Ecosyste.ms: Awesome

An open API service indexing awesome lists of open source software.
Awesome Lists | Featured Topics | Projects
https://github.com/cloudposse-archives/terraform-aws-teleport-storage

Gravitational Teleport backing services (S3, DynamoDB)
https://github.com/cloudposse-archives/terraform-aws-teleport-storage
aws dynamodb gravitational s3 sso teleport terraform-module
Last synced: 3 months ago
JSON representation
Gravitational Teleport backing services (S3, DynamoDB)
Host: GitHub
URL: https://github.com/cloudposse-archives/terraform-aws-teleport-storage
Owner: cloudposse-archives
License: apache-2.0
Created: 2018-03-06T04:33:17.000Z (almost 7 years ago)
Default Branch: main
Last Pushed: 2023-09-20T11:43:26.000Z (over 1 year ago)
Last Synced: 2023-12-18T08:02:03.451Z (about 1 year ago)
Topics: aws, dynamodb, gravitational, s3, sso, teleport, terraform-module
Language: HCL
Homepage: https://cloudposse.com/accelerate
Size: 110 KB
Stars: 12
Watchers: 19
Forks: 6
Open Issues: 8
Metadata Files:
- Readme: README.md
- License: LICENSE
- Codeowners: .github/CODEOWNERS
Awesome Lists containing this project

README

        

# terraform-aws-teleport-storage [![Codefresh Build Status](https://g.codefresh.io/api/badges/pipeline/cloudposse/terraform-modules%2Fterraform-aws-teleport-storage?type=cf-1)](https://g.codefresh.io/public/accounts/cloudposse/pipelines/5d04407b1fc622c0cf6d3df8) [![Latest Release](https://img.shields.io/github/release/cloudposse/terraform-aws-teleport-storage.svg)](https://github.com/cloudposse/terraform-aws-teleport-storage/releases/latest) [![Slack Community](https://slack.cloudposse.com/badge.svg)](https://slack.cloudposse.com)

[![README Header][readme_header_img]][readme_header_link]

[![Cloud Posse][logo]](https://cpco.io/homepage)

This Terraform module provisions:

  * An S3 bucket for session logs in Gravitational [Teleport](https://gravitational.com/teleport)

  * 2 DynamoDB tables to use as storage backend in Teleport

## Features

Using DynamoDB as a storage backend allows highly available deployments of Teleport Auth services.

Using S3 for Teleport session storage has many advantages:

* Encryption at rest

* Versioned objects

* Lifecycle Support to expunge old sessions (e.g. after 2 years)

* Extreme Availability & Durability

* Zero Maintenance

* Glacier

* Cross Region Replication

* S3 Bucket could be owned by tamper-proof AWS Audit Account

* Easily prevent deletions

* Audit Trails, Access Logs via Cloud Trails

---

This project is part of our comprehensive ["SweetOps"](https://cpco.io/sweetops) approach towards DevOps.

[][share_email]

[][share_googleplus]

[][share_facebook]

[][share_reddit]

[][share_linkedin]

[][share_twitter]

[![Terraform Open Source Modules](https://docs.cloudposse.com/images/terraform-open-source-modules.svg)][terraform_modules]

It's 100% Open Source and licensed under the [APACHE2](LICENSE).

We literally have [*hundreds of terraform modules*][terraform_modules] that are Open Source and well-maintained. Check them out!

## Security & Compliance [](https://bridgecrew.io/)

Security scanning is graciously provided by Bridgecrew. Bridgecrew is the leading fully hosted, cloud-native solution providing continuous Terraform security and compliance.

