teleport-storage

cloudposse/teleport-storage/aws

Terraform Module HCL AWS

Gravitational Teleport backing services (S3, DynamoDB)

Install
module "teleport-storage" {
source = "cloudposse/teleport-storage/aws"
version = "0.4.0"
}
plain text: /constructs/tfmod-cloudposse-teleport-storage-aws/install.txt
⭐ Source on GitHub 📦 Registry page
README

[![README Header][readme_header_img]][readme_header_link] [![Cloud Posse][logo]](https://cpco.io/homepage) terraform-aws-teleport-storage ![Codefresh Build Status](https://g.codefresh.io/public/accounts/cloudposse/pipelines/5d04407b1fc622c0cf6d3df8) ![Latest Release](https://github.com/cloudposse/terraform-aws-teleport-storage/releases/latest) ![Slack Community](https://slack.cloudposse.com) This Terraform module provisions: An S3 bucket for session logs in Gravitational Teleport 2 DynamoDB tables to use as storage backend in Teleport Features Using DynamoDB as a storage backend allows highly available deployments of Teleport Auth services. Using S3 for Teleport session storage has many advantages: Encryption at rest Versioned objects Lifecycle Support to expunge old sessions (e.g. after 2

Inputs (17)
NameTypeDescriptionDefault
namespacestringNamespace (e.g. `cp` or `cloudposse`) required
stagestringStage (e.g. `prod`, `dev`, `staging`) required
namestringName (e.g. `bastion` or `db`) required
delimiterstringDelimiter to be used between `name`, `namespace`, `stage`, etc."-"
autoscale_read_targetstringDynamoDB autoscale read target50
iam_role_max_session_durationstringThe maximum session duration (in seconds) for the role. Can have a value from 1 3600
prefixstringS3 bucket prefix""
standard_transition_daysstringNumber of days to persist in the standard storage tier before moving to the glac"30"
glacier_transition_daysstringNumber of days after which to move the data to the glacier storage tier"60"
autoscale_max_read_capacitystringDynamoDB autoscale read max capacity100
autoscale_min_write_capacitystringDynamoDB autoscale write min capacity10
autoscale_max_write_capacitystringDynamoDB autoscale write max capacity100
attributeslistAdditional attributes (e.g. `policy` or `role`)[]
tagsmapAdditional tags (e.g. map('BusinessUnit`,`XYZ`){}
expiration_daysstringNumber of days after which to expunge the objects"90"
autoscale_write_targetstringDynamoDB autoscale write target50
autoscale_min_read_capacitystringDynamoDB autoscale read min capacity10
Outputs (7)
s3_bucket_id — Session storage S3 bucket id
s3_bucket_domain_name — Session storage S3 bucket domain name
s3_bucket_arn — Session storage S3 bucket ARN
dynamodb_audit_table_id — DynamoDB audit table id
dynamodb_audit_table_arn — DynamoDB audit table ARN
dynamodb_state_table_id — DynamoDB state table id
dynamodb_state_table_arn — DynamoDB state table ARN
Resources (4)
aws_iam_instance_profileaws_iam_policyaws_iam_roleaws_iam_role_policy_attachment
Details
FrameworkTerraform Module
LanguageHCL
Version0.4.0
Cloud AWS
★ Stars12
Forks6
Total downloads6.6k
Inputs17
Outputs7
Resources4
LicenseApache-2.0
Namespacecloudposse
Updated