diff --git a/README.md b/README.md index 4b0d4492..ce4be9d2 100644 --- a/README.md +++ b/README.md @@ -44,7 +44,7 @@ module "web_server_sg" { description = "Security group for web-server with HTTP ports open within VPC" vpc_id = "vpc-12345678" - ingress_cidr_blocks = ["10.10.0.0/16"] + ingress_cidr_ipv4 = ["10.10.0.0/16"] } ``` @@ -58,19 +58,19 @@ module "vote_service_sg" { description = "Security group for user-service with custom ports open within VPC, and PostgreSQL publicly open" vpc_id = "vpc-12345678" - ingress_cidr_blocks = ["10.10.0.0/16"] + ingress_cidr_ipv4 = ["10.10.0.0/16"] ingress_rules = ["https-443-tcp"] - ingress_with_cidr_blocks = [ + ingress_with_cidr_ipv4 = [ { from_port = 8080 to_port = 8090 - protocol = "tcp" + ip_protocol = "tcp" description = "User-service ports" - cidr_blocks = "10.10.0.0/16" + cidr_ipv4 = "10.10.0.0/16" }, { rule = "postgresql-tcp" - cidr_blocks = "0.0.0.0/0" + cidr_ipv4 = "0.0.0.0/0" }, ] } @@ -95,19 +95,19 @@ module "db_computed_source_sg" { vpc_id = "vpc-12345678" # these are valid values also - `module.vpc.vpc_id` and `local.vpc_id` - computed_ingress_with_source_security_group_id = [ + computed_ingress_with_referenced_security_group_id = [ { rule = "mysql-tcp" source_security_group_id = module.http_sg.security_group_id } ] - number_of_computed_ingress_with_source_security_group_id = 1 + number_of_computed_ingress_with_referenced_security_group_id = 1 } module "db_computed_sg" { # omitted for brevity - ingress_cidr_blocks = ["10.10.0.0/16", data.aws_security_group.default.id] + ingress_cidr_ipv4 = ["10.10.0.0/16", data.aws_security_group.default.id] computed_ingress_cidr_blocks = [module.vpc.vpc_cidr_block] number_of_computed_ingress_cidr_blocks = 1 @@ -178,30 +178,49 @@ No modules. |------|------| | [aws_security_group.this](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/security_group) | resource | | [aws_security_group.this_name_prefix](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/security_group) | resource | -| [aws_security_group_rule.computed_egress_rules](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/security_group_rule) | resource | -| [aws_security_group_rule.computed_egress_with_cidr_blocks](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/security_group_rule) | resource | -| [aws_security_group_rule.computed_egress_with_ipv6_cidr_blocks](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/security_group_rule) | resource | -| [aws_security_group_rule.computed_egress_with_prefix_list_ids](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/security_group_rule) | resource | -| [aws_security_group_rule.computed_egress_with_self](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/security_group_rule) | resource | -| [aws_security_group_rule.computed_egress_with_source_security_group_id](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/security_group_rule) | resource | -| [aws_security_group_rule.computed_ingress_rules](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/security_group_rule) | resource | -| [aws_security_group_rule.computed_ingress_with_cidr_blocks](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/security_group_rule) | resource | -| [aws_security_group_rule.computed_ingress_with_ipv6_cidr_blocks](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/security_group_rule) | resource | -| [aws_security_group_rule.computed_ingress_with_prefix_list_ids](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/security_group_rule) | resource | -| [aws_security_group_rule.computed_ingress_with_self](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/security_group_rule) | resource | -| [aws_security_group_rule.computed_ingress_with_source_security_group_id](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/security_group_rule) | resource | -| [aws_security_group_rule.egress_rules](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/security_group_rule) | resource | -| [aws_security_group_rule.egress_with_cidr_blocks](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/security_group_rule) | resource | -| [aws_security_group_rule.egress_with_ipv6_cidr_blocks](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/security_group_rule) | resource | -| [aws_security_group_rule.egress_with_prefix_list_ids](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/security_group_rule) | resource | -| [aws_security_group_rule.egress_with_self](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/security_group_rule) | resource | -| [aws_security_group_rule.egress_with_source_security_group_id](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/security_group_rule) | resource | -| [aws_security_group_rule.ingress_rules](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/security_group_rule) | resource | -| [aws_security_group_rule.ingress_with_cidr_blocks](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/security_group_rule) | resource | -| [aws_security_group_rule.ingress_with_ipv6_cidr_blocks](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/security_group_rule) | resource | -| [aws_security_group_rule.ingress_with_prefix_list_ids](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/security_group_rule) | resource | -| [aws_security_group_rule.ingress_with_self](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/security_group_rule) | resource | -| [aws_security_group_rule.ingress_with_source_security_group_id](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/security_group_rule) | resource | +| [aws_vpc_security_group_egress_rule.computed_egress_rules_ipv4](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/vpc_security_group_egress_rule) | resource | +| [aws_vpc_security_group_egress_rule.computed_egress_rules_ipv6](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/vpc_security_group_egress_rule) | resource | +| [aws_vpc_security_group_egress_rule.computed_egress_rules_prefix_list_ids](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/vpc_security_group_egress_rule) | resource | +| [aws_vpc_security_group_egress_rule.computed_egress_with_cidr_ipv4](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/vpc_security_group_egress_rule) | resource | +| [aws_vpc_security_group_egress_rule.computed_egress_with_cidr_ipv6](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/vpc_security_group_egress_rule) | resource | +| [aws_vpc_security_group_egress_rule.computed_egress_with_prefix_list_id](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/vpc_security_group_egress_rule) | resource | +| [aws_vpc_security_group_egress_rule.computed_egress_with_prefix_list_ids_prefix_list_ids](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/vpc_security_group_egress_rule) | resource | +| [aws_vpc_security_group_egress_rule.computed_egress_with_referenced_security_group_id](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/vpc_security_group_egress_rule) | resource | +| [aws_vpc_security_group_egress_rule.computed_egress_with_referenced_security_group_id_prefix_list](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/vpc_security_group_egress_rule) | resource | +| [aws_vpc_security_group_egress_rule.computed_egress_with_self](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/vpc_security_group_egress_rule) | resource | +| [aws_vpc_security_group_egress_rule.computed_egress_with_self_prefix_list_ids](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/vpc_security_group_egress_rule) | resource | +| [aws_vpc_security_group_egress_rule.egress_rules_ipv4](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/vpc_security_group_egress_rule) | resource | +| [aws_vpc_security_group_egress_rule.egress_rules_ipv6](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/vpc_security_group_egress_rule) | resource | +| [aws_vpc_security_group_egress_rule.egress_rules_prefix_list_ids](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/vpc_security_group_egress_rule) | resource | +| [aws_vpc_security_group_egress_rule.egress_with_cidr_ipv4](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/vpc_security_group_egress_rule) | resource | +| [aws_vpc_security_group_egress_rule.egress_with_cidr_ipv6](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/vpc_security_group_egress_rule) | resource | +| [aws_vpc_security_group_egress_rule.egress_with_prefix_list_id](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/vpc_security_group_egress_rule) | resource | +| [aws_vpc_security_group_egress_rule.egress_with_prefix_list_id_default_prefix_list_id](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/vpc_security_group_egress_rule) | resource | +| [aws_vpc_security_group_egress_rule.egress_with_referenced_security_group_id](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/vpc_security_group_egress_rule) | resource | +| [aws_vpc_security_group_egress_rule.egress_with_referenced_security_group_id_prefix_list](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/vpc_security_group_egress_rule) | resource | +| [aws_vpc_security_group_egress_rule.egress_with_self](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/vpc_security_group_egress_rule) | resource | +| [aws_vpc_security_group_egress_rule.egress_with_self_prefix_list_ids](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/vpc_security_group_egress_rule) | resource | +| [aws_vpc_security_group_ingress_rule.computed_ingress_rules_ipv4](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/vpc_security_group_ingress_rule) | resource | +| [aws_vpc_security_group_ingress_rule.computed_ingress_rules_ipv6](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/vpc_security_group_ingress_rule) | resource | +| [aws_vpc_security_group_ingress_rule.computed_ingress_rules_prefix_list_ids](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/vpc_security_group_ingress_rule) | resource | +| [aws_vpc_security_group_ingress_rule.computed_ingress_with_cidr_ipv4](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/vpc_security_group_ingress_rule) | resource | +| [aws_vpc_security_group_ingress_rule.computed_ingress_with_cidr_ipv6](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/vpc_security_group_ingress_rule) | resource | +| [aws_vpc_security_group_ingress_rule.computed_ingress_with_prefix_list_id](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/vpc_security_group_ingress_rule) | resource | +| [aws_vpc_security_group_ingress_rule.computed_ingress_with_prefix_list_ids_prefix_list_ids](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/vpc_security_group_ingress_rule) | resource | +| [aws_vpc_security_group_ingress_rule.computed_ingress_with_referenced_security_group_id](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/vpc_security_group_ingress_rule) | resource | +| [aws_vpc_security_group_ingress_rule.computed_ingress_with_self](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/vpc_security_group_ingress_rule) | resource | +| [aws_vpc_security_group_ingress_rule.computed_ingress_with_self_prefix_list_ids](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/vpc_security_group_ingress_rule) | resource | +| [aws_vpc_security_group_ingress_rule.ingress_rules_ipv4](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/vpc_security_group_ingress_rule) | resource | +| [aws_vpc_security_group_ingress_rule.ingress_rules_ipv6](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/vpc_security_group_ingress_rule) | resource | +| [aws_vpc_security_group_ingress_rule.ingress_rules_prefix_list_ids](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/vpc_security_group_ingress_rule) | resource | +| [aws_vpc_security_group_ingress_rule.ingress_with_cidr_ipv4](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/vpc_security_group_ingress_rule) | resource | +| [aws_vpc_security_group_ingress_rule.ingress_with_cidr_ipv6](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/vpc_security_group_ingress_rule) | resource | +| [aws_vpc_security_group_ingress_rule.ingress_with_prefix_list_id](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/vpc_security_group_ingress_rule) | resource | +| [aws_vpc_security_group_ingress_rule.ingress_with_prefix_list_id_default_prefix_list_id](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/vpc_security_group_ingress_rule) | resource | +| [aws_vpc_security_group_ingress_rule.ingress_with_referenced_security_group_id](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/vpc_security_group_ingress_rule) | resource | +| [aws_vpc_security_group_ingress_rule.ingress_with_referenced_security_group_id_prefix_list](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/vpc_security_group_ingress_rule) | resource | +| [aws_vpc_security_group_ingress_rule.ingress_with_self](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/vpc_security_group_ingress_rule) | resource | +| [aws_vpc_security_group_ingress_rule.ingress_with_self_prefix_list_ids](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/vpc_security_group_ingress_rule) | resource | ## Inputs @@ -209,56 +228,56 @@ No modules. |------|-------------|------|---------|:--------:| | [auto\_groups](#input\_auto\_groups) | Map of groups of security group rules to use to generate modules (see update\_groups.sh) | `map(map(list(string)))` |
{
"activemq": {
"egress_rules": [
"all-all"
],
"ingress_rules": [
"activemq-5671-tcp",
"activemq-8883-tcp",
"activemq-61614-tcp",
"activemq-61617-tcp",
"activemq-61619-tcp"
],
"ingress_with_self": [
"all-all"
]
},
"alertmanager": {
"egress_rules": [
"all-all"
],
"ingress_rules": [
"alertmanager-9093-tcp",
"alertmanager-9094-tcp"
],
"ingress_with_self": [
"all-all"
]
},
"carbon-relay-ng": {
"egress_rules": [
"all-all"
],
"ingress_rules": [
"carbon-line-in-tcp",
"carbon-line-in-udp",
"carbon-pickle-tcp",
"carbon-pickle-udp",
"carbon-gui-udp"
],
"ingress_with_self": [
"all-all"
]
},
"cassandra": {
"egress_rules": [
"all-all"
],
"ingress_rules": [
"cassandra-clients-tcp",
"cassandra-thrift-clients-tcp",
"cassandra-jmx-tcp"
],
"ingress_with_self": [
"all-all"
]
},
"consul": {
"egress_rules": [
"all-all"
],
"ingress_rules": [
"consul-tcp",
"consul-grpc-tcp",
"consul-grpc-tcp-tls",
"consul-webui-http-tcp",
"consul-webui-https-tcp",
"consul-dns-tcp",
"consul-dns-udp",
"consul-serf-lan-tcp",
"consul-serf-lan-udp",
"consul-serf-wan-tcp",
"consul-serf-wan-udp"
],
"ingress_with_self": [
"all-all"
]
},
"dax-cluster": {
"egress_rules": [
"all-all"
],
"ingress_rules": [
"dax-cluster-unencrypted-tcp",
"dax-cluster-encrypted-tcp"
],
"ingress_with_self": [
"all-all"
]
},
"docker-swarm": {
"egress_rules": [
"all-all"
],
"ingress_rules": [
"docker-swarm-mngmt-tcp",
"docker-swarm-node-tcp",
"docker-swarm-node-udp",
"docker-swarm-overlay-udp"
],
"ingress_with_self": [
"all-all"
]
},
"elasticsearch": {
"egress_rules": [
"all-all"
],
"ingress_rules": [
"elasticsearch-rest-tcp",
"elasticsearch-java-tcp"
],
"ingress_with_self": [
"all-all"
]
},
"etcd": {
"egress_rules": [
"all-all"
],
"ingress_rules": [
"etcd-client-tcp",
"etcd-peer-tcp"
],
"ingress_with_self": [
"all-all"
]
},
"grafana": {
"egress_rules": [
"all-all"
],
"ingress_rules": [
"grafana-tcp"
],
"ingress_with_self": [
"all-all"
]
},
"graphite-statsd": {
"egress_rules": [
"all-all"
],
"ingress_rules": [
"graphite-webui",
"graphite-2003-tcp",
"graphite-2004-tcp",
"graphite-2023-tcp",
"graphite-2024-tcp",
"graphite-8080-tcp",
"graphite-8125-tcp",
"graphite-8125-udp",
"graphite-8126-tcp"
],
"ingress_with_self": [
"all-all"
]
},
"http-80": {
"egress_rules": [
"all-all"
],
"ingress_rules": [
"http-80-tcp"
],
"ingress_with_self": [
"all-all"
]
},
"http-8080": {
"egress_rules": [
"all-all"
],
"ingress_rules": [
"http-8080-tcp"
],
"ingress_with_self": [
"all-all"
]
},
"https-443": {
"egress_rules": [
"all-all"
],
"ingress_rules": [
"https-443-tcp"
],
"ingress_with_self": [
"all-all"
]
},
"https-8443": {
"egress_rules": [
"all-all"
],
"ingress_rules": [
"https-8443-tcp"
],
"ingress_with_self": [
"all-all"
]
},
"ipsec-4500": {
"egress_rules": [
"all-all"
],
"ingress_rules": [
"ipsec-4500-udp"
],
"ingress_with_self": [
"all-all"
]
},
"ipsec-500": {
"egress_rules": [
"all-all"
],
"ingress_rules": [
"ipsec-500-udp"
],
"ingress_with_self": [
"all-all"
]
},
"kafka": {
"egress_rules": [
"all-all"
],
"ingress_rules": [
"kafka-broker-tcp",
"kafka-broker-tls-tcp",
"kafka-broker-tls-public-tcp",
"kafka-broker-sasl-scram-tcp",
"kafka-broker-sasl-scram-tcp",
"kafka-broker-sasl-iam-tcp",
"kafka-broker-sasl-iam-public-tcp",
"kafka-jmx-exporter-tcp",
"kafka-node-exporter-tcp"
],
"ingress_with_self": [
"all-all"
]
},
"kibana": {
"egress_rules": [
"all-all"
],
"ingress_rules": [
"kibana-tcp"
],
"ingress_with_self": [
"all-all"
]
},
"kubernetes-api": {
"egress_rules": [
"all-all"
],
"ingress_rules": [
"kubernetes-api-tcp"
],
"ingress_with_self": [
"all-all"
]
},
"ldap": {
"egress_rules": [
"all-all"
],
"ingress_rules": [
"ldap-tcp"
],
"ingress_with_self": [
"all-all"
]
},
"ldaps": {
"egress_rules": [
"all-all"
],
"ingress_rules": [
"ldaps-tcp"
],
"ingress_with_self": [
"all-all"
]
},
"logstash": {
"egress_rules": [
"all-all"
],
"ingress_rules": [
"logstash-tcp"
],
"ingress_with_self": [
"all-all"
]
},
"loki": {
"egress_rules": [
"all-all"
],
"ingress_rules": [
"loki-grafana",
"loki-grafana-grpc"
],
"ingress_with_self": [
"all-all"
]
},
"memcached": {
"egress_rules": [
"all-all"
],
"ingress_rules": [
"memcached-tcp"
],
"ingress_with_self": [
"all-all"
]
},
"minio": {
"egress_rules": [
"all-all"
],
"ingress_rules": [
"minio-tcp"
],
"ingress_with_self": [
"all-all"
]
},
"mongodb": {
"egress_rules": [
"all-all"
],
"ingress_rules": [
"mongodb-27017-tcp",
"mongodb-27018-tcp",
"mongodb-27019-tcp"
],
"ingress_with_self": [
"all-all"
]
},
"mssql": {
"egress_rules": [
"all-all"
],
"ingress_rules": [
"mssql-tcp",
"mssql-udp",
"mssql-analytics-tcp",
"mssql-broker-tcp"
],
"ingress_with_self": [
"all-all"
]
},
"mysql": {
"egress_rules": [
"all-all"
],
"ingress_rules": [
"mysql-tcp"
],
"ingress_with_self": [
"all-all"
]
},
"nfs": {
"egress_rules": [
"all-all"
],
"ingress_rules": [
"nfs-tcp"
],
"ingress_with_self": [
"all-all"
]
},
"nomad": {
"egress_rules": [
"all-all"
],
"ingress_rules": [
"nomad-http-tcp",
"nomad-rpc-tcp",
"nomad-serf-tcp",
"nomad-serf-udp"
],
"ingress_with_self": [
"all-all"
]
},
"ntp": {
"egress_rules": [
"all-all"
],
"ingress_rules": [
"ntp-udp"
],
"ingress_with_self": [
"all-all"
]
},
"openvpn": {
"egress_rules": [
"all-all"
],
"ingress_rules": [
"openvpn-udp",
"openvpn-tcp",
"openvpn-https-tcp"
],
"ingress_with_self": [
"all-all"
]
},
"oracle-db": {
"egress_rules": [
"all-all"
],
"ingress_rules": [
"oracle-db-tcp"
],
"ingress_with_self": [
"all-all"
]
},
"postgresql": {
"egress_rules": [
"all-all"
],
"ingress_rules": [
"postgresql-tcp"
],
"ingress_with_self": [
"all-all"
]
},
"prometheus": {
"egress_rules": [
"all-all"
],
"ingress_rules": [
"prometheus-http-tcp",
"prometheus-pushgateway-http-tcp",
"prometheus-node-exporter-http-tcp"
],
"ingress_with_self": [
"all-all"
]
},
"promtail": {
"egress_rules": [
"all-all"
],
"ingress_rules": [
"promtail-http"
],
"ingress_with_self": [
"all-all"
]
},
"puppet": {
"egress_rules": [
"all-all"
],
"ingress_rules": [
"puppet-tcp",
"puppetdb-tcp"
],
"ingress_with_self": [
"all-all"
]
},
"rabbitmq": {
"egress_rules": [
"all-all"
],
"ingress_rules": [
"rabbitmq-4369-tcp",
"rabbitmq-5671-tcp",
"rabbitmq-5672-tcp",
"rabbitmq-15672-tcp",
"rabbitmq-25672-tcp"
],
"ingress_with_self": [
"all-all"
]
},
"rdp": {
"egress_rules": [
"all-all"
],
"ingress_rules": [
"rdp-tcp",
"rdp-udp"
],
"ingress_with_self": [
"all-all"
]
},
"redis": {
"egress_rules": [
"all-all"
],
"ingress_rules": [
"redis-tcp"
],
"ingress_with_self": [
"all-all"
]
},
"redshift": {
"egress_rules": [
"all-all"
],
"ingress_rules": [
"redshift-tcp"
],
"ingress_with_self": [
"all-all"
]
},
"smtp": {
"egress_rules": [
"all-all"
],
"ingress_rules": [
"smtp-tcp"
],
"ingress_with_self": [
"all-all"
]
},
"smtp-submission": {
"egress_rules": [
"all-all"
],
"ingress_rules": [
"smtp-submission-587-tcp",
"smtp-submission-2587-tcp"
],
"ingress_with_self": [
"all-all"
]
},
"smtps": {
"egress_rules": [
"all-all"
],
"ingress_rules": [
"smtps-465-tcp",
"smtps-2465-tcp"
],
"ingress_with_self": [
"all-all"
]
},
"solr": {
"egress_rules": [
"all-all"
],
"ingress_rules": [
"solr-tcp"
],
"ingress_with_self": [
"all-all"
]
},
"splunk": {
"egress_rules": [
"all-all"
],
"ingress_rules": [
"splunk-indexer-tcp",
"splunk-web-tcp",
"splunk-splunkd-tcp",
"splunk-hec-tcp"
],
"ingress_with_self": [
"all-all"
]
},
"squid": {
"egress_rules": [
"all-all"
],
"ingress_rules": [
"squid-proxy-tcp"
],
"ingress_with_self": [
"all-all"
]
},
"ssh": {
"egress_rules": [
"all-all"
],
"ingress_rules": [
"ssh-tcp"
],
"ingress_with_self": [
"all-all"
]
},
"storm": {
"egress_rules": [
"all-all"
],
"ingress_rules": [
"storm-nimbus-tcp",
"storm-ui-tcp",
"storm-supervisor-tcp"
],
"ingress_with_self": [
"all-all"
]
},
"vault": {
"egress_rules": [
"all-all"
],
"ingress_rules": [
"vault-tcp"
],
"ingress_with_self": [
"all-all"
]
},
"wazuh": {
"egress_rules": [
"all-all"
],
"ingress_rules": [
"wazuh-server-agent-connection-tcp",
"wazuh-server-agent-connection-udp",
"wazuh-server-agent-enrollment",
"wazuh-server-agent-cluster-daemon",
"wazuh-server-syslog-collector-tcp",
"wazuh-server-syslog-collector-udp",
"wazuh-server-restful-api",
"wazuh-indexer-restful-api",
"wazuh-dashboard"
],
"ingress_with_self": [
"all-all"
]
},
"web": {
"egress_rules": [
"all-all"
],
"ingress_rules": [
"http-80-tcp",
"http-8080-tcp",
"https-443-tcp",
"web-jmx-tcp"
],
"ingress_with_self": [
"all-all"
]
},
"winrm": {
"egress_rules": [
"all-all"
],
"ingress_rules": [
"winrm-http-tcp",
"winrm-https-tcp"
],
"ingress_with_self": [
"all-all"
]
},
"zabbix": {
"egress_rules": [
"all-all"
],
"ingress_rules": [
"zabbix-server",
"zabbix-proxy",
"zabbix-agent"
],
"ingress_with_self": [
"all-all"
]
},
"zipkin": {
"egress_rules": [
"all-all"
],
"ingress_rules": [
"zipkin-admin-tcp",
"zipkin-admin-query-tcp",
"zipkin-admin-web-tcp",
"zipkin-query-tcp",
"zipkin-web-tcp"
],
"ingress_with_self": [
"all-all"
]
},
"zookeeper": {
"egress_rules": [
"all-all"
],
"ingress_rules": [
"zookeeper-2181-tcp",
"zookeeper-2182-tls-tcp",
"zookeeper-2888-tcp",
"zookeeper-3888-tcp",
"zookeeper-jmx-tcp"
],
"ingress_with_self": [
"all-all"
]
}
}
| no | | [computed\_egress\_rules](#input\_computed\_egress\_rules) | List of computed egress rules to create by name | `list(string)` | `[]` | no | -| [computed\_egress\_with\_cidr\_blocks](#input\_computed\_egress\_with\_cidr\_blocks) | List of computed egress rules to create where 'cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [computed\_egress\_with\_ipv6\_cidr\_blocks](#input\_computed\_egress\_with\_ipv6\_cidr\_blocks) | List of computed egress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [computed\_egress\_with\_prefix\_list\_ids](#input\_computed\_egress\_with\_prefix\_list\_ids) | List of computed egress rules to create where 'prefix\_list\_ids' is used only | `list(map(string))` | `[]` | no | +| [computed\_egress\_with\_cidr\_ipv4](#input\_computed\_egress\_with\_cidr\_ipv4) | List of computed egress rules to create where 'cidr\_ipv4' is used | `list(map(string))` | `[]` | no | +| [computed\_egress\_with\_cidr\_ipv6](#input\_computed\_egress\_with\_cidr\_ipv6) | List of computed egress rules to create where 'cidr\_ipv6' is used | `list(map(string))` | `[]` | no | +| [computed\_egress\_with\_prefix\_list\_id](#input\_computed\_egress\_with\_prefix\_list\_id) | List of computed egress rules to create where 'prefix\_list\_id' is used only | `list(map(string))` | `[]` | no | +| [computed\_egress\_with\_referenced\_security\_group\_id](#input\_computed\_egress\_with\_referenced\_security\_group\_id) | List of computed egress rules to create where 'referenced\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [computed\_egress\_with\_self](#input\_computed\_egress\_with\_self) | List of computed egress rules to create where 'self' is defined | `list(map(string))` | `[]` | no | -| [computed\_egress\_with\_source\_security\_group\_id](#input\_computed\_egress\_with\_source\_security\_group\_id) | List of computed egress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [computed\_ingress\_rules](#input\_computed\_ingress\_rules) | List of computed ingress rules to create by name | `list(string)` | `[]` | no | -| [computed\_ingress\_with\_cidr\_blocks](#input\_computed\_ingress\_with\_cidr\_blocks) | List of computed ingress rules to create where 'cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [computed\_ingress\_with\_ipv6\_cidr\_blocks](#input\_computed\_ingress\_with\_ipv6\_cidr\_blocks) | List of computed ingress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [computed\_ingress\_with\_prefix\_list\_ids](#input\_computed\_ingress\_with\_prefix\_list\_ids) | List of computed ingress rules to create where 'prefix\_list\_ids' is used | `list(map(string))` | `[]` | no | +| [computed\_ingress\_with\_cidr\_ipv4](#input\_computed\_ingress\_with\_cidr\_ipv4) | List of computed ingress rules to create where 'cidr\_ipv4' is used | `list(map(string))` | `[]` | no | +| [computed\_ingress\_with\_cidr\_ipv6](#input\_computed\_ingress\_with\_cidr\_ipv6) | List of computed ingress rules to create where 'cidr\_ipv6' is used | `list(map(string))` | `[]` | no | +| [computed\_ingress\_with\_prefix\_list\_id](#input\_computed\_ingress\_with\_prefix\_list\_id) | List of computed ingress rules to create where 'prefix\_list\_id' is used | `list(map(string))` | `[]` | no | +| [computed\_ingress\_with\_referenced\_security\_group\_id](#input\_computed\_ingress\_with\_referenced\_security\_group\_id) | List of computed ingress rules to create where 'referenced\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [computed\_ingress\_with\_self](#input\_computed\_ingress\_with\_self) | List of computed ingress rules to create where 'self' is defined | `list(map(string))` | `[]` | no | -| [computed\_ingress\_with\_source\_security\_group\_id](#input\_computed\_ingress\_with\_source\_security\_group\_id) | List of computed ingress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [create](#input\_create) | Whether to create security group and all rules | `bool` | `true` | no | | [create\_sg](#input\_create\_sg) | Whether to create security group | `bool` | `true` | no | | [create\_timeout](#input\_create\_timeout) | Time to wait for a security group to be created | `string` | `"10m"` | no | | [delete\_timeout](#input\_delete\_timeout) | Time to wait for a security group to be deleted | `string` | `"15m"` | no | | [description](#input\_description) | Description of security group | `string` | `"Security Group managed by Terraform"` | no | -| [egress\_cidr\_blocks](#input\_egress\_cidr\_blocks) | List of IPv4 CIDR ranges to use on all egress rules | `list(string)` |
[
"0.0.0.0/0"
]
| no | -| [egress\_ipv6\_cidr\_blocks](#input\_egress\_ipv6\_cidr\_blocks) | List of IPv6 CIDR ranges to use on all egress rules | `list(string)` |
[
"::/0"
]
| no | +| [egress\_cidr\_ipv4](#input\_egress\_cidr\_ipv4) | List of IPv4 CIDR ranges to use on all egress rules | `list(string)` |
[
"0.0.0.0/0"
]
| no | +| [egress\_cidr\_ipv6](#input\_egress\_cidr\_ipv6) | List of IPv6 CIDR ranges to use on all egress rules | `list(string)` |
[
"::/0"
]
| no | | [egress\_prefix\_list\_ids](#input\_egress\_prefix\_list\_ids) | List of prefix list IDs (for allowing access to VPC endpoints) to use on all egress rules | `list(string)` | `[]` | no | | [egress\_rules](#input\_egress\_rules) | List of egress rules to create by name | `list(string)` | `[]` | no | -| [egress\_with\_cidr\_blocks](#input\_egress\_with\_cidr\_blocks) | List of egress rules to create where 'cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [egress\_with\_ipv6\_cidr\_blocks](#input\_egress\_with\_ipv6\_cidr\_blocks) | List of egress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [egress\_with\_prefix\_list\_ids](#input\_egress\_with\_prefix\_list\_ids) | List of egress rules to create where 'prefix\_list\_ids' is used only | `list(map(string))` | `[]` | no | +| [egress\_with\_cidr\_ipv4](#input\_egress\_with\_cidr\_ipv4) | List of egress rules to create where 'cidr\_ipv4' is used | `list(map(string))` | `[]` | no | +| [egress\_with\_cidr\_ipv6](#input\_egress\_with\_cidr\_ipv6) | List of egress rules to create where 'cidr\_ipv6' is used | `list(map(string))` | `[]` | no | +| [egress\_with\_prefix\_list\_id](#input\_egress\_with\_prefix\_list\_id) | List of egress rules to create where 'prefix\_list\_id' is used only | `list(map(string))` | `[]` | no | +| [egress\_with\_referenced\_security\_group\_id](#input\_egress\_with\_referenced\_security\_group\_id) | List of egress rules to create where 'referenced\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [egress\_with\_self](#input\_egress\_with\_self) | List of egress rules to create where 'self' is defined | `list(map(string))` | `[]` | no | -| [egress\_with\_source\_security\_group\_id](#input\_egress\_with\_source\_security\_group\_id) | List of egress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | -| [ingress\_cidr\_blocks](#input\_ingress\_cidr\_blocks) | List of IPv4 CIDR ranges to use on all ingress rules | `list(string)` | `[]` | no | -| [ingress\_ipv6\_cidr\_blocks](#input\_ingress\_ipv6\_cidr\_blocks) | List of IPv6 CIDR ranges to use on all ingress rules | `list(string)` | `[]` | no | +| [ingress\_cidr\_ipv4](#input\_ingress\_cidr\_ipv4) | List of IPv4 CIDR ranges to use on all ingress rules | `list(string)` | `[]` | no | +| [ingress\_cidr\_ipv6](#input\_ingress\_cidr\_ipv6) | List of IPv6 CIDR ranges to use on all ingress rules | `list(string)` | `[]` | no | | [ingress\_prefix\_list\_ids](#input\_ingress\_prefix\_list\_ids) | List of prefix list IDs (for allowing access to VPC endpoints) to use on all ingress rules | `list(string)` | `[]` | no | | [ingress\_rules](#input\_ingress\_rules) | List of ingress rules to create by name | `list(string)` | `[]` | no | -| [ingress\_with\_cidr\_blocks](#input\_ingress\_with\_cidr\_blocks) | List of ingress rules to create where 'cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [ingress\_with\_ipv6\_cidr\_blocks](#input\_ingress\_with\_ipv6\_cidr\_blocks) | List of ingress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [ingress\_with\_prefix\_list\_ids](#input\_ingress\_with\_prefix\_list\_ids) | List of ingress rules to create where 'prefix\_list\_ids' is used only | `list(map(string))` | `[]` | no | +| [ingress\_with\_cidr\_ipv4](#input\_ingress\_with\_cidr\_ipv4) | List of ingress rules to create where 'cidr\_ipv4' is used | `list(map(string))` | `[]` | no | +| [ingress\_with\_cidr\_ipv6](#input\_ingress\_with\_cidr\_ipv6) | List of ingress rules to create where 'cidr\_ipv6' is used | `list(map(string))` | `[]` | no | +| [ingress\_with\_prefix\_list\_id](#input\_ingress\_with\_prefix\_list\_id) | List of ingress rules to create where 'prefix\_list\_id' is used only | `list(map(string))` | `[]` | no | +| [ingress\_with\_referenced\_security\_group\_id](#input\_ingress\_with\_referenced\_security\_group\_id) | List of ingress rules to create where 'referenced\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [ingress\_with\_self](#input\_ingress\_with\_self) | List of ingress rules to create where 'self' is defined | `list(map(string))` | `[]` | no | -| [ingress\_with\_source\_security\_group\_id](#input\_ingress\_with\_source\_security\_group\_id) | List of ingress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [name](#input\_name) | Name of security group - not required if create\_sg is false | `string` | `null` | no | | [number\_of\_computed\_egress\_rules](#input\_number\_of\_computed\_egress\_rules) | Number of computed egress rules to create by name | `number` | `0` | no | -| [number\_of\_computed\_egress\_with\_cidr\_blocks](#input\_number\_of\_computed\_egress\_with\_cidr\_blocks) | Number of computed egress rules to create where 'cidr\_blocks' is used | `number` | `0` | no | -| [number\_of\_computed\_egress\_with\_ipv6\_cidr\_blocks](#input\_number\_of\_computed\_egress\_with\_ipv6\_cidr\_blocks) | Number of computed egress rules to create where 'ipv6\_cidr\_blocks' is used | `number` | `0` | no | -| [number\_of\_computed\_egress\_with\_prefix\_list\_ids](#input\_number\_of\_computed\_egress\_with\_prefix\_list\_ids) | Number of computed egress rules to create where 'prefix\_list\_ids' is used only | `number` | `0` | no | +| [number\_of\_computed\_egress\_with\_cidr\_ipv4](#input\_number\_of\_computed\_egress\_with\_cidr\_ipv4) | Number of computed egress rules to create where 'cidr\_ipv4' is used | `number` | `0` | no | +| [number\_of\_computed\_egress\_with\_cidr\_ipv6](#input\_number\_of\_computed\_egress\_with\_cidr\_ipv6) | Number of computed egress rules to create where 'cidr\_ipv6' is used | `number` | `0` | no | +| [number\_of\_computed\_egress\_with\_prefix\_list\_id](#input\_number\_of\_computed\_egress\_with\_prefix\_list\_id) | Number of computed egress rules to create where 'prefix\_list\_id' is used only | `number` | `0` | no | +| [number\_of\_computed\_egress\_with\_referenced\_security\_group\_id](#input\_number\_of\_computed\_egress\_with\_referenced\_security\_group\_id) | Number of computed egress rules to create where 'source\_security\_group\_id' is used | `number` | `0` | no | | [number\_of\_computed\_egress\_with\_self](#input\_number\_of\_computed\_egress\_with\_self) | Number of computed egress rules to create where 'self' is defined | `number` | `0` | no | -| [number\_of\_computed\_egress\_with\_source\_security\_group\_id](#input\_number\_of\_computed\_egress\_with\_source\_security\_group\_id) | Number of computed egress rules to create where 'source\_security\_group\_id' is used | `number` | `0` | no | | [number\_of\_computed\_ingress\_rules](#input\_number\_of\_computed\_ingress\_rules) | Number of computed ingress rules to create by name | `number` | `0` | no | -| [number\_of\_computed\_ingress\_with\_cidr\_blocks](#input\_number\_of\_computed\_ingress\_with\_cidr\_blocks) | Number of computed ingress rules to create where 'cidr\_blocks' is used | `number` | `0` | no | -| [number\_of\_computed\_ingress\_with\_ipv6\_cidr\_blocks](#input\_number\_of\_computed\_ingress\_with\_ipv6\_cidr\_blocks) | Number of computed ingress rules to create where 'ipv6\_cidr\_blocks' is used | `number` | `0` | no | -| [number\_of\_computed\_ingress\_with\_prefix\_list\_ids](#input\_number\_of\_computed\_ingress\_with\_prefix\_list\_ids) | Number of computed ingress rules to create where 'prefix\_list\_ids' is used | `number` | `0` | no | +| [number\_of\_computed\_ingress\_with\_cidr\_ipv4](#input\_number\_of\_computed\_ingress\_with\_cidr\_ipv4) | Number of computed ingress rules to create where 'cidr\_ipv4' is used | `number` | `0` | no | +| [number\_of\_computed\_ingress\_with\_cidr\_ipv6](#input\_number\_of\_computed\_ingress\_with\_cidr\_ipv6) | Number of computed ingress rules to create where 'cidr\_ipv6' is used | `number` | `0` | no | +| [number\_of\_computed\_ingress\_with\_prefix\_list\_id](#input\_number\_of\_computed\_ingress\_with\_prefix\_list\_id) | Number of computed ingress rules to create where 'prefix\_list\_id' is used | `number` | `0` | no | +| [number\_of\_computed\_ingress\_with\_referenced\_security\_group\_id](#input\_number\_of\_computed\_ingress\_with\_referenced\_security\_group\_id) | Number of computed ingress rules to create where 'referenced\_security\_group\_id' is used | `number` | `0` | no | | [number\_of\_computed\_ingress\_with\_self](#input\_number\_of\_computed\_ingress\_with\_self) | Number of computed ingress rules to create where 'self' is defined | `number` | `0` | no | -| [number\_of\_computed\_ingress\_with\_source\_security\_group\_id](#input\_number\_of\_computed\_ingress\_with\_source\_security\_group\_id) | Number of computed ingress rules to create where 'source\_security\_group\_id' is used | `number` | `0` | no | | [putin\_khuylo](#input\_putin\_khuylo) | Do you agree that Putin doesn't respect Ukrainian sovereignty and territorial integrity? More info: https://en.wikipedia.org/wiki/Putin_khuylo! | `bool` | `true` | no | | [revoke\_rules\_on\_delete](#input\_revoke\_rules\_on\_delete) | Instruct Terraform to revoke all of the Security Groups attached ingress and egress rules before deleting the rule itself. Enable for EMR. | `bool` | `false` | no | -| [rules](#input\_rules) | Map of known security group rules (define as 'name' = ['from port', 'to port', 'protocol', 'description']) | `map(list(any))` |
{
"_": [
"",
"",
""
],
"activemq-5671-tcp": [
5671,
5671,
"tcp",
"ActiveMQ AMQP"
],
"activemq-61614-tcp": [
61614,
61614,
"tcp",
"ActiveMQ STOMP"
],
"activemq-61617-tcp": [
61617,
61617,
"tcp",
"ActiveMQ OpenWire"
],
"activemq-61619-tcp": [
61619,
61619,
"tcp",
"ActiveMQ WebSocket"
],
"activemq-8883-tcp": [
8883,
8883,
"tcp",
"ActiveMQ MQTT"
],
"alertmanager-9093-tcp": [
9093,
9093,
"tcp",
"Alert Manager"
],
"alertmanager-9094-tcp": [
9094,
9094,
"tcp",
"Alert Manager Cluster"
],
"all-all": [
-1,
-1,
"-1",
"All protocols"
],
"all-icmp": [
-1,
-1,
"icmp",
"All IPV4 ICMP"
],
"all-ipv6-icmp": [
-1,
-1,
58,
"All IPV6 ICMP"
],
"all-tcp": [
0,
65535,
"tcp",
"All TCP ports"
],
"all-udp": [
0,
65535,
"udp",
"All UDP ports"
],
"carbon-admin-tcp": [
2004,
2004,
"tcp",
"Carbon admin"
],
"carbon-gui-udp": [
8081,
8081,
"tcp",
"Carbon GUI"
],
"carbon-line-in-tcp": [
2003,
2003,
"tcp",
"Carbon line-in"
],
"carbon-line-in-udp": [
2003,
2003,
"udp",
"Carbon line-in"
],
"carbon-pickle-tcp": [
2013,
2013,
"tcp",
"Carbon pickle"
],
"carbon-pickle-udp": [
2013,
2013,
"udp",
"Carbon pickle"
],
"cassandra-clients-tcp": [
9042,
9042,
"tcp",
"Cassandra clients"
],
"cassandra-jmx-tcp": [
7199,
7199,
"tcp",
"JMX"
],
"cassandra-thrift-clients-tcp": [
9160,
9160,
"tcp",
"Cassandra Thrift clients"
],
"consul-dns-tcp": [
8600,
8600,
"tcp",
"Consul DNS"
],
"consul-dns-udp": [
8600,
8600,
"udp",
"Consul DNS"
],
"consul-grpc-tcp": [
8502,
8502,
"tcp",
"Consul gRPC"
],
"consul-grpc-tcp-tls": [
8503,
8503,
"tcp",
"Consul gRPC TLS"
],
"consul-serf-lan-tcp": [
8301,
8301,
"tcp",
"Serf LAN"
],
"consul-serf-lan-udp": [
8301,
8301,
"udp",
"Serf LAN"
],
"consul-serf-wan-tcp": [
8302,
8302,
"tcp",
"Serf WAN"
],
"consul-serf-wan-udp": [
8302,
8302,
"udp",
"Serf WAN"
],
"consul-tcp": [
8300,
8300,
"tcp",
"Consul server"
],
"consul-webui-http-tcp": [
8500,
8500,
"tcp",
"Consul web UI HTTP"
],
"consul-webui-https-tcp": [
8501,
8501,
"tcp",
"Consul web UI HTTPS"
],
"dax-cluster-encrypted-tcp": [
9111,
9111,
"tcp",
"DAX Cluster encrypted"
],
"dax-cluster-unencrypted-tcp": [
8111,
8111,
"tcp",
"DAX Cluster unencrypted"
],
"dns-tcp": [
53,
53,
"tcp",
"DNS"
],
"dns-udp": [
53,
53,
"udp",
"DNS"
],
"docker-swarm-mngmt-tcp": [
2377,
2377,
"tcp",
"Docker Swarm cluster management"
],
"docker-swarm-node-tcp": [
7946,
7946,
"tcp",
"Docker Swarm node"
],
"docker-swarm-node-udp": [
7946,
7946,
"udp",
"Docker Swarm node"
],
"docker-swarm-overlay-udp": [
4789,
4789,
"udp",
"Docker Swarm Overlay Network Traffic"
],
"elasticsearch-java-tcp": [
9300,
9300,
"tcp",
"Elasticsearch Java interface"
],
"elasticsearch-rest-tcp": [
9200,
9200,
"tcp",
"Elasticsearch REST interface"
],
"etcd-client-tcp": [
2379,
2379,
"tcp",
"Etcd Client"
],
"etcd-peer-tcp": [
2380,
2380,
"tcp",
"Etcd Peer"
],
"grafana-tcp": [
3000,
3000,
"tcp",
"Grafana Dashboard"
],
"graphite-2003-tcp": [
2003,
2003,
"tcp",
"Carbon receiver plain text"
],
"graphite-2004-tcp": [
2004,
2004,
"tcp",
"Carbon receiver pickle"
],
"graphite-2023-tcp": [
2023,
2023,
"tcp",
"Carbon aggregator plaintext"
],
"graphite-2024-tcp": [
2024,
2024,
"tcp",
"Carbon aggregator pickle"
],
"graphite-8080-tcp": [
8080,
8080,
"tcp",
"Graphite gunicorn port"
],
"graphite-8125-tcp": [
8125,
8125,
"tcp",
"Statsd TCP"
],
"graphite-8125-udp": [
8125,
8125,
"udp",
"Statsd UDP default"
],
"graphite-8126-tcp": [
8126,
8126,
"tcp",
"Statsd admin"
],
"graphite-webui": [
80,
80,
"tcp",
"Graphite admin interface"
],
"http-80-tcp": [
80,
80,
"tcp",
"HTTP"
],
"http-8080-tcp": [
8080,
8080,
"tcp",
"HTTP"
],
"https-443-tcp": [
443,
443,
"tcp",
"HTTPS"
],
"https-8443-tcp": [
8443,
8443,
"tcp",
"HTTPS"
],
"ipsec-4500-udp": [
4500,
4500,
"udp",
"IPSEC NAT-T"
],
"ipsec-500-udp": [
500,
500,
"udp",
"IPSEC ISAKMP"
],
"kafka-broker-sasl-iam-public-tcp": [
9198,
9198,
"tcp",
"Kafka SASL/IAM Public access control enabled (MSK specific)"
],
"kafka-broker-sasl-iam-tcp": [
9098,
9098,
"tcp",
"Kafka SASL/IAM access control enabled (MSK specific)"
],
"kafka-broker-sasl-scram-public-tcp": [
9196,
9196,
"tcp",
"Kafka SASL/SCRAM Public enabled broker (MSK specific)"
],
"kafka-broker-sasl-scram-tcp": [
9096,
9096,
"tcp",
"Kafka SASL/SCRAM enabled broker (MSK specific)"
],
"kafka-broker-tcp": [
9092,
9092,
"tcp",
"Kafka PLAINTEXT enable broker 0.8.2+"
],
"kafka-broker-tls-public-tcp": [
9194,
9194,
"tcp",
"Kafka TLS Public enabled broker 0.8.2+ (MSK specific)"
],
"kafka-broker-tls-tcp": [
9094,
9094,
"tcp",
"Kafka TLS enabled broker 0.8.2+"
],
"kafka-jmx-exporter-tcp": [
11001,
11001,
"tcp",
"Kafka JMX Exporter"
],
"kafka-node-exporter-tcp": [
11002,
11002,
"tcp",
"Kafka Node Exporter"
],
"kibana-tcp": [
5601,
5601,
"tcp",
"Kibana Web Interface"
],
"kubernetes-api-tcp": [
6443,
6443,
"tcp",
"Kubernetes API Server"
],
"ldap-tcp": [
389,
389,
"tcp",
"LDAP"
],
"ldaps-tcp": [
636,
636,
"tcp",
"LDAPS"
],
"logstash-tcp": [
5044,
5044,
"tcp",
"Logstash"
],
"loki-grafana": [
3100,
3100,
"tcp",
"Grafana Loki endpoint"
],
"loki-grafana-grpc": [
9095,
9095,
"tcp",
"Grafana Loki GRPC"
],
"memcached-tcp": [
11211,
11211,
"tcp",
"Memcached"
],
"minio-tcp": [
9000,
9000,
"tcp",
"MinIO"
],
"mongodb-27017-tcp": [
27017,
27017,
"tcp",
"MongoDB"
],
"mongodb-27018-tcp": [
27018,
27018,
"tcp",
"MongoDB shard"
],
"mongodb-27019-tcp": [
27019,
27019,
"tcp",
"MongoDB config server"
],
"mssql-analytics-tcp": [
2383,
2383,
"tcp",
"MSSQL Analytics"
],
"mssql-broker-tcp": [
4022,
4022,
"tcp",
"MSSQL Broker"
],
"mssql-tcp": [
1433,
1433,
"tcp",
"MSSQL Server"
],
"mssql-udp": [
1434,
1434,
"udp",
"MSSQL Browser"
],
"mysql-tcp": [
3306,
3306,
"tcp",
"MySQL/Aurora"
],
"nfs-tcp": [
2049,
2049,
"tcp",
"NFS/EFS"
],
"nomad-http-tcp": [
4646,
4646,
"tcp",
"Nomad HTTP"
],
"nomad-rpc-tcp": [
4647,
4647,
"tcp",
"Nomad RPC"
],
"nomad-serf-tcp": [
4648,
4648,
"tcp",
"Serf"
],
"nomad-serf-udp": [
4648,
4648,
"udp",
"Serf"
],
"ntp-udp": [
123,
123,
"udp",
"NTP"
],
"octopus-tentacle-tcp": [
10933,
10933,
"tcp",
"Octopus Tentacle"
],
"openvpn-https-tcp": [
443,
443,
"tcp",
"OpenVPN"
],
"openvpn-tcp": [
943,
943,
"tcp",
"OpenVPN"
],
"openvpn-udp": [
1194,
1194,
"udp",
"OpenVPN"
],
"oracle-db-tcp": [
1521,
1521,
"tcp",
"Oracle"
],
"postgresql-tcp": [
5432,
5432,
"tcp",
"PostgreSQL"
],
"prometheus-http-tcp": [
9090,
9090,
"tcp",
"Prometheus"
],
"prometheus-node-exporter-http-tcp": [
9100,
9100,
"tcp",
"Prometheus Node Exporter"
],
"prometheus-pushgateway-http-tcp": [
9091,
9091,
"tcp",
"Prometheus Pushgateway"
],
"promtail-http": [
9080,
9080,
"tcp",
"Promtail endpoint"
],
"puppet-tcp": [
8140,
8140,
"tcp",
"Puppet"
],
"puppetdb-tcp": [
8081,
8081,
"tcp",
"PuppetDB"
],
"rabbitmq-15672-tcp": [
15672,
15672,
"tcp",
"RabbitMQ"
],
"rabbitmq-25672-tcp": [
25672,
25672,
"tcp",
"RabbitMQ"
],
"rabbitmq-4369-tcp": [
4369,
4369,
"tcp",
"RabbitMQ epmd"
],
"rabbitmq-5671-tcp": [
5671,
5671,
"tcp",
"RabbitMQ"
],
"rabbitmq-5672-tcp": [
5672,
5672,
"tcp",
"RabbitMQ"
],
"rdp-tcp": [
3389,
3389,
"tcp",
"Remote Desktop"
],
"rdp-udp": [
3389,
3389,
"udp",
"Remote Desktop"
],
"redis-tcp": [
6379,
6379,
"tcp",
"Redis"
],
"redshift-tcp": [
5439,
5439,
"tcp",
"Redshift"
],
"saltstack-tcp": [
4505,
4506,
"tcp",
"SaltStack"
],
"smtp-submission-2587-tcp": [
2587,
2587,
"tcp",
"SMTP Submission"
],
"smtp-submission-587-tcp": [
587,
587,
"tcp",
"SMTP Submission"
],
"smtp-tcp": [
25,
25,
"tcp",
"SMTP"
],
"smtps-2456-tcp": [
2465,
2465,
"tcp",
"SMTPS"
],
"smtps-465-tcp": [
465,
465,
"tcp",
"SMTPS"
],
"solr-tcp": [
8983,
8987,
"tcp",
"Solr"
],
"splunk-hec-tcp": [
8088,
8088,
"tcp",
"Splunk HEC"
],
"splunk-indexer-tcp": [
9997,
9997,
"tcp",
"Splunk indexer"
],
"splunk-splunkd-tcp": [
8089,
8089,
"tcp",
"Splunkd"
],
"splunk-web-tcp": [
8000,
8000,
"tcp",
"Splunk Web"
],
"squid-proxy-tcp": [
3128,
3128,
"tcp",
"Squid default proxy"
],
"ssh-tcp": [
22,
22,
"tcp",
"SSH"
],
"storm-nimbus-tcp": [
6627,
6627,
"tcp",
"Nimbus"
],
"storm-supervisor-tcp": [
6700,
6703,
"tcp",
"Supervisor"
],
"storm-ui-tcp": [
8080,
8080,
"tcp",
"Storm UI"
],
"vault-tcp": [
8200,
8200,
"tcp",
"Vault"
],
"wazuh-dashboard": [
443,
443,
"tcp",
"Wazuh web user interface"
],
"wazuh-indexer-restful-api": [
9200,
9200,
"tcp",
"Wazuh indexer RESTful API"
],
"wazuh-server-agent-cluster-daemon": [
1516,
1516,
"tcp",
"Wazuh cluster daemon"
],
"wazuh-server-agent-connection-tcp": [
1514,
1514,
"tcp",
"Agent connection service(TCP)"
],
"wazuh-server-agent-connection-udp": [
1514,
1514,
"udp",
"Agent connection service(UDP)"
],
"wazuh-server-agent-enrollment": [
1515,
1515,
"tcp",
"Agent enrollment service"
],
"wazuh-server-restful-api": [
55000,
55000,
"tcp",
"Wazuh server RESTful API"
],
"wazuh-server-syslog-collector-tcp": [
514,
514,
"tcp",
"Wazuh Syslog collector(TCP)"
],
"wazuh-server-syslog-collector-udp": [
514,
514,
"udp",
"Wazuh Syslog collector(UDP)"
],
"web-jmx-tcp": [
1099,
1099,
"tcp",
"JMX"
],
"winrm-http-tcp": [
5985,
5985,
"tcp",
"WinRM HTTP"
],
"winrm-https-tcp": [
5986,
5986,
"tcp",
"WinRM HTTPS"
],
"zabbix-agent": [
10050,
10050,
"tcp",
"Zabbix Agent"
],
"zabbix-proxy": [
10051,
10051,
"tcp",
"Zabbix Proxy"
],
"zabbix-server": [
10051,
10051,
"tcp",
"Zabbix Server"
],
"zipkin-admin-query-tcp": [
9901,
9901,
"tcp",
"Zipkin Admin port query"
],
"zipkin-admin-tcp": [
9990,
9990,
"tcp",
"Zipkin Admin port collector"
],
"zipkin-admin-web-tcp": [
9991,
9991,
"tcp",
"Zipkin Admin port web"
],
"zipkin-query-tcp": [
9411,
9411,
"tcp",
"Zipkin query port"
],
"zipkin-web-tcp": [
8080,
8080,
"tcp",
"Zipkin web port"
],
"zookeeper-2181-tcp": [
2181,
2181,
"tcp",
"Zookeeper"
],
"zookeeper-2182-tls-tcp": [
2182,
2182,
"tcp",
"Zookeeper TLS (MSK specific)"
],
"zookeeper-2888-tcp": [
2888,
2888,
"tcp",
"Zookeeper"
],
"zookeeper-3888-tcp": [
3888,
3888,
"tcp",
"Zookeeper"
],
"zookeeper-jmx-tcp": [
7199,
7199,
"tcp",
"JMX"
]
}
| no | +| [rules](#input\_rules) | Map of known security group rules (define as 'name' = ['from port', 'to port', 'ip\_protocol', 'description']) | `map(list(any))` |
{
"_": [
"",
"",
""
],
"activemq-5671-tcp": [
5671,
5671,
"tcp",
"ActiveMQ AMQP"
],
"activemq-61614-tcp": [
61614,
61614,
"tcp",
"ActiveMQ STOMP"
],
"activemq-61617-tcp": [
61617,
61617,
"tcp",
"ActiveMQ OpenWire"
],
"activemq-61619-tcp": [
61619,
61619,
"tcp",
"ActiveMQ WebSocket"
],
"activemq-8883-tcp": [
8883,
8883,
"tcp",
"ActiveMQ MQTT"
],
"alertmanager-9093-tcp": [
9093,
9093,
"tcp",
"Alert Manager"
],
"alertmanager-9094-tcp": [
9094,
9094,
"tcp",
"Alert Manager Cluster"
],
"all-all": [
-1,
-1,
"-1",
"All protocols"
],
"all-icmp": [
-1,
-1,
"icmp",
"All IPV4 ICMP"
],
"all-ipv6-icmp": [
-1,
-1,
58,
"All IPV6 ICMP"
],
"all-tcp": [
0,
65535,
"tcp",
"All TCP ports"
],
"all-udp": [
0,
65535,
"udp",
"All UDP ports"
],
"carbon-admin-tcp": [
2004,
2004,
"tcp",
"Carbon admin"
],
"carbon-gui-udp": [
8081,
8081,
"tcp",
"Carbon GUI"
],
"carbon-line-in-tcp": [
2003,
2003,
"tcp",
"Carbon line-in"
],
"carbon-line-in-udp": [
2003,
2003,
"udp",
"Carbon line-in"
],
"carbon-pickle-tcp": [
2013,
2013,
"tcp",
"Carbon pickle"
],
"carbon-pickle-udp": [
2013,
2013,
"udp",
"Carbon pickle"
],
"cassandra-clients-tcp": [
9042,
9042,
"tcp",
"Cassandra clients"
],
"cassandra-jmx-tcp": [
7199,
7199,
"tcp",
"JMX"
],
"cassandra-thrift-clients-tcp": [
9160,
9160,
"tcp",
"Cassandra Thrift clients"
],
"consul-dns-tcp": [
8600,
8600,
"tcp",
"Consul DNS"
],
"consul-dns-udp": [
8600,
8600,
"udp",
"Consul DNS"
],
"consul-grpc-tcp": [
8502,
8502,
"tcp",
"Consul gRPC"
],
"consul-grpc-tcp-tls": [
8503,
8503,
"tcp",
"Consul gRPC TLS"
],
"consul-serf-lan-tcp": [
8301,
8301,
"tcp",
"Serf LAN"
],
"consul-serf-lan-udp": [
8301,
8301,
"udp",
"Serf LAN"
],
"consul-serf-wan-tcp": [
8302,
8302,
"tcp",
"Serf WAN"
],
"consul-serf-wan-udp": [
8302,
8302,
"udp",
"Serf WAN"
],
"consul-tcp": [
8300,
8300,
"tcp",
"Consul server"
],
"consul-webui-http-tcp": [
8500,
8500,
"tcp",
"Consul web UI HTTP"
],
"consul-webui-https-tcp": [
8501,
8501,
"tcp",
"Consul web UI HTTPS"
],
"dax-cluster-encrypted-tcp": [
9111,
9111,
"tcp",
"DAX Cluster encrypted"
],
"dax-cluster-unencrypted-tcp": [
8111,
8111,
"tcp",
"DAX Cluster unencrypted"
],
"dns-tcp": [
53,
53,
"tcp",
"DNS"
],
"dns-udp": [
53,
53,
"udp",
"DNS"
],
"docker-swarm-mngmt-tcp": [
2377,
2377,
"tcp",
"Docker Swarm cluster management"
],
"docker-swarm-node-tcp": [
7946,
7946,
"tcp",
"Docker Swarm node"
],
"docker-swarm-node-udp": [
7946,
7946,
"udp",
"Docker Swarm node"
],
"docker-swarm-overlay-udp": [
4789,
4789,
"udp",
"Docker Swarm Overlay Network Traffic"
],
"elasticsearch-java-tcp": [
9300,
9300,
"tcp",
"Elasticsearch Java interface"
],
"elasticsearch-rest-tcp": [
9200,
9200,
"tcp",
"Elasticsearch REST interface"
],
"etcd-client-tcp": [
2379,
2379,
"tcp",
"Etcd Client"
],
"etcd-peer-tcp": [
2380,
2380,
"tcp",
"Etcd Peer"
],
"grafana-tcp": [
3000,
3000,
"tcp",
"Grafana Dashboard"
],
"graphite-2003-tcp": [
2003,
2003,
"tcp",
"Carbon receiver plain text"
],
"graphite-2004-tcp": [
2004,
2004,
"tcp",
"Carbon receiver pickle"
],
"graphite-2023-tcp": [
2023,
2023,
"tcp",
"Carbon aggregator plaintext"
],
"graphite-2024-tcp": [
2024,
2024,
"tcp",
"Carbon aggregator pickle"
],
"graphite-8080-tcp": [
8080,
8080,
"tcp",
"Graphite gunicorn port"
],
"graphite-8125-tcp": [
8125,
8125,
"tcp",
"Statsd TCP"
],
"graphite-8125-udp": [
8125,
8125,
"udp",
"Statsd UDP default"
],
"graphite-8126-tcp": [
8126,
8126,
"tcp",
"Statsd admin"
],
"graphite-webui": [
80,
80,
"tcp",
"Graphite admin interface"
],
"http-80-tcp": [
80,
80,
"tcp",
"HTTP"
],
"http-8080-tcp": [
8080,
8080,
"tcp",
"HTTP"
],
"https-443-tcp": [
443,
443,
"tcp",
"HTTPS"
],
"https-8443-tcp": [
8443,
8443,
"tcp",
"HTTPS"
],
"ipsec-4500-udp": [
4500,
4500,
"udp",
"IPSEC NAT-T"
],
"ipsec-500-udp": [
500,
500,
"udp",
"IPSEC ISAKMP"
],
"kafka-broker-sasl-iam-public-tcp": [
9198,
9198,
"tcp",
"Kafka SASL/IAM Public access control enabled (MSK specific)"
],
"kafka-broker-sasl-iam-tcp": [
9098,
9098,
"tcp",
"Kafka SASL/IAM access control enabled (MSK specific)"
],
"kafka-broker-sasl-scram-public-tcp": [
9196,
9196,
"tcp",
"Kafka SASL/SCRAM Public enabled broker (MSK specific)"
],
"kafka-broker-sasl-scram-tcp": [
9096,
9096,
"tcp",
"Kafka SASL/SCRAM enabled broker (MSK specific)"
],
"kafka-broker-tcp": [
9092,
9092,
"tcp",
"Kafka PLAINTEXT enable broker 0.8.2+"
],
"kafka-broker-tls-public-tcp": [
9194,
9194,
"tcp",
"Kafka TLS Public enabled broker 0.8.2+ (MSK specific)"
],
"kafka-broker-tls-tcp": [
9094,
9094,
"tcp",
"Kafka TLS enabled broker 0.8.2+"
],
"kafka-jmx-exporter-tcp": [
11001,
11001,
"tcp",
"Kafka JMX Exporter"
],
"kafka-node-exporter-tcp": [
11002,
11002,
"tcp",
"Kafka Node Exporter"
],
"kibana-tcp": [
5601,
5601,
"tcp",
"Kibana Web Interface"
],
"kubernetes-api-tcp": [
6443,
6443,
"tcp",
"Kubernetes API Server"
],
"ldap-tcp": [
389,
389,
"tcp",
"LDAP"
],
"ldaps-tcp": [
636,
636,
"tcp",
"LDAPS"
],
"logstash-tcp": [
5044,
5044,
"tcp",
"Logstash"
],
"loki-grafana": [
3100,
3100,
"tcp",
"Grafana Loki endpoint"
],
"loki-grafana-grpc": [
9095,
9095,
"tcp",
"Grafana Loki GRPC"
],
"memcached-tcp": [
11211,
11211,
"tcp",
"Memcached"
],
"minio-tcp": [
9000,
9000,
"tcp",
"MinIO"
],
"mongodb-27017-tcp": [
27017,
27017,
"tcp",
"MongoDB"
],
"mongodb-27018-tcp": [
27018,
27018,
"tcp",
"MongoDB shard"
],
"mongodb-27019-tcp": [
27019,
27019,
"tcp",
"MongoDB config server"
],
"mssql-analytics-tcp": [
2383,
2383,
"tcp",
"MSSQL Analytics"
],
"mssql-broker-tcp": [
4022,
4022,
"tcp",
"MSSQL Broker"
],
"mssql-tcp": [
1433,
1433,
"tcp",
"MSSQL Server"
],
"mssql-udp": [
1434,
1434,
"udp",
"MSSQL Browser"
],
"mysql-tcp": [
3306,
3306,
"tcp",
"MySQL/Aurora"
],
"nfs-tcp": [
2049,
2049,
"tcp",
"NFS/EFS"
],
"nomad-http-tcp": [
4646,
4646,
"tcp",
"Nomad HTTP"
],
"nomad-rpc-tcp": [
4647,
4647,
"tcp",
"Nomad RPC"
],
"nomad-serf-tcp": [
4648,
4648,
"tcp",
"Serf"
],
"nomad-serf-udp": [
4648,
4648,
"udp",
"Serf"
],
"ntp-udp": [
123,
123,
"udp",
"NTP"
],
"octopus-tentacle-tcp": [
10933,
10933,
"tcp",
"Octopus Tentacle"
],
"openvpn-https-tcp": [
443,
443,
"tcp",
"OpenVPN"
],
"openvpn-tcp": [
943,
943,
"tcp",
"OpenVPN"
],
"openvpn-udp": [
1194,
1194,
"udp",
"OpenVPN"
],
"oracle-db-tcp": [
1521,
1521,
"tcp",
"Oracle"
],
"postgresql-tcp": [
5432,
5432,
"tcp",
"PostgreSQL"
],
"prometheus-http-tcp": [
9090,
9090,
"tcp",
"Prometheus"
],
"prometheus-node-exporter-http-tcp": [
9100,
9100,
"tcp",
"Prometheus Node Exporter"
],
"prometheus-pushgateway-http-tcp": [
9091,
9091,
"tcp",
"Prometheus Pushgateway"
],
"promtail-http": [
9080,
9080,
"tcp",
"Promtail endpoint"
],
"puppet-tcp": [
8140,
8140,
"tcp",
"Puppet"
],
"puppetdb-tcp": [
8081,
8081,
"tcp",
"PuppetDB"
],
"rabbitmq-15672-tcp": [
15672,
15672,
"tcp",
"RabbitMQ"
],
"rabbitmq-25672-tcp": [
25672,
25672,
"tcp",
"RabbitMQ"
],
"rabbitmq-4369-tcp": [
4369,
4369,
"tcp",
"RabbitMQ epmd"
],
"rabbitmq-5671-tcp": [
5671,
5671,
"tcp",
"RabbitMQ"
],
"rabbitmq-5672-tcp": [
5672,
5672,
"tcp",
"RabbitMQ"
],
"rdp-tcp": [
3389,
3389,
"tcp",
"Remote Desktop"
],
"rdp-udp": [
3389,
3389,
"udp",
"Remote Desktop"
],
"redis-tcp": [
6379,
6379,
"tcp",
"Redis"
],
"redshift-tcp": [
5439,
5439,
"tcp",
"Redshift"
],
"saltstack-tcp": [
4505,
4506,
"tcp",
"SaltStack"
],
"smtp-submission-2587-tcp": [
2587,
2587,
"tcp",
"SMTP Submission"
],
"smtp-submission-587-tcp": [
587,
587,
"tcp",
"SMTP Submission"
],
"smtp-tcp": [
25,
25,
"tcp",
"SMTP"
],
"smtps-2456-tcp": [
2465,
2465,
"tcp",
"SMTPS"
],
"smtps-465-tcp": [
465,
465,
"tcp",
"SMTPS"
],
"solr-tcp": [
8983,
8987,
"tcp",
"Solr"
],
"splunk-hec-tcp": [
8088,
8088,
"tcp",
"Splunk HEC"
],
"splunk-indexer-tcp": [
9997,
9997,
"tcp",
"Splunk indexer"
],
"splunk-splunkd-tcp": [
8089,
8089,
"tcp",
"Splunkd"
],
"splunk-web-tcp": [
8000,
8000,
"tcp",
"Splunk Web"
],
"squid-proxy-tcp": [
3128,
3128,
"tcp",
"Squid default proxy"
],
"ssh-tcp": [
22,
22,
"tcp",
"SSH"
],
"storm-nimbus-tcp": [
6627,
6627,
"tcp",
"Nimbus"
],
"storm-supervisor-tcp": [
6700,
6703,
"tcp",
"Supervisor"
],
"storm-ui-tcp": [
8080,
8080,
"tcp",
"Storm UI"
],
"vault-tcp": [
8200,
8200,
"tcp",
"Vault"
],
"wazuh-dashboard": [
443,
443,
"tcp",
"Wazuh web user interface"
],
"wazuh-indexer-restful-api": [
9200,
9200,
"tcp",
"Wazuh indexer RESTful API"
],
"wazuh-server-agent-cluster-daemon": [
1516,
1516,
"tcp",
"Wazuh cluster daemon"
],
"wazuh-server-agent-connection-tcp": [
1514,
1514,
"tcp",
"Agent connection service(TCP)"
],
"wazuh-server-agent-connection-udp": [
1514,
1514,
"udp",
"Agent connection service(UDP)"
],
"wazuh-server-agent-enrollment": [
1515,
1515,
"tcp",
"Agent enrollment service"
],
"wazuh-server-restful-api": [
55000,
55000,
"tcp",
"Wazuh server RESTful API"
],
"wazuh-server-syslog-collector-tcp": [
514,
514,
"tcp",
"Wazuh Syslog collector(TCP)"
],
"wazuh-server-syslog-collector-udp": [
514,
514,
"udp",
"Wazuh Syslog collector(UDP)"
],
"web-jmx-tcp": [
1099,
1099,
"tcp",
"JMX"
],
"winrm-http-tcp": [
5985,
5985,
"tcp",
"WinRM HTTP"
],
"winrm-https-tcp": [
5986,
5986,
"tcp",
"WinRM HTTPS"
],
"zabbix-agent": [
10050,
10050,
"tcp",
"Zabbix Agent"
],
"zabbix-proxy": [
10051,
10051,
"tcp",
"Zabbix Proxy"
],
"zabbix-server": [
10051,
10051,
"tcp",
"Zabbix Server"
],
"zipkin-admin-query-tcp": [
9901,
9901,
"tcp",
"Zipkin Admin port query"
],
"zipkin-admin-tcp": [
9990,
9990,
"tcp",
"Zipkin Admin port collector"
],
"zipkin-admin-web-tcp": [
9991,
9991,
"tcp",
"Zipkin Admin port web"
],
"zipkin-query-tcp": [
9411,
9411,
"tcp",
"Zipkin query port"
],
"zipkin-web-tcp": [
8080,
8080,
"tcp",
"Zipkin web port"
],
"zookeeper-2181-tcp": [
2181,
2181,
"tcp",
"Zookeeper"
],
"zookeeper-2182-tls-tcp": [
2182,
2182,
"tcp",
"Zookeeper TLS (MSK specific)"
],
"zookeeper-2888-tcp": [
2888,
2888,
"tcp",
"Zookeeper"
],
"zookeeper-3888-tcp": [
3888,
3888,
"tcp",
"Zookeeper"
],
"zookeeper-jmx-tcp": [
7199,
7199,
"tcp",
"JMX"
]
}
