You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
| cloudtrail\_s3\_key\_prefix | S3 key prefix for CloudTrail |`string`|`"cloudtrail"`| no |
78
-
| config\_s3\_bucket\_key\_prefix | S3 key prefix for Config |`string`|`"config"`| no |
79
-
| ecr\_scan\_type | ECR scanning type (BASIC or ENHANCED) |`string`|`"BASIC"`| no |
80
-
| ecr\_scanning\_rules | List of ECR scanning rules |`list(map(string))`|```[ { "filter": "*","frequency": "SCAN_ON_PUSH" } ]```| no |
81
-
| enable\_cloudtrail | Enable AWS CloudTrail service |`bool`|`true`| no |
82
-
| enable\_config | Enable AWS Config service |`bool`|`true`| no |
83
-
| enable\_ebs\_baseline | Boolean whether iam-baseline is enabled. |`bool`|`true`| no |
84
-
| enable\_ecr\_baseline | Enable ECR image scanning |`bool`|`true`| no |
85
-
| enable\_firewall\_manager | Enable AWS Firewall Manager service |`bool`|`true`| no |
86
-
| enable\_guardduty | Enable AWS GuardDuty service |`bool`|`true`| no |
87
-
| enable\_iam\_access\_analyzer | Enable AWS IAM Access Analyzer |`bool`|`true`| no |
88
-
| enable\_iam\_baseline | Boolean whether iam-baseline is enabled. |`bool`|`true`| no |
89
-
| enable\_s3\_baseline | Enable S3 baseline? |`bool`|`true`| no |
90
-
| enable\_s3\_buckets | Enable S3 buckets? |`bool`|`false`| no |
91
-
| enable\_securityhub | Enable AWS Security Hub service |`bool`|`true`| no |
92
-
| force\_destroy | Allow destroy of S3 bucket with objects |`bool`|`false`| no |
93
-
| iam\_allow\_users\_to\_change\_password | Whether to allow users to change their own password. |`bool`|`true`| no |
94
-
| iam\_create\_password\_policy | Define if the password policy should be created. |`bool`|`true`| no |
95
-
| iam\_max\_password\_age | The number of days that an user password is valid. |`number`|`0`| no |
96
-
| iam\_minimum\_password\_length | Minimum length to require for user passwords. |`number`|`14`| no |
97
-
| iam\_password\_reuse\_prevention | The number of previous passwords that users are prevented from reusing. |`number`|`24`| no |
98
-
| iam\_require\_lowercase\_characters | Whether to require lowercase characters for user passwords. |`bool`|`true`| no |
99
-
| iam\_require\_numbers | Whether to require numbers for user passwords. |`bool`|`true`| no |
100
-
| iam\_require\_symbols | Whether to require symbols for user passwords. |`bool`|`true`| no |
101
-
| iam\_require\_uppercase\_characters | Whether to require uppercase characters for user passwords. |`bool`|`true`| no |
102
-
| s3\_block\_public\_acls | Whether Amazon S3 should block public ACLs for buckets in this account. Defaults to true. |`bool`|`true`| no |
103
-
| s3\_block\_public\_policy | Whether Amazon S3 should block public bucket policies for buckets in this account. Defaults to true. |`bool`|`true`| no |
104
-
| s3\_ignore\_public\_acls | Whether Amazon S3 should ignore public ACLs for buckets in this account. Defaults to true. |`bool`|`true`| no |
105
-
| s3\_restrict\_public\_buckets | Whether Amazon S3 should restrict public bucket policies for buckets in this account. Defaults to true. |`bool`|`true`| no |
| tags | Specifies object tags key and value. This applies to all resources created by this module. |`map`|```{ "Environment": "infra","Product": "security","Team": "devops","Terraform": true }```| no |
108
-
| target\_regions | A list of regions to set up with this module. |`list`|```[ "eu-west-1","us-east-1","us-east-2" ]```| no |
109
-
| vpc\_flow\_logs\_s3\_key\_prefix | S3 key prefix for VPC Flow Logs |`string`|`"flow-logs"`| no |
|<aname="input_cloudtrail_s3_key_prefix"></a> [cloudtrail\_s3\_key\_prefix](#input\_cloudtrail\_s3\_key\_prefix)| S3 key prefix for CloudTrail |`string`|`"cloudtrail"`| no |
78
+
|<aname="input_config_s3_bucket_key_prefix"></a> [config\_s3\_bucket\_key\_prefix](#input\_config\_s3\_bucket\_key\_prefix)| S3 key prefix for Config |`string`|`"config"`| no |
79
+
|<aname="input_ecr_scan_type"></a> [ecr\_scan\_type](#input\_ecr\_scan\_type)| ECR scanning type (BASIC or ENHANCED) |`string`|`"BASIC"`| no |
80
+
|<aname="input_ecr_scanning_rules"></a> [ecr\_scanning\_rules](#input\_ecr\_scanning\_rules)| List of ECR scanning rules |`list(map(string))`|<pre>[<br> {<br> "filter": "*",<br> "frequency": "SCAN_ON_PUSH"<br> }<br>]</pre>| no |
81
+
|<aname="input_enable_cloudtrail"></a> [enable\_cloudtrail](#input\_enable\_cloudtrail)| Enable AWS CloudTrail service |`bool`|`true`| no |
82
+
|<aname="input_enable_config"></a> [enable\_config](#input\_enable\_config)| Enable AWS Config service |`bool`|`true`| no |
83
+
|<aname="input_enable_ebs_baseline"></a> [enable\_ebs\_baseline](#input\_enable\_ebs\_baseline)| Boolean whether iam-baseline is enabled. |`bool`|`true`| no |
84
+
