{"id":19129406,"url":"https://github.com/launchbynttdata/tf-aws-module_collection-shared_pipeline","last_synced_at":"2026-05-16T06:34:06.297Z","repository":{"id":257499444,"uuid":"855811334","full_name":"launchbynttdata/tf-aws-module_collection-shared_pipeline","owner":"launchbynttdata","description":null,"archived":false,"fork":false,"pushed_at":"2025-03-13T00:32:17.000Z","size":14559,"stargazers_count":0,"open_issues_count":1,"forks_count":0,"subscribers_count":0,"default_branch":"main","last_synced_at":"2025-11-13T06:03:43.725Z","etag":null,"topics":["aws","infrastructure-as-code","platform-automation","reference","terraform"],"latest_commit_sha":null,"homepage":"","language":"HCL","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/launchbynttdata.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":"CODEOWNERS","security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2024-09-11T13:52:25.000Z","updated_at":"2025-01-20T15:14:17.000Z","dependencies_parsed_at":"2024-09-17T04:13:18.251Z","dependency_job_id":"ee61dece-c586-4c9e-a5fd-d272b0c6dfb1","html_url":"https://github.com/launchbynttdata/tf-aws-module_collection-shared_pipeline","commit_stats":null,"previous_names":["launchbynttdata/tf-aws-module_collection-shared_pipeline"],"tags_count":1,"template":false,"template_full_name":null,"purl":"pkg:github/launchbynttdata/tf-aws-module_collection-shared_pipeline","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/launchbynttdata%2Ftf-aws-module_collection-shared_pipeline","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/launchbynttdata%2Ftf-aws-module_collection-shared_pipeline/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/launchbynttdata%2Ftf-aws-module_collection-shared_pipeline/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/launchbynttdata%2Ftf-aws-module_collection-shared_pipeline/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/launchbynttdata","download_url":"https://codeload.github.com/launchbynttdata/tf-aws-module_collection-shared_pipeline/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/launchbynttdata%2Ftf-aws-module_collection-shared_pipeline/sbom","scorecard":null,"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":33092688,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-05-16T04:41:52.686Z","status":"ssl_error","status_checked_at":"2026-05-16T04:41:52.009Z","response_time":115,"last_error":"SSL_connect returned=1 errno=0 peeraddr=140.82.121.5:443 state=error: unexpected eof while reading","robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":false,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["aws","infrastructure-as-code","platform-automation","reference","terraform"],"created_at":"2024-11-09T06:07:24.896Z","updated_at":"2026-05-16T06:34:06.272Z","avatar_url":"https://github.com/launchbynttdata.png","language":"HCL","funding_links":[],"categories":[],"sub_categories":[],"readme":"# tf-aws-module_collection-shared_pipeline\n\n[![License](https://img.shields.io/badge/License-Apache_2.0-blue.svg)](https://opensource.org/licenses/Apache-2.0)\n[![License: CC BY-NC-ND 4.0](https://img.shields.io/badge/License-CC_BY--NC--ND_4.0-lightgrey.svg)](https://creativecommons.org/licenses/by-nc-nd/4.0/)\n\n## Overview\n\nThis Terraform module wraps functionality required to publish a shared pipeline together into a single deployable unit.\n\nThe following resources will be deployed in the shared model:\n- SecretsManager secret to share with GitHub Webhooks\n- Lambda Functions to serve as webhook targets and trigger CodeBuild\n- CodeBuild Trigger to initiate CodePipeline\n- CodePipeline to perform common actions across a set of repositories\n\n## Pre-Commit hooks\n\n[.pre-commit-config.yaml](.pre-commit-config.yaml) file defines certain `pre-commit` hooks that are relevant to terraform, golang and common linting tasks. There are no custom hooks added.\n\n`commitlint` hook enforces commit message in certain format. The commit contains the following structural elements, to communicate intent to the consumers of your commit messages:\n\n- **fix**: a commit of the type `fix` patches a bug in your codebase (this correlates with PATCH in Semantic Versioning).\n- **feat**: a commit of the type `feat` introduces a new feature to the codebase (this correlates with MINOR in Semantic Versioning).