From ff8672256db355a324d85a255faf6b62cc19a5e9 Mon Sep 17 00:00:00 2001 From: badra001 Date: Mon, 31 May 2021 10:36:04 -0400 Subject: [PATCH] add provider --- peer/README.md | 114 +++++++++++++++++++++++++++++++++++++++++++ peer/provider.aws.tf | 7 +++ 2 files changed, 121 insertions(+) create mode 100644 peer/provider.aws.tf diff --git a/peer/README.md b/peer/README.md index e69de29..3d0428d 100644 --- a/peer/README.md +++ b/peer/README.md @@ -0,0 +1,114 @@ +# About aws-vpc-setup :: peer + +This submodule creates a peering connection with a different VPC, and sets up appropriate network +ACLs and routing between the two CIDR blocks. + +# Usage + +```hcl +module "peer_services" { + source = "git@github.e.it.census.gov:terraform-modules/aws-vpc-setup.git//peer" + +# self + vpc_id = module.vpc.vpc_id + vpc_name = var.vpc_name + vpc_cidr_block = var.vpc_cidr_block + vpc_index = var.vpc_index + vpc_short_name = var.vpc_short_name + vpc_full_name = var.vpc_full_name + vpc_environment = var.vpc_environment + route_table_ids = [ "rtb-12345678" ] + network_acl_ids = [ "nacl-12345678" ] + nacl_rule_number = 2500 + rule_increment = 1 + tags = {} + +# peer + peer_account_id = var.peer_account_id + peer_vpc_id = var.peer_vpc_id + peer_vpc_name = var.peer_vpc_name + # peer_vpc_cidr_block = var.peer_vpc_cidr_block + peer_vpc_index = var.peer_vpc_index + peer_vpc_short_name = var.peer_vpc_short_name + # peer_vpc_full_name = var.peer_vpc_full_name + # peer_vpc_environment = var.peer_vpc_environment + # peer_tags = {} + peer_route_table_ids = [ "rtb-87654321" ] + peer_network_acl_ids = [ "nacl-87654321" ] + peer_nacl_rule_number = 2500 + peer_rule_increment = 1 + + providers = { + aws.self = aws + aws.peer = aws.us-gov-east-1 + } +} +``` + +## Requirements + +No requirements. + +## Providers + +| Name | Version | +|------|---------| +| [aws.peer](#provider\_aws.peer) | n/a | +| [aws.self](#provider\_aws.self) | n/a | + +## Modules + +No modules. + +## Resources + +| Name | Type | +|------|------| +| [aws_arn.peer_current](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/data-sources/arn) | data source | +| [aws_arn.self_current](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/data-sources/arn) | data source | +| [aws_caller_identity.peer_current](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/data-sources/caller_identity) | data source | +| [aws_caller_identity.self_current](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/data-sources/caller_identity) | data source | +| [aws_region.peer_current](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/data-sources/region) | data source | +| [aws_region.self_current](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/data-sources/region) | data source | +| [aws_route_tables.default_peer_route_tables](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/data-sources/route_tables) | data source | +| [aws_route_tables.default_self_route_tables](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/data-sources/route_tables) | data source | +| [aws_vpc.peer_vpc](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/data-sources/vpc) | data source | +| [aws_vpc.self_vpc](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/data-sources/vpc) | data source | + +## Inputs + +| Name | Description | Type | Default | Required | +|------|-------------|------|---------|:--------:| +| [account\_alias](#input\_account\_alias) | AWS Account Alias | `string` | `""` | no | +| [account\_id](#input\_account\_id) | AWS Account ID (default will pull from current user) | `string` | `""` | no | +| [nacl\_rule\_number](#input\_nacl\_rule\_number) | Starting rule number within the rule | `number` | `null` | no | +| [network\_acl\_ids](#input\_network\_acl\_ids) | VPC Network ACL IDs | `list(string)` | `[]` | no | +| [override\_prefixes](#input\_override\_prefixes) | Override built-in prefixes by component. This should be used primarily for common infrastructure things | `map(string)` | `{}` | no | +| [peer\_account\_alias](#input\_peer\_account\_alias) | Peer AWS Account Alias | `string` | `""` | no | +| [peer\_account\_id](#input\_peer\_account\_id) | Peer AWS Account ID | `string` | `""` | no | +| [peer\_nacl\_rule\_number](#input\_peer\_nacl\_rule\_number) | Peer Starting rule number within the rule | `number` | `null` | no | +| [peer\_network\_acl\_ids](#input\_peer\_network\_acl\_ids) | Peer VPC Network ACL IDs | `list(string)` | `[]` | no | +| [peer\_route\_table\_ids](#input\_peer\_route\_table\_ids) | Peer VPC route table IDs (default: all *private* route tables at peer VPC) | `list(string)` | `[]` | no | +| [peer\_rule\_increment](#input\_peer\_rule\_increment) | Peer Rule number increment per new CIDR block | `number` | `1` | no | +| [peer\_tags](#input\_peer\_tags) | Peer AWS Tags to apply to appropriate resources (default: current var.tags) | `map(string)` | `{}` | no | +| [peer\_vpc\_cidr\_block](#input\_peer\_vpc\_cidr\_block) | Peer VPC CIDR Block (default: obtain from peer VPC) | `string` | `""` | no | +| [peer\_vpc\_environment](#input\_peer\_vpc\_environment) | Peer VPC environment purpose (infrastructure, common, shared, dev, stage, ite, prod) | `string` | `null` | no | +| [peer\_vpc\_full\_name](#input\_peer\_vpc\_full\_name) | Peer VPC full name component (vpc{index}-{vpc\_name}) | `string` | `null` | no | +| [peer\_vpc\_id](#input\_peer\_vpc\_id) | Peer VPC ID | `string` | n/a | yes | +| [peer\_vpc\_index](#input\_peer\_vpc\_index) | Peer VPC index number (integer starting at 1) | `number` | `null` | no | +| [peer\_vpc\_name](#input\_peer\_vpc\_name) | Peer VPC name component used through the VPC descrbing its purpose | `string` | `null` | no | +| [peer\_vpc\_short\_name](#input\_peer\_vpc\_short\_name) | Peer VPC short name component (vpc{index}) | `string` | `null` | no | +| [route\_table\_ids](#input\_route\_table\_ids) | Self VPC route table IDs (default: all *private* route tables at self VPC) | `list(string)` | `[]` | no | +| [rule\_increment](#input\_rule\_increment) | Rule number increment per new CIDR block | `number` | `1` | no | +| [tags](#input\_tags) | AWS Tags to apply to appropriate resources (S3, KMS). Do not include safeguard tags here, use the data\_safeguard field for such things. | `map(string)` | `{}` | no | +| [vpc\_cidr\_block](#input\_vpc\_cidr\_block) | Self VPC CIDR Block (default: obtain from self VPC) | `string` | `""` | no | +| [vpc\_environment](#input\_vpc\_environment) | VPC environment purpose (infrastructure, common, shared, dev, stage, ite, prod) | `string` | `null` | no | +| [vpc\_full\_name](#input\_vpc\_full\_name) | VPC full name component (vpc{index}-{vpc\_name}) | `string` | `null` | no | +| [vpc\_id](#input\_vpc\_id) | VPC ID | `string` | n/a | yes | +| [vpc\_index](#input\_vpc\_index) | VPC index number (integer starting at 1) | `number` | `null` | no | +| [vpc\_name](#input\_vpc\_name) | VPC name component used through the VPC descrbing its purpose (ex: dice-dev) | `string` | `null` | no | +| [vpc\_short\_name](#input\_vpc\_short\_name) | VPC short name component (vpc{index}) | `string` | `null` | no | + +## Outputs + +No outputs. diff --git a/peer/provider.aws.tf b/peer/provider.aws.tf new file mode 100644 index 0000000..df3ea08 --- /dev/null +++ b/peer/provider.aws.tf @@ -0,0 +1,7 @@ +provider "aws" { + alias = "self" +} + +provider "aws" { + alias = "peer" +}