Merge pull request #15 from aquasecurity/SAAS-29475

WIP - SAAS-29475 - Auto-Discovery | AWS | Organization | Terraform | Split volume scanning deployment

Author: semyonmor

README.md

@@ -116,6 +116,7 @@ Before using this module, ensure that you have the following:
 | <a name="input_regions"></a> [regions](#input\_regions) | AWS Regions to deploy discovery and scanning resources | `list(string)` | n/a | yes |
 | <a name="input_show_outputs"></a> [show\_outputs](#input\_show\_outputs) | Whether to show outputs after deployment | `bool` | `false` | no |
 | <a name="input_type"></a> [type](#input\_type) | The type of onboarding. Valid values are 'single' or 'organization' onboarding types | `string` | n/a | yes |
+| <a name="input_volume_scanning_deployment"></a> [volume\_scanning\_deployment](#input\_volume\_scanning\_deployment) | Toggle to deploy Volume Scanning resources | `string` | `"true"` | no |
 
 ## Outputs
 

main.tf

@@ -70,4 +70,5 @@ module "organization" {
   custom_vpc_subnet_route_table1_name = var.custom_vpc_subnet_route_table1_name
   custom_vpc_subnet_route_table2_name = var.custom_vpc_subnet_route_table2_name
   custom_cspm_regions                 = var.custom_cspm_regions
+   volume_scanning_deployment         = var.volume_scanning_deployment
 }

modules/organization/main.tf

@@ -42,6 +42,7 @@ resource "aws_cloudformation_stack_set" "stack_set" {
     CustomInternetGatewayName      = var.custom_internet_gateway_name
     CustomSecurityGroupName        = var.custom_security_group_name
     CustomCSPMRegions              = var.custom_cspm_regions
+    VolumeScanningDeployment       = var.volume_scanning_deployment
   }
 }
 

modules/organization/variables.tf

@@ -126,3 +126,9 @@ variable "custom_cspm_regions" {
     type        = string
     default     = ""
 }
+
+variable "volume_scanning_deployment" {
+  description = "Toggle to deploy Volume Scanning resources"
+  type = string
+  default = "true"
+}

variables.tf

@@ -399,3 +399,9 @@ variable "custom_cspm_regions" {
     type        = string
     default     = ""
 }
+
+variable "volume_scanning_deployment" {
+    description = "Toggle to deploy Volume Scanning resources"
+    type        = string
+    default     = "true"
+}