Ecosyste.ms: Awesome

An open API service indexing awesome lists of open source software.

Awesome Lists | Featured Topics | Projects

https://github.com/schubergphilis/terraform-aws-mcaf-vpc-with-ipam

Terraform module to manage an AWS VPC using the CIDR provided by an IPAM pool.
https://github.com/schubergphilis/terraform-aws-mcaf-vpc-with-ipam

aws terraform terraform-module

Last synced: about 9 hours ago
JSON representation

Terraform module to manage an AWS VPC using the CIDR provided by an IPAM pool.

Host: GitHub
URL: https://github.com/schubergphilis/terraform-aws-mcaf-vpc-with-ipam
Owner: schubergphilis
License: apache-2.0
Created: 2024-07-15T08:10:48.000Z (2 months ago)
Default Branch: main
Last Pushed: 2024-09-04T14:05:30.000Z (20 days ago)
Last Synced: 2024-09-18T04:36:13.873Z (7 days ago)
Topics: aws, terraform, terraform-module
Language: HCL
Homepage: https://registry.terraform.io/modules/schubergphilis/mcaf-vpc-with-ipam/aws/latest
Size: 32.2 KB
Stars: 1
Watchers: 16
Forks: 0
Open Issues: 1
Metadata Files:
- Readme: README.md
- Changelog: CHANGELOG.md
- Contributing: CONTRIBUTING.md
- License: LICENSE

Awesome Lists containing this project

README

        # terraform-aws-mcaf-vpc-with-ipam

Terraform module to manage an AWS VPC using the CIDR provided by an IPAM pool and attaching the VPC to a transit gateway.

This module will be merged with https://github.com/schubergphilis/terraform-aws-mcaf-vpc in the future.

## Usage

## Requirements

| Name | Version |

|------|---------|

|  [terraform](#requirement\_terraform) | >= 1.3 |

|  [aws](#requirement\_aws) | >= 5.20 |

## Providers

| Name | Version |

|------|---------|

|  [aws](#provider\_aws) | >= 5.20 |

|  [aws.transit\_gateway\_account](#provider\_aws.transit\_gateway\_account) | >= 5.20 |

## Modules

No modules.

## Resources

| Name | Type |

|------|------|

| [aws_cloudwatch_log_group.vpc_flow_logs](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/cloudwatch_log_group) | resource |

| [aws_default_security_group.default_vpc](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/default_security_group) | resource |

| [aws_default_security_group.workload_vpc](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/default_security_group) | resource |

| [aws_default_vpc.default](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/default_vpc) | resource |

| [aws_ec2_transit_gateway_route_table_association.default](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/ec2_transit_gateway_route_table_association) | resource |

| [aws_ec2_transit_gateway_route_table_propagation.default](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/ec2_transit_gateway_route_table_propagation) | resource |

| [aws_ec2_transit_gateway_vpc_attachment.default](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/ec2_transit_gateway_vpc_attachment) | resource |

| [aws_ec2_transit_gateway_vpc_attachment_accepter.default](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/ec2_transit_gateway_vpc_attachment_accepter) | resource |

| [aws_eip.nat_gw](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/eip) | resource |

| [aws_flow_log.default](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/flow_log) | resource |

| [aws_iam_policy.vpc_flow_logs](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/iam_policy) | resource |

| [aws_iam_role.vpc_flow_logs](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/iam_role) | resource |

| [aws_iam_role_policy_attachment.vpc_flow_logs](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/iam_role_policy_attachment) | resource |

| [aws_internet_gateway.default](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/internet_gateway) | resource |

| [aws_nat_gateway.public](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/nat_gateway) | resource |

| [aws_route.internet_gateway](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/route) | resource |

| [aws_route_table.default](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/route_table) | resource |

| [aws_route_table_association.default](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/route_table_association) | resource |

| [aws_subnet.default](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/subnet) | resource |

| [aws_vpc.default](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/vpc) | resource |

| [aws_vpc_ipam_preview_next_cidr.vpc](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/vpc_ipam_preview_next_cidr) | resource |

| [aws_caller_identity.default](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/data-sources/caller_identity) | data source |

| [aws_iam_policy_document.vpc_flow_log](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/data-sources/iam_policy_document) | data source |

| [aws_iam_policy_document.vpc_flow_logs_assume_role](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/data-sources/iam_policy_document) | data source |

| [aws_region.default](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/data-sources/region) | data source |