\n- **BREAKING CHANGE**: a commit that has a footer `BREAKING CHANGE:`, or appends a `!` after the type/scope, introduces a breaking API change (correlating with MAJOR in Semantic Versioning). A BREAKING CHANGE can be part of commits of any type.\nfooters other than BREAKING CHANGE: \u003cdescription\u003e may be provided and follow a convention similar to git trailer format.\n- **build**: a commit of the type `build` adds changes that affect the build system or external dependencies (example scopes: gulp, broccoli, npm)\n- **chore**: a commit of the type `chore` adds changes that don't modify src or test files\n- **ci**: a commit of the type `ci` adds changes to our CI configuration files and scripts (example scopes: Travis, Circle, BrowserStack, SauceLabs)\n- **docs**: a commit of the type `docs` adds documentation only changes\n- **perf**: a commit of the type `perf` adds code change that improves performance\n- **refactor**: a commit of the type `refactor` adds code change that neither fixes a bug nor adds a feature\n- **revert**: a commit of the type `revert` reverts a previous commit\n- **style**: a commit of the type `style` adds code changes that do not affect the meaning of the code (white-space, formatting, missing semi-colons, etc)\n- **test**: a commit of the type `test` adds missing tests or correcting existing tests\n\nBase configuration used for this project is [commitlint-config-conventional (based on the Angular convention)](https://github.com/conventional-changelog/commitlint/tree/master/@commitlint/config-conventional#type-enum)\n\nIf you are a developer using vscode, [this](https://marketplace.visualstudio.com/items?itemName=joshbolduc.commitlint) plugin may be helpful.\n\n`detect-secrets-hook` prevents new secrets from being introduced into the baseline. TODO: INSERT DOC LINK ABOUT HOOKS\n\nIn order for `pre-commit` hooks to work properly\n\n- You need to have the pre-commit package manager installed. [Here](https://pre-commit.com/#install) are the installation instructions.\n- `pre-commit` would install all the hooks when commit message is added by default except for `commitlint` hook. `commitlint` hook would need to be installed manually using the command below\n\n```\npre-commit install --hook-type commit-msg\n```\n\n## To test the resource group module locally\n\n1. For development/enhancements to this module locally, you'll need to install all of its components. This is controlled by the `configure` target in the project's [`Makefile`](./Makefile). Before you can run `configure`, familiarize yourself with the variables in the `Makefile` and ensure they're pointing to the right places.\n\n```\nmake configure\n```\n\nThis adds in several files and directories that are ignored by `git`. They expose many new Make targets.\n\n2. The first target you care about is `env`. This is the common interface for setting up environment variables. The values of the environment variables will be used to authenticate with cloud provider from local development workstation.\n\n`make configure` command will bring down `aws_env.sh` file on local workstation. Developer would need to modify this file, replace the environment variable values with relevant values.\n\nThese environment variables are used by `terratest` integration suit.\n\nThen run this make target to set the environment variables on developer workstation.\n\n```\nmake env\n```\n\n3. The first target you care about is `check`.\n\n**Pre-requisites**\nBefore running this target it is important to ensure that, developer has created files mentioned below on local workstation under root directory of git repository that contains code for primitives/segments. Note that these files are `aws` specific. If primitive/segment under development uses any other cloud provider than AWS, this section may not be relevant.\n\n- A file named `provider.tf` with contents below\n\n```\nprovider \"aws\" {\n  profile = \"\u003cprofile_name\u003e\"\n  region  = \"\u003cregion_name\u003e\"\n}\n```\n\n- A file named `terraform.tfvars` which contains key value pair of variables used.\n\nNote that since these files are added in `gitignore` they would not be checked in into primitive/segment's git repo.