https://github.com/lean-delivery/terraform-module-aws-alb
Terraform module for creating AWS Application Load Balancer service
https://github.com/lean-delivery/terraform-module-aws-alb
aws terraform terraform-module terraform-modules
Last synced: 10 months ago
JSON representation
Terraform module for creating AWS Application Load Balancer service
- Host: GitHub
- URL: https://github.com/lean-delivery/terraform-module-aws-alb
- Owner: lean-delivery
- License: apache-2.0
- Created: 2018-12-13T15:32:41.000Z (over 7 years ago)
- Default Branch: master
- Last Pushed: 2022-05-18T14:47:15.000Z (about 4 years ago)
- Last Synced: 2025-06-20T11:07:06.773Z (about 1 year ago)
- Topics: aws, terraform, terraform-module, terraform-modules
- Language: HCL
- Size: 70.3 KB
- Stars: 2
- Watchers: 10
- Forks: 8
- Open Issues: 2
-
Metadata Files:
- Readme: README.md
- License: LICENSE
Awesome Lists containing this project
README
## Description
Terraform module to setup AWS ALB with required parameters.
Based on Hashicorp's [ALB module](https://github.com/terraform-aws-modules/terraform-aws-alb). In addition can configure S3 bucket to store ALB logs, Route53 record with custom DNS name and setup security group.
Added China region support.
## Notes
1. Changed syntax to use Terraform 1.0
2. Added the security policy if using HTTPS externally on the load balancer.
3. Changed the Hashicorp's [ALB module](https://github.com/terraform-aws-modules/terraform-aws-alb) version from 3.5 to 6.0
## Usage
```HCL
module "alb" {
source = "github.com/lean-delivery/tf-module-aws-alb"
project = "Project"
environment = "dev"
vpc_id = "vpc-eizox8ea"
subnets = ["subnet-sait0aiw", "subnet-op8phee4", "subnet-eego9xoo"]
acm_cert_domain = "*.project.example.com"
root_domain = "example.com"
alb_logs_lifecycle_rule_enabled = true
alb_logs_expiration_days = 5
}
```
## Inputs
| Name | Description | Type | Default | Required |
|------|-------------|:----:|:-----:|:-----:|
| acm\_cert\_domain | Domain name for which ACM certificate was created | string | `` | no |
| cn\_acm | Whether to use acm certificate in AWS China. Default set to false for backward compatibility | bool | `false` | no |
| cn\_route53 | Whether to use Route53 in AWS China | bool | `false` | no |
| default\_http\_tcp\_listeners\_port | Port of default HTTP listener | number | `80` | no |
| default\_https\_tcp\_listeners\_port | Port of default HTTPs listener | number | `443` | no |
| default\_load\_balancer\_is\_internal | Boolean determining if the load balancer is internal or externally facing. | bool | `true` | no |
| default\_target\_groups\_backend\_protocol | Backend protocol of default target group | string | `HTTP` | no |
| default\_target\_groups\_port | Port of default target group | number | `80` | no |
| enable\_logging | Trigger to enable ALB logging | bool | `true` | no |
| enable\_subdomains | Trigger to add '*.' before ALB custom domain name | bool | `false` | no |
| environment | Environment name (used for resource naming and tagging) | string | `test` | no |
| force\_destroy | Enforces destruction of S3 bucket with ALB logs | bool | `true` | no |
| lb\_accout\_id\_per\_region | - | map | `` | no |
| most\_recent\_certificate | Triger to use most recent SSL certificate | bool | `false` | no |
| project | Project name (used for resource naming and tagging) | string | `project` | no |
| root\_domain | Root domain in which custom DNS record for ALB would be created | string | `` | no |
| subnets | A list of subnets to associate with the load balancer | list | - | yes |
| tags | Additional tags for resources | map | `` | no |
| target\_groups\_health\_check | Target group health check parameters | map | `` | no |
| vpc\_id | VPC id where the load balancer and other resources will be deployed | string | - | yes |
| alb\_logs\_expiration\_days | s3 lifecycle rule expiration period | number | `5` | yes |
| alb\_logs\_lifecycle\_rule\_enabled | Enable or disable s3 lifecycle rule | bool | `false` | yes |
| alb\_custom\_security\_group | Switch to override default-created security group | bool | `false` | no |
| alb\_custom\_security\_group\_id | Security group ID that override default-created security group | string | `None` | no |
| alb\_custom\_route53\_record\_name | Custom Route53 record name for ALB | string | `None` | no |
| listener\_ssl\_policy | The security policy if using HTTPS externally on the load balancer. | string | `ELBSecurityPolicy-FS-1-2-Res-2020-10` | no |
## Outputs
| Name | Description |
|------|-------------|
| alb\_custom\_dns\_name | The custom DNS name of the load balancer. |
| alb\_dns\_name | The DNS name of the load balancer. |
| alb\_http\_tcp\_listener\_arns | The ARN of the TCP and HTTP load balancer listeners created. |
| alb\_http\_tcp\_listener\_ids | The IDs of the TCP and HTTP load balancer listeners created. |
| alb\_https\_listener\_arns | The ARNs of the HTTPS load balancer listeners created. |
| alb\_https\_listener\_ids | The IDs of the load balancer listeners created. |
| alb\_s3\_logs | S3 bucket name for storing ALB logs. |
| alb\_sg\_egress | The Egress rule of security group for ALB. |
| alb\_sg\_id | The ID of security group for ALB. |
| alb\_sg\_ingress | The Ingress rule of security group for ALB. |
| alb\_target\_group\_arns | ARNs of the target groups. Useful for passing to your Auto Scaling group. |
| alb\_target\_group\_names | Name of the target group. Useful for passing to your CodeDeploy Deployment Group. |
| load\_balancer\_arn\_suffix | ARN suffix of our load balancer - can be used with CloudWatch. |
| load\_balancer\_id | The ID and ARN of the load balancer we created. |
| load\_balancer\_zone\_id | The zone_id of the load balancer to assist with creating DNS records. |
| root\_domain\_hosted\_zone\_id | - |
| target\_group\_arn\_suffixes | ARN suffixes of our target groups - can be used with CloudWatch. |
## Terraform versions
Terraform version 1.0.0 or newer is required for this module to work.
## Contributing
Thank you for your interest in contributing! Please refer to [CONTRIBUTING.md](https://github.com/lean-delivery/tf-module-aws-alb/blob/master/CONTRIBUTING.md) for guidance.
## License
Apache2.0 Licensed. See [LICENSE](https://github.com/lean-delivery/tf-module-aws-alb/tree/master/LICENSE) for full details.
## Authors
Lean Delivery Team