-
Notifications
You must be signed in to change notification settings - Fork 1
/
Copy pathmain.tf
66 lines (60 loc) · 2.77 KB
/
main.tf
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
provider "aws" {
shared_credentials_file = "$HOME/.aws/credentials"
profile = "${var.aws_profile}"
region = "${var.aws_region}"
}
module "backup_lambda" {
source = "${path.module}/../modules/lambda"
function_name = "${var.environment}_backup_lambda_function"
description = "Takes snapshots of ${var.role} volumes"
filename = "${path.module}/../code/${var.environment}-ebs-snapshot-backup.zip"
handler = "${var.environment}-ebs-snapshot-backup.lambda_handler"
role_arn = "${module.lambda_role.role_arn}"
trigger_service = "events.amazonaws.com"
trigger_service_arn = "${module.backup_event.event_arn}"
}
module "cleanup_lambda" {
source = "${path.module}/../modules/lambda"
function_name = "${var.environment}_cleanup_lambda_function"
description = "Removes ${var.retention} days old snapshot(s) of ${var.role} volumes"
filename = "${path.module}/../code/${var.environment}-ebs-snapshot-cleanup.zip"
handler = "${var.environment}-ebs-snapshot-cleanup.lambda_handler"
role_arn = "${module.lambda_role.role_arn}"
trigger_service = "events.amazonaws.com"
trigger_service_arn = "${module.cleanup_event.event_arn}"
}
module "lambda_role" {
source = "${path.module}/../modules/role"
role_name = "${var.environment}_lambda_role"
policy_name = "${var.environment}_lambda_role_policy"
topic_arn = "${module.sns.topic_arn}"
role_policy = "role-policy.json"
assume_role_policy = "assume-role-policy.json"
}
module "backup_event" {
source = "${path.module}/../modules/event"
rule_name = "${var.environment}_backup_event"
target_arn = "${module.backup_lambda.lambda_arn}"
topic_arn = "${module.sns.topic_arn}"
target_input_json = "event-input.json"
description = "Triggers ${var.environment} backup lambda"
rate = "${var.backup_rate}"
isenabled = "${var.backup_enabled}"
}
module "cleanup_event" {
source = "${path.module}/../modules/event"
rule_name = "${var.environment}_cleanup_event"
target_arn = "${module.cleanup_lambda.lambda_arn}"
target_input_json = "event-input.json"
topic_arn = "${module.sns.topic_arn}"
description = "Triggers ${var.environment} cleanup lambda"
rate = "${var.cleanup_rate}"
isenabled = "${var.cleanup_enabled}"
}
module "sns" {
source = "${path.module}/../modules/sns"
topic_name = "${var.environment}_notify_team"
team_email = "${var.team_email}"
aws_profile = "${var.aws_profile}"
aws_region = "${var.aws_region}"
}