| Benchmark | Description |

|--------|---------------|

| [![Infrastructure Security](https://www.bridgecrew.cloud/badges/github/cloudposse/terraform-aws-teleport-storage/general)](https://www.bridgecrew.cloud/link/badge?vcs=github&fullRepo=cloudposse%2Fterraform-aws-teleport-storage&benchmark=INFRASTRUCTURE+SECURITY) | Infrastructure Security Compliance |

| [![CIS KUBERNETES](https://www.bridgecrew.cloud/badges/github/cloudposse/terraform-aws-teleport-storage/cis_kubernetes)](https://www.bridgecrew.cloud/link/badge?vcs=github&fullRepo=cloudposse%2Fterraform-aws-teleport-storage&benchmark=CIS+KUBERNETES+V1.5) | Center for Internet Security, KUBERNETES Compliance |

| [![CIS AWS](https://www.bridgecrew.cloud/badges/github/cloudposse/terraform-aws-teleport-storage/cis_aws)](https://www.bridgecrew.cloud/link/badge?vcs=github&fullRepo=cloudposse%2Fterraform-aws-teleport-storage&benchmark=CIS+AWS+V1.2) | Center for Internet Security, AWS Compliance |

| [![CIS AZURE](https://www.bridgecrew.cloud/badges/github/cloudposse/terraform-aws-teleport-storage/cis_azure)](https://www.bridgecrew.cloud/link/badge?vcs=github&fullRepo=cloudposse%2Fterraform-aws-teleport-storage&benchmark=CIS+AZURE+V1.1) | Center for Internet Security, AZURE Compliance |

| [![PCI-DSS](https://www.bridgecrew.cloud/badges/github/cloudposse/terraform-aws-teleport-storage/pci)](https://www.bridgecrew.cloud/link/badge?vcs=github&fullRepo=cloudposse%2Fterraform-aws-teleport-storage&benchmark=PCI-DSS+V3.2) | Payment Card Industry Data Security Standards Compliance |

| [![NIST-800-53](https://www.bridgecrew.cloud/badges/github/cloudposse/terraform-aws-teleport-storage/nist)](https://www.bridgecrew.cloud/link/badge?vcs=github&fullRepo=cloudposse%2Fterraform-aws-teleport-storage&benchmark=NIST-800-53) | National Institute of Standards and Technology Compliance |

| [![ISO27001](https://www.bridgecrew.cloud/badges/github/cloudposse/terraform-aws-teleport-storage/iso)](https://www.bridgecrew.cloud/link/badge?vcs=github&fullRepo=cloudposse%2Fterraform-aws-teleport-storage&benchmark=ISO27001) | Information Security Management System, ISO/IEC 27001 Compliance |

| [![SOC2](https://www.bridgecrew.cloud/badges/github/cloudposse/terraform-aws-teleport-storage/soc2)](https://www.bridgecrew.cloud/link/badge?vcs=github&fullRepo=cloudposse%2Fterraform-aws-teleport-storage&benchmark=SOC2)| Service Organization Control 2 Compliance |

| [![CIS GCP](https://www.bridgecrew.cloud/badges/github/cloudposse/terraform-aws-teleport-storage/cis_gcp)](https://www.bridgecrew.cloud/link/badge?vcs=github&fullRepo=cloudposse%2Fterraform-aws-teleport-storage&benchmark=CIS+GCP+V1.1) | Center for Internet Security, GCP Compliance |

| [![HIPAA](https://www.bridgecrew.cloud/badges/github/cloudposse/terraform-aws-teleport-storage/hipaa)](https://www.bridgecrew.cloud/link/badge?vcs=github&fullRepo=cloudposse%2Fterraform-aws-teleport-storage&benchmark=HIPAA) | Health Insurance Portability and Accountability Compliance |

## Makefile Targets

```text

Available targets:

  help                                Help screen

  help/all                            Display help for all targets

  help/short                          This help short screen

  lint                                Lint terraform code

```

## Requirements

No requirements.

