lambda-nuke
diodonfrost/lambda-nuke/aws
Terraform module that creates a lambda to destroy all resources in an AWS account.
terraform-aws-lambda-nuke  Terraform module which create lambda which nuke all resources on aws account Requirements This role was developed using python lib boto3 1.13.34 Backwards compatibility is not guaranteed. Terraform versions For Terraform 0.15. use version v2. of this module. If you are using Terraform 0.11 you can use versions v1.. Caveats This following resources are not supported because creation timestamp are not present: Compute - ecs Database: - dax Usage ``hcl module "nuke_everything_older_than_7d" { source = "diodonfrost/lambda-nuke/aws" name = "nuke_everything" cloudwatch_schedule_expression = "cron(0 00 ? FRI )" exclude_resources = "key_pairs,rds" older_than = "7d" } ` Examples Compute-nuke Create lam
| Name | Type | Description | Default |
|---|---|---|---|
| kms_key_arn | string | The ARN for the KMS encryption key. If this configuration is not provided when e | null |
| exclude_resources | string | Define the resources that will not be destroyed | null |
| older_than | string | Only destroy resources that were created before a certain period | "0d" |
| tags | map(any) | A map of tags to assign to the resources. | null |
| cloudwatch_schedule_expression | string | Define the aws cloudwatch event rule schedule expression | "cron(0 22 ? * MON-FRI *)" |
| name | string | Define name to use for lambda function, cloudwatch event and iam role | "everything" |
| custom_iam_role_arn | string | Custom IAM role arn for the scheduling lambda | null |
| aws_regions | list(string) | A list of one or more aws regions where the lambda will be apply, default use th | null |
| runtime | string | Lambda function runtime | "python3.11" |
nuke_lambda_function_last_modified — The date Lambda function was last modifiednuke_lambda_function_version — Latest published version of your Lambda functionscheduler_log_group_arn — The Amazon Resource Name (ARN) specifying the log grouplambda_iam_role_arn — The ARN of the IAM role used by Lambda functionnuke_function_name — The name of the Lambda functionnuke_lambda_invoke_arn — The ARN to be used for invoking Lambda function from API Gatewayscheduler_log_group_name — The name of the scheduler log grouplambda_iam_role_name — The name of the IAM role used by Lambda functionnuke_lambda_arn — The ARN of the Lambda function