network

DNXLabs/network/aws

Terraform Module HCL AWS

Terraform module for creating basic network resources: VPC, subnets and NAT.

Install

module "network" {

source = "DNXLabs/network/aws"

version = "2.4.2-beta"

}

plain text: /constructs/tfmod-dnxlabs-network-aws/install.txt

⭐ Source on GitHub 📦 Registry page

README

terraform-aws-network ![Lint Status](https://github.com/DNXLabs/terraform-aws-network/actions) ![LICENSE](https://github.com/DNXLabs/terraform-aws-network/blob/master/LICENSE) This module creates the basic network resources for a region. The following resources will be created: - Virtual Private Cloud (VPC) - Enable DNS Hostname - A DNS hostname is a name that uniquely and absolutely names a computer; it's composed of a host name and a domain name. DNS servers resolve DNS hostnames to their corresponding IP addresses. - VPC Flow Logs - AWS Cloudwatch log groups - Subnets - Public - Private - Secure - Transit - Internet Gateway - Route tables for the Public, Private, Secure and Transit subnets - Associate all Route Tables created to the correct subnet - Nat Gateway - Network Access Control

Inputs (50)

Name	Type	Description	Default
vpc_cidr	string	Network CIDR for the VPC	required
name	string	Name prefix for the resources of this stack	required
enable_firewall_default_rule	bool	Enable or disable the default stateful rule.	`true`
nat	bool	Deploy NAT instance(s)	`true`
vpc_cidr_summ	string	Define cidr used to summarize subnets by tier	`"/0"`
tags	map(string)	Extra tags to attach to resources	`{}`
transit_netnum_offset	number	Start with this subnet for secure ones, plus number of AZs	`15`
public_nacl_outbound_tcp_ports	list(string)	TCP Ports to allow outbound to external services (use [0] to allow all ports)	`[ "0" ]`
vpc_flow_logs	bool	Enable or disable VPC Flow Logs	`true`
vpc_endpoint_dynamodb_gateway	bool	Enable or disable VPC Endpoint for DynamoDB (Gateway)	`true`
newbits	number	Number of bits to add to the vpc cidr when building subnets	`5`
transit_nacl_inbound_udp_ports	list(string)	UDP Ports to allow inbound on transit subnet via NACLs (this list cannot be empt	`[ "1194" ]`
vpc_endpoints	list(object( { name	AWS services to create a VPC endpoint on private subnets for (e.g: ssm, ec2, ecr	`[]`
name_pattern	string	Name pattern to use for resources. Options: default, kebab	`"default"`
create_dbsubgroup_secure	bool	Create Secure Subgroup	`true`
create_dbsubgroup_private	bool	Create Private Subgroup	`false`
public_netnum_offset	number	Start with this subnet for public ones, plus number of AZs	`0`
secure_netnum_offset	number	Start with this subnet for secure ones, plus number of AZs	`10`
public_nacl_inbound_tcp_ports	list(string)	TCP Ports to allow inbound on public subnet via NACLs (this list cannot be empty	`[ "80", "443", "22", "1194" ]`
secure_nacl_allow_cidrs	list(string)	CIDRs to allow traffic from secure subnet	`[]`
kubernetes_clusters_type	string	Use either 'owned' or 'shared' for kubernetes cluster tags	`"shared"`
kms_key_arn	string	The ARN of the KMS Key to use when encrypting log data.	`""`
… and 10 more inputs

Outputs (32)

transit_route_table_id

public_nacl_id

private_nacls

private_subnet_ids — List of private subnet IDs

public_route_table_id

secure_route_table_id

private_nacl_id

public_subnet_cidrs — List of public subnet CIDRs

nat_gateway_ids — List of NAT Gateway IDs

private_route_table_id

private_subnets

public_nacls

secure_nacls

private_subnet_cidrs — List of private subnet CIDRs

db_subnet_group_secure_id

db_subnet_group_private_id

secure_nacl_id

vpc_id — ID for VPC created

transit_subnets

nat_gateway

secure_subnet_cidrs — List of secure subnet CIDRs

secure_db_subnet

public_subnet_ids — List of public subnet IDs

db_subnet_group_public_id

internet_gateway_id — ID of Internet Gateway created

transit_nacl_id

public_subnets

secure_subnets

cidr_block — CIDR for VPC created

firewall_subnet_cidrs — List of firewall subnet CIDRs

… and 2 more outputs

Resources (22)

aws_cloudformation_stackaws_cloudwatch_log_groupaws_db_subnet_groupaws_eipaws_flow_logaws_iam_roleaws_iam_role_policyaws_internet_gatewayaws_nat_gatewayaws_network_aclaws_network_acl_ruleaws_networkfirewall_firewallaws_networkfirewall_firewall_policyaws_networkfirewall_rule_groupaws_routeaws_route_tableaws_route_table_associationaws_security_groupaws_subnetaws_vpcaws_vpc_endpointaws_vpc_endpoint_route_table_association

Topics & Tags

terraform hacktoberfest aws

Details

FrameworkTerraform Module

LanguageHCL

Version2.4.2-beta

Cloud AWS

★ Stars6

Forks20

Total downloads6.1k

Inputs50

Outputs32