Updated files for policy in ecr api endpoint.

Author: rachit89

.gitignore

@@ -1,14 +1,14 @@
 locals {
-  vpc_name                                       = "vpc-test"
-  aws_region                                     = "ap-northeast-1"
-  aws_account_id                                 = "767398031518"
-  environment                                    = "prod"
+  vpc_name                                       = "vpc-rachit"
+  aws_region                                     = "ap-south-1"
+  aws_account_id                                 = "654654551614"
+  environment                                    = "stg"
   kms_user                                       = null
   vpc_cidr                                       = "10.10.0.0/16"
-  vpc_availability_zones                         = ["ap-northeast-1a", "ap-northeast-1c"]
+  vpc_availability_zones                         = ["ap-south-1a", "ap-south-1b"]
   kms_deletion_window_in_days                    = 7
   enable_key_rotation                            = false
-  is_enabled                                     = true
+  is_enabled                                     = false
   vpc_flow_log_enabled                           = false
   vpn_server_enabled                             = true
   vpc_intra_subnet_enabled                       = true
@@ -23,10 +23,6 @@ locals {
   vpc_flow_log_cloudwatch_log_group_skip_destroy = false
   current_identity                               = data.aws_caller_identity.current.arn
   multi_region                                   = false
-  vpc_public_subnets_counts                      = 2
-  vpc_private_subnets_counts                     = 2
-  vpc_database_subnets_counts                    = 2
-  vpc_intra_subnets_counts                       = 2
   additional_aws_tags = {
     Owner      = "Organization_Name"
     Expires    = "Never"
@@ -38,6 +34,7 @@ data "aws_caller_identity" "current" {}
 
 module "key_pair_vpn" {
   source             = "squareops/keypair/aws"
+  count              = local.vpn_server_enabled ? 1 : 0
   key_name           = format("%s-%s-vpn", local.environment, local.vpc_name)
   environment        = local.environment
   ssm_parameter_path = format("%s-%s-vpn", local.environment, local.vpc_name)
@@ -96,8 +93,10 @@ module "vpc" {
   aws_region                                          = local.aws_region
   vpc_cidr                                            = local.vpc_cidr
   environment                                         = local.environment
+  ipv6_enabled                                        = true
+  ipam_enabled                                        = false
   vpc_flow_log_enabled                                = local.vpc_flow_log_enabled
-  vpn_server_key_pair_name                            = module.key_pair_vpn.key_pair_name
+  vpn_server_key_pair_name                            = local.vpn_server_enabled ? module.key_pair_vpn[0].key_pair_name : ""
   vpc_availability_zones                              = local.vpc_availability_zones
   vpn_server_enabled                                  = local.vpn_server_enabled
   vpc_intra_subnet_enabled                            = local.vpc_intra_subnet_enabled
@@ -113,10 +112,10 @@ module "vpc" {
   vpc_flow_log_cloudwatch_log_group_skip_destroy      = local.vpc_flow_log_cloudwatch_log_group_skip_destroy
   vpc_flow_log_cloudwatch_log_group_retention_in_days = 90
   vpc_flow_log_cloudwatch_log_group_kms_key_arn       = module.kms.key_arn #Enter your kms key arn
-  vpc_public_subnets_counts                           = local.vpc_public_subnets_counts
-  vpc_private_subnets_counts                          = local.vpc_private_subnets_counts
-  vpc_database_subnets_counts                         = local.vpc_database_subnets_counts
-  vpc_intra_subnets_counts                            = local.vpc_intra_subnets_counts
+  vpc_public_subnets_counts                           = 2
+  vpc_private_subnets_counts                          = 2
+  vpc_database_subnets_counts                         = 2
+  vpc_intra_subnets_counts                            = 2
   vpc_endpoint_type_private_s3                        = "Gateway"
   vpc_endpoint_type_ecr_dkr                           = "Interface"
   vpc_endpoint_type_ecr_api                           = "Interface"