## Providers

| Name | Version |

|------|---------|

|  [aws](#provider\_aws) | n/a |

## Modules

| Name | Source | Version |

|------|--------|---------|

|  [dynamodb\_audit\_table](#module\_dynamodb\_audit\_table) | git::https://github.com/cloudposse/terraform-aws-dynamodb.git | tags/0.7.0 |

|  [dynamodb\_state\_table](#module\_dynamodb\_state\_table) | git::https://github.com/cloudposse/terraform-aws-dynamodb.git | tags/0.7.0 |

|  [label\_dynamodb](#module\_label\_dynamodb) | git::https://github.com/cloudposse/terraform-null-label.git | tags/0.3.3 |

|  [label\_s3](#module\_label\_s3) | git::https://github.com/cloudposse/terraform-null-label.git | tags/0.3.3 |

|  [s3\_bucket](#module\_s3\_bucket) | git::https://github.com/cloudposse/terraform-aws-s3-log-storage.git | tags/0.1.3 |

## Resources

| Name | Type |

|------|------|

| [aws_iam_instance_profile.dynamodb](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/iam_instance_profile) | resource |

| [aws_iam_instance_profile.s3](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/iam_instance_profile) | resource |

| [aws_iam_policy.dynamodb](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/iam_policy) | resource |

| [aws_iam_policy.s3](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/iam_policy) | resource |

| [aws_iam_role.dynamodb](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/iam_role) | resource |

| [aws_iam_role.s3](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/iam_role) | resource |

| [aws_iam_role_policy_attachment.dynamodb](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/iam_role_policy_attachment) | resource |

| [aws_iam_role_policy_attachment.s3](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/iam_role_policy_attachment) | resource |

| [aws_iam_policy_document.assume_role](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/data-sources/iam_policy_document) | data source |

| [aws_iam_policy_document.dynamodb](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/data-sources/iam_policy_document) | data source |

| [aws_iam_policy_document.s3](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/data-sources/iam_policy_document) | data source |

## Inputs

| Name | Description | Type | Default | Required |

|------|-------------|------|---------|:--------:|

|  [attributes](#input\_attributes) | Additional attributes (e.g. `policy` or `role`) | `list(string)` | `[]` | no |

|  [autoscale\_max\_read\_capacity](#input\_autoscale\_max\_read\_capacity) | DynamoDB autoscale read max capacity | `number` | `100` | no |

|  [autoscale\_max\_write\_capacity](#input\_autoscale\_max\_write\_capacity) | DynamoDB autoscale write max capacity | `number` | `100` | no |

|  [autoscale\_min\_read\_capacity](#input\_autoscale\_min\_read\_capacity) | DynamoDB autoscale read min capacity | `number` | `10` | no |

|  [autoscale\_min\_write\_capacity](#input\_autoscale\_min\_write\_capacity) | DynamoDB autoscale write min capacity | `number` | `10` | no |

|  [autoscale\_read\_target](#input\_autoscale\_read\_target) | DynamoDB autoscale read target | `number` | `50` | no |

|  [autoscale\_write\_target](#input\_autoscale\_write\_target) | DynamoDB autoscale write target | `number` | `50` | no |

|  [delimiter](#input\_delimiter) | Delimiter to be used between `name`, `namespace`, `stage`, etc. | `string` | `"-"` | no |

|  [expiration\_days](#input\_expiration\_days) | Number of days after which to expunge the objects | `string` | `"90"` | no |

|  [glacier\_transition\_days](#input\_glacier\_transition\_days) | Number of days after which to move the data to the glacier storage tier | `string` | `"60"` | no |

|  [iam\_role\_max\_session\_duration](#input\_iam\_role\_max\_session\_duration) | The maximum session duration (in seconds) for the role. Can have a value from 1 hour to 12 hours | `number` | `3600` | no |

|  [name](#input\_name) | Name  (e.g. `bastion` or `db`) | `string` | n/a | yes |

|  [namespace](#input\_namespace) | Namespace (e.g. `cp` or `cloudposse`) | `string` | n/a | yes |

|  [prefix](#input\_prefix) | S3 bucket prefix | `string` | `""` | no |

|  [stage](#input\_stage) | Stage (e.g. `prod`, `dev`, `staging`) | `string` | n/a | yes |

|  [standard\_transition\_days](#input\_standard\_transition\_days) | Number of days to persist in the standard storage tier before moving to the glacier tier | `string` | `"30"` | no |

|  [tags](#input\_tags) | Additional tags (e.g. map('BusinessUnit`,`XYZ`)` | `map(string)` | `{}` | no |

