Skip to content

Latest commit

History

History
102 lines (91 loc) 路 9.85 KB

File metadata and controls

102 lines (91 loc) 路 9.85 KB

https-443 - AWS EC2-VPC Security Group Terraform module

Usage

module "https_443_security_group" {
  source  = "terraform-aws-modules/security-group/aws//modules/https-443"
  version = "~> 3.0"

  # omitted...
}

All automatic values https-443 module is using are available here.

Providers

No provider.

Inputs

Name Description Type Default Required
auto_computed_egress_rules List of computed egress rules to add automatically list(string) [] no
auto_computed_egress_with_self List of maps defining computed egress rules with self to add automatically list(map(string)) [] no
auto_computed_ingress_rules List of ingress rules to add automatically list(string) [] no
auto_computed_ingress_with_self List of maps defining computed ingress rules with self to add automatically list(map(string)) [] no
auto_egress_rules List of egress rules to add automatically list(string)
[
"all-all"
]
no
auto_egress_with_self List of maps defining egress rules with self to add automatically list(map(string)) [] no
auto_ingress_rules List of ingress rules to add automatically list(string)
[
"https-443-tcp"
]
no
auto_ingress_with_self List of maps defining ingress rules with self to add automatically list(map(string))
[
{
"rule": "all-all"
}
]
no
auto_number_of_computed_egress_rules Number of computed egress rules to create by name number 0 no
auto_number_of_computed_egress_with_self Number of computed egress rules to create where 'self' is defined number 0 no
auto_number_of_computed_ingress_rules Number of computed ingress rules to create by name number 0 no
auto_number_of_computed_ingress_with_self Number of computed ingress rules to create where 'self' is defined number 0 no
computed_egress_cidr_blocks List of IPv4 CIDR ranges to use on all computed egress rules list(string)
[
"0.0.0.0/0"
]
no
computed_egress_ipv6_cidr_blocks List of IPv6 CIDR ranges to use on all computed egress rules list(string)
[
"::/0"
]
no
computed_egress_prefix_list_ids List of prefix list IDs (for allowing access to VPC endpoints) to use on all computed egress rules list(string) [] no
computed_egress_rules List of computed egress rules to create by name list(string) [] no
computed_egress_with_cidr_blocks List of computed egress rules to create where 'cidr_blocks' is used list(map(string)) [] no
computed_egress_with_ipv6_cidr_blocks List of computed egress rules to create where 'ipv6_cidr_blocks' is used list(map(string)) [] no
computed_egress_with_self List of computed egress rules to create where 'self' is defined list(map(string)) [] no
computed_egress_with_source_security_group_id List of computed egress rules to create where 'source_security_group_id' is used list(map(string)) [] no
computed_ingress_cidr_blocks List of IPv4 CIDR ranges to use on all computed ingress rules list(string) [] no
computed_ingress_ipv6_cidr_blocks List of IPv6 CIDR ranges to use on all computed ingress rules list(string) [] no
computed_ingress_prefix_list_ids List of prefix list IDs (for allowing access to VPC endpoints) to use on all computed ingress rules list(string) [] no
computed_ingress_rules List of computed ingress rules to create by name list(string) [] no
computed_ingress_with_cidr_blocks List of computed ingress rules to create where 'cidr_blocks' is used list(map(string)) [] no
computed_ingress_with_ipv6_cidr_blocks List of computed ingress rules to create where 'ipv6_cidr_blocks' is used list(map(string)) [] no
computed_ingress_with_self List of computed ingress rules to create where 'self' is defined list(map(string)) [] no
computed_ingress_with_source_security_group_id List of computed ingress rules to create where 'source_security_group_id' is used list(map(string)) [] no
create Whether to create security group and all rules bool true no
description Description of security group string "Security Group managed by Terraform" no
egress_cidr_blocks List of IPv4 CIDR ranges to use on all egress rules list(string)
[
"0.0.0.0/0"
]
no
egress_ipv6_cidr_blocks List of IPv6 CIDR ranges to use on all egress rules list(string)
