| amazon_side_asn |
The Autonomous System Number (ASN) for the Amazon side of the gateway. By default the virtual private gateway is created with the current default Amazon ASN. |
string |
"64512" |
no |
| apigw_endpoint_private_dns_enabled |
Whether or not to associate a private hosted zone with the specified VPC for API GW endpoint |
string |
"false" |
no |
| apigw_endpoint_security_group_ids |
The ID of one or more security groups to associate with the network interface for API GW endpoint |
list |
<list> |
no |
| apigw_endpoint_subnet_ids |
The ID of one or more subnets in which to create a network interface for API GW endpoint. Only a single subnet within an AZ is supported. If omitted, private subnets will be used. |
list |
<list> |
no |
| assign_generated_ipv6_cidr_block |
Requests an Amazon-provided IPv6 CIDR block with a /56 prefix length for the VPC. You cannot specify the range of IP addresses, or the size of the CIDR block |
string |
"false" |
no |
| azs |
A list of availability zones in the region |
list |
<list> |
no |
| cidr |
The CIDR block for the VPC. Default value is a valid CIDR, but not acceptable by AWS and should be overridden |
string |
"0.0.0.0/0" |
no |
| create_database_internet_gateway_route |
Controls if an internet gateway route for public database access should be created |
string |
"false" |
no |
| create_database_nat_gateway_route |
Controls if a nat gateway route should be created to give internet access to the database subnets |
string |
"false" |
no |
| create_database_subnet_group |
Controls if database subnet group should be created |
string |
"true" |
no |
| create_database_subnet_route_table |
Controls if separate route table for database should be created |
string |
"false" |
no |
| create_elasticache_subnet_group |
Controls if elasticache subnet group should be created |
string |
"true" |
no |
| create_elasticache_subnet_route_table |
Controls if separate route table for elasticache should be created |
string |
"false" |
no |
| create_redshift_subnet_group |
Controls if redshift subnet group should be created |
string |
"true" |
no |
| create_redshift_subnet_route_table |
Controls if separate route table for redshift should be created |
string |
"false" |
no |
| create_vpc |
Controls if VPC should be created (it affects almost all resources) |
string |
"true" |
no |
| database_acl_tags |
Additional tags for the database subnets network ACL |
map |
<map> |
no |
| database_dedicated_network_acl |
Whether to use dedicated network ACL (not default) and custom rules for database subnets |
string |
"false" |
no |
| database_inbound_acl_rules |
Database subnets inbound network ACL rules |
list |
<list> |
no |
| database_outbound_acl_rules |
Database subnets outbound network ACL rules |
list |
<list> |
no |
| database_route_table_tags |
Additional tags for the database route tables |
map |
<map> |
no |
| database_subnet_group_tags |
Additional tags for the database subnet group |
map |
<map> |
no |
| database_subnet_suffix |
Suffix to append to database subnets name |
string |
"db" |
no |
| database_subnet_tags |
Additional tags for the database subnets |
map |
<map> |
no |
| database_subnets |
A list of database subnets |
list |
<list> |
no |
| default_network_acl_egress |
List of maps of egress rules to set on the Default Network ACL |
list |
<list> |
no |
| default_network_acl_ingress |
List of maps of ingress rules to set on the Default Network ACL |
list |
<list> |
no |
| default_network_acl_name |
Name to be used on the Default Network ACL |
string |
"" |
no |
| default_network_acl_tags |
Additional tags for the Default Network ACL |
map |
<map> |
no |
| default_vpc_enable_classiclink |
Should be true to enable ClassicLink in the Default VPC |
string |
"false" |
no |
| default_vpc_enable_dns_hostnames |
Should be true to enable DNS hostnames in the Default VPC |
string |
"false" |
no |
| default_vpc_enable_dns_support |
Should be true to enable DNS support in the Default VPC |
string |
"true" |
no |
| default_vpc_name |
