From 5e37d7dda8b6c5027678dfb1420e67fbcf3b66ce Mon Sep 17 00:00:00 2001 From: badra001 Date: Mon, 3 Apr 2023 10:33:45 -0400 Subject: [PATCH] add route53, central endpoint config --- vpc-interface-endpoint/README.md | 17 ++++++++++++++++- vpc-interface-endpoint/variables.tf | 6 ++++++ 2 files changed, 22 insertions(+), 1 deletion(-) diff --git a/vpc-interface-endpoint/README.md b/vpc-interface-endpoint/README.md index 088d517..6eab3c7 100644 --- a/vpc-interface-endpoint/README.md +++ b/vpc-interface-endpoint/README.md @@ -57,6 +57,7 @@ These are not included in the module because they don't exist until the resource | [terraform](#requirement\_terraform) | >= 0.13 | | [aws](#requirement\_aws) | >= 3.66.0 | | [ldap](#requirement\_ldap) | >= 0.5.4 | +| [local](#requirement\_local) | >= 1.0.0 | | [null](#requirement\_null) | >= 3.0 | | [random](#requirement\_random) | >= 3.0 | | [template](#requirement\_template) | >= 2.0 | @@ -66,20 +67,33 @@ These are not included in the module because they don't exist until the resource | Name | Version | |------|---------| | [aws](#provider\_aws) | >= 3.66.0 | +| [time](#provider\_time) | n/a | ## Modules -No modules. +| Name | Source | Version | +|------|--------|---------| +| [vpce\_ips](#module\_vpce\_ips) | git@github.e.it.census.gov:terraform-modules/dns-lookup.git | tf-upgrade | ## Resources | Name | Type | |------|------| +| [aws_route53_record.vpce](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/route53_record) | resource | +| [aws_route53_record.vpce_info_txt](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/route53_record) | resource | +| [aws_route53_record.vpce_kms_txt](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/route53_record) | resource | +| [aws_route53_record.vpce_ptr](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/route53_record) | resource | +| [aws_route53_record.vpce_ptr_info](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/route53_record) | resource | +| [aws_route53_zone.vpce](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/route53_zone) | resource | +| [aws_ssm_parameter.vpce](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/ssm_parameter) | resource | | [aws_vpc_endpoint.interface_endpoint](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/vpc_endpoint) | resource | +| [time_static.vpce](https://registry.terraform.io/providers/hashicorp/time/latest/docs/resources/static) | resource | | [aws_arn.current](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/data-sources/arn) | data source | | [aws_caller_identity.current](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/data-sources/caller_identity) | data source | | [aws_iam_account_alias.current](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/data-sources/iam_account_alias) | data source | +| [aws_network_interface.vpce](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/data-sources/network_interface) | data source | | [aws_region.current](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/data-sources/region) | data source | +| [aws_route53_zone.vpce_ptr](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/data-sources/route53_zone) | data source | | [aws_vpc_endpoint_service.interface_endpoint](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/data-sources/vpc_endpoint_service) | data source | ## Inputs @@ -88,6 +102,7 @@ No modules. |------|-------------|------|---------|:--------:| | [account\_alias](#input\_account\_alias) | AWS Account Alias (default: will pull from current account\_alias) | `string` | `""` | no | | [account\_id](#input\_account\_id) | AWS Account ID (default: will pull from current user) | `string` | `""` | no | +| [create\_central\_vpc\_endpoint](#input\_create\_central\_vpc\_endpoint) | Flag to enable this endpoint to be handled as central, creating route53 zones and entries for the private zone, and creating an SSM parameter with the needed details for VPC association. | `bool` | `false` | no | | [override\_prefixes](#input\_override\_prefixes) | Override built-in prefixes by component. This should be used primarily for common infrastructure things | `map(string)` | `{}` | no | | [policy](#input\_policy) | IAM policy to apply to the VPC endpoint | `string` | `null` | no | | [private\_dns\_enabled](#input\_private\_dns\_enabled) | Flag to enble \| disable private DNS (default: true) | `bool` | `true` | no | diff --git a/vpc-interface-endpoint/variables.tf b/vpc-interface-endpoint/variables.tf index 1f2ab0d..a48d204 100644 --- a/vpc-interface-endpoint/variables.tf +++ b/vpc-interface-endpoint/variables.tf @@ -25,3 +25,9 @@ variable "policy" { type = string default = null } + +variable "create_central_vpc_endpoint" { + description = "Flag to enable this endpoint to be handled as central, creating route53 zones and entries for the private zone, and creating an SSM parameter with the needed details for VPC association." + type = bool + default = false +}