\n\nAfter creating these files, for running tests associated with the primitive/segment, run\n\n```\nmake check\n```\n\nIf `make check` target is successful, developer is good to commit the code to primitive/segment's git repo.\n\n`make check` target\n\n- runs `terraform commands` to `lint`,`validate` and `plan` terraform code.\n- runs `conftests`. `conftests` make sure `policy` checks are successful.\n- runs `terratest`. This is integration test suit.\n- runs `opa` tests\n\n# Know Issues\nCurrently, the `encrypt at transit` is not supported in terraform. There is an open issue for this logged with Hashicorp - https://github.com/hashicorp/terraform-provider-aws/pull/26987\n\n\u003c!-- BEGINNING OF PRE-COMMIT-TERRAFORM DOCS HOOK --\u003e\n## Requirements\n\n| Name | Version |\n|------|---------|\n| \u003ca name=\"requirement_terraform\"\u003e\u003c/a\u003e [terraform](#requirement\\_terraform) | ~\u003e 1.0 |\n| \u003ca name=\"requirement_aws\"\u003e\u003c/a\u003e [aws](#requirement\\_aws) | ~\u003e 5.0 |\n| \u003ca name=\"requirement_random\"\u003e\u003c/a\u003e [random](#requirement\\_random) | ~\u003e 3.6 |\n\n## Providers\n\n| Name | Version |\n|------|---------|\n| \u003ca name=\"provider_random\"\u003e\u003c/a\u003e [random](#provider\\_random) | 3.6.3 |\n\n## Modules\n\n| Name | Source | Version |\n|------|--------|---------|\n| \u003ca name=\"module_pipelines\"\u003e\u003c/a\u003e [pipelines](#module\\_pipelines) | terraform.registry.launch.nttdata.com/module_collection/codepipeline/aws | ~\u003e 1.0 |\n| \u003ca name=\"module_lambda_functions\"\u003e\u003c/a\u003e [lambda\\_functions](#module\\_lambda\\_functions) | terraform.registry.launch.nttdata.com/module_reference/bulk_lambda_function/aws | ~\u003e 1.1 |\n| \u003ca name=\"module_secretsmanager_secret\"\u003e\u003c/a\u003e [secretsmanager\\_secret](#module\\_secretsmanager\\_secret) | terraform.registry.launch.nttdata.com/module_collection/secretsmanager_secret/aws | ~\u003e 1.0 |\n\n## Resources\n\n| Name | Type |\n|------|------|\n| [random_password.lambda_shared_secret](https://registry.terraform.io/providers/hashicorp/random/latest/docs/resources/password) | resource |\n\n## Inputs\n\n| Name | Description | Type | Default | Required |\n|------|-------------|------|---------|:--------:|\n| \u003ca name=\"input_logical_product_family\"\u003e\u003c/a\u003e [logical\\_product\\_family](#input\\_logical\\_product\\_family) | (Required) Name of the product family for which the resource is created.\u003cbr\u003e    Example: org\\_name, department\\_name. | `string` | `\"launch\"` | no |\n| \u003ca name=\"input_logical_product_service\"\u003e\u003c/a\u003e [logical\\_product\\_service](#input\\_logical\\_product\\_service) | (Required) Name of the product service for which the resource is created.\u003cbr\u003e    For example, backend, frontend, middleware etc. | `string` | `\"backend\"` | no |\n| \u003ca name=\"input_class_env\"\u003e\u003c/a\u003e [class\\_env](#input\\_class\\_env) | (Required) Environment where resource is going to be deployed. For example. dev, qa, uat | `string` | `\"dev\"` | no |\n| \u003ca name=\"input_instance_env\"\u003e\u003c/a\u003e [instance\\_env](#input\\_instance\\_env) | Number that represents the instance of the environment. | `number` | `0` | no |\n| \u003ca name=\"input_instance_resource\"\u003e\u003c/a\u003e [instance\\_resource](#input\\_instance\\_resource) | Number that represents the instance of the resource. | `number` | `0` | no |\n| \u003ca name=\"input_region\"\u003e\u003c/a\u003e [region](#input\\_region) | AWS Region in which the infra needs to be provisioned | `string` | `\"us-east-2\"` | no |\n| \u003ca name=\"input_pipelines\"\u003e\u003c/a\u003e [pipelines](#input\\_pipelines) | List of all custom pipelines to create. | `any` | n/a | yes |\n| \u003ca name=\"input_additional_codebuild_projects\"\u003e\u003c/a\u003e [additional\\_codebuild\\_projects](#input\\_additional\\_codebuild\\_projects) | Codebuild to trigger other pipelines. Used by the lambdas to trigger the correct pipeline. | `any` | `null` | no |\n| \u003ca name=\"input_build_image\"\u003e\u003c/a\u003e [build\\_image](#input\\_build\\_image) | Docker image for build environment, e.g. 