[
"::/0"
]
no
egress_prefix_list_ids List of prefix list IDs (for allowing access to VPC endpoints) to use on all egress rules list(string) [] no
egress_rules List of egress rules to create by name list(string) [] no
egress_with_cidr_blocks List of egress rules to create where 'cidr_blocks' is used list(map(string)) [] no
egress_with_ipv6_cidr_blocks List of egress rules to create where 'ipv6_cidr_blocks' is used list(map(string)) [] no
egress_with_self List of egress rules to create where 'self' is defined list(map(string)) [] no
egress_with_source_security_group_id List of egress rules to create where 'source_security_group_id' is used list(map(string)) [] no
ingress_cidr_blocks List of IPv4 CIDR ranges to use on all ingress rules list(string) [] no
ingress_ipv6_cidr_blocks List of IPv6 CIDR ranges to use on all ingress rules list(string) [] no
ingress_prefix_list_ids List of prefix list IDs (for allowing access to VPC endpoints) to use on all ingress rules list(string) [] no
ingress_rules List of ingress rules to create by name list(string) [] no
ingress_with_cidr_blocks List of ingress rules to create where 'cidr_blocks' is used list(map(string)) [] no
ingress_with_ipv6_cidr_blocks List of ingress rules to create where 'ipv6_cidr_blocks' is used list(map(string)) [] no
ingress_with_self List of ingress rules to create where 'self' is defined list(map(string)) [] no
ingress_with_source_security_group_id List of ingress rules to create where 'source_security_group_id' is used list(map(string)) [] no
name Name of security group string n/a yes
number_of_computed_egress_cidr_blocks Number of IPv4 CIDR ranges to use on all computed egress rules number 0 no
number_of_computed_egress_ipv6_cidr_blocks Number of IPv6 CIDR ranges to use on all computed egress rules number 0 no
number_of_computed_egress_prefix_list_ids Number of prefix list IDs (for allowing access to VPC endpoints) to use on all computed egress rules number 0 no
number_of_computed_egress_rules Number of computed egress rules to create by name number 0 no
number_of_computed_egress_with_cidr_blocks Number of computed egress rules to create where 'cidr_blocks' is used number 0 no
number_of_computed_egress_with_ipv6_cidr_blocks Number of computed egress rules to create where 'ipv6_cidr_blocks' is used number 0 no
number_of_computed_egress_with_self Number of computed egress rules to create where 'self' is defined number 0 no
number_of_computed_egress_with_source_security_group_id Number of computed egress rules to create where 'source_security_group_id' is used number 0 no
number_of_computed_ingress_cidr_blocks Number of IPv4 CIDR ranges to use on all computed ingress rules number 0 no
number_of_computed_ingress_ipv6_cidr_blocks Number of IPv6 CIDR ranges to use on all computed ingress rules number 0 no
number_of_computed_ingress_prefix_list_ids Number of prefix list IDs (for allowing access to VPC endpoints) to use on all computed ingress rules number 0 no
number_of_computed_ingress_rules Number of computed ingress rules to create by name number 0 no
number_of_computed_ingress_with_cidr_blocks Number of computed ingress rules to create where 'cidr_blocks' is used number 0 no
number_of_computed_ingress_with_ipv6_cidr_blocks Number of computed ingress rules to create where 'ipv6_cidr_blocks' is used number 0 no
number_of_computed_ingress_with_self Number of computed ingress rules to create where 'self' is defined number 0 no
number_of_computed_ingress_with_source_security_group_id Number of computed ingress rules to create where 'source_security_group_id' is used number 0 no
tags A mapping of tags to assign to security group map(string) {} no
use_name_prefix Whether to use name_prefix or fixed name. Should be true to able to update security group name after initial creation bool true no
vpc_id ID of the VPC where to create security group string n/a yes

Outputs

Name Description
this_security_group_description The description of the security group
this_security_group_id The ID of the security group
this_security_group_name The name of the security group
this_security_group_owner_id The owner ID
this_security_group_vpc_id The VPC ID