## Inputs

| Name | Description | Type | Default | Required |

|------|-------------|------|---------|:--------:|

|  [availability\_zones](#input\_availability\_zones) | A list of availability zones names or ids in the region. | `list(string)` | n/a | yes |

|  [aws\_vpc\_ipam\_pool](#input\_aws\_vpc\_ipam\_pool) | ID of the IPAM pool to get CIDRs from. | `string` | n/a | yes |

|  [name](#input\_name) | Name to be used on all the resources as identifier. | `string` | n/a | yes |

|  [networks](#input\_networks) | A list of objects describing requested subnetwork prefixes. | 
list(object({
    name           = string
    cidr_netmask   = number
    public         = optional(bool, false)
    nat_gw         = optional(bool, false)
    tgw_attachment = optional(bool, false)
    tags           = optional(map(string), {})
  })) | n/a | yes |

|  [cloudwatch\_flow\_logs\_configuration](#input\_cloudwatch\_flow\_logs\_configuration) | Cloudwatch flow logs configuration | object({
    iam_policy_name_prefix   = optional(string, "vpc-flow-logs-to-cloudwatch-")
    iam_role_name_prefix     = optional(string, "vpc-flow-logs-role-")
    kms_key_arn              = optional(string)
    log_group_name           = optional(string)
    max_aggregation_interval = optional(number, 60)
    retention_in_days        = optional(number, 90)
    traffic_type             = optional(string, "ALL")
  }) | `{}` | no |

|  [enable\_dns\_hostnames](#input\_enable\_dns\_hostnames) | Enable DNS hostnames in the VPC. | `bool` | `true` | no |

|  [manage\_default\_vpc](#input\_manage\_default\_vpc) | Should be true to adopt and manage the default VPC. | `bool` | `true` | no |

|  [tags](#input\_tags) | A map of tags to add to all resources. | `map(string)` | `{}` | no |

|  [transit\_gateway\_appliance\_mode\_support](#input\_transit\_gateway\_appliance\_mode\_support) | Enable to attach the VPC in appliance mode on the Transit Gateway. | `bool` | `false` | no |

|  [transit\_gateway\_id](#input\_transit\_gateway\_id) | Transit Gateway ID. | `string` | `""` | no |

|  [transit\_gateway\_route\_table\_association](#input\_transit\_gateway\_route\_table\_association) | Transit Gateway route table ID to attach the VPC on. | `string` | `""` | no |

|  [transit\_gateway\_route\_table\_propagation](#input\_transit\_gateway\_route\_table\_propagation) | Transit Gateway route table ID's to propagate the VPC CIDR to. | `list(string)` | `[]` | no |

|  [vpc\_cidr\_netmask](#input\_vpc\_cidr\_netmask) | The netmask length of the IPv4 CIDR you want to allocate to this VPC. | `number` | `20` | no |

## Outputs

| Name | Description |

|------|-------------|

|  [nat\_gateway\_ids](#output\_nat\_gateway\_ids) | List of NAT Gateway IDs |

|  [route\_table\_ids](#output\_route\_table\_ids) | Map of all networks in the VPC and their subnets |

|  [subnet\_ids](#output\_subnet\_ids) | Map of all networks in the VPC and their subnets |

|  [subnets](#output\_subnets) | Map of all subnets in the VPCs |

|  [transit\_gateway\_attachment\_id](#output\_transit\_gateway\_attachment\_id) | Transit Gateway attachment ID |

|  [vpc\_arn](#output\_vpc\_arn) | The ARN of the VPC |

|  [vpc\_cidr\_block](#output\_vpc\_cidr\_block) | The CIDR block of the VPC |

|  [vpc\_id](#output\_vpc\_id) | The ID of the VPC |

## Licensing

100% Open Source and licensed under the Apache License Version 2.0. See [LICENSE](https://github.com/schubergphilis/terraform-aws-mcaf-vpc-with-ipam/blob/main/LICENSE) for full details.