Skip to content

Module for member VPC accounts in the Modernisation Platform • This repository is defined and managed in Terraform

License

Notifications You must be signed in to change notification settings

ministryofjustice/modernisation-platform-terraform-member-vpc

Repository files navigation

Modernisation Platform Terraform Member VPC Module

Standards Icon Format Code Icon Scorecards IconSCA Icon Terraform SCA Icon

This module creates the member accounts VPC and networking.

Looking for issues?

If you're looking to raise an issue with this module, please create a new issue in the Modernisation Platform repository.

Requirements

Name Version
terraform >= 1.0.1
aws ~> 5.0
random ~> 3.4

Providers

Name Version
aws ~> 5.0
random ~> 3.4

Modules

No modules.

Resources

Name Type
aws_cloudwatch_log_group.default resource
aws_default_security_group.default resource
aws_flow_log.cloudwatch resource
aws_flow_log.s3 resource
aws_internet_gateway.default resource
aws_route.public_internet_gateway resource
aws_route.transit_gateway resource
aws_route_table.protected resource
aws_route_table.route_tables resource
aws_route_table_association.protected resource
aws_route_table_association.route_table_associations resource
aws_security_group.endpoints resource
aws_security_group_rule.endpoints_ingress_1 resource
aws_security_group_rule.endpoints_ingress_2 resource
aws_security_group_rule.endpoints_ingress_3 resource
aws_security_group_rule.endpoints_ingress_4 resource
aws_subnet.protected resource
aws_subnet.subnets resource
aws_vpc.vpc resource
aws_vpc_endpoint.ssm_interfaces resource
aws_vpc_endpoint.ssm_s3 resource
aws_vpc_ipv4_cidr_block_association.subnet_sets resource
random_id.flow_logs resource
aws_availability_zones.available data source
aws_region.current data source

Inputs

Name Description Type Default Required
additional_endpoints additional endpoints required for VPC list(any) n/a yes
flow_log_s3_destination_arn Optionally supply an ARN of an S3 bucket to send flow logs to string "" no
subnet_sets n/a map(any) n/a yes
tags_common MOJ required tags map(string) n/a yes
tags_prefix prefix for name tags string n/a yes
transit_gateway_id tgw ID string n/a yes
vpc_flow_log_iam_role VPC Flow Log IAM role ARN for VPC Flow Logs to CloudWatch string n/a yes

Outputs

Name Description
data_subnet_ids n/a
expanded_worker_subnets_assocation n/a
expanded_worker_subnets_with_keys n/a
non_tgw_subnet_arns Non-Transit Gateway and Protected subnet ARNs
non_tgw_subnet_arns_by_set n/a
non_tgw_subnet_arns_by_subnetset n/a
private_route_tables n/a
private_subnet_ids n/a
protected_subnet_ids n/a
public_subnet_ids n/a
tgw_subnet_ids Transit Gateway subnet IDs
vpc_flow_log n/a
vpc_id VPC ID