00:08.965Z","response_time":71,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":[],"created_at":"2025-08-10T23:09:58.313Z","updated_at":"2026-02-19T15:04:52.533Z","avatar_url":"https://github.com/CheckPointSW.png","language":"HCL","funding_links":[],"categories":[],"sub_categories":[],"readme":"![GitHub Wachers](https://img.shields.io/github/watchers/checkpointsw/terraform-aws-cloudguard-network-security)\n![GitHub Release](https://img.shields.io/github/v/release/checkpointsw/terraform-aws-cloudguard-network-security)\n![GitHub Commits Since Last Commit](https://img.shields.io/github/commits-since/checkpointsw/terraform-aws-cloudguard-network-security/latest/master)\n![GitHub Last Commit](https://img.shields.io/github/last-commit/checkpointsw/terraform-aws-cloudguard-network-security/master)\n![GitHub Repo Size](https://img.shields.io/github/repo-size/checkpointsw/terraform-aws-cloudguard-network-security)\n![GitHub Downloads](https://img.shields.io/github/downloads/checkpointsw/terraform-aws-cloudguard-network-security/total)\n\n# Terraform Modules for CloudGuard Network Security (CGNS) - AWS\n\n## Introduction\nThis repository provides a structured set of Terraform modules for deploying Check Point CloudGuard Network Security in Amazon Web Services (AWS). These modules automate the creation of Virtual Private Clouds (VPCs), Security Gateways, High-Availability architectures, and more, enabling secure and scalable cloud deployments.\n\n## Repository Structure\n`Submodules`: Contains modular, reusable, production-grade Terraform components, each with its own documentation.\n\n`Examples`: Demonstrates how to use the modules.\n\n\n## Available Submodules\n\n**Submodules:**\n* [`autoscale_gwlb`](https://registry.terraform.io/modules/checkpointsw/cloudguard-network-security/aws/latest/submodules/autoscale_gwlb) - Deploys Auto Scaling Group of  CloudGuard Security Gateways into an existing VPC.\n* [`cme_iam_role`](https://registry.terraform.io/modules/checkpointsw/cloudguard-network-security/aws/latest/submodules/cme_iam_role) - Creates AWS IAM Role for Cloud Management Extension (CME) on Security Management Server.\n* [`cme_iam_role_gwlb`](https://registry.terraform.io/modules/checkpointsw/cloudguard-network-security/aws/latest/submodules/cme_iam_role_gwlb) - Creates AWS IAM Role for Cloud Management Extension (CME) manages Gateway Load Balancer Auto Scale Group on Security Management Server.\n* [`gateway`](https://registry.terraform.io/modules/checkpointsw/cloudguard-network-security/aws/latest/submodules/gateway) - Deploys Check Point CloudGuard Network Security Gateway into an existing VPC.\n* [`gateway_master`](https://registry.terraform.io/modules/checkpointsw/cloudguard-network-security/aws/latest/submodules/gateway_master) -Check Point CloudGuard Network Security Gateway into a new VPC.\n* [`gwlb`](https://registry.terraform.io/modules/checkpointsw/cloudguard-network-security/aws/latest/submodules/gwlb) - Deploys AWS Auto Scaling group configured for Gateway Load Balancer into an existing VPC.\n* [`gwlb_master`](https://registry.terraform.io/modules/checkpointsw/cloudguard-network-security/aws/latest/submodules/gwlb_master) - Deploys AWS Auto Scaling group configured for Gateway Load Balancer into a new VPC.\n* [`management`](https://registry.terraform.io/modules/checkpointsw/cloudguard-network-security/aws/latest/submodules/management) - Deploys CloudGuard Network Security Management Server into an existing VPC.\n* [`mds`](https://registry.terraform.io/modules/checkpointsw/cloudguard-network-security/aws/latest/submodules/mds) - Deploys CloudGuard Network Multi-Domain Server into an existing VPC.