Skip to content

Latest commit

 

History

History
54 lines (43 loc) · 1.91 KB

README.md

File metadata and controls

54 lines (43 loc) · 1.91 KB
Raw

Terraform AWS Session Manager Resources

Use as a Module

module "ssm_resources" {
    source = "./"
    kms_key = {
    name                    = "ssm-cmk-key"
    description             = "CMK for cloudwath logs and session"
    deletion_window_in_days = 7
  }
  cloudwatch_log_group_name =  "/ssm/session-logs"
  enable_log_to_cloudwatch = true
}

Requirements

Name Version
terraform ~> 0.12.24
aws ~> 2.60

Providers

Name Version
aws ~> 2.60

Inputs

Name Description Type Default Required
cloudwatch_log_group_name Name of the CloudWatch Log Group for storing SSM Session Logs string "/ssm/session-logs" no
cloudwatch_logs_retention Number of days to retain Session Logs in CloudWatch number 30 no
create_ssm_document Do you want to create SSM Document bool true no
default_user operating system user name for starting sessions string "ec2-user" no
enable_log_to_cloudwatch Enable Session Manager to Log to CloudWatch Logs bool true no
kms_key KMS Key Details map(string) 
{
  "deletion_window_in_days": 7,
  "description": "CMK for cloudwath logs and session",
  "name": "ssm-cmk-key"
}
 no
role_name Name of the Role string "" no
run_as_enabled Do you want to use Specify Operating System user for sessions bool true no
tags A map of tags to add to all resources map(string) {} no

Outputs

Name Description
ssm_cloudwatch_log_group_arn The Amazon Resource Name (ARN) specifying the log group for SSM
ssm_kms_key_arn KMS key used for SSM
ssm_role_arn n/a