Name to be used on the Default VPC |
string |
"" |
no |
| default_vpc_tags |
Additional tags for the Default VPC |
map |
<map> |
no |
| dhcp_options_domain_name |
Specifies DNS name for DHCP options set |
string |
"" |
no |
| dhcp_options_domain_name_servers |
Specify a list of DNS server addresses for DHCP options set, default to AWS provided |
list |
<list> |
no |
| dhcp_options_netbios_name_servers |
Specify a list of netbios servers for DHCP options set |
list |
<list> |
no |
| dhcp_options_netbios_node_type |
Specify netbios node_type for DHCP options set |
string |
"" |
no |
| dhcp_options_ntp_servers |
Specify a list of NTP servers for DHCP options set |
list |
<list> |
no |
| dhcp_options_tags |
Additional tags for the DHCP option set |
map |
<map> |
no |
| ec2_endpoint_private_dns_enabled |
Whether or not to associate a private hosted zone with the specified VPC for EC2 endpoint |
string |
"false" |
no |
| ec2_endpoint_security_group_ids |
The ID of one or more security groups to associate with the network interface for EC2 endpoint |
list |
<list> |
no |
| ec2_endpoint_subnet_ids |
The ID of one or more subnets in which to create a network interface for EC2 endpoint. Only a single subnet within an AZ is supported. If omitted, private subnets will be used. |
list |
<list> |
no |
| ec2messages_endpoint_private_dns_enabled |
Whether or not to associate a private hosted zone with the specified VPC for EC2MESSAGES endpoint |
string |
"false" |
no |
| ec2messages_endpoint_security_group_ids |
The ID of one or more security groups to associate with the network interface for EC2MESSAGES endpoint |
list |
<list> |
no |
| ec2messages_endpoint_subnet_ids |
The ID of one or more subnets in which to create a network interface for EC2MESSAGES endpoint. Only a single subnet within an AZ is supported. If omitted, private subnets will be used. |
list |
<list> |
no |
| ecr_api_endpoint_private_dns_enabled |
Whether or not to associate a private hosted zone with the specified VPC for ECR API endpoint |
string |
"false" |
no |
| ecr_api_endpoint_security_group_ids |
The ID of one or more security groups to associate with the network interface for ECR API endpoint |
list |
<list> |
no |
| ecr_api_endpoint_subnet_ids |
The ID of one or more subnets in which to create a network interface for ECR api endpoint. If omitted, private subnets will be used. |
list |
<list> |
no |
| ecr_dkr_endpoint_private_dns_enabled |
Whether or not to associate a private hosted zone with the specified VPC for ECR DKR endpoint |
string |
"false" |
no |
| ecr_dkr_endpoint_security_group_ids |
The ID of one or more security groups to associate with the network interface for ECR DKR endpoint |
list |
<list> |
no |
| ecr_dkr_endpoint_subnet_ids |
The ID of one or more subnets in which to create a network interface for ECR dkr endpoint. If omitted, private subnets will be used. |
list |
<list> |
no |
| elasticache_acl_tags |
Additional tags for the elasticache subnets network ACL |
map |
<map> |
no |
| elasticache_dedicated_network_acl |
Whether to use dedicated network ACL (not default) and custom rules for elasticache subnets |
string |
"false" |
no |
| elasticache_inbound_acl_rules |
Elasticache subnets inbound network ACL rules |
list |
<list> |
no |
| elasticache_outbound_acl_rules |
Elasticache subnets outbound network ACL rules |
list |
<list> |
no |
| elasticache_route_table_tags |
Additional tags for the elasticache route tables |
map |
<map> |
no |
| elasticache_subnet_suffix |
Suffix to append to elasticache subnets name |
string |
"elasticache" |
no |
| elasticache_subnet_tags |
Additional tags for the elasticache subnets |
map |
<map> |
no |
| elasticache_subnets |
A list of elasticache subnets |
list |
<list> |
no |
| enable_apigw_endpoint |
Should be true if you want to provision an api gateway endpoint to the VPC |
string |
"false" |
no |
| enable_dhcp_options |
Should be true if you want to specify a DHCP options set with a custom domain name, DNS servers, NTP servers, netbios servers, and/or netbios server type |