## Outputs

| Name | Description |

|------|-------------|

|  [dynamodb\_audit\_table\_arn](#output\_dynamodb\_audit\_table\_arn) | DynamoDB audit table ARN |

|  [dynamodb\_audit\_table\_id](#output\_dynamodb\_audit\_table\_id) | DynamoDB audit table id |

|  [dynamodb\_state\_table\_arn](#output\_dynamodb\_state\_table\_arn) | DynamoDB state table ARN |

|  [dynamodb\_state\_table\_id](#output\_dynamodb\_state\_table\_id) | DynamoDB state table id |

|  [s3\_bucket\_arn](#output\_s3\_bucket\_arn) | Session storage S3 bucket ARN |

|  [s3\_bucket\_domain\_name](#output\_s3\_bucket\_domain\_name) | Session storage S3 bucket domain name |

|  [s3\_bucket\_id](#output\_s3\_bucket\_id) | Session storage S3 bucket id |

## Help

**Got a question?** We got answers.

File a GitHub [issue](https://github.com/cloudposse/terraform-aws-teleport-storage/issues), send us an [email][email] or join our [Slack Community][slack].

[![README Commercial Support][readme_commercial_support_img]][readme_commercial_support_link]

## DevOps Accelerator for Startups

We are a [**DevOps Accelerator**][commercial_support]. We'll help you build your cloud infrastructure from the ground up so you can own it. Then we'll show you how to operate it and stick around for as long as you need us.

[![Learn More](https://img.shields.io/badge/learn%20more-success.svg?style=for-the-badge)][commercial_support]

Work directly with our team of DevOps experts via email, slack, and video conferencing.

We deliver 10x the value for a fraction of the cost of a full-time engineer. Our track record is not even funny. If you want things done right and you need it done FAST, then we're your best bet.

- **Reference Architecture.** You'll get everything you need from the ground up built using 100% infrastructure as code.

- **Release Engineering.** You'll have end-to-end CI/CD with unlimited staging environments.

- **Site Reliability Engineering.** You'll have total visibility into your apps and microservices.

- **Security Baseline.** You'll have built-in governance with accountability and audit logs for all changes.

- **GitOps.** You'll be able to operate your infrastructure via Pull Requests.

- **Training.** You'll receive hands-on training so your team can operate what we build.

- **Questions.** You'll have a direct line of communication between our teams via a Shared Slack channel.

- **Troubleshooting.** You'll get help to triage when things aren't working.

- **Code Reviews.** You'll receive constructive feedback on Pull Requests.

- **Bug Fixes.** We'll rapidly work with you to fix any bugs in our projects.

## Slack Community

Join our [Open Source Community][slack] on Slack. It's **FREE** for everyone! Our "SweetOps" community is where you get to talk with others who share a similar vision for how to rollout and manage infrastructure. This is the best place to talk shop, ask questions, solicit feedback, and work together as a community to build totally *sweet* infrastructure.

## Discourse Forums

Participate in our [Discourse Forums][discourse]. Here you'll find answers to commonly asked questions. Most questions will be related to the enormous number of projects we support on our GitHub. Come here to collaborate on answers, find solutions, and get ideas about the products and services we value. It only takes a minute to get started! Just sign in with SSO using your GitHub account.

## Newsletter

Sign up for [our newsletter][newsletter] that covers everything on our technology radar.  Receive updates on what we're up to on GitHub as well as awesome new projects we discover.

## Office Hours

[Join us every Wednesday via Zoom][office_hours] for our weekly "Lunch & Learn" sessions. It's **FREE** for everyone!

[![zoom](https://img.cloudposse.com/fit-in/200x200/https://cloudposse.com/wp-content/uploads/2019/08/Powered-by-Zoom.png")][office_hours]

## Contributing

### Bug Reports & Feature Requests

Please use the [issue tracker](https://github.com/cloudposse/terraform-aws-teleport-storage/issues) to report any bugs or file feature requests.