| no | | [security\_group\_id](#input\_security\_group\_id) | ID of existing security group whose rules we will manage | `string` | `null` | no | | [tags](#input\_tags) | A mapping of tags to assign to security group | `map(string)` | `{}` | no | | [use\_name\_prefix](#input\_use\_name\_prefix) | Whether to use name\_prefix or fixed name. Should be true to able to update security group name after initial creation | `bool` | `true` | no | diff --git a/examples/complete/main.tf b/examples/complete/main.tf index 5e26fa45..de86fedc 100644 --- a/examples/complete/main.tf +++ b/examples/complete/main.tf @@ -40,8 +40,8 @@ module "main_sg" { description = "Security group which is used as an argument in complete-sg" vpc_id = data.aws_vpc.default.id - ingress_cidr_blocks = ["10.10.0.0/16"] - ingress_rules = ["https-443-tcp"] + ingress_cidr_ipv4 = ["10.10.0.0/16"] + ingress_rules = ["https-443-tcp"] } ################################################ @@ -61,110 +61,110 @@ module "complete_sg" { # Default CIDR blocks, which will be used for all ingress rules in this module. Typically these are CIDR blocks of the VPC. # If this is not specified then no CIDR blocks will be used. - ingress_cidr_blocks = ["10.10.0.0/16"] + ingress_cidr_ipv4 = ["10.10.0.0/16"] - ingress_ipv6_cidr_blocks = ["2001:db8::/64"] + ingress_cidr_ipv6 = ["2001:db8::/64"] # Prefix list ids to use in all ingress rules in this module. # ingress_prefix_list_ids = [data.aws_prefix_list.s3.id, data.aws_prefix_list.dynamodb.id] - # Open for all CIDRs defined in ingress_cidr_blocks + # Open for all CIDRs defined in ingress_cidr_ipv4 ingress_rules = ["https-443-tcp"] # Use computed value here (eg, `${module...}`). Plain string is not a real use-case for this argument. computed_ingress_rules = ["ssh-tcp"] number_of_computed_ingress_rules = 1 - # Open to CIDRs blocks (rule or from_port+to_port+protocol+description) - ingress_with_cidr_blocks = [ + # Open to CIDRs blocks (rule or from_port+to_port+ip_protocol+description) + ingress_with_cidr_ipv4 = [ { - rule = "postgresql-tcp" - cidr_blocks = "0.0.0.0/0,2.2.2.2/32" + rule = "postgresql-tcp" + cidr_ipv4 = "0.0.0.0/0" }, { - rule = "postgresql-tcp" - cidr_blocks = "30.30.30.30/32" + rule = "postgresql-tcp" + cidr_ipv4 = "30.30.30.30/32" }, { from_port = 10 to_port = 20 - protocol = 6 + ip_protocol = 6 description = "Service name" - cidr_blocks = "10.10.0.0/20" + cidr_ipv4 = "10.10.0.0/20" }, ] - computed_ingress_with_cidr_blocks = [ + computed_ingress_with_cidr_ipv4 = [ { - rule = "postgresql-tcp" - cidr_blocks = "3.3.3.3/32,${module.vpc.vpc_cidr_block}" + rule = "postgresql-tcp" + cidr_ipv4 = "3.3.3.3/32" }, { from_port = 15 to_port = 25 - protocol = 6 + ip_protocol = 6 description = "Service name with vpc cidr" - cidr_blocks = module.vpc.vpc_cidr_block + cidr_ipv4 = module.vpc.vpc_cidr_block }, ] - number_of_computed_ingress_with_cidr_blocks = 2 + number_of_computed_ingress_with_cidr_ipv4 = 2 - # Open to IPV6 CIDR blocks (rule or from_port+to_port+protocol+description) - ingress_with_ipv6_cidr_blocks = [ + # Open to IPV6 CIDR blocks (rule or from_port+to_port+ip_protocol+description) + ingress_with_cidr_ipv6 = [ { - from_port = 300 - to_port = 400 - protocol = "tcp" - description = "Service ports (ipv6)" - ipv6_cidr_blocks = "2001:db8::/64" + from_port = 300 + to_port = 400 + ip_protocol = "tcp" + description = "Service ports (ipv6)" + cidr_ipv6 = "2001:db8::/64" }, ] - computed_ingress_with_ipv6_cidr_blocks = [ + computed_ingress_with_cidr_ipv6 = [ { - from_port = 350 - to_port = 450 - protocol = "tcp" - description = "Service ports (ipv6). VPC ID = ${module.vpc.vpc_id}" - ipv6_cidr_blocks = "2001:db8::/64" + from_port = 350 + to_port = 450 + ip_protocol = "tcp" + description = "Service ports (ipv6). VPC ID = ${module.vpc.vpc_id}" + cidr_ipv6 = "2001:db8::/64" }, ] - number_of_computed_ingress_with_ipv6_cidr_blocks = 1 + number_of_computed_ingress_with_cidr_ipv6 = 1 - # Open for security group id (rule or from_port+to_port+protocol+description) - ingress_with_source_security_group_id = [ + # Open for security group id (rule or from_port+to_port+ip_protocol+description) + ingress_with_referenced_security_group_id = [ { - rule = "mysql-tcp" - source_security_group_id = data.aws_security_group.default.id + rule = "mysql-tcp" + referenced_security_group_id = data.aws_security_group.default.id }, { - from_port = 10 - to_port = 10 - protocol = 6 - description = "Service name" - source_security_group_id = data.aws_security_group.default.id + from_port = 10 + to_port = 10 + ip_protocol = 6 + description = "Service name" + referenced_security_group_id = data.aws_security_group.default.id }, ] - computed_ingress_with_source_security_group_id = [ + computed_ingress_with_referenced_security_group_id = [ { - rule = "postgresql-tcp" - source_security_group_id = module.main_sg.security_group_id + rule = "postgresql-tcp" + referenced_security_group_id = module.main_sg.security_group_id }, { - from_port = 23 - to_port = 23 - protocol = 6 - description = "Service name" - source_security_group_id = module.main_sg.security_group_id + from_port = 23 + to_port = 23 + ip_protocol = 6 + description = "Service name" + referenced_security_group_id = module.main_sg.security_group_id }, ] - number_of_computed_ingress_with_source_security_group_id = 2 + number_of_computed_ingress_with_referenced_security_group_id = 2 - # Open for self (rule or from_port+to_port+protocol+description) + # Open for self (rule or from_port+to_port+ip_protocol+description) ingress_with_self = [ { rule = "all-all" @@ -172,15 +172,13 @@ module "complete_sg" { { from_port = 30 to_port = 40 - protocol = 6 + ip_protocol = 6 description = "Service name" - self = true }, { - from_port = 41 - to_port = 51 - protocol = 6 - self = true + from_port = 41 + to_port = 51 + ip_protocol = 6 }, ] @@ -188,9 +186,8 @@ module "complete_sg" { { from_port = 32 to_port = 43 - protocol = 6 + ip_protocol = 6 description = "Service name. VPC ID: ${module.vpc.vpc_id}" - self = true }, ] @@ -198,94 +195,94 @@ module "complete_sg" { # Default CIDR blocks, which will be used for all egress rules in this module. Typically these are CIDR blocks of the VPC. # If this is not specified then no CIDR blocks will be used. - egress_cidr_blocks = ["10.10.0.0/16"] + egress_cidr_ipv4 = ["10.10.0.0/16"] - egress_ipv6_cidr_blocks = ["2001:db8::/64"] + egress_cidr_ipv6 = ["2001:db8::/64"] # Prefix list ids to use in all egress rules in this module. # egress_prefix_list_ids = ["pl-123456"] - # Open for all CIDRs defined in egress_cidr_blocks + # Open for all CIDRs defined in egress_cidr_ipv4 egress_rules = ["http-80-tcp"] computed_egress_rules = ["ssh-tcp"] number_of_computed_egress_rules = 1 - # Open to CIDRs blocks (rule or from_port+to_port+protocol+description) - egress_with_cidr_blocks = [ + # Open to CIDRs blocks (rule or from_port+to_port+ip_protocol+description) + egress_with_cidr_ipv4 = [ { - rule = "postgresql-tcp" - cidr_blocks = "0.0.0.0/0,2.2.2.2/32" + rule = "postgresql-tcp" + cidr_ipv4 = "0.0.0.0/0" }, { - rule = "https-443-tcp" - cidr_blocks = "30.30.30.30/32" + rule = "https-443-tcp" + cidr_ipv4 = "30.30.30.30/32" }, { from_port = 10 to_port = 20 - protocol = 6 + ip_protocol = 6 description = "Service name" - cidr_blocks = "10.10.0.0/20" + cidr_ipv4 = "10.10.0.0/20" }, ] - computed_egress_with_cidr_blocks = [ + computed_egress_with_cidr_ipv4 = [ { - rule = "https-443-tcp" - cidr_blocks = module.vpc.vpc_cidr_block + rule = "https-443-tcp" + cidr_ipv4 = module.vpc.vpc_cidr_block }, ] - number_of_computed_egress_with_cidr_blocks = 1 + number_of_computed_egress_with_cidr_ipv4 = 1 - # Open to IPV6 CIDR blocks (rule or from_port+to_port+protocol+description) - egress_with_ipv6_cidr_blocks = [ + # Open to IPV6 CIDR blocks (rule or from_port+to_port+ip_protocol+description) + egress_with_cidr_ipv6 = [ { - from_port = 300 - to_port = 400 - protocol = "tcp" - description = "Service ports (ipv6)" - ipv6_cidr_blocks = "2001:db8::/64" + from_port = 300 + to_port = 400 + ip_protocol = "tcp" + description = "Service ports (ipv6)" + cidr_ipv6 = "2001:db8::/64" }, ] - computed_egress_with_ipv6_cidr_blocks = [ + computed_egress_with_cidr_ipv6 = [ { - from_port = 55 - to_port = 66 - protocol = "tcp" - description = "Service ports (ipv6). VPC ID: ${module.vpc.vpc_id}" - ipv6_cidr_blocks = "2001:db8::/64" + from_port = 55 + to_port = 66 + ip_protocol = "tcp" + description = "Service ports (ipv6). VPC ID: ${module.vpc.vpc_id}" + cidr_ipv6 = "2001:db8::/64" }, ] - number_of_computed_egress_with_ipv6_cidr_blocks = 1 + number_of_computed_egress_with_cidr_ipv6 = 1 - # Open for security group id (rule or from_port+to_port+protocol+description) - egress_with_source_security_group_id = [ + # Open for security group id (rule or from_port+to_port+ip_protocol+description) + egress_with_referenced_security_group_id = [ { - rule = "mysql-tcp" - source_security_group_id = data.aws_security_group.default.id + rule = "mysql-tcp" + referenced_security_group_id = data.aws_security_group.default.id }, { - from_port = 10 - to_port = 10 - protocol = 6 - description = "Service name" - source_security_group_id = data.aws_security_group.default.id + from_port = 10 + to_port = 10 + ip_protocol = 6 + description = "Service name" + referenced_security_group_id = data.aws_security_group.default.id }, ] - computed_egress_with_source_security_group_id = [ + computed_egress_with_referenced_security_group_id = [ { - rule = "postgresql-tcp" - source_security_group_id = module.main_sg.security_group_id + rule = "postgresql-tcp" + referenced_security_group_id = module.main_sg.security_group_id }, ] - number_of_computed_egress_with_source_security_group_id = 1 + number_of_computed_egress_with_referenced_security_group_id = 1 - # Open for self (rule or from_port+to_port+protocol+description) + # Open for self (rule or from_port+to_port+ip_protocol+description) egress_with_self = [ { rule = "all-all" @@ -293,15 +290,13 @@ module "complete_sg" { { from_port = 30 to_port = 40 - protocol = "tcp" + ip_protocol = "tcp" description = "Service name" - self = true }, { - from_port = 41 - to_port = 51 - protocol = 6 - self = true + from_port = 41 + to_port = 51 + ip_protocol = 6 }, ] @@ -327,43 +322,43 @@ module "ipv4_ipv6_example" { description = "IPv4 and IPv6 example" vpc_id = data.aws_vpc.default.id - ingress_with_cidr_blocks = [ + ingress_with_cidr_ipv4 = [ { from_port = 8080 to_port = 8090 - protocol = "tcp" + ip_protocol = "tcp" description = "User-service ports (ipv4)" - cidr_blocks = "0.0.0.0/0" + cidr_ipv4 = "0.0.0.0/0" }, ] - ingress_with_ipv6_cidr_blocks = [ + ingress_with_cidr_ipv6 = [ { - from_port = 8080 - to_port = 8090 - protocol = "tcp" - description = "User-service ports (ipv6)" - ipv6_cidr_blocks = "2001:db8::/64" + from_port = 8080 + to_port = 8090 + ip_protocol = "tcp" + description = "User-service ports (ipv6)" + cidr_ipv6 = "2001:db8::/64" }, ] - egress_with_cidr_blocks = [ + egress_with_cidr_ipv4 = [ { from_port = 8090 to_port = 8100 - protocol = "tcp" + ip_protocol = "tcp" description = "User-service ports (ipv4)" - cidr_blocks = "0.0.0.0/0" + cidr_ipv4 = "0.0.0.0/0" }, ] - egress_with_ipv6_cidr_blocks = [ + egress_with_cidr_ipv6 = [ { - from_port = 8090 - to_port = 8100 - protocol = "tcp" - description = "User-service ports (ipv6)" - ipv6_cidr_blocks = "2001:db8::/64" + from_port = 8090 + to_port = 8100 + ip_protocol = "tcp" + description = "User-service ports (ipv6)" + cidr_ipv6 = "2001:db8::/64" }, ] } @@ -380,8 +375,8 @@ module "fixed_name_sg" { use_name_prefix = false - ingress_cidr_blocks = ["10.10.0.0/16"] - ingress_rules = ["https-443-tcp"] + ingress_cidr_ipv4 = ["10.10.0.0/16"] + ingress_rules = ["https-443-tcp"] } ############################ @@ -392,11 +387,11 @@ module "only_rules" { create_sg = false security_group_id = module.complete_sg.security_group_id - ingress_with_source_security_group_id = [ + ingress_with_referenced_security_group_id = [ { - description = "http from service one" - rule = "http-80-tcp" - source_security_group_id = data.aws_security_group.default.id + description = "http from service one" + rule = "http-80-tcp" + referenced_security_group_id = data.aws_security_group.default.id }, ] } @@ -427,13 +422,13 @@ module "prefix_list" { vpc_id = data.aws_vpc.default.id ingress_prefix_list_ids = [data.aws_prefix_list.s3.id, data.aws_prefix_list.dynamodb.id] - ingress_with_prefix_list_ids = [ + ingress_with_prefix_list_id = [ { - from_port = 9100 - to_port = 9100 - protocol = 6 # "tcp" - description = "Arbitrary TCP port" - prefix_list_ids = join(",", [data.aws_prefix_list.s3.id, data.aws_prefix_list.dynamodb.id]) + from_port = 9100 + to_port = 9100 + ip_protocol = 6 # "tcp" + description = "Arbitrary TCP port" + prefix_list_id = data.aws_prefix_list.s3.id }, ] } @@ -462,16 +457,12 @@ module "prefix_list_sg" { use_name_prefix = false ingress_prefix_list_ids = [aws_ec2_managed_prefix_list.prefix_list_sg_example.id] - ingress_with_prefix_list_ids = [ - { - from_port = 80 - to_port = 80 - protocol = "tcp" - }, + ingress_with_prefix_list_id = [ { - from_port = 443 - to_port = 443 - protocol = "tcp" + from_port = 80 + to_port = 80 + ip_protocol = "tcp" + prefix_list_id = data.aws_prefix_list.s3.id }, ] } diff --git a/examples/computed/main.tf b/examples/computed/main.tf index 9e4f66c1..2456fd81 100644 --- a/examples/computed/main.tf +++ b/examples/computed/main.tf @@ -24,9 +24,9 @@ module "http_sg" { description = "Security group with HTTP port open for everyone, and HTTPS open just for the default security group" vpc_id = data.aws_vpc.default.id - ingress_cidr_blocks = ["0.0.0.0/0"] + ingress_cidr_ipv4 = ["0.0.0.0/0"] - ingress_with_source_security_group_id = [ + ingress_with_referenced_security_group_id = [ { rule = "https-443-tcp" source_security_group_id = data.aws_security_group.default.id @@ -41,14 +41,14 @@ module "mysql_sg" { description = "Security group with MySQL/Aurora port open for HTTP security group created above (computed)" vpc_id = data.aws_vpc.default.id - ingress_cidr_blocks = ["0.0.0.0/0"] + ingress_cidr_ipv4 = ["0.0.0.0/0"] - computed_ingress_with_source_security_group_id = [ + computed_ingress_with_referenced_security_group_id = [ { rule = "mysql-tcp" source_security_group_id = module.http_sg.security_group_id }, ] - number_of_computed_ingress_with_source_security_group_id = 1 + number_of_computed_ingress_with_referenced_security_group_id = 1 } diff --git a/examples/disabled/main.tf b/examples/disabled/main.tf index 18407735..08a11e3e 100644 --- a/examples/disabled/main.tf +++ b/examples/disabled/main.tf @@ -25,7 +25,7 @@ module "complete_sg_disabled" { description = "Security group with all available arguments set (this is just an example)" vpc_id = data.aws_vpc.default.id - ingress_cidr_blocks = ["0.0.0.0/0"] + ingress_cidr_ipv4 = ["0.0.0.0/0"] } module "http_sg_disabled" { @@ -36,5 +36,5 @@ module "http_sg_disabled" { description = "Security group with HTTP ports open for everybody (IPv4 CIDR), egress ports are all world open" vpc_id = data.aws_vpc.default.id - ingress_cidr_blocks = ["0.0.0.0/0"] + ingress_cidr_ipv4 = ["0.0.0.0/0"] } diff --git a/examples/dynamic/main.tf b/examples/dynamic/main.tf index b6cf0071..98b59292 100644 --- a/examples/dynamic/main.tf +++ b/examples/dynamic/main.tf @@ -28,9 +28,9 @@ module "http_sg" { description = "Security group with HTTP port open for everyone, and HTTPS open just for the default security group" vpc_id = data.aws_vpc.default.id - ingress_cidr_blocks = ["0.0.0.0/0"] + ingress_cidr_ipv4 = ["0.0.0.0/0"] - ingress_with_source_security_group_id = [ + ingress_with_referenced_security_group_id = [ { rule = "https-443-tcp" source_security_group_id = data.aws_security_group.default.id diff --git a/examples/http/main.tf b/examples/http/main.tf index 578fd0d3..4a9cf873 100644 --- a/examples/http/main.tf +++ b/examples/http/main.tf @@ -43,7 +43,7 @@ module "http_sg" { description = "Security group with HTTP ports open for everybody (IPv4 CIDR), egress ports are all world open" vpc_id = data.aws_vpc.default.id - ingress_cidr_blocks = ["0.0.0.0/0"] + ingress_cidr_ipv4 = ["0.0.0.0/0"] } ################################### @@ -72,7 +72,7 @@ module "http_mysql_1_sg" { description = "Security group with HTTP and MySQL ports open for everybody (IPv4 CIDR)" vpc_id = data.aws_vpc.default.id - ingress_cidr_blocks = ["0.0.0.0/0"] + ingress_cidr_ipv4 = ["0.0.0.0/0"] # Add MySQL rules ingress_rules = ["mysql-tcp"] @@ -92,8 +92,8 @@ module "http_mysql_2_sg" { ingress_rules = ["mysql-tcp"] # Allow ingress rules to be accessed only within current VPC - ingress_cidr_blocks = [data.aws_vpc.default.cidr_block] - ingress_ipv6_cidr_blocks = [] # Not all VPCs have IPv6 enabled, but if you have it enabled, then this will work - ["${data.aws_vpc.default.ipv6_cidr_block}"] + ingress_cidr_ipv4 = [data.aws_vpc.default.cidr_block] + ingress_cidr_ipv6 = [] # Not all VPCs have IPv6 enabled, but if you have it enabled, then this will work - ["${data.aws_vpc.default.ipv6_cidr_block}"] } ########################### @@ -107,7 +107,7 @@ module "http_with_egress_minimal_sg" { vpc_id = data.aws_vpc.default.id # Allow ingress rules to be accessed only within current VPC - ingress_cidr_blocks = [data.aws_vpc.default.cidr_block] + ingress_cidr_ipv4 = [data.aws_vpc.default.cidr_block] # Allow all rules for all protocols egress_rules = ["http-80-tcp"] @@ -127,10 +127,10 @@ module "http_with_egress_sg" { ingress_rules = ["mysql-tcp"] # Allow ingress rules to be accessed only within current VPC - ingress_cidr_blocks = [data.aws_vpc.default.cidr_block] - ingress_ipv6_cidr_blocks = [] # Not all VPCs have IPv6 enabled, but if you have it enabled, then this will work - ["${data.aws_vpc.default.ipv6_cidr_block}"] + ingress_cidr_ipv4 = [data.aws_vpc.default.cidr_block] + ingress_cidr_ipv6 = [] # Not all VPCs have IPv6 enabled, but if you have it enabled, then this will work - ["${data.aws_vpc.default.ipv6_cidr_block}"] # Allow egress rules to access anything (empty list means everything) - egress_cidr_blocks = ["10.10.10.0/28"] - egress_ipv6_cidr_blocks = [] # Not all VPCs have IPv6 enabled, but if you have it enabled, then this will work - ["${data.aws_vpc.default.ipv6_cidr_block}"] + egress_cidr_ipv4 = ["10.10.10.0/28"] + egress_cidr_ipv6 = [] # Not all VPCs have IPv6 enabled, but if you have it enabled, then this will work - ["${data.aws_vpc.default.ipv6_cidr_block}"] } diff --git a/examples/rules-only/main.tf b/examples/rules-only/main.tf index afcca63e..45f2a72f 100644 --- a/examples/rules-only/main.tf +++ b/examples/rules-only/main.tf @@ -37,7 +37,7 @@ module "rules_one" { create_sg = false security_group_id = aws_security_group.service_one.id - ingress_with_source_security_group_id = [ + ingress_with_referenced_security_group_id = [ { description = "http from service two" rule = "http-80-tcp" @@ -51,7 +51,7 @@ module "rules_two" { create_sg = false security_group_id = aws_security_group.service_two.id - ingress_with_source_security_group_id = [ + ingress_with_referenced_security_group_id = [ { description = "http from service one" rule = "http-80-tcp" diff --git a/main.tf b/main.tf index 6e9eede1..3b937125 100644 --- a/main.tf +++ b/main.tf @@ -5,6 +5,14 @@ locals { create = var.create && var.putin_khuylo this_sg_id = var.create_sg ? concat(aws_security_group.this.*.id, aws_security_group.this_name_prefix.*.id, [""])[0] : var.security_group_id + + ingress_rules_ipv4 = setproduct(var.ingress_rules, var.ingress_cidr_ipv4) + ingress_rules_ipv6 = setproduct(var.ingress_rules, var.ingress_cidr_ipv6) + ingress_rules_prefix_list_ids = setproduct(var.ingress_rules, var.ingress_prefix_list_ids) + + egress_rules_ipv4 = setproduct(var.egress_rules, var.egress_cidr_ipv4) + egress_rules_ipv6 = setproduct(var.egress_rules, var.egress_cidr_ipv6) + egress_rules_prefix_list_ids = setproduct(var.egress_rules, var.egress_prefix_list_ids) } ########################## @@ -62,324 +70,403 @@ resource "aws_security_group" "this_name_prefix" { ################################### # Ingress - List of rules (simple) ################################### -# Security group rules with "cidr_blocks" and it uses list of rules names -resource "aws_security_group_rule" "ingress_rules" { - count = local.create ? length(var.ingress_rules) : 0 +# Security group rules with "cidr_ipv4" and it uses list of rules names +resource "aws_vpc_security_group_ingress_rule" "ingress_rules_ipv4" { + count = local.create ? length(local.ingress_rules_ipv4) : 0 + + security_group_id = local.this_sg_id + + cidr_ipv4 = local.ingress_rules_ipv4[count.index][1] + description = var.rules[local.ingress_rules_ipv4[count.index][0]][3] + + from_port = var.rules[local.ingress_rules_ipv4[count.index][0]][0] + to_port = var.rules[local.ingress_rules_ipv4[count.index][0]][1] + ip_protocol = var.rules[local.ingress_rules_ipv4[count.index][0]][2] + + tags = var.tags +} + +resource "aws_vpc_security_group_ingress_rule" "ingress_rules_ipv6" { + count = local.create ? length(local.ingress_rules_ipv6) : 0 + + security_group_id = local.this_sg_id + + cidr_ipv6 = local.ingress_rules_ipv6[count.index][1] + description = var.rules[local.ingress_rules_ipv6[count.index][0]][3] + + from_port = var.rules[local.ingress_rules_ipv6[count.index][0]][0] + to_port = var.rules[local.ingress_rules_ipv6[count.index][0]][1] + ip_protocol = var.rules[local.ingress_rules_ipv6[count.index][0]][2] + + tags = var.tags +} + +resource "aws_vpc_security_group_ingress_rule" "ingress_rules_prefix_list_ids" { + count = local.create ? length(local.ingress_rules_prefix_list_ids) : 0 security_group_id = local.this_sg_id - type = "ingress" - cidr_blocks = var.ingress_cidr_blocks - ipv6_cidr_blocks = var.ingress_ipv6_cidr_blocks - prefix_list_ids = var.ingress_prefix_list_ids - description = var.rules[var.ingress_rules[count.index]][3] + prefix_list_id = local.ingress_rules_prefix_list_ids[count.index][1] + description = var.rules[local.ingress_rules_prefix_list_ids[count.index][0]][3] + + from_port = var.rules[local.ingress_rules_prefix_list_ids[count.index][0]][0] + to_port = var.rules[local.ingress_rules_prefix_list_ids[count.index][0]][1] + ip_protocol = var.rules[local.ingress_rules_prefix_list_ids[count.index][0]][2] - from_port = var.rules[var.ingress_rules[count.index]][0] - to_port = var.rules[var.ingress_rules[count.index]][1] - protocol = var.rules[var.ingress_rules[count.index]][2] + tags = var.tags } -# Computed - Security group rules with "cidr_blocks" and it uses list of rules names -resource "aws_security_group_rule" "computed_ingress_rules" { - count = local.create ? var.number_of_computed_ingress_rules : 0 +# Computed - Security group rules with "cidr_ipv4" and it uses list of rules names +resource "aws_vpc_security_group_ingress_rule" "computed_ingress_rules_ipv4" { + count = local.create ? var.number_of_computed_ingress_rules * length(var.ingress_cidr_ipv4) : 0 security_group_id = local.this_sg_id - type = "ingress" - cidr_blocks = var.ingress_cidr_blocks - ipv6_cidr_blocks = var.ingress_ipv6_cidr_blocks - prefix_list_ids = var.ingress_prefix_list_ids - description = var.rules[var.computed_ingress_rules[count.index]][3] + # Reference for looping in tf 0.11.0: https://serverfault.com/questions/833810/terraform-use-nested-loops-with-count + cidr_ipv4 = var.ingress_cidr_ipv4[floor(count.index / var.number_of_computed_ingress_rules)] + description = var.rules[var.computed_ingress_rules[count.index % var.number_of_computed_ingress_rules]][3] - from_port = var.rules[var.computed_ingress_rules[count.index]][0] - to_port = var.rules[var.computed_ingress_rules[count.index]][1] - protocol = var.rules[var.computed_ingress_rules[count.index]][2] + from_port = var.rules[var.computed_ingress_rules[count.index % var.number_of_computed_ingress_rules]][0] + to_port = var.rules[var.computed_ingress_rules[count.index % var.number_of_computed_ingress_rules]][1] + ip_protocol = var.rules[var.computed_ingress_rules[count.index % var.number_of_computed_ingress_rules]][2] + + tags = var.tags +} + +resource "aws_vpc_security_group_ingress_rule" "computed_ingress_rules_ipv6" { + count = local.create ? var.number_of_computed_ingress_rules * length(var.ingress_cidr_ipv6) : 0 + + security_group_id = local.this_sg_id + + # Reference for looping in tf 0.11.0: https://serverfault.com/questions/833810/terraform-use-nested-loops-with-count + cidr_ipv6 = var.ingress_cidr_ipv6[floor(count.index / var.number_of_computed_ingress_rules)] + description = var.rules[var.computed_ingress_rules[count.index % var.number_of_computed_ingress_rules]][3] + + from_port = var.rules[var.computed_ingress_rules[count.index % var.number_of_computed_ingress_rules]][0] + to_port = var.rules[var.computed_ingress_rules[count.index % var.number_of_computed_ingress_rules]][1] + ip_protocol = var.rules[var.computed_ingress_rules[count.index % var.number_of_computed_ingress_rules]][2] + + tags = var.tags +} + +resource "aws_vpc_security_group_ingress_rule" "computed_ingress_rules_prefix_list_ids" { + count = local.create ? var.number_of_computed_ingress_rules * length(var.ingress_prefix_list_ids) : 0 + + security_group_id = local.this_sg_id + + # Reference for looping in tf 0.11.0: https://serverfault.com/questions/833810/terraform-use-nested-loops-with-count + prefix_list_id = var.ingress_prefix_list_ids[floor(count.index / var.number_of_computed_ingress_rules)] + description = var.rules[var.computed_ingress_rules[count.index % var.number_of_computed_ingress_rules]][3] + + from_port = var.rules[var.computed_ingress_rules[count.index % var.number_of_computed_ingress_rules]][0] + to_port = var.rules[var.computed_ingress_rules[count.index % var.number_of_computed_ingress_rules]][1] + ip_protocol = var.rules[var.computed_ingress_rules[count.index % var.number_of_computed_ingress_rules]][2] + + tags = var.tags } ########################## # Ingress - Maps of rules ########################## -# Security group rules with "source_security_group_id", but without "cidr_blocks" and "self" -resource "aws_security_group_rule" "ingress_with_source_security_group_id" { - count = local.create ? length(var.ingress_with_source_security_group_id) : 0 +# Security group rules with "source_security_group_id", but without "cidr_ipv4" and "self" +resource "aws_vpc_security_group_ingress_rule" "ingress_with_referenced_security_group_id" { + count = local.create ? length(var.ingress_with_referenced_security_group_id) : 0 security_group_id = local.this_sg_id - type = "ingress" - source_security_group_id = var.ingress_with_source_security_group_id[count.index]["source_security_group_id"] - prefix_list_ids = var.ingress_prefix_list_ids + referenced_security_group_id = var.ingress_with_referenced_security_group_id[count.index]["referenced_security_group_id"] description = lookup( - var.ingress_with_source_security_group_id[count.index], + var.ingress_with_referenced_security_group_id[count.index], "description", "Ingress Rule", ) from_port = lookup( - var.ingress_with_source_security_group_id[count.index], + var.ingress_with_referenced_security_group_id[count.index], "from_port", var.rules[lookup( - var.ingress_with_source_security_group_id[count.index], + var.ingress_with_referenced_security_group_id[count.index], "rule", "_", )][0], ) to_port = lookup( - var.ingress_with_source_security_group_id[count.index], + var.ingress_with_referenced_security_group_id[count.index], "to_port", var.rules[lookup( - var.ingress_with_source_security_group_id[count.index], + var.ingress_with_referenced_security_group_id[count.index], "rule", "_", )][1], ) - protocol = lookup( - var.ingress_with_source_security_group_id[count.index], - "protocol", + ip_protocol = lookup( + var.ingress_with_referenced_security_group_id[count.index], + "ip_protocol", var.rules[lookup( - var.ingress_with_source_security_group_id[count.index], + var.ingress_with_referenced_security_group_id[count.index], "rule", "_", )][2], ) + + tags = var.tags } -# Computed - Security group rules with "source_security_group_id", but without "cidr_blocks" and "self" -resource "aws_security_group_rule" "computed_ingress_with_source_security_group_id" { - count = local.create ? var.number_of_computed_ingress_with_source_security_group_id : 0 +# Computed - Security group rules with "source_security_group_id", but without "cidr_ipv4" and "self" +resource "aws_vpc_security_group_ingress_rule" "computed_ingress_with_referenced_security_group_id" { + count = local.create ? var.number_of_computed_ingress_with_referenced_security_group_id : 0 security_group_id = local.this_sg_id - type = "ingress" - source_security_group_id = var.computed_ingress_with_source_security_group_id[count.index]["source_security_group_id"] - prefix_list_ids = var.ingress_prefix_list_ids + referenced_security_group_id = var.computed_ingress_with_referenced_security_group_id[count.index]["referenced_security_group_id"] description = lookup( - var.computed_ingress_with_source_security_group_id[count.index], + var.computed_ingress_with_referenced_security_group_id[count.index], "description", "Ingress Rule", ) from_port = lookup( - var.computed_ingress_with_source_security_group_id[count.index], + var.computed_ingress_with_referenced_security_group_id[count.index], "from_port", var.rules[lookup( - var.computed_ingress_with_source_security_group_id[count.index], + var.computed_ingress_with_referenced_security_group_id[count.index], "rule", "_", )][0], ) to_port = lookup( - var.computed_ingress_with_source_security_group_id[count.index], + var.computed_ingress_with_referenced_security_group_id[count.index], "to_port", var.rules[lookup( - var.computed_ingress_with_source_security_group_id[count.index], + var.computed_ingress_with_referenced_security_group_id[count.index], "rule", "_", )][1], ) - protocol = lookup( - var.computed_ingress_with_source_security_group_id[count.index], - "protocol", + ip_protocol = lookup( + var.computed_ingress_with_referenced_security_group_id[count.index], + "ip_protocol", var.rules[lookup( - var.computed_ingress_with_source_security_group_id[count.index], + var.computed_ingress_with_referenced_security_group_id[count.index], "rule", "_", )][2], ) + + tags = var.tags } -# Security group rules with "cidr_blocks", but without "ipv6_cidr_blocks", "source_security_group_id" and "self" -resource "aws_security_group_rule" "ingress_with_cidr_blocks" { - count = local.create ? length(var.ingress_with_cidr_blocks) : 0 +# Security group rules allow ingress from allowed all ingress_prefix_list_ids +resource "aws_vpc_security_group_ingress_rule" "ingress_with_referenced_security_group_id_prefix_list" { + count = local.create ? length(var.ingress_with_referenced_security_group_id) * length(var.ingress_prefix_list_ids) : 0 security_group_id = local.this_sg_id - type = "ingress" - cidr_blocks = compact(split( - ",", - lookup( - var.ingress_with_cidr_blocks[count.index], - "cidr_blocks", - join(",", var.ingress_cidr_blocks), - ), - )) + prefix_list_id = var.ingress_prefix_list_ids[floor(count.index / length(var.ingress_with_referenced_security_group_id))] + description = lookup( + var.ingress_with_referenced_security_group_id[count.index % length(var.ingress_with_referenced_security_group_id)], + "description", + "Ingress Rule", + ) + + from_port = lookup( + var.ingress_with_referenced_security_group_id[count.index % length(var.ingress_with_referenced_security_group_id)], + "from_port", + var.rules[lookup( + var.ingress_with_referenced_security_group_id[count.index % length(var.ingress_with_referenced_security_group_id)], + "rule", + "_", + )][0], + ) + to_port = lookup( + var.ingress_with_referenced_security_group_id[count.index % length(var.ingress_with_referenced_security_group_id)], + "to_port", + var.rules[lookup( + var.ingress_with_referenced_security_group_id[count.index % length(var.ingress_with_referenced_security_group_id)], + "rule", + "_", + )][1], + ) + ip_protocol = lookup( + var.ingress_with_referenced_security_group_id[count.index % length(var.ingress_with_referenced_security_group_id)], + "ip_protocol", + var.rules[lookup( + var.ingress_with_referenced_security_group_id[count.index % length(var.ingress_with_referenced_security_group_id)], + "rule", + "_", + )][2], + ) + + tags = var.tags +} + +# Security group rules with "cidr_ipv4" +resource "aws_vpc_security_group_ingress_rule" "ingress_with_cidr_ipv4" { + count = local.create ? length(var.ingress_with_cidr_ipv4) : 0 + + security_group_id = local.this_sg_id + + cidr_ipv4 = var.ingress_with_cidr_ipv4[count.index]["cidr_ipv4"] description = lookup( - var.ingress_with_cidr_blocks[count.index], + var.ingress_with_cidr_ipv4[count.index], "description", "Ingress Rule", ) from_port = lookup( - var.ingress_with_cidr_blocks[count.index], + var.ingress_with_cidr_ipv4[count.index], "from_port", - var.rules[lookup(var.ingress_with_cidr_blocks[count.index], "rule", "_")][0], + var.rules[lookup(var.ingress_with_cidr_ipv4[count.index], "rule", "_")][0], ) to_port = lookup( - var.ingress_with_cidr_blocks[count.index], + var.ingress_with_cidr_ipv4[count.index], "to_port", - var.rules[lookup(var.ingress_with_cidr_blocks[count.index], "rule", "_")][1], + var.rules[lookup(var.ingress_with_cidr_ipv4[count.index], "rule", "_")][1], ) - protocol = lookup( - var.ingress_with_cidr_blocks[count.index], - "protocol", - var.rules[lookup(var.ingress_with_cidr_blocks[count.index], "rule", "_")][2], + ip_protocol = lookup( + var.ingress_with_cidr_ipv4[count.index], + "ip_protocol", + var.rules[lookup(var.ingress_with_cidr_ipv4[count.index], "rule", "_")][2], ) + + tags = var.tags } -# Computed - Security group rules with "cidr_blocks", but without "ipv6_cidr_blocks", "source_security_group_id" and "self" -resource "aws_security_group_rule" "computed_ingress_with_cidr_blocks" { - count = local.create ? var.number_of_computed_ingress_with_cidr_blocks : 0 +# Computed - Security group rules with "cidr_ipv4", but without "ipv6_cidr_blocks", "source_security_group_id" and "self" +resource "aws_vpc_security_group_ingress_rule" "computed_ingress_with_cidr_ipv4" { + count = local.create ? var.number_of_computed_ingress_with_cidr_ipv4 : 0 security_group_id = local.this_sg_id - type = "ingress" - cidr_blocks = compact(split( - ",", - lookup( - var.computed_ingress_with_cidr_blocks[count.index], - "cidr_blocks", - join(",", var.ingress_cidr_blocks), - ), - )) + cidr_ipv4 = var.computed_ingress_with_cidr_ipv4[count.index]["cidr_ipv4"] description = lookup( - var.computed_ingress_with_cidr_blocks[count.index], + var.computed_ingress_with_cidr_ipv4[count.index], "description", "Ingress Rule", ) from_port = lookup( - var.computed_ingress_with_cidr_blocks[count.index], + var.computed_ingress_with_cidr_ipv4[count.index], "from_port", var.rules[lookup( - var.computed_ingress_with_cidr_blocks[count.index], + var.computed_ingress_with_cidr_ipv4[count.index], "rule", "_", )][0], ) to_port = lookup( - var.computed_ingress_with_cidr_blocks[count.index], + var.computed_ingress_with_cidr_ipv4[count.index], "to_port", var.rules[lookup( - var.computed_ingress_with_cidr_blocks[count.index], + var.computed_ingress_with_cidr_ipv4[count.index], "rule", "_", )][1], ) - protocol = lookup( - var.computed_ingress_with_cidr_blocks[count.index], - "protocol", + ip_protocol = lookup( + var.computed_ingress_with_cidr_ipv4[count.index], + "ip_protocol", var.rules[lookup( - var.computed_ingress_with_cidr_blocks[count.index], + var.computed_ingress_with_cidr_ipv4[count.index], "rule", "_", )][2], ) + + tags = var.tags } -# Security group rules with "ipv6_cidr_blocks", but without "cidr_blocks", "source_security_group_id" and "self" -resource "aws_security_group_rule" "ingress_with_ipv6_cidr_blocks" { - count = local.create ? length(var.ingress_with_ipv6_cidr_blocks) : 0 +# Security group rules with "ipv6_cidr_blocks", but without "cidr_ipv4", "source_security_group_id" and "self" +resource "aws_vpc_security_group_ingress_rule" "ingress_with_cidr_ipv6" { + count = local.create ? length(var.ingress_with_cidr_ipv6) : 0 security_group_id = local.this_sg_id - type = "ingress" - ipv6_cidr_blocks = compact(split( - ",", - lookup( - var.ingress_with_ipv6_cidr_blocks[count.index], - "ipv6_cidr_blocks", - join(",", var.ingress_ipv6_cidr_blocks), - ), - )) - prefix_list_ids = var.ingress_prefix_list_ids + cidr_ipv6 = var.ingress_with_cidr_ipv6[count.index]["cidr_ipv6"] + description = lookup( - var.ingress_with_ipv6_cidr_blocks[count.index], + var.ingress_with_cidr_ipv6[count.index], "description", "Ingress Rule", ) from_port = lookup( - var.ingress_with_ipv6_cidr_blocks[count.index], + var.ingress_with_cidr_ipv6[count.index], "from_port", - var.rules[lookup(var.ingress_with_ipv6_cidr_blocks[count.index], "rule", "_")][0], + var.rules[lookup(var.ingress_with_cidr_ipv6[count.index], "rule", "_")][0], ) to_port = lookup( - var.ingress_with_ipv6_cidr_blocks[count.index], + var.ingress_with_cidr_ipv6[count.index], "to_port", - var.rules[lookup(var.ingress_with_ipv6_cidr_blocks[count.index], "rule", "_")][1], + var.rules[lookup(var.ingress_with_cidr_ipv6[count.index], "rule", "_")][1], ) - protocol = lookup( - var.ingress_with_ipv6_cidr_blocks[count.index], - "protocol", - var.rules[lookup(var.ingress_with_ipv6_cidr_blocks[count.index], "rule", "_")][2], + ip_protocol = lookup( + var.ingress_with_cidr_ipv6[count.index], + "ip_protocol", + var.rules[lookup(var.ingress_with_cidr_ipv6[count.index], "rule", "_")][2], ) + + tags = var.tags } -# Computed - Security group rules with "ipv6_cidr_blocks", but without "cidr_blocks", "source_security_group_id" and "self" -resource "aws_security_group_rule" "computed_ingress_with_ipv6_cidr_blocks" { - count = local.create ? var.number_of_computed_ingress_with_ipv6_cidr_blocks : 0 +# Computed - Security group rules with "ipv6_cidr_blocks", but without "cidr_ipv4", "source_security_group_id" and "self" +resource "aws_vpc_security_group_ingress_rule" "computed_ingress_with_cidr_ipv6" { + count = local.create ? var.number_of_computed_ingress_with_cidr_ipv6 : 0 security_group_id = local.this_sg_id - type = "ingress" - ipv6_cidr_blocks = compact(split( - ",", - lookup( - var.computed_ingress_with_ipv6_cidr_blocks[count.index], - "ipv6_cidr_blocks", - join(",", var.ingress_ipv6_cidr_blocks), - ), - )) - prefix_list_ids = var.ingress_prefix_list_ids + cidr_ipv6 = var.computed_ingress_with_cidr_ipv6[count.index]["cidr_ipv6"] + description = lookup( - var.computed_ingress_with_ipv6_cidr_blocks[count.index], + var.computed_ingress_with_cidr_ipv6[count.index], "description", "Ingress Rule", ) from_port = lookup( - var.computed_ingress_with_ipv6_cidr_blocks[count.index], + var.computed_ingress_with_cidr_ipv6[count.index], "from_port", var.rules[lookup( - var.computed_ingress_with_ipv6_cidr_blocks[count.index], + var.computed_ingress_with_cidr_ipv6[count.index], "rule", "_", )][0], ) to_port = lookup( - var.computed_ingress_with_ipv6_cidr_blocks[count.index], + var.computed_ingress_with_cidr_ipv6[count.index], "to_port", var.rules[lookup( - var.computed_ingress_with_ipv6_cidr_blocks[count.index], + var.computed_ingress_with_cidr_ipv6[count.index], "rule", "_", )][1], ) - protocol = lookup( - var.computed_ingress_with_ipv6_cidr_blocks[count.index], - "protocol", + ip_protocol = lookup( + var.computed_ingress_with_cidr_ipv6[count.index], + "ip_protocol", var.rules[lookup( - var.computed_ingress_with_ipv6_cidr_blocks[count.index], + var.computed_ingress_with_cidr_ipv6[count.index], "rule", "_", )][2], ) + + tags = var.tags } -# Security group rules with "self", but without "cidr_blocks" and "source_security_group_id" -resource "aws_security_group_rule" "ingress_with_self" { +# Security group rules with "self", but without "cidr_ipv4" and "source_security_group_id" +resource "aws_vpc_security_group_ingress_rule" "ingress_with_self" { count = local.create ? length(var.ingress_with_self) : 0 - security_group_id = local.this_sg_id - type = "ingress" + security_group_id = local.this_sg_id + referenced_security_group_id = local.this_sg_id - self = lookup(var.ingress_with_self[count.index], "self", true) - prefix_list_ids = var.ingress_prefix_list_ids description = lookup( var.ingress_with_self[count.index], "description", @@ -396,22 +483,66 @@ resource "aws_security_group_rule" "ingress_with_self" { "to_port", var.rules[lookup(var.ingress_with_self[count.index], "rule", "_")][1], ) - protocol = lookup( + ip_protocol = lookup( var.ingress_with_self[count.index], - "protocol", + "ip_protocol", var.rules[lookup(var.ingress_with_self[count.index], "rule", "_")][2], ) + + tags = var.tags } -# Computed - Security group rules with "self", but without "cidr_blocks" and "source_security_group_id" -resource "aws_security_group_rule" "computed_ingress_with_self" { - count = local.create ? var.number_of_computed_ingress_with_self : 0 +# Security group rules allow ingress from allowed all ingress_prefix_list_ids for ingress_with_self +resource "aws_vpc_security_group_ingress_rule" "ingress_with_self_prefix_list_ids" { + count = local.create ? length(var.ingress_with_self) * length(var.ingress_prefix_list_ids) : 0 security_group_id = local.this_sg_id - type = "ingress" - self = lookup(var.computed_ingress_with_self[count.index], "self", true) - prefix_list_ids = var.ingress_prefix_list_ids + prefix_list_id = var.ingress_prefix_list_ids[floor(count.index / length(var.ingress_with_self))] + description = lookup( + var.ingress_with_self[count.index % length(var.ingress_with_self)], + "description", + "Ingress Rule", + ) + + from_port = lookup( + var.ingress_with_self[count.index % length(var.ingress_with_self)], + "from_port", + var.rules[lookup( + var.ingress_with_self[count.index % length(var.ingress_with_self)], + "rule", + "_", + )][0], + ) + to_port = lookup( + var.ingress_with_self[count.index % length(var.ingress_with_self)], + "to_port", + var.rules[lookup( + var.ingress_with_self[count.index % length(var.ingress_with_self)], + "rule", + "_", + )][1], + ) + ip_protocol = lookup( + var.ingress_with_self[count.index % length(var.ingress_with_self)], + "ip_protocol", + var.rules[lookup( + var.ingress_with_self[count.index % length(var.ingress_with_self)], + "rule", + "_", + )][2], + ) + + tags = var.tags +} + +# Computed - Security group rules with "self", but without "cidr_ipv4" and "source_security_group_id" +resource "aws_vpc_security_group_ingress_rule" "computed_ingress_with_self" { + count = local.create ? var.number_of_computed_ingress_with_self : 0 + + security_group_id = local.this_sg_id + referenced_security_group_id = local.this_sg_id + description = lookup( var.computed_ingress_with_self[count.index], "description", @@ -428,92 +559,216 @@ resource "aws_security_group_rule" "computed_ingress_with_self" { "to_port", var.rules[lookup(var.computed_ingress_with_self[count.index], "rule", "_")][1], ) - protocol = lookup( + ip_protocol = lookup( var.computed_ingress_with_self[count.index], - "protocol", + "ip_protocol", var.rules[lookup(var.computed_ingress_with_self[count.index], "rule", "_")][2], ) + + tags = var.tags } -# Security group rules with "prefix_list_ids", but without "cidr_blocks", "self" or "source_security_group_id" -resource "aws_security_group_rule" "ingress_with_prefix_list_ids" { - count = var.create ? length(var.ingress_with_prefix_list_ids) : 0 + +# Security group rules allow ingress from allowed all ingress_prefix_list_ids for computed_ingress_with_self +resource "aws_vpc_security_group_ingress_rule" "computed_ingress_with_self_prefix_list_ids" { + count = local.create ? var.number_of_computed_ingress_with_self * length(var.ingress_prefix_list_ids) : 0 security_group_id = local.this_sg_id - type = "ingress" - prefix_list_ids = compact(split( - ",", - lookup( - var.ingress_with_prefix_list_ids[count.index], - "prefix_list_ids", - join(",", var.ingress_prefix_list_ids) - ) - )) + prefix_list_id = var.ingress_prefix_list_ids[floor(count.index / var.number_of_computed_ingress_with_self)] + description = lookup( + var.computed_ingress_with_self[count.index % var.number_of_computed_ingress_with_self], + "description", + "Ingress Rule", + ) + + from_port = lookup( + var.computed_ingress_with_self[count.index % var.number_of_computed_ingress_with_self], + "from_port", + var.rules[lookup( + var.computed_ingress_with_self[count.index % var.number_of_computed_ingress_with_self], + "rule", + "_", + )][0], + ) + to_port = lookup( + var.computed_ingress_with_self[count.index % var.number_of_computed_ingress_with_self], + "to_port", + var.rules[lookup( + var.computed_ingress_with_self[count.index % var.number_of_computed_ingress_with_self], + "rule", + "_", + )][1], + ) + ip_protocol = lookup( + var.computed_ingress_with_self[count.index % var.number_of_computed_ingress_with_self], + "ip_protocol", + var.rules[lookup( + var.computed_ingress_with_self[count.index % var.number_of_computed_ingress_with_self], + "rule", + "_", + )][2], + ) + + tags = var.tags +} + +# Security group rules with "prefix_list_id", but without "cidr_ipv4", "self" or "source_security_group_id" +resource "aws_vpc_security_group_ingress_rule" "ingress_with_prefix_list_id" { + count = var.create ? length(var.ingress_with_prefix_list_id) : 0 + + security_group_id = local.this_sg_id + + prefix_list_id = var.ingress_with_prefix_list_id[count.index]["prefix_list_id"] description = lookup( - var.ingress_with_prefix_list_ids[count.index], + var.ingress_with_prefix_list_id[count.index], "description", "Ingress Rule", ) from_port = lookup( - var.ingress_with_prefix_list_ids[count.index], + var.ingress_with_prefix_list_id[count.index], "from_port", - var.rules[lookup(var.ingress_with_prefix_list_ids[count.index], "rule", "_")][0], + var.rules[lookup(var.ingress_with_prefix_list_id[count.index], "rule", "_")][0], ) to_port = lookup( - var.ingress_with_prefix_list_ids[count.index], + var.ingress_with_prefix_list_id[count.index], "to_port", - var.rules[lookup(var.ingress_with_prefix_list_ids[count.index], "rule", "_")][1], + var.rules[lookup(var.ingress_with_prefix_list_id[count.index], "rule", "_")][1], ) - protocol = lookup( - var.ingress_with_prefix_list_ids[count.index], - "protocol", - var.rules[lookup(var.ingress_with_prefix_list_ids[count.index], "rule", "_")][2], + ip_protocol = lookup( + var.ingress_with_prefix_list_id[count.index], + "ip_protocol", + var.rules[lookup(var.ingress_with_prefix_list_id[count.index], "rule", "_")][2], ) + + tags = var.tags } -# Computed - Security group rules with "prefix_list_ids", but without "cidr_blocks", "self" or "source_security_group_id" -resource "aws_security_group_rule" "computed_ingress_with_prefix_list_ids" { - count = var.create ? var.number_of_computed_ingress_with_prefix_list_ids : 0 + +# Security group rules with "ingress_prefix_list_ids" for "ingress_with_prefix_list_id", but without "cidr_ipv4", "self" or "source_security_group_id" +resource "aws_vpc_security_group_ingress_rule" "ingress_with_prefix_list_id_default_prefix_list_id" { + count = local.create ? length(var.ingress_with_prefix_list_id) * length(var.ingress_prefix_list_ids) : 0 security_group_id = local.this_sg_id - type = "ingress" - prefix_list_ids = compact(split( - ",", - lookup( - var.ingress_with_prefix_list_ids[count.index], - "prefix_list_ids", - join(",", var.ingress_prefix_list_ids) - ) - )) + prefix_list_id = var.ingress_prefix_list_ids[floor(count.index / length(var.ingress_with_prefix_list_id))] + description = lookup( + var.ingress_with_prefix_list_id[count.index % length(var.ingress_with_prefix_list_id)], + "description", + "Ingress Rule", + ) + + from_port = lookup( + var.ingress_with_prefix_list_id[count.index % length(var.ingress_with_prefix_list_id)], + "from_port", + var.rules[lookup( + var.ingress_with_prefix_list_id[count.index % length(var.ingress_with_prefix_list_id)], + "rule", + "_", + )][0], + ) + to_port = lookup( + var.ingress_with_prefix_list_id[count.index % length(var.ingress_with_prefix_list_id)], + "to_port", + var.rules[lookup( + var.ingress_with_prefix_list_id[count.index % length(var.ingress_with_prefix_list_id)], + "rule", + "_", + )][1], + ) + ip_protocol = lookup( + var.ingress_with_prefix_list_id[count.index % length(var.ingress_with_prefix_list_id)], + "ip_protocol", + var.rules[lookup( + var.ingress_with_prefix_list_id[count.index % length(var.ingress_with_prefix_list_id)], + "rule", + "_", + )][2], + ) + + tags = var.tags +} + +# Computed - Security group rules with "prefix_list_id", but without "cidr_ipv4", "self" or "source_security_group_id" +resource "aws_vpc_security_group_ingress_rule" "computed_ingress_with_prefix_list_id" { + count = var.create ? var.number_of_computed_ingress_with_prefix_list_id : 0 + + security_group_id = local.this_sg_id + + prefix_list_id = var.computed_ingress_with_prefix_list_id[count.index]["prefix_list_id"] description = lookup( - var.ingress_with_prefix_list_ids[count.index], + var.computed_ingress_with_prefix_list_id[count.index], "description", "Ingress Rule", ) from_port = lookup( - var.ingress_with_prefix_list_ids[count.index], + var.computed_ingress_with_prefix_list_id[count.index], "from_port", - var.rules[lookup(var.ingress_with_prefix_list_ids[count.index], "rule", "_")][0], + var.rules[lookup(var.computed_ingress_with_prefix_list_id[count.index], "rule", "_")][0], ) to_port = lookup( - var.ingress_with_prefix_list_ids[count.index], + var.computed_ingress_with_prefix_list_id[count.index], "to_port", - var.rules[lookup(var.ingress_with_prefix_list_ids[count.index], "rule", "_")][1], + var.rules[lookup(var.computed_ingress_with_prefix_list_id[count.index], "rule", "_")][1], + ) + + ip_protocol = lookup( + var.computed_ingress_with_prefix_list_id[count.index], + "ip_protocol", + var.rules[lookup(var.computed_ingress_with_prefix_list_id[count.index], "rule", "_")][2], + ) + + tags = var.tags +} + +# Security group rules with "ingress_prefix_list_ids" for "computed_ingress_with_prefix_list_id", but without "cidr_ipv4", "self" or "source_security_group_id" +resource "aws_vpc_security_group_ingress_rule" "computed_ingress_with_prefix_list_ids_prefix_list_ids" { + count = local.create ? var.number_of_computed_ingress_with_prefix_list_id * length(var.ingress_prefix_list_ids) : 0 + + security_group_id = local.this_sg_id + + prefix_list_id = var.ingress_prefix_list_ids[floor(count.index / var.number_of_computed_ingress_with_prefix_list_id)] + description = lookup( + var.computed_ingress_with_prefix_list_id[count.index % var.number_of_computed_ingress_with_prefix_list_id], + "description", + "Ingress Rule", ) - protocol = lookup( - var.ingress_with_prefix_list_ids[count.index], - "protocol", - var.rules[lookup(var.ingress_with_prefix_list_ids[count.index], "rule", "_")][2], + from_port = lookup( + var.computed_ingress_with_prefix_list_id[count.index % var.number_of_computed_ingress_with_prefix_list_id], + "from_port", + var.rules[lookup( + var.computed_ingress_with_prefix_list_id[count.index % var.number_of_computed_ingress_with_prefix_list_id], + "rule", + "_", + )][0], ) + to_port = lookup( + var.computed_ingress_with_prefix_list_id[count.index % var.number_of_computed_ingress_with_prefix_list_id], + "to_port", + var.rules[lookup( + var.computed_ingress_with_prefix_list_id[count.index % var.number_of_computed_ingress_with_prefix_list_id], + "rule", + "_", + )][1], + ) + ip_protocol = lookup( + var.computed_ingress_with_prefix_list_id[count.index % var.number_of_computed_ingress_with_prefix_list_id], + "ip_protocol", + var.rules[lookup( + var.computed_ingress_with_prefix_list_id[count.index % var.number_of_computed_ingress_with_prefix_list_id], + "rule", + "_", + )][2], + ) + + tags = var.tags } ################# @@ -523,324 +778,448 @@ resource "aws_security_group_rule" "computed_ingress_with_prefix_list_ids" { ################################## # Egress - List of rules (simple) ################################## -# Security group rules with "cidr_blocks" and it uses list of rules names -resource "aws_security_group_rule" "egress_rules" { - count = local.create ? length(var.egress_rules) : 0 +# Security group rules with "cidr_ipv4" and it uses list of rules names +resource "aws_vpc_security_group_egress_rule" "egress_rules_ipv4" { + count = local.create ? length(local.egress_rules_ipv4) : 0 + + security_group_id = local.this_sg_id + + cidr_ipv4 = local.egress_rules_ipv4[count.index][1] + description = var.rules[local.egress_rules_ipv4[count.index][0]][3] + + from_port = var.rules[local.egress_rules_ipv4[count.index][0]][0] + to_port = var.rules[local.egress_rules_ipv4[count.index][0]][1] + ip_protocol = var.rules[local.egress_rules_ipv4[count.index][0]][2] + + tags = var.tags +} + +# Security group rules with "cidr_ipv6" and it uses list of rules names +resource "aws_vpc_security_group_egress_rule" "egress_rules_ipv6" { + count = local.create ? length(local.egress_rules_ipv6) : 0 + + security_group_id = local.this_sg_id + + cidr_ipv6 = local.egress_rules_ipv6[count.index][1] + description = var.rules[local.egress_rules_ipv6[count.index][0]][3] + + from_port = var.rules[local.egress_rules_ipv6[count.index][0]][0] + to_port = var.rules[local.egress_rules_ipv6[count.index][0]][1] + ip_protocol = var.rules[local.egress_rules_ipv6[count.index][0]][2] + + tags = var.tags +} + +# Security group rules with "prefix_list_id" and it uses list of rules names +resource "aws_vpc_security_group_egress_rule" "egress_rules_prefix_list_ids" { + count = local.create ? length(local.egress_rules_prefix_list_ids) : 0 + + security_group_id = local.this_sg_id + + prefix_list_id = local.egress_rules_prefix_list_ids[count.index][1] + description = var.rules[local.egress_rules_prefix_list_ids[count.index][0]][3] + + from_port = var.rules[local.egress_rules_prefix_list_ids[count.index][0]][0] + to_port = var.rules[local.egress_rules_prefix_list_ids[count.index][0]][1] + ip_protocol = var.rules[local.egress_rules_prefix_list_ids[count.index][0]][2] + + tags = var.tags +} + +# Computed - Security group rules with "cidr_ipv4" and it uses list of rules names +resource "aws_vpc_security_group_egress_rule" "computed_egress_rules_ipv4" { + count = local.create ? var.number_of_computed_egress_rules * length(var.egress_cidr_ipv4) : 0 security_group_id = local.this_sg_id - type = "egress" - cidr_blocks = var.egress_cidr_blocks - ipv6_cidr_blocks = var.egress_ipv6_cidr_blocks - prefix_list_ids = var.egress_prefix_list_ids - description = var.rules[var.egress_rules[count.index]][3] + cidr_ipv4 = var.egress_cidr_ipv4[floor(count.index / var.number_of_computed_egress_rules)] + description = var.rules[var.computed_egress_rules[count.index % var.number_of_computed_egress_rules]][3] - from_port = var.rules[var.egress_rules[count.index]][0] - to_port = var.rules[var.egress_rules[count.index]][1] - protocol = var.rules[var.egress_rules[count.index]][2] + from_port = var.rules[var.computed_egress_rules[count.index % var.number_of_computed_egress_rules]][0] + to_port = var.rules[var.computed_egress_rules[count.index % var.number_of_computed_egress_rules]][1] + ip_protocol = var.rules[var.computed_egress_rules[count.index % var.number_of_computed_egress_rules]][2] + + tags = var.tags } -# Computed - Security group rules with "cidr_blocks" and it uses list of rules names -resource "aws_security_group_rule" "computed_egress_rules" { - count = local.create ? var.number_of_computed_egress_rules : 0 +# Computed - Security group rules with "cidr_ipv6" and it uses list of rules names +resource "aws_vpc_security_group_egress_rule" "computed_egress_rules_ipv6" { + count = local.create ? var.number_of_computed_egress_rules * length(var.egress_cidr_ipv6) : 0 security_group_id = local.this_sg_id - type = "egress" - cidr_blocks = var.egress_cidr_blocks - ipv6_cidr_blocks = var.egress_ipv6_cidr_blocks - prefix_list_ids = var.egress_prefix_list_ids - description = var.rules[var.computed_egress_rules[count.index]][3] + cidr_ipv6 = var.egress_cidr_ipv6[floor(count.index / var.number_of_computed_egress_rules)] + description = var.rules[var.computed_egress_rules[count.index % var.number_of_computed_egress_rules]][3] + + from_port = var.rules[var.computed_egress_rules[count.index % var.number_of_computed_egress_rules]][0] + to_port = var.rules[var.computed_egress_rules[count.index % var.number_of_computed_egress_rules]][1] + ip_protocol = var.rules[var.computed_egress_rules[count.index % var.number_of_computed_egress_rules]][2] + + tags = var.tags +} + +# Computed - Security group rules with "prefix_list_id" and it uses list of rules names +resource "aws_vpc_security_group_egress_rule" "computed_egress_rules_prefix_list_ids" { + count = local.create ? var.number_of_computed_egress_rules * length(var.egress_prefix_list_ids) : 0 + + security_group_id = local.this_sg_id + + prefix_list_id = var.egress_prefix_list_ids[floor(count.index / var.number_of_computed_egress_rules)] + description = var.rules[var.computed_egress_rules[count.index % var.number_of_computed_egress_rules]][3] + + from_port = var.rules[var.computed_egress_rules[count.index % var.number_of_computed_egress_rules]][0] + to_port = var.rules[var.computed_egress_rules[count.index % var.number_of_computed_egress_rules]][1] + ip_protocol = var.rules[var.computed_egress_rules[count.index % var.number_of_computed_egress_rules]][2] - from_port = var.rules[var.computed_egress_rules[count.index]][0] - to_port = var.rules[var.computed_egress_rules[count.index]][1] - protocol = var.rules[var.computed_egress_rules[count.index]][2] + tags = var.tags } ######################### # Egress - Maps of rules ######################### -# Security group rules with "source_security_group_id", but without "cidr_blocks" and "self" -resource "aws_security_group_rule" "egress_with_source_security_group_id" { - count = local.create ? length(var.egress_with_source_security_group_id) : 0 +# Security group rules with "referenced_security_group_id", but without "cidr_ipv4" and "self" +resource "aws_vpc_security_group_egress_rule" "egress_with_referenced_security_group_id" { + count = local.create ? length(var.egress_with_referenced_security_group_id) : 0 security_group_id = local.this_sg_id - type = "egress" - source_security_group_id = var.egress_with_source_security_group_id[count.index]["source_security_group_id"] - prefix_list_ids = var.egress_prefix_list_ids + referenced_security_group_id = var.egress_with_referenced_security_group_id[count.index]["referenced_security_group_id"] description = lookup( - var.egress_with_source_security_group_id[count.index], + var.egress_with_referenced_security_group_id[count.index], "description", "Egress Rule", ) from_port = lookup( - var.egress_with_source_security_group_id[count.index], + var.egress_with_referenced_security_group_id[count.index], "from_port", var.rules[lookup( - var.egress_with_source_security_group_id[count.index], + var.egress_with_referenced_security_group_id[count.index], "rule", "_", )][0], ) to_port = lookup( - var.egress_with_source_security_group_id[count.index], + var.egress_with_referenced_security_group_id[count.index], "to_port", var.rules[lookup( - var.egress_with_source_security_group_id[count.index], + var.egress_with_referenced_security_group_id[count.index], "rule", "_", )][1], ) - protocol = lookup( - var.egress_with_source_security_group_id[count.index], - "protocol", + ip_protocol = lookup( + var.egress_with_referenced_security_group_id[count.index], + "ip_protocol", var.rules[lookup( - var.egress_with_source_security_group_id[count.index], + var.egress_with_referenced_security_group_id[count.index], "rule", "_", )][2], ) + + tags = var.tags } -# Computed - Security group rules with "source_security_group_id", but without "cidr_blocks" and "self" -resource "aws_security_group_rule" "computed_egress_with_source_security_group_id" { - count = local.create ? var.number_of_computed_egress_with_source_security_group_id : 0 +# Security group rules allow egress from allowed all egress_prefix_list_ids +resource "aws_vpc_security_group_egress_rule" "egress_with_referenced_security_group_id_prefix_list" { + count = local.create ? length(var.egress_with_referenced_security_group_id) * length(var.egress_prefix_list_ids) : 0 security_group_id = local.this_sg_id - type = "egress" - source_security_group_id = var.computed_egress_with_source_security_group_id[count.index]["source_security_group_id"] - prefix_list_ids = var.egress_prefix_list_ids + prefix_list_id = var.egress_prefix_list_ids[floor(count.index / length(var.egress_with_referenced_security_group_id))] description = lookup( - var.computed_egress_with_source_security_group_id[count.index], + var.egress_with_referenced_security_group_id[count.index % length(var.egress_with_referenced_security_group_id)], "description", "Egress Rule", ) from_port = lookup( - var.computed_egress_with_source_security_group_id[count.index], + var.egress_with_referenced_security_group_id[count.index % length(var.egress_with_referenced_security_group_id)], "from_port", var.rules[lookup( - var.computed_egress_with_source_security_group_id[count.index], + var.egress_with_referenced_security_group_id[count.index % length(var.egress_with_referenced_security_group_id)], "rule", "_", )][0], ) to_port = lookup( - var.computed_egress_with_source_security_group_id[count.index], + var.egress_with_referenced_security_group_id[count.index % length(var.egress_with_referenced_security_group_id)], "to_port", var.rules[lookup( - var.computed_egress_with_source_security_group_id[count.index], + var.egress_with_referenced_security_group_id[count.index % length(var.egress_with_referenced_security_group_id)], "rule", "_", )][1], ) - protocol = lookup( - var.computed_egress_with_source_security_group_id[count.index], - "protocol", + ip_protocol = lookup( + var.egress_with_referenced_security_group_id[count.index % length(var.egress_with_referenced_security_group_id)], + "ip_protocol", var.rules[lookup( - var.computed_egress_with_source_security_group_id[count.index], + var.egress_with_referenced_security_group_id[count.index % length(var.egress_with_referenced_security_group_id)], "rule", "_", )][2], ) + + tags = var.tags } -# Security group rules with "cidr_blocks", but without "ipv6_cidr_blocks", "source_security_group_id" and "self" -resource "aws_security_group_rule" "egress_with_cidr_blocks" { - count = local.create ? length(var.egress_with_cidr_blocks) : 0 +# Computed - Security group rules with "referenced_security_group_id", but without "cidr_ipv4" and "self" +resource "aws_vpc_security_group_egress_rule" "computed_egress_with_referenced_security_group_id" { + count = local.create ? var.number_of_computed_egress_with_referenced_security_group_id : 0 security_group_id = local.this_sg_id - type = "egress" - cidr_blocks = compact(split( - ",", - lookup( - var.egress_with_cidr_blocks[count.index], - "cidr_blocks", - join(",", var.egress_cidr_blocks), - ), - )) + referenced_security_group_id = var.computed_egress_with_referenced_security_group_id[count.index]["referenced_security_group_id"] + description = lookup( + var.computed_egress_with_referenced_security_group_id[count.index], + "description", + "Egress Rule", + ) + + from_port = lookup( + var.computed_egress_with_referenced_security_group_id[count.index], + "from_port", + var.rules[lookup( + var.computed_egress_with_referenced_security_group_id[count.index], + "rule", + "_", + )][0], + ) + to_port = lookup( + var.computed_egress_with_referenced_security_group_id[count.index], + "to_port", + var.rules[lookup( + var.computed_egress_with_referenced_security_group_id[count.index], + "rule", + "_", + )][1], + ) + ip_protocol = lookup( + var.computed_egress_with_referenced_security_group_id[count.index], + "ip_protocol", + var.rules[lookup( + var.computed_egress_with_referenced_security_group_id[count.index], + "rule", + "_", + )][2], + ) + + tags = var.tags +} + +# Security group rules allow egress from allowed all egress_prefix_list_ids +resource "aws_vpc_security_group_egress_rule" "computed_egress_with_referenced_security_group_id_prefix_list" { + count = local.create ? var.number_of_computed_egress_with_referenced_security_group_id * length(var.egress_prefix_list_ids) : 0 + + security_group_id = local.this_sg_id + + prefix_list_id = var.egress_prefix_list_ids[floor(count.index / var.number_of_computed_egress_with_referenced_security_group_id)] + description = lookup( + var.computed_egress_with_referenced_security_group_id[count.index % length(var.computed_egress_with_referenced_security_group_id)], + "description", + "Egress Rule", + ) + + from_port = lookup( + var.computed_egress_with_referenced_security_group_id[count.index % length(var.computed_egress_with_referenced_security_group_id)], + "from_port", + var.rules[lookup( + var.computed_egress_with_referenced_security_group_id[count.index % length(var.computed_egress_with_referenced_security_group_id)], + "rule", + "_", + )][0], + ) + to_port = lookup( + var.computed_egress_with_referenced_security_group_id[count.index % length(var.computed_egress_with_referenced_security_group_id)], + "to_port", + var.rules[lookup( + var.computed_egress_with_referenced_security_group_id[count.index % length(var.computed_egress_with_referenced_security_group_id)], + "rule", + "_", + )][1], + ) + ip_protocol = lookup( + var.computed_egress_with_referenced_security_group_id[count.index % length(var.computed_egress_with_referenced_security_group_id)], + "ip_protocol", + var.rules[lookup( + var.computed_egress_with_referenced_security_group_id[count.index % length(var.computed_egress_with_referenced_security_group_id)], + "rule", + "_", + )][2], + ) + + tags = var.tags +} + +# Security group rules with "cidr_ipv4" +resource "aws_vpc_security_group_egress_rule" "egress_with_cidr_ipv4" { + count = local.create ? length(var.egress_with_cidr_ipv4) : 0 + + security_group_id = local.this_sg_id + + cidr_ipv4 = var.egress_with_cidr_ipv4[count.index]["cidr_ipv4"] description = lookup( - var.egress_with_cidr_blocks[count.index], + var.egress_with_cidr_ipv4[count.index], "description", "Egress Rule", ) from_port = lookup( - var.egress_with_cidr_blocks[count.index], + var.egress_with_cidr_ipv4[count.index], "from_port", - var.rules[lookup(var.egress_with_cidr_blocks[count.index], "rule", "_")][0], + var.rules[lookup(var.egress_with_cidr_ipv4[count.index], "rule", "_")][0], ) to_port = lookup( - var.egress_with_cidr_blocks[count.index], + var.egress_with_cidr_ipv4[count.index], "to_port", - var.rules[lookup(var.egress_with_cidr_blocks[count.index], "rule", "_")][1], + var.rules[lookup(var.egress_with_cidr_ipv4[count.index], "rule", "_")][1], ) - protocol = lookup( - var.egress_with_cidr_blocks[count.index], - "protocol", - var.rules[lookup(var.egress_with_cidr_blocks[count.index], "rule", "_")][2], + ip_protocol = lookup( + var.egress_with_cidr_ipv4[count.index], + "ip_protocol", + var.rules[lookup(var.egress_with_cidr_ipv4[count.index], "rule", "_")][2], ) + + tags = var.tags } -# Computed - Security group rules with "cidr_blocks", but without "ipv6_cidr_blocks", "source_security_group_id" and "self" -resource "aws_security_group_rule" "computed_egress_with_cidr_blocks" { - count = local.create ? var.number_of_computed_egress_with_cidr_blocks : 0 +resource "aws_vpc_security_group_egress_rule" "computed_egress_with_cidr_ipv4" { + count = local.create ? var.number_of_computed_egress_with_cidr_ipv4 : 0 security_group_id = local.this_sg_id - type = "egress" - cidr_blocks = compact(split( - ",", - lookup( - var.computed_egress_with_cidr_blocks[count.index], - "cidr_blocks", - join(",", var.egress_cidr_blocks), - ), - )) + cidr_ipv4 = var.computed_egress_with_cidr_ipv4[count.index]["cidr_ipv4"] description = lookup( - var.computed_egress_with_cidr_blocks[count.index], + var.computed_egress_with_cidr_ipv4[count.index], "description", "Egress Rule", ) from_port = lookup( - var.computed_egress_with_cidr_blocks[count.index], + var.computed_egress_with_cidr_ipv4[count.index], "from_port", var.rules[lookup( - var.computed_egress_with_cidr_blocks[count.index], + var.computed_egress_with_cidr_ipv4[count.index], "rule", "_", )][0], ) to_port = lookup( - var.computed_egress_with_cidr_blocks[count.index], + var.computed_egress_with_cidr_ipv4[count.index], "to_port", var.rules[lookup( - var.computed_egress_with_cidr_blocks[count.index], + var.computed_egress_with_cidr_ipv4[count.index], "rule", "_", )][1], ) - protocol = lookup( - var.computed_egress_with_cidr_blocks[count.index], - "protocol", + ip_protocol = lookup( + var.computed_egress_with_cidr_ipv4[count.index], + "ip_protocol", var.rules[lookup( - var.computed_egress_with_cidr_blocks[count.index], + var.computed_egress_with_cidr_ipv4[count.index], "rule", "_", )][2], ) + + tags = var.tags } -# Security group rules with "ipv6_cidr_blocks", but without "cidr_blocks", "source_security_group_id" and "self" -resource "aws_security_group_rule" "egress_with_ipv6_cidr_blocks" { - count = local.create ? length(var.egress_with_ipv6_cidr_blocks) : 0 +# Security group rules with "ipv6_cidr_blocks", but without "cidr_ipv4", "source_security_group_id" and "self" +resource "aws_vpc_security_group_egress_rule" "egress_with_cidr_ipv6" { + count = local.create ? length(var.egress_with_cidr_ipv6) : 0 security_group_id = local.this_sg_id - type = "egress" - ipv6_cidr_blocks = compact(split( - ",", - lookup( - var.egress_with_ipv6_cidr_blocks[count.index], - "ipv6_cidr_blocks", - join(",", var.egress_ipv6_cidr_blocks), - ), - )) - prefix_list_ids = var.egress_prefix_list_ids + cidr_ipv6 = var.egress_with_cidr_ipv6[count.index]["cidr_ipv6"] + description = lookup( - var.egress_with_ipv6_cidr_blocks[count.index], + var.egress_with_cidr_ipv6[count.index], "description", "Egress Rule", ) from_port = lookup( - var.egress_with_ipv6_cidr_blocks[count.index], + var.egress_with_cidr_ipv6[count.index], "from_port", - var.rules[lookup(var.egress_with_ipv6_cidr_blocks[count.index], "rule", "_")][0], + var.rules[lookup(var.egress_with_cidr_ipv6[count.index], "rule", "_")][0], ) to_port = lookup( - var.egress_with_ipv6_cidr_blocks[count.index], + var.egress_with_cidr_ipv6[count.index], "to_port", - var.rules[lookup(var.egress_with_ipv6_cidr_blocks[count.index], "rule", "_")][1], + var.rules[lookup(var.egress_with_cidr_ipv6[count.index], "rule", "_")][1], ) - protocol = lookup( - var.egress_with_ipv6_cidr_blocks[count.index], - "protocol", - var.rules[lookup(var.egress_with_ipv6_cidr_blocks[count.index], "rule", "_")][2], + ip_protocol = lookup( + var.egress_with_cidr_ipv6[count.index], + "ip_protocol", + var.rules[lookup(var.egress_with_cidr_ipv6[count.index], "rule", "_")][2], ) + + tags = var.tags } -# Computed - Security group rules with "ipv6_cidr_blocks", but without "cidr_blocks", "source_security_group_id" and "self" -resource "aws_security_group_rule" "computed_egress_with_ipv6_cidr_blocks" { - count = local.create ? var.number_of_computed_egress_with_ipv6_cidr_blocks : 0 +# Computed - Security group rules with "cidr_ipv6", but without "cidr_ipv4", "source_security_group_id" and "self" + +resource "aws_vpc_security_group_egress_rule" "computed_egress_with_cidr_ipv6" { + count = local.create ? var.number_of_computed_egress_with_cidr_ipv6 : 0 security_group_id = local.this_sg_id - type = "egress" - ipv6_cidr_blocks = compact(split( - ",", - lookup( - var.computed_egress_with_ipv6_cidr_blocks[count.index], - "ipv6_cidr_blocks", - join(",", var.egress_ipv6_cidr_blocks), - ), - )) - prefix_list_ids = var.egress_prefix_list_ids + cidr_ipv6 = var.computed_egress_with_cidr_ipv6[count.index]["cidr_ipv6"] + description = lookup( - var.computed_egress_with_ipv6_cidr_blocks[count.index], + var.computed_egress_with_cidr_ipv6[count.index], "description", "Egress Rule", ) from_port = lookup( - var.computed_egress_with_ipv6_cidr_blocks[count.index], + var.computed_egress_with_cidr_ipv6[count.index], "from_port", var.rules[lookup( - var.computed_egress_with_ipv6_cidr_blocks[count.index], + var.computed_egress_with_cidr_ipv6[count.index], "rule", "_", )][0], ) to_port = lookup( - var.computed_egress_with_ipv6_cidr_blocks[count.index], + var.computed_egress_with_cidr_ipv6[count.index], "to_port", var.rules[lookup( - var.computed_egress_with_ipv6_cidr_blocks[count.index], + var.computed_egress_with_cidr_ipv6[count.index], "rule", "_", )][1], ) - protocol = lookup( - var.computed_egress_with_ipv6_cidr_blocks[count.index], - "protocol", + ip_protocol = lookup( + var.computed_egress_with_cidr_ipv6[count.index], + "ip_protocol", var.rules[lookup( - var.computed_egress_with_ipv6_cidr_blocks[count.index], + var.computed_egress_with_cidr_ipv6[count.index], "rule", "_", )][2], ) + + tags = var.tags } -# Security group rules with "self", but without "cidr_blocks" and "source_security_group_id" -resource "aws_security_group_rule" "egress_with_self" { +# Security group rules with "self", but without "cidr_ipv4" and "source_security_group_id" +resource "aws_vpc_security_group_egress_rule" "egress_with_self" { count = local.create ? length(var.egress_with_self) : 0 - security_group_id = local.this_sg_id - type = "egress" + security_group_id = local.this_sg_id + referenced_security_group_id = local.this_sg_id - self = lookup(var.egress_with_self[count.index], "self", true) - prefix_list_ids = var.egress_prefix_list_ids description = lookup( var.egress_with_self[count.index], "description", @@ -857,22 +1236,66 @@ resource "aws_security_group_rule" "egress_with_self" { "to_port", var.rules[lookup(var.egress_with_self[count.index], "rule", "_")][1], ) - protocol = lookup( + ip_protocol = lookup( var.egress_with_self[count.index], - "protocol", + "ip_protocol", var.rules[lookup(var.egress_with_self[count.index], "rule", "_")][2], ) + + tags = var.tags } -# Computed - Security group rules with "self", but without "cidr_blocks" and "source_security_group_id" -resource "aws_security_group_rule" "computed_egress_with_self" { - count = local.create ? var.number_of_computed_egress_with_self : 0 +# Security group rules allow egress from allowed all egress_prefix_list_ids for egress_with_self +resource "aws_vpc_security_group_egress_rule" "egress_with_self_prefix_list_ids" { + count = local.create ? length(var.egress_with_self) * length(var.egress_prefix_list_ids) : 0 security_group_id = local.this_sg_id - type = "egress" - self = lookup(var.computed_egress_with_self[count.index], "self", true) - prefix_list_ids = var.egress_prefix_list_ids + prefix_list_id = var.egress_prefix_list_ids[floor(count.index / length(var.egress_with_self))] + description = lookup( + var.egress_with_self[count.index % length(var.egress_with_self)], + "description", + "Egress Rule", + ) + + from_port = lookup( + var.egress_with_self[count.index % length(var.egress_with_self)], + "from_port", + var.rules[lookup( + var.egress_with_self[count.index % length(var.egress_with_self)], + "rule", + "_", + )][0], + ) + to_port = lookup( + var.egress_with_self[count.index % length(var.egress_with_self)], + "to_port", + var.rules[lookup( + var.egress_with_self[count.index % length(var.egress_with_self)], + "rule", + "_", + )][1], + ) + ip_protocol = lookup( + var.egress_with_self[count.index % length(var.egress_with_self)], + "ip_protocol", + var.rules[lookup( + var.egress_with_self[count.index % length(var.egress_with_self)], + "rule", + "_", + )][2], + ) + + tags = var.tags +} + +# Computed - Security group rules with "self", but without "cidr_ipv4" and "source_security_group_id" +resource "aws_vpc_security_group_egress_rule" "computed_egress_with_self" { + count = local.create ? var.number_of_computed_egress_with_self : 0 + + security_group_id = local.this_sg_id + referenced_security_group_id = local.this_sg_id + description = lookup( var.computed_egress_with_self[count.index], "description", @@ -889,119 +1312,216 @@ resource "aws_security_group_rule" "computed_egress_with_self" { "to_port", var.rules[lookup(var.computed_egress_with_self[count.index], "rule", "_")][1], ) - protocol = lookup( + ip_protocol = lookup( var.computed_egress_with_self[count.index], - "protocol", + "ip_protocol", var.rules[lookup(var.computed_egress_with_self[count.index], "rule", "_")][2], ) + + tags = var.tags } -# Security group rules with "egress_prefix_list_ids", but without "cidr_blocks", "self" or "source_security_group_id" -resource "aws_security_group_rule" "egress_with_prefix_list_ids" { - count = var.create ? length(var.egress_with_prefix_list_ids) : 0 +# Security group rules allow egress from allowed all egress_prefix_list_ids for computed_egress_with_self +resource "aws_vpc_security_group_egress_rule" "computed_egress_with_self_prefix_list_ids" { + count = local.create ? var.number_of_computed_egress_with_self * length(var.egress_prefix_list_ids) : 0 security_group_id = local.this_sg_id - type = "egress" - prefix_list_ids = compact(split( - ",", - lookup( - var.egress_with_prefix_list_ids[count.index], - "prefix_list_ids", - join(",", var.egress_prefix_list_ids) - )) + prefix_list_id = var.egress_prefix_list_ids[floor(count.index / var.number_of_computed_egress_with_self)] + description = lookup( + var.computed_egress_with_self[count.index % var.number_of_computed_egress_with_self], + "description", + "Egress Rule", + ) + + from_port = lookup( + var.computed_egress_with_self[count.index % var.number_of_computed_egress_with_self], + "from_port", + var.rules[lookup( + var.computed_egress_with_self[count.index % var.number_of_computed_egress_with_self], + "rule", + "_", + )][0], + ) + to_port = lookup( + var.computed_egress_with_self[count.index % var.number_of_computed_egress_with_self], + "to_port", + var.rules[lookup( + var.computed_egress_with_self[count.index % var.number_of_computed_egress_with_self], + "rule", + "_", + )][1], + ) + ip_protocol = lookup( + var.computed_egress_with_self[count.index % var.number_of_computed_egress_with_self], + "ip_protocol", + var.rules[lookup( + var.computed_egress_with_self[count.index % var.number_of_computed_egress_with_self], + "rule", + "_", + )][2], ) + tags = var.tags +} + +# Security group rules with "prefix_list_id", but without "cidr_ipv4", "self" or "source_security_group_id" +resource "aws_vpc_security_group_egress_rule" "egress_with_prefix_list_id" { + count = var.create ? length(var.egress_with_prefix_list_id) : 0 + + security_group_id = local.this_sg_id + + prefix_list_id = var.egress_with_prefix_list_id[count.index]["prefix_list_id"] + description = lookup( - var.egress_with_prefix_list_ids[count.index], + var.egress_with_prefix_list_id[count.index], "description", "Egress Rule", ) from_port = lookup( - var.egress_with_prefix_list_ids[count.index], + var.egress_with_prefix_list_id[count.index], + "from_port", + var.rules[lookup(var.egress_with_prefix_list_id[count.index], "rule", "_")][0], + ) + + to_port = lookup( + var.egress_with_prefix_list_id[count.index], + "to_port", + var.rules[lookup(var.egress_with_prefix_list_id[count.index], "rule", "_")][1], + ) + + ip_protocol = lookup( + var.egress_with_prefix_list_id[count.index], + "ip_protocol", + var.rules[lookup(var.egress_with_prefix_list_id[count.index], "rule", "_")][2], + ) + + tags = var.tags +} + + +# Security group rules with "egress_prefix_list_ids" for "egress_with_prefix_list_id", but without "cidr_ipv4", "self" or "source_security_group_id" +resource "aws_vpc_security_group_egress_rule" "egress_with_prefix_list_id_default_prefix_list_id" { + count = local.create ? length(var.egress_with_prefix_list_id) * length(var.egress_prefix_list_ids) : 0 + + security_group_id = local.this_sg_id + + prefix_list_id = var.egress_prefix_list_ids[floor(count.index / length(var.egress_with_prefix_list_id))] + description = lookup( + var.egress_with_prefix_list_id[count.index % length(var.egress_with_prefix_list_id)], + "description", + "egress Rule", + ) + + from_port = lookup( + var.egress_with_prefix_list_id[count.index % length(var.egress_with_prefix_list_id)], "from_port", var.rules[lookup( - var.egress_with_prefix_list_ids[count.index], + var.egress_with_prefix_list_id[count.index % length(var.egress_with_prefix_list_id)], "rule", "_", )][0], ) - to_port = lookup( - var.egress_with_prefix_list_ids[count.index], + var.egress_with_prefix_list_id[count.index % length(var.egress_with_prefix_list_id)], "to_port", var.rules[lookup( - var.egress_with_prefix_list_ids[count.index], + var.egress_with_prefix_list_id[count.index % length(var.egress_with_prefix_list_id)], "rule", "_", )][1], ) - - protocol = lookup( - var.egress_with_prefix_list_ids[count.index], - "protocol", + ip_protocol = lookup( + var.egress_with_prefix_list_id[count.index % length(var.egress_with_prefix_list_id)], + "ip_protocol", var.rules[lookup( - var.egress_with_prefix_list_ids[count.index], + var.egress_with_prefix_list_id[count.index % length(var.egress_with_prefix_list_id)], "rule", "_", )][2], ) + + tags = var.tags } -# Computed - Security group rules with "source_security_group_id", but without "cidr_blocks", "self" or "source_security_group_id" -resource "aws_security_group_rule" "computed_egress_with_prefix_list_ids" { - count = var.create ? var.number_of_computed_egress_with_prefix_list_ids : 0 +# Computed - Security group rules with "prefix_list_id", but without "cidr_ipv4", "self" or "source_security_group_id" +resource "aws_vpc_security_group_egress_rule" "computed_egress_with_prefix_list_id" { + count = var.create ? var.number_of_computed_egress_with_prefix_list_id : 0 security_group_id = local.this_sg_id - type = "egress" - source_security_group_id = var.computed_egress_with_prefix_list_ids[count.index]["source_security_group_id"] + prefix_list_id = var.computed_egress_with_prefix_list_id[count.index]["prefix_list_id"] - prefix_list_ids = compact(split( - ",", - lookup( - var.computed_egress_with_prefix_list_ids[count.index], - "prefix_list_ids", - join(",", var.egress_prefix_list_ids) - ) - )) + description = lookup( + var.computed_egress_with_prefix_list_id[count.index], + "description", + "egress Rule", + ) + from_port = lookup( + var.computed_egress_with_prefix_list_id[count.index], + "from_port", + var.rules[lookup(var.computed_egress_with_prefix_list_id[count.index], "rule", "_")][0], + ) + + to_port = lookup( + var.computed_egress_with_prefix_list_id[count.index], + "to_port", + var.rules[lookup(var.computed_egress_with_prefix_list_id[count.index], "rule", "_")][1], + ) + + ip_protocol = lookup( + var.computed_egress_with_prefix_list_id[count.index], + "ip_protocol", + var.rules[lookup(var.computed_egress_with_prefix_list_id[count.index], "rule", "_")][2], + ) + + tags = var.tags +} + +# Security group rules with "egress_prefix_list_ids" for "computed_egress_with_prefix_list_id", but without "cidr_ipv4", "self" or "source_security_group_id" +resource "aws_vpc_security_group_egress_rule" "computed_egress_with_prefix_list_ids_prefix_list_ids" { + count = local.create ? var.number_of_computed_egress_with_prefix_list_id * length(var.egress_prefix_list_ids) : 0 + + security_group_id = local.this_sg_id + + prefix_list_id = var.egress_prefix_list_ids[floor(count.index / var.number_of_computed_egress_with_prefix_list_id)] description = lookup( - var.computed_egress_with_prefix_list_ids[count.index], + var.computed_egress_with_prefix_list_id[count.index % var.number_of_computed_egress_with_prefix_list_id], "description", "Egress Rule", ) from_port = lookup( - var.computed_egress_with_prefix_list_ids[count.index], + var.computed_egress_with_prefix_list_id[count.index % var.number_of_computed_egress_with_prefix_list_id], "from_port", var.rules[lookup( - var.computed_egress_with_prefix_list_ids[count.index], + var.computed_egress_with_prefix_list_id[count.index % var.number_of_computed_egress_with_prefix_list_id], "rule", "_", )][0], ) - to_port = lookup( - var.computed_egress_with_prefix_list_ids[count.index], + var.computed_egress_with_prefix_list_id[count.index % var.number_of_computed_egress_with_prefix_list_id], "to_port", var.rules[lookup( - var.computed_egress_with_prefix_list_ids[count.index], + var.computed_egress_with_prefix_list_id[count.index % var.number_of_computed_egress_with_prefix_list_id], "rule", "_", )][1], ) - - protocol = lookup( - var.computed_egress_with_prefix_list_ids[count.index], - "protocol", + ip_protocol = lookup( + var.computed_egress_with_prefix_list_id[count.index % var.number_of_computed_egress_with_prefix_list_id], + "ip_protocol", var.rules[lookup( - var.computed_egress_with_prefix_list_ids[count.index], + var.computed_egress_with_prefix_list_id[count.index % var.number_of_computed_egress_with_prefix_list_id], "rule", "_", )][2], ) + + tags = var.tags } ################ diff --git a/modules/_templates/main.tf b/modules/_templates/main.tf index 80ea0adb..d2a1bf93 100644 --- a/modules/_templates/main.tf +++ b/modules/_templates/main.tf @@ -19,20 +19,20 @@ module "sg" { ingress_with_self = concat(var.auto_ingress_with_self, var.ingress_with_self) # Open to IPv4 cidr blocks - ingress_with_cidr_blocks = var.ingress_with_cidr_blocks + ingress_with_cidr_ipv4 = var.ingress_with_cidr_ipv4 # Open to IPv6 cidr blocks - ingress_with_ipv6_cidr_blocks = var.ingress_with_ipv6_cidr_blocks + ingress_with_cidr_ipv6 = var.ingress_with_cidr_ipv6 # Open for security group id - ingress_with_source_security_group_id = var.ingress_with_source_security_group_id + ingress_with_referenced_security_group_id = var.ingress_with_referenced_security_group_id # Open for prefix list id - ingress_with_prefix_list_ids = var.ingress_with_prefix_list_ids + ingress_with_prefix_list_id = var.ingress_with_prefix_list_id # Default ingress CIDR blocks - ingress_cidr_blocks = var.ingress_cidr_blocks - ingress_ipv6_cidr_blocks = var.ingress_ipv6_cidr_blocks + ingress_cidr_ipv4 = var.ingress_cidr_ipv4 + ingress_cidr_ipv6 = var.ingress_cidr_ipv6 # Default prefix list ids ingress_prefix_list_ids = var.ingress_prefix_list_ids @@ -47,26 +47,26 @@ module "sg" { computed_ingress_with_self = concat(var.auto_computed_ingress_with_self, var.computed_ingress_with_self) # Open to IPv4 cidr blocks - computed_ingress_with_cidr_blocks = var.computed_ingress_with_cidr_blocks + computed_ingress_with_cidr_ipv4 = var.computed_ingress_with_cidr_ipv4 # Open to IPv6 cidr blocks - computed_ingress_with_ipv6_cidr_blocks = var.computed_ingress_with_ipv6_cidr_blocks + computed_ingress_with_cidr_ipv6 = var.computed_ingress_with_cidr_ipv6 # Open for security group id - computed_ingress_with_source_security_group_id = var.computed_ingress_with_source_security_group_id + computed_ingress_with_referenced_security_group_id = var.computed_ingress_with_referenced_security_group_id # Open for prefix list id - computed_ingress_with_prefix_list_ids = var.computed_ingress_with_prefix_list_ids + computed_ingress_with_prefix_list_id = var.computed_ingress_with_prefix_list_id ############################# # Number of computed ingress ############################# - number_of_computed_ingress_rules = var.auto_number_of_computed_ingress_rules + var.number_of_computed_ingress_rules - number_of_computed_ingress_with_self = var.auto_number_of_computed_ingress_with_self + var.number_of_computed_ingress_with_self - number_of_computed_ingress_with_cidr_blocks = var.number_of_computed_ingress_with_cidr_blocks - number_of_computed_ingress_with_ipv6_cidr_blocks = var.number_of_computed_ingress_with_ipv6_cidr_blocks - number_of_computed_ingress_with_source_security_group_id = var.number_of_computed_ingress_with_source_security_group_id - number_of_computed_ingress_with_prefix_list_ids = var.number_of_computed_ingress_with_prefix_list_ids + number_of_computed_ingress_rules = var.auto_number_of_computed_ingress_rules + var.number_of_computed_ingress_rules + number_of_computed_ingress_with_self = var.auto_number_of_computed_ingress_with_self + var.number_of_computed_ingress_with_self + number_of_computed_ingress_with_cidr_ipv4 = var.number_of_computed_ingress_with_cidr_ipv4 + number_of_computed_ingress_with_cidr_ipv6 = var.number_of_computed_ingress_with_cidr_ipv6 + number_of_computed_ingress_with_referenced_security_group_id = var.number_of_computed_ingress_with_referenced_security_group_id + number_of_computed_ingress_with_prefix_list_id = var.number_of_computed_ingress_with_prefix_list_id ######### # Egress @@ -78,20 +78,20 @@ module "sg" { egress_with_self = concat(var.auto_egress_with_self, var.egress_with_self) # Open to IPv4 cidr blocks - egress_with_cidr_blocks = var.egress_with_cidr_blocks + egress_with_cidr_ipv4 = var.egress_with_cidr_ipv4 # Open to IPv6 cidr blocks - egress_with_ipv6_cidr_blocks = var.egress_with_ipv6_cidr_blocks + egress_with_cidr_ipv6 = var.egress_with_cidr_ipv6 # Open for security group id - egress_with_source_security_group_id = var.egress_with_source_security_group_id + egress_with_referenced_security_group_id = var.egress_with_referenced_security_group_id # Open for prefix list id - egress_with_prefix_list_ids = var.egress_with_prefix_list_ids + egress_with_prefix_list_id = var.egress_with_prefix_list_id # Default egress CIDR blocks - egress_cidr_blocks = var.egress_cidr_blocks - egress_ipv6_cidr_blocks = var.egress_ipv6_cidr_blocks + egress_cidr_ipv4 = var.egress_cidr_ipv4 + egress_cidr_ipv6 = var.egress_cidr_ipv6 # Default prefix list ids egress_prefix_list_ids = var.egress_prefix_list_ids @@ -106,24 +106,24 @@ module "sg" { computed_egress_with_self = concat(var.auto_computed_egress_with_self, var.computed_egress_with_self) # Open to IPv4 cidr blocks - computed_egress_with_cidr_blocks = var.computed_egress_with_cidr_blocks + computed_egress_with_cidr_ipv4 = var.computed_egress_with_cidr_ipv4 # Open to IPv6 cidr blocks - computed_egress_with_ipv6_cidr_blocks = var.computed_egress_with_ipv6_cidr_blocks + computed_egress_with_cidr_ipv6 = var.computed_egress_with_cidr_ipv6 # Open for security group id - computed_egress_with_source_security_group_id = var.computed_egress_with_source_security_group_id + computed_egress_with_referenced_security_group_id = var.computed_egress_with_referenced_security_group_id # Open for prefix list id - computed_egress_with_prefix_list_ids = var.computed_egress_with_prefix_list_ids + computed_egress_with_prefix_list_id = var.computed_egress_with_prefix_list_id ############################# # Number of computed egress ############################# - number_of_computed_egress_rules = var.auto_number_of_computed_egress_rules + var.number_of_computed_egress_rules - number_of_computed_egress_with_self = var.auto_number_of_computed_egress_with_self + var.number_of_computed_egress_with_self - number_of_computed_egress_with_cidr_blocks = var.number_of_computed_egress_with_cidr_blocks - number_of_computed_egress_with_ipv6_cidr_blocks = var.number_of_computed_egress_with_ipv6_cidr_blocks - number_of_computed_egress_with_source_security_group_id = var.number_of_computed_egress_with_source_security_group_id - number_of_computed_egress_with_prefix_list_ids = var.number_of_computed_egress_with_prefix_list_ids + number_of_computed_egress_rules = var.auto_number_of_computed_egress_rules + var.number_of_computed_egress_rules + number_of_computed_egress_with_self = var.auto_number_of_computed_egress_with_self + var.number_of_computed_egress_with_self + number_of_computed_egress_with_cidr_ipv4 = var.number_of_computed_egress_with_cidr_ipv4 + number_of_computed_egress_with_cidr_ipv6 = var.number_of_computed_egress_with_cidr_ipv6 + number_of_computed_egress_with_referenced_security_group_id = var.number_of_computed_egress_with_referenced_security_group_id + number_of_computed_egress_with_prefix_list_id = var.number_of_computed_egress_with_prefix_list_id } diff --git a/modules/_templates/variables.tf b/modules/_templates/variables.tf index 60c8c27b..6590c9e3 100644 --- a/modules/_templates/variables.tf +++ b/modules/_templates/variables.tf @@ -56,37 +56,37 @@ variable "ingress_with_self" { default = [] } -variable "ingress_with_cidr_blocks" { - description = "List of ingress rules to create where 'cidr_blocks' is used" +variable "ingress_with_cidr_ipv4" { + description = "List of ingress rules to create where 'cidr_ipv4' is used" type = list(map(string)) default = [] } -variable "ingress_with_ipv6_cidr_blocks" { +variable "ingress_with_cidr_ipv6" { description = "List of ingress rules to create where 'ipv6_cidr_blocks' is used" type = list(map(string)) default = [] } -variable "ingress_with_source_security_group_id" { +variable "ingress_with_referenced_security_group_id" { description = "List of ingress rules to create where 'source_security_group_id' is used" type = list(map(string)) default = [] } -variable "ingress_with_prefix_list_ids" { - description = "List of ingress rules to create where 'prefix_list_ids' is used" +variable "ingress_with_prefix_list_id" { + description = "List of ingress rules to create where 'prefix_list_id' is used" type = list(map(string)) default = [] } -variable "ingress_cidr_blocks" { +variable "ingress_cidr_ipv4" { description = "List of IPv4 CIDR ranges to use on all ingress rules" type = list(string) default = [] } -variable "ingress_ipv6_cidr_blocks" { +variable "ingress_cidr_ipv6" { description = "List of IPv6 CIDR ranges to use on all ingress rules" type = list(string) default = [] @@ -113,26 +113,26 @@ variable "computed_ingress_with_self" { default = [] } -variable "computed_ingress_with_cidr_blocks" { - description = "List of computed ingress rules to create where 'cidr_blocks' is used" +variable "computed_ingress_with_cidr_ipv4" { + description = "List of computed ingress rules to create where 'cidr_ipv4' is used" type = list(map(string)) default = [] } -variable "computed_ingress_with_ipv6_cidr_blocks" { +variable "computed_ingress_with_cidr_ipv6" { description = "List of computed ingress rules to create where 'ipv6_cidr_blocks' is used" type = list(map(string)) default = [] } -variable "computed_ingress_with_source_security_group_id" { +variable "computed_ingress_with_referenced_security_group_id" { description = "List of computed ingress rules to create where 'source_security_group_id' is used" type = list(map(string)) default = [] } -variable "computed_ingress_with_prefix_list_ids" { - description = "List of computed ingress rules to create where 'prefix_list_ids' is used" +variable "computed_ingress_with_prefix_list_id" { + description = "List of computed ingress rules to create where 'prefix_list_id' is used" type = list(map(string)) default = [] } @@ -170,26 +170,26 @@ variable "number_of_computed_ingress_with_self" { default = 0 } -variable "number_of_computed_ingress_with_cidr_blocks" { - description = "Number of computed ingress rules to create where 'cidr_blocks' is used" +variable "number_of_computed_ingress_with_cidr_ipv4" { + description = "Number of computed ingress rules to create where 'cidr_ipv4' is used" type = number default = 0 } -variable "number_of_computed_ingress_with_ipv6_cidr_blocks" { +variable "number_of_computed_ingress_with_cidr_ipv6" { description = "Number of computed ingress rules to create where 'ipv6_cidr_blocks' is used" type = number default = 0 } -variable "number_of_computed_ingress_with_source_security_group_id" { +variable "number_of_computed_ingress_with_referenced_security_group_id" { description = "Number of computed ingress rules to create where 'source_security_group_id' is used" type = number default = 0 } -variable "number_of_computed_ingress_with_prefix_list_ids" { - description = "Number of computed ingress rules to create where 'prefix_list_ids' is used" +variable "number_of_computed_ingress_with_prefix_list_id" { + description = "Number of computed ingress rules to create where 'prefix_list_id' is used" type = number default = 0 } @@ -227,37 +227,37 @@ variable "egress_with_self" { default = [] } -variable "egress_with_cidr_blocks" { - description = "List of egress rules to create where 'cidr_blocks' is used" +variable "egress_with_cidr_ipv4" { + description = "List of egress rules to create where 'cidr_ipv4' is used" type = list(map(string)) default = [] } -variable "egress_with_ipv6_cidr_blocks" { +variable "egress_with_cidr_ipv6" { description = "List of egress rules to create where 'ipv6_cidr_blocks' is used" type = list(map(string)) default = [] } -variable "egress_with_source_security_group_id" { +variable "egress_with_referenced_security_group_id" { description = "List of egress rules to create where 'source_security_group_id' is used" type = list(map(string)) default = [] } -variable "egress_with_prefix_list_ids" { - description = "List of egress rules to create where 'prefix_list_ids' is used" +variable "egress_with_prefix_list_id" { + description = "List of egress rules to create where 'prefix_list_id' is used" type = list(map(string)) default = [] } -variable "egress_cidr_blocks" { +variable "egress_cidr_ipv4" { description = "List of IPv4 CIDR ranges to use on all egress rules" type = list(string) default = ["0.0.0.0/0"] } -variable "egress_ipv6_cidr_blocks" { +variable "egress_cidr_ipv6" { description = "List of IPv6 CIDR ranges to use on all egress rules" type = list(string) default = ["::/0"] @@ -284,26 +284,26 @@ variable "computed_egress_with_self" { default = [] } -variable "computed_egress_with_cidr_blocks" { - description = "List of computed egress rules to create where 'cidr_blocks' is used" +variable "computed_egress_with_cidr_ipv4" { + description = "List of computed egress rules to create where 'cidr_ipv4' is used" type = list(map(string)) default = [] } -variable "computed_egress_with_ipv6_cidr_blocks" { +variable "computed_egress_with_cidr_ipv6" { description = "List of computed egress rules to create where 'ipv6_cidr_blocks' is used" type = list(map(string)) default = [] } -variable "computed_egress_with_source_security_group_id" { +variable "computed_egress_with_referenced_security_group_id" { description = "List of computed egress rules to create where 'source_security_group_id' is used" type = list(map(string)) default = [] } -variable "computed_egress_with_prefix_list_ids" { - description = "List of computed egress rules to create where 'prefix_list_ids' is used" +variable "computed_egress_with_prefix_list_id" { + description = "List of computed egress rules to create where 'prefix_list_id' is used" type = list(map(string)) default = [] } @@ -341,26 +341,26 @@ variable "number_of_computed_egress_with_self" { default = 0 } -variable "number_of_computed_egress_with_cidr_blocks" { - description = "Number of computed egress rules to create where 'cidr_blocks' is used" +variable "number_of_computed_egress_with_cidr_ipv4" { + description = "Number of computed egress rules to create where 'cidr_ipv4' is used" type = number default = 0 } -variable "number_of_computed_egress_with_ipv6_cidr_blocks" { +variable "number_of_computed_egress_with_cidr_ipv6" { description = "Number of computed egress rules to create where 'ipv6_cidr_blocks' is used" type = number default = 0 } -variable "number_of_computed_egress_with_source_security_group_id" { +variable "number_of_computed_egress_with_referenced_security_group_id" { description = "Number of computed egress rules to create where 'source_security_group_id' is used" type = number default = 0 } -variable "number_of_computed_egress_with_prefix_list_ids" { - description = "Number of computed egress rules to create where 'prefix_list_ids' is used" +variable "number_of_computed_egress_with_prefix_list_id" { + description = "Number of computed egress rules to create where 'prefix_list_id' is used" type = number default = 0 } diff --git a/modules/activemq/README.md b/modules/activemq/README.md index 5ae62912..a300ed73 100644 --- a/modules/activemq/README.md +++ b/modules/activemq/README.md @@ -55,59 +55,59 @@ No resources. | [computed\_egress\_ipv6\_cidr\_blocks](#input\_computed\_egress\_ipv6\_cidr\_blocks) | List of IPv6 CIDR ranges to use on all computed egress rules | `list(string)` |
[
"::/0"
]
| no | | [computed\_egress\_prefix\_list\_ids](#input\_computed\_egress\_prefix\_list\_ids) | List of prefix list IDs (for allowing access to VPC endpoints) to use on all computed egress rules | `list(string)` | `[]` | no | | [computed\_egress\_rules](#input\_computed\_egress\_rules) | List of computed egress rules to create by name | `list(string)` | `[]` | no | -| [computed\_egress\_with\_cidr\_blocks](#input\_computed\_egress\_with\_cidr\_blocks) | List of computed egress rules to create where 'cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [computed\_egress\_with\_ipv6\_cidr\_blocks](#input\_computed\_egress\_with\_ipv6\_cidr\_blocks) | List of computed egress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [computed\_egress\_with\_prefix\_list\_ids](#input\_computed\_egress\_with\_prefix\_list\_ids) | List of computed egress rules to create where 'prefix\_list\_ids' is used | `list(map(string))` | `[]` | no | +| [computed\_egress\_with\_cidr\_ipv4](#input\_computed\_egress\_with\_cidr\_ipv4) | List of computed egress rules to create where 'cidr\_ipv4' is used | `list(map(string))` | `[]` | no | +| [computed\_egress\_with\_cidr\_ipv6](#input\_computed\_egress\_with\_cidr\_ipv6) | List of computed egress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | +| [computed\_egress\_with\_prefix\_list\_id](#input\_computed\_egress\_with\_prefix\_list\_id) | List of computed egress rules to create where 'prefix\_list\_id' is used | `list(map(string))` | `[]` | no | +| [computed\_egress\_with\_referenced\_security\_group\_id](#input\_computed\_egress\_with\_referenced\_security\_group\_id) | List of computed egress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [computed\_egress\_with\_self](#input\_computed\_egress\_with\_self) | List of computed egress rules to create where 'self' is defined | `list(map(string))` | `[]` | no | -| [computed\_egress\_with\_source\_security\_group\_id](#input\_computed\_egress\_with\_source\_security\_group\_id) | List of computed egress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [computed\_ingress\_cidr\_blocks](#input\_computed\_ingress\_cidr\_blocks) | List of IPv4 CIDR ranges to use on all computed ingress rules | `list(string)` | `[]` | no | | [computed\_ingress\_ipv6\_cidr\_blocks](#input\_computed\_ingress\_ipv6\_cidr\_blocks) | List of IPv6 CIDR ranges to use on all computed ingress rules | `list(string)` | `[]` | no | | [computed\_ingress\_prefix\_list\_ids](#input\_computed\_ingress\_prefix\_list\_ids) | List of prefix list IDs (for allowing access to VPC endpoints) to use on all computed ingress rules | `list(string)` | `[]` | no | | [computed\_ingress\_rules](#input\_computed\_ingress\_rules) | List of computed ingress rules to create by name | `list(string)` | `[]` | no | -| [computed\_ingress\_with\_cidr\_blocks](#input\_computed\_ingress\_with\_cidr\_blocks) | List of computed ingress rules to create where 'cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [computed\_ingress\_with\_ipv6\_cidr\_blocks](#input\_computed\_ingress\_with\_ipv6\_cidr\_blocks) | List of computed ingress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [computed\_ingress\_with\_prefix\_list\_ids](#input\_computed\_ingress\_with\_prefix\_list\_ids) | List of computed ingress rules to create where 'prefix\_list\_ids' is used | `list(map(string))` | `[]` | no | +| [computed\_ingress\_with\_cidr\_ipv4](#input\_computed\_ingress\_with\_cidr\_ipv4) | List of computed ingress rules to create where 'cidr\_ipv4' is used | `list(map(string))` | `[]` | no | +| [computed\_ingress\_with\_cidr\_ipv6](#input\_computed\_ingress\_with\_cidr\_ipv6) | List of computed ingress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | +| [computed\_ingress\_with\_prefix\_list\_id](#input\_computed\_ingress\_with\_prefix\_list\_id) | List of computed ingress rules to create where 'prefix\_list\_id' is used | `list(map(string))` | `[]` | no | +| [computed\_ingress\_with\_referenced\_security\_group\_id](#input\_computed\_ingress\_with\_referenced\_security\_group\_id) | List of computed ingress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [computed\_ingress\_with\_self](#input\_computed\_ingress\_with\_self) | List of computed ingress rules to create where 'self' is defined | `list(map(string))` | `[]` | no | -| [computed\_ingress\_with\_source\_security\_group\_id](#input\_computed\_ingress\_with\_source\_security\_group\_id) | List of computed ingress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [create](#input\_create) | Whether to create security group and all rules | `bool` | `true` | no | | [description](#input\_description) | Description of security group | `string` | `"Security Group managed by Terraform"` | no | -| [egress\_cidr\_blocks](#input\_egress\_cidr\_blocks) | List of IPv4 CIDR ranges to use on all egress rules | `list(string)` |
[
"0.0.0.0/0"
]
| no | -| [egress\_ipv6\_cidr\_blocks](#input\_egress\_ipv6\_cidr\_blocks) | List of IPv6 CIDR ranges to use on all egress rules | `list(string)` |
[
"::/0"
]
| no | +| [egress\_cidr\_ipv4](#input\_egress\_cidr\_ipv4) | List of IPv4 CIDR ranges to use on all egress rules | `list(string)` |
[
"0.0.0.0/0"
]
| no | +| [egress\_cidr\_ipv6](#input\_egress\_cidr\_ipv6) | List of IPv6 CIDR ranges to use on all egress rules | `list(string)` |
[
"::/0"
]
| no | | [egress\_prefix\_list\_ids](#input\_egress\_prefix\_list\_ids) | List of prefix list IDs (for allowing access to VPC endpoints) to use on all egress rules | `list(string)` | `[]` | no | | [egress\_rules](#input\_egress\_rules) | List of egress rules to create by name | `list(string)` | `[]` | no | -| [egress\_with\_cidr\_blocks](#input\_egress\_with\_cidr\_blocks) | List of egress rules to create where 'cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [egress\_with\_ipv6\_cidr\_blocks](#input\_egress\_with\_ipv6\_cidr\_blocks) | List of egress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [egress\_with\_prefix\_list\_ids](#input\_egress\_with\_prefix\_list\_ids) | List of egress rules to create where 'prefix\_list\_ids' is used | `list(map(string))` | `[]` | no | +| [egress\_with\_cidr\_ipv4](#input\_egress\_with\_cidr\_ipv4) | List of egress rules to create where 'cidr\_ipv4' is used | `list(map(string))` | `[]` | no | +| [egress\_with\_cidr\_ipv6](#input\_egress\_with\_cidr\_ipv6) | List of egress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | +| [egress\_with\_prefix\_list\_id](#input\_egress\_with\_prefix\_list\_id) | List of egress rules to create where 'prefix\_list\_id' is used | `list(map(string))` | `[]` | no | +| [egress\_with\_referenced\_security\_group\_id](#input\_egress\_with\_referenced\_security\_group\_id) | List of egress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [egress\_with\_self](#input\_egress\_with\_self) | List of egress rules to create where 'self' is defined | `list(map(string))` | `[]` | no | -| [egress\_with\_source\_security\_group\_id](#input\_egress\_with\_source\_security\_group\_id) | List of egress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | -| [ingress\_cidr\_blocks](#input\_ingress\_cidr\_blocks) | List of IPv4 CIDR ranges to use on all ingress rules | `list(string)` | `[]` | no | -| [ingress\_ipv6\_cidr\_blocks](#input\_ingress\_ipv6\_cidr\_blocks) | List of IPv6 CIDR ranges to use on all ingress rules | `list(string)` | `[]` | no | +| [ingress\_cidr\_ipv4](#input\_ingress\_cidr\_ipv4) | List of IPv4 CIDR ranges to use on all ingress rules | `list(string)` | `[]` | no | +| [ingress\_cidr\_ipv6](#input\_ingress\_cidr\_ipv6) | List of IPv6 CIDR ranges to use on all ingress rules | `list(string)` | `[]` | no | | [ingress\_prefix\_list\_ids](#input\_ingress\_prefix\_list\_ids) | List of prefix list IDs (for allowing access to VPC endpoints) to use on all ingress rules | `list(string)` | `[]` | no | | [ingress\_rules](#input\_ingress\_rules) | List of ingress rules to create by name | `list(string)` | `[]` | no | -| [ingress\_with\_cidr\_blocks](#input\_ingress\_with\_cidr\_blocks) | List of ingress rules to create where 'cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [ingress\_with\_ipv6\_cidr\_blocks](#input\_ingress\_with\_ipv6\_cidr\_blocks) | List of ingress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [ingress\_with\_prefix\_list\_ids](#input\_ingress\_with\_prefix\_list\_ids) | List of ingress rules to create where 'prefix\_list\_ids' is used | `list(map(string))` | `[]` | no | +| [ingress\_with\_cidr\_ipv4](#input\_ingress\_with\_cidr\_ipv4) | List of ingress rules to create where 'cidr\_ipv4' is used | `list(map(string))` | `[]` | no | +| [ingress\_with\_cidr\_ipv6](#input\_ingress\_with\_cidr\_ipv6) | List of ingress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | +| [ingress\_with\_prefix\_list\_id](#input\_ingress\_with\_prefix\_list\_id) | List of ingress rules to create where 'prefix\_list\_id' is used | `list(map(string))` | `[]` | no | +| [ingress\_with\_referenced\_security\_group\_id](#input\_ingress\_with\_referenced\_security\_group\_id) | List of ingress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [ingress\_with\_self](#input\_ingress\_with\_self) | List of ingress rules to create where 'self' is defined | `list(map(string))` | `[]` | no | -| [ingress\_with\_source\_security\_group\_id](#input\_ingress\_with\_source\_security\_group\_id) | List of ingress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [name](#input\_name) | Name of security group | `string` | n/a | yes | | [number\_of\_computed\_egress\_cidr\_blocks](#input\_number\_of\_computed\_egress\_cidr\_blocks) | Number of IPv4 CIDR ranges to use on all computed egress rules | `number` | `0` | no | | [number\_of\_computed\_egress\_ipv6\_cidr\_blocks](#input\_number\_of\_computed\_egress\_ipv6\_cidr\_blocks) | Number of IPv6 CIDR ranges to use on all computed egress rules | `number` | `0` | no | | [number\_of\_computed\_egress\_prefix\_list\_ids](#input\_number\_of\_computed\_egress\_prefix\_list\_ids) | Number of prefix list IDs (for allowing access to VPC endpoints) to use on all computed egress rules | `number` | `0` | no | | [number\_of\_computed\_egress\_rules](#input\_number\_of\_computed\_egress\_rules) | Number of computed egress rules to create by name | `number` | `0` | no | -| [number\_of\_computed\_egress\_with\_cidr\_blocks](#input\_number\_of\_computed\_egress\_with\_cidr\_blocks) | Number of computed egress rules to create where 'cidr\_blocks' is used | `number` | `0` | no | -| [number\_of\_computed\_egress\_with\_ipv6\_cidr\_blocks](#input\_number\_of\_computed\_egress\_with\_ipv6\_cidr\_blocks) | Number of computed egress rules to create where 'ipv6\_cidr\_blocks' is used | `number` | `0` | no | -| [number\_of\_computed\_egress\_with\_prefix\_list\_ids](#input\_number\_of\_computed\_egress\_with\_prefix\_list\_ids) | Number of computed egress rules to create where 'prefix\_list\_ids' is used | `number` | `0` | no | +| [number\_of\_computed\_egress\_with\_cidr\_ipv4](#input\_number\_of\_computed\_egress\_with\_cidr\_ipv4) | Number of computed egress rules to create where 'cidr\_ipv4' is used | `number` | `0` | no | +| [number\_of\_computed\_egress\_with\_cidr\_ipv6](#input\_number\_of\_computed\_egress\_with\_cidr\_ipv6) | Number of computed egress rules to create where 'ipv6\_cidr\_blocks' is used | `number` | `0` | no | +| [number\_of\_computed\_egress\_with\_prefix\_list\_id](#input\_number\_of\_computed\_egress\_with\_prefix\_list\_id) | Number of computed egress rules to create where 'prefix\_list\_id' is used | `number` | `0` | no | +| [number\_of\_computed\_egress\_with\_referenced\_security\_group\_id](#input\_number\_of\_computed\_egress\_with\_referenced\_security\_group\_id) | Number of computed egress rules to create where 'source\_security\_group\_id' is used | `number` | `0` | no | | [number\_of\_computed\_egress\_with\_self](#input\_number\_of\_computed\_egress\_with\_self) | Number of computed egress rules to create where 'self' is defined | `number` | `0` | no | -| [number\_of\_computed\_egress\_with\_source\_security\_group\_id](#input\_number\_of\_computed\_egress\_with\_source\_security\_group\_id) | Number of computed egress rules to create where 'source\_security\_group\_id' is used | `number` | `0` | no | | [number\_of\_computed\_ingress\_cidr\_blocks](#input\_number\_of\_computed\_ingress\_cidr\_blocks) | Number of IPv4 CIDR ranges to use on all computed ingress rules | `number` | `0` | no | | [number\_of\_computed\_ingress\_ipv6\_cidr\_blocks](#input\_number\_of\_computed\_ingress\_ipv6\_cidr\_blocks) | Number of IPv6 CIDR ranges to use on all computed ingress rules | `number` | `0` | no | | [number\_of\_computed\_ingress\_prefix\_list\_ids](#input\_number\_of\_computed\_ingress\_prefix\_list\_ids) | Number of prefix list IDs (for allowing access to VPC endpoints) to use on all computed ingress rules | `number` | `0` | no | | [number\_of\_computed\_ingress\_rules](#input\_number\_of\_computed\_ingress\_rules) | Number of computed ingress rules to create by name | `number` | `0` | no | -| [number\_of\_computed\_ingress\_with\_cidr\_blocks](#input\_number\_of\_computed\_ingress\_with\_cidr\_blocks) | Number of computed ingress rules to create where 'cidr\_blocks' is used | `number` | `0` | no | -| [number\_of\_computed\_ingress\_with\_ipv6\_cidr\_blocks](#input\_number\_of\_computed\_ingress\_with\_ipv6\_cidr\_blocks) | Number of computed ingress rules to create where 'ipv6\_cidr\_blocks' is used | `number` | `0` | no | -| [number\_of\_computed\_ingress\_with\_prefix\_list\_ids](#input\_number\_of\_computed\_ingress\_with\_prefix\_list\_ids) | Number of computed ingress rules to create where 'prefix\_list\_ids' is used | `number` | `0` | no | +| [number\_of\_computed\_ingress\_with\_cidr\_ipv4](#input\_number\_of\_computed\_ingress\_with\_cidr\_ipv4) | Number of computed ingress rules to create where 'cidr\_ipv4' is used | `number` | `0` | no | +| [number\_of\_computed\_ingress\_with\_cidr\_ipv6](#input\_number\_of\_computed\_ingress\_with\_cidr\_ipv6) | Number of computed ingress rules to create where 'ipv6\_cidr\_blocks' is used | `number` | `0` | no | +| [number\_of\_computed\_ingress\_with\_prefix\_list\_id](#input\_number\_of\_computed\_ingress\_with\_prefix\_list\_id) | Number of computed ingress rules to create where 'prefix\_list\_id' is used | `number` | `0` | no | +| [number\_of\_computed\_ingress\_with\_referenced\_security\_group\_id](#input\_number\_of\_computed\_ingress\_with\_referenced\_security\_group\_id) | Number of computed ingress