All Projects → rackspace-infrastructure-automation → aws-terraform-vpc_basenetwork

rackspace-infrastructure-automation / aws-terraform-vpc_basenetwork

Licence: MIT license
No description or website provided.

Programming Languages

HCL
1544 projects

Projects that are alternatives of or similar to aws-terraform-vpc basenetwork

aws-terraform-ec2 asg
AWS EC2 Autoscale Group Terraform module for Rackspace customers
Stars: ✭ 15 (-16.67%)
Mutual labels:  rax-tf-module, navi-rax-supeng
aws-terraform-ec2 autorecovery
AWS EC2 Autorecover Terraform module for Rackspace customers
Stars: ✭ 18 (+0%)
Mutual labels:  rax-tf-module, navi-rax-supeng
ebs snapper
Next generation AWS tool for EBS snapshots using Lambda
Stars: ✭ 51 (+183.33%)
Mutual labels:  navi-rax-supeng

aws-terraform-vpc_basenetwork

This module sets up basic network components for an account in a specific region. Optionally it will setup a basic VPN gateway and VPC flow logs.

Basic Usage

module "vpc" {
  source = "[email protected]:rackspace-infrastructure-automation/aws-terraform-vpc_basenetwork//?ref=v0.12.2"

  vpc_name = "MyVPC"
}

Full working references are available at examples

Default Resources

By default only vpc_name is required to be set. Unless changed aws_region defaults to us-west-2 and will need to be updated for other regions. source will also need to be declared depending on where the module lives. Given default settings the following resources are created:

  • VPC Flow Logs
  • 2 AZs with public/private subnets from the list of 3 static CIDRs ranges available for each as defaults
  • Public/private subnets with the count related to custom_azs if defined or region AZs automatically calculated by Terraform otherwise
  • NAT Gateways will be created in each AZ's first public subnet
  • EIPs will be created in all public subnets for NAT gateways to use
  • Route Tables, including routes to NAT gateways if applicable

Terraform 0.12 upgrade

Several changes were required while adding terraform 0.12 compatibility. The following changes should be
made when upgrading from a previous release to version 0.12.0 or higher.

Module variables

The following module variables were updated to better meet current Rackspace style guides:

  • custom_tags -> tags
  • vpc_name -> name

Requirements

Name Version
terraform >= 0.13.7
aws ~> 3.0

Providers

Name Version
aws ~> 3.0

Modules

No Modules.

Resources

Name
aws_availability_zones
aws_cloudwatch_log_group
aws_eip
aws_flow_log
aws_iam_role
aws_iam_role_policy
aws_internet_gateway
aws_nat_gateway
aws_region
aws_route
aws_route_table
aws_route_table_association
aws_s3_bucket
aws_s3_bucket_acl
aws_s3_bucket_lifecycle_configuration
aws_s3_bucket_server_side_encryption_configuration
aws_subnet
aws_vpc
aws_vpc_dhcp_options
aws_vpc_dhcp_options_association
aws_vpn_gateway
aws_vpn_gateway_route_propagation

