Terraform module for managing the AWS account.
This module creates the following resources:
- Set account alias (optional)
- Set IAM password policy (optional)
- CloudTail (optional)
- Create S3 logging bucket for cloudtrail (optional)
- IAM policies (optional)
- Guardduty (optional)
- EC2 key pair (optional)
module "account" { source = "git::https://github.com/zoitech/terraform-aws-account.git" aws_region = "eu-central-1" }
Account alias is enabled by default and has the default name "not_set".
module "account" { source = "git::https://github.com/zoitech/terraform-aws-account.git" aws_region = "eu-central-1" create_acount_alias = true account_alias = "my-aws-account" }
Cloudtrail and a cloudtrail bucket will be created by default. To disable, set "create_cloudtrail" and "create_cloudtrail_bucket" to "false".
The cloudtrail bucket will fail to create if "create_cloudtrail_bucket" is set to "true" and "create_cloudtrail" is set to "false".
The "cloudtrail_bucketname" can be the name of an existing bucket (set "create_cloudtrail_bucket" to "false") or it will be used to name the bucket that will be created.
module "account" { source = "git::https://github.com/zoitech/terraform-aws-account.git" aws_region = "eu-central-1" create_cloudtrail = true cloudtrail_name = "my-cloudtrail" create_cloudtrail_bucket = true cloudtrail_bucketname = "my-cloudtrail-bucket" }
Guardduty detector will be created and enabled by default.
module "account" { source = "git::https://github.com/zoitech/terraform-aws-account.git" aws_region = "eu-central-1" create_guardduty_detector = true enable_guardduty_detector = true }
Creating a key pair is disabled by default.
module "account" { source = "git::https://github.com/zoitech/terraform-aws-account.git" aws_region = "eu-central-1" create_key_pair = true key_name = "my-key" public_key = file("my-key-name.pub") }
Creating KMS keys is disabled by default.
module "account" { source = "git::https://github.com/zoitech/terraform-aws-account.git" aws_region = "eu-central-1" create_kms_keys = true kms_keys = [ { alias_name = "alias/ec2" description = "Encryption/decryption of ec2 data" deletion_window_in_days = 30 is_enabled = true enable_key_rotation = true }, ] }
To reference a tagged version of the repository:
module "network" { source = "git::https://github.com/zoitech/terraform-aws-account.git?ref=v0.0.5" aws_region = "eu-central-1" }
Module managed by Zoi.
MIT License. See LICENSE for full details.