rules to create where 'source\_security\_group\_id' is used | `number` | `0` | no | | [number\_of\_computed\_ingress\_with\_self](#input\_number\_of\_computed\_ingress\_with\_self) | Number of computed ingress rules to create where 'self' is defined | `number` | `0` | no | -| [number\_of\_computed\_ingress\_with\_source\_security\_group\_id](#input\_number\_of\_computed\_ingress\_with\_source\_security\_group\_id) | Number of computed ingress rules to create where 'source\_security\_group\_id' is used | `number` | `0` | no | | [revoke\_rules\_on\_delete](#input\_revoke\_rules\_on\_delete) | Instruct Terraform to revoke all of the Security Groups attached ingress and egress rules before deleting the rule itself. Enable for EMR. | `bool` | `false` | no | | [tags](#input\_tags) | A mapping of tags to assign to security group | `map(string)` | `{}` | no | | [use\_name\_prefix](#input\_use\_name\_prefix) | Whether to use name\_prefix or fixed name. Should be true to able to update security group name after initial creation | `bool` | `true` | no | diff --git a/modules/activemq/main.tf b/modules/activemq/main.tf index 80ea0adb..d2a1bf93 100644 --- a/modules/activemq/main.tf +++ b/modules/activemq/main.tf @@ -19,20 +19,20 @@ module "sg" { ingress_with_self = concat(var.auto_ingress_with_self, var.ingress_with_self) # Open to IPv4 cidr blocks - ingress_with_cidr_blocks = var.ingress_with_cidr_blocks + ingress_with_cidr_ipv4 = var.ingress_with_cidr_ipv4 # Open to IPv6 cidr blocks - ingress_with_ipv6_cidr_blocks = var.ingress_with_ipv6_cidr_blocks + ingress_with_cidr_ipv6 = var.ingress_with_cidr_ipv6 # Open for security group id - ingress_with_source_security_group_id = var.ingress_with_source_security_group_id + ingress_with_referenced_security_group_id = var.ingress_with_referenced_security_group_id # Open for prefix list id - ingress_with_prefix_list_ids = var.ingress_with_prefix_list_ids + ingress_with_prefix_list_id = var.ingress_with_prefix_list_id # Default ingress CIDR blocks - ingress_cidr_blocks = var.ingress_cidr_blocks - ingress_ipv6_cidr_blocks = var.ingress_ipv6_cidr_blocks + ingress_cidr_ipv4 = var.ingress_cidr_ipv4 + ingress_cidr_ipv6 = var.ingress_cidr_ipv6 # Default prefix list ids ingress_prefix_list_ids = var.ingress_prefix_list_ids @@ -47,26 +47,26 @@ module "sg" { computed_ingress_with_self = concat(var.auto_computed_ingress_with_self, var.computed_ingress_with_self) # Open to IPv4 cidr blocks - computed_ingress_with_cidr_blocks = var.computed_ingress_with_cidr_blocks + computed_ingress_with_cidr_ipv4 = var.computed_ingress_with_cidr_ipv4 # Open to IPv6 cidr blocks - computed_ingress_with_ipv6_cidr_blocks = var.computed_ingress_with_ipv6_cidr_blocks + computed_ingress_with_cidr_ipv6 = var.computed_ingress_with_cidr_ipv6 # Open for security group id - computed_ingress_with_source_security_group_id = var.computed_ingress_with_source_security_group_id + computed_ingress_with_referenced_security_group_id = var.computed_ingress_with_referenced_security_group_id # Open for prefix list id - computed_ingress_with_prefix_list_ids = var.computed_ingress_with_prefix_list_ids + computed_ingress_with_prefix_list_id = var.computed_ingress_with_prefix_list_id ############################# # Number of computed ingress ############################# - number_of_computed_ingress_rules = var.auto_number_of_computed_ingress_rules + var.number_of_computed_ingress_rules - number_of_computed_ingress_with_self = var.auto_number_of_computed_ingress_with_self + var.number_of_computed_ingress_with_self - number_of_computed_ingress_with_cidr_blocks = var.number_of_computed_ingress_with_cidr_blocks - number_of_computed_ingress_with_ipv6_cidr_blocks = var.number_of_computed_ingress_with_ipv6_cidr_blocks - number_of_computed_ingress_with_source_security_group_id = var.number_of_computed_ingress_with_source_security_group_id - number_of_computed_ingress_with_prefix_list_ids = var.number_of_computed_ingress_with_prefix_list_ids + number_of_computed_ingress_rules = var.auto_number_of_computed_ingress_rules + var.number_of_computed_ingress_rules + number_of_computed_ingress_with_self = var.auto_number_of_computed_ingress_with_self + var.number_of_computed_ingress_with_self + number_of_computed_ingress_with_cidr_ipv4 = var.number_of_computed_ingress_with_cidr_ipv4 + number_of_computed_ingress_with_cidr_ipv6 = var.number_of_computed_ingress_with_cidr_ipv6 + number_of_computed_ingress_with_referenced_security_group_id = var.number_of_computed_ingress_with_referenced_security_group_id + number_of_computed_ingress_with_prefix_list_id = var.number_of_computed_ingress_with_prefix_list_id ######### # Egress @@ -78,20 +78,20 @@ module "sg" { egress_with_self = concat(var.auto_egress_with_self, var.egress_with_self) # Open to IPv4 cidr blocks - egress_with_cidr_blocks = var.egress_with_cidr_blocks + egress_with_cidr_ipv4 = var.egress_with_cidr_ipv4 # Open to IPv6 cidr blocks - egress_with_ipv6_cidr_blocks = var.egress_with_ipv6_cidr_blocks + egress_with_cidr_ipv6 = var.egress_with_cidr_ipv6 # Open for security group id - egress_with_source_security_group_id = var.egress_with_source_security_group_id + egress_with_referenced_security_group_id = var.egress_with_referenced_security_group_id # Open for prefix list id - egress_with_prefix_list_ids = var.egress_with_prefix_list_ids + egress_with_prefix_list_id = var.egress_with_prefix_list_id # Default egress CIDR blocks - egress_cidr_blocks = var.egress_cidr_blocks - egress_ipv6_cidr_blocks = var.egress_ipv6_cidr_blocks + egress_cidr_ipv4 = var.egress_cidr_ipv4 + egress_cidr_ipv6 = var.egress_cidr_ipv6 # Default prefix list ids egress_prefix_list_ids = var.egress_prefix_list_ids @@ -106,24 +106,24 @@ module "sg" { computed_egress_with_self = concat(var.auto_computed_egress_with_self, var.computed_egress_with_self) # Open to IPv4 cidr blocks - computed_egress_with_cidr_blocks = var.computed_egress_with_cidr_blocks + computed_egress_with_cidr_ipv4 = var.computed_egress_with_cidr_ipv4 # Open to IPv6 cidr blocks - computed_egress_with_ipv6_cidr_blocks = var.computed_egress_with_ipv6_cidr_blocks + computed_egress_with_cidr_ipv6 = var.computed_egress_with_cidr_ipv6 # Open for security group id - computed_egress_with_source_security_group_id = var.computed_egress_with_source_security_group_id + computed_egress_with_referenced_security_group_id = var.computed_egress_with_referenced_security_group_id # Open for prefix list id - computed_egress_with_prefix_list_ids = var.computed_egress_with_prefix_list_ids + computed_egress_with_prefix_list_id = var.computed_egress_with_prefix_list_id ############################# # Number of computed egress ############################# - number_of_computed_egress_rules = var.auto_number_of_computed_egress_rules + var.number_of_computed_egress_rules - number_of_computed_egress_with_self = var.auto_number_of_computed_egress_with_self + var.number_of_computed_egress_with_self - number_of_computed_egress_with_cidr_blocks = var.number_of_computed_egress_with_cidr_blocks - number_of_computed_egress_with_ipv6_cidr_blocks = var.number_of_computed_egress_with_ipv6_cidr_blocks - number_of_computed_egress_with_source_security_group_id = var.number_of_computed_egress_with_source_security_group_id - number_of_computed_egress_with_prefix_list_ids = var.number_of_computed_egress_with_prefix_list_ids + number_of_computed_egress_rules = var.auto_number_of_computed_egress_rules + var.number_of_computed_egress_rules + number_of_computed_egress_with_self = var.auto_number_of_computed_egress_with_self + var.number_of_computed_egress_with_self + number_of_computed_egress_with_cidr_ipv4 = var.number_of_computed_egress_with_cidr_ipv4 + number_of_computed_egress_with_cidr_ipv6 = var.number_of_computed_egress_with_cidr_ipv6 + number_of_computed_egress_with_referenced_security_group_id = var.number_of_computed_egress_with_referenced_security_group_id + number_of_computed_egress_with_prefix_list_id = var.number_of_computed_egress_with_prefix_list_id } diff --git a/modules/activemq/variables.tf b/modules/activemq/variables.tf index 60c8c27b..6590c9e3 100644 --- a/modules/activemq/variables.tf +++ b/modules/activemq/variables.tf @@ -56,37 +56,37 @@ variable "ingress_with_self" { default = [] } -variable "ingress_with_cidr_blocks" { - description = "List of ingress rules to create where 'cidr_blocks' is used" +variable "ingress_with_cidr_ipv4" { + description = "List of ingress rules to create where 'cidr_ipv4' is used" type = list(map(string)) default = [] } -variable "ingress_with_ipv6_cidr_blocks" { +variable "ingress_with_cidr_ipv6" { description = "List of ingress rules to create where 'ipv6_cidr_blocks' is used" type = list(map(string)) default = [] } -variable "ingress_with_source_security_group_id" { +variable "ingress_with_referenced_security_group_id" { description = "List of ingress rules to create where 'source_security_group_id' is used" type = list(map(string)) default = [] } -variable "ingress_with_prefix_list_ids" { - description = "List of ingress rules to create where 'prefix_list_ids' is used" +variable "ingress_with_prefix_list_id" { + description = "List of ingress rules to create where 'prefix_list_id' is used" type = list(map(string)) default = [] } -variable "ingress_cidr_blocks" { +variable "ingress_cidr_ipv4" { description = "List of IPv4 CIDR ranges to use on all ingress rules" type = list(string) default = [] } -variable "ingress_ipv6_cidr_blocks" { +variable "ingress_cidr_ipv6" { description = "List of IPv6 CIDR ranges to use on all ingress rules" type = list(string) default = [] @@ -113,26 +113,26 @@ variable "computed_ingress_with_self" { default = [] } -variable "computed_ingress_with_cidr_blocks" { - description = "List of computed ingress rules to create where 'cidr_blocks' is used" +variable "computed_ingress_with_cidr_ipv4" { + description = "List of computed ingress rules to create where 'cidr_ipv4' is used" type = list(map(string)) default = [] } -variable "computed_ingress_with_ipv6_cidr_blocks" { +variable "computed_ingress_with_cidr_ipv6" { description = "List of computed ingress rules to create where 'ipv6_cidr_blocks' is used" type = list(map(string)) default = [] } -variable "computed_ingress_with_source_security_group_id" { +variable "computed_ingress_with_referenced_security_group_id" { description = "List of computed ingress rules to create where 'source_security_group_id' is used" type = list(map(string)) default = [] } -variable "computed_ingress_with_prefix_list_ids" { - description = "List of computed ingress rules to create where 'prefix_list_ids' is used" +variable "computed_ingress_with_prefix_list_id" { + description = "List of computed ingress rules to create where 'prefix_list_id' is used" type = list(map(string)) default = [] } @@ -170,26 +170,26 @@ variable "number_of_computed_ingress_with_self" { default = 0 } -variable "number_of_computed_ingress_with_cidr_blocks" { - description = "Number of computed ingress rules to create where 'cidr_blocks' is used" +variable "number_of_computed_ingress_with_cidr_ipv4" { + description = "Number of computed ingress rules to create where 'cidr_ipv4' is used" type = number default = 0 } -variable "number_of_computed_ingress_with_ipv6_cidr_blocks" { +variable "number_of_computed_ingress_with_cidr_ipv6" { description = "Number of computed ingress rules to create where 'ipv6_cidr_blocks' is used" type = number default = 0 } -variable "number_of_computed_ingress_with_source_security_group_id" { +variable "number_of_computed_ingress_with_referenced_security_group_id" { description = "Number of computed ingress rules to create where 'source_security_group_id' is used" type = number default = 0 } -variable "number_of_computed_ingress_with_prefix_list_ids" { - description = "Number of computed ingress rules to create where 'prefix_list_ids' is used" +variable "number_of_computed_ingress_with_prefix_list_id" { + description = "Number of computed ingress rules to create where 'prefix_list_id' is used" type = number default = 0 } @@ -227,37 +227,37 @@ variable "egress_with_self" { default = [] } -variable "egress_with_cidr_blocks" { - description = "List of egress rules to create where 'cidr_blocks' is used" +variable "egress_with_cidr_ipv4" { + description = "List of egress rules to create where 'cidr_ipv4' is used" type = list(map(string)) default = [] } -variable "egress_with_ipv6_cidr_blocks" { +variable "egress_with_cidr_ipv6" { description = "List of egress rules to create where 'ipv6_cidr_blocks' is used" type = list(map(string)) default = [] } -variable "egress_with_source_security_group_id" { +variable "egress_with_referenced_security_group_id" { description = "List of egress rules to create where 'source_security_group_id' is used" type = list(map(string)) default = [] } -variable "egress_with_prefix_list_ids" { - description = "List of egress rules to create where 'prefix_list_ids' is used" +variable "egress_with_prefix_list_id" { + description = "List of egress rules to create where 'prefix_list_id' is used" type = list(map(string)) default = [] } -variable "egress_cidr_blocks" { +variable "egress_cidr_ipv4" { description = "List of IPv4 CIDR ranges to use on all egress rules" type = list(string) default = ["0.0.0.0/0"] } -variable "egress_ipv6_cidr_blocks" { +variable "egress_cidr_ipv6" { description = "List of IPv6 CIDR ranges to use on all egress rules" type = list(string) default = ["::/0"] @@ -284,26 +284,26 @@ variable "computed_egress_with_self" { default = [] } -variable "computed_egress_with_cidr_blocks" { - description = "List of computed egress rules to create where 'cidr_blocks' is used" +variable "computed_egress_with_cidr_ipv4" { + description = "List of computed egress rules to create where 'cidr_ipv4' is used" type = list(map(string)) default = [] } -variable "computed_egress_with_ipv6_cidr_blocks" { +variable "computed_egress_with_cidr_ipv6" { description = "List of computed egress rules to create where 'ipv6_cidr_blocks' is used" type = list(map(string)) default = [] } -variable "computed_egress_with_source_security_group_id" { +variable "computed_egress_with_referenced_security_group_id" { description = "List of computed egress rules to create where 'source_security_group_id' is used" type = list(map(string)) default = [] } -variable "computed_egress_with_prefix_list_ids" { - description = "List of computed egress rules to create where 'prefix_list_ids' is used" +variable "computed_egress_with_prefix_list_id" { + description = "List of computed egress rules to create where 'prefix_list_id' is used" type = list(map(string)) default = [] } @@ -341,26 +341,26 @@ variable "number_of_computed_egress_with_self" { default = 0 } -variable "number_of_computed_egress_with_cidr_blocks" { - description = "Number of computed egress rules to create where 'cidr_blocks' is used" +variable "number_of_computed_egress_with_cidr_ipv4" { + description = "Number of computed egress rules to create where 'cidr_ipv4' is used" type = number default = 0 } -variable "number_of_computed_egress_with_ipv6_cidr_blocks" { +variable "number_of_computed_egress_with_cidr_ipv6" { description = "Number of computed egress rules to create where 'ipv6_cidr_blocks' is used" type = number default = 0 } -variable "number_of_computed_egress_with_source_security_group_id" { +variable "number_of_computed_egress_with_referenced_security_group_id" { description = "Number of computed egress rules to create where 'source_security_group_id' is used" type = number default = 0 } -variable "number_of_computed_egress_with_prefix_list_ids" { - description = "Number of computed egress rules to create where 'prefix_list_ids' is used" +variable "number_of_computed_egress_with_prefix_list_id" { + description = "Number of computed egress rules to create where 'prefix_list_id' is used" type = number default = 0 } diff --git a/modules/alertmanager/README.md b/modules/alertmanager/README.md index a7b021c3..09dfb361 100644 --- a/modules/alertmanager/README.md +++ b/modules/alertmanager/README.md @@ -55,59 +55,59 @@ No resources. | [computed\_egress\_ipv6\_cidr\_blocks](#input\_computed\_egress\_ipv6\_cidr\_blocks) | List of IPv6 CIDR ranges to use on all computed egress rules | `list(string)` |
[
"::/0"
]
| no | | [computed\_egress\_prefix\_list\_ids](#input\_computed\_egress\_prefix\_list\_ids) | List of prefix list IDs (for allowing access to VPC endpoints) to use on all computed egress rules | `list(string)` | `[]` | no | | [computed\_egress\_rules](#input\_computed\_egress\_rules) | List of computed egress rules to create by name | `list(string)` | `[]` | no | -| [computed\_egress\_with\_cidr\_blocks](#input\_computed\_egress\_with\_cidr\_blocks) | List of computed egress rules to create where 'cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [computed\_egress\_with\_ipv6\_cidr\_blocks](#input\_computed\_egress\_with\_ipv6\_cidr\_blocks) | List of computed egress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [computed\_egress\_with\_prefix\_list\_ids](#input\_computed\_egress\_with\_prefix\_list\_ids) | List of computed egress rules to create where 'prefix\_list\_ids' is used | `list(map(string))` | `[]` | no | +| [computed\_egress\_with\_cidr\_ipv4](#input\_computed\_egress\_with\_cidr\_ipv4) | List of computed egress rules to create where 'cidr\_ipv4' is used | `list(map(string))` | `[]` | no | +| [computed\_egress\_with\_cidr\_ipv6](#input\_computed\_egress\_with\_cidr\_ipv6) | List of computed egress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | +| [computed\_egress\_with\_prefix\_list\_id](#input\_computed\_egress\_with\_prefix\_list\_id) | List of computed egress rules to create where 'prefix\_list\_id' is used | `list(map(string))` | `[]` | no | +| [computed\_egress\_with\_referenced\_security\_group\_id](#input\_computed\_egress\_with\_referenced\_security\_group\_id) | List of computed egress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [computed\_egress\_with\_self](#input\_computed\_egress\_with\_self) | List of computed egress rules to create where 'self' is defined | `list(map(string))` | `[]` | no | -| [computed\_egress\_with\_source\_security\_group\_id](#input\_computed\_egress\_with\_source\_security\_group\_id) | List of computed egress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [computed\_ingress\_cidr\_blocks](#input\_computed\_ingress\_cidr\_blocks) | List of IPv4 CIDR ranges to use on all computed ingress rules | `list(string)` | `[]` | no | | [computed\_ingress\_ipv6\_cidr\_blocks](#input\_computed\_ingress\_ipv6\_cidr\_blocks) | List of IPv6 CIDR ranges to use on all computed ingress rules | `list(string)` | `[]` | no | | [computed\_ingress\_prefix\_list\_ids](#input\_computed\_ingress\_prefix\_list\_ids) | List of prefix list IDs (for allowing access to VPC endpoints) to use on all computed ingress rules | `list(string)` | `[]` | no | | [computed\_ingress\_rules](#input\_computed\_ingress\_rules) | List of computed ingress rules to create by name | `list(string)` | `[]` | no | -| [computed\_ingress\_with\_cidr\_blocks](#input\_computed\_ingress\_with\_cidr\_blocks) | List of computed ingress rules to create where 'cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [computed\_ingress\_with\_ipv6\_cidr\_blocks](#input\_computed\_ingress\_with\_ipv6\_cidr\_blocks) | List of computed ingress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [computed\_ingress\_with\_prefix\_list\_ids](#input\_computed\_ingress\_with\_prefix\_list\_ids) | List of computed ingress rules to create where 'prefix\_list\_ids' is used | `list(map(string))` | `[]` | no | +| [computed\_ingress\_with\_cidr\_ipv4](#input\_computed\_ingress\_with\_cidr\_ipv4) | List of computed ingress rules to create where 'cidr\_ipv4' is used | `list(map(string))` | `[]` | no | +| [computed\_ingress\_with\_cidr\_ipv6](#input\_computed\_ingress\_with\_cidr\_ipv6) | List of computed ingress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | +| [computed\_ingress\_with\_prefix\_list\_id](#input\_computed\_ingress\_with\_prefix\_list\_id) | List of computed ingress rules to create where 'prefix\_list\_id' is used | `list(map(string))` | `[]` | no | +| [computed\_ingress\_with\_referenced\_security\_group\_id](#input\_computed\_ingress\_with\_referenced\_security\_group\_id) | List of computed ingress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [computed\_ingress\_with\_self](#input\_computed\_ingress\_with\_self) | List of computed ingress rules to create where 'self' is defined | `list(map(string))` | `[]` | no | -| [computed\_ingress\_with\_source\_security\_group\_id](#input\_computed\_ingress\_with\_source\_security\_group\_id) | List of computed ingress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [create](#input\_create) | Whether to create security group and all rules | `bool` | `true` | no | | [description](#input\_description) | Description of security group | `string` | `"Security Group managed by Terraform"` | no | -| [egress\_cidr\_blocks](#input\_egress\_cidr\_blocks) | List of IPv4 CIDR ranges to use on all egress rules | `list(string)` |
[
"0.0.0.0/0"
]
| no | -| [egress\_ipv6\_cidr\_blocks](#input\_egress\_ipv6\_cidr\_blocks) | List of IPv6 CIDR ranges to use on all egress rules | `list(string)` |
[
"::/0"
]
| no | +| [egress\_cidr\_ipv4](#input\_egress\_cidr\_ipv4) | List of IPv4 CIDR ranges to use on all egress rules | `list(string)` |
[
"0.0.0.0/0"
]
| no | +| [egress\_cidr\_ipv6](#input\_egress\_cidr\_ipv6) | List of IPv6 CIDR ranges to use on all egress rules | `list(string)` |
[
"::/0"
]
| no | | [egress\_prefix\_list\_ids](#input\_egress\_prefix\_list\_ids) | List of prefix list IDs (for allowing access to VPC endpoints) to use on all egress rules | `list(string)` | `[]` | no | | [egress\_rules](#input\_egress\_rules) | List of egress rules to create by name | `list(string)` | `[]` | no | -| [egress\_with\_cidr\_blocks](#input\_egress\_with\_cidr\_blocks) | List of egress rules to create where 'cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [egress\_with\_ipv6\_cidr\_blocks](#input\_egress\_with\_ipv6\_cidr\_blocks) | List of egress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [egress\_with\_prefix\_list\_ids](#input\_egress\_with\_prefix\_list\_ids) | List of egress rules to create where 'prefix\_list\_ids' is used | `list(map(string))` | `[]` | no | +| [egress\_with\_cidr\_ipv4](#input\_egress\_with\_cidr\_ipv4) | List of egress rules to create where 'cidr\_ipv4' is used | `list(map(string))` | `[]` | no | +| [egress\_with\_cidr\_ipv6](#input\_egress\_with\_cidr\_ipv6) | List of egress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | +| [egress\_with\_prefix\_list\_id](#input\_egress\_with\_prefix\_list\_id) | List of egress rules to create where 'prefix\_list\_id' is used | `list(map(string))` | `[]` | no | +| [egress\_with\_referenced\_security\_group\_id](#input\_egress\_with\_referenced\_security\_group\_id) | List of egress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [egress\_with\_self](#input\_egress\_with\_self) | List of egress rules to create where 'self' is defined | `list(map(string))` | `[]` | no | -| [egress\_with\_source\_security\_group\_id](#input\_egress\_with\_source\_security\_group\_id) | List of egress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | -| [ingress\_cidr\_blocks](#input\_ingress\_cidr\_blocks) | List of IPv4 CIDR ranges to use on all ingress rules | `list(string)` | `[]` | no | -| [ingress\_ipv6\_cidr\_blocks](#input\_ingress\_ipv6\_cidr\_blocks) | List of IPv6 CIDR ranges to use on all ingress rules | `list(string)` | `[]` | no | +| [ingress\_cidr\_ipv4](#input\_ingress\_cidr\_ipv4) | List of IPv4 CIDR ranges to use on all ingress rules | `list(string)` | `[]` | no | +| [ingress\_cidr\_ipv6](#input\_ingress\_cidr\_ipv6) | List of IPv6 CIDR ranges to use on all ingress rules | `list(string)` | `[]` | no | | [ingress\_prefix\_list\_ids](#input\_ingress\_prefix\_list\_ids) | List of prefix list IDs (for allowing access to VPC endpoints) to use on all ingress rules | `list(string)` | `[]` | no | | [ingress\_rules](#input\_ingress\_rules) | List of ingress rules to create by name | `list(string)` | `[]` | no | -| [ingress\_with\_cidr\_blocks](#input\_ingress\_with\_cidr\_blocks) | List of ingress rules to create where 'cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [ingress\_with\_ipv6\_cidr\_blocks](#input\_ingress\_with\_ipv6\_cidr\_blocks) | List of ingress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [ingress\_with\_prefix\_list\_ids](#input\_ingress\_with\_prefix\_list\_ids) | List of ingress rules to create where 'prefix\_list\_ids' is used | `list(map(string))` | `[]` | no | +| [ingress\_with\_cidr\_ipv4](#input\_ingress\_with\_cidr\_ipv4) | List of ingress rules to create where 'cidr\_ipv4' is used | `list(map(string))` | `[]` | no | +| [ingress\_with\_cidr\_ipv6](#input\_ingress\_with\_cidr\_ipv6) | List of ingress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | +| [ingress\_with\_prefix\_list\_id](#input\_ingress\_with\_prefix\_list\_id) | List of ingress rules to create where 'prefix\_list\_id' is used | `list(map(string))` | `[]` | no | +| [ingress\_with\_referenced\_security\_group\_id](#input\_ingress\_with\_referenced\_security\_group\_id) | List of ingress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [ingress\_with\_self](#input\_ingress\_with\_self) | List of ingress rules to create where 'self' is defined | `list(map(string))` | `[]` | no | -| [ingress\_with\_source\_security\_group\_id](#input\_ingress\_with\_source\_security\_group\_id) | List of ingress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [name](#input\_name) | Name of security group | `string` | n/a | yes | | [number\_of\_computed\_egress\_cidr\_blocks](#input\_number\_of\_computed\_egress\_cidr\_blocks) | Number of IPv4 CIDR ranges to use on all computed egress rules | `number` | `0` | no | | [number\_of\_computed\_egress\_ipv6\_cidr\_blocks](#input\_number\_of\_computed\_egress\_ipv6\_cidr\_blocks) | Number of IPv6 CIDR ranges to use on all computed egress rules | `number` | `0` | no | | [number\_of\_computed\_egress\_prefix\_list\_ids](#input\_number\_of\_computed\_egress\_prefix\_list\_ids) | Number of prefix list IDs (for allowing access to VPC endpoints) to use on all computed egress rules | `number` | `0` | no | | [number\_of\_computed\_egress\_rules](#input\_number\_of\_computed\_egress\_rules) | Number of computed egress rules to create by name | `number` | `0` | no | -| [number\_of\_computed\_egress\_with\_cidr\_blocks](#input\_number\_of\_computed\_egress\_with\_cidr\_blocks) | Number of computed egress rules to create where 'cidr\_blocks' is used | `number` | `0` | no | -| [number\_of\_computed\_egress\_with\_ipv6\_cidr\_blocks](#input\_number\_of\_computed\_egress\_with\_ipv6\_cidr\_blocks) | Number of computed egress rules to create where 'ipv6\_cidr\_blocks' is used | `number` | `0` | no | -| [number\_of\_computed\_egress\_with\_prefix\_list\_ids](#input\_number\_of\_computed\_egress\_with\_prefix\_list\_ids) | Number of computed egress rules to create where 'prefix\_list\_ids' is used | `number` | `0` | no | +| [number\_of\_computed\_egress\_with\_cidr\_ipv4](#input\_number\_of\_computed\_egress\_with\_cidr\_ipv4) | Number of computed egress rules to create where 'cidr\_ipv4' is used | `number` | `0` | no | +| [number\_of\_computed\_egress\_with\_cidr\_ipv6](#input\_number\_of\_computed\_egress\_with\_cidr\_ipv6) | Number of computed egress rules to create where 'ipv6\_cidr\_blocks' is used | `number` | `0` | no | +| [number\_of\_computed\_egress\_with\_prefix\_list\_id](#input\_number\_of\_computed\_egress\_with\_prefix\_list\_id) | Number of computed egress rules to create where 'prefix\_list\_id' is used | `number` | `0` | no | +| [number\_of\_computed\_egress\_with\_referenced\_security\_group\_id](#input\_number\_of\_computed\_egress\_with\_referenced\_security\_group\_id) | Number of computed egress rules to create where 'source\_security\_group\_id' is used | `number` | `0` | no | | [number\_of\_computed\_egress\_with\_self](#input\_number\_of\_computed\_egress\_with\_self) | Number of computed egress rules to create where 'self' is defined | `number` | `0` | no | -| [number\_of\_computed\_egress\_with\_source\_security\_group\_id](#input\_number\_of\_computed\_egress\_with\_source\_security\_group\_id) | Number of computed egress rules to create where 'source\_security\_group\_id' is used | `number` | `0` | no | | [number\_of\_computed\_ingress\_cidr\_blocks](#input\_number\_of\_computed\_ingress\_cidr\_blocks) | Number of IPv4 CIDR ranges to use on all computed ingress rules | `number` | `0` | no | | [number\_of\_computed\_ingress\_ipv6\_cidr\_blocks](#input\_number\_of\_computed\_ingress\_ipv6\_cidr\_blocks) | Number of IPv6 CIDR ranges to use on all computed ingress rules | `number` | `0` | no | | [number\_of\_computed\_ingress\_prefix\_list\_ids](#input\_number\_of\_computed\_ingress\_prefix\_list\_ids) | Number of prefix list IDs (for allowing access to VPC endpoints) to use on all computed ingress rules | `number` | `0` | no | | [number\_of\_computed\_ingress\_rules](#input\_number\_of\_computed\_ingress\_rules) | Number of computed ingress rules to create by name | `number` | `0` | no | -| [number\_of\_computed\_ingress\_with\_cidr\_blocks](#input\_number\_of\_computed\_ingress\_with\_cidr\_blocks) | Number of computed ingress rules to create where 'cidr\_blocks' is used | `number` | `0` | no | -| [number\_of\_computed\_ingress\_with\_ipv6\_cidr\_blocks](#input\_number\_of\_computed\_ingress\_with\_ipv6\_cidr\_blocks) | Number of computed ingress rules to create where 'ipv6\_cidr\_blocks' is used | `number` | `0` | no | -| [number\_of\_computed\_ingress\_with\_prefix\_list\_ids](#input\_number\_of\_computed\_ingress\_with\_prefix\_list\_ids) | Number of computed ingress rules to create where 'prefix\_list\_ids' is used | `number` | `0` | no | +| [number\_of\_computed\_ingress\_with\_cidr\_ipv4](#input\_number\_of\_computed\_ingress\_with\_cidr\_ipv4) | Number of computed ingress rules to create where 'cidr\_ipv4' is used | `number` | `0` | no | +| [number\_of\_computed\_ingress\_with\_cidr\_ipv6](#input\_number\_of\_computed\_ingress\_with\_cidr\_ipv6) | Number of computed ingress rules to create where 'ipv6\_cidr\_blocks' is used | `number` | `0` | no | +| [number\_of\_computed\_ingress\_with\_prefix\_list\_id](#input\_number\_of\_computed\_ingress\_with\_prefix\_list\_id) | Number of computed ingress rules to create where 'prefix\_list\_id' is used | `number` | `0` | no | +| [number\_of\_computed\_ingress\_with\_referenced\_security\_group\_id](#input\_number\_of\_computed\_ingress\_with\_referenced\_security\_group\_id) | Number of computed ingress rules to create where 'source\_security\_group\_id' is used | `number` | `0` | no | | [number\_of\_computed\_ingress\_with\_self](#input\_number\_of\_computed\_ingress\_with\_self) | Number of computed ingress rules to create where 'self' is defined | `number` | `0` | no | -| [number\_of\_computed\_ingress\_with\_source\_security\_group\_id](#input\_number\_of\_computed\_ingress\_with\_source\_security\_group\_id) | Number of computed ingress rules to create where 'source\_security\_group\_id' is used | `number` | `0` | no | | [revoke\_rules\_on\_delete](#input\_revoke\_rules\_on\_delete) | Instruct Terraform to revoke all of the Security Groups attached ingress and egress rules before deleting the rule itself. Enable for EMR. | `bool` | `false` | no | | [tags](#input\_tags) | A mapping of tags to assign to security group | `map(string)` | `{}` | no | | [use\_name\_prefix](#input\_use\_name\_prefix) | Whether to use name\_prefix or fixed name. Should be true to able to update security group name after initial creation | `bool` | `true` | no | diff --git a/modules/alertmanager/main.tf b/modules/alertmanager/main.tf index 80ea0adb..d2a1bf93 100644 --- a/modules/alertmanager/main.tf +++ b/modules/alertmanager/main.tf @@ -19,20 +19,20 @@ module "sg" { ingress_with_self = concat(var.auto_ingress_with_self, var.ingress_with_self) # Open to IPv4 cidr blocks - ingress_with_cidr_blocks = var.ingress_with_cidr_blocks + ingress_with_cidr_ipv4 = var.ingress_with_cidr_ipv4 # Open to IPv6 cidr blocks - ingress_with_ipv6_cidr_blocks = var.ingress_with_ipv6_cidr_blocks + ingress_with_cidr_ipv6 = var.ingress_with_cidr_ipv6 # Open for security group id - ingress_with_source_security_group_id = var.ingress_with_source_security_group_id + ingress_with_referenced_security_group_id = var.ingress_with_referenced_security_group_id # Open for prefix list id - ingress_with_prefix_list_ids = var.ingress_with_prefix_list_ids + ingress_with_prefix_list_id = var.ingress_with_prefix_list_id # Default ingress CIDR blocks - ingress_cidr_blocks = var.ingress_cidr_blocks - ingress_ipv6_cidr_blocks = var.ingress_ipv6_cidr_blocks + ingress_cidr_ipv4 = var.ingress_cidr_ipv4 + ingress_cidr_ipv6 = var.ingress_cidr_ipv6 # Default prefix list ids ingress_prefix_list_ids = var.ingress_prefix_list_ids @@ -47,26 +47,26 @@ module "sg" { computed_ingress_with_self = concat(var.auto_computed_ingress_with_self, var.computed_ingress_with_self) # Open to IPv4 cidr blocks - computed_ingress_with_cidr_blocks = var.computed_ingress_with_cidr_blocks + computed_ingress_with_cidr_ipv4 = var.computed_ingress_with_cidr_ipv4 # Open to IPv6 cidr blocks - computed_ingress_with_ipv6_cidr_blocks = var.computed_ingress_with_ipv6_cidr_blocks + computed_ingress_with_cidr_ipv6 = var.computed_ingress_with_cidr_ipv6 # Open for security group id - computed_ingress_with_source_security_group_id = var.computed_ingress_with_source_security_group_id + computed_ingress_with_referenced_security_group_id = var.computed_ingress_with_referenced_security_group_id # Open for prefix list id - computed_ingress_with_prefix_list_ids = var.computed_ingress_with_prefix_list_ids + computed_ingress_with_prefix_list_id = var.computed_ingress_with_prefix_list_id ############################# # Number of computed ingress ############################# - number_of_computed_ingress_rules = var.auto_number_of_computed_ingress_rules + var.number_of_computed_ingress_rules - number_of_computed_ingress_with_self = var.auto_number_of_computed_ingress_with_self + var.number_of_computed_ingress_with_self - number_of_computed_ingress_with_cidr_blocks = var.number_of_computed_ingress_with_cidr_blocks - number_of_computed_ingress_with_ipv6_cidr_blocks = var.number_of_computed_ingress_with_ipv6_cidr_blocks - number_of_computed_ingress_with_source_security_group_id = var.number_of_computed_ingress_with_source_security_group_id - number_of_computed_ingress_with_prefix_list_ids = var.number_of_computed_ingress_with_prefix_list_ids + number_of_computed_ingress_rules = var.auto_number_of_computed_ingress_rules + var.number_of_computed_ingress_rules + number_of_computed_ingress_with_self = var.auto_number_of_computed_ingress_with_self + var.number_of_computed_ingress_with_self + number_of_computed_ingress_with_cidr_ipv4 = var.number_of_computed_ingress_with_cidr_ipv4 + number_of_computed_ingress_with_cidr_ipv6 = var.number_of_computed_ingress_with_cidr_ipv6 + number_of_computed_ingress_with_referenced_security_group_id = var.number_of_computed_ingress_with_referenced_security_group_id + number_of_computed_ingress_with_prefix_list_id = var.number_of_computed_ingress_with_prefix_list_id ######### # Egress @@ -78,20 +78,20 @@ module "sg" { egress_with_self = concat(var.auto_egress_with_self, var.egress_with_self) # Open to IPv4 cidr blocks - egress_with_cidr_blocks = var.egress_with_cidr_blocks + egress_with_cidr_ipv4 = var.egress_with_cidr_ipv4 # Open to IPv6 cidr blocks - egress_with_ipv6_cidr_blocks = var.egress_with_ipv6_cidr_blocks + egress_with_cidr_ipv6 = var.egress_with_cidr_ipv6 # Open for security group id - egress_with_source_security_group_id = var.egress_with_source_security_group_id + egress_with_referenced_security_group_id = var.egress_with_referenced_security_group_id # Open for prefix list id - egress_with_prefix_list_ids = var.egress_with_prefix_list_ids + egress_with_prefix_list_id = var.egress_with_prefix_list_id # Default egress CIDR blocks - egress_cidr_blocks = var.egress_cidr_blocks - egress_ipv6_cidr_blocks = var.egress_ipv6_cidr_blocks + egress_cidr_ipv4 = var.egress_cidr_ipv4 + egress_cidr_ipv6 = var.egress_cidr_ipv6 # Default prefix list ids egress_prefix_list_ids = var.egress_prefix_list_ids @@ -106,24 +106,24 @@ module "sg" { computed_egress_with_self = concat(var.auto_computed_egress_with_self, var.computed_egress_with_self) # Open to IPv4 cidr blocks - computed_egress_with_cidr_blocks = var.computed_egress_with_cidr_blocks + computed_egress_with_cidr_ipv4 = var.computed_egress_with_cidr_ipv4 # Open to IPv6 cidr blocks - computed_egress_with_ipv6_cidr_blocks = var.computed_egress_with_ipv6_cidr_blocks + computed_egress_with_cidr_ipv6 = var.computed_egress_with_cidr_ipv6 # Open for security group id - computed_egress_with_source_security_group_id = var.computed_egress_with_source_security_group_id + computed_egress_with_referenced_security_group_id = var.computed_egress_with_referenced_security_group_id # Open for prefix list id - computed_egress_with_prefix_list_ids = var.computed_egress_with_prefix_list_ids + computed_egress_with_prefix_list_id = var.computed_egress_with_prefix_list_id ############################# # Number of computed egress ############################# - number_of_computed_egress_rules = var.auto_number_of_computed_egress_rules + var.number_of_computed_egress_rules - number_of_computed_egress_with_self = var.auto_number_of_computed_egress_with_self + var.number_of_computed_egress_with_self - number_of_computed_egress_with_cidr_blocks = var.number_of_computed_egress_with_cidr_blocks - number_of_computed_egress_with_ipv6_cidr_blocks = var.number_of_computed_egress_with_ipv6_cidr_blocks - number_of_computed_egress_with_source_security_group_id = var.number_of_computed_egress_with_source_security_group_id - number_of_computed_egress_with_prefix_list_ids = var.number_of_computed_egress_with_prefix_list_ids + number_of_computed_egress_rules = var.auto_number_of_computed_egress_rules + var.number_of_computed_egress_rules + number_of_computed_egress_with_self = var.auto_number_of_computed_egress_with_self + var.number_of_computed_egress_with_self + number_of_computed_egress_with_cidr_ipv4 = var.number_of_computed_egress_with_cidr_ipv4 + number_of_computed_egress_with_cidr_ipv6 = var.number_of_computed_egress_with_cidr_ipv6 + number_of_computed_egress_with_referenced_security_group_id = var.number_of_computed_egress_with_referenced_security_group_id + number_of_computed_egress_with_prefix_list_id = var.number_of_computed_egress_with_prefix_list_id } diff --git a/modules/alertmanager/variables.tf b/modules/alertmanager/variables.tf index 60c8c27b..6590c9e3 100644 --- a/modules/alertmanager/variables.tf +++ b/modules/alertmanager/variables.tf @@ -56,37 +56,37 @@ variable "ingress_with_self" { default = [] } -variable "ingress_with_cidr_blocks" { - description = "List of ingress rules to create where 'cidr_blocks' is used" +variable "ingress_with_cidr_ipv4" { + description = "List of ingress rules to create where 'cidr_ipv4' is used" type = list(map(string)) default = [] } -variable "ingress_with_ipv6_cidr_blocks" { +variable "ingress_with_cidr_ipv6" { description = "List of ingress rules to create where 'ipv6_cidr_blocks' is used" type = list(map(string)) default = [] } -variable "ingress_with_source_security_group_id" { +variable "ingress_with_referenced_security_group_id" { description = "List of ingress rules to create where 'source_security_group_id' is used" type = list(map(string)) default = [] } -variable "ingress_with_prefix_list_ids" { - description = "List of ingress rules to create where 'prefix_list_ids' is used" +variable "ingress_with_prefix_list_id" { + description = "List of ingress rules to create where 'prefix_list_id' is used" type = list(map(string)) default = [] } -variable "ingress_cidr_blocks" { +variable "ingress_cidr_ipv4" { description = "List of IPv4 CIDR ranges to use on all ingress rules" type = list(string) default = [] } -variable "ingress_ipv6_cidr_blocks" { +variable "ingress_cidr_ipv6" { description = "List of IPv6 CIDR ranges to use on all ingress rules" type = list(string) default = [] @@ -113,26 +113,26 @@ variable "computed_ingress_with_self" { default = [] } -variable "computed_ingress_with_cidr_blocks" { - description = "List of computed ingress rules to create where 'cidr_blocks' is used" +variable "computed_ingress_with_cidr_ipv4" { + description = "List of computed ingress rules to create where 'cidr_ipv4' is used" type = list(map(string)) default = [] } -variable "computed_ingress_with_ipv6_cidr_blocks" { +variable "computed_ingress_with_cidr_ipv6" { description = "List of computed ingress rules to create where 'ipv6_cidr_blocks' is used" type = list(map(string)) default = [] } -variable "computed_ingress_with_source_security_group_id" { +variable "computed_ingress_with_referenced_security_group_id" { description = "List of computed ingress rules to create where 'source_security_group_id' is used" type = list(map(string)) default = [] } -variable "computed_ingress_with_prefix_list_ids" { - description = "List of computed ingress rules to create where 'prefix_list_ids' is used" +variable "computed_ingress_with_prefix_list_id" { + description = "List of computed ingress rules to create where 'prefix_list_id' is used" type = list(map(string)) default = [] } @@ -170,26 +170,26 @@ variable "number_of_computed_ingress_with_self" { default = 0 } -variable "number_of_computed_ingress_with_cidr_blocks" { - description = "Number of computed ingress rules to create where 'cidr_blocks' is used" +variable "number_of_computed_ingress_with_cidr_ipv4" { + description = "Number of computed ingress rules to create where 'cidr_ipv4' is used" type = number default = 0 } -variable "number_of_computed_ingress_with_ipv6_cidr_blocks" { +variable "number_of_computed_ingress_with_cidr_ipv6" { description = "Number of computed ingress rules to create where 'ipv6_cidr_blocks' is used" type = number default = 0 } -variable "number_of_computed_ingress_with_source_security_group_id" { +variable "number_of_computed_ingress_with_referenced_security_group_id" { description = "Number of computed ingress rules to create where 'source_security_group_id' is used" type = number default = 0 } -variable "number_of_computed_ingress_with_prefix_list_ids" { - description = "Number of computed ingress rules to create where 'prefix_list_ids' is used" +variable "number_of_computed_ingress_with_prefix_list_id" { + description = "Number of computed ingress rules to create where 'prefix_list_id' is used" type = number default = 0 } @@ -227,37 +227,37 @@ variable "egress_with_self" { default = [] } -variable "egress_with_cidr_blocks" { - description = "List of egress rules to create where 'cidr_blocks' is used" +variable "egress_with_cidr_ipv4" { + description = "List of egress rules to create where 'cidr_ipv4' is used" type = list(map(string)) default = [] } -variable "egress_with_ipv6_cidr_blocks" { +variable "egress_with_cidr_ipv6" { description = "List of egress rules to create where 'ipv6_cidr_blocks' is used" type = list(map(string)) default = [] } -variable "egress_with_source_security_group_id" { +variable "egress_with_referenced_security_group_id" { description = "List of egress rules to create where 'source_security_group_id' is used" type = list(map(string)) default = [] } -variable "egress_with_prefix_list_ids" { - description = "List of egress rules to create where 'prefix_list_ids' is used" +variable "egress_with_prefix_list_id" { + description = "List of egress rules to create where 'prefix_list_id' is used" type = list(map(string)) default = [] } -variable "egress_cidr_blocks" { +variable "egress_cidr_ipv4" { description = "List of IPv4 CIDR ranges to use on all egress rules" type = list(string) default = ["0.0.0.0/0"] } -variable "egress_ipv6_cidr_blocks" { +variable "egress_cidr_ipv6" { description = "List of IPv6 CIDR ranges to use on all egress rules" type = list(string) default = ["::/0"] @@ -284,26 +284,26 @@ variable "computed_egress_with_self" { default = [] } -variable "computed_egress_with_cidr_blocks" { - description = "List of computed egress rules to create where 'cidr_blocks' is used" +variable "computed_egress_with_cidr_ipv4" { + description = "List of computed egress rules to create where 'cidr_ipv4' is used" type = list(map(string)) default = [] } -variable "computed_egress_with_ipv6_cidr_blocks" { +variable "computed_egress_with_cidr_ipv6" { description = "List of computed egress rules to create where 'ipv6_cidr_blocks' is used" type = list(map(string)) default = [] } -variable "computed_egress_with_source_security_group_id" { +variable "computed_egress_with_referenced_security_group_id" { description = "List of computed egress rules to create where 'source_security_group_id' is used" type = list(map(string)) default = [] } -variable "computed_egress_with_prefix_list_ids" { - description = "List of computed egress rules to create where 'prefix_list_ids' is used" +variable "computed_egress_with_prefix_list_id" { + description = "List of computed egress rules to create where 'prefix_list_id' is used" type = list(map(string)) default = [] } @@ -341,26 +341,26 @@ variable "number_of_computed_egress_with_self" { default = 0 } -variable "number_of_computed_egress_with_cidr_blocks" { - description = "Number of computed egress rules to create where 'cidr_blocks' is used" +variable "number_of_computed_egress_with_cidr_ipv4" { + description = "Number of computed egress rules to create where 'cidr_ipv4' is used" type = number default = 0 } -variable "number_of_computed_egress_with_ipv6_cidr_blocks" { +variable "number_of_computed_egress_with_cidr_ipv6" { description = "Number of computed egress rules to create where 'ipv6_cidr_blocks' is used" type = number default = 0 } -variable "number_of_computed_egress_with_source_security_group_id" { +variable "number_of_computed_egress_with_referenced_security_group_id" { description = "Number of computed egress rules to create where 'source_security_group_id' is used" type = number default = 0 } -variable "number_of_computed_egress_with_prefix_list_ids" { - description = "Number of computed egress rules to create where 'prefix_list_ids' is used" +variable "number_of_computed_egress_with_prefix_list_id" { + description = "Number of computed egress rules to create where 'prefix_list_id' is used" type = number default = 0 } diff --git a/modules/carbon-relay-ng/README.md b/modules/carbon-relay-ng/README.md index 5b88860f..ba12b128 100644 --- a/modules/carbon-relay-ng/README.md +++ b/modules/carbon-relay-ng/README.md @@ -55,59 +55,59 @@ No resources. | [computed\_egress\_ipv6\_cidr\_blocks](#input\_computed\_egress\_ipv6\_cidr\_blocks) | List of IPv6 CIDR ranges to use on all computed egress rules | `list(string)` |
[
"::/0"
]
| no | | [computed\_egress\_prefix\_list\_ids](#input\_computed\_egress\_prefix\_list\_ids) | List of prefix list IDs (for allowing access to VPC endpoints) to use on all computed egress rules | `list(string)` | `[]` | no | | [computed\_egress\_rules](#input\_computed\_egress\_rules) | List of computed egress rules to create by name | `list(string)` | `[]` | no | -| [computed\_egress\_with\_cidr\_blocks](#input\_computed\_egress\_with\_cidr\_blocks) | List of computed egress rules to create where 'cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [computed\_egress\_with\_ipv6\_cidr\_blocks](#input\_computed\_egress\_with\_ipv6\_cidr\_blocks) | List of computed egress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [computed\_egress\_with\_prefix\_list\_ids](#input\_computed\_egress\_with\_prefix\_list\_ids) | List of computed egress rules to create where 'prefix\_list\_ids' is used | `list(map(string))` | `[]` | no | +| [computed\_egress\_with\_cidr\_ipv4](#input\_computed\_egress\_with\_cidr\_ipv4) | List of computed egress rules to create where 'cidr\_ipv4' is used | `list(map(string))` | `[]` | no | +| [computed\_egress\_with\_cidr\_ipv6](#input\_computed\_egress\_with\_cidr\_ipv6) | List of computed egress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | +| [computed\_egress\_with\_prefix\_list\_id](#input\_computed\_egress\_with\_prefix\_list\_id) | List of computed egress rules to create where 'prefix\_list\_id' is used | `list(map(string))` | `[]` | no | +| [computed\_egress\_with\_referenced\_security\_group\_id](#input\_computed\_egress\_with\_referenced\_security\_group\_id) | List of computed egress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [computed\_egress\_with\_self](#input\_computed\_egress\_with\_self) | List of computed egress rules to create where 'self' is defined | `list(map(string))` | `[]` | no | -| [computed\_egress\_with\_source\_security\_group\_id](#input\_computed\_egress\_with\_source\_security\_group\_id) | List of computed egress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [computed\_ingress\_cidr\_blocks](#input\_computed\_ingress\_cidr\_blocks) | List of IPv4 CIDR ranges to use on all computed ingress rules | `list(string)` | `[]` | no | | [computed\_ingress\_ipv6\_cidr\_blocks](#input\_computed\_ingress\_ipv6\_cidr\_blocks) | List of IPv6 CIDR ranges to use on all computed ingress rules | `list(string)` | `[]` | no | | [computed\_ingress\_prefix\_list\_ids](#input\_computed\_ingress\_prefix\_list\_ids) | List of prefix list IDs (for allowing access to VPC endpoints) to use on all computed ingress rules | `list(string)` | `[]` | no | | [computed\_ingress\_rules](#input\_computed\_ingress\_rules) | List of computed ingress rules to create by name | `list(string)` | `[]` | no | -| [computed\_ingress\_with\_cidr\_blocks](#input\_computed\_ingress\_with\_cidr\_blocks) | List of computed ingress rules to create where 'cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [computed\_ingress\_with\_ipv6\_cidr\_blocks](#input\_computed\_ingress\_with\_ipv6\_cidr\_blocks) | List of computed ingress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [computed\_ingress\_with\_prefix\_list\_ids](#input\_computed\_ingress\_with\_prefix\_list\_ids) | List of computed ingress rules to create where 'prefix\_list\_ids' is used | `list(map(string))` | `[]` | no | +| [computed\_ingress\_with\_cidr\_ipv4](#input\_computed\_ingress\_with\_cidr\_ipv4) | List of computed ingress rules to create where 'cidr\_ipv4' is used | `list(map(string))` | `[]` | no | +| [computed\_ingress\_with\_cidr\_ipv6](#input\_computed\_ingress\_with\_cidr\_ipv6) | List of computed ingress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | +| [computed\_ingress\_with\_prefix\_list\_id](#input\_computed\_ingress\_with\_prefix\_list\_id) | List of computed ingress rules to create where 'prefix\_list\_id' is used | `list(map(string))` | `[]` | no | +| [computed\_ingress\_with\_referenced\_security\_group\_id](#input\_computed\_ingress\_with\_referenced\_security\_group\_id) | List of computed ingress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [computed\_ingress\_with\_self](#input\_computed\_ingress\_with\_self) | List of computed ingress rules to create where 'self' is defined | `list(map(string))` | `[]` | no | -| [computed\_ingress\_with\_source\_security\_group\_id](#input\_computed\_ingress\_with\_source\_security\_group\_id) | List of computed ingress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [create](#input\_create) | Whether to create security group and all rules | `bool` | `true` | no | | [description](#input\_description) | Description of security group | `string` | `"Security Group managed by Terraform"` | no | -| [egress\_cidr\_blocks](#input\_egress\_cidr\_blocks) | List of IPv4 CIDR ranges to use on all egress rules | `list(string)` |
[
"0.0.0.0/0"
]
| no | -| [egress\_ipv6\_cidr\_blocks](#input\_egress\_ipv6\_cidr\_blocks) | List of IPv6 CIDR ranges to use on all egress rules | `list(string)` |
[
"::/0"
]
| no | +| [egress\_cidr\_ipv4](#input\_egress\_cidr\_ipv4) | List of IPv4 CIDR ranges to use on all egress rules | `list(string)` |
[
"0.0.0.0/0"
]
| no | +| [egress\_cidr\_ipv6](#input\_egress\_cidr\_ipv6) | List of IPv6 CIDR ranges to use on all egress rules | `list(string)` |
[
"::/0"
]