Inputs

Name Description Type Default Required
az_count Number of AZs to utilize for the subnets number 2 no
build_flow_logs Whether or not to build flow log components in Cloudwatch Logs bool false no
build_igw Whether or not to build an internet gateway. If disabled, no public subnets or route tables, internet gateway, or NAT Gateways will be created. bool true no
build_nat_gateways Whether or not to build a NAT gateway per AZ. if build_igw is set to false, this value is ignored. bool true no
build_s3_flow_logs Whether or not to build flow log components in s3 bool false no
build_vpn Whether or not to build a VPN gateway bool false no
cidr_range CIDR range for the VPC string "172.18.0.0/19" no
cloudwatch_flowlog_retention The number of days to retain flowlogs in CLoudwatch Logs. Valid values are: [0, 1, 3, 5, 7, 14, 30, 60, 90, 120, 150, 180, 365, 400, 545, 731, 1827, 3653]. A value of 0 will retain indefinitely. number 14 no
custom_azs A list of AZs that VPC resources will reside in list(string) [] no
default_tenancy Default tenancy for instances. Either multi-tenant (default) or single-tenant (dedicated) string "default" no
domain_name Custom domain name for the VPC string "" no
domain_name_servers Array of custom domain name servers list(string)
[
"AmazonProvidedDNS"
]
no
enable_dns_hostnames Whether or not to enable DNS hostnames for the VPC bool true no
enable_dns_support Whether or not to enable DNS support for the VPC bool true no
environment Application environment for which this network is being created. e.g. Development/Production string "Development" no
logging_bucket_access_control Define ACL for Bucket from one of the canned ACL: private, public-read, public-read-write, aws-exec-read, authenticated-read, log-delivery-write string "private" no
logging_bucket_encryption Enable default bucket encryption. i.e. AES256 or aws:kms string "AES256" no
logging_bucket_encryption_kms_mster_key The AWS KMS master key ID used for the SSE-KMS encryption. This can only be used when you set the value of sse_algorithm as aws:kms. string "" no
logging_bucket_force_destroy Whether all objects should be deleted from the bucket so that the bucket can be destroyed without error. These objects are not recoverable. ie. true bool false no
logging_bucket_name Bucket name to store s3 flow logs. If empty, a random bucket name is generated. Use in conjuction with build_s3_flow_logs string "" no
logging_bucket_prefix The prefix for the location in the S3 bucket. If you don't specify a prefix, the access logs are stored in the root of the bucket. string "" no
name Name prefix for the VPC and related resources string n/a yes
private_cidr_ranges An array of CIDR ranges to use for private subnets list(string)
[
"172.18.16.0/22",
"172.18.20.0/22",
"172.18.24.0/22"
]
no
private_subnet_names Text that will be included in generated name for private subnets. Given the default value of ["Private"], subnet
names in the form "<vpc_name>-Private<count+1>", e.g. "MyVpc-Public2" will be produced. Otherwise, given a
list of names with length the same as the value of az_count, the first az_count subnets will be named using
the first string in the list, the second az_count subnets will be named using the second string, and so on.
list(string)
[
"Private"
]
no
private_subnet_tags A list of maps containing tags to be applied to private subnets. List should either be the same length as the number of AZs to apply different tags per set of subnets, or a length of 1 to apply the same tags across all private subnets. list(map(string))
[
{}
]
no
private_subnets_per_az Number of private subnets to create in each AZ. NOTE: This value, when multiplied by the value of az_count,
should not exceed the length of the private_cidr_ranges list!
number 1 no
public_cidr_ranges An array of CIDR ranges to use for public subnets list(string)
[
"172.18.0.0/22",
"172.18.4.0/22",
"172.18.8.0/22"
]
no
public_subnet_names Text that will be included in generated name for public subnets. Given the default value of ["Public"], subnet
names in the form "<vpc_name>-Public<count+1>", e.g. "MyVpc-Public1" will be produced. Otherwise, given a
list of names with length the same as the value of az_count, the first az_count subnets will be named using
the first string in the list, the second az_count subnets will be named using the second string, and so on.
list(string)
[
"Public"
]
no
public_subnet_tags A list of maps containing tags to be applied to public subnets. List should either be the same length as the number of AZs to apply different tags per set of subnets, or a length of 1 to apply the same tags across all public subnets. list(map(string))
[
{}
]
no
public_subnets_per_az Number of public subnets to create in each AZ. NOTE: This value, when multiplied by the value of az_count,
should not exceed the length of the public_cidr_ranges list!
number 1 no
s3_flowlog_retention The number of days to retain flowlogs in s3. A value of 0 will retain indefinitely. number 14 no
single_nat Deploy VPC in single NAT mode. bool false no
spoke_vpc Whether or not the VPN gateway is a spoke of a Transit VPC bool false no
tags Optional tags to be applied on top of the base tags on all resources map(string) {} no

Outputs

Name Description
default_sg The ID of the default SG for the VPC
flowlog_log_group_arn The ARN of the flow log CloudWatch log group if one was created
flowlog_log_group_name The name of the flow log CloudWatch log group if one was created
internet_gateway The ID of the Internet Gateway
nat_gateway The ID of the NAT Gateway if one was created
nat_gateway_ids The ID of the NAT Gateway if one was created
nat_gateway_private_ips The private IPs of the NAT Gateway if one was created
nat_gateway_public_ips The public IPs of the NAT Gateway if one was created
private_route_tables The IDs for the private route tables
private_subnets The IDs for the private subnets
public_route_tables The IDs for the public route tables
public_subnets The IDs of the public subnets
vpc_id The ID of the VPC
vpn_gateway The ID of the VPN gateway if one was created
Note that the project description data, including the texts, logos, images, and/or trademarks, for each open source project belongs to its rightful owner. If you wish to add or remove any projects, please contact us at [email protected].