Skip to content

Latest commit

 

History

History
55 lines (38 loc) · 2.74 KB

README.md

File metadata and controls

55 lines (38 loc) · 2.74 KB
Raw

terraform-aws-tardigrade-config

Manage AWS Config

Testing

Manual testing:

# Replace "xxx" with an actual AWS profile, then execute the integration tests.
export AWS_PROFILE=xxx 
make terraform/pytest PYTEST_ARGS="-v --nomock"

For automated testing, PYTEST_ARGS is optional and no profile is needed:

make mockstack/up
make terraform/pytest PYTEST_ARGS="-v"
make mockstack/clean

Requirements

Name Version
terraform >= 0.12
aws >= 5.38.0

Providers

Name Version
aws >= 5.38.0

Resources

Name Type

Inputs

Name Description Type Default Required
config Object of inputs for AWS Config service 
object({
    configuration_recorder = object({
      name       = string
      is_enabled = optional(bool, true)

      role = optional(object({
        arn = string
      }))

      recording_group = optional(object({
        all_supported                 = optional(bool, true)
        include_global_resource_types = optional(bool)
        resource_types                = optional(list(string))

        exclusion_by_resource_types = optional(object({
          resource_types = list(string)
        }))

        recording_strategy = optional(object({
          use_only = string
        }))
      }))

      recording_mode = optional(object({
        recording_frequency = string

        recording_mode_override = optional(object({
          description         = optional(string)
          resource_types      = list(string)
          recording_frequency = string
        }))
      }))
    })

    delivery_channel = object({
      s3_bucket_name = string
      s3_key_prefix  = optional(string)
      s3_kms_key_arn = optional(string)
      sns_topic_arn  = optional(string)

      snapshot_delivery_properties = optional(object({
        delivery_frequency = string
      }))
    })
  })
 n/a yes

Outputs

Name Description
config_delivery_channel_id The name of the AWS Config delivery channel
config_recorder_id The name of the AWS Config recorder