### Developing

If you are interested in being a contributor and want to get involved in developing this project or [help out](https://cpco.io/help-out) with our other projects, we would love to hear from you! Shoot us an [email][email].

In general, PRs are welcome. We follow the typical "fork-and-pull" Git workflow.

 1. **Fork** the repo on GitHub

 2. **Clone** the project to your own machine

 3. **Commit** changes to your own branch

 4. **Push** your work back up to your fork

 5. Submit a **Pull Request** so that we can review your changes

**NOTE:** Be sure to merge the latest changes from "upstream" before making a pull request!

## Copyright

Copyright © 2017-2023 [Cloud Posse, LLC](https://cpco.io/copyright)

## License

[![License](https://img.shields.io/badge/License-Apache%202.0-blue.svg)](https://opensource.org/licenses/Apache-2.0)

See [LICENSE](LICENSE) for full details.

```text

Licensed to the Apache Software Foundation (ASF) under one

or more contributor license agreements.  See the NOTICE file

distributed with this work for additional information

regarding copyright ownership.  The ASF licenses this file

to you under the Apache License, Version 2.0 (the

"License"); you may not use this file except in compliance

with the License.  You may obtain a copy of the License at

  https://www.apache.org/licenses/LICENSE-2.0

Unless required by applicable law or agreed to in writing,

software distributed under the License is distributed on an

"AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY

KIND, either express or implied.  See the License for the

specific language governing permissions and limitations

under the License.

```

## Trademarks

All other trademarks referenced herein are the property of their respective owners.

## About

This project is maintained and funded by [Cloud Posse, LLC][website]. Like it? Please let us know by [leaving a testimonial][testimonial]!

[![Cloud Posse][logo]][website]

We're a [DevOps Professional Services][hire] company based in Los Angeles, CA. We ❤️  [Open Source Software][we_love_open_source].

We offer [paid support][commercial_support] on all of our projects.

Check out [our other projects][github], [follow us on twitter][twitter], [apply for a job][jobs], or [hire us][hire] to help with your cloud strategy and implementation.

### Contributors

|  [![Erik Osterman][osterman_avatar]][osterman_homepage]
[Erik Osterman][osterman_homepage] | [![Andriy Knysh][aknysh_avatar]][aknysh_homepage]
[Andriy Knysh][aknysh_homepage] | [![Igor Rodionov][goruha_avatar]][goruha_homepage]
[Igor Rodionov][goruha_homepage] |

|---|---|---|

  [osterman_homepage]: https://github.com/osterman

  [osterman_avatar]: https://img.cloudposse.com/150x150/https://github.com/osterman.png

  [aknysh_homepage]: https://github.com/aknysh

  [aknysh_avatar]: https://img.cloudposse.com/150x150/https://github.com/aknysh.png

  [goruha_homepage]: https://github.com/goruha

  [goruha_avatar]: https://img.cloudposse.com/150x150/https://github.com/goruha.png

[![README Footer][readme_footer_img]][readme_footer_link]

[![Beacon][beacon]][website]

  [logo]: https://cloudposse.com/logo-300x69.svg

  [docs]: https://cpco.io/docs?utm_source=github&utm_medium=readme&utm_campaign=cloudposse/terraform-aws-teleport-storage&utm_content=docs

  [website]: https://cpco.io/homepage?utm_source=github&utm_medium=readme&utm_campaign=cloudposse/terraform-aws-teleport-storage&utm_content=website

  [github]: https://cpco.io/github?utm_source=github&utm_medium=readme&utm_campaign=cloudposse/terraform-aws-teleport-storage&utm_content=github

  [jobs]: https://cpco.io/jobs?utm_source=github&utm_medium=readme&utm_campaign=cloudposse/terraform-aws-teleport-storage&utm_content=jobs

  [hire]: https://cpco.io/hire?utm_source=github&utm_medium=readme&utm_campaign=cloudposse/terraform-aws-teleport-storage&utm_content=hire