| no | | [egress\_prefix\_list\_ids](#input\_egress\_prefix\_list\_ids) | List of prefix list IDs (for allowing access to VPC endpoints) to use on all egress rules | `list(string)` | `[]` | no | | [egress\_rules](#input\_egress\_rules) | List of egress rules to create by name | `list(string)` | `[]` | no | -| [egress\_with\_cidr\_blocks](#input\_egress\_with\_cidr\_blocks) | List of egress rules to create where 'cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [egress\_with\_ipv6\_cidr\_blocks](#input\_egress\_with\_ipv6\_cidr\_blocks) | List of egress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [egress\_with\_prefix\_list\_ids](#input\_egress\_with\_prefix\_list\_ids) | List of egress rules to create where 'prefix\_list\_ids' is used | `list(map(string))` | `[]` | no | +| [egress\_with\_cidr\_ipv4](#input\_egress\_with\_cidr\_ipv4) | List of egress rules to create where 'cidr\_ipv4' is used | `list(map(string))` | `[]` | no | +| [egress\_with\_cidr\_ipv6](#input\_egress\_with\_cidr\_ipv6) | List of egress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | +| [egress\_with\_prefix\_list\_id](#input\_egress\_with\_prefix\_list\_id) | List of egress rules to create where 'prefix\_list\_id' is used | `list(map(string))` | `[]` | no | +| [egress\_with\_referenced\_security\_group\_id](#input\_egress\_with\_referenced\_security\_group\_id) | List of egress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [egress\_with\_self](#input\_egress\_with\_self) | List of egress rules to create where 'self' is defined | `list(map(string))` | `[]` | no | -| [egress\_with\_source\_security\_group\_id](#input\_egress\_with\_source\_security\_group\_id) | List of egress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | -| [ingress\_cidr\_blocks](#input\_ingress\_cidr\_blocks) | List of IPv4 CIDR ranges to use on all ingress rules | `list(string)` | `[]` | no | -| [ingress\_ipv6\_cidr\_blocks](#input\_ingress\_ipv6\_cidr\_blocks) | List of IPv6 CIDR ranges to use on all ingress rules | `list(string)` | `[]` | no | +| [ingress\_cidr\_ipv4](#input\_ingress\_cidr\_ipv4) | List of IPv4 CIDR ranges to use on all ingress rules | `list(string)` | `[]` | no | +| [ingress\_cidr\_ipv6](#input\_ingress\_cidr\_ipv6) | List of IPv6 CIDR ranges to use on all ingress rules | `list(string)` | `[]` | no | | [ingress\_prefix\_list\_ids](#input\_ingress\_prefix\_list\_ids) | List of prefix list IDs (for allowing access to VPC endpoints) to use on all ingress rules | `list(string)` | `[]` | no | | [ingress\_rules](#input\_ingress\_rules) | List of ingress rules to create by name | `list(string)` | `[]` | no | -| [ingress\_with\_cidr\_blocks](#input\_ingress\_with\_cidr\_blocks) | List of ingress rules to create where 'cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [ingress\_with\_ipv6\_cidr\_blocks](#input\_ingress\_with\_ipv6\_cidr\_blocks) | List of ingress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [ingress\_with\_prefix\_list\_ids](#input\_ingress\_with\_prefix\_list\_ids) | List of ingress rules to create where 'prefix\_list\_ids' is used | `list(map(string))` | `[]` | no | +| [ingress\_with\_cidr\_ipv4](#input\_ingress\_with\_cidr\_ipv4) | List of ingress rules to create where 'cidr\_ipv4' is used | `list(map(string))` | `[]` | no | +| [ingress\_with\_cidr\_ipv6](#input\_ingress\_with\_cidr\_ipv6) | List of ingress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | +| [ingress\_with\_prefix\_list\_id](#input\_ingress\_with\_prefix\_list\_id) | List of ingress rules to create where 'prefix\_list\_id' is used | `list(map(string))` | `[]` | no | +| [ingress\_with\_referenced\_security\_group\_id](#input\_ingress\_with\_referenced\_security\_group\_id) | List of ingress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [ingress\_with\_self](#input\_ingress\_with\_self) | List of ingress rules to create where 'self' is defined | `list(map(string))` | `[]` | no | -| [ingress\_with\_source\_security\_group\_id](#input\_ingress\_with\_source\_security\_group\_id) | List of ingress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [name](#input\_name) | Name of security group | `string` | n/a | yes | | [number\_of\_computed\_egress\_cidr\_blocks](#input\_number\_of\_computed\_egress\_cidr\_blocks) | Number of IPv4 CIDR ranges to use on all computed egress rules | `number` | `0` | no | | [number\_of\_computed\_egress\_ipv6\_cidr\_blocks](#input\_number\_of\_computed\_egress\_ipv6\_cidr\_blocks) | Number of IPv6 CIDR ranges to use on all computed egress rules | `number` | `0` | no | | [number\_of\_computed\_egress\_prefix\_list\_ids](#input\_number\_of\_computed\_egress\_prefix\_list\_ids) | Number of prefix list IDs (for allowing access to VPC endpoints) to use on all computed egress rules | `number` | `0` | no | | [number\_of\_computed\_egress\_rules](#input\_number\_of\_computed\_egress\_rules) | Number of computed egress rules to create by name | `number` | `0` | no | -| [number\_of\_computed\_egress\_with\_cidr\_blocks](#input\_number\_of\_computed\_egress\_with\_cidr\_blocks) | Number of computed egress rules to create where 'cidr\_blocks' is used | `number` | `0` | no | -| [number\_of\_computed\_egress\_with\_ipv6\_cidr\_blocks](#input\_number\_of\_computed\_egress\_with\_ipv6\_cidr\_blocks) | Number of computed egress rules to create where 'ipv6\_cidr\_blocks' is used | `number` | `0` | no | -| [number\_of\_computed\_egress\_with\_prefix\_list\_ids](#input\_number\_of\_computed\_egress\_with\_prefix\_list\_ids) | Number of computed egress rules to create where 'prefix\_list\_ids' is used | `number` | `0` | no | +| [number\_of\_computed\_egress\_with\_cidr\_ipv4](#input\_number\_of\_computed\_egress\_with\_cidr\_ipv4) | Number of computed egress rules to create where 'cidr\_ipv4' is used | `number` | `0` | no | +| [number\_of\_computed\_egress\_with\_cidr\_ipv6](#input\_number\_of\_computed\_egress\_with\_cidr\_ipv6) | Number of computed egress rules to create where 'ipv6\_cidr\_blocks' is used | `number` | `0` | no | +| [number\_of\_computed\_egress\_with\_prefix\_list\_id](#input\_number\_of\_computed\_egress\_with\_prefix\_list\_id) | Number of computed egress rules to create where 'prefix\_list\_id' is used | `number` | `0` | no | +| [number\_of\_computed\_egress\_with\_referenced\_security\_group\_id](#input\_number\_of\_computed\_egress\_with\_referenced\_security\_group\_id) | Number of computed egress rules to create where 'source\_security\_group\_id' is used | `number` | `0` | no | | [number\_of\_computed\_egress\_with\_self](#input\_number\_of\_computed\_egress\_with\_self) | Number of computed egress rules to create where 'self' is defined | `number` | `0` | no | -| [number\_of\_computed\_egress\_with\_source\_security\_group\_id](#input\_number\_of\_computed\_egress\_with\_source\_security\_group\_id) | Number of computed egress rules to create where 'source\_security\_group\_id' is used | `number` | `0` | no | | [number\_of\_computed\_ingress\_cidr\_blocks](#input\_number\_of\_computed\_ingress\_cidr\_blocks) | Number of IPv4 CIDR ranges to use on all computed ingress rules | `number` | `0` | no | | [number\_of\_computed\_ingress\_ipv6\_cidr\_blocks](#input\_number\_of\_computed\_ingress\_ipv6\_cidr\_blocks) | Number of IPv6 CIDR ranges to use on all computed ingress rules | `number` | `0` | no | | [number\_of\_computed\_ingress\_prefix\_list\_ids](#input\_number\_of\_computed\_ingress\_prefix\_list\_ids) | Number of prefix list IDs (for allowing access to VPC endpoints) to use on all computed ingress rules | `number` | `0` | no | | [number\_of\_computed\_ingress\_rules](#input\_number\_of\_computed\_ingress\_rules) | Number of computed ingress rules to create by name | `number` | `0` | no | -| [number\_of\_computed\_ingress\_with\_cidr\_blocks](#input\_number\_of\_computed\_ingress\_with\_cidr\_blocks) | Number of computed ingress rules to create where 'cidr\_blocks' is used | `number` | `0` | no | -| [number\_of\_computed\_ingress\_with\_ipv6\_cidr\_blocks](#input\_number\_of\_computed\_ingress\_with\_ipv6\_cidr\_blocks) | Number of computed ingress rules to create where 'ipv6\_cidr\_blocks' is used | `number` | `0` | no | -| [number\_of\_computed\_ingress\_with\_prefix\_list\_ids](#input\_number\_of\_computed\_ingress\_with\_prefix\_list\_ids) | Number of computed ingress rules to create where 'prefix\_list\_ids' is used | `number` | `0` | no | +| [number\_of\_computed\_ingress\_with\_cidr\_ipv4](#input\_number\_of\_computed\_ingress\_with\_cidr\_ipv4) | Number of computed ingress rules to create where 'cidr\_ipv4' is used | `number` | `0` | no | +| [number\_of\_computed\_ingress\_with\_cidr\_ipv6](#input\_number\_of\_computed\_ingress\_with\_cidr\_ipv6) | Number of computed ingress rules to create where 'ipv6\_cidr\_blocks' is used | `number` | `0` | no | +| [number\_of\_computed\_ingress\_with\_prefix\_list\_id](#input\_number\_of\_computed\_ingress\_with\_prefix\_list\_id) | Number of computed ingress rules to create where 'prefix\_list\_id' is used | `number` | `0` | no | +| [number\_of\_computed\_ingress\_with\_referenced\_security\_group\_id](#input\_number\_of\_computed\_ingress\_with\_referenced\_security\_group\_id) | Number of computed ingress rules to create where 'source\_security\_group\_id' is used | `number` | `0` | no | | [number\_of\_computed\_ingress\_with\_self](#input\_number\_of\_computed\_ingress\_with\_self) | Number of computed ingress rules to create where 'self' is defined | `number` | `0` | no | -| [number\_of\_computed\_ingress\_with\_source\_security\_group\_id](#input\_number\_of\_computed\_ingress\_with\_source\_security\_group\_id) | Number of computed ingress rules to create where 'source\_security\_group\_id' is used | `number` | `0` | no | | [revoke\_rules\_on\_delete](#input\_revoke\_rules\_on\_delete) | Instruct Terraform to revoke all of the Security Groups attached ingress and egress rules before deleting the rule itself. Enable for EMR. | `bool` | `false` | no | | [tags](#input\_tags) | A mapping of tags to assign to security group | `map(string)` | `{}` | no | | [use\_name\_prefix](#input\_use\_name\_prefix) | Whether to use name\_prefix or fixed name. Should be true to able to update security group name after initial creation | `bool` | `true` | no | diff --git a/modules/carbon-relay-ng/main.tf b/modules/carbon-relay-ng/main.tf index 80ea0adb..d2a1bf93 100644 --- a/modules/carbon-relay-ng/main.tf +++ b/modules/carbon-relay-ng/main.tf @@ -19,20 +19,20 @@ module "sg" { ingress_with_self = concat(var.auto_ingress_with_self, var.ingress_with_self) # Open to IPv4 cidr blocks - ingress_with_cidr_blocks = var.ingress_with_cidr_blocks + ingress_with_cidr_ipv4 = var.ingress_with_cidr_ipv4 # Open to IPv6 cidr blocks - ingress_with_ipv6_cidr_blocks = var.ingress_with_ipv6_cidr_blocks + ingress_with_cidr_ipv6 = var.ingress_with_cidr_ipv6 # Open for security group id - ingress_with_source_security_group_id = var.ingress_with_source_security_group_id + ingress_with_referenced_security_group_id = var.ingress_with_referenced_security_group_id # Open for prefix list id - ingress_with_prefix_list_ids = var.ingress_with_prefix_list_ids + ingress_with_prefix_list_id = var.ingress_with_prefix_list_id # Default ingress CIDR blocks - ingress_cidr_blocks = var.ingress_cidr_blocks - ingress_ipv6_cidr_blocks = var.ingress_ipv6_cidr_blocks + ingress_cidr_ipv4 = var.ingress_cidr_ipv4 + ingress_cidr_ipv6 = var.ingress_cidr_ipv6 # Default prefix list ids ingress_prefix_list_ids = var.ingress_prefix_list_ids @@ -47,26 +47,26 @@ module "sg" { computed_ingress_with_self = concat(var.auto_computed_ingress_with_self, var.computed_ingress_with_self) # Open to IPv4 cidr blocks - computed_ingress_with_cidr_blocks = var.computed_ingress_with_cidr_blocks + computed_ingress_with_cidr_ipv4 = var.computed_ingress_with_cidr_ipv4 # Open to IPv6 cidr blocks - computed_ingress_with_ipv6_cidr_blocks = var.computed_ingress_with_ipv6_cidr_blocks + computed_ingress_with_cidr_ipv6 = var.computed_ingress_with_cidr_ipv6 # Open for security group id - computed_ingress_with_source_security_group_id = var.computed_ingress_with_source_security_group_id + computed_ingress_with_referenced_security_group_id = var.computed_ingress_with_referenced_security_group_id # Open for prefix list id - computed_ingress_with_prefix_list_ids = var.computed_ingress_with_prefix_list_ids + computed_ingress_with_prefix_list_id = var.computed_ingress_with_prefix_list_id ############################# # Number of computed ingress ############################# - number_of_computed_ingress_rules = var.auto_number_of_computed_ingress_rules + var.number_of_computed_ingress_rules - number_of_computed_ingress_with_self = var.auto_number_of_computed_ingress_with_self + var.number_of_computed_ingress_with_self - number_of_computed_ingress_with_cidr_blocks = var.number_of_computed_ingress_with_cidr_blocks - number_of_computed_ingress_with_ipv6_cidr_blocks = var.number_of_computed_ingress_with_ipv6_cidr_blocks - number_of_computed_ingress_with_source_security_group_id = var.number_of_computed_ingress_with_source_security_group_id - number_of_computed_ingress_with_prefix_list_ids = var.number_of_computed_ingress_with_prefix_list_ids + number_of_computed_ingress_rules = var.auto_number_of_computed_ingress_rules + var.number_of_computed_ingress_rules + number_of_computed_ingress_with_self = var.auto_number_of_computed_ingress_with_self + var.number_of_computed_ingress_with_self + number_of_computed_ingress_with_cidr_ipv4 = var.number_of_computed_ingress_with_cidr_ipv4 + number_of_computed_ingress_with_cidr_ipv6 = var.number_of_computed_ingress_with_cidr_ipv6 + number_of_computed_ingress_with_referenced_security_group_id = var.number_of_computed_ingress_with_referenced_security_group_id + number_of_computed_ingress_with_prefix_list_id = var.number_of_computed_ingress_with_prefix_list_id ######### # Egress @@ -78,20 +78,20 @@ module "sg" { egress_with_self = concat(var.auto_egress_with_self, var.egress_with_self) # Open to IPv4 cidr blocks - egress_with_cidr_blocks = var.egress_with_cidr_blocks + egress_with_cidr_ipv4 = var.egress_with_cidr_ipv4 # Open to IPv6 cidr blocks - egress_with_ipv6_cidr_blocks = var.egress_with_ipv6_cidr_blocks + egress_with_cidr_ipv6 = var.egress_with_cidr_ipv6 # Open for security group id - egress_with_source_security_group_id = var.egress_with_source_security_group_id + egress_with_referenced_security_group_id = var.egress_with_referenced_security_group_id # Open for prefix list id - egress_with_prefix_list_ids = var.egress_with_prefix_list_ids + egress_with_prefix_list_id = var.egress_with_prefix_list_id # Default egress CIDR blocks - egress_cidr_blocks = var.egress_cidr_blocks - egress_ipv6_cidr_blocks = var.egress_ipv6_cidr_blocks + egress_cidr_ipv4 = var.egress_cidr_ipv4 + egress_cidr_ipv6 = var.egress_cidr_ipv6 # Default prefix list ids egress_prefix_list_ids = var.egress_prefix_list_ids @@ -106,24 +106,24 @@ module "sg" { computed_egress_with_self = concat(var.auto_computed_egress_with_self, var.computed_egress_with_self) # Open to IPv4 cidr blocks - computed_egress_with_cidr_blocks = var.computed_egress_with_cidr_blocks + computed_egress_with_cidr_ipv4 = var.computed_egress_with_cidr_ipv4 # Open to IPv6 cidr blocks - computed_egress_with_ipv6_cidr_blocks = var.computed_egress_with_ipv6_cidr_blocks + computed_egress_with_cidr_ipv6 = var.computed_egress_with_cidr_ipv6 # Open for security group id - computed_egress_with_source_security_group_id = var.computed_egress_with_source_security_group_id + computed_egress_with_referenced_security_group_id = var.computed_egress_with_referenced_security_group_id # Open for prefix list id - computed_egress_with_prefix_list_ids = var.computed_egress_with_prefix_list_ids + computed_egress_with_prefix_list_id = var.computed_egress_with_prefix_list_id ############################# # Number of computed egress ############################# - number_of_computed_egress_rules = var.auto_number_of_computed_egress_rules + var.number_of_computed_egress_rules - number_of_computed_egress_with_self = var.auto_number_of_computed_egress_with_self + var.number_of_computed_egress_with_self - number_of_computed_egress_with_cidr_blocks = var.number_of_computed_egress_with_cidr_blocks - number_of_computed_egress_with_ipv6_cidr_blocks = var.number_of_computed_egress_with_ipv6_cidr_blocks - number_of_computed_egress_with_source_security_group_id = var.number_of_computed_egress_with_source_security_group_id - number_of_computed_egress_with_prefix_list_ids = var.number_of_computed_egress_with_prefix_list_ids + number_of_computed_egress_rules = var.auto_number_of_computed_egress_rules + var.number_of_computed_egress_rules + number_of_computed_egress_with_self = var.auto_number_of_computed_egress_with_self + var.number_of_computed_egress_with_self + number_of_computed_egress_with_cidr_ipv4 = var.number_of_computed_egress_with_cidr_ipv4 + number_of_computed_egress_with_cidr_ipv6 = var.number_of_computed_egress_with_cidr_ipv6 + number_of_computed_egress_with_referenced_security_group_id = var.number_of_computed_egress_with_referenced_security_group_id + number_of_computed_egress_with_prefix_list_id = var.number_of_computed_egress_with_prefix_list_id } diff --git a/modules/carbon-relay-ng/variables.tf b/modules/carbon-relay-ng/variables.tf index 60c8c27b..6590c9e3 100644 --- a/modules/carbon-relay-ng/variables.tf +++ b/modules/carbon-relay-ng/variables.tf @@ -56,37 +56,37 @@ variable "ingress_with_self" { default = [] } -variable "ingress_with_cidr_blocks" { - description = "List of ingress rules to create where 'cidr_blocks' is used" +variable "ingress_with_cidr_ipv4" { + description = "List of ingress rules to create where 'cidr_ipv4' is used" type = list(map(string)) default = [] } -variable "ingress_with_ipv6_cidr_blocks" { +variable "ingress_with_cidr_ipv6" { description = "List of ingress rules to create where 'ipv6_cidr_blocks' is used" type = list(map(string)) default = [] } -variable "ingress_with_source_security_group_id" { +variable "ingress_with_referenced_security_group_id" { description = "List of ingress rules to create where 'source_security_group_id' is used" type = list(map(string)) default = [] } -variable "ingress_with_prefix_list_ids" { - description = "List of ingress rules to create where 'prefix_list_ids' is used" +variable "ingress_with_prefix_list_id" { + description = "List of ingress rules to create where 'prefix_list_id' is used" type = list(map(string)) default = [] } -variable "ingress_cidr_blocks" { +variable "ingress_cidr_ipv4" { description = "List of IPv4 CIDR ranges to use on all ingress rules" type = list(string) default = [] } -variable "ingress_ipv6_cidr_blocks" { +variable "ingress_cidr_ipv6" { description = "List of IPv6 CIDR ranges to use on all ingress rules" type = list(string) default = [] @@ -113,26 +113,26 @@ variable "computed_ingress_with_self" { default = [] } -variable "computed_ingress_with_cidr_blocks" { - description = "List of computed ingress rules to create where 'cidr_blocks' is used" +variable "computed_ingress_with_cidr_ipv4" { + description = "List of computed ingress rules to create where 'cidr_ipv4' is used" type = list(map(string)) default = [] } -variable "computed_ingress_with_ipv6_cidr_blocks" { +variable "computed_ingress_with_cidr_ipv6" { description = "List of computed ingress rules to create where 'ipv6_cidr_blocks' is used" type = list(map(string)) default = [] } -variable "computed_ingress_with_source_security_group_id" { +variable "computed_ingress_with_referenced_security_group_id" { description = "List of computed ingress rules to create where 'source_security_group_id' is used" type = list(map(string)) default = [] } -variable "computed_ingress_with_prefix_list_ids" { - description = "List of computed ingress rules to create where 'prefix_list_ids' is used" +variable "computed_ingress_with_prefix_list_id" { + description = "List of computed ingress rules to create where 'prefix_list_id' is used" type = list(map(string)) default = [] } @@ -170,26 +170,26 @@ variable "number_of_computed_ingress_with_self" { default = 0 } -variable "number_of_computed_ingress_with_cidr_blocks" { - description = "Number of computed ingress rules to create where 'cidr_blocks' is used" +variable "number_of_computed_ingress_with_cidr_ipv4" { + description = "Number of computed ingress rules to create where 'cidr_ipv4' is used" type = number default = 0 } -variable "number_of_computed_ingress_with_ipv6_cidr_blocks" { +variable "number_of_computed_ingress_with_cidr_ipv6" { description = "Number of computed ingress rules to create where 'ipv6_cidr_blocks' is used" type = number default = 0 } -variable "number_of_computed_ingress_with_source_security_group_id" { +variable "number_of_computed_ingress_with_referenced_security_group_id" { description = "Number of computed ingress rules to create where 'source_security_group_id' is used" type = number default = 0 } -variable "number_of_computed_ingress_with_prefix_list_ids" { - description = "Number of computed ingress rules to create where 'prefix_list_ids' is used" +variable "number_of_computed_ingress_with_prefix_list_id" { + description = "Number of computed ingress rules to create where 'prefix_list_id' is used" type = number default = 0 } @@ -227,37 +227,37 @@ variable "egress_with_self" { default = [] } -variable "egress_with_cidr_blocks" { - description = "List of egress rules to create where 'cidr_blocks' is used" +variable "egress_with_cidr_ipv4" { + description = "List of egress rules to create where 'cidr_ipv4' is used" type = list(map(string)) default = [] } -variable "egress_with_ipv6_cidr_blocks" { +variable "egress_with_cidr_ipv6" { description = "List of egress rules to create where 'ipv6_cidr_blocks' is used" type = list(map(string)) default = [] } -variable "egress_with_source_security_group_id" { +variable "egress_with_referenced_security_group_id" { description = "List of egress rules to create where 'source_security_group_id' is used" type = list(map(string)) default = [] } -variable "egress_with_prefix_list_ids" { - description = "List of egress rules to create where 'prefix_list_ids' is used" +variable "egress_with_prefix_list_id" { + description = "List of egress rules to create where 'prefix_list_id' is used" type = list(map(string)) default = [] } -variable "egress_cidr_blocks" { +variable "egress_cidr_ipv4" { description = "List of IPv4 CIDR ranges to use on all egress rules" type = list(string) default = ["0.0.0.0/0"] } -variable "egress_ipv6_cidr_blocks" { +variable "egress_cidr_ipv6" { description = "List of IPv6 CIDR ranges to use on all egress rules" type = list(string) default = ["::/0"] @@ -284,26 +284,26 @@ variable "computed_egress_with_self" { default = [] } -variable "computed_egress_with_cidr_blocks" { - description = "List of computed egress rules to create where 'cidr_blocks' is used" +variable "computed_egress_with_cidr_ipv4" { + description = "List of computed egress rules to create where 'cidr_ipv4' is used" type = list(map(string)) default = [] } -variable "computed_egress_with_ipv6_cidr_blocks" { +variable "computed_egress_with_cidr_ipv6" { description = "List of computed egress rules to create where 'ipv6_cidr_blocks' is used" type = list(map(string)) default = [] } -variable "computed_egress_with_source_security_group_id" { +variable "computed_egress_with_referenced_security_group_id" { description = "List of computed egress rules to create where 'source_security_group_id' is used" type = list(map(string)) default = [] } -variable "computed_egress_with_prefix_list_ids" { - description = "List of computed egress rules to create where 'prefix_list_ids' is used" +variable "computed_egress_with_prefix_list_id" { + description = "List of computed egress rules to create where 'prefix_list_id' is used" type = list(map(string)) default = [] } @@ -341,26 +341,26 @@ variable "number_of_computed_egress_with_self" { default = 0 } -variable "number_of_computed_egress_with_cidr_blocks" { - description = "Number of computed egress rules to create where 'cidr_blocks' is used" +variable "number_of_computed_egress_with_cidr_ipv4" { + description = "Number of computed egress rules to create where 'cidr_ipv4' is used" type = number default = 0 } -variable "number_of_computed_egress_with_ipv6_cidr_blocks" { +variable "number_of_computed_egress_with_cidr_ipv6" { description = "Number of computed egress rules to create where 'ipv6_cidr_blocks' is used" type = number default = 0 } -variable "number_of_computed_egress_with_source_security_group_id" { +variable "number_of_computed_egress_with_referenced_security_group_id" { description = "Number of computed egress rules to create where 'source_security_group_id' is used" type = number default = 0 } -variable "number_of_computed_egress_with_prefix_list_ids" { - description = "Number of computed egress rules to create where 'prefix_list_ids' is used" +variable "number_of_computed_egress_with_prefix_list_id" { + description = "Number of computed egress rules to create where 'prefix_list_id' is used" type = number default = 0 } diff --git a/modules/cassandra/README.md b/modules/cassandra/README.md index d894e557..a1f043a6 100644 --- a/modules/cassandra/README.md +++ b/modules/cassandra/README.md @@ -55,59 +55,59 @@ No resources. | [computed\_egress\_ipv6\_cidr\_blocks](#input\_computed\_egress\_ipv6\_cidr\_blocks) | List of IPv6 CIDR ranges to use on all computed egress rules | `list(string)` |
[
"::/0"
]
| no | | [computed\_egress\_prefix\_list\_ids](#input\_computed\_egress\_prefix\_list\_ids) | List of prefix list IDs (for allowing access to VPC endpoints) to use on all computed egress rules | `list(string)` | `[]` | no | | [computed\_egress\_rules](#input\_computed\_egress\_rules) | List of computed egress rules to create by name | `list(string)` | `[]` | no | -| [computed\_egress\_with\_cidr\_blocks](#input\_computed\_egress\_with\_cidr\_blocks) | List of computed egress rules to create where 'cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [computed\_egress\_with\_ipv6\_cidr\_blocks](#input\_computed\_egress\_with\_ipv6\_cidr\_blocks) | List of computed egress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [computed\_egress\_with\_prefix\_list\_ids](#input\_computed\_egress\_with\_prefix\_list\_ids) | List of computed egress rules to create where 'prefix\_list\_ids' is used | `list(map(string))` | `[]` | no | +| [computed\_egress\_with\_cidr\_ipv4](#input\_computed\_egress\_with\_cidr\_ipv4) | List of computed egress rules to create where 'cidr\_ipv4' is used | `list(map(string))` | `[]` | no | +| [computed\_egress\_with\_cidr\_ipv6](#input\_computed\_egress\_with\_cidr\_ipv6) | List of computed egress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | +| [computed\_egress\_with\_prefix\_list\_id](#input\_computed\_egress\_with\_prefix\_list\_id) | List of computed egress rules to create where 'prefix\_list\_id' is used | `list(map(string))` | `[]` | no | +| [computed\_egress\_with\_referenced\_security\_group\_id](#input\_computed\_egress\_with\_referenced\_security\_group\_id) | List of computed egress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [computed\_egress\_with\_self](#input\_computed\_egress\_with\_self) | List of computed egress rules to create where 'self' is defined | `list(map(string))` | `[]` | no | -| [computed\_egress\_with\_source\_security\_group\_id](#input\_computed\_egress\_with\_source\_security\_group\_id) | List of computed egress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [computed\_ingress\_cidr\_blocks](#input\_computed\_ingress\_cidr\_blocks) | List of IPv4 CIDR ranges to use on all computed ingress rules | `list(string)` | `[]` | no | | [computed\_ingress\_ipv6\_cidr\_blocks](#input\_computed\_ingress\_ipv6\_cidr\_blocks) | List of IPv6 CIDR ranges to use on all computed ingress rules | `list(string)` | `[]` | no | | [computed\_ingress\_prefix\_list\_ids](#input\_computed\_ingress\_prefix\_list\_ids) | List of prefix list IDs (for allowing access to VPC endpoints) to use on all computed ingress rules | `list(string)` | `[]` | no | | [computed\_ingress\_rules](#input\_computed\_ingress\_rules) | List of computed ingress rules to create by name | `list(string)` | `[]` | no | -| [computed\_ingress\_with\_cidr\_blocks](#input\_computed\_ingress\_with\_cidr\_blocks) | List of computed ingress rules to create where 'cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [computed\_ingress\_with\_ipv6\_cidr\_blocks](#input\_computed\_ingress\_with\_ipv6\_cidr\_blocks) | List of computed ingress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [computed\_ingress\_with\_prefix\_list\_ids](#input\_computed\_ingress\_with\_prefix\_list\_ids) | List of computed ingress rules to create where 'prefix\_list\_ids' is used | `list(map(string))` | `[]` | no | +| [computed\_ingress\_with\_cidr\_ipv4](#input\_computed\_ingress\_with\_cidr\_ipv4) | List of computed ingress rules to create where 'cidr\_ipv4' is used | `list(map(string))` | `[]` | no | +| [computed\_ingress\_with\_cidr\_ipv6](#input\_computed\_ingress\_with\_cidr\_ipv6) | List of computed ingress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | +| [computed\_ingress\_with\_prefix\_list\_id](#input\_computed\_ingress\_with\_prefix\_list\_id) | List of computed ingress rules to create where 'prefix\_list\_id' is used | `list(map(string))` | `[]` | no | +| [computed\_ingress\_with\_referenced\_security\_group\_id](#input\_computed\_ingress\_with\_referenced\_security\_group\_id) | List of computed ingress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [computed\_ingress\_with\_self](#input\_computed\_ingress\_with\_self) | List of computed ingress rules to create where 'self' is defined | `list(map(string))` | `[]` | no | -| [computed\_ingress\_with\_source\_security\_group\_id](#input\_computed\_ingress\_with\_source\_security\_group\_id) | List of computed ingress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [create](#input\_create) | Whether to create security group and all rules | `bool` | `true` | no | | [description](#input\_description) | Description of security group | `string` | `"Security Group managed by Terraform"` | no | -| [egress\_cidr\_blocks](#input\_egress\_cidr\_blocks) | List of IPv4 CIDR ranges to use on all egress rules | `list(string)` |
[
"0.0.0.0/0"
]
| no | -| [egress\_ipv6\_cidr\_blocks](#input\_egress\_ipv6\_cidr\_blocks) | List of IPv6 CIDR ranges to use on all egress rules | `list(string)` |
[
"::/0"
]
| no | +| [egress\_cidr\_ipv4](#input\_egress\_cidr\_ipv4) | List of IPv4 CIDR ranges to use on all egress rules | `list(string)` |
[
"0.0.0.0/0"
]
| no | +| [egress\_cidr\_ipv6](#input\_egress\_cidr\_ipv6) | List of IPv6 CIDR ranges to use on all egress rules | `list(string)` |
[
"::/0"
]
| no | | [egress\_prefix\_list\_ids](#input\_egress\_prefix\_list\_ids) | List of prefix list IDs (for allowing access to VPC endpoints) to use on all egress rules | `list(string)` | `[]` | no | | [egress\_rules](#input\_egress\_rules) | List of egress rules to create by name | `list(string)` | `[]` | no | -| [egress\_with\_cidr\_blocks](#input\_egress\_with\_cidr\_blocks) | List of egress rules to create where 'cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [egress\_with\_ipv6\_cidr\_blocks](#input\_egress\_with\_ipv6\_cidr\_blocks) | List of egress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [egress\_with\_prefix\_list\_ids](#input\_egress\_with\_prefix\_list\_ids) | List of egress rules to create where 'prefix\_list\_ids' is used | `list(map(string))` | `[]` | no | +| [egress\_with\_cidr\_ipv4](#input\_egress\_with\_cidr\_ipv4) | List of egress rules to create where 'cidr\_ipv4' is used | `list(map(string))` | `[]` | no | +| [egress\_with\_cidr\_ipv6](#input\_egress\_with\_cidr\_ipv6) | List of egress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | +| [egress\_with\_prefix\_list\_id](#input\_egress\_with\_prefix\_list\_id) | List of egress rules to create where 'prefix\_list\_id' is used | `list(map(string))` | `[]` | no | +| [egress\_with\_referenced\_security\_group\_id](#input\_egress\_with\_referenced\_security\_group\_id) | List of egress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [egress\_with\_self](#input\_egress\_with\_self) | List of egress rules to create where 'self' is defined | `list(map(string))` | `[]` | no | -| [egress\_with\_source\_security\_group\_id](#input\_egress\_with\_source\_security\_group\_id) | List of egress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | -| [ingress\_cidr\_blocks](#input\_ingress\_cidr\_blocks) | List of IPv4 CIDR ranges to use on all ingress rules | `list(string)` | `[]` | no | -| [ingress\_ipv6\_cidr\_blocks](#input\_ingress\_ipv6\_cidr\_blocks) | List of IPv6 CIDR ranges to use on all ingress rules | `list(string)` | `[]` | no | +| [ingress\_cidr\_ipv4](#input\_ingress\_cidr\_ipv4) | List of IPv4 CIDR ranges to use on all ingress rules | `list(string)` | `[]` | no | +| [ingress\_cidr\_ipv6](#input\_ingress\_cidr\_ipv6) | List of IPv6 CIDR ranges to use on all ingress rules | `list(string)` | `[]` | no | | [ingress\_prefix\_list\_ids](#input\_ingress\_prefix\_list\_ids) | List of prefix list IDs (for allowing access to VPC endpoints) to use on all ingress rules | `list(string)` | `[]` | no | | [ingress\_rules](#input\_ingress\_rules) | List of ingress rules to create by name | `list(string)` | `[]` | no | -| [ingress\_with\_cidr\_blocks](#input\_ingress\_with\_cidr\_blocks) | List of ingress rules to create where 'cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [ingress\_with\_ipv6\_cidr\_blocks](#input\_ingress\_with\_ipv6\_cidr\_blocks) | List of ingress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [ingress\_with\_prefix\_list\_ids](#input\_ingress\_with\_prefix\_list\_ids) | List of ingress rules to create where 'prefix\_list\_ids' is used | `list(map(string))` | `[]` | no | +| [ingress\_with\_cidr\_ipv4](#input\_ingress\_with\_cidr\_ipv4) | List of ingress rules to create where 'cidr\_ipv4' is used | `list(map(string))` | `[]` | no | +| [ingress\_with\_cidr\_ipv6](#input\_ingress\_with\_cidr\_ipv6) | List of ingress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | +| [ingress\_with\_prefix\_list\_id](#input\_ingress\_with\_prefix\_list\_id) | List of ingress rules to create where 'prefix\_list\_id' is used | `list(map(string))` | `[]` | no | +| [ingress\_with\_referenced\_security\_group\_id](#input\_ingress\_with\_referenced\_security\_group\_id) | List of ingress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [ingress\_with\_self](#input\_ingress\_with\_self) | List of ingress rules to create where 'self' is defined | `list(map(string))` | `[]` | no | -| [ingress\_with\_source\_security\_group\_id](#input\_ingress\_with\_source\_security\_group\_id) | List of ingress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [name](#input\_name) | Name of security group | `string` | n/a | yes | | [number\_of\_computed\_egress\_cidr\_blocks](#input\_number\_of\_computed\_egress\_cidr\_blocks) | Number of IPv4 CIDR ranges to use on all computed egress rules | `number` | `0` | no | | [number\_of\_computed\_egress\_ipv6\_cidr\_blocks](#input\_number\_of\_computed\_egress\_ipv6\_cidr\_blocks) | Number of IPv6 CIDR ranges to use on all computed egress rules | `number` | `0` | no | | [number\_of\_computed\_egress\_prefix\_list\_ids](#input\_number\_of\_computed\_egress\_prefix\_list\_ids) | Number of prefix list IDs (for allowing access to VPC endpoints) to use on all computed egress rules | `number` | `0` | no | | [number\_of\_computed\_egress\_rules](#input\_number\_of\_computed\_egress\_rules) | Number of computed egress rules to create by name | `number` | `0` | no | -| [number\_of\_computed\_egress\_with\_cidr\_blocks](#input\_number\_of\_computed\_egress\_with\_cidr\_blocks) | Number of computed egress rules to create where 'cidr\_blocks' is used | `number` | `0` | no | -| [number\_of\_computed\_egress\_with\_ipv6\_cidr\_blocks](#input\_number\_of\_computed\_egress\_with\_ipv6\_cidr\_blocks) | Number of computed egress rules to create where 'ipv6\_cidr\_blocks' is used | `number` | `0` | no | -| [number\_of\_computed\_egress\_with\_prefix\_list\_ids](#input\_number\_of\_computed\_egress\_with\_prefix\_list\_ids) | Number of computed egress rules to create where 'prefix\_list\_ids' is used | `number` | `0` | no | +| [number\_of\_computed\_egress\_with\_cidr\_ipv4](#input\_number\_of\_computed\_egress\_with\_cidr\_ipv4) | Number of computed egress rules to create where 'cidr\_ipv4' is used | `number` | `0` | no | +| [number\_of\_computed\_egress\_with\_cidr\_ipv6](#input\_number\_of\_computed\_egress\_with\_cidr\_ipv6) | Number of computed egress rules to create where 'ipv6\_cidr\_blocks' is used | `number` | `0` | no | +| [number\_of\_computed\_egress\_with\_prefix\_list\_id](#input\_number\_of\_computed\_egress\_with\_prefix\_list\_id) | Number of computed egress rules to create where 'prefix\_list\_id' is used | `number` | `0` | no | +| [number\_of\_computed\_egress\_with\_referenced\_security\_group\_id](#input\_number\_of\_computed\_egress\_with\_referenced\_security\_group\_id) | Number of computed egress rules to create where 'source\_security\_group\_id' is used | `number` | `0` | no | | [number\_of\_computed\_egress\_with\_self](#input\_number\_of\_computed\_egress\_with\_self) | Number of computed egress rules to create where 'self' is defined | `number` | `0` | no | -| [number\_of\_computed\_egress\_with\_source\_security\_group\_id](#input\_number\_of\_computed\_egress\_with\_source\_security\_group\_id) | Number of computed egress rules to create where 'source\_security\_group\_id' is used | `number` | `0` | no | | [number\_of\_computed\_ingress\_cidr\_blocks](#input\_number\_of\_computed\_ingress\_cidr\_blocks) | Number of IPv4 CIDR ranges to use on all computed ingress rules | `number` | `0` | no | | [number\_of\_computed\_ingress\_ipv6\_cidr\_blocks](#input\_number\_of\_computed\_ingress\_ipv6\_cidr\_blocks) | Number of IPv6 CIDR ranges to use on all computed ingress rules | `number` | `0` | no | | [number\_of\_computed\_ingress\_prefix\_list\_ids](#input\_number\_of\_computed\_ingress\_prefix\_list\_ids) | Number of prefix list IDs (for allowing access to VPC endpoints) to use on all computed ingress rules | `number` | `0` | no | | [number\_of\_computed\_ingress\_rules](#input\_number\_of\_computed\_ingress\_rules) | Number of computed ingress rules to create by name | `number` | `0` | no | -| [number\_of\_computed\_ingress\_with\_cidr\_blocks](#input\_number\_of\_computed\_ingress\_with\_cidr\_blocks) | Number of computed ingress rules to create where 'cidr\_blocks' is used | `number` | `0` | no | -| [number\_of\_computed\_ingress\_with\_ipv6\_cidr\_blocks](#input\_number\_of\_computed\_ingress\_with\_ipv6\_cidr\_blocks) | Number of computed ingress rules to create where 'ipv6\_cidr\_blocks' is used | `number` | `0` | no | -| [number\_of\_computed\_ingress\_with\_prefix\_list\_ids](#input\_number\_of\_computed\_ingress\_with\_prefix\_list\_ids) | Number of computed ingress rules to create where 'prefix\_list\_ids' is used | `number` | `0` | no | +| [number\_of\_computed\_ingress\_with\_cidr\_ipv4](#input\_number\_of\_computed\_ingress\_with\_cidr\_ipv4) | Number of computed ingress rules to create where 'cidr\_ipv4' is used | `number` | `0` | no | +| [number\_of\_computed\_ingress\_with\_cidr\_ipv6](#input\_number\_of\_computed\_ingress\_with\_cidr\_ipv6) | Number of computed ingress rules to create where 'ipv6\_cidr\_blocks' is used | `number` | `0` | no | +| [number\_of\_computed\_ingress\_with\_prefix\_list\_id](#input\_number\_of\_computed\_ingress\_with\_prefix\_list\_id) | Number of computed ingress rules to create where 'prefix\_list\_id' is used | `number` | `0` | no | +| [number\_of\_computed\_ingress\_with\_referenced\_security\_group\_id](#input\_number\_of\_computed\_ingress\_with\_referenced\_security\_group\_id) | Number of computed ingress rules to create where 'source\_security\_group\_id' is used | `number` | `0` | no | | [number\_of\_computed\_ingress\_with\_self](#input\_number\_of\_computed\_ingress\_with\_self) | Number of computed ingress rules to create where 'self' is defined | `number` | `0` | no | -| [number\_of\_computed\_ingress\_with\_source\_security\_group\_id](#input\_number\_of\_computed\_ingress\_with\_source\_security\_group\_id) | Number of computed ingress rules to create where 'source\_security\_group\_id' is used | `number` | `0` | no | | [revoke\_rules\_on\_delete](#input\_revoke\_rules\_on\_delete) | Instruct Terraform to revoke all of the Security Groups attached ingress and egress rules before deleting the rule itself. Enable for EMR. | `bool` | `false` | no | | [tags](#input\_tags) | A mapping of tags to assign to security group | `map(string)` | `{}` | no | | [use\_name\_prefix](#input\_use\_name\_prefix) | Whether to use name\_prefix or fixed name. Should be true to able to update security group name after initial creation | `bool` | `true` | no | diff --git a/modules/cassandra/main.tf b/modules/cassandra/main.tf index 80ea0adb..d2a1bf93 100644 --- a/modules/cassandra/main.tf +++ b/modules/cassandra/main.tf @@ -19,20 +19,20 @@ module "sg" { ingress_with_self = concat(var.auto_ingress_with_self, var.ingress_with_self) # Open to IPv4 cidr blocks - ingress_with_cidr_blocks = var.ingress_with_cidr_blocks + ingress_with_cidr_ipv4 = var.ingress_with_cidr_ipv4 # Open to IPv6 cidr blocks - ingress_with_ipv6_cidr_blocks = var.ingress_with_ipv6_cidr_blocks + ingress_with_cidr_ipv6 = var.ingress_with_cidr_ipv6 # Open for security group id - ingress_with_source_security_group_id = var.ingress_with_source_security_group_id + ingress_with_referenced_security_group_id = var.ingress_with_referenced_security_group_id # Open for prefix list id - ingress_with_prefix_list_ids = var.ingress_with_prefix_list_ids + ingress_with_prefix_list_id = var.ingress_with_prefix_list_id # Default ingress CIDR blocks - ingress_cidr_blocks = var.ingress_cidr_blocks - ingress_ipv6_cidr_blocks = var.ingress_ipv6_cidr_blocks + ingress_cidr_ipv4 = var.ingress_cidr_ipv4 + ingress_cidr_ipv6 = var.ingress_cidr_ipv6 # Default prefix list ids ingress_prefix_list_ids = var.ingress_prefix_list_ids @@ -47,26 +47,26 @@ module "sg" { computed_ingress_with_self = concat(var.auto_computed_ingress_with_self, var.computed_ingress_with_self) # Open to IPv4 cidr blocks - computed_ingress_with_cidr_blocks = var.computed_ingress_with_cidr_blocks + computed_ingress_with_cidr_ipv4 = var.computed_ingress_with_cidr_ipv4 # Open to IPv6 cidr blocks - computed_ingress_with_ipv6_cidr_blocks = var.computed_ingress_with_ipv6_cidr_blocks + computed_ingress_with_cidr_ipv6 = var.computed_ingress_with_cidr_ipv6 # Open for security group id - computed_ingress_with_source_security_group_id = var.computed_ingress_with_source_security_group_id + computed_ingress_with_referenced_security_group_id = var.computed_ingress_with_referenced_security_group_id # Open for prefix list id - computed_ingress_with_prefix_list_ids = var.computed_ingress_with_prefix_list_ids + computed_ingress_with_prefix_list_id = var.computed_ingress_with_prefix_list_id ############################# # Number of computed ingress ############################# - number_of_computed_ingress_rules = var.auto_number_of_computed_ingress_rules + var.number_of_computed_ingress_rules - number_of_computed_ingress_with_self = var.auto_number_of_computed_ingress_with_self + var.number_of_computed_ingress_with_self - number_of_computed_ingress_with_cidr_blocks = var.number_of_computed_ingress_with_cidr_blocks - number_of_computed_ingress_with_ipv6_cidr_blocks = var.number_of_computed_ingress_with_ipv6_cidr_blocks - number_of_computed_ingress_with_source_security_group_id = var.number_of_computed_ingress_with_source_security_group_id - number_of_computed_ingress_with_prefix_list_ids = var.number_of_computed_ingress_with_prefix_list_ids + number_of_computed_ingress_rules = var.auto_number_of_computed_ingress_rules + var.number_of_computed_ingress_rules + number_of_computed_ingress_with_self = var.auto_number_of_computed_ingress_with_self + var.number_of_computed_ingress_with_self + number_of_computed_ingress_with_cidr_ipv4 = var.number_of_computed_ingress_with_cidr_ipv4 + number_of_computed_ingress_with_cidr_ipv6 = var.number_of_computed_ingress_with_cidr_ipv6 + number_of_computed_ingress_with_referenced_security_group_id = var.number_of_computed_ingress_with_referenced_security_group_id + number_of_computed_ingress_with_prefix_list_id = var.number_of_computed_ingress_with_prefix_list_id ######### # Egress @@ -78,20 +78,20 @@ module "sg" { egress_with_self = concat(var.auto_egress_with_self, var.egress_with_self) # Open to IPv4 cidr blocks - egress_with_cidr_blocks = var.egress_with_cidr_blocks + egress_with_cidr_ipv4 = var.egress_with_cidr_ipv4 # Open to IPv6 cidr blocks - egress_with_ipv6_cidr_blocks = var.egress_with_ipv6_cidr_blocks + egress_with_cidr_ipv6 = var.egress_with_cidr_ipv6 # Open for security group id - egress_with_source_security_group_id = var.egress_with_source_security_group_id + egress_with_referenced_security_group_id = var.egress_with_referenced_security_group_id # Open for prefix list id - egress_with_prefix_list_ids = var.egress_with_prefix_list_ids + egress_with_prefix_list_id = var.egress_with_prefix_list_id # Default egress CIDR blocks - egress_cidr_blocks = var.egress_cidr_blocks - egress_ipv6_cidr_blocks = var.egress_ipv6_cidr_blocks + egress_cidr_ipv4 = var.egress_cidr_ipv4 + egress_cidr_ipv6 = var.egress_cidr_ipv6 # Default prefix list ids egress_prefix_list_ids = var.egress_prefix_list_ids @@ -106,24 +106,24 @@ module "sg" { computed_egress_with_self = concat(var.auto_computed_egress_with_self, var.computed_egress_with_self) # Open to IPv4 cidr blocks - computed_egress_with_cidr_blocks = var.computed_egress_with_cidr_blocks + computed_egress_with_cidr_ipv4 = var.computed_egress_with_cidr_ipv4 # Open to IPv6 cidr blocks - computed_egress_with_ipv6_cidr_blocks = var.computed_egress_with_ipv6_cidr_blocks + computed_egress_with_cidr_ipv6 = var.computed_egress_with_cidr_ipv6 # Open for security group id - computed_egress_with_source_security_group_id = var.computed_egress_with_source_security_group_id + computed_egress_with_referenced_security_group_id = var.computed_egress_with_referenced_security_group_id # Open for prefix list id - computed_egress_with_prefix_list_ids = var.computed_egress_with_prefix_list_ids + computed_egress_with_prefix_list_id = var.computed_egress_with_prefix_list_id ############################# # Number of computed egress ############################# - number_of_computed_egress_rules = var.auto_number_of_computed_egress_rules + var.number_of_computed_egress_rules - number_of_computed_egress_with_self = var.auto_number_of_computed_egress_with_self + var.number_of_computed_egress_with_self - number_of_computed_egress_with_cidr_blocks = var.number_of_computed_egress_with_cidr_blocks - number_of_computed_egress_with_ipv6_cidr_blocks = var.number_of_computed_egress_with_ipv6_cidr_blocks - number_of_computed_egress_with_source_security_group_id = var.number_of_computed_egress_with_source_security_group_id - number_of_computed_egress_with_prefix_list_ids = var.number_of_computed_egress_with_prefix_list_ids + number_of_computed_egress_rules = var.auto_number_of_computed_egress_rules + var.number_of_computed_egress_rules + number_of_computed_egress_with_self = var.auto_number_of_computed_egress_with_self + var.number_of_computed_egress_with_self + number_of_computed_egress_with_cidr_ipv4 = var.number_of_computed_egress_with_cidr_ipv4 + number_of_computed_egress_with_cidr_ipv6 = var.number_of_computed_egress_with_cidr_ipv6 + number_of_computed_egress_with_referenced_security_group_id = var.number_of_computed_egress_with_referenced_security_group_id + number_of_computed_egress_with_prefix_list_id = var.number_of_computed_egress_with_prefix_list_id } diff --git a/modules/cassandra/variables.tf b/modules/cassandra/variables.tf index 60c8c27b..6590c9e3 100644 --- a/modules/cassandra/variables.tf +++ b/modules/cassandra/variables.tf @@ -56,37 +56,37 @@ variable "ingress_with_self" { default = [] } -variable "ingress_with_cidr_blocks" { - description = "List of ingress rules to create where 'cidr_blocks' is used" +variable "ingress_with_cidr_ipv4" { + description = "List of ingress rules to create where 'cidr_ipv4' is used" type = list(map(string)) default = [] } -variable "ingress_with_ipv6_cidr_blocks" { +variable "ingress_with_cidr_ipv6" { description = "List of ingress rules to create where 'ipv6_cidr_blocks' is used" type = list(map(string)) default = [] } -variable "ingress_with_source_security_group_id" { +variable "ingress_with_referenced_security_group_id" { description = "List of ingress rules to create where 'source_security_group_id' is used" type = list(map(string)) default = [] } -variable "ingress_with_prefix_list_ids" { - description = "List of ingress rules to create where 'prefix_list_ids' is used" +variable "ingress_with_prefix_list_id" { + description = "List of ingress rules to create where 'prefix_list_id' is used" type = list(map(string)) default = [] } -variable "ingress_cidr_blocks" { +variable "ingress_cidr_ipv4" { description = "List of IPv4 CIDR ranges to use on all ingress rules" type = list(string) default = [] } -variable "ingress_ipv6_cidr_blocks" { +variable "ingress_cidr_ipv6" { description = "List of IPv6 CIDR ranges to use on all ingress rules" type = list(string) default = [] @@ -113,26 +113,26 @@ variable "computed_ingress_with_self" { default = [] } -variable "computed_ingress_with_cidr_blocks" { - description = "List of computed ingress rules to create where 'cidr_blocks' is used" +variable "computed_ingress_with_cidr_ipv4" { + description = "List of computed ingress rules to create where 'cidr_ipv4' is used" type = list(map(string)) default = [] } -variable "computed_ingress_with_ipv6_cidr_blocks" { +variable "computed_ingress_with_cidr_ipv6" { description = "List of computed ingress rules to create where 'ipv6_cidr_blocks' is used" type = list(map(string)) default = [] } -variable "computed_ingress_with_source_security_group_id" { +variable "computed_ingress_with_referenced_security_group_id" { description = "List of computed ingress rules to create where 'source_security_group_id' is used" type = list(map(string)) default = [] } -variable "computed_ingress_with_prefix_list_ids" { - description = "List of computed ingress rules to create where 'prefix_list_ids' is used" +variable "computed_ingress_with_prefix_list_id" { + description = "List of computed ingress rules to create where 'prefix_list_id' is used" type = list(map(string)) default = [] } @@ -170,26 +170,26 @@ variable "number_of_computed_ingress_with_self" { default = 0 } -variable "number_of_computed_ingress_with_cidr_blocks" { - description = "Number of computed ingress rules to create where 'cidr_blocks' is used" +variable "number_of_computed_ingress_with_cidr_ipv4" { + description = "Number of computed ingress rules to create where 'cidr_ipv4' is used" type = number default = 0 } -variable "number_of_computed_ingress_with_ipv6_cidr_blocks" { +variable "number_of_computed_ingress_with_cidr_ipv6" { description = "Number of computed ingress rules to create where 'ipv6_cidr_blocks' is used" type = number default = 0 } -variable "number_of_computed_ingress_with_source_security_group_id" { +variable "number_of_computed_ingress_with_referenced_security_group_id" { description = "Number of computed ingress rules to create where 'source_security_group_id' is used" type = number default = 0 } -variable "number_of_computed_ingress_with_prefix_list_ids" { - description = "Number of computed ingress rules to create where 'prefix_list_ids' is used" +variable "number_of_computed_ingress_with_prefix_list_id" { + description = "Number of computed ingress rules to create where 'prefix_list_id' is used" type = number default = 0 } @@ -227,37 +227,37 @@ variable "egress_with_self" { default = [] } -variable "egress_with_cidr_blocks" { - description = "List of egress rules to create where 'cidr_blocks' is used" +variable "egress_with_cidr_ipv4" { + description = "List of egress rules to create where 'cidr_ipv4' is used" type = list(map(string)) default = [] } -variable "egress_with_ipv6_cidr_blocks" { +variable "egress_with_cidr_ipv6" { description = "List of egress rules to create where 'ipv6_cidr_blocks' is used" type = list(map(string)) default = [] } -variable "egress_with_source_security_group_id" { +variable "egress_with_referenced_security_group_id" { description = "List of egress rules to create where 'source_security_group_id' is used" type = list(map(string)) default = [] } -variable "egress_with_prefix_list_ids" { - description = "List of egress rules to create where 'prefix_list_ids' is used" +variable "egress_with_prefix_list_id" { + description = "List of egress rules to create where 'prefix_list_id' is used" type = list(map(string)) default = [] } -variable "egress_cidr_blocks" { +variable "egress_cidr_ipv4" { description = "List of IPv4 CIDR ranges to use on all egress rules" type = list(string) default = ["0.0.0.0/0"] } -variable "egress_ipv6_cidr_blocks" { +variable "egress_cidr_ipv6" { description = "List of IPv6 CIDR ranges to use on all egress rules" type = list(string) default = ["::/0"] @@ -284,26 +284,26 @@ variable "computed_egress_with_self" { default = [] } -variable "computed_egress_with_cidr_blocks" { - description = "List of computed egress rules to create where 'cidr_blocks' is used" +variable "computed_egress_with_cidr_ipv4" { + description = "List of computed egress rules to create where 'cidr_ipv4' is used" type = list(map(string)) default = [] } -variable "computed_egress_with_ipv6_cidr_blocks" { +variable "computed_egress_with_cidr_ipv6" { description = "List of computed egress rules to create where 'ipv6_cidr_blocks' is used" type = list(map(string)) default = [] } -variable "computed_egress_with_source_security_group_id" { +variable "computed_egress_with_referenced_security_group_id" { description = "List of computed egress rules to create where 'source_security_group_id' is used" type = list(map(string)) default = [] } -variable "computed_egress_with_prefix_list_ids" { - description = "List of computed egress rules to create where 'prefix_list_ids' is used" +variable "computed_egress_with_prefix_list_id" { + description = "List of computed egress rules to create where 'prefix_list_id' is used" type = list(map(string)) default = [] } @@ -341,26 +341,26 @@ variable "number_of_computed_egress_with_self" { default = 0 } -variable "number_of_computed_egress_with_cidr_blocks" { - description = "Number of computed egress rules to create where 'cidr_blocks' is used" +variable "number_of_computed_egress_with_cidr_ipv4" { + description = "Number of computed egress rules to create where 'cidr_ipv4' is used" type = number default = 0 } -variable "number_of_computed_egress_with_ipv6_cidr_blocks" { +variable "number_of_computed_egress_with_cidr_ipv6" { description = "Number of computed egress rules to create where 'ipv6_cidr_blocks' is used" type = number default = 0 } -variable "number_of_computed_egress_with_source_security_group_id" { +variable "number_of_computed_egress_with_referenced_security_group_id" { description = "Number of computed egress rules to create where 'source_security_group_id' is used" type = number default = 0 } -variable "number_of_computed_egress_with_prefix_list_ids" { - description = "Number of computed egress rules to create where 'prefix_list_ids' is used" +variable "number_of_computed_egress_with_prefix_list_id" { + description = "Number of computed egress rules to create where 'prefix_list_id' is used" type = number default = 0 } diff --git a/modules/consul/README.md b/modules/consul/README.md index 3b17ce09..3df565eb 100644 --- a/modules/consul/README.md +++ b/modules/consul/README.md @@ -55,59 +55,59 @@ No resources. | [computed\_egress\_ipv6\_cidr\_blocks](#input\_computed\_egress\_ipv6\_cidr\_blocks) | List of IPv6 CIDR ranges to use on all computed egress rules | `list(string)` |
[
"::/0"
]
| no | | [computed\_egress\_prefix\_list\_ids](#input\_computed\_egress\_prefix\_list\_ids) | List of prefix list IDs (for allowing access to VPC endpoints) to use on all computed egress rules | `list(string)` | `[]` | no | | [computed\_egress\_rules](#input\_computed\_egress\_rules) | List of computed egress rules to create by name | `list(string)` | `[]` | no | -| [computed\_egress\_with\_cidr\_blocks](#input\_computed\_egress\_with\_cidr\_blocks) | List of computed egress rules to create where 'cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [computed\_egress\_with\_ipv6\_cidr\_blocks](#input\_computed\_egress\_with\_ipv6\_cidr\_blocks) | List of computed egress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [computed\_egress\_with\_prefix\_list\_ids](#input\_computed\_egress\_with\_prefix\_list\_ids) | List of computed egress rules to create where 'prefix\_list\_ids' is used | `list(map(string))` | `[]` | no | +| [computed\_egress\_with\_cidr\_ipv4](#input\_computed\_egress\_with\_cidr\_ipv4) | List of computed egress rules to create where 'cidr\_ipv4' is used | `list(map(string))` | `[]` | no | +| [computed\_egress\_with\_cidr\_ipv6](#input\_computed\_egress\_with\_cidr\_ipv6) | List of computed egress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | +| [computed\_egress\_with\_prefix\_list\_id](#input\_computed\_egress\_with\_prefix\_list\_id) | List of computed egress rules to create where 'prefix\_list\_id' is used | `list(map(string))` | `[]` | no | +| [computed\_egress\_with\_referenced\_security\_group\_id](#input\_computed\_egress\_with\_referenced\_security\_group\_id) | List of computed egress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [computed\_egress\_with\_self](#input\_computed\_egress\_with\_self) | List of computed egress rules to create where 'self' is defined | `list(map(string))` | `[]` | no | -| [computed\_egress\_with\_source\_security\_group\_id](#input\_computed\_egress\_with\_source\_security\_group\_id) | List of computed egress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [computed\_ingress\_cidr\_blocks](#input\_computed\_ingress\_cidr\_blocks) | List of IPv4 CIDR ranges to use on all computed ingress rules | `list(string)` | `[]` | no | | [computed\_ingress\_ipv6\_cidr\_blocks](#input\_computed\_ingress\_ipv6\_cidr\_blocks) | List of IPv6 CIDR ranges to use on all computed ingress rules | `list(string)` | `[]` | no | | [computed\_ingress\_prefix\_list\_ids](#input\_computed\_ingress\_prefix\_list\_ids) | List of prefix list IDs (for allowing access to VPC endpoints) to use on all computed ingress rules | `list(string)` | `[]` | no | | [computed\_ingress\_rules](#input\_computed\_ingress\_rules) | List of computed ingress rules to create by name | `list(string)` | `[]` | no | -| [computed\_ingress\_with\_cidr\_blocks](#input\_computed\_ingress\_with\_cidr\_blocks) | List of computed ingress rules to create where 'cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [computed\_ingress\_with\_ipv6\_cidr\_blocks](#input\_computed\_ingress\_with\_ipv6\_cidr\_blocks) | List of computed ingress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [computed\_ingress\_with\_prefix\_list\_ids](#input\_computed\_ingress\_with\_prefix\_list\_ids) | List of computed ingress rules to create where 'prefix\_list\_ids' is used | `list(map(string))` | `[]` | no | +| [computed\_ingress\_with\_cidr\_ipv4](#input\_computed\_ingress\_with\_cidr\_ipv4) | List of computed ingress rules to create where 'cidr\_ipv4' is used | `list(map(string))` | `[]` | no | +| [computed\_ingress\_with\_cidr\_ipv6](#input\_computed\_ingress\_with\_cidr\_ipv6) | List of computed ingress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | +| [computed\_ingress\_with\_prefix\_list\_id](#input\_computed\_ingress\_with\_prefix\_list\_id) | List of computed ingress rules to create where 'prefix\_list\_id' is used | `list(map(string))` | `[]` | no | +| [computed\_ingress\_with\_referenced\_security\_group\_id](#input\_computed\_ingress\_with\_referenced\_security\_group\_id) | List of computed ingress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [computed\_ingress\_with\_self](#input\_computed\_ingress\_with\_self) | List of computed ingress rules to create where 'self' is defined | `list(map(string))` | `[]` | no | -| [computed\_ingress\_with\_source\_security\_group\_id](#input\_computed\_ingress\_with\_source\_security\_group\_id) | List of computed ingress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [create](#input\_create) | Whether to create security group and all rules | `bool` | `true` | no | | [description](#input\_description) | Description of security group | `string` | `"Security Group managed by Terraform"` | no | -| [egress\_cidr\_blocks](#input\_egress\_cidr\_blocks) | List of IPv4 CIDR ranges to use on all egress rules | `list(string)` |
