{"id":13337965,"url":"https://github.com/fivexl/terraform-aws-ssl-checker","last_synced_at":"2025-04-09T15:32:39.524Z","repository":{"id":39858217,"uuid":"337760037","full_name":"fivexl/terraform-aws-ssl-checker","owner":"fivexl","description":"Simple SSL check and expiring certificates reminder with additional DNS check and host availability check.","archived":false,"fork":false,"pushed_at":"2021-09-06T11:59:08.000Z","size":7234,"stargazers_count":5,"open_issues_count":3,"forks_count":6,"subscribers_count":2,"default_branch":"master","last_synced_at":"2025-03-24T08:54:40.860Z","etag":null,"topics":["heartbleed","lambda","security","ssl","terraform","terraform-module","tls","tls-certificate-checker","tls-scan","tls13"],"latest_commit_sha":null,"homepage":"https://registry.terraform.io/modules/fivexl/ssl-checker/aws/latest","language":"Python","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"agpl-3.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/fivexl.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null}},"created_at":"2021-02-10T15:05:52.000Z","updated_at":"2024-01-19T10:28:02.000Z","dependencies_parsed_at":"2022-09-22T23:12:14.696Z","dependency_job_id":null,"html_url":"https://github.com/fivexl/terraform-aws-ssl-checker","commit_stats":null,"previous_names":[],"tags_count":11,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/fivexl%2Fterraform-aws-ssl-checker","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/fivexl%2Fterraform-aws-ssl-checker/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/fivexl%2Fterraform-aws-ssl-checker/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/fivexl%2Fterraform-aws-ssl-checker/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/fivexl","download_url":"https://codeload.github.com/fivexl/terraform-aws-ssl-checker/tar.gz/refs/heads/master","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":248058181,"owners_count":21040712,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["heartbleed","lambda","security","ssl","terraform","terraform-module","tls","tls-certificate-checker","tls-scan","tls13"],"created_at":"2024-07-29T19:15:16.542Z","updated_at":"2025-04-09T15:32:37.993Z","avatar_url":"https://github.com/fivexl.png","language":"Python","funding_links":[],"categories":[],"sub_categories":[],"readme":"[![FivexL](https://releases.fivexl.io/fivexlbannergit.jpg)](https://fivexl.io/)\n\n# AWS SSL Checker Terraform module\n\nSimple SSL check and expiring certificates reminder with additional DNS check and host availability check.\n\n```hcl\nmodule \"ssl_checker\" {\n  source         = \"fivexl/ssl-checker/aws\"\n  version        = \"1.0.2\"\n  hostnames      = [\"fivexl.io\", \"google.com\"]\n  slack_hook_url = \"https://hooks.slack.com/services/XXXXXXX/XXXXXXX/XXXXXXXXXXXX\"\n}\n```\n\n## Requirements\n\n| Name | Version |\n|------|---------|\n| terraform | \u003e= 0.13 |\n| aws | \u003e= 3.19.0 |\n| python | \u003e= 3.8 |\n| pip | |\n\n## For Mac OS\nPlease use `build_in_docker = true` and build inside docker for avoid nassl problem\n\n## Inputs\n\n| Name | Description | Type | Default | Required |\n|------|-------------|------|---------|:--------:|\n| build_in_docker | Build in docker for avoid problems with local environment | `bool` | `false` | no |\n| certificate_expiration_notice_days | Days prior to the notification of the expired certificate. | `string` | `\"7\"` | no |\n| cloudwatch_logs_retention_in_days | Specifies the number of days you want to retain log events in the specified log group. Possible values are: 1, 3, 5, 7, 14, 30, 60, 90, 120, 150, 180, 365, 400, 545, 731, 1827, and 3653. | `number` | `14` | no |\n| function_name | Lambda function name. | `string` | `\"ssl-checker\"` | no |\n| hostnames | The list of DNS names that should be monitored. Path is also supported. e.g.: [\\\"example.com\\\",\\\"example.com/api\\\"]. | `list(string)` | | yes |\n| health_check_matcher | The response HTTP codes to use when checking for a healthy responses from a hostnames. e.g.: \\\"200,201,202-399\\\". | `string` | `\"200-399\"` | no |\n| scan_commands | List of scan commands types witch will run against hostnames. Any type supported by [SSLyze](https://nabla-c0d3.github.io/sslyze/documentation/available-scan-commands.html). | `list(string)` | `[\"certificate_info\", \"robot\", \"tls_compression\", \"tls_fallback_scsv\", \"heartbleed\",\"http_headers\", \"openssl_ccs_injection\", \"session_renegotiation\", \"tls_1_1_cipher_suites\",\"tls_1_2_cipher_suites\", \"tls_1_3_cipher_suites\"]` | no |\n| schedule_expression | The scheduling expression. How often check hostnames. For example, `cron(0/5 * * * ? *)` or `rate(5 minutes)`. | `string` | `\"cron(0/5 * * * ? *)\"` | no |\n| slack_hook_url | Slack incoming webhook URL. | `string` | | yes |\n| additional_slack_hook_urls | Additional Slack incoming webhook URLs. Just in case if you need to send events to multiple channels | `list(string)` | `[]` | no |\n| tags | Tags to apply on created resources. | `map(string)` | `{}` | no |\n\n## Outputs\n\n| Name | Description |\n|------|-------------|\n\n# Function \n\n## Configuration\n\nConfiguration is done via env variables\n\n* `HOOK_URLS` - Comma separated string of Slack web hook URLs where to send events. This is a mandatory parameter.\n* `HOSTNAMES` - Comma separated string with domain names. This is a mandatory parameter.\n* `HEALTH_CHECK_MATCHER` -  The response HTTP codes to use when checking for a healthy responses from a hostnames. You can specify multiple values (for example, \"200,202\" for HTTP(s)) or a range of values (for example, \"200-299\" or \"0-99\"). Default - `'200-399'`\n* `CERTIFICATE_EXPIRATION_NOTICE_DAYS` -  How many days before the expiration date of the certificate to send reminders. Default - `'7'`\n* `SCAN_COMMANDS` - Comma separated string with scan commands types witch will run against hostnames. Any type supported by SSLyze.\n\n## Deployment\n\n- Terraform module\n- [Docker Image](https://hub.docker.com/r/fivexl/terraform-aws-ssl-checker)\n\n# Example message\n\n![Example](doc/example.jpg)","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Ffivexl%2Fterraform-aws-ssl-checker","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Ffivexl%2Fterraform-aws-ssl-checker","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Ffivexl%2Fterraform-aws-ssl-checker/lists"}