Movatterモバイル変換


[0]ホーム

URL:


Skip to content

Navigation Menu

Sign in
Appearance settings

Search code, repositories, users, issues, pull requests...

Provide feedback

We read every piece of feedback, and take your input very seriously.

Saved searches

Use saved searches to filter your results more quickly

Sign up
Appearance settings

Coalfire AWS Account Setup Terraform Module

License

NotificationsYou must be signed in to change notification settings

CiscoOpsStack/terraform-aws-account-setup-ops_stack

 
 

Repository files navigation

Coalfire

AWS Account Setup Terraform Module

Description

The AWS account set up module creates the initial account configuration for your project, including IAM roles, KMS keys, S3 installs bucket, and more.

FedRAMP Compliance: High

Resource List

Resources that are created as a part of this module include:

  • IAM roles
  • IAM policies
  • IAM instance profiles
  • KMS keys
  • S3 buckets
  • Security core module resources

Assumptions

  • application_account_numbers isn't required - you can feed itapplication_account_numbers=[""]

Usage

module "account-setup" {  source = "github.com/Coalfire-CF/terraform-aws-account-setup"  aws_region = "us-east-1"  default_aws_region = "us-east-1"  application_account_numbers = ["account-number1", "account-number2", "account-number3"]  account_number = "your-account-number"  resource_prefix = "pre"  create_cloudtrail = true  partition = "aws"  ad_secrets_manager_path = "your/ad/path"  enable_aws_config = true  delete_after = 90}

Requirements

NameVersion
terraform>=1.5.0
aws~> 5.0

Providers

NameVersion
aws~> 5.0

Modules

NameSourceVersion
additional_kms_keysgithub.com/Coalfire-CF/terraform-aws-kmsv0.0.6
backup_kms_keygithub.com/Coalfire-CF/terraform-aws-kmsv0.0.6
cloudwatch_kms_keygithub.com/Coalfire-CF/terraform-aws-kmsv0.0.6
ebs_kms_keygithub.com/Coalfire-CF/terraform-aws-kmsv0.0.6
lambda_kms_keygithub.com/Coalfire-CF/terraform-aws-kmsv0.0.6
rds_kms_keygithub.com/Coalfire-CF/terraform-aws-kmsv0.0.6
s3-accesslogsgithub.com/Coalfire-CF/terraform-aws-s3v1.0.1
s3-backupsgithub.com/Coalfire-CF/terraform-aws-s3v1.0.1
s3-elb-accesslogsgithub.com/Coalfire-CF/terraform-aws-s3v1.0.1
s3-installsgithub.com/Coalfire-CF/terraform-aws-s3v1.0.1
security-coregithub.com/Coalfire-CF/terraform-aws-securitycorev0.0.17
sm_kms_keygithub.com/Coalfire-CF/terraform-aws-kmsv0.0.6

Resources

NameType
aws_iam_instance_profile.packer_profileresource
aws_iam_policy.packer_policyresource
aws_iam_policy_attachment.packer_access_attach_policyresource
aws_iam_role.packer_roleresource
aws_kms_grant.packer_ebsresource
aws_kms_grant.packer_s3resource
aws_elb_service_account.maindata source
aws_iam_policy_document.cloudwatch_keydata source
aws_iam_policy_document.ebs_keydata source
aws_iam_policy_document.elb_accesslogs_bucket_policydata source
aws_iam_policy_document.packer_assume_role_policy_documentdata source
aws_iam_policy_document.packer_policy_documentdata source
aws_iam_policy_document.s3_accesslogs_bucket_policydata source
aws_iam_policy_document.secrets_manager_keydata source
aws_partition.currentdata source

Inputs

NameDescriptionTypeDefaultRequired
account_numberThe AWS account number resources are being deployed intostringn/ayes
additional_kms_keysa list of maps of any additional KMS keys that need to be createdlist(map(string))[]no
application_account_numbersAWS account numbers for all application accountslist(string)n/ayes
aws_backup_plan_nameAWS Backup plan namestring"fedramp-aws-backup-plan"no
aws_lb_account_idshttps://docs.aws.amazon.com/elasticloadbalancing/latest/application/load-balancer-access-logs.htmlmap(string)
{
"us-east-1": "127311923021",
"us-east-2": "033677994240",
"us-gov-east-1": "190560391635",
"us-gov-west-1": "048591011584",
"us-west-2": "797873946194"
}
no
aws_regionThe AWS region to create resources instringn/ayes
backup_rule_nameAWS Backup rule namestring"fedramp-aws-backup-default-rule"no
backup_selection_tag_valueAWS Backup tag valuesstring"fedramp-daily-aws-backups"no
backup_vault_nameAWS Backup vault namestring"fedramp-aws-backup-vault"no
config_delivery_frequencyAWS Config delivery frequenciesstring"One_Hour"no
create_backup_kms_keycreate KMS key for AWS Backupsbooltrueno
create_cloudtrailWhether or not to create cloudtrail resourcesboolfalseno
create_cloudwatch_kms_keycreate KMS key for AWS Cloudwatchbooltrueno
create_dynamo_kms_keycreate KMS key for dynamodbbooltrueno
create_ebs_kms_keycreate KMS key for ebsbooltrueno
create_lambda_kms_keycreate KMS key for lambdabooltrueno
create_rds_kms_keycreate KMS key for rdsbooltrueno
create_s3_kms_keycreate KMS key for S3booltrueno
create_sm_kms_keycreate KMS key for secrets managerbooltrueno
default_aws_regionThe default AWS region to create resources instringn/ayes
delete_afterNumber of days after which a recovery point should be deletednumber35no
enable_aws_configEnable AWS config for this accountboolfalseno
lambda_time_zoneThe time zone for lambda functionsstring"US/Eastern"no
resource_prefixThe prefix for the s3 bucket namesstringn/ayes

Outputs

NameDescription
additional_kms_key_arnsn/a
additional_kms_key_idsn/a
backup_kms_key_arnn/a
backup_kms_key_idn/a
cloudwatch_kms_key_arnn/a
cloudwatch_kms_key_idn/a
dynamo_kms_key_arnn/a
dynamo_kms_key_idn/a
dynamodb_table_namen/a
ebs_kms_key_arnn/a
ebs_kms_key_idn/a
lambda_kms_key_arnn/a
lambda_kms_key_idn/a
rds_kms_key_arnn/a
rds_kms_key_idn/a
s3_access_logs_arnn/a
s3_access_logs_idn/a
s3_backups_arnn/a
s3_backups_idn/a
s3_elb_access_logs_arnn/a
s3_elb_access_logs_idn/a
s3_installs_arnn/a
s3_installs_idn/a
s3_kms_key_arnn/a
s3_kms_key_idn/a
s3_tstate_bucket_namen/a
sm_kms_key_arnn/a
sm_kms_key_idn/a

Contributing

If you're interested in contributing to our projects, please review theContributing Guidelines. And send an email toour team to receive a copy of our CLA and start the onboarding process.

License

License

Copyright

Copyright © 2023 Coalfire Systems Inc.

About

Coalfire AWS Account Setup Terraform Module

Resources

License

Contributing

Stars

Watchers

Forks

Packages

No packages published

Languages

  • HCL100.0%

[8]ページ先頭

©2009-2025 Movatter.jp