string |
"false" |
no |
| enable_dns_hostnames |
Should be true to enable DNS hostnames in the VPC |
string |
"false" |
no |
| enable_dns_support |
Should be true to enable DNS support in the VPC |
string |
"true" |
no |
| enable_dynamodb_endpoint |
Should be true if you want to provision a DynamoDB endpoint to the VPC |
string |
"false" |
no |
| enable_ec2_endpoint |
Should be true if you want to provision an EC2 endpoint to the VPC |
string |
"false" |
no |
| enable_ec2messages_endpoint |
Should be true if you want to provision an EC2MESSAGES endpoint to the VPC |
string |
"false" |
no |
| enable_ecr_api_endpoint |
Should be true if you want to provision an ecr api endpoint to the VPC |
string |
"false" |
no |
| enable_ecr_dkr_endpoint |
Should be true if you want to provision an ecr dkr endpoint to the VPC |
string |
"false" |
no |
| enable_nat_gateway |
Should be true if you want to provision NAT Gateways for each of your private networks |
string |
"false" |
no |
| enable_public_redshift |
Controls if redshift should have public routing table |
string |
"false" |
no |
| enable_s3_endpoint |
Should be true if you want to provision an S3 endpoint to the VPC |
string |
"false" |
no |
| enable_ssm_endpoint |
Should be true if you want to provision an SSM endpoint to the VPC |
string |
"false" |
no |
| enable_ssmmessages_endpoint |
Should be true if you want to provision a SSMMESSAGES endpoint to the VPC |
string |
"false" |
no |
| enable_vpn_gateway |
Should be true if you want to create a new VPN Gateway resource and attach it to the VPC |
string |
"false" |
no |
| external_nat_ip_ids |
List of EIP IDs to be assigned to the NAT Gateways (used in combination with reuse_nat_ips) |
list |
<list> |
no |
| igw_tags |
Additional tags for the internet gateway |
map |
<map> |
no |
| instance_tenancy |
A tenancy option for instances launched into the VPC |
string |
"default" |
no |
| intra_acl_tags |
Additional tags for the intra subnets network ACL |
map |
<map> |
no |
| intra_dedicated_network_acl |
Whether to use dedicated network ACL (not default) and custom rules for intra subnets |
string |
"false" |
no |
| intra_inbound_acl_rules |
Intra subnets inbound network ACLs |
list |
<list> |
no |
| intra_outbound_acl_rules |
Intra subnets outbound network ACLs |
list |
<list> |
no |
| intra_route_table_tags |
Additional tags for the intra route tables |
map |
<map> |
no |
| intra_subnet_suffix |
Suffix to append to intra subnets name |
string |
"intra" |
no |
| intra_subnet_tags |
Additional tags for the intra subnets |
map |
<map> |
no |
| intra_subnets |
A list of intra subnets |
list |
<list> |
no |
| manage_default_network_acl |
Should be true to adopt and manage Default Network ACL |
string |
"false" |
no |
| manage_default_vpc |
Should be true to adopt and manage Default VPC |
string |
"false" |
no |
| map_public_ip_on_launch |
Should be false if you do not want to auto-assign public IP on launch |
string |
"true" |
no |
| name |
Name to be used on all the resources as identifier |
string |
"" |
no |
| nat_eip_tags |
Additional tags for the NAT EIP |
map |
<map> |
no |
| nat_gateway_tags |
Additional tags for the NAT gateways |
map |
<map> |
no |
| one_nat_gateway_per_az |
Should be true if you want only one NAT Gateway per availability zone. Requires var.azs to be set, and the number of public_subnets created to be greater than or equal to the number of availability zones specified in var.azs. |
string |
"false" |
no |
| private_acl_tags |
Additional tags for the private subnets network ACL |
map |
<map> |
no |
| private_dedicated_network_acl |
Whether to use dedicated network ACL (not default) and custom rules for private subnets |
string |
"false" |
no |
| private_inbound_acl_rules |
Private subnets inbound network ACLs |
list |
<list> |
no |
| private_outbound_acl_rules |
Private subnets outbound network ACLs |
list |
<list> |
no |
| private_route_table_tags |
Additional tags for the private route tables |
map |
<map> |
no |
