cloudtrail-cloudwatch-alarms

cloudposse/cloudtrail-cloudwatch-alarms/aws

Terraform Module HCL AWS

Terraform module for creating alarms for tracking important changes and occurrences from cloudtrail.

Install

module "cloudtrail-cloudwatch-alarms" {

source = "cloudposse/cloudtrail-cloudwatch-alarms/aws"

version = "0.14.3"

}

⭐ Source on GitHub 📦 Registry page

README

terraform-aws-cloudtrail-cloudwatch-alarms ![Build Status](https://travis-ci.org/cloudposse/terraform-aws-cloudtrail-cloudwatch-alarms) ![Latest Release](https://github.com/cloudposse/terraform-aws-cloudtrail-cloudwatch-alarms/releases) ![Slack Community](https://slack.cloudposse.com) [![README Header][readme_header_img]][readme_header_link] [![Cloud Posse][logo]](https://cpco.io/homepage) Terraform module for creating alarms for tracking important changes and occurances from cloudtrail. This module creates a set of filter metrics and alarms based on the security best practices covered in the AWS CIS Foundations Benchmark guide. --- This project is part of our comprehensive "SweetOps" approach towards DevOps. [ ][share_email] [ ][share_googleplus] [ ][share_facebook] [ ][share_reddit] [ ][

Inputs (27)

Name	Type	Description	Default
log_group_name	string	The cloudtrail cloudwatch log group name	required
tenant	string	ID element _(Rarely used, not included by default)_. A customer identifier, indi	required
label_key_case	string	Controls the letter case of the `tags` keys (label names) for tags generated by	required
enabled	bool	Set to false to prevent the module from creating any resources	required
environment	string	ID element. Usually used for region e.g. 'uw2', 'us-west-2', OR role 'prod', 'st	required
label_value_case	string	Controls the letter case of ID elements (labels) as included in `id`, set as tag	required
stage	string	ID element. Usually used to indicate role, e.g. 'prod', 'staging', 'source', 'bu	required
regex_replace_chars	string	Terraform regular expression (regex) string. Characters matching the regex will	required
sns_topic_arn	string	An SNS topic ARN that has already been created. Its policy must already allow ac	required
kms_master_key_id	string	The ID or alias of the customer master key (CMK) to use for encrypting the Ama	required
name	string	ID element. Usually the component or solution name, e.g. 'app' or 'jenkins'. Thi	required
id_length_limit	number	Limit `id` to this many characters (minimum 6). Set to `0` for unlimited length.	required
label_order	list(string)	The order in which the labels (ID elements) appear in the `id`. Defaults to ["na	required
namespace	string	ID element. Usually an abbreviation of your organization name, e.g. 'eg' or 'cp'	required
delimiter	string	Delimiter to be used between ID elements. Defaults to `-` (hyphen). Set to `""`	required
metric_namespace	string	A namespace for grouping all of the metrics together	`"CISBenchmark"`
additional_endpoint_arns	list(string)	Any alert endpoints, such as autoscaling, or app scaling endpoint arns that will	`[]`
log_group_region	string	The log group region that should be monitored for unauthorised AWS API Access. C	`""`
descriptor_formats	any	Describe additional descriptors to be output in the `descriptors` output map. Ma	`{}`
context	any	Single object for setting entire context at once. See description of individual	`{ "additional_tag_map": {}, "attribu`
metrics	map(object({ metric_name	The cloudwatch metrics and corresponding alarm definitions	`{}`
tags	map(string)	Additional tags (e.g. `{'BusinessUnit': 'XYZ'}`). Neither the tag keys nor the t	`{}`
sns_policy_enabled	bool	Attach a policy that allows the notifications through to the SNS topic endpoint	`false`
dashboard_enabled	bool	When true a dashboard that displays the statistics as a line graph will be creat	`true`
additional_tag_map	map(string)	Additional key-value pairs to add to each map in `tags_as_list_of_maps`. Not add	`{}`
attributes	list(string)	ID element. Additional attributes (e.g. `workers` or `cluster`) to add to `id`,	`[]`
labels_as_tags	set(string)	Set of labels (ID elements) to include as tags in the `tags` output. Default is	`[ "default" ]`