Terraform AWS VPC

Terraform module to create VPC resource on AWS.

---

We eat, drink, sleep and most importantly love DevOps. We are working towards strategies for standardizing architecture while ensuring security for the infrastructure. We are strong believer of the philosophy Bigger problems are always solved by breaking them into smaller manageable problems. Resonating with microservices architecture, it is considered best-practice to run database, cluster, storage in smaller connected yet manageable pieces within the infrastructure.

This module is basically combination of Terraform open source and includes automatation tests and examples. It also helps to create and improve your infrastructure with minimalistic code instead of maintaining the whole infrastructure code yourself.

We have fifty plus terraform modules. A few of them are comepleted and are available for open source usage while a few others are in progress.

Prerequisites

This module has a few dependencies:

• Terraform 0.15
• Go
• github.com/stretchr/testify/assert
• github.com/gruntwork-io/terratest/modules/terraform

Examples

IMPORTANT: Since the master branch used in source varies based on new modifications, we suggest that you use the release versions here.

Simple Example

Here is an example of how you can use this module in your inventory structure:

module "vpc" {
    source      = "clouddrove/vpc/aws"
    version     = "0.15.0"
    name        = "vpc"
    environment = "test"
    label_order = ["name", "environment"]
    cidr_block  = "10.0.0.0/16"
  }

Inputs

Name	Description	Type	Default	Required
additional_cidr_block	List of secondary CIDR blocks of the VPC.	list(string)	[]	no
attributes	Additional attributes (e.g. 1).	list(any)	[]	no
cidr_block	CIDR for the VPC.	string	""	no
enable_classiclink	A boolean flag to enable/disable ClassicLink for the VPC.	bool	false	no
enable_classiclink_dns_support	A boolean flag to enable/disable ClassicLink DNS Support for the VPC.	bool	false	no
enable_dns_hostnames	A boolean flag to enable/disable DNS hostnames in the VPC.	bool	true	no
enable_dns_support	A boolean flag to enable/disable DNS support in the VPC.	bool	true	no
enable_flow_log	Enable vpc_flow_log logs.	bool	false	no
environment	Environment (e.g. prod, dev, staging).	string	""	no
instance_tenancy	A tenancy option for instances launched into the VPC.	string	"default"	no
ipv4_ipam_pool_id	The ID of an IPv4 IPAM pool you want to use for allocating this VPC's CIDR.	string	""	no
ipv4_netmask_length	The netmask length of the IPv4 CIDR you want to allocate to this VPC. Requires specifying a ipv4_ipam_pool_id	string	null	no
label_order	Label order, e.g. name,application.	list(any)	[]	no
managedby	ManagedBy, eg 'CloudDrove'	string	"[email protected]"	no
name	Name (e.g. app or cluster).	string	""	no
repository	Terraform current module repo	string	"https://github.com/clouddrove/terraform-aws-vpc"	no
restrict_default_sg	Flag to control the restrict default sg creation.	bool	true	no
s3_bucket_arn	S3 ARN for vpc logs.	string	""	no
tags	Additional tags (e.g. map(BusinessUnit,XYZ).	map(any)	{}	no
traffic_type	Type of traffic to capture. Valid values: ACCEPT,REJECT, ALL.	string	"ALL"	no
vpc_enabled	Flag to control the vpc creation.	bool	true	no

Outputs

Name	Description
igw_id	The ID of the Internet Gateway.
ipv6_cidr_block	The IPv6 CIDR block.
tags	A mapping of tags to assign to the resource.
vpc_cidr_block	The CIDR block of the VPC.
vpc_default_network_acl_id	The ID of the network ACL created by default on VPC creation.
vpc_default_route_table_id	The ID of the route table created by default on VPC creation.
vpc_default_security_group_id	The ID of the security group created by default on VPC creation.
vpc_id	The ID of the VPC.
vpc_ipv6_association_id	The association ID for the IPv6 CIDR block.
vpc_main_route_table_id	The ID of the main route table associated with this VPC.

Testing

In this module testing is performed with terratest and it creates a small piece of infrastructure, matches the output like ARN, ID and Tags name etc and destroy infrastructure in your AWS account. This testing is written in GO, so you need a GO environment in your system.

You need to run the following command in the testing folder:

  go test -run Test

Feedback

If you come accross a bug or have any feedback, please log it in our issue tracker, or feel free to drop us an email at [email protected].

If you have found it worth your time, go ahead and give us a ★ on our GitHub!

About us

At CloudDrove, we offer expert guidance, implementation support and services to help organisations accelerate their journey to the cloud. Our services include docker and container orchestration, cloud migration and adoption, infrastructure automation, application modernisation and remediation, and performance engineering.

We are The Cloud Experts!

---

We ❤️ Open Source and you can check out our other modules to get help with your new Cloud ideas.