|<aname="input_enable_ecr_baseline"></a> [enable\_ecr\_baseline](#input\_enable\_ecr\_baseline)| Enable ECR image scanning |`bool`|`true`| no |
85
+
|<aname="input_enable_firewall_manager"></a> [enable\_firewall\_manager](#input\_enable\_firewall\_manager)| Enable AWS Firewall Manager service |`bool`|`true`| no |
86
+
|<aname="input_enable_guardduty"></a> [enable\_guardduty](#input\_enable\_guardduty)| Enable AWS GuardDuty service |`bool`|`true`| no |
87
+
|<aname="input_enable_iam_access_analyzer"></a> [enable\_iam\_access\_analyzer](#input\_enable\_iam\_access\_analyzer)| Enable AWS IAM Access Analyzer |`bool`|`true`| no |
88
+
|<aname="input_enable_iam_baseline"></a> [enable\_iam\_baseline](#input\_enable\_iam\_baseline)| Boolean whether iam-baseline is enabled. |`bool`|`true`| no |
89
+
|<aname="input_enable_s3_baseline"></a> [enable\_s3\_baseline](#input\_enable\_s3\_baseline)| Enable S3 baseline? |`bool`|`true`| no |
90
+
|<aname="input_enable_s3_buckets"></a> [enable\_s3\_buckets](#input\_enable\_s3\_buckets)| Enable S3 buckets? |`bool`|`false`| no |
91
+
|<aname="input_enable_securityhub"></a> [enable\_securityhub](#input\_enable\_securityhub)| Enable AWS Security Hub service |`bool`|`true`| no |
92
+
|<aname="input_force_destroy"></a> [force\_destroy](#input\_force\_destroy)| Allow destroy of S3 bucket with objects |`bool`|`false`| no |
93
+
|<aname="input_iam_allow_users_to_change_password"></a> [iam\_allow\_users\_to\_change\_password](#input\_iam\_allow\_users\_to\_change\_password)| Whether to allow users to change their own password. |`bool`|`true`| no |
94
+
|<aname="input_iam_create_password_policy"></a> [iam\_create\_password\_policy](#input\_iam\_create\_password\_policy)| Define if the password policy should be created. |`bool`|`true`| no |
95
+
|<aname="input_iam_max_password_age"></a> [iam\_max\_password\_age](#input\_iam\_max\_password\_age)| The number of days that an user password is valid. |`number`|`0`| no |
96
+
|<aname="input_iam_minimum_password_length"></a> [iam\_minimum\_password\_length](#input\_iam\_minimum\_password\_length)| Minimum length to require for user passwords. |`number`|`14`| no |
97
+
|<aname="input_iam_password_reuse_prevention"></a> [iam\_password\_reuse\_prevention](#input\_iam\_password\_reuse\_prevention)| The number of previous passwords that users are prevented from reusing. |`number`|`24`| no |
98
+
|<aname="input_iam_require_lowercase_characters"></a> [iam\_require\_lowercase\_characters](#input\_iam\_require\_lowercase\_characters)| Whether to require lowercase characters for user passwords. |`bool`|`true`| no |
99
+
|<aname="input_iam_require_numbers"></a> [iam\_require\_numbers](#input\_iam\_require\_numbers)| Whether to require numbers for user passwords. |`bool`|`true`| no |
100
+
|<aname="input_iam_require_symbols"></a> [iam\_require\_symbols](#input\_iam\_require\_symbols)| Whether to require symbols for user passwords. |`bool`|`true`| no |
101
+
|<aname="input_iam_require_uppercase_characters"></a> [iam\_require\_uppercase\_characters](#input\_iam\_require\_uppercase\_characters)| Whether to require uppercase characters for user passwords. |`bool`|`true`| no |
102
+
|<aname="input_s3_block_public_acls"></a> [s3\_block\_public\_acls](#input\_s3\_block\_public\_acls)| Whether Amazon S3 should block public ACLs for buckets in this account. Defaults to true. |`bool`|`true`| no |
103
+
|<aname="input_s3_block_public_policy"></a> [s3\_block\_public\_policy](#input\_s3\_block\_public\_policy)| Whether Amazon S3 should block public bucket policies for buckets in this account. Defaults to true. |`bool`|`true`| no |
104
+
|<aname="input_s3_ignore_public_acls"></a> [s3\_ignore\_public\_acls](#input\_s3\_ignore\_public\_acls)| Whether Amazon S3 should ignore public ACLs for buckets in this account. Defaults to true. |`bool`|`true`| no |
105
+
|<aname="input_s3_restrict_public_buckets"></a> [s3\_restrict\_public\_buckets](#input\_s3\_restrict\_public\_buckets)| Whether Amazon S3 should restrict public bucket policies for buckets in this account. Defaults to true. |`bool`|`true`| no |
|<aname="input_tags"></a> [tags](#input\_tags)| Specifies object tags key and value. This applies to all resources created by this module. |`map`|<pre>{<br> "Environment": "infra",<br> "Product": "security",<br> "Team": "devops",<br> "Terraform": true<br>}</pre>| no |
108
+
|<aname="input_target_regions"></a> [target\_regions](#input\_target\_regions)| A list of regions to set up with this module. |`list`|<pre>[<br> "eu-west-1",<br> "us-east-1",<br> "us-east-2"<br>]</pre>| no |
109
+
|<aname="input_vpc_flow_logs_s3_key_prefix"></a> [vpc\_flow\_logs\_s3\_key\_prefix](#input\_vpc\_flow\_logs\_s3\_key\_prefix)| S3 key prefix for VPC Flow Logs |`string`|`"flow-logs"`| no |
0 commit comments