[
"0.0.0.0/0"
]
| no | -| [egress\_ipv6\_cidr\_blocks](#input\_egress\_ipv6\_cidr\_blocks) | List of IPv6 CIDR ranges to use on all egress rules | `list(string)` |
[
"::/0"
]
| no | +| [egress\_cidr\_ipv4](#input\_egress\_cidr\_ipv4) | List of IPv4 CIDR ranges to use on all egress rules | `list(string)` |
[
"0.0.0.0/0"
]
| no | +| [egress\_cidr\_ipv6](#input\_egress\_cidr\_ipv6) | List of IPv6 CIDR ranges to use on all egress rules | `list(string)` |
[
"::/0"
]
| no | | [egress\_prefix\_list\_ids](#input\_egress\_prefix\_list\_ids) | List of prefix list IDs (for allowing access to VPC endpoints) to use on all egress rules | `list(string)` | `[]` | no | | [egress\_rules](#input\_egress\_rules) | List of egress rules to create by name | `list(string)` | `[]` | no | -| [egress\_with\_cidr\_blocks](#input\_egress\_with\_cidr\_blocks) | List of egress rules to create where 'cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [egress\_with\_ipv6\_cidr\_blocks](#input\_egress\_with\_ipv6\_cidr\_blocks) | List of egress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [egress\_with\_prefix\_list\_ids](#input\_egress\_with\_prefix\_list\_ids) | List of egress rules to create where 'prefix\_list\_ids' is used | `list(map(string))` | `[]` | no | +| [egress\_with\_cidr\_ipv4](#input\_egress\_with\_cidr\_ipv4) | List of egress rules to create where 'cidr\_ipv4' is used | `list(map(string))` | `[]` | no | +| [egress\_with\_cidr\_ipv6](#input\_egress\_with\_cidr\_ipv6) | List of egress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | +| [egress\_with\_prefix\_list\_id](#input\_egress\_with\_prefix\_list\_id) | List of egress rules to create where 'prefix\_list\_id' is used | `list(map(string))` | `[]` | no | +| [egress\_with\_referenced\_security\_group\_id](#input\_egress\_with\_referenced\_security\_group\_id) | List of egress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [egress\_with\_self](#input\_egress\_with\_self) | List of egress rules to create where 'self' is defined | `list(map(string))` | `[]` | no | -| [egress\_with\_source\_security\_group\_id](#input\_egress\_with\_source\_security\_group\_id) | List of egress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | -| [ingress\_cidr\_blocks](#input\_ingress\_cidr\_blocks) | List of IPv4 CIDR ranges to use on all ingress rules | `list(string)` | `[]` | no | -| [ingress\_ipv6\_cidr\_blocks](#input\_ingress\_ipv6\_cidr\_blocks) | List of IPv6 CIDR ranges to use on all ingress rules | `list(string)` | `[]` | no | +| [ingress\_cidr\_ipv4](#input\_ingress\_cidr\_ipv4) | List of IPv4 CIDR ranges to use on all ingress rules | `list(string)` | `[]` | no | +| [ingress\_cidr\_ipv6](#input\_ingress\_cidr\_ipv6) | List of IPv6 CIDR ranges to use on all ingress rules | `list(string)` | `[]` | no | | [ingress\_prefix\_list\_ids](#input\_ingress\_prefix\_list\_ids) | List of prefix list IDs (for allowing access to VPC endpoints) to use on all ingress rules | `list(string)` | `[]` | no | | [ingress\_rules](#input\_ingress\_rules) | List of ingress rules to create by name | `list(string)` | `[]` | no | -| [ingress\_with\_cidr\_blocks](#input\_ingress\_with\_cidr\_blocks) | List of ingress rules to create where 'cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [ingress\_with\_ipv6\_cidr\_blocks](#input\_ingress\_with\_ipv6\_cidr\_blocks) | List of ingress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [ingress\_with\_prefix\_list\_ids](#input\_ingress\_with\_prefix\_list\_ids) | List of ingress rules to create where 'prefix\_list\_ids' is used | `list(map(string))` | `[]` | no | +| [ingress\_with\_cidr\_ipv4](#input\_ingress\_with\_cidr\_ipv4) | List of ingress rules to create where 'cidr\_ipv4' is used | `list(map(string))` | `[]` | no | +| [ingress\_with\_cidr\_ipv6](#input\_ingress\_with\_cidr\_ipv6) | List of ingress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | +| [ingress\_with\_prefix\_list\_id](#input\_ingress\_with\_prefix\_list\_id) | List of ingress rules to create where 'prefix\_list\_id' is used | `list(map(string))` | `[]` | no | +| [ingress\_with\_referenced\_security\_group\_id](#input\_ingress\_with\_referenced\_security\_group\_id) | List of ingress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [ingress\_with\_self](#input\_ingress\_with\_self) | List of ingress rules to create where 'self' is defined | `list(map(string))` | `[]` | no | -| [ingress\_with\_source\_security\_group\_id](#input\_ingress\_with\_source\_security\_group\_id) | List of ingress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [name](#input\_name) | Name of security group | `string` | n/a | yes | | [number\_of\_computed\_egress\_cidr\_blocks](#input\_number\_of\_computed\_egress\_cidr\_blocks) | Number of IPv4 CIDR ranges to use on all computed egress rules | `number` | `0` | no | | [number\_of\_computed\_egress\_ipv6\_cidr\_blocks](#input\_number\_of\_computed\_egress\_ipv6\_cidr\_blocks) | Number of IPv6 CIDR ranges to use on all computed egress rules | `number` | `0` | no | | [number\_of\_computed\_egress\_prefix\_list\_ids](#input\_number\_of\_computed\_egress\_prefix\_list\_ids) | Number of prefix list IDs (for allowing access to VPC endpoints) to use on all computed egress rules | `number` | `0` | no | | [number\_of\_computed\_egress\_rules](#input\_number\_of\_computed\_egress\_rules) | Number of computed egress rules to create by name | `number` | `0` | no | -| [number\_of\_computed\_egress\_with\_cidr\_blocks](#input\_number\_of\_computed\_egress\_with\_cidr\_blocks) | Number of computed egress rules to create where 'cidr\_blocks' is used | `number` | `0` | no | -| [number\_of\_computed\_egress\_with\_ipv6\_cidr\_blocks](#input\_number\_of\_computed\_egress\_with\_ipv6\_cidr\_blocks) | Number of computed egress rules to create where 'ipv6\_cidr\_blocks' is used | `number` | `0` | no | -| [number\_of\_computed\_egress\_with\_prefix\_list\_ids](#input\_number\_of\_computed\_egress\_with\_prefix\_list\_ids) | Number of computed egress rules to create where 'prefix\_list\_ids' is used | `number` | `0` | no | +| [number\_of\_computed\_egress\_with\_cidr\_ipv4](#input\_number\_of\_computed\_egress\_with\_cidr\_ipv4) | Number of computed egress rules to create where 'cidr\_ipv4' is used | `number` | `0` | no | +| [number\_of\_computed\_egress\_with\_cidr\_ipv6](#input\_number\_of\_computed\_egress\_with\_cidr\_ipv6) | Number of computed egress rules to create where 'ipv6\_cidr\_blocks' is used | `number` | `0` | no | +| [number\_of\_computed\_egress\_with\_prefix\_list\_id](#input\_number\_of\_computed\_egress\_with\_prefix\_list\_id) | Number of computed egress rules to create where 'prefix\_list\_id' is used | `number` | `0` | no | +| [number\_of\_computed\_egress\_with\_referenced\_security\_group\_id](#input\_number\_of\_computed\_egress\_with\_referenced\_security\_group\_id) | Number of computed egress rules to create where 'source\_security\_group\_id' is used | `number` | `0` | no | | [number\_of\_computed\_egress\_with\_self](#input\_number\_of\_computed\_egress\_with\_self) | Number of computed egress rules to create where 'self' is defined | `number` | `0` | no | -| [number\_of\_computed\_egress\_with\_source\_security\_group\_id](#input\_number\_of\_computed\_egress\_with\_source\_security\_group\_id) | Number of computed egress rules to create where 'source\_security\_group\_id' is used | `number` | `0` | no | | [number\_of\_computed\_ingress\_cidr\_blocks](#input\_number\_of\_computed\_ingress\_cidr\_blocks) | Number of IPv4 CIDR ranges to use on all computed ingress rules | `number` | `0` | no | | [number\_of\_computed\_ingress\_ipv6\_cidr\_blocks](#input\_number\_of\_computed\_ingress\_ipv6\_cidr\_blocks) | Number of IPv6 CIDR ranges to use on all computed ingress rules | `number` | `0` | no | | [number\_of\_computed\_ingress\_prefix\_list\_ids](#input\_number\_of\_computed\_ingress\_prefix\_list\_ids) | Number of prefix list IDs (for allowing access to VPC endpoints) to use on all computed ingress rules | `number` | `0` | no | | [number\_of\_computed\_ingress\_rules](#input\_number\_of\_computed\_ingress\_rules) | Number of computed ingress rules to create by name | `number` | `0` | no | -| [number\_of\_computed\_ingress\_with\_cidr\_blocks](#input\_number\_of\_computed\_ingress\_with\_cidr\_blocks) | Number of computed ingress rules to create where 'cidr\_blocks' is used | `number` | `0` | no | -| [number\_of\_computed\_ingress\_with\_ipv6\_cidr\_blocks](#input\_number\_of\_computed\_ingress\_with\_ipv6\_cidr\_blocks) | Number of computed ingress rules to create where 'ipv6\_cidr\_blocks' is used | `number` | `0` | no | -| [number\_of\_computed\_ingress\_with\_prefix\_list\_ids](#input\_number\_of\_computed\_ingress\_with\_prefix\_list\_ids) | Number of computed ingress rules to create where 'prefix\_list\_ids' is used | `number` | `0` | no | +| [number\_of\_computed\_ingress\_with\_cidr\_ipv4](#input\_number\_of\_computed\_ingress\_with\_cidr\_ipv4) | Number of computed ingress rules to create where 'cidr\_ipv4' is used | `number` | `0` | no | +| [number\_of\_computed\_ingress\_with\_cidr\_ipv6](#input\_number\_of\_computed\_ingress\_with\_cidr\_ipv6) | Number of computed ingress rules to create where 'ipv6\_cidr\_blocks' is used | `number` | `0` | no | +| [number\_of\_computed\_ingress\_with\_prefix\_list\_id](#input\_number\_of\_computed\_ingress\_with\_prefix\_list\_id) | Number of computed ingress rules to create where 'prefix\_list\_id' is used | `number` | `0` | no | +| [number\_of\_computed\_ingress\_with\_referenced\_security\_group\_id](#input\_number\_of\_computed\_ingress\_with\_referenced\_security\_group\_id) | Number of computed ingress rules to create where 'source\_security\_group\_id' is used | `number` | `0` | no | | [number\_of\_computed\_ingress\_with\_self](#input\_number\_of\_computed\_ingress\_with\_self) | Number of computed ingress rules to create where 'self' is defined | `number` | `0` | no | -| [number\_of\_computed\_ingress\_with\_source\_security\_group\_id](#input\_number\_of\_computed\_ingress\_with\_source\_security\_group\_id) | Number of computed ingress rules to create where 'source\_security\_group\_id' is used | `number` | `0` | no | | [revoke\_rules\_on\_delete](#input\_revoke\_rules\_on\_delete) | Instruct Terraform to revoke all of the Security Groups attached ingress and egress rules before deleting the rule itself. Enable for EMR. | `bool` | `false` | no | | [tags](#input\_tags) | A mapping of tags to assign to security group | `map(string)` | `{}` | no | | [use\_name\_prefix](#input\_use\_name\_prefix) | Whether to use name\_prefix or fixed name. Should be true to able to update security group name after initial creation | `bool` | `true` | no | diff --git a/modules/consul/main.tf b/modules/consul/main.tf index 80ea0adb..d2a1bf93 100644 --- a/modules/consul/main.tf +++ b/modules/consul/main.tf @@ -19,20 +19,20 @@ module "sg" { ingress_with_self = concat(var.auto_ingress_with_self, var.ingress_with_self) # Open to IPv4 cidr blocks - ingress_with_cidr_blocks = var.ingress_with_cidr_blocks + ingress_with_cidr_ipv4 = var.ingress_with_cidr_ipv4 # Open to IPv6 cidr blocks - ingress_with_ipv6_cidr_blocks = var.ingress_with_ipv6_cidr_blocks + ingress_with_cidr_ipv6 = var.ingress_with_cidr_ipv6 # Open for security group id - ingress_with_source_security_group_id = var.ingress_with_source_security_group_id + ingress_with_referenced_security_group_id = var.ingress_with_referenced_security_group_id # Open for prefix list id - ingress_with_prefix_list_ids = var.ingress_with_prefix_list_ids + ingress_with_prefix_list_id = var.ingress_with_prefix_list_id # Default ingress CIDR blocks - ingress_cidr_blocks = var.ingress_cidr_blocks - ingress_ipv6_cidr_blocks = var.ingress_ipv6_cidr_blocks + ingress_cidr_ipv4 = var.ingress_cidr_ipv4 + ingress_cidr_ipv6 = var.ingress_cidr_ipv6 # Default prefix list ids ingress_prefix_list_ids = var.ingress_prefix_list_ids @@ -47,26 +47,26 @@ module "sg" { computed_ingress_with_self = concat(var.auto_computed_ingress_with_self, var.computed_ingress_with_self) # Open to IPv4 cidr blocks - computed_ingress_with_cidr_blocks = var.computed_ingress_with_cidr_blocks + computed_ingress_with_cidr_ipv4 = var.computed_ingress_with_cidr_ipv4 # Open to IPv6 cidr blocks - computed_ingress_with_ipv6_cidr_blocks = var.computed_ingress_with_ipv6_cidr_blocks + computed_ingress_with_cidr_ipv6 = var.computed_ingress_with_cidr_ipv6 # Open for security group id - computed_ingress_with_source_security_group_id = var.computed_ingress_with_source_security_group_id + computed_ingress_with_referenced_security_group_id = var.computed_ingress_with_referenced_security_group_id # Open for prefix list id - computed_ingress_with_prefix_list_ids = var.computed_ingress_with_prefix_list_ids + computed_ingress_with_prefix_list_id = var.computed_ingress_with_prefix_list_id ############################# # Number of computed ingress ############################# - number_of_computed_ingress_rules = var.auto_number_of_computed_ingress_rules + var.number_of_computed_ingress_rules - number_of_computed_ingress_with_self = var.auto_number_of_computed_ingress_with_self + var.number_of_computed_ingress_with_self - number_of_computed_ingress_with_cidr_blocks = var.number_of_computed_ingress_with_cidr_blocks - number_of_computed_ingress_with_ipv6_cidr_blocks = var.number_of_computed_ingress_with_ipv6_cidr_blocks - number_of_computed_ingress_with_source_security_group_id = var.number_of_computed_ingress_with_source_security_group_id - number_of_computed_ingress_with_prefix_list_ids = var.number_of_computed_ingress_with_prefix_list_ids + number_of_computed_ingress_rules = var.auto_number_of_computed_ingress_rules + var.number_of_computed_ingress_rules + number_of_computed_ingress_with_self = var.auto_number_of_computed_ingress_with_self + var.number_of_computed_ingress_with_self + number_of_computed_ingress_with_cidr_ipv4 = var.number_of_computed_ingress_with_cidr_ipv4 + number_of_computed_ingress_with_cidr_ipv6 = var.number_of_computed_ingress_with_cidr_ipv6 + number_of_computed_ingress_with_referenced_security_group_id = var.number_of_computed_ingress_with_referenced_security_group_id + number_of_computed_ingress_with_prefix_list_id = var.number_of_computed_ingress_with_prefix_list_id ######### # Egress @@ -78,20 +78,20 @@ module "sg" { egress_with_self = concat(var.auto_egress_with_self, var.egress_with_self) # Open to IPv4 cidr blocks - egress_with_cidr_blocks = var.egress_with_cidr_blocks + egress_with_cidr_ipv4 = var.egress_with_cidr_ipv4 # Open to IPv6 cidr blocks - egress_with_ipv6_cidr_blocks = var.egress_with_ipv6_cidr_blocks + egress_with_cidr_ipv6 = var.egress_with_cidr_ipv6 # Open for security group id - egress_with_source_security_group_id = var.egress_with_source_security_group_id + egress_with_referenced_security_group_id = var.egress_with_referenced_security_group_id # Open for prefix list id - egress_with_prefix_list_ids = var.egress_with_prefix_list_ids + egress_with_prefix_list_id = var.egress_with_prefix_list_id # Default egress CIDR blocks - egress_cidr_blocks = var.egress_cidr_blocks - egress_ipv6_cidr_blocks = var.egress_ipv6_cidr_blocks + egress_cidr_ipv4 = var.egress_cidr_ipv4 + egress_cidr_ipv6 = var.egress_cidr_ipv6 # Default prefix list ids egress_prefix_list_ids = var.egress_prefix_list_ids @@ -106,24 +106,24 @@ module "sg" { computed_egress_with_self = concat(var.auto_computed_egress_with_self, var.computed_egress_with_self) # Open to IPv4 cidr blocks - computed_egress_with_cidr_blocks = var.computed_egress_with_cidr_blocks + computed_egress_with_cidr_ipv4 = var.computed_egress_with_cidr_ipv4 # Open to IPv6 cidr blocks - computed_egress_with_ipv6_cidr_blocks = var.computed_egress_with_ipv6_cidr_blocks + computed_egress_with_cidr_ipv6 = var.computed_egress_with_cidr_ipv6 # Open for security group id - computed_egress_with_source_security_group_id = var.computed_egress_with_source_security_group_id + computed_egress_with_referenced_security_group_id = var.computed_egress_with_referenced_security_group_id # Open for prefix list id - computed_egress_with_prefix_list_ids = var.computed_egress_with_prefix_list_ids + computed_egress_with_prefix_list_id = var.computed_egress_with_prefix_list_id ############################# # Number of computed egress ############################# - number_of_computed_egress_rules = var.auto_number_of_computed_egress_rules + var.number_of_computed_egress_rules - number_of_computed_egress_with_self = var.auto_number_of_computed_egress_with_self + var.number_of_computed_egress_with_self - number_of_computed_egress_with_cidr_blocks = var.number_of_computed_egress_with_cidr_blocks - number_of_computed_egress_with_ipv6_cidr_blocks = var.number_of_computed_egress_with_ipv6_cidr_blocks - number_of_computed_egress_with_source_security_group_id = var.number_of_computed_egress_with_source_security_group_id - number_of_computed_egress_with_prefix_list_ids = var.number_of_computed_egress_with_prefix_list_ids + number_of_computed_egress_rules = var.auto_number_of_computed_egress_rules + var.number_of_computed_egress_rules + number_of_computed_egress_with_self = var.auto_number_of_computed_egress_with_self + var.number_of_computed_egress_with_self + number_of_computed_egress_with_cidr_ipv4 = var.number_of_computed_egress_with_cidr_ipv4 + number_of_computed_egress_with_cidr_ipv6 = var.number_of_computed_egress_with_cidr_ipv6 + number_of_computed_egress_with_referenced_security_group_id = var.number_of_computed_egress_with_referenced_security_group_id + number_of_computed_egress_with_prefix_list_id = var.number_of_computed_egress_with_prefix_list_id } diff --git a/modules/consul/variables.tf b/modules/consul/variables.tf index 60c8c27b..6590c9e3 100644 --- a/modules/consul/variables.tf +++ b/modules/consul/variables.tf @@ -56,37 +56,37 @@ variable "ingress_with_self" { default = [] } -variable "ingress_with_cidr_blocks" { - description = "List of ingress rules to create where 'cidr_blocks' is used" +variable "ingress_with_cidr_ipv4" { + description = "List of ingress rules to create where 'cidr_ipv4' is used" type = list(map(string)) default = [] } -variable "ingress_with_ipv6_cidr_blocks" { +variable "ingress_with_cidr_ipv6" { description = "List of ingress rules to create where 'ipv6_cidr_blocks' is used" type = list(map(string)) default = [] } -variable "ingress_with_source_security_group_id" { +variable "ingress_with_referenced_security_group_id" { description = "List of ingress rules to create where 'source_security_group_id' is used" type = list(map(string)) default = [] } -variable "ingress_with_prefix_list_ids" { - description = "List of ingress rules to create where 'prefix_list_ids' is used" +variable "ingress_with_prefix_list_id" { + description = "List of ingress rules to create where 'prefix_list_id' is used" type = list(map(string)) default = [] } -variable "ingress_cidr_blocks" { +variable "ingress_cidr_ipv4" { description = "List of IPv4 CIDR ranges to use on all ingress rules" type = list(string) default = [] } -variable "ingress_ipv6_cidr_blocks" { +variable "ingress_cidr_ipv6" { description = "List of IPv6 CIDR ranges to use on all ingress rules" type = list(string) default = [] @@ -113,26 +113,26 @@ variable "computed_ingress_with_self" { default = [] } -variable "computed_ingress_with_cidr_blocks" { - description = "List of computed ingress rules to create where 'cidr_blocks' is used" +variable "computed_ingress_with_cidr_ipv4" { + description = "List of computed ingress rules to create where 'cidr_ipv4' is used" type = list(map(string)) default = [] } -variable "computed_ingress_with_ipv6_cidr_blocks" { +variable "computed_ingress_with_cidr_ipv6" { description = "List of computed ingress rules to create where 'ipv6_cidr_blocks' is used" type = list(map(string)) default = [] } -variable "computed_ingress_with_source_security_group_id" { +variable "computed_ingress_with_referenced_security_group_id" { description = "List of computed ingress rules to create where 'source_security_group_id' is used" type = list(map(string)) default = [] } -variable "computed_ingress_with_prefix_list_ids" { - description = "List of computed ingress rules to create where 'prefix_list_ids' is used" +variable "computed_ingress_with_prefix_list_id" { + description = "List of computed ingress rules to create where 'prefix_list_id' is used" type = list(map(string)) default = [] } @@ -170,26 +170,26 @@ variable "number_of_computed_ingress_with_self" { default = 0 } -variable "number_of_computed_ingress_with_cidr_blocks" { - description = "Number of computed ingress rules to create where 'cidr_blocks' is used" +variable "number_of_computed_ingress_with_cidr_ipv4" { + description = "Number of computed ingress rules to create where 'cidr_ipv4' is used" type = number default = 0 } -variable "number_of_computed_ingress_with_ipv6_cidr_blocks" { +variable "number_of_computed_ingress_with_cidr_ipv6" { description = "Number of computed ingress rules to create where 'ipv6_cidr_blocks' is used" type = number default = 0 } -variable "number_of_computed_ingress_with_source_security_group_id" { +variable "number_of_computed_ingress_with_referenced_security_group_id" { description = "Number of computed ingress rules to create where 'source_security_group_id' is used" type = number default = 0 } -variable "number_of_computed_ingress_with_prefix_list_ids" { - description = "Number of computed ingress rules to create where 'prefix_list_ids' is used" +variable "number_of_computed_ingress_with_prefix_list_id" { + description = "Number of computed ingress rules to create where 'prefix_list_id' is used" type = number default = 0 } @@ -227,37 +227,37 @@ variable "egress_with_self" { default = [] } -variable "egress_with_cidr_blocks" { - description = "List of egress rules to create where 'cidr_blocks' is used" +variable "egress_with_cidr_ipv4" { + description = "List of egress rules to create where 'cidr_ipv4' is used" type = list(map(string)) default = [] } -variable "egress_with_ipv6_cidr_blocks" { +variable "egress_with_cidr_ipv6" { description = "List of egress rules to create where 'ipv6_cidr_blocks' is used" type = list(map(string)) default = [] } -variable "egress_with_source_security_group_id" { +variable "egress_with_referenced_security_group_id" { description = "List of egress rules to create where 'source_security_group_id' is used" type = list(map(string)) default = [] } -variable "egress_with_prefix_list_ids" { - description = "List of egress rules to create where 'prefix_list_ids' is used" +variable "egress_with_prefix_list_id" { + description = "List of egress rules to create where 'prefix_list_id' is used" type = list(map(string)) default = [] } -variable "egress_cidr_blocks" { +variable "egress_cidr_ipv4" { description = "List of IPv4 CIDR ranges to use on all egress rules" type = list(string) default = ["0.0.0.0/0"] } -variable "egress_ipv6_cidr_blocks" { +variable "egress_cidr_ipv6" { description = "List of IPv6 CIDR ranges to use on all egress rules" type = list(string) default = ["::/0"] @@ -284,26 +284,26 @@ variable "computed_egress_with_self" { default = [] } -variable "computed_egress_with_cidr_blocks" { - description = "List of computed egress rules to create where 'cidr_blocks' is used" +variable "computed_egress_with_cidr_ipv4" { + description = "List of computed egress rules to create where 'cidr_ipv4' is used" type = list(map(string)) default = [] } -variable "computed_egress_with_ipv6_cidr_blocks" { +variable "computed_egress_with_cidr_ipv6" { description = "List of computed egress rules to create where 'ipv6_cidr_blocks' is used" type = list(map(string)) default = [] } -variable "computed_egress_with_source_security_group_id" { +variable "computed_egress_with_referenced_security_group_id" { description = "List of computed egress rules to create where 'source_security_group_id' is used" type = list(map(string)) default = [] } -variable "computed_egress_with_prefix_list_ids" { - description = "List of computed egress rules to create where 'prefix_list_ids' is used" +variable "computed_egress_with_prefix_list_id" { + description = "List of computed egress rules to create where 'prefix_list_id' is used" type = list(map(string)) default = [] } @@ -341,26 +341,26 @@ variable "number_of_computed_egress_with_self" { default = 0 } -variable "number_of_computed_egress_with_cidr_blocks" { - description = "Number of computed egress rules to create where 'cidr_blocks' is used" +variable "number_of_computed_egress_with_cidr_ipv4" { + description = "Number of computed egress rules to create where 'cidr_ipv4' is used" type = number default = 0 } -variable "number_of_computed_egress_with_ipv6_cidr_blocks" { +variable "number_of_computed_egress_with_cidr_ipv6" { description = "Number of computed egress rules to create where 'ipv6_cidr_blocks' is used" type = number default = 0 } -variable "number_of_computed_egress_with_source_security_group_id" { +variable "number_of_computed_egress_with_referenced_security_group_id" { description = "Number of computed egress rules to create where 'source_security_group_id' is used" type = number default = 0 } -variable "number_of_computed_egress_with_prefix_list_ids" { - description = "Number of computed egress rules to create where 'prefix_list_ids' is used" +variable "number_of_computed_egress_with_prefix_list_id" { + description = "Number of computed egress rules to create where 'prefix_list_id' is used" type = number default = 0 } diff --git a/modules/dax-cluster/README.md b/modules/dax-cluster/README.md index 874ec1a5..dd4194ac 100644 --- a/modules/dax-cluster/README.md +++ b/modules/dax-cluster/README.md @@ -55,59 +55,59 @@ No resources. | [computed\_egress\_ipv6\_cidr\_blocks](#input\_computed\_egress\_ipv6\_cidr\_blocks) | List of IPv6 CIDR ranges to use on all computed egress rules | `list(string)` |
[
"::/0"
]
| no | | [computed\_egress\_prefix\_list\_ids](#input\_computed\_egress\_prefix\_list\_ids) | List of prefix list IDs (for allowing access to VPC endpoints) to use on all computed egress rules | `list(string)` | `[]` | no | | [computed\_egress\_rules](#input\_computed\_egress\_rules) | List of computed egress rules to create by name | `list(string)` | `[]` | no | -| [computed\_egress\_with\_cidr\_blocks](#input\_computed\_egress\_with\_cidr\_blocks) | List of computed egress rules to create where 'cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [computed\_egress\_with\_ipv6\_cidr\_blocks](#input\_computed\_egress\_with\_ipv6\_cidr\_blocks) | List of computed egress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [computed\_egress\_with\_prefix\_list\_ids](#input\_computed\_egress\_with\_prefix\_list\_ids) | List of computed egress rules to create where 'prefix\_list\_ids' is used | `list(map(string))` | `[]` | no | +| [computed\_egress\_with\_cidr\_ipv4](#input\_computed\_egress\_with\_cidr\_ipv4) | List of computed egress rules to create where 'cidr\_ipv4' is used | `list(map(string))` | `[]` | no | +| [computed\_egress\_with\_cidr\_ipv6](#input\_computed\_egress\_with\_cidr\_ipv6) | List of computed egress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | +| [computed\_egress\_with\_prefix\_list\_id](#input\_computed\_egress\_with\_prefix\_list\_id) | List of computed egress rules to create where 'prefix\_list\_id' is used | `list(map(string))` | `[]` | no | +| [computed\_egress\_with\_referenced\_security\_group\_id](#input\_computed\_egress\_with\_referenced\_security\_group\_id) | List of computed egress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [computed\_egress\_with\_self](#input\_computed\_egress\_with\_self) | List of computed egress rules to create where 'self' is defined | `list(map(string))` | `[]` | no | -| [computed\_egress\_with\_source\_security\_group\_id](#input\_computed\_egress\_with\_source\_security\_group\_id) | List of computed egress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [computed\_ingress\_cidr\_blocks](#input\_computed\_ingress\_cidr\_blocks) | List of IPv4 CIDR ranges to use on all computed ingress rules | `list(string)` | `[]` | no | | [computed\_ingress\_ipv6\_cidr\_blocks](#input\_computed\_ingress\_ipv6\_cidr\_blocks) | List of IPv6 CIDR ranges to use on all computed ingress rules | `list(string)` | `[]` | no | | [computed\_ingress\_prefix\_list\_ids](#input\_computed\_ingress\_prefix\_list\_ids) | List of prefix list IDs (for allowing access to VPC endpoints) to use on all computed ingress rules | `list(string)` | `[]` | no | | [computed\_ingress\_rules](#input\_computed\_ingress\_rules) | List of computed ingress rules to create by name | `list(string)` | `[]` | no | -| [computed\_ingress\_with\_cidr\_blocks](#input\_computed\_ingress\_with\_cidr\_blocks) | List of computed ingress rules to create where 'cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [computed\_ingress\_with\_ipv6\_cidr\_blocks](#input\_computed\_ingress\_with\_ipv6\_cidr\_blocks) | List of computed ingress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [computed\_ingress\_with\_prefix\_list\_ids](#input\_computed\_ingress\_with\_prefix\_list\_ids) | List of computed ingress rules to create where 'prefix\_list\_ids' is used | `list(map(string))` | `[]` | no | +| [computed\_ingress\_with\_cidr\_ipv4](#input\_computed\_ingress\_with\_cidr\_ipv4) | List of computed ingress rules to create where 'cidr\_ipv4' is used | `list(map(string))` | `[]` | no | +| [computed\_ingress\_with\_cidr\_ipv6](#input\_computed\_ingress\_with\_cidr\_ipv6) | List of computed ingress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | +| [computed\_ingress\_with\_prefix\_list\_id](#input\_computed\_ingress\_with\_prefix\_list\_id) | List of computed ingress rules to create where 'prefix\_list\_id' is used | `list(map(string))` | `[]` | no | +| [computed\_ingress\_with\_referenced\_security\_group\_id](#input\_computed\_ingress\_with\_referenced\_security\_group\_id) | List of computed ingress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [computed\_ingress\_with\_self](#input\_computed\_ingress\_with\_self) | List of computed ingress rules to create where 'self' is defined | `list(map(string))` | `[]` | no | -| [computed\_ingress\_with\_source\_security\_group\_id](#input\_computed\_ingress\_with\_source\_security\_group\_id) | List of computed ingress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [create](#input\_create) | Whether to create security group and all rules | `bool` | `true` | no | | [description](#input\_description) | Description of security group | `string` | `"Security Group managed by Terraform"` | no | -| [egress\_cidr\_blocks](#input\_egress\_cidr\_blocks) | List of IPv4 CIDR ranges to use on all egress rules | `list(string)` |
[
"0.0.0.0/0"
]
| no | -| [egress\_ipv6\_cidr\_blocks](#input\_egress\_ipv6\_cidr\_blocks) | List of IPv6 CIDR ranges to use on all egress rules | `list(string)` |
[
"::/0"
]
| no | +| [egress\_cidr\_ipv4](#input\_egress\_cidr\_ipv4) | List of IPv4 CIDR ranges to use on all egress rules | `list(string)` |
[
"0.0.0.0/0"
]
| no | +| [egress\_cidr\_ipv6](#input\_egress\_cidr\_ipv6) | List of IPv6 CIDR ranges to use on all egress rules | `list(string)` |
[
"::/0"
]
| no | | [egress\_prefix\_list\_ids](#input\_egress\_prefix\_list\_ids) | List of prefix list IDs (for allowing access to VPC endpoints) to use on all egress rules | `list(string)` | `[]` | no | | [egress\_rules](#input\_egress\_rules) | List of egress rules to create by name | `list(string)` | `[]` | no | -| [egress\_with\_cidr\_blocks](#input\_egress\_with\_cidr\_blocks) | List of egress rules to create where 'cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [egress\_with\_ipv6\_cidr\_blocks](#input\_egress\_with\_ipv6\_cidr\_blocks) | List of egress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [egress\_with\_prefix\_list\_ids](#input\_egress\_with\_prefix\_list\_ids) | List of egress rules to create where 'prefix\_list\_ids' is used | `list(map(string))` | `[]` | no | +| [egress\_with\_cidr\_ipv4](#input\_egress\_with\_cidr\_ipv4) | List of egress rules to create where 'cidr\_ipv4' is used | `list(map(string))` | `[]` | no | +| [egress\_with\_cidr\_ipv6](#input\_egress\_with\_cidr\_ipv6) | List of egress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | +| [egress\_with\_prefix\_list\_id](#input\_egress\_with\_prefix\_list\_id) | List of egress rules to create where 'prefix\_list\_id' is used | `list(map(string))` | `[]` | no | +| [egress\_with\_referenced\_security\_group\_id](#input\_egress\_with\_referenced\_security\_group\_id) | List of egress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [egress\_with\_self](#input\_egress\_with\_self) | List of egress rules to create where 'self' is defined | `list(map(string))` | `[]` | no | -| [egress\_with\_source\_security\_group\_id](#input\_egress\_with\_source\_security\_group\_id) | List of egress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | -| [ingress\_cidr\_blocks](#input\_ingress\_cidr\_blocks) | List of IPv4 CIDR ranges to use on all ingress rules | `list(string)` | `[]` | no | -| [ingress\_ipv6\_cidr\_blocks](#input\_ingress\_ipv6\_cidr\_blocks) | List of IPv6 CIDR ranges to use on all ingress rules | `list(string)` | `[]` | no | +| [ingress\_cidr\_ipv4](#input\_ingress\_cidr\_ipv4) | List of IPv4 CIDR ranges to use on all ingress rules | `list(string)` | `[]` | no | +| [ingress\_cidr\_ipv6](#input\_ingress\_cidr\_ipv6) | List of IPv6 CIDR ranges to use on all ingress rules | `list(string)` | `[]` | no | | [ingress\_prefix\_list\_ids](#input\_ingress\_prefix\_list\_ids) | List of prefix list IDs (for allowing access to VPC endpoints) to use on all ingress rules | `list(string)` | `[]` | no | | [ingress\_rules](#input\_ingress\_rules) | List of ingress rules to create by name | `list(string)` | `[]` | no | -| [ingress\_with\_cidr\_blocks](#input\_ingress\_with\_cidr\_blocks) | List of ingress rules to create where 'cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [ingress\_with\_ipv6\_cidr\_blocks](#input\_ingress\_with\_ipv6\_cidr\_blocks) | List of ingress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [ingress\_with\_prefix\_list\_ids](#input\_ingress\_with\_prefix\_list\_ids) | List of ingress rules to create where 'prefix\_list\_ids' is used | `list(map(string))` | `[]` | no | +| [ingress\_with\_cidr\_ipv4](#input\_ingress\_with\_cidr\_ipv4) | List of ingress rules to create where 'cidr\_ipv4' is used | `list(map(string))` | `[]` | no | +| [ingress\_with\_cidr\_ipv6](#input\_ingress\_with\_cidr\_ipv6) | List of ingress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | +| [ingress\_with\_prefix\_list\_id](#input\_ingress\_with\_prefix\_list\_id) | List of ingress rules to create where 'prefix\_list\_id' is used | `list(map(string))` | `[]` | no | +| [ingress\_with\_referenced\_security\_group\_id](#input\_ingress\_with\_referenced\_security\_group\_id) | List of ingress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [ingress\_with\_self](#input\_ingress\_with\_self) | List of ingress rules to create where 'self' is defined | `list(map(string))` | `[]` | no | -| [ingress\_with\_source\_security\_group\_id](#input\_ingress\_with\_source\_security\_group\_id) | List of ingress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [name](#input\_name) | Name of security group | `string` | n/a | yes | | [number\_of\_computed\_egress\_cidr\_blocks](#input\_number\_of\_computed\_egress\_cidr\_blocks) | Number of IPv4 CIDR ranges to use on all computed egress rules | `number` | `0` | no | | [number\_of\_computed\_egress\_ipv6\_cidr\_blocks](#input\_number\_of\_computed\_egress\_ipv6\_cidr\_blocks) | Number of IPv6 CIDR ranges to use on all computed egress rules | `number` | `0` | no | | [number\_of\_computed\_egress\_prefix\_list\_ids](#input\_number\_of\_computed\_egress\_prefix\_list\_ids) | Number of prefix list IDs (for allowing access to VPC endpoints) to use on all computed egress rules | `number` | `0` | no | | [number\_of\_computed\_egress\_rules](#input\_number\_of\_computed\_egress\_rules) | Number of computed egress rules to create by name | `number` | `0` | no | -| [number\_of\_computed\_egress\_with\_cidr\_blocks](#input\_number\_of\_computed\_egress\_with\_cidr\_blocks) | Number of computed egress rules to create where 'cidr\_blocks' is used | `number` | `0` | no | -| [number\_of\_computed\_egress\_with\_ipv6\_cidr\_blocks](#input\_number\_of\_computed\_egress\_with\_ipv6\_cidr\_blocks) | Number of computed egress rules to create where 'ipv6\_cidr\_blocks' is used | `number` | `0` | no | -| [number\_of\_computed\_egress\_with\_prefix\_list\_ids](#input\_number\_of\_computed\_egress\_with\_prefix\_list\_ids) | Number of computed egress rules to create where 'prefix\_list\_ids' is used | `number` | `0` | no | +| [number\_of\_computed\_egress\_with\_cidr\_ipv4](#input\_number\_of\_computed\_egress\_with\_cidr\_ipv4) | Number of computed egress rules to create where 'cidr\_ipv4' is used | `number` | `0` | no | +| [number\_of\_computed\_egress\_with\_cidr\_ipv6](#input\_number\_of\_computed\_egress\_with\_cidr\_ipv6) | Number of computed egress rules to create where 'ipv6\_cidr\_blocks' is used | `number` | `0` | no | +| [number\_of\_computed\_egress\_with\_prefix\_list\_id](#input\_number\_of\_computed\_egress\_with\_prefix\_list\_id) | Number of computed egress rules to create where 'prefix\_list\_id' is used | `number` | `0` | no | +| [number\_of\_computed\_egress\_with\_referenced\_security\_group\_id](#input\_number\_of\_computed\_egress\_with\_referenced\_security\_group\_id) | Number of computed egress rules to create where 'source\_security\_group\_id' is used | `number` | `0` | no | | [number\_of\_computed\_egress\_with\_self](#input\_number\_of\_computed\_egress\_with\_self) | Number of computed egress rules to create where 'self' is defined | `number` | `0` | no | -| [number\_of\_computed\_egress\_with\_source\_security\_group\_id](#input\_number\_of\_computed\_egress\_with\_source\_security\_group\_id) | Number of computed egress rules to create where 'source\_security\_group\_id' is used | `number` | `0` | no | | [number\_of\_computed\_ingress\_cidr\_blocks](#input\_number\_of\_computed\_ingress\_cidr\_blocks) | Number of IPv4 CIDR ranges to use on all computed ingress rules | `number` | `0` | no | | [number\_of\_computed\_ingress\_ipv6\_cidr\_blocks](#input\_number\_of\_computed\_ingress\_ipv6\_cidr\_blocks) | Number of IPv6 CIDR ranges to use on all computed ingress rules | `number` | `0` | no | | [number\_of\_computed\_ingress\_prefix\_list\_ids](#input\_number\_of\_computed\_ingress\_prefix\_list\_ids) | Number of prefix list IDs (for allowing access to VPC endpoints) to use on all computed ingress rules | `number` | `0` | no | | [number\_of\_computed\_ingress\_rules](#input\_number\_of\_computed\_ingress\_rules) | Number of computed ingress rules to create by name | `number` | `0` | no | -| [number\_of\_computed\_ingress\_with\_cidr\_blocks](#input\_number\_of\_computed\_ingress\_with\_cidr\_blocks) | Number of computed ingress rules to create where 'cidr\_blocks' is used | `number` | `0` | no | -| [number\_of\_computed\_ingress\_with\_ipv6\_cidr\_blocks](#input\_number\_of\_computed\_ingress\_with\_ipv6\_cidr\_blocks) | Number of computed ingress rules to create where 'ipv6\_cidr\_blocks' is used | `number` | `0` | no | -| [number\_of\_computed\_ingress\_with\_prefix\_list\_ids](#input\_number\_of\_computed\_ingress\_with\_prefix\_list\_ids) | Number of computed ingress rules to create where 'prefix\_list\_ids' is used | `number` | `0` | no | +| [number\_of\_computed\_ingress\_with\_cidr\_ipv4](#input\_number\_of\_computed\_ingress\_with\_cidr\_ipv4) | Number of computed ingress rules to create where 'cidr\_ipv4' is used | `number` | `0` | no | +| [number\_of\_computed\_ingress\_with\_cidr\_ipv6](#input\_number\_of\_computed\_ingress\_with\_cidr\_ipv6) | Number of computed ingress rules to create where 'ipv6\_cidr\_blocks' is used | `number` | `0` | no | +| [number\_of\_computed\_ingress\_with\_prefix\_list\_id](#input\_number\_of\_computed\_ingress\_with\_prefix\_list\_id) | Number of computed ingress rules to create where 'prefix\_list\_id' is used | `number` | `0` | no | +| [number\_of\_computed\_ingress\_with\_referenced\_security\_group\_id](#input\_number\_of\_computed\_ingress\_with\_referenced\_security\_group\_id) | Number of computed ingress rules to create where 'source\_security\_group\_id' is used | `number` | `0` | no | | [number\_of\_computed\_ingress\_with\_self](#input\_number\_of\_computed\_ingress\_with\_self) | Number of computed ingress rules to create where 'self' is defined | `number` | `0` | no | -| [number\_of\_computed\_ingress\_with\_source\_security\_group\_id](#input\_number\_of\_computed\_ingress\_with\_source\_security\_group\_id) | Number of computed ingress rules to create where 'source\_security\_group\_id' is used | `number` | `0` | no | | [revoke\_rules\_on\_delete](#input\_revoke\_rules\_on\_delete) | Instruct Terraform to revoke all of the Security Groups attached ingress and egress rules before deleting the rule itself. Enable for EMR. | `bool` | `false` | no | | [tags](#input\_tags) | A mapping of tags to assign to security group | `map(string)` | `{}` | no | | [use\_name\_prefix](#input\_use\_name\_prefix) | Whether to use name\_prefix or fixed name. Should be true to able to update security group name after initial creation | `bool` | `true` | no | diff --git a/modules/dax-cluster/main.tf b/modules/dax-cluster/main.tf index 80ea0adb..d2a1bf93 100644 --- a/modules/dax-cluster/main.tf +++ b/modules/dax-cluster/main.tf @@ -19,20 +19,20 @@ module "sg" { ingress_with_self = concat(var.auto_ingress_with_self, var.ingress_with_self) # Open to IPv4 cidr blocks - ingress_with_cidr_blocks = var.ingress_with_cidr_blocks + ingress_with_cidr_ipv4 = var.ingress_with_cidr_ipv4 # Open to IPv6 cidr blocks - ingress_with_ipv6_cidr_blocks = var.ingress_with_ipv6_cidr_blocks + ingress_with_cidr_ipv6 = var.ingress_with_cidr_ipv6 # Open for security group id - ingress_with_source_security_group_id = var.ingress_with_source_security_group_id + ingress_with_referenced_security_group_id = var.ingress_with_referenced_security_group_id # Open for prefix list id - ingress_with_prefix_list_ids = var.ingress_with_prefix_list_ids + ingress_with_prefix_list_id = var.ingress_with_prefix_list_id # Default ingress CIDR blocks - ingress_cidr_blocks = var.ingress_cidr_blocks - ingress_ipv6_cidr_blocks = var.ingress_ipv6_cidr_blocks + ingress_cidr_ipv4 = var.ingress_cidr_ipv4 + ingress_cidr_ipv6 = var.ingress_cidr_ipv6 # Default prefix list ids ingress_prefix_list_ids = var.ingress_prefix_list_ids @@ -47,26 +47,26 @@ module "sg" { computed_ingress_with_self = concat(var.auto_computed_ingress_with_self, var.computed_ingress_with_self) # Open to IPv4 cidr blocks - computed_ingress_with_cidr_blocks = var.computed_ingress_with_cidr_blocks + computed_ingress_with_cidr_ipv4 = var.computed_ingress_with_cidr_ipv4 # Open to IPv6 cidr blocks - computed_ingress_with_ipv6_cidr_blocks = var.computed_ingress_with_ipv6_cidr_blocks + computed_ingress_with_cidr_ipv6 = var.computed_ingress_with_cidr_ipv6 # Open for security group id - computed_ingress_with_source_security_group_id = var.computed_ingress_with_source_security_group_id + computed_ingress_with_referenced_security_group_id = var.computed_ingress_with_referenced_security_group_id # Open for prefix list id - computed_ingress_with_prefix_list_ids = var.computed_ingress_with_prefix_list_ids + computed_ingress_with_prefix_list_id = var.computed_ingress_with_prefix_list_id ############################# # Number of computed ingress ############################# - number_of_computed_ingress_rules = var.auto_number_of_computed_ingress_rules + var.number_of_computed_ingress_rules - number_of_computed_ingress_with_self = var.auto_number_of_computed_ingress_with_self + var.number_of_computed_ingress_with_self - number_of_computed_ingress_with_cidr_blocks = var.number_of_computed_ingress_with_cidr_blocks - number_of_computed_ingress_with_ipv6_cidr_blocks = var.number_of_computed_ingress_with_ipv6_cidr_blocks - number_of_computed_ingress_with_source_security_group_id = var.number_of_computed_ingress_with_source_security_group_id - number_of_computed_ingress_with_prefix_list_ids = var.number_of_computed_ingress_with_prefix_list_ids + number_of_computed_ingress_rules = var.auto_number_of_computed_ingress_rules + var.number_of_computed_ingress_rules + number_of_computed_ingress_with_self = var.auto_number_of_computed_ingress_with_self + var.number_of_computed_ingress_with_self + number_of_computed_ingress_with_cidr_ipv4 = var.number_of_computed_ingress_with_cidr_ipv4 + number_of_computed_ingress_with_cidr_ipv6 = var.number_of_computed_ingress_with_cidr_ipv6 + number_of_computed_ingress_with_referenced_security_group_id = var.number_of_computed_ingress_with_referenced_security_group_id + number_of_computed_ingress_with_prefix_list_id = var.number_of_computed_ingress_with_prefix_list_id ######### # Egress @@ -78,20 +78,20 @@ module "sg" { egress_with_self = concat(var.auto_egress_with_self, var.egress_with_self) # Open to IPv4 cidr blocks - egress_with_cidr_blocks = var.egress_with_cidr_blocks + egress_with_cidr_ipv4 = var.egress_with_cidr_ipv4 # Open to IPv6 cidr blocks - egress_with_ipv6_cidr_blocks = var.egress_with_ipv6_cidr_blocks + egress_with_cidr_ipv6 = var.egress_with_cidr_ipv6 # Open for security group id - egress_with_source_security_group_id = var.egress_with_source_security_group_id + egress_with_referenced_security_group_id = var.egress_with_referenced_security_group_id # Open for prefix list id - egress_with_prefix_list_ids = var.egress_with_prefix_list_ids + egress_with_prefix_list_id = var.egress_with_prefix_list_id # Default egress CIDR blocks - egress_cidr_blocks = var.egress_cidr_blocks - egress_ipv6_cidr_blocks = var.egress_ipv6_cidr_blocks + egress_cidr_ipv4 = var.egress_cidr_ipv4 + egress_cidr_ipv6 = var.egress_cidr_ipv6 # Default prefix list ids egress_prefix_list_ids = var.egress_prefix_list_ids @@ -106,24 +106,24 @@ module "sg" { computed_egress_with_self = concat(var.auto_computed_egress_with_self, var.computed_egress_with_self) # Open to IPv4 cidr blocks - computed_egress_with_cidr_blocks = var.computed_egress_with_cidr_blocks + computed_egress_with_cidr_ipv4 = var.computed_egress_with_cidr_ipv4 # Open to IPv6 cidr blocks - computed_egress_with_ipv6_cidr_blocks = var.computed_egress_with_ipv6_cidr_blocks + computed_egress_with_cidr_ipv6 = var.computed_egress_with_cidr_ipv6 # Open for security group id - computed_egress_with_source_security_group_id = var.computed_egress_with_source_security_group_id + computed_egress_with_referenced_security_group_id = var.computed_egress_with_referenced_security_group_id # Open for prefix list id - computed_egress_with_prefix_list_ids = var.computed_egress_with_prefix_list_ids + computed_egress_with_prefix_list_id = var.computed_egress_with_prefix_list_id ############################# # Number of computed egress ############################# - number_of_computed_egress_rules = var.auto_number_of_computed_egress_rules + var.number_of_computed_egress_rules - number_of_computed_egress_with_self = var.auto_number_of_computed_egress_with_self + var.number_of_computed_egress_with_self - number_of_computed_egress_with_cidr_blocks = var.number_of_computed_egress_with_cidr_blocks - number_of_computed_egress_with_ipv6_cidr_blocks = var.number_of_computed_egress_with_ipv6_cidr_blocks - number_of_computed_egress_with_source_security_group_id = var.number_of_computed_egress_with_source_security_group_id - number_of_computed_egress_with_prefix_list_ids = var.number_of_computed_egress_with_prefix_list_ids + number_of_computed_egress_rules = var.auto_number_of_computed_egress_rules + var.number_of_computed_egress_rules + number_of_computed_egress_with_self = var.auto_number_of_computed_egress_with_self + var.number_of_computed_egress_with_self + number_of_computed_egress_with_cidr_ipv4 = var.number_of_computed_egress_with_cidr_ipv4 + number_of_computed_egress_with_cidr_ipv6 = var.number_of_computed_egress_with_cidr_ipv6 + number_of_computed_egress_with_referenced_security_group_id = var.number_of_computed_egress_with_referenced_security_group_id + number_of_computed_egress_with_prefix_list_id = var.number_of_computed_egress_with_prefix_list_id } diff --git a/modules/dax-cluster/variables.tf b/modules/dax-cluster/variables.tf index 60c8c27b..6590c9e3 100644 --- a/modules/dax-cluster/variables.tf +++ b/modules/dax-cluster/variables.tf @@ -56,37 +56,37 @@ variable "ingress_with_self" { default = [] } -variable "ingress_with_cidr_blocks" { - description = "List of ingress rules to create where 'cidr_blocks' is used" +variable "ingress_with_cidr_ipv4" { + description = "List of ingress rules to create where 'cidr_ipv4' is used" type = list(map(string)) default = [] } -variable "ingress_with_ipv6_cidr_blocks" { +variable "ingress_with_cidr_ipv6" { description = "List of ingress rules to create where 'ipv6_cidr_blocks' is used" type = list(map(string)) default = [] } -variable "ingress_with_source_security_group_id" { +variable "ingress_with_referenced_security_group_id" { description = "List of ingress rules to create where 'source_security_group_id' is used" type = list(map(string)) default = [] } -variable "ingress_with_prefix_list_ids" { - description = "List of ingress rules to create where 'prefix_list_ids' is used" +variable "ingress_with_prefix_list_id" { + description = "List of ingress rules to create where 'prefix_list_id' is used" type = list(map(string)) default = [] } -variable "ingress_cidr_blocks" { +variable "ingress_cidr_ipv4" { description = "List of IPv4 CIDR ranges to use on all ingress rules" type = list(string) default = [] } -variable "ingress_ipv6_cidr_blocks" { +variable "ingress_cidr_ipv6" { description = "List of IPv6 CIDR ranges to use on all ingress rules" type = list(string) default = [] @@ -113,26 +113,26 @@ variable "computed_ingress_with_self" { default = [] } -variable "computed_ingress_with_cidr_blocks" { - description = "List of computed ingress rules to create where 'cidr_blocks' is used" +variable "computed_ingress_with_cidr_ipv4" { + description = "List of computed ingress rules to create where 'cidr_ipv4' is used" type = list(map(string)) default = [] } -variable "computed_ingress_with_ipv6_cidr_blocks" { +variable "computed_ingress_with_cidr_ipv6" { description = "List of computed ingress rules to create where 'ipv6_cidr_blocks' is used" type = list(map(string)) default = [] } -variable "computed_ingress_with_source_security_group_id" { +variable "computed_ingress_with_referenced_security_group_id" { description = "List of computed ingress rules to create where 'source_security_group_id' is used" type = list(map(string)) default = [] } -variable "computed_ingress_with_prefix_list_ids" { - description = "List of computed ingress rules to create where 'prefix_list_ids' is used" +variable "computed_ingress_with_prefix_list_id" { + description = "List of computed ingress rules to create where 'prefix_list_id' is used" type = list(map(string)) default = [] } @@ -170,26 +170,26 @@ variable "number_of_computed_ingress_with_self" { default = 0 } -variable "number_of_computed_ingress_with_cidr_blocks" { - description = "Number of computed ingress rules to create where 'cidr_blocks' is used" +variable "number_of_computed_ingress_with_cidr_ipv4" { + description = "Number of computed ingress rules to create where 'cidr_ipv4' is used" type = number default = 0 } -variable "number_of_computed_ingress_with_ipv6_cidr_blocks" { +variable "number_of_computed_ingress_with_cidr_ipv6" { description = "Number of computed ingress rules to create where 'ipv6_cidr_blocks' is used" type = number default = 0 } -variable "number_of_computed_ingress_with_source_security_group_id" { +variable "number_of_computed_ingress_with_referenced_security_group_id" { description = "Number of computed ingress rules to create where 'source_security_group_id' is used" type = number default = 0 } -variable "number_of_computed_ingress_with_prefix_list_ids" { - description = "Number of computed ingress rules to create where 'prefix_list_ids' is used" +variable "number_of_computed_ingress_with_prefix_list_id" { + description = "Number of computed ingress rules to create where 'prefix_list_id' is used" type = number default = 0 } @@ -227,37 +227,37 @@ variable "egress_with_self" { default = [] } -variable "egress_with_cidr_blocks" { - description = "List of egress rules to create where 'cidr_blocks' is used" +variable "egress_with_cidr_ipv4" { + description = "List of egress rules to create where 'cidr_ipv4' is used" type = list(map(string)) default = [] } -variable "egress_with_ipv6_cidr_blocks" { +variable "egress_with_cidr_ipv6" { description = "List of egress rules to create where 'ipv6_cidr_blocks' is used" type = list(map(string)) default = [] } -variable "egress_with_source_security_group_id" { +variable "egress_with_referenced_security_group_id" { description = "List of egress rules to create where 'source_security_group_id' is used" type = list(map(string)) default = [] } -variable "egress_with_prefix_list_ids" { - description = "List of egress rules to create where 'prefix_list_ids' is used" +variable "egress_with_prefix_list_id" { + description = "List of egress rules to create where 'prefix_list_id' is used" type = list(map(string)) default = [] } -variable "egress_cidr_blocks" { +variable "egress_cidr_ipv4" { description = "List of IPv4 CIDR ranges to use on all egress rules" type = list(string) default = ["0.0.0.0/0"] } -variable "egress_ipv6_cidr_blocks" { +variable "egress_cidr_ipv6" { description = "List of IPv6 CIDR ranges to use on all egress rules" type = list(string) default = ["::/0"] @@ -284,26 +284,26 @@ variable "computed_egress_with_self" { default = [] } -variable "computed_egress_with_cidr_blocks" { - description = "List of computed egress rules to create where 'cidr_blocks' is used" +variable "computed_egress_with_cidr_ipv4" { + description = "List of computed egress rules to create where 'cidr_ipv4' is used" type = list(map(string)) default = [] } -variable "computed_egress_with_ipv6_cidr_blocks" { +variable "computed_egress_with_cidr_ipv6" { description = "List of computed egress rules to create where 'ipv6_cidr_blocks' is used" type = list(map(string)) default = [] } -variable "computed_egress_with_source_security_group_id" { +variable "computed_egress_with_referenced_security_group_id" { description = "List of computed egress rules to create where 'source_security_group_id' is used" type = list(map(string)) default = [] } -variable "computed_egress_with_prefix_list_ids" { - description = "List of computed egress rules to create where 'prefix_list_ids' is used" +variable "computed_egress_with_prefix_list_id" { + description = "List of computed egress rules to create where 'prefix_list_id' is used" type = list(map(string)) default = [] } @@ -341,26 +341,26 @@ variable "number_of_computed_egress_with_self" { default = 0 } -variable "number_of_computed_egress_with_cidr_blocks" { - description = "Number of computed egress rules to create where 'cidr_blocks' is used" +variable "number_of_computed_egress_with_cidr_ipv4" { + description = "Number of computed egress rules to create where 'cidr_ipv4' is used" type = number default = 0 } -variable "number_of_computed_egress_with_ipv6_cidr_blocks" { +variable "number_of_computed_egress_with_cidr_ipv6" { description = "Number of computed egress rules to create where 'ipv6_cidr_blocks' is used" type = number default = 0 } -variable "number_of_computed_egress_with_source_security_group_id" { +variable "number_of_computed_egress_with_referenced_security_group_id" { description = "Number of computed egress rules to create where 'source_security_group_id' is used" type = number default = 0 } -variable "number_of_computed_egress_with_prefix_list_ids" { - description = "Number of computed egress rules to create where 'prefix_list_ids' is used" +variable "number_of_computed_egress_with_prefix_list_id" { + description = "Number of computed egress rules to create where 'prefix_list_id' is used" type = number default = 0 } diff --git a/modules/docker-swarm/README.md b/modules/docker-swarm/README.md index 799cd2b9..e7ce5026 100644 --- a/modules/docker-swarm/README.md +++ b/modules/docker-swarm/README.md @@ -55,59 +55,59 @@ No resources. | [computed\_egress\_ipv6\_cidr\_blocks](#input\_computed\_egress\_ipv6\_cidr\_blocks) | List of IPv6 CIDR ranges to use on all computed egress rules | `list(string)` |
[
"::/0"
]