  [slack]: https://cpco.io/slack?utm_source=github&utm_medium=readme&utm_campaign=cloudposse/terraform-aws-teleport-storage&utm_content=slack

  [linkedin]: https://cpco.io/linkedin?utm_source=github&utm_medium=readme&utm_campaign=cloudposse/terraform-aws-teleport-storage&utm_content=linkedin

  [twitter]: https://cpco.io/twitter?utm_source=github&utm_medium=readme&utm_campaign=cloudposse/terraform-aws-teleport-storage&utm_content=twitter

  [testimonial]: https://cpco.io/leave-testimonial?utm_source=github&utm_medium=readme&utm_campaign=cloudposse/terraform-aws-teleport-storage&utm_content=testimonial

  [office_hours]: https://cloudposse.com/office-hours?utm_source=github&utm_medium=readme&utm_campaign=cloudposse/terraform-aws-teleport-storage&utm_content=office_hours

  [newsletter]: https://cpco.io/newsletter?utm_source=github&utm_medium=readme&utm_campaign=cloudposse/terraform-aws-teleport-storage&utm_content=newsletter

  [discourse]: https://ask.sweetops.com/?utm_source=github&utm_medium=readme&utm_campaign=cloudposse/terraform-aws-teleport-storage&utm_content=discourse

  [email]: https://cpco.io/email?utm_source=github&utm_medium=readme&utm_campaign=cloudposse/terraform-aws-teleport-storage&utm_content=email

  [commercial_support]: https://cpco.io/commercial-support?utm_source=github&utm_medium=readme&utm_campaign=cloudposse/terraform-aws-teleport-storage&utm_content=commercial_support

  [we_love_open_source]: https://cpco.io/we-love-open-source?utm_source=github&utm_medium=readme&utm_campaign=cloudposse/terraform-aws-teleport-storage&utm_content=we_love_open_source

  [terraform_modules]: https://cpco.io/terraform-modules?utm_source=github&utm_medium=readme&utm_campaign=cloudposse/terraform-aws-teleport-storage&utm_content=terraform_modules

  [readme_header_img]: https://cloudposse.com/readme/header/img

  [readme_header_link]: https://cloudposse.com/readme/header/link?utm_source=github&utm_medium=readme&utm_campaign=cloudposse/terraform-aws-teleport-storage&utm_content=readme_header_link

  [readme_footer_img]: https://cloudposse.com/readme/footer/img

  [readme_footer_link]: https://cloudposse.com/readme/footer/link?utm_source=github&utm_medium=readme&utm_campaign=cloudposse/terraform-aws-teleport-storage&utm_content=readme_footer_link

  [readme_commercial_support_img]: https://cloudposse.com/readme/commercial-support/img

  [readme_commercial_support_link]: https://cloudposse.com/readme/commercial-support/link?utm_source=github&utm_medium=readme&utm_campaign=cloudposse/terraform-aws-teleport-storage&utm_content=readme_commercial_support_link

  [share_twitter]: https://twitter.com/intent/tweet/?text=terraform-aws-teleport-storage&url=https://github.com/cloudposse/terraform-aws-teleport-storage

  [share_linkedin]: https://www.linkedin.com/shareArticle?mini=true&title=terraform-aws-teleport-storage&url=https://github.com/cloudposse/terraform-aws-teleport-storage

  [share_reddit]: https://reddit.com/submit/?url=https://github.com/cloudposse/terraform-aws-teleport-storage

  [share_facebook]: https://facebook.com/sharer/sharer.php?u=https://github.com/cloudposse/terraform-aws-teleport-storage

  [share_googleplus]: https://plus.google.com/share?url=https://github.com/cloudposse/terraform-aws-teleport-storage

  [share_email]: mailto:?subject=terraform-aws-teleport-storage&body=https://github.com/cloudposse/terraform-aws-teleport-storage

  [beacon]: https://ga-beacon.cloudposse.com/UA-76589703-4/cloudposse/terraform-aws-teleport-storage?pixel&cs=github&cm=readme&an=terraform-aws-teleport-storage