cloudwatch-flow-logs

cloudposse/cloudwatch-flow-logs/aws

Terraform Module HCL AWS

Terraform module for enabling flow logs for vpc and subnets.

Install

module "cloudwatch-flow-logs" {

source = "cloudposse/cloudwatch-flow-logs/aws"

version = "0.4.0"

}

⭐ Source on GitHub 📦 Registry page

README

[![README Header][readme_header_img]][readme_header_link] [![Cloud Posse][logo]](https://cpco.io/homepage) terraform-aws-cloudwatch-flow-logs ![Build Status](https://travis-ci.org/cloudposse/terraform-aws-cloudwatch-flow-logs) ![Latest Release](https://github.com/cloudposse/terraform-aws-cloudwatch-flow-logs/releases/latest) ![Slack Community](https://slack.cloudposse.com) Terraform module for enabling flow logs for vpc and subnets. --- This project is part of our comprehensive "SweetOps" approach towards DevOps. [ ][share_email] [ ][share_googleplus] [ ][share_facebook] [ ][share_reddit] [ ][share_linkedin] [ ][share_twitter] ![Terraform Open Source Modules][terraform_modules] It's 100% Open Source and licensed under the APACHE2. We literally have [hundreds of terraform modules][terraform

Inputs (19)

Name	Type	Description	Default
namespace	string	Namespace (e.g. `cp` or `cloudposse`)	required
vpc_id	string	ID of VPC	required
stage	string	Stage (e.g. `prod`, `dev`, `staging`)	required
eni_ids	list	IDs of ENIs	`[]`
tags	map	Additional tags (e.g. map(`BusinessUnit`,`XYZ`)	`{}`
kms_key_id	string	ID of KMS key	`""`
retention_in_days	string	Number of days you want to retain log events in the log group	`"30"`
filter_pattern	string	Valid CloudWatch Logs filter pattern for subscribing to a filtered stream of log	`"[version, account, eni, source, destina`
shard_count	string	Number of shards that the stream will use	`"1"`
retention_period	string	Length of time data records are accessible after they are added to the stream	`"48"`
shard_level_metrics	list	List of shard-level CloudWatch metrics which can be enabled for the stream	`[ "IncomingBytes", "OutgoingBytes" ]`
name	string	Name (e.g. `bastion` or `db`)	`""`
attributes	list	Additional attributes (e.g. `policy` or `role`)	`[]`
traffic_type	string	Type of traffic to capture. Valid values: ACCEPT,REJECT, ALL	`"ALL"`
subnet_ids	list	IDs of subnets	`[]`
encryption_type	string	GUID for the customer-managed KMS key to use for encryption. The only acceptable	`"NONE"`
enabled	string	Set to false to prevent the module from creating anything	`"true"`
delimiter	string	Delimiter to be used between `name`, `namespace`, `stage`, etc.	`"-"`
region	string	AWS region	`""`