mq-broker
cloudposse/mq-broker/aws
Terraform module for provisioning an AmazonMQ broker
Terraform module to provision AmazonMQ resources on AWS > [!TIP] > #### 👽 Use Atmos with Terraform > Cloud Posse uses atmos to easily orchestrate multiple environments using Terraform. > Works with Github Actions, Atlantis, or Spacelift. > > > Watch demo of using Atmos with Terraform > > Example of running atmos to manage infrastructure from our Quick Start tutorial. > Introduction This module provisions the following resources: - ActiveMQ broker - RabbitMQ broker - Security group rules to allow access to the broker Admin and application users are created and credentials written to SSM if not passed in as variables. Usage For a complete example, see examples/complete. For automated tests of the complete example using bats and Terratest (which tests and deploys the example on AWS), see test
| Name | Type | Description | Default |
|---|---|---|---|
| subnet_ids | list(string) | List of VPC subnet IDs | required |
| vpc_id | string | The ID of the VPC to create the broker in | required |
| mq_application_password | list(string) | Application password | [] |
| ssm_parameters_enabled | bool | Whether to create SSM parameters for MQ users and passwords | true |
| mq_admin_user_ssm_parameter_name | string | SSM parameter name for Admin username | "mq_admin_username" |
| context | any | Single object for setting entire context at once. See description of individual | {
"additional_tag_map": {},
"attribu |
| allowed_security_groups | list(string) | DEPRECATED: Use `allowed_security_group_ids` instead. A list of Security Group I | [] |
| tenant | string | ID element _(Rarely used, not included by default)_. A customer identifier, indi | null |
| environment | string | ID element. Usually used for region e.g. 'uw2', 'us-west-2', OR role 'prod', 'st | null |
| attributes | list(string) | ID element. Additional attributes (e.g. `workers` or `cluster`) to add to `id`, | [] |
| label_key_case | string | Controls the letter case of the `tags` keys (label names) for tags generated by | null |
| descriptor_formats | any | Describe additional descriptors to be output in the `descriptors` output map. Ma | {} |
| use_existing_security_groups | bool | DEPRECATED: Use `create_security_group` instead. Historical description: Set to | null |
| deployment_mode | string | The deployment mode of the broker. Supported: SINGLE_INSTANCE and ACTIVE_STANDBY | "ACTIVE_STANDBY_MULTI_AZ" |
| general_log_enabled | bool | Enables general logging via CloudWatch | true |
| regex_replace_chars | string | Terraform regular expression (regex) string. Characters matching the regex will | null |
| publicly_accessible | bool | Whether to enable connections from applications outside of the VPC that hosts th | false |
| maintenance_time_of_day | string | The maintenance time, in 24-hour format. e.g. 02:00 | "03:00" |
| mq_admin_user | list(string) | Admin username | [] |
| maintenance_day_of_week | string | The maintenance day of the week. e.g. MONDAY, TUESDAY, or WEDNESDAY | "SUNDAY" |
| encryption_enabled | bool | Flag to enable/disable Amazon MQ encryption at rest | true |
| delimiter | string | Delimiter to be used between ID elements. Defaults to `-` (hyphen). Set to `""` | null |
| … and 10 more inputs | |||
primary_ssl_endpoint — AmazonMQ primary SSL endpointprimary_amqp_ssl_endpoint — AmazonMQ primary AMQP+SSL endpointprimary_mqtt_ssl_endpoint — AmazonMQ primary MQTT+SSL endpointsecondary_ssl_endpoint — AmazonMQ secondary SSL endpointbroker_arn — AmazonMQ broker ARNprimary_wss_endpoint — AmazonMQ primary WSS endpointprimary_ip_address — AmazonMQ primary IP addresssecondary_amqp_ssl_endpoint — AmazonMQ secondary AMQP+SSL endpointsecondary_ip_address — AmazonMQ secondary IP addressadmin_username — AmazonMQ admin usernameapplication_username — AmazonMQ application usernamesecurity_group_id — The ID of the created security groupsecondary_stomp_ssl_endpoint — AmazonMQ secondary STOMP+SSL endpointbroker_id — AmazonMQ broker IDprimary_stomp_ssl_endpoint — AmazonMQ primary STOMP+SSL endpointsecondary_console_url — AmazonMQ secondary web console URLapplication_password — AmazonMQ application passwordsecurity_group_arn — The ARN of the created security groupsecurity_group_name — The name of the created security groupsecondary_wss_endpoint — AmazonMQ secondary WSS endpointsecondary_mqtt_ssl_endpoint — AmazonMQ secondary MQTT+SSL endpointprimary_console_url — AmazonMQ active web console URL