'aws/codebuild/standard:2.0' or 'aws/codebuild/eb-nodejs-6.10.0-amazonlinux-64:4.0.0'. For more info: http://docs.aws.amazon.com/codebuild/latest/userguide/build-env-ref.html | `string` | `\"aws/codebuild/amazonlinux2-x86_64-standard:4.0\"` | no |\n| \u003ca name=\"input_privileged_mode\"\u003e\u003c/a\u003e [privileged\\_mode](#input\\_privileged\\_mode) | (Optional) If set to true, enables running the Docker daemon inside a Docker container on the CodeBuild instance. Used when building Docker images | `bool` | `false` | no |\n| \u003ca name=\"input_build_image_pull_credentials_type\"\u003e\u003c/a\u003e [build\\_image\\_pull\\_credentials\\_type](#input\\_build\\_image\\_pull\\_credentials\\_type) | Type of credentials AWS CodeBuild uses to pull images in your build.Valid values: CODEBUILD, SERVICE\\_ROLE. When you use a cross-account or private registry image, you must use SERVICE\\_ROLE credentials. | `string` | `\"CODEBUILD\"` | no |\n| \u003ca name=\"input_environment_variables\"\u003e\u003c/a\u003e [environment\\_variables](#input\\_environment\\_variables) | A list of maps, that contain the keys 'name', 'value', and 'type' to be used as additional environment variables for the build. Valid types are 'PLAINTEXT', 'PARAMETER\\_STORE', or 'SECRETS\\_MANAGER' | \u003cpre\u003elist(object(\u003cbr\u003e    {\u003cbr\u003e      name  = string\u003cbr\u003e      value = string\u003cbr\u003e      type  = string\u003cbr\u003e    }\u003cbr\u003e  ))\u003c/pre\u003e | `[]` | no |\n| \u003ca name=\"input_bulk_lambda_functions\"\u003e\u003c/a\u003e [bulk\\_lambda\\_functions](#input\\_bulk\\_lambda\\_functions) | Map of lambda functions to create. | \u003cpre\u003emap(object({\u003cbr\u003e    name                    = string\u003cbr\u003e    description             = optional(string, \"\")\u003cbr\u003e    handler                 = optional(string, \"index.lambda_handler\")\u003cbr\u003e    runtime                 = optional(string, \"python3.9\")\u003cbr\u003e    architectures           = optional(list(string), [\"x86_64\"])\u003cbr\u003e    publish                 = optional(bool, true)\u003cbr\u003e    ephemeral_storage_size  = optional(number, 512)\u003cbr\u003e    environment_variables   = optional(map(string), {})\u003cbr\u003e    memory_size             = optional(number, 128)\u003cbr\u003e    timeout                 = optional(number, 3)\u003cbr\u003e    create_package          = optional(bool, false)\u003cbr\u003e    source_path             = optional(string)\u003cbr\u003e    zip_file_path           = optional(string)\u003cbr\u003e    store_on_s3             = optional(bool, false)\u003cbr\u003e    s3_existing_package     = optional(map(string))\u003cbr\u003e    s3_bucket               = optional(string)\u003cbr\u003e    s3_prefix               = optional(string, \"builds\")\u003cbr\u003e    layers                  = optional(list(string))\u003cbr\u003e    hash_extra              = optional(string)\u003cbr\u003e    ignore_source_code_hash = optional(bool, false)\u003cbr\u003e    authorization_type      = optional(string, \"NONE\")\u003cbr\u003e    cors = optional(object({\u003cbr\u003e      allow_credentials = optional(bool, false)\u003cbr\u003e      allow_headers     = optional(list(string), null)\u003cbr\u003e      allow_methods     = optional(list(string), null)\u003cbr\u003e      allow_origins     = optional(list(string), null)\u003cbr\u003e      expose_headers    = optional(list(string), null)\u003cbr\u003e      max_age           = optional(number, 0)\u003cbr\u003e    }), {})\u003cbr\u003e    create_lambda_function_url         = optional(bool, true)\u003cbr\u003e    invoke_mode                        = optional(string, \"BUFFERED\")\u003cbr\u003e    attach_policy_statements           = optional(bool, false)\u003cbr\u003e    policy_statements                  = optional(map(string), {})\u003cbr\u003e    attach_policy                      = optional(bool, false)\u003cbr\u003e    policy                             = optional(string)\u003cbr\u003e    attach_policies                    = optional(bool, false)\u003cbr\u003e    policies                           = optional(list(string), [])\u003cbr\u003e    attach_policy_json                 = optional(bool, false)\u003cbr\u003e    policy_json                        = optional(string)\u003cbr\u003e    attach_policy_jsons                = optional(bool, false)\u003cbr\u003e    