| private_subnet_suffix |
Suffix to append to private subnets name |
string |
"private" |
no |
| private_subnet_tags |
Additional tags for the private subnets |
map |
<map> |
no |
| private_subnets |
A list of private subnets inside the VPC |
list |
<list> |
no |
| propagate_private_route_tables_vgw |
Should be true if you want route table propagation |
string |
"false" |
no |
| propagate_public_route_tables_vgw |
Should be true if you want route table propagation |
string |
"false" |
no |
| public_acl_tags |
Additional tags for the public subnets network ACL |
map |
<map> |
no |
| public_dedicated_network_acl |
Whether to use dedicated network ACL (not default) and custom rules for public subnets |
string |
"false" |
no |
| public_inbound_acl_rules |
Public subnets inbound network ACLs |
list |
<list> |
no |
| public_outbound_acl_rules |
Public subnets outbound network ACLs |
list |
<list> |
no |
| public_route_table_tags |
Additional tags for the public route tables |
map |
<map> |
no |
| public_subnet_suffix |
Suffix to append to public subnets name |
string |
"public" |
no |
| public_subnet_tags |
Additional tags for the public subnets |
map |
<map> |
no |
| public_subnets |
A list of public subnets inside the VPC |
list |
<list> |
no |
| redshift_acl_tags |
Additional tags for the redshift subnets network ACL |
map |
<map> |
no |
| redshift_dedicated_network_acl |
Whether to use dedicated network ACL (not default) and custom rules for redshift subnets |
string |
"false" |
no |
| redshift_inbound_acl_rules |
Redshift subnets inbound network ACL rules |
list |
<list> |
no |
| redshift_outbound_acl_rules |
Redshift subnets outbound network ACL rules |
list |
<list> |
no |
| redshift_route_table_tags |
Additional tags for the redshift route tables |
map |
<map> |
no |
| redshift_subnet_group_tags |
Additional tags for the redshift subnet group |
map |
<map> |
no |
| redshift_subnet_suffix |
Suffix to append to redshift subnets name |
string |
"redshift" |
no |
| redshift_subnet_tags |
Additional tags for the redshift subnets |
map |
<map> |
no |
| redshift_subnets |
A list of redshift subnets |
list |
<list> |
no |
| reuse_nat_ips |
Should be true if you don't want EIPs to be created for your NAT Gateways and will instead pass them in via the 'external_nat_ip_ids' variable |
string |
"false" |
no |
| secondary_cidr_blocks |
List of secondary CIDR blocks to associate with the VPC to extend the IP Address pool |
list |
<list> |
no |
| single_nat_gateway |
Should be true if you want to provision a single shared NAT Gateway across all of your private networks |
string |
"false" |
no |
| ssm_endpoint_private_dns_enabled |
Whether or not to associate a private hosted zone with the specified VPC for SSM endpoint |
string |
"false" |
no |
| ssm_endpoint_security_group_ids |
The ID of one or more security groups to associate with the network interface for SSM endpoint |
list |
<list> |
no |
| ssm_endpoint_subnet_ids |
The ID of one or more subnets in which to create a network interface for SSM endpoint. Only a single subnet within an AZ is supported. If omitted, private subnets will be used. |
list |
<list> |
no |
| ssmmessages_endpoint_private_dns_enabled |
Whether or not to associate a private hosted zone with the specified VPC for SSMMESSAGES endpoint |
string |
"false" |
no |
| ssmmessages_endpoint_security_group_ids |
The ID of one or more security groups to associate with the network interface for SSMMESSAGES endpoint |
list |
<list> |
no |
| ssmmessages_endpoint_subnet_ids |
The ID of one or more subnets in which to create a network interface for SSMMESSAGES endpoint. Only a single subnet within an AZ is supported. If omitted, private subnets will be used. |
list |
<list> |
no |
| tags |
A map of tags to add to all resources |
map |
<map> |
no |
| vpc_tags |
Additional tags for the VPC |
map |
<map> |
no |
| vpn_gateway_id |
ID of VPN Gateway to attach to the VPC |
string |
"" |
no |
| vpn_gateway_tags |
Additional tags for the VPN gateway |
map |
<map> |
no |