\n* [`qs_autoscale`](https://registry.terraform.io/modules/checkpointsw/cloudguard-network-security/aws/latest/submodules/qs_autoscale) - Deploys CloudGuard Network Security Gateway Auto Scaling Group, an external ALB/NLB, and optionally a Security Management Server and a web server Auto Scaling Group.\n* [`qs_autoscale_master`](https://registry.terraform.io/modules/checkpointsw/cloudguard-network-security/aws/latest/submodules/qs_autoscale_master) - Deploys CloudGuard Network Security Gateway Auto Scaling Group, an external ALB/NLB, and optionally a Security Management Server and a web server Auto Scaling Group in a new VPC.\n* [`standalone`](https://registry.terraform.io/modules/checkpointsw/cloudguard-network-security/aws/latest/submodules/standalone) - Check Point CloudGuard Network Security Gateway \u0026 Management (Standalone) instance into an existing VPC.\n* [`standalone_master`](https://registry.terraform.io/modules/checkpointsw/cloudguard-network-security/aws/latest/submodules/standalone_master) - CloudGuard Network Security Gateway \u0026 Management (Standalone) instance into a new VPC.\n* [`tgw_asg`](https://registry.terraform.io/modules/checkpointsw/cloudguard-network-security/aws/latest/submodules/tgw_asg) - Deploys CloudGuard Network Security Gateway Auto Scaling Group for Transit Gateway with an optional Management Server into an existing VPC.\n* [`tgw_asg_master`](https://registry.terraform.io/modules/checkpointsw/cloudguard-network-security/aws/latest/submodules/tgw_asg_master) - CloudGuard Network Security Gateway Auto Scaling Group for Transit Gateway with an optional Management Server in a new VPC.\n* [`tgw_cross_az_cluster`](https://registry.terraform.io/modules/checkpointsw/cloudguard-network-security/aws/latest/submodules/tgw_cross_az_cluster) - Deploys CloudGuard Network Security Cross AZ Cluster into an existing VPC on AWS for Transit Gateway.\n* [`tgw_cross_az_cluster_master`](https://registry.terraform.io/modules/checkpointsw/cloudguard-network-security/aws/latest/submodules/tgw_cross_az_cluster_master) - Deploys CloudGuard Network Security Cross AZ Cluster with a new VPC on AWS for Transit Gateway.\n* [`tgw_gwlb`](https://registry.terraform.io/modules/checkpointsw/cloudguard-network-security/aws/latest/submodules/tgw_gwlb) - Deploys WS Auto Scaling group configured for Gateway Load Balancer into existing Centralized Security VPC for Transit Gateway.\n* [`tgw_gwlb_master`](https://registry.terraform.io/modules/checkpointsw/cloudguard-network-security/aws/latest/submodules/tgw_gwlb_master) - Deploys AWS Auto Scaling group configured for Gateway Load Balancer into new Centralized Security VPC for Transit Gateway.\n\n\n**Internal Submodules:**\n* [`amis`](https://registry.terraform.io/modules/checkpointsw/cloudguard-network-security/aws/latest/submodules/amis)\n* [`cloudwatch_policy`](https://registry.terraform.io/modules/checkpointsw/cloudguard-network-security/aws/latest/submodules/cloudwatch_policy)\n* [`cluster_iam_role`](https://registry.terraform.io/modules/checkpointsw/cloudguard-network-security/aws/latest/submodules/cluster_iam_role)\n* [`custom_autoscale`](https://registry.terraform.io/modules/checkpointsw/cloudguard-network-security/aws/latest/submodules/custom_autoscale)\n* [`elastic_ip`](https://registry.terraform.io/modules/checkpointsw/cloudguard-network-security/aws/latest/submodules/elastic_ip)\n* [`gateway_instance`](https://registry.terraform.io/modules/checkpointsw/cloudguard-network-security/aws/latest/submodules/gateway_instance)\n* [`instance_type`](https://registry.terraform.io/modules/checkpointsw/cloudguard-network-security/aws/latest/submodules/instance_type)\n* [`internal_default_route`](https://registry.terraform.io/modules/checkpointsw/cloudguard-network-security/aws/latest/submodules/internal_default_route)\n* [`load_balancer`](https://registry.terraform.io/modules/checkpointsw/cloudguard-network-security/aws/latest/submodules/load_balancer)\n* [`permissive_sg`](https://registry.terraform.io/modules/checkpointsw/cloudguard-network-security/aws/latest/submodules/permissive_sg)\n* [`version_license`](https://registry.terraform.io/modules/checkpointsw/cloudguard-network-security/aws/latest/submodules/version_license)\n* [`vpc`](https://registry.terraform.io/modules/checkpointsw/cloudguard-network-security/aws/latest/submodules/vpc)\n\n***\n# AWS Terraform Security Group Configuration\n\n## Default Security Rules\nEach submodule in this repository includes **preconfigured security group rules** designed to ensure the solution works properly out of the box. These rules are tailored for the default deployment scenarios but may require adjustments to meet your specific security and compliance requirements.\n\n**Example:** To restrict inbound\\outbound traffic, update the security_rules attribute in the submodule configuration:\n\n```hcl\n  security_rules = [\n    {\n      direction   = \"ingress\"\n      from_port   = 22\n      to_port     = 22\n      protocol    = \"tcp\"\n      cidr_blocks = [\"10.0.0.0/30\"]\n    }\n  ]\n```\n# Best Practices for Using CloudGuard Modules\n\n## Step 1: Use the Required Module\nAdd the required module in your Terraform configuration file (`main.tf`) to deploy resources. For example:\n\n```hcl\nprovider \"aws\" { }\n\nmodule \"example_module\" {\n  source  = \"CheckPointSW/cloudguard-network-security/aws//modules/{module_name}\"\n  version = \"{chosen_version}\"\n  # Add the required inputs\n}\n```\n---\n\n## Step 2: Open the Terminal\nEnsure you have the AWS CLI installed and navigate to the directory containing your `main.tf` file is located, using the appropriate terminal: \n\n- **Linux/macOS**: **Terminal**.\n- **Windows**: **PowerShell** or **Command Prompt**.\n\n---\n\n## Step 3: Set Environment Variables and Log in with AWS CLI\nSet up your AWS credentials and configure the default region by setting environment variables:\n\n\n### Linux/macOS\n```hcl\nexport AWS_ACCESS_KEY_ID=\"{your-access-key-id}\"\nexport AWS_SECRET_ACCESS_KEY=\"{your-secret-access-key}\"\nexport AWS_DEFAULT_REGION=\"{your-region}\"\n\naws configure\n\n```\n### PowerShell (Windows)\n```hcl\n$env:AWS_ACCESS_KEY_ID=\"{your-access-key-id}\"\n$env:AWS_SECRET_ACCESS_KEY=\"{your-secret-access-key}\"\n$env:AWS_DEFAULT_REGION=\"{your-region}\"\n\naws configure\n```\n### Command Prompt (Windows)\n```hcl\nset AWS_ACCESS_KEY_ID=\"{your-access-key-id}\"\nset AWS_SECRET_ACCESS_KEY=\"{your-secret-access-key}\"\nset AWS_DEFAULT_REGION=\"{your-region}\"\n\naws configure\n```\n---\n\n\n## Step 4: Deploy with Terraform\nUse Terraform commands to deploy resources securely.\n\n### Initialize Terraform\nPrepare the working directory and download required provider plugins:\n```hcl\nterraform init\n```\n\n### Plan Deployment\nPreview the changes Terraform will make:\n```hcl\nterraform plan\n```\n### Apply Deployment\nApply the planned changes and deploy the resources:\n```hcl\nterraform apply\n```\nNote: The terraform apply command might vary slightly depending on the submodule configurations. Pay close attention to any additional instructions provided in the submodules' documentation to ensure correct usage and handling of the resources.","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fcheckpointsw%2Fterraform-aws-cloudguard-network-security","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fcheckpointsw%2Fterraform-aws-cloudguard-network-security","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fcheckpointsw%2Fterraform-aws-cloudguard-network-security/lists"}