policy_jsons                       = optional(list(string), [])\u003cbr\u003e    attach_dead_letter_policy          = optional(bool, false)\u003cbr\u003e    dead_letter_target_arn             = optional(string)\u003cbr\u003e    attach_network_policy              = optional(bool, false)\u003cbr\u003e    attach_async_event_policy          = optional(bool, false)\u003cbr\u003e    attach_tracing_policy              = optional(bool, false)\u003cbr\u003e    assume_role_policy_statements      = optional(map(string), {})\u003cbr\u003e    trusted_entities                   = optional(list(string), [])\u003cbr\u003e    attach_cloudwatch_logs_policy      = optional(bool, true)\u003cbr\u003e    attach_create_log_group_permission = optional(bool, true)\u003cbr\u003e    cloudwatch_logs_kms_key_id         = optional(string)\u003cbr\u003e    cloudwatch_logs_log_group_class    = optional(string, \"STANDARD\")\u003cbr\u003e    cloudwatch_logs_retention_in_days  = optional(number, 30)\u003cbr\u003e    cloudwatch_logs_skip_destroy       = optional(bool, false)\u003cbr\u003e    cloudwatch_logs_tags               = optional(map(string))\u003cbr\u003e    tracing_mode                       = optional(string, \"PassThrough\")\u003cbr\u003e    vpc_security_group_ids             = optional(list(string))\u003cbr\u003e    vpc_subnet_ids                     = optional(list(string))\u003cbr\u003e    lambda_at_edge                     = optional(bool, false)\u003cbr\u003e    lambda_at_edge_logs_all_regions    = optional(bool, true)\u003cbr\u003e    tags                               = optional(map(string))\u003cbr\u003e    create                             = optional(bool, true)\u003cbr\u003e  }))\u003c/pre\u003e | n/a | yes |\n| \u003ca name=\"input_secret_name\"\u003e\u003c/a\u003e [secret\\_name](#input\\_secret\\_name) | The name of the SecretsManager secret to use with the Lambda functions. | `string` | n/a | yes |\n| \u003ca name=\"input_tags\"\u003e\u003c/a\u003e [tags](#input\\_tags) | A map of custom tags to be associated with the resources | `map(string)` | `{}` | no |\n\n## Outputs\n\n| Name | Description |\n|------|-------------|\n| \u003ca name=\"output_pipeline_ids\"\u003e\u003c/a\u003e [pipeline\\_ids](#output\\_pipeline\\_ids) | n/a |\n| \u003ca name=\"output_pipeline_arns\"\u003e\u003c/a\u003e [pipeline\\_arns](#output\\_pipeline\\_arns) | n/a |\n| \u003ca name=\"output_additional_codebuild_projects\"\u003e\u003c/a\u003e [additional\\_codebuild\\_projects](#output\\_additional\\_codebuild\\_projects) | n/a |\n| \u003ca name=\"output_lambda_function_arns\"\u003e\u003c/a\u003e [lambda\\_function\\_arns](#output\\_lambda\\_function\\_arns) | n/a |\n| \u003ca name=\"output_lambda_function_names\"\u003e\u003c/a\u003e [lambda\\_function\\_names](#output\\_lambda\\_function\\_names) | n/a |\n| \u003ca name=\"output_lambda_cloudwatch_log_group_arns\"\u003e\u003c/a\u003e [lambda\\_cloudwatch\\_log\\_group\\_arns](#output\\_lambda\\_cloudwatch\\_log\\_group\\_arns) | n/a |\n| \u003ca name=\"output_lambda_cloudwatch_log_group_names\"\u003e\u003c/a\u003e [lambda\\_cloudwatch\\_log\\_group\\_names](#output\\_lambda\\_cloudwatch\\_log\\_group\\_names) | n/a |\n| \u003ca name=\"output_lambda_function_urls\"\u003e\u003c/a\u003e [lambda\\_function\\_urls](#output\\_lambda\\_function\\_urls) | n/a |\n| \u003ca name=\"output_lambda_role_arns\"\u003e\u003c/a\u003e [lambda\\_role\\_arns](#output\\_lambda\\_role\\_arns) | n/a |\n| \u003ca name=\"output_lambda_role_names\"\u003e\u003c/a\u003e [lambda\\_role\\_names](#output\\_lambda\\_role\\_names) | n/a |\n| \u003ca name=\"output_secretsmanager_secret_id\"\u003e\u003c/a\u003e [secretsmanager\\_secret\\_id](#output\\_secretsmanager\\_secret\\_id) | n/a |\n| \u003ca name=\"output_secretsmanager_secret_arn\"\u003e\u003c/a\u003e [secretsmanager\\_secret\\_arn](#output\\_secretsmanager\\_secret\\_arn) | n/a |\n\u003c!-- END OF PRE-COMMIT-TERRAFORM DOCS HOOK --\u003e\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Flaunchbynttdata%2Ftf-aws-module_collection-shared_pipeline","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Flaunchbynttdata%2Ftf-aws-module_collection-shared_pipeline","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Flaunchbynttdata%2Ftf-aws-module_collection-shared_pipeline/lists"}