| no | | [computed\_egress\_prefix\_list\_ids](#input\_computed\_egress\_prefix\_list\_ids) | List of prefix list IDs (for allowing access to VPC endpoints) to use on all computed egress rules | `list(string)` | `[]` | no | | [computed\_egress\_rules](#input\_computed\_egress\_rules) | List of computed egress rules to create by name | `list(string)` | `[]` | no | -| [computed\_egress\_with\_cidr\_blocks](#input\_computed\_egress\_with\_cidr\_blocks) | List of computed egress rules to create where 'cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [computed\_egress\_with\_ipv6\_cidr\_blocks](#input\_computed\_egress\_with\_ipv6\_cidr\_blocks) | List of computed egress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [computed\_egress\_with\_prefix\_list\_ids](#input\_computed\_egress\_with\_prefix\_list\_ids) | List of computed egress rules to create where 'prefix\_list\_ids' is used | `list(map(string))` | `[]` | no | +| [computed\_egress\_with\_cidr\_ipv4](#input\_computed\_egress\_with\_cidr\_ipv4) | List of computed egress rules to create where 'cidr\_ipv4' is used | `list(map(string))` | `[]` | no | +| [computed\_egress\_with\_cidr\_ipv6](#input\_computed\_egress\_with\_cidr\_ipv6) | List of computed egress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | +| [computed\_egress\_with\_prefix\_list\_id](#input\_computed\_egress\_with\_prefix\_list\_id) | List of computed egress rules to create where 'prefix\_list\_id' is used | `list(map(string))` | `[]` | no | +| [computed\_egress\_with\_referenced\_security\_group\_id](#input\_computed\_egress\_with\_referenced\_security\_group\_id) | List of computed egress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [computed\_egress\_with\_self](#input\_computed\_egress\_with\_self) | List of computed egress rules to create where 'self' is defined | `list(map(string))` | `[]` | no | -| [computed\_egress\_with\_source\_security\_group\_id](#input\_computed\_egress\_with\_source\_security\_group\_id) | List of computed egress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [computed\_ingress\_cidr\_blocks](#input\_computed\_ingress\_cidr\_blocks) | List of IPv4 CIDR ranges to use on all computed ingress rules | `list(string)` | `[]` | no | | [computed\_ingress\_ipv6\_cidr\_blocks](#input\_computed\_ingress\_ipv6\_cidr\_blocks) | List of IPv6 CIDR ranges to use on all computed ingress rules | `list(string)` | `[]` | no | | [computed\_ingress\_prefix\_list\_ids](#input\_computed\_ingress\_prefix\_list\_ids) | List of prefix list IDs (for allowing access to VPC endpoints) to use on all computed ingress rules | `list(string)` | `[]` | no | | [computed\_ingress\_rules](#input\_computed\_ingress\_rules) | List of computed ingress rules to create by name | `list(string)` | `[]` | no | -| [computed\_ingress\_with\_cidr\_blocks](#input\_computed\_ingress\_with\_cidr\_blocks) | List of computed ingress rules to create where 'cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [computed\_ingress\_with\_ipv6\_cidr\_blocks](#input\_computed\_ingress\_with\_ipv6\_cidr\_blocks) | List of computed ingress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [computed\_ingress\_with\_prefix\_list\_ids](#input\_computed\_ingress\_with\_prefix\_list\_ids) | List of computed ingress rules to create where 'prefix\_list\_ids' is used | `list(map(string))` | `[]` | no | +| [computed\_ingress\_with\_cidr\_ipv4](#input\_computed\_ingress\_with\_cidr\_ipv4) | List of computed ingress rules to create where 'cidr\_ipv4' is used | `list(map(string))` | `[]` | no | +| [computed\_ingress\_with\_cidr\_ipv6](#input\_computed\_ingress\_with\_cidr\_ipv6) | List of computed ingress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | +| [computed\_ingress\_with\_prefix\_list\_id](#input\_computed\_ingress\_with\_prefix\_list\_id) | List of computed ingress rules to create where 'prefix\_list\_id' is used | `list(map(string))` | `[]` | no | +| [computed\_ingress\_with\_referenced\_security\_group\_id](#input\_computed\_ingress\_with\_referenced\_security\_group\_id) | List of computed ingress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [computed\_ingress\_with\_self](#input\_computed\_ingress\_with\_self) | List of computed ingress rules to create where 'self' is defined | `list(map(string))` | `[]` | no | -| [computed\_ingress\_with\_source\_security\_group\_id](#input\_computed\_ingress\_with\_source\_security\_group\_id) | List of computed ingress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [create](#input\_create) | Whether to create security group and all rules | `bool` | `true` | no | | [description](#input\_description) | Description of security group | `string` | `"Security Group managed by Terraform"` | no | -| [egress\_cidr\_blocks](#input\_egress\_cidr\_blocks) | List of IPv4 CIDR ranges to use on all egress rules | `list(string)` |
[
"0.0.0.0/0"
]
| no | -| [egress\_ipv6\_cidr\_blocks](#input\_egress\_ipv6\_cidr\_blocks) | List of IPv6 CIDR ranges to use on all egress rules | `list(string)` |
[
"::/0"
]
| no | +| [egress\_cidr\_ipv4](#input\_egress\_cidr\_ipv4) | List of IPv4 CIDR ranges to use on all egress rules | `list(string)` |
[
"0.0.0.0/0"
]
| no | +| [egress\_cidr\_ipv6](#input\_egress\_cidr\_ipv6) | List of IPv6 CIDR ranges to use on all egress rules | `list(string)` |
[
"::/0"
]
| no | | [egress\_prefix\_list\_ids](#input\_egress\_prefix\_list\_ids) | List of prefix list IDs (for allowing access to VPC endpoints) to use on all egress rules | `list(string)` | `[]` | no | | [egress\_rules](#input\_egress\_rules) | List of egress rules to create by name | `list(string)` | `[]` | no | -| [egress\_with\_cidr\_blocks](#input\_egress\_with\_cidr\_blocks) | List of egress rules to create where 'cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [egress\_with\_ipv6\_cidr\_blocks](#input\_egress\_with\_ipv6\_cidr\_blocks) | List of egress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [egress\_with\_prefix\_list\_ids](#input\_egress\_with\_prefix\_list\_ids) | List of egress rules to create where 'prefix\_list\_ids' is used | `list(map(string))` | `[]` | no | +| [egress\_with\_cidr\_ipv4](#input\_egress\_with\_cidr\_ipv4) | List of egress rules to create where 'cidr\_ipv4' is used | `list(map(string))` | `[]` | no | +| [egress\_with\_cidr\_ipv6](#input\_egress\_with\_cidr\_ipv6) | List of egress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | +| [egress\_with\_prefix\_list\_id](#input\_egress\_with\_prefix\_list\_id) | List of egress rules to create where 'prefix\_list\_id' is used | `list(map(string))` | `[]` | no | +| [egress\_with\_referenced\_security\_group\_id](#input\_egress\_with\_referenced\_security\_group\_id) | List of egress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [egress\_with\_self](#input\_egress\_with\_self) | List of egress rules to create where 'self' is defined | `list(map(string))` | `[]` | no | -| [egress\_with\_source\_security\_group\_id](#input\_egress\_with\_source\_security\_group\_id) | List of egress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | -| [ingress\_cidr\_blocks](#input\_ingress\_cidr\_blocks) | List of IPv4 CIDR ranges to use on all ingress rules | `list(string)` | `[]` | no | -| [ingress\_ipv6\_cidr\_blocks](#input\_ingress\_ipv6\_cidr\_blocks) | List of IPv6 CIDR ranges to use on all ingress rules | `list(string)` | `[]` | no | +| [ingress\_cidr\_ipv4](#input\_ingress\_cidr\_ipv4) | List of IPv4 CIDR ranges to use on all ingress rules | `list(string)` | `[]` | no | +| [ingress\_cidr\_ipv6](#input\_ingress\_cidr\_ipv6) | List of IPv6 CIDR ranges to use on all ingress rules | `list(string)` | `[]` | no | | [ingress\_prefix\_list\_ids](#input\_ingress\_prefix\_list\_ids) | List of prefix list IDs (for allowing access to VPC endpoints) to use on all ingress rules | `list(string)` | `[]` | no | | [ingress\_rules](#input\_ingress\_rules) | List of ingress rules to create by name | `list(string)` | `[]` | no | -| [ingress\_with\_cidr\_blocks](#input\_ingress\_with\_cidr\_blocks) | List of ingress rules to create where 'cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [ingress\_with\_ipv6\_cidr\_blocks](#input\_ingress\_with\_ipv6\_cidr\_blocks) | List of ingress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [ingress\_with\_prefix\_list\_ids](#input\_ingress\_with\_prefix\_list\_ids) | List of ingress rules to create where 'prefix\_list\_ids' is used | `list(map(string))` | `[]` | no | +| [ingress\_with\_cidr\_ipv4](#input\_ingress\_with\_cidr\_ipv4) | List of ingress rules to create where 'cidr\_ipv4' is used | `list(map(string))` | `[]` | no | +| [ingress\_with\_cidr\_ipv6](#input\_ingress\_with\_cidr\_ipv6) | List of ingress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | +| [ingress\_with\_prefix\_list\_id](#input\_ingress\_with\_prefix\_list\_id) | List of ingress rules to create where 'prefix\_list\_id' is used | `list(map(string))` | `[]` | no | +| [ingress\_with\_referenced\_security\_group\_id](#input\_ingress\_with\_referenced\_security\_group\_id) | List of ingress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [ingress\_with\_self](#input\_ingress\_with\_self) | List of ingress rules to create where 'self' is defined | `list(map(string))` | `[]` | no | -| [ingress\_with\_source\_security\_group\_id](#input\_ingress\_with\_source\_security\_group\_id) | List of ingress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [name](#input\_name) | Name of security group | `string` | n/a | yes | | [number\_of\_computed\_egress\_cidr\_blocks](#input\_number\_of\_computed\_egress\_cidr\_blocks) | Number of IPv4 CIDR ranges to use on all computed egress rules | `number` | `0` | no | | [number\_of\_computed\_egress\_ipv6\_cidr\_blocks](#input\_number\_of\_computed\_egress\_ipv6\_cidr\_blocks) | Number of IPv6 CIDR ranges to use on all computed egress rules | `number` | `0` | no | | [number\_of\_computed\_egress\_prefix\_list\_ids](#input\_number\_of\_computed\_egress\_prefix\_list\_ids) | Number of prefix list IDs (for allowing access to VPC endpoints) to use on all computed egress rules | `number` | `0` | no | | [number\_of\_computed\_egress\_rules](#input\_number\_of\_computed\_egress\_rules) | Number of computed egress rules to create by name | `number` | `0` | no | -| [number\_of\_computed\_egress\_with\_cidr\_blocks](#input\_number\_of\_computed\_egress\_with\_cidr\_blocks) | Number of computed egress rules to create where 'cidr\_blocks' is used | `number` | `0` | no | -| [number\_of\_computed\_egress\_with\_ipv6\_cidr\_blocks](#input\_number\_of\_computed\_egress\_with\_ipv6\_cidr\_blocks) | Number of computed egress rules to create where 'ipv6\_cidr\_blocks' is used | `number` | `0` | no | -| [number\_of\_computed\_egress\_with\_prefix\_list\_ids](#input\_number\_of\_computed\_egress\_with\_prefix\_list\_ids) | Number of computed egress rules to create where 'prefix\_list\_ids' is used | `number` | `0` | no | +| [number\_of\_computed\_egress\_with\_cidr\_ipv4](#input\_number\_of\_computed\_egress\_with\_cidr\_ipv4) | Number of computed egress rules to create where 'cidr\_ipv4' is used | `number` | `0` | no | +| [number\_of\_computed\_egress\_with\_cidr\_ipv6](#input\_number\_of\_computed\_egress\_with\_cidr\_ipv6) | Number of computed egress rules to create where 'ipv6\_cidr\_blocks' is used | `number` | `0` | no | +| [number\_of\_computed\_egress\_with\_prefix\_list\_id](#input\_number\_of\_computed\_egress\_with\_prefix\_list\_id) | Number of computed egress rules to create where 'prefix\_list\_id' is used | `number` | `0` | no | +| [number\_of\_computed\_egress\_with\_referenced\_security\_group\_id](#input\_number\_of\_computed\_egress\_with\_referenced\_security\_group\_id) | Number of computed egress rules to create where 'source\_security\_group\_id' is used | `number` | `0` | no | | [number\_of\_computed\_egress\_with\_self](#input\_number\_of\_computed\_egress\_with\_self) | Number of computed egress rules to create where 'self' is defined | `number` | `0` | no | -| [number\_of\_computed\_egress\_with\_source\_security\_group\_id](#input\_number\_of\_computed\_egress\_with\_source\_security\_group\_id) | Number of computed egress rules to create where 'source\_security\_group\_id' is used | `number` | `0` | no | | [number\_of\_computed\_ingress\_cidr\_blocks](#input\_number\_of\_computed\_ingress\_cidr\_blocks) | Number of IPv4 CIDR ranges to use on all computed ingress rules | `number` | `0` | no | | [number\_of\_computed\_ingress\_ipv6\_cidr\_blocks](#input\_number\_of\_computed\_ingress\_ipv6\_cidr\_blocks) | Number of IPv6 CIDR ranges to use on all computed ingress rules | `number` | `0` | no | | [number\_of\_computed\_ingress\_prefix\_list\_ids](#input\_number\_of\_computed\_ingress\_prefix\_list\_ids) | Number of prefix list IDs (for allowing access to VPC endpoints) to use on all computed ingress rules | `number` | `0` | no | | [number\_of\_computed\_ingress\_rules](#input\_number\_of\_computed\_ingress\_rules) | Number of computed ingress rules to create by name | `number` | `0` | no | -| [number\_of\_computed\_ingress\_with\_cidr\_blocks](#input\_number\_of\_computed\_ingress\_with\_cidr\_blocks) | Number of computed ingress rules to create where 'cidr\_blocks' is used | `number` | `0` | no | -| [number\_of\_computed\_ingress\_with\_ipv6\_cidr\_blocks](#input\_number\_of\_computed\_ingress\_with\_ipv6\_cidr\_blocks) | Number of computed ingress rules to create where 'ipv6\_cidr\_blocks' is used | `number` | `0` | no | -| [number\_of\_computed\_ingress\_with\_prefix\_list\_ids](#input\_number\_of\_computed\_ingress\_with\_prefix\_list\_ids) | Number of computed ingress rules to create where 'prefix\_list\_ids' is used | `number` | `0` | no | +| [number\_of\_computed\_ingress\_with\_cidr\_ipv4](#input\_number\_of\_computed\_ingress\_with\_cidr\_ipv4) | Number of computed ingress rules to create where 'cidr\_ipv4' is used | `number` | `0` | no | +| [number\_of\_computed\_ingress\_with\_cidr\_ipv6](#input\_number\_of\_computed\_ingress\_with\_cidr\_ipv6) | Number of computed ingress rules to create where 'ipv6\_cidr\_blocks' is used | `number` | `0` | no | +| [number\_of\_computed\_ingress\_with\_prefix\_list\_id](#input\_number\_of\_computed\_ingress\_with\_prefix\_list\_id) | Number of computed ingress rules to create where 'prefix\_list\_id' is used | `number` | `0` | no | +| [number\_of\_computed\_ingress\_with\_referenced\_security\_group\_id](#input\_number\_of\_computed\_ingress\_with\_referenced\_security\_group\_id) | Number of computed ingress rules to create where 'source\_security\_group\_id' is used | `number` | `0` | no | | [number\_of\_computed\_ingress\_with\_self](#input\_number\_of\_computed\_ingress\_with\_self) | Number of computed ingress rules to create where 'self' is defined | `number` | `0` | no | -| [number\_of\_computed\_ingress\_with\_source\_security\_group\_id](#input\_number\_of\_computed\_ingress\_with\_source\_security\_group\_id) | Number of computed ingress rules to create where 'source\_security\_group\_id' is used | `number` | `0` | no | | [revoke\_rules\_on\_delete](#input\_revoke\_rules\_on\_delete) | Instruct Terraform to revoke all of the Security Groups attached ingress and egress rules before deleting the rule itself. Enable for EMR. | `bool` | `false` | no | | [tags](#input\_tags) | A mapping of tags to assign to security group | `map(string)` | `{}` | no | | [use\_name\_prefix](#input\_use\_name\_prefix) | Whether to use name\_prefix or fixed name. Should be true to able to update security group name after initial creation | `bool` | `true` | no | diff --git a/modules/docker-swarm/main.tf b/modules/docker-swarm/main.tf index 80ea0adb..d2a1bf93 100644 --- a/modules/docker-swarm/main.tf +++ b/modules/docker-swarm/main.tf @@ -19,20 +19,20 @@ module "sg" { ingress_with_self = concat(var.auto_ingress_with_self, var.ingress_with_self) # Open to IPv4 cidr blocks - ingress_with_cidr_blocks = var.ingress_with_cidr_blocks + ingress_with_cidr_ipv4 = var.ingress_with_cidr_ipv4 # Open to IPv6 cidr blocks - ingress_with_ipv6_cidr_blocks = var.ingress_with_ipv6_cidr_blocks + ingress_with_cidr_ipv6 = var.ingress_with_cidr_ipv6 # Open for security group id - ingress_with_source_security_group_id = var.ingress_with_source_security_group_id + ingress_with_referenced_security_group_id = var.ingress_with_referenced_security_group_id # Open for prefix list id - ingress_with_prefix_list_ids = var.ingress_with_prefix_list_ids + ingress_with_prefix_list_id = var.ingress_with_prefix_list_id # Default ingress CIDR blocks - ingress_cidr_blocks = var.ingress_cidr_blocks - ingress_ipv6_cidr_blocks = var.ingress_ipv6_cidr_blocks + ingress_cidr_ipv4 = var.ingress_cidr_ipv4 + ingress_cidr_ipv6 = var.ingress_cidr_ipv6 # Default prefix list ids ingress_prefix_list_ids = var.ingress_prefix_list_ids @@ -47,26 +47,26 @@ module "sg" { computed_ingress_with_self = concat(var.auto_computed_ingress_with_self, var.computed_ingress_with_self) # Open to IPv4 cidr blocks - computed_ingress_with_cidr_blocks = var.computed_ingress_with_cidr_blocks + computed_ingress_with_cidr_ipv4 = var.computed_ingress_with_cidr_ipv4 # Open to IPv6 cidr blocks - computed_ingress_with_ipv6_cidr_blocks = var.computed_ingress_with_ipv6_cidr_blocks + computed_ingress_with_cidr_ipv6 = var.computed_ingress_with_cidr_ipv6 # Open for security group id - computed_ingress_with_source_security_group_id = var.computed_ingress_with_source_security_group_id + computed_ingress_with_referenced_security_group_id = var.computed_ingress_with_referenced_security_group_id # Open for prefix list id - computed_ingress_with_prefix_list_ids = var.computed_ingress_with_prefix_list_ids + computed_ingress_with_prefix_list_id = var.computed_ingress_with_prefix_list_id ############################# # Number of computed ingress ############################# - number_of_computed_ingress_rules = var.auto_number_of_computed_ingress_rules + var.number_of_computed_ingress_rules - number_of_computed_ingress_with_self = var.auto_number_of_computed_ingress_with_self + var.number_of_computed_ingress_with_self - number_of_computed_ingress_with_cidr_blocks = var.number_of_computed_ingress_with_cidr_blocks - number_of_computed_ingress_with_ipv6_cidr_blocks = var.number_of_computed_ingress_with_ipv6_cidr_blocks - number_of_computed_ingress_with_source_security_group_id = var.number_of_computed_ingress_with_source_security_group_id - number_of_computed_ingress_with_prefix_list_ids = var.number_of_computed_ingress_with_prefix_list_ids + number_of_computed_ingress_rules = var.auto_number_of_computed_ingress_rules + var.number_of_computed_ingress_rules + number_of_computed_ingress_with_self = var.auto_number_of_computed_ingress_with_self + var.number_of_computed_ingress_with_self + number_of_computed_ingress_with_cidr_ipv4 = var.number_of_computed_ingress_with_cidr_ipv4 + number_of_computed_ingress_with_cidr_ipv6 = var.number_of_computed_ingress_with_cidr_ipv6 + number_of_computed_ingress_with_referenced_security_group_id = var.number_of_computed_ingress_with_referenced_security_group_id + number_of_computed_ingress_with_prefix_list_id = var.number_of_computed_ingress_with_prefix_list_id ######### # Egress @@ -78,20 +78,20 @@ module "sg" { egress_with_self = concat(var.auto_egress_with_self, var.egress_with_self) # Open to IPv4 cidr blocks - egress_with_cidr_blocks = var.egress_with_cidr_blocks + egress_with_cidr_ipv4 = var.egress_with_cidr_ipv4 # Open to IPv6 cidr blocks - egress_with_ipv6_cidr_blocks = var.egress_with_ipv6_cidr_blocks + egress_with_cidr_ipv6 = var.egress_with_cidr_ipv6 # Open for security group id - egress_with_source_security_group_id = var.egress_with_source_security_group_id + egress_with_referenced_security_group_id = var.egress_with_referenced_security_group_id # Open for prefix list id - egress_with_prefix_list_ids = var.egress_with_prefix_list_ids + egress_with_prefix_list_id = var.egress_with_prefix_list_id # Default egress CIDR blocks - egress_cidr_blocks = var.egress_cidr_blocks - egress_ipv6_cidr_blocks = var.egress_ipv6_cidr_blocks + egress_cidr_ipv4 = var.egress_cidr_ipv4 + egress_cidr_ipv6 = var.egress_cidr_ipv6 # Default prefix list ids egress_prefix_list_ids = var.egress_prefix_list_ids @@ -106,24 +106,24 @@ module "sg" { computed_egress_with_self = concat(var.auto_computed_egress_with_self, var.computed_egress_with_self) # Open to IPv4 cidr blocks - computed_egress_with_cidr_blocks = var.computed_egress_with_cidr_blocks + computed_egress_with_cidr_ipv4 = var.computed_egress_with_cidr_ipv4 # Open to IPv6 cidr blocks - computed_egress_with_ipv6_cidr_blocks = var.computed_egress_with_ipv6_cidr_blocks + computed_egress_with_cidr_ipv6 = var.computed_egress_with_cidr_ipv6 # Open for security group id - computed_egress_with_source_security_group_id = var.computed_egress_with_source_security_group_id + computed_egress_with_referenced_security_group_id = var.computed_egress_with_referenced_security_group_id # Open for prefix list id - computed_egress_with_prefix_list_ids = var.computed_egress_with_prefix_list_ids + computed_egress_with_prefix_list_id = var.computed_egress_with_prefix_list_id ############################# # Number of computed egress ############################# - number_of_computed_egress_rules = var.auto_number_of_computed_egress_rules + var.number_of_computed_egress_rules - number_of_computed_egress_with_self = var.auto_number_of_computed_egress_with_self + var.number_of_computed_egress_with_self - number_of_computed_egress_with_cidr_blocks = var.number_of_computed_egress_with_cidr_blocks - number_of_computed_egress_with_ipv6_cidr_blocks = var.number_of_computed_egress_with_ipv6_cidr_blocks - number_of_computed_egress_with_source_security_group_id = var.number_of_computed_egress_with_source_security_group_id - number_of_computed_egress_with_prefix_list_ids = var.number_of_computed_egress_with_prefix_list_ids + number_of_computed_egress_rules = var.auto_number_of_computed_egress_rules + var.number_of_computed_egress_rules + number_of_computed_egress_with_self = var.auto_number_of_computed_egress_with_self + var.number_of_computed_egress_with_self + number_of_computed_egress_with_cidr_ipv4 = var.number_of_computed_egress_with_cidr_ipv4 + number_of_computed_egress_with_cidr_ipv6 = var.number_of_computed_egress_with_cidr_ipv6 + number_of_computed_egress_with_referenced_security_group_id = var.number_of_computed_egress_with_referenced_security_group_id + number_of_computed_egress_with_prefix_list_id = var.number_of_computed_egress_with_prefix_list_id } diff --git a/modules/docker-swarm/variables.tf b/modules/docker-swarm/variables.tf index 60c8c27b..6590c9e3 100644 --- a/modules/docker-swarm/variables.tf +++ b/modules/docker-swarm/variables.tf @@ -56,37 +56,37 @@ variable "ingress_with_self" { default = [] } -variable "ingress_with_cidr_blocks" { - description = "List of ingress rules to create where 'cidr_blocks' is used" +variable "ingress_with_cidr_ipv4" { + description = "List of ingress rules to create where 'cidr_ipv4' is used" type = list(map(string)) default = [] } -variable "ingress_with_ipv6_cidr_blocks" { +variable "ingress_with_cidr_ipv6" { description = "List of ingress rules to create where 'ipv6_cidr_blocks' is used" type = list(map(string)) default = [] } -variable "ingress_with_source_security_group_id" { +variable "ingress_with_referenced_security_group_id" { description = "List of ingress rules to create where 'source_security_group_id' is used" type = list(map(string)) default = [] } -variable "ingress_with_prefix_list_ids" { - description = "List of ingress rules to create where 'prefix_list_ids' is used" +variable "ingress_with_prefix_list_id" { + description = "List of ingress rules to create where 'prefix_list_id' is used" type = list(map(string)) default = [] } -variable "ingress_cidr_blocks" { +variable "ingress_cidr_ipv4" { description = "List of IPv4 CIDR ranges to use on all ingress rules" type = list(string) default = [] } -variable "ingress_ipv6_cidr_blocks" { +variable "ingress_cidr_ipv6" { description = "List of IPv6 CIDR ranges to use on all ingress rules" type = list(string) default = [] @@ -113,26 +113,26 @@ variable "computed_ingress_with_self" { default = [] } -variable "computed_ingress_with_cidr_blocks" { - description = "List of computed ingress rules to create where 'cidr_blocks' is used" +variable "computed_ingress_with_cidr_ipv4" { + description = "List of computed ingress rules to create where 'cidr_ipv4' is used" type = list(map(string)) default = [] } -variable "computed_ingress_with_ipv6_cidr_blocks" { +variable "computed_ingress_with_cidr_ipv6" { description = "List of computed ingress rules to create where 'ipv6_cidr_blocks' is used" type = list(map(string)) default = [] } -variable "computed_ingress_with_source_security_group_id" { +variable "computed_ingress_with_referenced_security_group_id" { description = "List of computed ingress rules to create where 'source_security_group_id' is used" type = list(map(string)) default = [] } -variable "computed_ingress_with_prefix_list_ids" { - description = "List of computed ingress rules to create where 'prefix_list_ids' is used" +variable "computed_ingress_with_prefix_list_id" { + description = "List of computed ingress rules to create where 'prefix_list_id' is used" type = list(map(string)) default = [] } @@ -170,26 +170,26 @@ variable "number_of_computed_ingress_with_self" { default = 0 } -variable "number_of_computed_ingress_with_cidr_blocks" { - description = "Number of computed ingress rules to create where 'cidr_blocks' is used" +variable "number_of_computed_ingress_with_cidr_ipv4" { + description = "Number of computed ingress rules to create where 'cidr_ipv4' is used" type = number default = 0 } -variable "number_of_computed_ingress_with_ipv6_cidr_blocks" { +variable "number_of_computed_ingress_with_cidr_ipv6" { description = "Number of computed ingress rules to create where 'ipv6_cidr_blocks' is used" type = number default = 0 } -variable "number_of_computed_ingress_with_source_security_group_id" { +variable "number_of_computed_ingress_with_referenced_security_group_id" { description = "Number of computed ingress rules to create where 'source_security_group_id' is used" type = number default = 0 } -variable "number_of_computed_ingress_with_prefix_list_ids" { - description = "Number of computed ingress rules to create where 'prefix_list_ids' is used" +variable "number_of_computed_ingress_with_prefix_list_id" { + description = "Number of computed ingress rules to create where 'prefix_list_id' is used" type = number default = 0 } @@ -227,37 +227,37 @@ variable "egress_with_self" { default = [] } -variable "egress_with_cidr_blocks" { - description = "List of egress rules to create where 'cidr_blocks' is used" +variable "egress_with_cidr_ipv4" { + description = "List of egress rules to create where 'cidr_ipv4' is used" type = list(map(string)) default = [] } -variable "egress_with_ipv6_cidr_blocks" { +variable "egress_with_cidr_ipv6" { description = "List of egress rules to create where 'ipv6_cidr_blocks' is used" type = list(map(string)) default = [] } -variable "egress_with_source_security_group_id" { +variable "egress_with_referenced_security_group_id" { description = "List of egress rules to create where 'source_security_group_id' is used" type = list(map(string)) default = [] } -variable "egress_with_prefix_list_ids" { - description = "List of egress rules to create where 'prefix_list_ids' is used" +variable "egress_with_prefix_list_id" { + description = "List of egress rules to create where 'prefix_list_id' is used" type = list(map(string)) default = [] } -variable "egress_cidr_blocks" { +variable "egress_cidr_ipv4" { description = "List of IPv4 CIDR ranges to use on all egress rules" type = list(string) default = ["0.0.0.0/0"] } -variable "egress_ipv6_cidr_blocks" { +variable "egress_cidr_ipv6" { description = "List of IPv6 CIDR ranges to use on all egress rules" type = list(string) default = ["::/0"] @@ -284,26 +284,26 @@ variable "computed_egress_with_self" { default = [] } -variable "computed_egress_with_cidr_blocks" { - description = "List of computed egress rules to create where 'cidr_blocks' is used" +variable "computed_egress_with_cidr_ipv4" { + description = "List of computed egress rules to create where 'cidr_ipv4' is used" type = list(map(string)) default = [] } -variable "computed_egress_with_ipv6_cidr_blocks" { +variable "computed_egress_with_cidr_ipv6" { description = "List of computed egress rules to create where 'ipv6_cidr_blocks' is used" type = list(map(string)) default = [] } -variable "computed_egress_with_source_security_group_id" { +variable "computed_egress_with_referenced_security_group_id" { description = "List of computed egress rules to create where 'source_security_group_id' is used" type = list(map(string)) default = [] } -variable "computed_egress_with_prefix_list_ids" { - description = "List of computed egress rules to create where 'prefix_list_ids' is used" +variable "computed_egress_with_prefix_list_id" { + description = "List of computed egress rules to create where 'prefix_list_id' is used" type = list(map(string)) default = [] } @@ -341,26 +341,26 @@ variable "number_of_computed_egress_with_self" { default = 0 } -variable "number_of_computed_egress_with_cidr_blocks" { - description = "Number of computed egress rules to create where 'cidr_blocks' is used" +variable "number_of_computed_egress_with_cidr_ipv4" { + description = "Number of computed egress rules to create where 'cidr_ipv4' is used" type = number default = 0 } -variable "number_of_computed_egress_with_ipv6_cidr_blocks" { +variable "number_of_computed_egress_with_cidr_ipv6" { description = "Number of computed egress rules to create where 'ipv6_cidr_blocks' is used" type = number default = 0 } -variable "number_of_computed_egress_with_source_security_group_id" { +variable "number_of_computed_egress_with_referenced_security_group_id" { description = "Number of computed egress rules to create where 'source_security_group_id' is used" type = number default = 0 } -variable "number_of_computed_egress_with_prefix_list_ids" { - description = "Number of computed egress rules to create where 'prefix_list_ids' is used" +variable "number_of_computed_egress_with_prefix_list_id" { + description = "Number of computed egress rules to create where 'prefix_list_id' is used" type = number default = 0 } diff --git a/modules/elasticsearch/README.md b/modules/elasticsearch/README.md index 6b7f43dd..57673716 100644 --- a/modules/elasticsearch/README.md +++ b/modules/elasticsearch/README.md @@ -55,59 +55,59 @@ No resources. | [computed\_egress\_ipv6\_cidr\_blocks](#input\_computed\_egress\_ipv6\_cidr\_blocks) | List of IPv6 CIDR ranges to use on all computed egress rules | `list(string)` |
[
"::/0"
]
| no | | [computed\_egress\_prefix\_list\_ids](#input\_computed\_egress\_prefix\_list\_ids) | List of prefix list IDs (for allowing access to VPC endpoints) to use on all computed egress rules | `list(string)` | `[]` | no | | [computed\_egress\_rules](#input\_computed\_egress\_rules) | List of computed egress rules to create by name | `list(string)` | `[]` | no | -| [computed\_egress\_with\_cidr\_blocks](#input\_computed\_egress\_with\_cidr\_blocks) | List of computed egress rules to create where 'cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [computed\_egress\_with\_ipv6\_cidr\_blocks](#input\_computed\_egress\_with\_ipv6\_cidr\_blocks) | List of computed egress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [computed\_egress\_with\_prefix\_list\_ids](#input\_computed\_egress\_with\_prefix\_list\_ids) | List of computed egress rules to create where 'prefix\_list\_ids' is used | `list(map(string))` | `[]` | no | +| [computed\_egress\_with\_cidr\_ipv4](#input\_computed\_egress\_with\_cidr\_ipv4) | List of computed egress rules to create where 'cidr\_ipv4' is used | `list(map(string))` | `[]` | no | +| [computed\_egress\_with\_cidr\_ipv6](#input\_computed\_egress\_with\_cidr\_ipv6) | List of computed egress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | +| [computed\_egress\_with\_prefix\_list\_id](#input\_computed\_egress\_with\_prefix\_list\_id) | List of computed egress rules to create where 'prefix\_list\_id' is used | `list(map(string))` | `[]` | no | +| [computed\_egress\_with\_referenced\_security\_group\_id](#input\_computed\_egress\_with\_referenced\_security\_group\_id) | List of computed egress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [computed\_egress\_with\_self](#input\_computed\_egress\_with\_self) | List of computed egress rules to create where 'self' is defined | `list(map(string))` | `[]` | no | -| [computed\_egress\_with\_source\_security\_group\_id](#input\_computed\_egress\_with\_source\_security\_group\_id) | List of computed egress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [computed\_ingress\_cidr\_blocks](#input\_computed\_ingress\_cidr\_blocks) | List of IPv4 CIDR ranges to use on all computed ingress rules | `list(string)` | `[]` | no | | [computed\_ingress\_ipv6\_cidr\_blocks](#input\_computed\_ingress\_ipv6\_cidr\_blocks) | List of IPv6 CIDR ranges to use on all computed ingress rules | `list(string)` | `[]` | no | | [computed\_ingress\_prefix\_list\_ids](#input\_computed\_ingress\_prefix\_list\_ids) | List of prefix list IDs (for allowing access to VPC endpoints) to use on all computed ingress rules | `list(string)` | `[]` | no | | [computed\_ingress\_rules](#input\_computed\_ingress\_rules) | List of computed ingress rules to create by name | `list(string)` | `[]` | no | -| [computed\_ingress\_with\_cidr\_blocks](#input\_computed\_ingress\_with\_cidr\_blocks) | List of computed ingress rules to create where 'cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [computed\_ingress\_with\_ipv6\_cidr\_blocks](#input\_computed\_ingress\_with\_ipv6\_cidr\_blocks) | List of computed ingress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [computed\_ingress\_with\_prefix\_list\_ids](#input\_computed\_ingress\_with\_prefix\_list\_ids) | List of computed ingress rules to create where 'prefix\_list\_ids' is used | `list(map(string))` | `[]` | no | +| [computed\_ingress\_with\_cidr\_ipv4](#input\_computed\_ingress\_with\_cidr\_ipv4) | List of computed ingress rules to create where 'cidr\_ipv4' is used | `list(map(string))` | `[]` | no | +| [computed\_ingress\_with\_cidr\_ipv6](#input\_computed\_ingress\_with\_cidr\_ipv6) | List of computed ingress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | +| [computed\_ingress\_with\_prefix\_list\_id](#input\_computed\_ingress\_with\_prefix\_list\_id) | List of computed ingress rules to create where 'prefix\_list\_id' is used | `list(map(string))` | `[]` | no | +| [computed\_ingress\_with\_referenced\_security\_group\_id](#input\_computed\_ingress\_with\_referenced\_security\_group\_id) | List of computed ingress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [computed\_ingress\_with\_self](#input\_computed\_ingress\_with\_self) | List of computed ingress rules to create where 'self' is defined | `list(map(string))` | `[]` | no | -| [computed\_ingress\_with\_source\_security\_group\_id](#input\_computed\_ingress\_with\_source\_security\_group\_id) | List of computed ingress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [create](#input\_create) | Whether to create security group and all rules | `bool` | `true` | no | | [description](#input\_description) | Description of security group | `string` | `"Security Group managed by Terraform"` | no | -| [egress\_cidr\_blocks](#input\_egress\_cidr\_blocks) | List of IPv4 CIDR ranges to use on all egress rules | `list(string)` |
[
"0.0.0.0/0"
]
| no | -| [egress\_ipv6\_cidr\_blocks](#input\_egress\_ipv6\_cidr\_blocks) | List of IPv6 CIDR ranges to use on all egress rules | `list(string)` |
[
"::/0"
]
| no | +| [egress\_cidr\_ipv4](#input\_egress\_cidr\_ipv4) | List of IPv4 CIDR ranges to use on all egress rules | `list(string)` |
[
"0.0.0.0/0"
]
| no | +| [egress\_cidr\_ipv6](#input\_egress\_cidr\_ipv6) | List of IPv6 CIDR ranges to use on all egress rules | `list(string)` |
[
"::/0"
]
| no | | [egress\_prefix\_list\_ids](#input\_egress\_prefix\_list\_ids) | List of prefix list IDs (for allowing access to VPC endpoints) to use on all egress rules | `list(string)` | `[]` | no | | [egress\_rules](#input\_egress\_rules) | List of egress rules to create by name | `list(string)` | `[]` | no | -| [egress\_with\_cidr\_blocks](#input\_egress\_with\_cidr\_blocks) | List of egress rules to create where 'cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [egress\_with\_ipv6\_cidr\_blocks](#input\_egress\_with\_ipv6\_cidr\_blocks) | List of egress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [egress\_with\_prefix\_list\_ids](#input\_egress\_with\_prefix\_list\_ids) | List of egress rules to create where 'prefix\_list\_ids' is used | `list(map(string))` | `[]` | no | +| [egress\_with\_cidr\_ipv4](#input\_egress\_with\_cidr\_ipv4) | List of egress rules to create where 'cidr\_ipv4' is used | `list(map(string))` | `[]` | no | +| [egress\_with\_cidr\_ipv6](#input\_egress\_with\_cidr\_ipv6) | List of egress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | +| [egress\_with\_prefix\_list\_id](#input\_egress\_with\_prefix\_list\_id) | List of egress rules to create where 'prefix\_list\_id' is used | `list(map(string))` | `[]` | no | +| [egress\_with\_referenced\_security\_group\_id](#input\_egress\_with\_referenced\_security\_group\_id) | List of egress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [egress\_with\_self](#input\_egress\_with\_self) | List of egress rules to create where 'self' is defined | `list(map(string))` | `[]` | no | -| [egress\_with\_source\_security\_group\_id](#input\_egress\_with\_source\_security\_group\_id) | List of egress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | -| [ingress\_cidr\_blocks](#input\_ingress\_cidr\_blocks) | List of IPv4 CIDR ranges to use on all ingress rules | `list(string)` | `[]` | no | -| [ingress\_ipv6\_cidr\_blocks](#input\_ingress\_ipv6\_cidr\_blocks) | List of IPv6 CIDR ranges to use on all ingress rules | `list(string)` | `[]` | no | +| [ingress\_cidr\_ipv4](#input\_ingress\_cidr\_ipv4) | List of IPv4 CIDR ranges to use on all ingress rules | `list(string)` | `[]` | no | +| [ingress\_cidr\_ipv6](#input\_ingress\_cidr\_ipv6) | List of IPv6 CIDR ranges to use on all ingress rules | `list(string)` | `[]` | no | | [ingress\_prefix\_list\_ids](#input\_ingress\_prefix\_list\_ids) | List of prefix list IDs (for allowing access to VPC endpoints) to use on all ingress rules | `list(string)` | `[]` | no | | [ingress\_rules](#input\_ingress\_rules) | List of ingress rules to create by name | `list(string)` | `[]` | no | -| [ingress\_with\_cidr\_blocks](#input\_ingress\_with\_cidr\_blocks) | List of ingress rules to create where 'cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [ingress\_with\_ipv6\_cidr\_blocks](#input\_ingress\_with\_ipv6\_cidr\_blocks) | List of ingress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [ingress\_with\_prefix\_list\_ids](#input\_ingress\_with\_prefix\_list\_ids) | List of ingress rules to create where 'prefix\_list\_ids' is used | `list(map(string))` | `[]` | no | +| [ingress\_with\_cidr\_ipv4](#input\_ingress\_with\_cidr\_ipv4) | List of ingress rules to create where 'cidr\_ipv4' is used | `list(map(string))` | `[]` | no | +| [ingress\_with\_cidr\_ipv6](#input\_ingress\_with\_cidr\_ipv6) | List of ingress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | +| [ingress\_with\_prefix\_list\_id](#input\_ingress\_with\_prefix\_list\_id) | List of ingress rules to create where 'prefix\_list\_id' is used | `list(map(string))` | `[]` | no | +| [ingress\_with\_referenced\_security\_group\_id](#input\_ingress\_with\_referenced\_security\_group\_id) | List of ingress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [ingress\_with\_self](#input\_ingress\_with\_self) | List of ingress rules to create where 'self' is defined | `list(map(string))` | `[]` | no | -| [ingress\_with\_source\_security\_group\_id](#input\_ingress\_with\_source\_security\_group\_id) | List of ingress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [name](#input\_name) | Name of security group | `string` | n/a | yes | | [number\_of\_computed\_egress\_cidr\_blocks](#input\_number\_of\_computed\_egress\_cidr\_blocks) | Number of IPv4 CIDR ranges to use on all computed egress rules | `number` | `0` | no | | [number\_of\_computed\_egress\_ipv6\_cidr\_blocks](#input\_number\_of\_computed\_egress\_ipv6\_cidr\_blocks) | Number of IPv6 CIDR ranges to use on all computed egress rules | `number` | `0` | no | | [number\_of\_computed\_egress\_prefix\_list\_ids](#input\_number\_of\_computed\_egress\_prefix\_list\_ids) | Number of prefix list IDs (for allowing access to VPC endpoints) to use on all computed egress rules | `number` | `0` | no | | [number\_of\_computed\_egress\_rules](#input\_number\_of\_computed\_egress\_rules) | Number of computed egress rules to create by name | `number` | `0` | no | -| [number\_of\_computed\_egress\_with\_cidr\_blocks](#input\_number\_of\_computed\_egress\_with\_cidr\_blocks) | Number of computed egress rules to create where 'cidr\_blocks' is used | `number` | `0` | no | -| [number\_of\_computed\_egress\_with\_ipv6\_cidr\_blocks](#input\_number\_of\_computed\_egress\_with\_ipv6\_cidr\_blocks) | Number of computed egress rules to create where 'ipv6\_cidr\_blocks' is used | `number` | `0` | no | -| [number\_of\_computed\_egress\_with\_prefix\_list\_ids](#input\_number\_of\_computed\_egress\_with\_prefix\_list\_ids) | Number of computed egress rules to create where 'prefix\_list\_ids' is used | `number` | `0` | no | +| [number\_of\_computed\_egress\_with\_cidr\_ipv4](#input\_number\_of\_computed\_egress\_with\_cidr\_ipv4) | Number of computed egress rules to create where 'cidr\_ipv4' is used | `number` | `0` | no | +| [number\_of\_computed\_egress\_with\_cidr\_ipv6](#input\_number\_of\_computed\_egress\_with\_cidr\_ipv6) | Number of computed egress rules to create where 'ipv6\_cidr\_blocks' is used | `number` | `0` | no | +| [number\_of\_computed\_egress\_with\_prefix\_list\_id](#input\_number\_of\_computed\_egress\_with\_prefix\_list\_id) | Number of computed egress rules to create where 'prefix\_list\_id' is used | `number` | `0` | no | +| [number\_of\_computed\_egress\_with\_referenced\_security\_group\_id](#input\_number\_of\_computed\_egress\_with\_referenced\_security\_group\_id) | Number of computed egress rules to create where 'source\_security\_group\_id' is used | `number` | `0` | no | | [number\_of\_computed\_egress\_with\_self](#input\_number\_of\_computed\_egress\_with\_self) | Number of computed egress rules to create where 'self' is defined | `number` | `0` | no | -| [number\_of\_computed\_egress\_with\_source\_security\_group\_id](#input\_number\_of\_computed\_egress\_with\_source\_security\_group\_id) | Number of computed egress rules to create where 'source\_security\_group\_id' is used | `number` | `0` | no | | [number\_of\_computed\_ingress\_cidr\_blocks](#input\_number\_of\_computed\_ingress\_cidr\_blocks) | Number of IPv4 CIDR ranges to use on all computed ingress rules | `number` | `0` | no | | [number\_of\_computed\_ingress\_ipv6\_cidr\_blocks](#input\_number\_of\_computed\_ingress\_ipv6\_cidr\_blocks) | Number of IPv6 CIDR ranges to use on all computed ingress rules | `number` | `0` | no | | [number\_of\_computed\_ingress\_prefix\_list\_ids](#input\_number\_of\_computed\_ingress\_prefix\_list\_ids) | Number of prefix list IDs (for allowing access to VPC endpoints) to use on all computed ingress rules | `number` | `0` | no | | [number\_of\_computed\_ingress\_rules](#input\_number\_of\_computed\_ingress\_rules) | Number of computed ingress rules to create by name | `number` | `0` | no | -| [number\_of\_computed\_ingress\_with\_cidr\_blocks](#input\_number\_of\_computed\_ingress\_with\_cidr\_blocks) | Number of computed ingress rules to create where 'cidr\_blocks' is used | `number` | `0` | no | -| [number\_of\_computed\_ingress\_with\_ipv6\_cidr\_blocks](#input\_number\_of\_computed\_ingress\_with\_ipv6\_cidr\_blocks) | Number of computed ingress rules to create where 'ipv6\_cidr\_blocks' is used | `number` | `0` | no | -| [number\_of\_computed\_ingress\_with\_prefix\_list\_ids](#input\_number\_of\_computed\_ingress\_with\_prefix\_list\_ids) | Number of computed ingress rules to create where 'prefix\_list\_ids' is used | `number` | `0` | no | +| [number\_of\_computed\_ingress\_with\_cidr\_ipv4](#input\_number\_of\_computed\_ingress\_with\_cidr\_ipv4) | Number of computed ingress rules to create where 'cidr\_ipv4' is used | `number` | `0` | no | +| [number\_of\_computed\_ingress\_with\_cidr\_ipv6](#input\_number\_of\_computed\_ingress\_with\_cidr\_ipv6) | Number of computed ingress rules to create where 'ipv6\_cidr\_blocks' is used | `number` | `0` | no | +| [number\_of\_computed\_ingress\_with\_prefix\_list\_id](#input\_number\_of\_computed\_ingress\_with\_prefix\_list\_id) | Number of computed ingress rules to create where 'prefix\_list\_id' is used | `number` | `0` | no | +| [number\_of\_computed\_ingress\_with\_referenced\_security\_group\_id](#input\_number\_of\_computed\_ingress\_with\_referenced\_security\_group\_id) | Number of computed ingress rules to create where 'source\_security\_group\_id' is used | `number` | `0` | no | | [number\_of\_computed\_ingress\_with\_self](#input\_number\_of\_computed\_ingress\_with\_self) | Number of computed ingress rules to create where 'self' is defined | `number` | `0` | no | -| [number\_of\_computed\_ingress\_with\_source\_security\_group\_id](#input\_number\_of\_computed\_ingress\_with\_source\_security\_group\_id) | Number of computed ingress rules to create where 'source\_security\_group\_id' is used | `number` | `0` | no | | [revoke\_rules\_on\_delete](#input\_revoke\_rules\_on\_delete) | Instruct Terraform to revoke all of the Security Groups attached ingress and egress rules before deleting the rule itself. Enable for EMR. | `bool` | `false` | no | | [tags](#input\_tags) | A mapping of tags to assign to security group | `map(string)` | `{}` | no | | [use\_name\_prefix](#input\_use\_name\_prefix) | Whether to use name\_prefix or fixed name. Should be true to able to update security group name after initial creation | `bool` | `true` | no | diff --git a/modules/elasticsearch/main.tf b/modules/elasticsearch/main.tf index 80ea0adb..d2a1bf93 100644 --- a/modules/elasticsearch/main.tf +++ b/modules/elasticsearch/main.tf @@ -19,20 +19,20 @@ module "sg" { ingress_with_self = concat(var.auto_ingress_with_self, var.ingress_with_self) # Open to IPv4 cidr blocks - ingress_with_cidr_blocks = var.ingress_with_cidr_blocks + ingress_with_cidr_ipv4 = var.ingress_with_cidr_ipv4 # Open to IPv6 cidr blocks - ingress_with_ipv6_cidr_blocks = var.ingress_with_ipv6_cidr_blocks + ingress_with_cidr_ipv6 = var.ingress_with_cidr_ipv6 # Open for security group id - ingress_with_source_security_group_id = var.ingress_with_source_security_group_id + ingress_with_referenced_security_group_id = var.ingress_with_referenced_security_group_id # Open for prefix list id - ingress_with_prefix_list_ids = var.ingress_with_prefix_list_ids + ingress_with_prefix_list_id = var.ingress_with_prefix_list_id # Default ingress CIDR blocks - ingress_cidr_blocks = var.ingress_cidr_blocks - ingress_ipv6_cidr_blocks = var.ingress_ipv6_cidr_blocks + ingress_cidr_ipv4 = var.ingress_cidr_ipv4 + ingress_cidr_ipv6 = var.ingress_cidr_ipv6 # Default prefix list ids ingress_prefix_list_ids = var.ingress_prefix_list_ids @@ -47,26 +47,26 @@ module "sg" { computed_ingress_with_self = concat(var.auto_computed_ingress_with_self, var.computed_ingress_with_self) # Open to IPv4 cidr blocks - computed_ingress_with_cidr_blocks = var.computed_ingress_with_cidr_blocks + computed_ingress_with_cidr_ipv4 = var.computed_ingress_with_cidr_ipv4 # Open to IPv6 cidr blocks - computed_ingress_with_ipv6_cidr_blocks = var.computed_ingress_with_ipv6_cidr_blocks + computed_ingress_with_cidr_ipv6 = var.computed_ingress_with_cidr_ipv6 # Open for security group id - computed_ingress_with_source_security_group_id = var.computed_ingress_with_source_security_group_id + computed_ingress_with_referenced_security_group_id = var.computed_ingress_with_referenced_security_group_id # Open for prefix list id - computed_ingress_with_prefix_list_ids = var.computed_ingress_with_prefix_list_ids + computed_ingress_with_prefix_list_id = var.computed_ingress_with_prefix_list_id ############################# # Number of computed ingress ############################# - number_of_computed_ingress_rules = var.auto_number_of_computed_ingress_rules + var.number_of_computed_ingress_rules - number_of_computed_ingress_with_self = var.auto_number_of_computed_ingress_with_self + var.number_of_computed_ingress_with_self - number_of_computed_ingress_with_cidr_blocks = var.number_of_computed_ingress_with_cidr_blocks - number_of_computed_ingress_with_ipv6_cidr_blocks = var.number_of_computed_ingress_with_ipv6_cidr_blocks - number_of_computed_ingress_with_source_security_group_id = var.number_of_computed_ingress_with_source_security_group_id - number_of_computed_ingress_with_prefix_list_ids = var.number_of_computed_ingress_with_prefix_list_ids + number_of_computed_ingress_rules = var.auto_number_of_computed_ingress_rules + var.number_of_computed_ingress_rules + number_of_computed_ingress_with_self = var.auto_number_of_computed_ingress_with_self + var.number_of_computed_ingress_with_self + number_of_computed_ingress_with_cidr_ipv4 = var.number_of_computed_ingress_with_cidr_ipv4 + number_of_computed_ingress_with_cidr_ipv6 = var.number_of_computed_ingress_with_cidr_ipv6 + number_of_computed_ingress_with_referenced_security_group_id = var.number_of_computed_ingress_with_referenced_security_group_id + number_of_computed_ingress_with_prefix_list_id = var.number_of_computed_ingress_with_prefix_list_id ######### # Egress @@ -78,20 +78,20 @@ module "sg" { egress_with_self = concat(var.auto_egress_with_self, var.egress_with_self) # Open to IPv4 cidr blocks - egress_with_cidr_blocks = var.egress_with_cidr_blocks + egress_with_cidr_ipv4 = var.egress_with_cidr_ipv4 # Open to IPv6 cidr blocks - egress_with_ipv6_cidr_blocks = var.egress_with_ipv6_cidr_blocks + egress_with_cidr_ipv6 = var.egress_with_cidr_ipv6 # Open for security group id - egress_with_source_security_group_id = var.egress_with_source_security_group_id + egress_with_referenced_security_group_id = var.egress_with_referenced_security_group_id # Open for prefix list id - egress_with_prefix_list_ids = var.egress_with_prefix_list_ids + egress_with_prefix_list_id = var.egress_with_prefix_list_id # Default egress CIDR blocks - egress_cidr_blocks = var.egress_cidr_blocks - egress_ipv6_cidr_blocks = var.egress_ipv6_cidr_blocks + egress_cidr_ipv4 = var.egress_cidr_ipv4 + egress_cidr_ipv6 = var.egress_cidr_ipv6 # Default prefix list ids egress_prefix_list_ids = var.egress_prefix_list_ids @@ -106,24 +106,24 @@ module "sg" { computed_egress_with_self = concat(var.auto_computed_egress_with_self, var.computed_egress_with_self) # Open to IPv4 cidr blocks - computed_egress_with_cidr_blocks = var.computed_egress_with_cidr_blocks + computed_egress_with_cidr_ipv4 = var.computed_egress_with_cidr_ipv4 # Open to IPv6 cidr blocks - computed_egress_with_ipv6_cidr_blocks = var.computed_egress_with_ipv6_cidr_blocks + computed_egress_with_cidr_ipv6 = var.computed_egress_with_cidr_ipv6 # Open for security group id - computed_egress_with_source_security_group_id = var.computed_egress_with_source_security_group_id + computed_egress_with_referenced_security_group_id = var.computed_egress_with_referenced_security_group_id # Open for prefix list id - computed_egress_with_prefix_list_ids = var.computed_egress_with_prefix_list_ids + computed_egress_with_prefix_list_id = var.computed_egress_with_prefix_list_id ############################# # Number of computed egress ############################# - number_of_computed_egress_rules = var.auto_number_of_computed_egress_rules + var.number_of_computed_egress_rules - number_of_computed_egress_with_self = var.auto_number_of_computed_egress_with_self + var.number_of_computed_egress_with_self - number_of_computed_egress_with_cidr_blocks = var.number_of_computed_egress_with_cidr_blocks - number_of_computed_egress_with_ipv6_cidr_blocks = var.number_of_computed_egress_with_ipv6_cidr_blocks - number_of_computed_egress_with_source_security_group_id = var.number_of_computed_egress_with_source_security_group_id - number_of_computed_egress_with_prefix_list_ids = var.number_of_computed_egress_with_prefix_list_ids + number_of_computed_egress_rules = var.auto_number_of_computed_egress_rules + var.number_of_computed_egress_rules + number_of_computed_egress_with_self = var.auto_number_of_computed_egress_with_self + var.number_of_computed_egress_with_self + number_of_computed_egress_with_cidr_ipv4 = var.number_of_computed_egress_with_cidr_ipv4 + number_of_computed_egress_with_cidr_ipv6 = var.number_of_computed_egress_with_cidr_ipv6 + number_of_computed_egress_with_referenced_security_group_id = var.number_of_computed_egress_with_referenced_security_group_id + number_of_computed_egress_with_prefix_list_id = var.number_of_computed_egress_with_prefix_list_id } diff --git a/modules/elasticsearch/variables.tf b/modules/elasticsearch/variables.tf index 60c8c27b..6590c9e3 100644 --- a/modules/elasticsearch/variables.tf +++ b/modules/elasticsearch/variables.tf @@ -56,37 +56,37 @@ variable "ingress_with_self" { default = [] } -variable "ingress_with_cidr_blocks" { - description = "List of ingress rules to create where 'cidr_blocks' is used" +variable "ingress_with_cidr_ipv4" { + description = "List of ingress rules to create where 'cidr_ipv4' is used" type = list(map(string)) default = [] } -variable "ingress_with_ipv6_cidr_blocks" { +variable "ingress_with_cidr_ipv6" { description = "List of ingress rules to create where 'ipv6_cidr_blocks' is used" type = list(map(string)) default = [] } -variable "ingress_with_source_security_group_id" { +variable "ingress_with_referenced_security_group_id" { description = "List of ingress rules to create where 'source_security_group_id' is used" type = list(map(string)) default = [] } -variable "ingress_with_prefix_list_ids" { - description = "List of ingress rules to create where 'prefix_list_ids' is used" +variable "ingress_with_prefix_list_id" { + description = "List of ingress rules to create where 'prefix_list_id' is used" type = list(map(string)) default = [] } -variable "ingress_cidr_blocks" { +variable "ingress_cidr_ipv4" { description = "List of IPv4 CIDR ranges to use on all ingress rules" type = list(string) default = [] } -variable "ingress_ipv6_cidr_blocks" { +variable "ingress_cidr_ipv6" { description = "List of IPv6 CIDR ranges to use on all ingress rules" type = list(string) default = [] @@ -113,26 +113,26 @@ variable "computed_ingress_with_self" { default = [] } -variable "computed_ingress_with_cidr_blocks" { - description = "List of computed ingress rules to create where 'cidr_blocks' is used" +variable "computed_ingress_with_cidr_ipv4" { + description = "List of computed ingress rules to create where 'cidr_ipv4' is used" type = list(map(string)) default = [] } -variable "computed_ingress_with_ipv6_cidr_blocks" { +variable "computed_ingress_with_cidr_ipv6" { description = "List of computed ingress rules to create where 'ipv6_cidr_blocks' is used" type = list(map(string)) default = [] } -variable "computed_ingress_with_source_security_group_id" { +variable "computed_ingress_with_referenced_security_group_id" { description = "List of computed ingress rules to create where 'source_security_group_id' is used" type = list(map(string)) default = [] } -variable "computed_ingress_with_prefix_list_ids" { - description = "List of computed ingress rules to create where 'prefix_list_ids' is used" +variable "computed_ingress_with_prefix_list_id" { + description = "List of computed ingress rules to create where 'prefix_list_id' is used" type = list(map(string)) default = [] } @@ -170,26 +170,26 @@ variable "number_of_computed_ingress_with_self" { default = 0 } -variable "number_of_computed_ingress_with_cidr_blocks" { - description = "Number of computed ingress rules to create where 'cidr_blocks' is used" +variable "number_of_computed_ingress_with_cidr_ipv4" { + description = "Number of computed ingress rules to create where 'cidr_ipv4' is used" type = number default = 0 } -variable "number_of_computed_ingress_with_ipv6_cidr_blocks" { +variable "number_of_computed_ingress_with_cidr_ipv6" { description = "Number of computed ingress rules to create where 'ipv6_cidr_blocks' is used" type = number default = 0 } -variable "number_of_computed_ingress_with_source_security_group_id" { +variable "number_of_computed_ingress_with_referenced_security_group_id" { description = "Number of computed ingress rules to create where 'source_security_group_id' is used" type = number default = 0 } -variable "number_of_computed_ingress_with_prefix_list_ids" { - description = "Number of computed ingress rules to create where 'prefix_list_ids' is used" +variable "number_of_computed_ingress_with_prefix_list_id" { + description = "Number of computed ingress rules to create where 'prefix_list_id' is used" type = number default = 0 } @@ -227,37 +227,37 @@ variable "egress_with_self" { default = [] } -variable "egress_with_cidr_blocks" { - description = "List of egress rules to create where 'cidr_blocks' is used" +variable "egress_with_cidr_ipv4" { + description = "List of egress rules to create where 'cidr_ipv4' is used" type = list(map(string)) default = [] } -variable "egress_with_ipv6_cidr_blocks" { +variable "egress_with_cidr_ipv6" { description = "List of egress rules to create where 'ipv6_cidr_blocks' is used" type = list(map(string)) default = [] } -variable "egress_with_source_security_group_id" { +variable "egress_with_referenced_security_group_id" { description = "List of egress rules to create where 'source_security_group_id' is used" type = list(map(string)) default = [] } -variable "egress_with_prefix_list_ids" { - description = "List of egress rules to create where 'prefix_list_ids' is used" +variable "egress_with_prefix_list_id" { + description = "List of egress rules to create where 'prefix_list_id' is used" type = list(map(string)) default = [] } -variable "egress_cidr_blocks" { +variable "egress_cidr_ipv4" { description = "List of IPv4 CIDR ranges to use on all egress rules" type = list(string) default = ["0.0.0.0/0"] } -variable "egress_ipv6_cidr_blocks" { +variable "egress_cidr_ipv6" { description = "List of IPv6 CIDR ranges to use on all egress rules" type = list(string) default = ["::/0"] @@ -284,26 +284,26 @@ variable "computed_egress_with_self" { default = [] } -variable "computed_egress_with_cidr_blocks" { - description = "List of computed egress rules to create where 'cidr_blocks' is used" +variable "computed_egress_with_cidr_ipv4" { + description = "List of computed egress rules to create where 'cidr_ipv4' is used" type = list(map(string)) default = [] } -variable "computed_egress_with_ipv6_cidr_blocks" { +variable "computed_egress_with_cidr_ipv6" { description = "List of computed egress rules to create where 'ipv6_cidr_blocks' is used" type = list(map(string)) default = [] } -variable "computed_egress_with_source_security_group_id" { +variable "computed_egress_with_referenced_security_group_id" { description = "List of computed egress rules to create where 'source_security_group_id' is used" type = list(map(string)) default = [] } -variable "computed_egress_with_prefix_list_ids" { - description = "List of computed egress rules to create where 'prefix_list_ids' is used" +variable "computed_egress_with_prefix_list_id" { + description = "List of computed egress rules to create where 'prefix_list_id' is used" type = list(map(string)) default = [] } @@ -341,26 +341,26 @@ variable "number_of_computed_egress_with_self" { default = 0 } -variable "number_of_computed_egress_with_cidr_blocks" { - description = "Number of computed egress rules to create where 'cidr_blocks' is used" +variable "number_of_computed_egress_with_cidr_ipv4" { + description = "Number of computed egress rules to create where 'cidr_ipv4' is used" type = number default = 0 } -variable "number_of_computed_egress_with_ipv6_cidr_blocks" { +variable "number_of_computed_egress_with_cidr_ipv6" { description = "Number of computed egress rules to create where 'ipv6_cidr_blocks' is used" type = number default = 0 } -variable "number_of_computed_egress_with_source_security_group_id" { +variable "number_of_computed_egress_with_referenced_security_group_id" { description = "Number of computed egress rules to create where 'source_security_group_id' is used" type = number default = 0 } -variable "number_of_computed_egress_with_prefix_list_ids" { - description = "Number of computed egress rules to create where 'prefix_list_ids' is used" +variable "number_of_computed_egress_with_prefix_list_id" { + description = "Number of computed egress rules to create where 'prefix_list_id' is used" type = number default = 0 } diff --git a/modules/etcd/README.md b/modules/etcd/README.md index 38c7e069..44e15874 100644 --- a/modules/etcd/README.md +++ b/modules/etcd/README.md @@ -55,59 +55,59 @@ No resources. | [computed\_egress\_ipv6\_cidr\_blocks](#input\_computed\_egress\_ipv6\_cidr\_blocks) | List of IPv6 CIDR ranges to use on all computed egress rules | `list(string)` |
