{"id":18624758,"url":"https://github.com/opszero/terraform-aws-documentdb","last_synced_at":"2026-01-24T12:47:37.158Z","repository":{"id":244739200,"uuid":"814469831","full_name":"opszero/terraform-aws-documentdb","owner":"opszero","description":null,"archived":false,"fork":false,"pushed_at":"2025-11-24T19:29:37.000Z","size":91,"stargazers_count":0,"open_issues_count":0,"forks_count":0,"subscribers_count":2,"default_branch":"main","last_synced_at":"2025-11-28T07:33:23.724Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":null,"language":"HCL","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"other","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/opszero.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":".github/FUNDING.yml","license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":"SUPPORT","governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null},"funding":{"github":["abhiyerra"],"custom":["https://www.opszero.com"]}},"created_at":"2024-06-13T04:44:50.000Z","updated_at":"2025-11-24T19:29:40.000Z","dependencies_parsed_at":"2024-06-17T05:47:47.895Z","dependency_job_id":"f2afdeef-0764-439b-864d-9e5d96769929","html_url":"https://github.com/opszero/terraform-aws-documentdb","commit_stats":null,"previous_names":["opszero/terraform-aws-documentdb"],"tags_count":1,"template":false,"template_full_name":"opszero/terraform-template","purl":"pkg:github/opszero/terraform-aws-documentdb","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/opszero%2Fterraform-aws-documentdb","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/opszero%2Fterraform-aws-documentdb/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/opszero%2Fterraform-aws-documentdb/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/opszero%2Fterraform-aws-documentdb/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/opszero","download_url":"https://codeload.github.com/opszero/terraform-aws-documentdb/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/opszero%2Fterraform-aws-documentdb/sbom","scorecard":null,"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":28727923,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-01-24T10:24:43.181Z","status":"ssl_error","status_checked_at":"2026-01-24T10:24:36.112Z","response_time":89,"last_error":"SSL_read: unexpected eof while reading","robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":false,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":[],"created_at":"2024-11-07T04:30:46.767Z","updated_at":"2026-01-24T12:47:37.146Z","avatar_url":"https://github.com/opszero.png","language":"HCL","funding_links":["https://github.com/sponsors/abhiyerra","https://www.opszero.com"],"categories":[],"sub_categories":[],"readme":"# Terraform-aws-documentdb\n\n# Terraform AWS Cloud DocumentDB Module\n\n## Table of Contents\n- [Introduction](#introduction)\n- [Usage](#usage)\n- [Examples](#Examples)\n- [Author](#Author)\n- [License](#license)\n- [Inputs](#inputs)\n- [Outputs](#outputs)\n\n## Introduction\nThis Terraform module creates an AWS documentdb along with additional configuration options.\n## Usage\nTo use this module, you can include it in your Terraform configuration. Here's an example of how to use it:\n\n## Examples\n\n## Example: documentdb-secured\n\n```hcl\nmodule \"documentdb-secured\" {\n  source            = \"git::https://github.com/opszero/terraform-aws-documentdb.git.git?ref=v1.0.1\"\n  name              = \"documentdb\"\n  vpc_id            = module.vpc.vpc_id\n  ssh_allowed_ip    = [\"0.0.0.0/0\"]\n  ssh_allowed_ports = [27017]\n\n  subnet_list             = module.subnet.public_subnet_id\n  skip_final_snapshot     = var.skip_final_snapshot\n  storage_encrypted       = var.storage_encrypted\n  instance_class          = var.instance_class\n  cluster_family          = \"docdb5.0\"\n  cluster_size            = var.cluster_size\n  deletion_protection     = true\n  preferred_backup_window = \"07:00-07:30\"\n  ca_cert_identifier      = \"rds-ca-rsa2048-g1\"\n  parameters = [\n    {\n      apply_method = \"immediate\"\n      name         = \"tls\"\n      value        = \"enabled\"\n    }\n  ]\n}\n```\n\n## Example: documentdb-simple\n\n```hcl\nmodule \"documentdb-simple\" {\n  source            = \"git::https://github.com/opszero/terraform-aws-documentdb.git.git?ref=v1.0.1\"\n  name              = \"dev\"\n\n  vpc_id            = module.vpc.vpc_id\n  ssh_allowed_ip    = [\"0.0.0.0/0\"]\n  ssh_allowed_ports = [27017]\n\n  subnet_list         = module.subnet.public_subnet_id\n  master_username     = \"test\"\n  master_password     = var.master_password\n  instance_class      = var.instance_class\n  cluster_size        = var.cluster_size\n  deletion_protection = false\n}\n```\n\n## Examples\nFor detailed examples on how to use this module, please refer to the [Examples](https://github.com/opszero/terraform-aws-documentdb/tree/main/examples) directory within this repository.\n\n## Author\nYour Name Replace **MIT** and **opsZero** with the appropriate license and your information. Feel free to expand this README with additional details or usage instructions as needed for your specific use case.\n\n## License\nThis project is licensed under the **MIT** License - see the [LICENSE](https://github.com/opszero/terraform-aws-documentdb/blob/main/LICENSE) file for details.\n\n\u003c!-- BEGIN_TF_DOCS --\u003e\n\n## Providers\n\n| Name | Version |\n|------|---------|\n| \u003ca name=\"provider_aws\"\u003e\u003c/a\u003e [aws](#provider\\_aws) | \u003e= 6.14.0 |\n| \u003ca name=\"provider_random\"\u003e\u003c/a\u003e [random](#provider\\_random) | \u003e= 3.7.2 |\n## Inputs\n\n| Name | Description | Type | Default | Required |\n|------|-------------|------|---------|:--------:|\n| \u003ca name=\"input_allowed_ip\"\u003e\u003c/a\u003e [allowed\\_ip](#input\\_allowed\\_ip) | List of allowed ip. | `list(any)` | \u003cpre\u003e[\u003cbr/\u003e  \"0.0.0.0/0\"\u003cbr/\u003e]\u003c/pre\u003e | no |\n| \u003ca name=\"input_allowed_ports\"\u003e\u003c/a\u003e [allowed\\_ports](#input\\_allowed\\_ports) | List of allowed ingress ports | `list(any)` | \u003cpre\u003e[\u003cbr/\u003e  80,\u003cbr/\u003e  443\u003cbr/\u003e]\u003c/pre\u003e | no |\n| \u003ca name=\"input_apply_immediately\"\u003e\u003c/a\u003e [apply\\_immediately](#input\\_apply\\_immediately) | Specifies whether any cluster modifications are applied immediately, or during the next maintenance window. | `bool` | `true` | no |\n| \u003ca name=\"input_ca_cert_identifier\"\u003e\u003c/a\u003e [ca\\_cert\\_identifier](#input\\_ca\\_cert\\_identifier) | The identifier of the certificate authority (CA) certificate for the DB instance. | `string` | `null` | no |\n| \u003ca name=\"input_cluster_family\"\u003e\u003c/a\u003e [cluster\\_family](#input\\_cluster\\_family) | The family of the DocumentDB cluster parameter group. For more details, see https://docs.aws.amazon.com/documentdb/latest/developerguide/db-cluster-parameter-group-create.html . | `string` | `\"docdb5.0\"` | no |\n| \u003ca name=\"input_cluster_size\"\u003e\u003c/a\u003e [cluster\\_size](#input\\_cluster\\_size) | Number of DB instances to create in the cluster | `string` | `\"2\"` | no |\n| \u003ca name=\"input_deletion_protection\"\u003e\u003c/a\u003e [deletion\\_protection](#input\\_deletion\\_protection) | (optional) describe your variable | `bool` | `null` | no |\n| \u003ca name=\"input_egress_ipv4_cidr_block\"\u003e\u003c/a\u003e [egress\\_ipv4\\_cidr\\_block](#input\\_egress\\_ipv4\\_cidr\\_block) | List of CIDR blocks. Cannot be specified with source\\_security\\_group\\_id or self. | `list(string)` | \u003cpre\u003e[\u003cbr/\u003e  \"0.0.0.0/0\"\u003cbr/\u003e]\u003c/pre\u003e | no |\n| \u003ca name=\"input_egress_ipv4_from_port\"\u003e\u003c/a\u003e [egress\\_ipv4\\_from\\_port](#input\\_egress\\_ipv4\\_from\\_port) | Egress Start port (or ICMP type number if protocol is icmp or icmpv6). | `number` | `0` | no |\n| \u003ca name=\"input_egress_ipv4_protocol\"\u003e\u003c/a\u003e [egress\\_ipv4\\_protocol](#input\\_egress\\_ipv4\\_protocol) | Protocol. If not icmp, icmpv6, tcp, udp, or all use the protocol number | `string` | `\"-1\"` | no |\n| \u003ca name=\"input_egress_ipv4_to_port\"\u003e\u003c/a\u003e [egress\\_ipv4\\_to\\_port](#input\\_egress\\_ipv4\\_to\\_port) | Egress end port (or ICMP code if protocol is icmp). | `number` | `65535` | no |\n| \u003ca name=\"input_egress_ipv6_cidr_block\"\u003e\u003c/a\u003e [egress\\_ipv6\\_cidr\\_block](#input\\_egress\\_ipv6\\_cidr\\_block) | List of CIDR blocks. Cannot be specified with source\\_security\\_group\\_id or self. | `list(string)` | \u003cpre\u003e[\u003cbr/\u003e  \"::/0\"\u003cbr/\u003e]\u003c/pre\u003e | no |\n| \u003ca name=\"input_egress_ipv6_from_port\"\u003e\u003c/a\u003e [egress\\_ipv6\\_from\\_port](#input\\_egress\\_ipv6\\_from\\_port) | Egress Start port (or ICMP type number if protocol is icmp or icmpv6). | `number` | `0` | no |\n| \u003ca name=\"input_egress_ipv6_protocol\"\u003e\u003c/a\u003e [egress\\_ipv6\\_protocol](#input\\_egress\\_ipv6\\_protocol) | Protocol. If not icmp, icmpv6, tcp, udp, or all use the protocol number | `string` | `\"-1\"` | no |\n| \u003ca name=\"input_egress_ipv6_to_port\"\u003e\u003c/a\u003e [egress\\_ipv6\\_to\\_port](#input\\_egress\\_ipv6\\_to\\_port) | Egress end port (or ICMP code if protocol is icmp). | `number` | `65535` | no |\n| \u003ca name=\"input_egress_rule\"\u003e\u003c/a\u003e [egress\\_rule](#input\\_egress\\_rule) | Enable to create egress rule | `bool` | `true` | no |\n| \u003ca name=\"input_enable_security_group\"\u003e\u003c/a\u003e [enable\\_security\\_group](#input\\_enable\\_security\\_group) | Enable default Security Group with only Egress traffic allowed. | `bool` | `true` | no |\n| \u003ca name=\"input_enabled_cloudwatch_logs_exports\"\u003e\u003c/a\u003e [enabled\\_cloudwatch\\_logs\\_exports](#input\\_enabled\\_cloudwatch\\_logs\\_exports) | List of log types to export to cloudwatch. The following log types are supported: audit, error, general, slowquery. | `list(string)` | \u003cpre\u003e[\u003cbr/\u003e  \"audit\",\u003cbr/\u003e  \"profiler\"\u003cbr/\u003e]\u003c/pre\u003e | no |\n| \u003ca name=\"input_engine\"\u003e\u003c/a\u003e [engine](#input\\_engine) | The name of the database engine to be used for this DB cluster. Defaults to `docdb`. Valid values: `docdb`. | `string` | `\"docdb\"` | no |\n| \u003ca name=\"input_engine_version\"\u003e\u003c/a\u003e [engine\\_version](#input\\_engine\\_version) | The version number of the database engine to use. | `string` | `\"\"` | no |\n| \u003ca name=\"input_instance_class\"\u003e\u003c/a\u003e [instance\\_class](#input\\_instance\\_class) | The instance class to use. For more details, see https://docs.aws.amazon.com/documentdb/latest/developerguide/db-instance-classes.html#db-instance-class-specs . | `string` | `\"db.t3.medium\"` | no |\n| \u003ca name=\"input_is_external\"\u003e\u003c/a\u003e [is\\_external](#input\\_is\\_external) | enable to udated existing security Group | `bool` | `false` | no |\n| \u003ca name=\"input_master_password\"\u003e\u003c/a\u003e [master\\_password](#input\\_master\\_password) | (Required unless a snapshot\\_identifier is provided) Password for the master DB user. Note that this may show up in logs, and it will be stored in the state file. | `string` | `\"\"` | no |\n| \u003ca name=\"input_master_username\"\u003e\u003c/a\u003e [master\\_username](#input\\_master\\_username) | (Required unless a snapshot\\_identifier is provided) Username for the master DB user. | `string` | `\"root\"` | no |\n| \u003ca name=\"input_name\"\u003e\u003c/a\u003e [name](#input\\_name) | Name of the database. | `string` | n/a | yes |\n| \u003ca name=\"input_parameters\"\u003e\u003c/a\u003e [parameters](#input\\_parameters) | A list of DocumentDB parameters to apply. Setting parameters to system default values may show a difference on imported resources. | \u003cpre\u003elist(object({\u003cbr/\u003e    apply_method = optional(string)\u003cbr/\u003e    name         = string\u003cbr/\u003e    value        = string\u003cbr/\u003e  }))\u003c/pre\u003e | `[]` | no |\n| \u003ca name=\"input_preferred_backup_window\"\u003e\u003c/a\u003e [preferred\\_backup\\_window](#input\\_preferred\\_backup\\_window) | Daily time range during which the backups happen. | `string` | `\"07:00-09:00\"` | no |\n| \u003ca name=\"input_protocol\"\u003e\u003c/a\u003e [protocol](#input\\_protocol) | The protocol. If not icmp, tcp, udp, or all use the. | `string` | `\"tcp\"` | no |\n| \u003ca name=\"input_retention_period\"\u003e\u003c/a\u003e [retention\\_period](#input\\_retention\\_period) | Number of days to retain backups for. | `string` | `\"7\"` | no |\n| \u003ca name=\"input_sg_description\"\u003e\u003c/a\u003e [sg\\_description](#input\\_sg\\_description) | The security group description. | `string` | `\"Instance default security group (only egress access is allowed).\"` | no |\n| \u003ca name=\"input_sg_egress_description\"\u003e\u003c/a\u003e [sg\\_egress\\_description](#input\\_sg\\_egress\\_description) | Description of the egress and ingress rule | `string` | `\"Description of the rule.\"` | no |\n| \u003ca name=\"input_sg_egress_ipv6_description\"\u003e\u003c/a\u003e [sg\\_egress\\_ipv6\\_description](#input\\_sg\\_egress\\_ipv6\\_description) | Description of the egress\\_ipv6 rule | `string` | `\"Description of the rule.\"` | no |\n| \u003ca name=\"input_sg_ids\"\u003e\u003c/a\u003e [sg\\_ids](#input\\_sg\\_ids) | of the security group id. | `list(any)` | `[]` | no |\n| \u003ca name=\"input_sg_ingress_description\"\u003e\u003c/a\u003e [sg\\_ingress\\_description](#input\\_sg\\_ingress\\_description) | Description of the ingress rule | `string` | `\"Description of the ingress rule use elasticache.\"` | no |\n| \u003ca name=\"input_skip_final_snapshot\"\u003e\u003c/a\u003e [skip\\_final\\_snapshot](#input\\_skip\\_final\\_snapshot) | Determines whether a final DB snapshot is created before the DB cluster is deleted. | `bool` | `false` | no |\n| \u003ca name=\"input_snapshot_identifier\"\u003e\u003c/a\u003e [snapshot\\_identifier](#input\\_snapshot\\_identifier) | Specifies whether or not to create this cluster from a snapshot. You can use either the name or ARN when specifying a DB cluster snapshot, or the ARN when specifying a DB snapshot. | `string` | `\"\"` | no |\n| \u003ca name=\"input_ssh_allowed_ip\"\u003e\u003c/a\u003e [ssh\\_allowed\\_ip](#input\\_ssh\\_allowed\\_ip) | List of allowed ip. | `list(any)` | `[]` | no |\n| \u003ca name=\"input_ssh_allowed_ports\"\u003e\u003c/a\u003e [ssh\\_allowed\\_ports](#input\\_ssh\\_allowed\\_ports) | List of allowed ingress ports | `list(any)` | `[]` | no |\n| \u003ca name=\"input_ssh_protocol\"\u003e\u003c/a\u003e [ssh\\_protocol](#input\\_ssh\\_protocol) | The protocol. If not icmp, tcp, udp, or all use the. | `string` | `\"tcp\"` | no |\n| \u003ca name=\"input_ssh_sg_ingress_description\"\u003e\u003c/a\u003e [ssh\\_sg\\_ingress\\_description](#input\\_ssh\\_sg\\_ingress\\_description) | Description of the ingress rule | `string` | `\"Description of the ingress rule use elasticache.\"` | no |\n| \u003ca name=\"input_storage_encrypted\"\u003e\u003c/a\u003e [storage\\_encrypted](#input\\_storage\\_encrypted) | Specifies whether the DB cluster is encrypted. | `bool` | `true` | no |\n| \u003ca name=\"input_subnet_list\"\u003e\u003c/a\u003e [subnet\\_list](#input\\_subnet\\_list) | List of subnet IDs database instances should deploy into. | `list(string)` | \u003cpre\u003e[\u003cbr/\u003e  \"\"\u003cbr/\u003e]\u003c/pre\u003e | no |\n| \u003ca name=\"input_tags\"\u003e\u003c/a\u003e [tags](#input\\_tags) | Additional tags (e.g. map(`BusinessUnit`,`XYZ`). | `map(string)` | `{}` | no |\n| \u003ca name=\"input_vpc_id\"\u003e\u003c/a\u003e [vpc\\_id](#input\\_vpc\\_id) | The ID of the VPC that the instance security group belongs to. | `string` | `\"\"` | no |\n## Resources\n\n| Name | Type |\n|------|------|\n| [aws_docdb_cluster.this](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/docdb_cluster) | resource |\n| [aws_docdb_cluster_instance.this](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/docdb_cluster_instance) | resource |\n| [aws_docdb_cluster_parameter_group.this](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/docdb_cluster_parameter_group) | resource |\n| [aws_docdb_subnet_group.this](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/docdb_subnet_group) | resource |\n| [aws_security_group.default](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/security_group) | resource |\n| [aws_security_group_rule.egress_ipv4](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/security_group_rule) | resource |\n| [aws_security_group_rule.egress_ipv6](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/security_group_rule) | resource |\n| [aws_security_group_rule.ingress](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/security_group_rule) | resource |\n| [aws_security_group_rule.ssh_ingress](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/security_group_rule) | resource |\n| [random_password.master](https://registry.terraform.io/providers/hashicorp/random/latest/docs/resources/password) | resource |\n## Outputs\n\n| Name | Description |\n|------|-------------|\n| \u003ca name=\"output_arn\"\u003e\u003c/a\u003e [arn](#output\\_arn) | Amazon Resource Name (ARN) of the cluster. |\n| \u003ca name=\"output_cluster_name\"\u003e\u003c/a\u003e [cluster\\_name](#output\\_cluster\\_name) | Cluster Identifier. |\n| \u003ca name=\"output_master_password\"\u003e\u003c/a\u003e [master\\_password](#output\\_master\\_password) | password for the master DB user. |\n| \u003ca name=\"output_master_username\"\u003e\u003c/a\u003e [master\\_username](#output\\_master\\_username) | Username for the master DB user. |\n| \u003ca name=\"output_reader_endpoint\"\u003e\u003c/a\u003e [reader\\_endpoint](#output\\_reader\\_endpoint) | A read-only endpoint of the DocumentDB cluster, automatically load-balanced across replicas. |\n| \u003ca name=\"output_writer_endpoint\"\u003e\u003c/a\u003e [writer\\_endpoint](#output\\_writer\\_endpoint) | Endpoint of the DocumentDB cluster. |\n# 🚀 Built by opsZero!\n\n\u003ca href=\"https://opszero.com\"\u003e\u003cimg src=\"https://opszero.com/img/common/opsZero-Logo-Large.webp\" width=\"300px\"/\u003e\u003c/a\u003e\n\n[opsZero](https://opszero.com) provides software and consulting for Cloud + AI. With our decade plus of experience scaling some of the world’s most innovative companies we have developed deep expertise in Kubernetes, DevOps, FinOps, and Compliance.\n\nOur software and consulting solutions enable organizations to:\n\n- migrate workloads to the Cloud\n- setup compliance frameworks including SOC2, HIPAA, PCI-DSS, ITAR, FedRamp, CMMC, and more.\n- FinOps solutions to reduce the cost of running Cloud workloads\n- Kubernetes optimized for web scale and AI workloads\n- finding underutilized Cloud resources\n- setting up custom AI training and delivery\n- building data integrations and scrapers\n- modernizing onto modern ARM based processors\n\nWe do this with a high-touch support model where you:\n\n- Get access to us on Slack, Microsoft Teams or Email\n- Get 24/7 coverage of your infrastructure\n- Get an accelerated migration to Kubernetes\n\nPlease [schedule a call](https://calendly.com/opszero-llc/discovery) if you need support.\n\n\u003cbr/\u003e\u003cbr/\u003e\n\n\u003cdiv style=\"display: block\"\u003e\n  \u003cimg src=\"https://opszero.com/img/common/aws-advanced.png\" alt=\"AWS Advanced Tier\" width=\"150px\" \u003e\n  \u003cimg src=\"https://opszero.com/img/common/aws-devops-competency.png\" alt=\"AWS DevOps Competency\" width=\"150px\" \u003e\n  \u003cimg src=\"https://opszero.com/img/common/aws-eks.png\" alt=\"AWS EKS Delivery\" width=\"150px\" \u003e\n  \u003cimg src=\"https://opszero.com/img/common/aws-public-sector.png\" alt=\"AWS Public Sector\" width=\"150px\" \u003e\n\u003c/div\u003e\n\u003c!-- END_TF_DOCS --\u003e","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fopszero%2Fterraform-aws-documentdb","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fopszero%2Fterraform-aws-documentdb","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fopszero%2Fterraform-aws-documentdb/lists"}