update to include composite

CHANGELOG.md

@@ -320,3 +320,4 @@
 * 2.9.1 -- 2023-05-31
   - vpn-transit-gateway
     - add ok_action, update template, add version to description
+    - add composite alarms for whole site and all tunnels

vpn-transit-gateway/README.md

@@ -71,6 +71,7 @@ No modules.
 
 | Name | Type |
 |------|------|
+| [aws_cloudwatch_composite_alarm.tgw_vpn](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/cloudwatch_composite_alarm) | resource |
 | [aws_cloudwatch_composite_alarm.tgw_vpn_site](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/cloudwatch_composite_alarm) | resource |
 | [aws_cloudwatch_log_group.log](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/cloudwatch_log_group) | resource |
 | [aws_cloudwatch_metric_alarm.tgw_vpn](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/cloudwatch_metric_alarm) | resource |

vpn-transit-gateway/cloudwatch_alarms.tf

@@ -102,3 +102,21 @@ resource "aws_cloudwatch_composite_alarm" "tgw_vpn_site" {
   )
 }
 
+resource "aws_cloudwatch_composite_alarm" "tgw_vpn" {
+  alarm_name      = format("%v-all-tunnels.%v.%v", var.tgw_environment, local.account_alias, local.region)
+  actions_enabled = true
+  alarm_actions   = [var.cloudwatch_alarm_topic_arn]
+  ok_actions      = [var.cloudwatch_alarm_topic_arn]
+  alarm_description = templatefile("${path.module}/templates/vpn_tunnel_status_composite.alarm.tpl", {
+    "site"           = each.key,
+    "site_details"   = [for k, v in local.vpn_details : merge(v, { "key" = k })]
+    "module_name"    = local.base_tags["boc:tf_module_name"],
+    "module_version" = local._module_version
+  })
+  alarm_rule = join(" AND ", [for k, v in local.vpn_details : format("ALARM(%v)", aws_cloudwatch_metric_alarm.tgw_vpn[k].arn)])
+
+  tags = merge(
+    local.base_tags,
+    var.tags,
+  )
+}