[
"::/0"
]
| no | | [computed\_egress\_prefix\_list\_ids](#input\_computed\_egress\_prefix\_list\_ids) | List of prefix list IDs (for allowing access to VPC endpoints) to use on all computed egress rules | `list(string)` | `[]` | no | | [computed\_egress\_rules](#input\_computed\_egress\_rules) | List of computed egress rules to create by name | `list(string)` | `[]` | no | -| [computed\_egress\_with\_cidr\_blocks](#input\_computed\_egress\_with\_cidr\_blocks) | List of computed egress rules to create where 'cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [computed\_egress\_with\_ipv6\_cidr\_blocks](#input\_computed\_egress\_with\_ipv6\_cidr\_blocks) | List of computed egress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [computed\_egress\_with\_prefix\_list\_ids](#input\_computed\_egress\_with\_prefix\_list\_ids) | List of computed egress rules to create where 'prefix\_list\_ids' is used | `list(map(string))` | `[]` | no | +| [computed\_egress\_with\_cidr\_ipv4](#input\_computed\_egress\_with\_cidr\_ipv4) | List of computed egress rules to create where 'cidr\_ipv4' is used | `list(map(string))` | `[]` | no | +| [computed\_egress\_with\_cidr\_ipv6](#input\_computed\_egress\_with\_cidr\_ipv6) | List of computed egress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | +| [computed\_egress\_with\_prefix\_list\_id](#input\_computed\_egress\_with\_prefix\_list\_id) | List of computed egress rules to create where 'prefix\_list\_id' is used | `list(map(string))` | `[]` | no | +| [computed\_egress\_with\_referenced\_security\_group\_id](#input\_computed\_egress\_with\_referenced\_security\_group\_id) | List of computed egress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [computed\_egress\_with\_self](#input\_computed\_egress\_with\_self) | List of computed egress rules to create where 'self' is defined | `list(map(string))` | `[]` | no | -| [computed\_egress\_with\_source\_security\_group\_id](#input\_computed\_egress\_with\_source\_security\_group\_id) | List of computed egress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [computed\_ingress\_cidr\_blocks](#input\_computed\_ingress\_cidr\_blocks) | List of IPv4 CIDR ranges to use on all computed ingress rules | `list(string)` | `[]` | no | | [computed\_ingress\_ipv6\_cidr\_blocks](#input\_computed\_ingress\_ipv6\_cidr\_blocks) | List of IPv6 CIDR ranges to use on all computed ingress rules | `list(string)` | `[]` | no | | [computed\_ingress\_prefix\_list\_ids](#input\_computed\_ingress\_prefix\_list\_ids) | List of prefix list IDs (for allowing access to VPC endpoints) to use on all computed ingress rules | `list(string)` | `[]` | no | | [computed\_ingress\_rules](#input\_computed\_ingress\_rules) | List of computed ingress rules to create by name | `list(string)` | `[]` | no | -| [computed\_ingress\_with\_cidr\_blocks](#input\_computed\_ingress\_with\_cidr\_blocks) | List of computed ingress rules to create where 'cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [computed\_ingress\_with\_ipv6\_cidr\_blocks](#input\_computed\_ingress\_with\_ipv6\_cidr\_blocks) | List of computed ingress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [computed\_ingress\_with\_prefix\_list\_ids](#input\_computed\_ingress\_with\_prefix\_list\_ids) | List of computed ingress rules to create where 'prefix\_list\_ids' is used | `list(map(string))` | `[]` | no | +| [computed\_ingress\_with\_cidr\_ipv4](#input\_computed\_ingress\_with\_cidr\_ipv4) | List of computed ingress rules to create where 'cidr\_ipv4' is used | `list(map(string))` | `[]` | no | +| [computed\_ingress\_with\_cidr\_ipv6](#input\_computed\_ingress\_with\_cidr\_ipv6) | List of computed ingress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | +| [computed\_ingress\_with\_prefix\_list\_id](#input\_computed\_ingress\_with\_prefix\_list\_id) | List of computed ingress rules to create where 'prefix\_list\_id' is used | `list(map(string))` | `[]` | no | +| [computed\_ingress\_with\_referenced\_security\_group\_id](#input\_computed\_ingress\_with\_referenced\_security\_group\_id) | List of computed ingress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [computed\_ingress\_with\_self](#input\_computed\_ingress\_with\_self) | List of computed ingress rules to create where 'self' is defined | `list(map(string))` | `[]` | no | -| [computed\_ingress\_with\_source\_security\_group\_id](#input\_computed\_ingress\_with\_source\_security\_group\_id) | List of computed ingress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [create](#input\_create) | Whether to create security group and all rules | `bool` | `true` | no | | [description](#input\_description) | Description of security group | `string` | `"Security Group managed by Terraform"` | no | -| [egress\_cidr\_blocks](#input\_egress\_cidr\_blocks) | List of IPv4 CIDR ranges to use on all egress rules | `list(string)` |
[
"0.0.0.0/0"
]
| no | -| [egress\_ipv6\_cidr\_blocks](#input\_egress\_ipv6\_cidr\_blocks) | List of IPv6 CIDR ranges to use on all egress rules | `list(string)` |
[
"::/0"
]
| no | +| [egress\_cidr\_ipv4](#input\_egress\_cidr\_ipv4) | List of IPv4 CIDR ranges to use on all egress rules | `list(string)` |
[
"0.0.0.0/0"
]
| no | +| [egress\_cidr\_ipv6](#input\_egress\_cidr\_ipv6) | List of IPv6 CIDR ranges to use on all egress rules | `list(string)` |
[
"::/0"
]
| no | | [egress\_prefix\_list\_ids](#input\_egress\_prefix\_list\_ids) | List of prefix list IDs (for allowing access to VPC endpoints) to use on all egress rules | `list(string)` | `[]` | no | | [egress\_rules](#input\_egress\_rules) | List of egress rules to create by name | `list(string)` | `[]` | no | -| [egress\_with\_cidr\_blocks](#input\_egress\_with\_cidr\_blocks) | List of egress rules to create where 'cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [egress\_with\_ipv6\_cidr\_blocks](#input\_egress\_with\_ipv6\_cidr\_blocks) | List of egress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [egress\_with\_prefix\_list\_ids](#input\_egress\_with\_prefix\_list\_ids) | List of egress rules to create where 'prefix\_list\_ids' is used | `list(map(string))` | `[]` | no | +| [egress\_with\_cidr\_ipv4](#input\_egress\_with\_cidr\_ipv4) | List of egress rules to create where 'cidr\_ipv4' is used | `list(map(string))` | `[]` | no | +| [egress\_with\_cidr\_ipv6](#input\_egress\_with\_cidr\_ipv6) | List of egress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | +| [egress\_with\_prefix\_list\_id](#input\_egress\_with\_prefix\_list\_id) | List of egress rules to create where 'prefix\_list\_id' is used | `list(map(string))` | `[]` | no | +| [egress\_with\_referenced\_security\_group\_id](#input\_egress\_with\_referenced\_security\_group\_id) | List of egress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [egress\_with\_self](#input\_egress\_with\_self) | List of egress rules to create where 'self' is defined | `list(map(string))` | `[]` | no | -| [egress\_with\_source\_security\_group\_id](#input\_egress\_with\_source\_security\_group\_id) | List of egress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | -| [ingress\_cidr\_blocks](#input\_ingress\_cidr\_blocks) | List of IPv4 CIDR ranges to use on all ingress rules | `list(string)` | `[]` | no | -| [ingress\_ipv6\_cidr\_blocks](#input\_ingress\_ipv6\_cidr\_blocks) | List of IPv6 CIDR ranges to use on all ingress rules | `list(string)` | `[]` | no | +| [ingress\_cidr\_ipv4](#input\_ingress\_cidr\_ipv4) | List of IPv4 CIDR ranges to use on all ingress rules | `list(string)` | `[]` | no | +| [ingress\_cidr\_ipv6](#input\_ingress\_cidr\_ipv6) | List of IPv6 CIDR ranges to use on all ingress rules | `list(string)` | `[]` | no | | [ingress\_prefix\_list\_ids](#input\_ingress\_prefix\_list\_ids) | List of prefix list IDs (for allowing access to VPC endpoints) to use on all ingress rules | `list(string)` | `[]` | no | | [ingress\_rules](#input\_ingress\_rules) | List of ingress rules to create by name | `list(string)` | `[]` | no | -| [ingress\_with\_cidr\_blocks](#input\_ingress\_with\_cidr\_blocks) | List of ingress rules to create where 'cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [ingress\_with\_ipv6\_cidr\_blocks](#input\_ingress\_with\_ipv6\_cidr\_blocks) | List of ingress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [ingress\_with\_prefix\_list\_ids](#input\_ingress\_with\_prefix\_list\_ids) | List of ingress rules to create where 'prefix\_list\_ids' is used | `list(map(string))` | `[]` | no | +| [ingress\_with\_cidr\_ipv4](#input\_ingress\_with\_cidr\_ipv4) | List of ingress rules to create where 'cidr\_ipv4' is used | `list(map(string))` | `[]` | no | +| [ingress\_with\_cidr\_ipv6](#input\_ingress\_with\_cidr\_ipv6) | List of ingress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | +| [ingress\_with\_prefix\_list\_id](#input\_ingress\_with\_prefix\_list\_id) | List of ingress rules to create where 'prefix\_list\_id' is used | `list(map(string))` | `[]` | no | +| [ingress\_with\_referenced\_security\_group\_id](#input\_ingress\_with\_referenced\_security\_group\_id) | List of ingress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [ingress\_with\_self](#input\_ingress\_with\_self) | List of ingress rules to create where 'self' is defined | `list(map(string))` | `[]` | no | -| [ingress\_with\_source\_security\_group\_id](#input\_ingress\_with\_source\_security\_group\_id) | List of ingress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [name](#input\_name) | Name of security group | `string` | n/a | yes | | [number\_of\_computed\_egress\_cidr\_blocks](#input\_number\_of\_computed\_egress\_cidr\_blocks) | Number of IPv4 CIDR ranges to use on all computed egress rules | `number` | `0` | no | | [number\_of\_computed\_egress\_ipv6\_cidr\_blocks](#input\_number\_of\_computed\_egress\_ipv6\_cidr\_blocks) | Number of IPv6 CIDR ranges to use on all computed egress rules | `number` | `0` | no | | [number\_of\_computed\_egress\_prefix\_list\_ids](#input\_number\_of\_computed\_egress\_prefix\_list\_ids) | Number of prefix list IDs (for allowing access to VPC endpoints) to use on all computed egress rules | `number` | `0` | no | | [number\_of\_computed\_egress\_rules](#input\_number\_of\_computed\_egress\_rules) | Number of computed egress rules to create by name | `number` | `0` | no | -| [number\_of\_computed\_egress\_with\_cidr\_blocks](#input\_number\_of\_computed\_egress\_with\_cidr\_blocks) | Number of computed egress rules to create where 'cidr\_blocks' is used | `number` | `0` | no | -| [number\_of\_computed\_egress\_with\_ipv6\_cidr\_blocks](#input\_number\_of\_computed\_egress\_with\_ipv6\_cidr\_blocks) | Number of computed egress rules to create where 'ipv6\_cidr\_blocks' is used | `number` | `0` | no | -| [number\_of\_computed\_egress\_with\_prefix\_list\_ids](#input\_number\_of\_computed\_egress\_with\_prefix\_list\_ids) | Number of computed egress rules to create where 'prefix\_list\_ids' is used | `number` | `0` | no | +| [number\_of\_computed\_egress\_with\_cidr\_ipv4](#input\_number\_of\_computed\_egress\_with\_cidr\_ipv4) | Number of computed egress rules to create where 'cidr\_ipv4' is used | `number` | `0` | no | +| [number\_of\_computed\_egress\_with\_cidr\_ipv6](#input\_number\_of\_computed\_egress\_with\_cidr\_ipv6) | Number of computed egress rules to create where 'ipv6\_cidr\_blocks' is used | `number` | `0` | no | +| [number\_of\_computed\_egress\_with\_prefix\_list\_id](#input\_number\_of\_computed\_egress\_with\_prefix\_list\_id) | Number of computed egress rules to create where 'prefix\_list\_id' is used | `number` | `0` | no | +| [number\_of\_computed\_egress\_with\_referenced\_security\_group\_id](#input\_number\_of\_computed\_egress\_with\_referenced\_security\_group\_id) | Number of computed egress rules to create where 'source\_security\_group\_id' is used | `number` | `0` | no | | [number\_of\_computed\_egress\_with\_self](#input\_number\_of\_computed\_egress\_with\_self) | Number of computed egress rules to create where 'self' is defined | `number` | `0` | no | -| [number\_of\_computed\_egress\_with\_source\_security\_group\_id](#input\_number\_of\_computed\_egress\_with\_source\_security\_group\_id) | Number of computed egress rules to create where 'source\_security\_group\_id' is used | `number` | `0` | no | | [number\_of\_computed\_ingress\_cidr\_blocks](#input\_number\_of\_computed\_ingress\_cidr\_blocks) | Number of IPv4 CIDR ranges to use on all computed ingress rules | `number` | `0` | no | | [number\_of\_computed\_ingress\_ipv6\_cidr\_blocks](#input\_number\_of\_computed\_ingress\_ipv6\_cidr\_blocks) | Number of IPv6 CIDR ranges to use on all computed ingress rules | `number` | `0` | no | | [number\_of\_computed\_ingress\_prefix\_list\_ids](#input\_number\_of\_computed\_ingress\_prefix\_list\_ids) | Number of prefix list IDs (for allowing access to VPC endpoints) to use on all computed ingress rules | `number` | `0` | no | | [number\_of\_computed\_ingress\_rules](#input\_number\_of\_computed\_ingress\_rules) | Number of computed ingress rules to create by name | `number` | `0` | no | -| [number\_of\_computed\_ingress\_with\_cidr\_blocks](#input\_number\_of\_computed\_ingress\_with\_cidr\_blocks) | Number of computed ingress rules to create where 'cidr\_blocks' is used | `number` | `0` | no | -| [number\_of\_computed\_ingress\_with\_ipv6\_cidr\_blocks](#input\_number\_of\_computed\_ingress\_with\_ipv6\_cidr\_blocks) | Number of computed ingress rules to create where 'ipv6\_cidr\_blocks' is used | `number` | `0` | no | -| [number\_of\_computed\_ingress\_with\_prefix\_list\_ids](#input\_number\_of\_computed\_ingress\_with\_prefix\_list\_ids) | Number of computed ingress rules to create where 'prefix\_list\_ids' is used | `number` | `0` | no | +| [number\_of\_computed\_ingress\_with\_cidr\_ipv4](#input\_number\_of\_computed\_ingress\_with\_cidr\_ipv4) | Number of computed ingress rules to create where 'cidr\_ipv4' is used | `number` | `0` | no | +| [number\_of\_computed\_ingress\_with\_cidr\_ipv6](#input\_number\_of\_computed\_ingress\_with\_cidr\_ipv6) | Number of computed ingress rules to create where 'ipv6\_cidr\_blocks' is used | `number` | `0` | no | +| [number\_of\_computed\_ingress\_with\_prefix\_list\_id](#input\_number\_of\_computed\_ingress\_with\_prefix\_list\_id) | Number of computed ingress rules to create where 'prefix\_list\_id' is used | `number` | `0` | no | +| [number\_of\_computed\_ingress\_with\_referenced\_security\_group\_id](#input\_number\_of\_computed\_ingress\_with\_referenced\_security\_group\_id) | Number of computed ingress rules to create where 'source\_security\_group\_id' is used | `number` | `0` | no | | [number\_of\_computed\_ingress\_with\_self](#input\_number\_of\_computed\_ingress\_with\_self) | Number of computed ingress rules to create where 'self' is defined | `number` | `0` | no | -| [number\_of\_computed\_ingress\_with\_source\_security\_group\_id](#input\_number\_of\_computed\_ingress\_with\_source\_security\_group\_id) | Number of computed ingress rules to create where 'source\_security\_group\_id' is used | `number` | `0` | no | | [revoke\_rules\_on\_delete](#input\_revoke\_rules\_on\_delete) | Instruct Terraform to revoke all of the Security Groups attached ingress and egress rules before deleting the rule itself. Enable for EMR. | `bool` | `false` | no | | [tags](#input\_tags) | A mapping of tags to assign to security group | `map(string)` | `{}` | no | | [use\_name\_prefix](#input\_use\_name\_prefix) | Whether to use name\_prefix or fixed name. Should be true to able to update security group name after initial creation | `bool` | `true` | no | diff --git a/modules/etcd/main.tf b/modules/etcd/main.tf index 80ea0adb..d2a1bf93 100644 --- a/modules/etcd/main.tf +++ b/modules/etcd/main.tf @@ -19,20 +19,20 @@ module "sg" { ingress_with_self = concat(var.auto_ingress_with_self, var.ingress_with_self) # Open to IPv4 cidr blocks - ingress_with_cidr_blocks = var.ingress_with_cidr_blocks + ingress_with_cidr_ipv4 = var.ingress_with_cidr_ipv4 # Open to IPv6 cidr blocks - ingress_with_ipv6_cidr_blocks = var.ingress_with_ipv6_cidr_blocks + ingress_with_cidr_ipv6 = var.ingress_with_cidr_ipv6 # Open for security group id - ingress_with_source_security_group_id = var.ingress_with_source_security_group_id + ingress_with_referenced_security_group_id = var.ingress_with_referenced_security_group_id # Open for prefix list id - ingress_with_prefix_list_ids = var.ingress_with_prefix_list_ids + ingress_with_prefix_list_id = var.ingress_with_prefix_list_id # Default ingress CIDR blocks - ingress_cidr_blocks = var.ingress_cidr_blocks - ingress_ipv6_cidr_blocks = var.ingress_ipv6_cidr_blocks + ingress_cidr_ipv4 = var.ingress_cidr_ipv4 + ingress_cidr_ipv6 = var.ingress_cidr_ipv6 # Default prefix list ids ingress_prefix_list_ids = var.ingress_prefix_list_ids @@ -47,26 +47,26 @@ module "sg" { computed_ingress_with_self = concat(var.auto_computed_ingress_with_self, var.computed_ingress_with_self) # Open to IPv4 cidr blocks - computed_ingress_with_cidr_blocks = var.computed_ingress_with_cidr_blocks + computed_ingress_with_cidr_ipv4 = var.computed_ingress_with_cidr_ipv4 # Open to IPv6 cidr blocks - computed_ingress_with_ipv6_cidr_blocks = var.computed_ingress_with_ipv6_cidr_blocks + computed_ingress_with_cidr_ipv6 = var.computed_ingress_with_cidr_ipv6 # Open for security group id - computed_ingress_with_source_security_group_id = var.computed_ingress_with_source_security_group_id + computed_ingress_with_referenced_security_group_id = var.computed_ingress_with_referenced_security_group_id # Open for prefix list id - computed_ingress_with_prefix_list_ids = var.computed_ingress_with_prefix_list_ids + computed_ingress_with_prefix_list_id = var.computed_ingress_with_prefix_list_id ############################# # Number of computed ingress ############################# - number_of_computed_ingress_rules = var.auto_number_of_computed_ingress_rules + var.number_of_computed_ingress_rules - number_of_computed_ingress_with_self = var.auto_number_of_computed_ingress_with_self + var.number_of_computed_ingress_with_self - number_of_computed_ingress_with_cidr_blocks = var.number_of_computed_ingress_with_cidr_blocks - number_of_computed_ingress_with_ipv6_cidr_blocks = var.number_of_computed_ingress_with_ipv6_cidr_blocks - number_of_computed_ingress_with_source_security_group_id = var.number_of_computed_ingress_with_source_security_group_id - number_of_computed_ingress_with_prefix_list_ids = var.number_of_computed_ingress_with_prefix_list_ids + number_of_computed_ingress_rules = var.auto_number_of_computed_ingress_rules + var.number_of_computed_ingress_rules + number_of_computed_ingress_with_self = var.auto_number_of_computed_ingress_with_self + var.number_of_computed_ingress_with_self + number_of_computed_ingress_with_cidr_ipv4 = var.number_of_computed_ingress_with_cidr_ipv4 + number_of_computed_ingress_with_cidr_ipv6 = var.number_of_computed_ingress_with_cidr_ipv6 + number_of_computed_ingress_with_referenced_security_group_id = var.number_of_computed_ingress_with_referenced_security_group_id + number_of_computed_ingress_with_prefix_list_id = var.number_of_computed_ingress_with_prefix_list_id ######### # Egress @@ -78,20 +78,20 @@ module "sg" { egress_with_self = concat(var.auto_egress_with_self, var.egress_with_self) # Open to IPv4 cidr blocks - egress_with_cidr_blocks = var.egress_with_cidr_blocks + egress_with_cidr_ipv4 = var.egress_with_cidr_ipv4 # Open to IPv6 cidr blocks - egress_with_ipv6_cidr_blocks = var.egress_with_ipv6_cidr_blocks + egress_with_cidr_ipv6 = var.egress_with_cidr_ipv6 # Open for security group id - egress_with_source_security_group_id = var.egress_with_source_security_group_id + egress_with_referenced_security_group_id = var.egress_with_referenced_security_group_id # Open for prefix list id - egress_with_prefix_list_ids = var.egress_with_prefix_list_ids + egress_with_prefix_list_id = var.egress_with_prefix_list_id # Default egress CIDR blocks - egress_cidr_blocks = var.egress_cidr_blocks - egress_ipv6_cidr_blocks = var.egress_ipv6_cidr_blocks + egress_cidr_ipv4 = var.egress_cidr_ipv4 + egress_cidr_ipv6 = var.egress_cidr_ipv6 # Default prefix list ids egress_prefix_list_ids = var.egress_prefix_list_ids @@ -106,24 +106,24 @@ module "sg" { computed_egress_with_self = concat(var.auto_computed_egress_with_self, var.computed_egress_with_self) # Open to IPv4 cidr blocks - computed_egress_with_cidr_blocks = var.computed_egress_with_cidr_blocks + computed_egress_with_cidr_ipv4 = var.computed_egress_with_cidr_ipv4 # Open to IPv6 cidr blocks - computed_egress_with_ipv6_cidr_blocks = var.computed_egress_with_ipv6_cidr_blocks + computed_egress_with_cidr_ipv6 = var.computed_egress_with_cidr_ipv6 # Open for security group id - computed_egress_with_source_security_group_id = var.computed_egress_with_source_security_group_id + computed_egress_with_referenced_security_group_id = var.computed_egress_with_referenced_security_group_id # Open for prefix list id - computed_egress_with_prefix_list_ids = var.computed_egress_with_prefix_list_ids + computed_egress_with_prefix_list_id = var.computed_egress_with_prefix_list_id ############################# # Number of computed egress ############################# - number_of_computed_egress_rules = var.auto_number_of_computed_egress_rules + var.number_of_computed_egress_rules - number_of_computed_egress_with_self = var.auto_number_of_computed_egress_with_self + var.number_of_computed_egress_with_self - number_of_computed_egress_with_cidr_blocks = var.number_of_computed_egress_with_cidr_blocks - number_of_computed_egress_with_ipv6_cidr_blocks = var.number_of_computed_egress_with_ipv6_cidr_blocks - number_of_computed_egress_with_source_security_group_id = var.number_of_computed_egress_with_source_security_group_id - number_of_computed_egress_with_prefix_list_ids = var.number_of_computed_egress_with_prefix_list_ids + number_of_computed_egress_rules = var.auto_number_of_computed_egress_rules + var.number_of_computed_egress_rules + number_of_computed_egress_with_self = var.auto_number_of_computed_egress_with_self + var.number_of_computed_egress_with_self + number_of_computed_egress_with_cidr_ipv4 = var.number_of_computed_egress_with_cidr_ipv4 + number_of_computed_egress_with_cidr_ipv6 = var.number_of_computed_egress_with_cidr_ipv6 + number_of_computed_egress_with_referenced_security_group_id = var.number_of_computed_egress_with_referenced_security_group_id + number_of_computed_egress_with_prefix_list_id = var.number_of_computed_egress_with_prefix_list_id } diff --git a/modules/etcd/variables.tf b/modules/etcd/variables.tf index 60c8c27b..6590c9e3 100644 --- a/modules/etcd/variables.tf +++ b/modules/etcd/variables.tf @@ -56,37 +56,37 @@ variable "ingress_with_self" { default = [] } -variable "ingress_with_cidr_blocks" { - description = "List of ingress rules to create where 'cidr_blocks' is used" +variable "ingress_with_cidr_ipv4" { + description = "List of ingress rules to create where 'cidr_ipv4' is used" type = list(map(string)) default = [] } -variable "ingress_with_ipv6_cidr_blocks" { +variable "ingress_with_cidr_ipv6" { description = "List of ingress rules to create where 'ipv6_cidr_blocks' is used" type = list(map(string)) default = [] } -variable "ingress_with_source_security_group_id" { +variable "ingress_with_referenced_security_group_id" { description = "List of ingress rules to create where 'source_security_group_id' is used" type = list(map(string)) default = [] } -variable "ingress_with_prefix_list_ids" { - description = "List of ingress rules to create where 'prefix_list_ids' is used" +variable "ingress_with_prefix_list_id" { + description = "List of ingress rules to create where 'prefix_list_id' is used" type = list(map(string)) default = [] } -variable "ingress_cidr_blocks" { +variable "ingress_cidr_ipv4" { description = "List of IPv4 CIDR ranges to use on all ingress rules" type = list(string) default = [] } -variable "ingress_ipv6_cidr_blocks" { +variable "ingress_cidr_ipv6" { description = "List of IPv6 CIDR ranges to use on all ingress rules" type = list(string) default = [] @@ -113,26 +113,26 @@ variable "computed_ingress_with_self" { default = [] } -variable "computed_ingress_with_cidr_blocks" { - description = "List of computed ingress rules to create where 'cidr_blocks' is used" +variable "computed_ingress_with_cidr_ipv4" { + description = "List of computed ingress rules to create where 'cidr_ipv4' is used" type = list(map(string)) default = [] } -variable "computed_ingress_with_ipv6_cidr_blocks" { +variable "computed_ingress_with_cidr_ipv6" { description = "List of computed ingress rules to create where 'ipv6_cidr_blocks' is used" type = list(map(string)) default = [] } -variable "computed_ingress_with_source_security_group_id" { +variable "computed_ingress_with_referenced_security_group_id" { description = "List of computed ingress rules to create where 'source_security_group_id' is used" type = list(map(string)) default = [] } -variable "computed_ingress_with_prefix_list_ids" { - description = "List of computed ingress rules to create where 'prefix_list_ids' is used" +variable "computed_ingress_with_prefix_list_id" { + description = "List of computed ingress rules to create where 'prefix_list_id' is used" type = list(map(string)) default = [] } @@ -170,26 +170,26 @@ variable "number_of_computed_ingress_with_self" { default = 0 } -variable "number_of_computed_ingress_with_cidr_blocks" { - description = "Number of computed ingress rules to create where 'cidr_blocks' is used" +variable "number_of_computed_ingress_with_cidr_ipv4" { + description = "Number of computed ingress rules to create where 'cidr_ipv4' is used" type = number default = 0 } -variable "number_of_computed_ingress_with_ipv6_cidr_blocks" { +variable "number_of_computed_ingress_with_cidr_ipv6" { description = "Number of computed ingress rules to create where 'ipv6_cidr_blocks' is used" type = number default = 0 } -variable "number_of_computed_ingress_with_source_security_group_id" { +variable "number_of_computed_ingress_with_referenced_security_group_id" { description = "Number of computed ingress rules to create where 'source_security_group_id' is used" type = number default = 0 } -variable "number_of_computed_ingress_with_prefix_list_ids" { - description = "Number of computed ingress rules to create where 'prefix_list_ids' is used" +variable "number_of_computed_ingress_with_prefix_list_id" { + description = "Number of computed ingress rules to create where 'prefix_list_id' is used" type = number default = 0 } @@ -227,37 +227,37 @@ variable "egress_with_self" { default = [] } -variable "egress_with_cidr_blocks" { - description = "List of egress rules to create where 'cidr_blocks' is used" +variable "egress_with_cidr_ipv4" { + description = "List of egress rules to create where 'cidr_ipv4' is used" type = list(map(string)) default = [] } -variable "egress_with_ipv6_cidr_blocks" { +variable "egress_with_cidr_ipv6" { description = "List of egress rules to create where 'ipv6_cidr_blocks' is used" type = list(map(string)) default = [] } -variable "egress_with_source_security_group_id" { +variable "egress_with_referenced_security_group_id" { description = "List of egress rules to create where 'source_security_group_id' is used" type = list(map(string)) default = [] } -variable "egress_with_prefix_list_ids" { - description = "List of egress rules to create where 'prefix_list_ids' is used" +variable "egress_with_prefix_list_id" { + description = "List of egress rules to create where 'prefix_list_id' is used" type = list(map(string)) default = [] } -variable "egress_cidr_blocks" { +variable "egress_cidr_ipv4" { description = "List of IPv4 CIDR ranges to use on all egress rules" type = list(string) default = ["0.0.0.0/0"] } -variable "egress_ipv6_cidr_blocks" { +variable "egress_cidr_ipv6" { description = "List of IPv6 CIDR ranges to use on all egress rules" type = list(string) default = ["::/0"] @@ -284,26 +284,26 @@ variable "computed_egress_with_self" { default = [] } -variable "computed_egress_with_cidr_blocks" { - description = "List of computed egress rules to create where 'cidr_blocks' is used" +variable "computed_egress_with_cidr_ipv4" { + description = "List of computed egress rules to create where 'cidr_ipv4' is used" type = list(map(string)) default = [] } -variable "computed_egress_with_ipv6_cidr_blocks" { +variable "computed_egress_with_cidr_ipv6" { description = "List of computed egress rules to create where 'ipv6_cidr_blocks' is used" type = list(map(string)) default = [] } -variable "computed_egress_with_source_security_group_id" { +variable "computed_egress_with_referenced_security_group_id" { description = "List of computed egress rules to create where 'source_security_group_id' is used" type = list(map(string)) default = [] } -variable "computed_egress_with_prefix_list_ids" { - description = "List of computed egress rules to create where 'prefix_list_ids' is used" +variable "computed_egress_with_prefix_list_id" { + description = "List of computed egress rules to create where 'prefix_list_id' is used" type = list(map(string)) default = [] } @@ -341,26 +341,26 @@ variable "number_of_computed_egress_with_self" { default = 0 } -variable "number_of_computed_egress_with_cidr_blocks" { - description = "Number of computed egress rules to create where 'cidr_blocks' is used" +variable "number_of_computed_egress_with_cidr_ipv4" { + description = "Number of computed egress rules to create where 'cidr_ipv4' is used" type = number default = 0 } -variable "number_of_computed_egress_with_ipv6_cidr_blocks" { +variable "number_of_computed_egress_with_cidr_ipv6" { description = "Number of computed egress rules to create where 'ipv6_cidr_blocks' is used" type = number default = 0 } -variable "number_of_computed_egress_with_source_security_group_id" { +variable "number_of_computed_egress_with_referenced_security_group_id" { description = "Number of computed egress rules to create where 'source_security_group_id' is used" type = number default = 0 } -variable "number_of_computed_egress_with_prefix_list_ids" { - description = "Number of computed egress rules to create where 'prefix_list_ids' is used" +variable "number_of_computed_egress_with_prefix_list_id" { + description = "Number of computed egress rules to create where 'prefix_list_id' is used" type = number default = 0 } diff --git a/modules/grafana/README.md b/modules/grafana/README.md index 678acb49..eff3cdc1 100644 --- a/modules/grafana/README.md +++ b/modules/grafana/README.md @@ -55,59 +55,59 @@ No resources. | [computed\_egress\_ipv6\_cidr\_blocks](#input\_computed\_egress\_ipv6\_cidr\_blocks) | List of IPv6 CIDR ranges to use on all computed egress rules | `list(string)` |
[
"::/0"
]
| no | | [computed\_egress\_prefix\_list\_ids](#input\_computed\_egress\_prefix\_list\_ids) | List of prefix list IDs (for allowing access to VPC endpoints) to use on all computed egress rules | `list(string)` | `[]` | no | | [computed\_egress\_rules](#input\_computed\_egress\_rules) | List of computed egress rules to create by name | `list(string)` | `[]` | no | -| [computed\_egress\_with\_cidr\_blocks](#input\_computed\_egress\_with\_cidr\_blocks) | List of computed egress rules to create where 'cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [computed\_egress\_with\_ipv6\_cidr\_blocks](#input\_computed\_egress\_with\_ipv6\_cidr\_blocks) | List of computed egress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [computed\_egress\_with\_prefix\_list\_ids](#input\_computed\_egress\_with\_prefix\_list\_ids) | List of computed egress rules to create where 'prefix\_list\_ids' is used | `list(map(string))` | `[]` | no | +| [computed\_egress\_with\_cidr\_ipv4](#input\_computed\_egress\_with\_cidr\_ipv4) | List of computed egress rules to create where 'cidr\_ipv4' is used | `list(map(string))` | `[]` | no | +| [computed\_egress\_with\_cidr\_ipv6](#input\_computed\_egress\_with\_cidr\_ipv6) | List of computed egress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | +| [computed\_egress\_with\_prefix\_list\_id](#input\_computed\_egress\_with\_prefix\_list\_id) | List of computed egress rules to create where 'prefix\_list\_id' is used | `list(map(string))` | `[]` | no | +| [computed\_egress\_with\_referenced\_security\_group\_id](#input\_computed\_egress\_with\_referenced\_security\_group\_id) | List of computed egress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [computed\_egress\_with\_self](#input\_computed\_egress\_with\_self) | List of computed egress rules to create where 'self' is defined | `list(map(string))` | `[]` | no | -| [computed\_egress\_with\_source\_security\_group\_id](#input\_computed\_egress\_with\_source\_security\_group\_id) | List of computed egress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [computed\_ingress\_cidr\_blocks](#input\_computed\_ingress\_cidr\_blocks) | List of IPv4 CIDR ranges to use on all computed ingress rules | `list(string)` | `[]` | no | | [computed\_ingress\_ipv6\_cidr\_blocks](#input\_computed\_ingress\_ipv6\_cidr\_blocks) | List of IPv6 CIDR ranges to use on all computed ingress rules | `list(string)` | `[]` | no | | [computed\_ingress\_prefix\_list\_ids](#input\_computed\_ingress\_prefix\_list\_ids) | List of prefix list IDs (for allowing access to VPC endpoints) to use on all computed ingress rules | `list(string)` | `[]` | no | | [computed\_ingress\_rules](#input\_computed\_ingress\_rules) | List of computed ingress rules to create by name | `list(string)` | `[]` | no | -| [computed\_ingress\_with\_cidr\_blocks](#input\_computed\_ingress\_with\_cidr\_blocks) | List of computed ingress rules to create where 'cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [computed\_ingress\_with\_ipv6\_cidr\_blocks](#input\_computed\_ingress\_with\_ipv6\_cidr\_blocks) | List of computed ingress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [computed\_ingress\_with\_prefix\_list\_ids](#input\_computed\_ingress\_with\_prefix\_list\_ids) | List of computed ingress rules to create where 'prefix\_list\_ids' is used | `list(map(string))` | `[]` | no | +| [computed\_ingress\_with\_cidr\_ipv4](#input\_computed\_ingress\_with\_cidr\_ipv4) | List of computed ingress rules to create where 'cidr\_ipv4' is used | `list(map(string))` | `[]` | no | +| [computed\_ingress\_with\_cidr\_ipv6](#input\_computed\_ingress\_with\_cidr\_ipv6) | List of computed ingress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | +| [computed\_ingress\_with\_prefix\_list\_id](#input\_computed\_ingress\_with\_prefix\_list\_id) | List of computed ingress rules to create where 'prefix\_list\_id' is used | `list(map(string))` | `[]` | no | +| [computed\_ingress\_with\_referenced\_security\_group\_id](#input\_computed\_ingress\_with\_referenced\_security\_group\_id) | List of computed ingress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [computed\_ingress\_with\_self](#input\_computed\_ingress\_with\_self) | List of computed ingress rules to create where 'self' is defined | `list(map(string))` | `[]` | no | -| [computed\_ingress\_with\_source\_security\_group\_id](#input\_computed\_ingress\_with\_source\_security\_group\_id) | List of computed ingress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [create](#input\_create) | Whether to create security group and all rules | `bool` | `true` | no | | [description](#input\_description) | Description of security group | `string` | `"Security Group managed by Terraform"` | no | -| [egress\_cidr\_blocks](#input\_egress\_cidr\_blocks) | List of IPv4 CIDR ranges to use on all egress rules | `list(string)` |
[
"0.0.0.0/0"
]
| no | -| [egress\_ipv6\_cidr\_blocks](#input\_egress\_ipv6\_cidr\_blocks) | List of IPv6 CIDR ranges to use on all egress rules | `list(string)` |
[
"::/0"
]
| no | +| [egress\_cidr\_ipv4](#input\_egress\_cidr\_ipv4) | List of IPv4 CIDR ranges to use on all egress rules | `list(string)` |
[
"0.0.0.0/0"
]
| no | +| [egress\_cidr\_ipv6](#input\_egress\_cidr\_ipv6) | List of IPv6 CIDR ranges to use on all egress rules | `list(string)` |
[
"::/0"
]
| no | | [egress\_prefix\_list\_ids](#input\_egress\_prefix\_list\_ids) | List of prefix list IDs (for allowing access to VPC endpoints) to use on all egress rules | `list(string)` | `[]` | no | | [egress\_rules](#input\_egress\_rules) | List of egress rules to create by name | `list(string)` | `[]` | no | -| [egress\_with\_cidr\_blocks](#input\_egress\_with\_cidr\_blocks) | List of egress rules to create where 'cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [egress\_with\_ipv6\_cidr\_blocks](#input\_egress\_with\_ipv6\_cidr\_blocks) | List of egress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [egress\_with\_prefix\_list\_ids](#input\_egress\_with\_prefix\_list\_ids) | List of egress rules to create where 'prefix\_list\_ids' is used | `list(map(string))` | `[]` | no | +| [egress\_with\_cidr\_ipv4](#input\_egress\_with\_cidr\_ipv4) | List of egress rules to create where 'cidr\_ipv4' is used | `list(map(string))` | `[]` | no | +| [egress\_with\_cidr\_ipv6](#input\_egress\_with\_cidr\_ipv6) | List of egress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | +| [egress\_with\_prefix\_list\_id](#input\_egress\_with\_prefix\_list\_id) | List of egress rules to create where 'prefix\_list\_id' is used | `list(map(string))` | `[]` | no | +| [egress\_with\_referenced\_security\_group\_id](#input\_egress\_with\_referenced\_security\_group\_id) | List of egress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [egress\_with\_self](#input\_egress\_with\_self) | List of egress rules to create where 'self' is defined | `list(map(string))` | `[]` | no | -| [egress\_with\_source\_security\_group\_id](#input\_egress\_with\_source\_security\_group\_id) | List of egress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | -| [ingress\_cidr\_blocks](#input\_ingress\_cidr\_blocks) | List of IPv4 CIDR ranges to use on all ingress rules | `list(string)` | `[]` | no | -| [ingress\_ipv6\_cidr\_blocks](#input\_ingress\_ipv6\_cidr\_blocks) | List of IPv6 CIDR ranges to use on all ingress rules | `list(string)` | `[]` | no | +| [ingress\_cidr\_ipv4](#input\_ingress\_cidr\_ipv4) | List of IPv4 CIDR ranges to use on all ingress rules | `list(string)` | `[]` | no | +| [ingress\_cidr\_ipv6](#input\_ingress\_cidr\_ipv6) | List of IPv6 CIDR ranges to use on all ingress rules | `list(string)` | `[]` | no | | [ingress\_prefix\_list\_ids](#input\_ingress\_prefix\_list\_ids) | List of prefix list IDs (for allowing access to VPC endpoints) to use on all ingress rules | `list(string)` | `[]` | no | | [ingress\_rules](#input\_ingress\_rules) | List of ingress rules to create by name | `list(string)` | `[]` | no | -| [ingress\_with\_cidr\_blocks](#input\_ingress\_with\_cidr\_blocks) | List of ingress rules to create where 'cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [ingress\_with\_ipv6\_cidr\_blocks](#input\_ingress\_with\_ipv6\_cidr\_blocks) | List of ingress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [ingress\_with\_prefix\_list\_ids](#input\_ingress\_with\_prefix\_list\_ids) | List of ingress rules to create where 'prefix\_list\_ids' is used | `list(map(string))` | `[]` | no | +| [ingress\_with\_cidr\_ipv4](#input\_ingress\_with\_cidr\_ipv4) | List of ingress rules to create where 'cidr\_ipv4' is used | `list(map(string))` | `[]` | no | +| [ingress\_with\_cidr\_ipv6](#input\_ingress\_with\_cidr\_ipv6) | List of ingress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | +| [ingress\_with\_prefix\_list\_id](#input\_ingress\_with\_prefix\_list\_id) | List of ingress rules to create where 'prefix\_list\_id' is used | `list(map(string))` | `[]` | no | +| [ingress\_with\_referenced\_security\_group\_id](#input\_ingress\_with\_referenced\_security\_group\_id) | List of ingress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [ingress\_with\_self](#input\_ingress\_with\_self) | List of ingress rules to create where 'self' is defined | `list(map(string))` | `[]` | no | -| [ingress\_with\_source\_security\_group\_id](#input\_ingress\_with\_source\_security\_group\_id) | List of ingress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [name](#input\_name) | Name of security group | `string` | n/a | yes | | [number\_of\_computed\_egress\_cidr\_blocks](#input\_number\_of\_computed\_egress\_cidr\_blocks) | Number of IPv4 CIDR ranges to use on all computed egress rules | `number` | `0` | no | | [number\_of\_computed\_egress\_ipv6\_cidr\_blocks](#input\_number\_of\_computed\_egress\_ipv6\_cidr\_blocks) | Number of IPv6 CIDR ranges to use on all computed egress rules | `number` | `0` | no | | [number\_of\_computed\_egress\_prefix\_list\_ids](#input\_number\_of\_computed\_egress\_prefix\_list\_ids) | Number of prefix list IDs (for allowing access to VPC endpoints) to use on all computed egress rules | `number` | `0` | no | | [number\_of\_computed\_egress\_rules](#input\_number\_of\_computed\_egress\_rules) | Number of computed egress rules to create by name | `number` | `0` | no | -| [number\_of\_computed\_egress\_with\_cidr\_blocks](#input\_number\_of\_computed\_egress\_with\_cidr\_blocks) | Number of computed egress rules to create where 'cidr\_blocks' is used | `number` | `0` | no | -| [number\_of\_computed\_egress\_with\_ipv6\_cidr\_blocks](#input\_number\_of\_computed\_egress\_with\_ipv6\_cidr\_blocks) | Number of computed egress rules to create where 'ipv6\_cidr\_blocks' is used | `number` | `0` | no | -| [number\_of\_computed\_egress\_with\_prefix\_list\_ids](#input\_number\_of\_computed\_egress\_with\_prefix\_list\_ids) | Number of computed egress rules to create where 'prefix\_list\_ids' is used | `number` | `0` | no | +| [number\_of\_computed\_egress\_with\_cidr\_ipv4](#input\_number\_of\_computed\_egress\_with\_cidr\_ipv4) | Number of computed egress rules to create where 'cidr\_ipv4' is used | `number` | `0` | no | +| [number\_of\_computed\_egress\_with\_cidr\_ipv6](#input\_number\_of\_computed\_egress\_with\_cidr\_ipv6) | Number of computed egress rules to create where 'ipv6\_cidr\_blocks' is used | `number` | `0` | no | +| [number\_of\_computed\_egress\_with\_prefix\_list\_id](#input\_number\_of\_computed\_egress\_with\_prefix\_list\_id) | Number of computed egress rules to create where 'prefix\_list\_id' is used | `number` | `0` | no | +| [number\_of\_computed\_egress\_with\_referenced\_security\_group\_id](#input\_number\_of\_computed\_egress\_with\_referenced\_security\_group\_id) | Number of computed egress rules to create where 'source\_security\_group\_id' is used | `number` | `0` | no | | [number\_of\_computed\_egress\_with\_self](#input\_number\_of\_computed\_egress\_with\_self) | Number of computed egress rules to create where 'self' is defined | `number` | `0` | no | -| [number\_of\_computed\_egress\_with\_source\_security\_group\_id](#input\_number\_of\_computed\_egress\_with\_source\_security\_group\_id) | Number of computed egress rules to create where 'source\_security\_group\_id' is used | `number` | `0` | no | | [number\_of\_computed\_ingress\_cidr\_blocks](#input\_number\_of\_computed\_ingress\_cidr\_blocks) | Number of IPv4 CIDR ranges to use on all computed ingress rules | `number` | `0` | no | | [number\_of\_computed\_ingress\_ipv6\_cidr\_blocks](#input\_number\_of\_computed\_ingress\_ipv6\_cidr\_blocks) | Number of IPv6 CIDR ranges to use on all computed ingress rules | `number` | `0` | no | | [number\_of\_computed\_ingress\_prefix\_list\_ids](#input\_number\_of\_computed\_ingress\_prefix\_list\_ids) | Number of prefix list IDs (for allowing access to VPC endpoints) to use on all computed ingress rules | `number` | `0` | no | | [number\_of\_computed\_ingress\_rules](#input\_number\_of\_computed\_ingress\_rules) | Number of computed ingress rules to create by name | `number` | `0` | no | -| [number\_of\_computed\_ingress\_with\_cidr\_blocks](#input\_number\_of\_computed\_ingress\_with\_cidr\_blocks) | Number of computed ingress rules to create where 'cidr\_blocks' is used | `number` | `0` | no | -| [number\_of\_computed\_ingress\_with\_ipv6\_cidr\_blocks](#input\_number\_of\_computed\_ingress\_with\_ipv6\_cidr\_blocks) | Number of computed ingress rules to create where 'ipv6\_cidr\_blocks' is used | `number` | `0` | no | -| [number\_of\_computed\_ingress\_with\_prefix\_list\_ids](#input\_number\_of\_computed\_ingress\_with\_prefix\_list\_ids) | Number of computed ingress rules to create where 'prefix\_list\_ids' is used | `number` | `0` | no | +| [number\_of\_computed\_ingress\_with\_cidr\_ipv4](#input\_number\_of\_computed\_ingress\_with\_cidr\_ipv4) | Number of computed ingress rules to create where 'cidr\_ipv4' is used | `number` | `0` | no | +| [number\_of\_computed\_ingress\_with\_cidr\_ipv6](#input\_number\_of\_computed\_ingress\_with\_cidr\_ipv6) | Number of computed ingress rules to create where 'ipv6\_cidr\_blocks' is used | `number` | `0` | no | +| [number\_of\_computed\_ingress\_with\_prefix\_list\_id](#input\_number\_of\_computed\_ingress\_with\_prefix\_list\_id) | Number of computed ingress rules to create where 'prefix\_list\_id' is used | `number` | `0` | no | +| [number\_of\_computed\_ingress\_with\_referenced\_security\_group\_id](#input\_number\_of\_computed\_ingress\_with\_referenced\_security\_group\_id) | Number of computed ingress rules to create where 'source\_security\_group\_id' is used | `number` | `0` | no | | [number\_of\_computed\_ingress\_with\_self](#input\_number\_of\_computed\_ingress\_with\_self) | Number of computed ingress rules to create where 'self' is defined | `number` | `0` | no | -| [number\_of\_computed\_ingress\_with\_source\_security\_group\_id](#input\_number\_of\_computed\_ingress\_with\_source\_security\_group\_id) | Number of computed ingress rules to create where 'source\_security\_group\_id' is used | `number` | `0` | no | | [revoke\_rules\_on\_delete](#input\_revoke\_rules\_on\_delete) | Instruct Terraform to revoke all of the Security Groups attached ingress and egress rules before deleting the rule itself. Enable for EMR. | `bool` | `false` | no | | [tags](#input\_tags) | A mapping of tags to assign to security group | `map(string)` | `{}` | no | | [use\_name\_prefix](#input\_use\_name\_prefix) | Whether to use name\_prefix or fixed name. Should be true to able to update security group name after initial creation | `bool` | `true` | no | diff --git a/modules/grafana/main.tf b/modules/grafana/main.tf index 80ea0adb..d2a1bf93 100644 --- a/modules/grafana/main.tf +++ b/modules/grafana/main.tf @@ -19,20 +19,20 @@ module "sg" { ingress_with_self = concat(var.auto_ingress_with_self, var.ingress_with_self) # Open to IPv4 cidr blocks - ingress_with_cidr_blocks = var.ingress_with_cidr_blocks + ingress_with_cidr_ipv4 = var.ingress_with_cidr_ipv4 # Open to IPv6 cidr blocks - ingress_with_ipv6_cidr_blocks = var.ingress_with_ipv6_cidr_blocks + ingress_with_cidr_ipv6 = var.ingress_with_cidr_ipv6 # Open for security group id - ingress_with_source_security_group_id = var.ingress_with_source_security_group_id + ingress_with_referenced_security_group_id = var.ingress_with_referenced_security_group_id # Open for prefix list id - ingress_with_prefix_list_ids = var.ingress_with_prefix_list_ids + ingress_with_prefix_list_id = var.ingress_with_prefix_list_id # Default ingress CIDR blocks - ingress_cidr_blocks = var.ingress_cidr_blocks - ingress_ipv6_cidr_blocks = var.ingress_ipv6_cidr_blocks + ingress_cidr_ipv4 = var.ingress_cidr_ipv4 + ingress_cidr_ipv6 = var.ingress_cidr_ipv6 # Default prefix list ids ingress_prefix_list_ids = var.ingress_prefix_list_ids @@ -47,26 +47,26 @@ module "sg" { computed_ingress_with_self = concat(var.auto_computed_ingress_with_self, var.computed_ingress_with_self) # Open to IPv4 cidr blocks - computed_ingress_with_cidr_blocks = var.computed_ingress_with_cidr_blocks + computed_ingress_with_cidr_ipv4 = var.computed_ingress_with_cidr_ipv4 # Open to IPv6 cidr blocks - computed_ingress_with_ipv6_cidr_blocks = var.computed_ingress_with_ipv6_cidr_blocks + computed_ingress_with_cidr_ipv6 = var.computed_ingress_with_cidr_ipv6 # Open for security group id - computed_ingress_with_source_security_group_id = var.computed_ingress_with_source_security_group_id + computed_ingress_with_referenced_security_group_id = var.computed_ingress_with_referenced_security_group_id # Open for prefix list id - computed_ingress_with_prefix_list_ids = var.computed_ingress_with_prefix_list_ids + computed_ingress_with_prefix_list_id = var.computed_ingress_with_prefix_list_id ############################# # Number of computed ingress ############################# - number_of_computed_ingress_rules = var.auto_number_of_computed_ingress_rules + var.number_of_computed_ingress_rules - number_of_computed_ingress_with_self = var.auto_number_of_computed_ingress_with_self + var.number_of_computed_ingress_with_self - number_of_computed_ingress_with_cidr_blocks = var.number_of_computed_ingress_with_cidr_blocks - number_of_computed_ingress_with_ipv6_cidr_blocks = var.number_of_computed_ingress_with_ipv6_cidr_blocks - number_of_computed_ingress_with_source_security_group_id = var.number_of_computed_ingress_with_source_security_group_id - number_of_computed_ingress_with_prefix_list_ids = var.number_of_computed_ingress_with_prefix_list_ids + number_of_computed_ingress_rules = var.auto_number_of_computed_ingress_rules + var.number_of_computed_ingress_rules + number_of_computed_ingress_with_self = var.auto_number_of_computed_ingress_with_self + var.number_of_computed_ingress_with_self + number_of_computed_ingress_with_cidr_ipv4 = var.number_of_computed_ingress_with_cidr_ipv4 + number_of_computed_ingress_with_cidr_ipv6 = var.number_of_computed_ingress_with_cidr_ipv6 + number_of_computed_ingress_with_referenced_security_group_id = var.number_of_computed_ingress_with_referenced_security_group_id + number_of_computed_ingress_with_prefix_list_id = var.number_of_computed_ingress_with_prefix_list_id ######### # Egress @@ -78,20 +78,20 @@ module "sg" { egress_with_self = concat(var.auto_egress_with_self, var.egress_with_self) # Open to IPv4 cidr blocks - egress_with_cidr_blocks = var.egress_with_cidr_blocks + egress_with_cidr_ipv4 = var.egress_with_cidr_ipv4 # Open to IPv6 cidr blocks - egress_with_ipv6_cidr_blocks = var.egress_with_ipv6_cidr_blocks + egress_with_cidr_ipv6 = var.egress_with_cidr_ipv6 # Open for security group id - egress_with_source_security_group_id = var.egress_with_source_security_group_id + egress_with_referenced_security_group_id = var.egress_with_referenced_security_group_id # Open for prefix list id - egress_with_prefix_list_ids = var.egress_with_prefix_list_ids + egress_with_prefix_list_id = var.egress_with_prefix_list_id # Default egress CIDR blocks - egress_cidr_blocks = var.egress_cidr_blocks - egress_ipv6_cidr_blocks = var.egress_ipv6_cidr_blocks + egress_cidr_ipv4 = var.egress_cidr_ipv4 + egress_cidr_ipv6 = var.egress_cidr_ipv6 # Default prefix list ids egress_prefix_list_ids = var.egress_prefix_list_ids @@ -106,24 +106,24 @@ module "sg" { computed_egress_with_self = concat(var.auto_computed_egress_with_self, var.computed_egress_with_self) # Open to IPv4 cidr blocks - computed_egress_with_cidr_blocks = var.computed_egress_with_cidr_blocks + computed_egress_with_cidr_ipv4 = var.computed_egress_with_cidr_ipv4 # Open to IPv6 cidr blocks - computed_egress_with_ipv6_cidr_blocks = var.computed_egress_with_ipv6_cidr_blocks + computed_egress_with_cidr_ipv6 = var.computed_egress_with_cidr_ipv6 # Open for security group id - computed_egress_with_source_security_group_id = var.computed_egress_with_source_security_group_id + computed_egress_with_referenced_security_group_id = var.computed_egress_with_referenced_security_group_id # Open for prefix list id - computed_egress_with_prefix_list_ids = var.computed_egress_with_prefix_list_ids + computed_egress_with_prefix_list_id = var.computed_egress_with_prefix_list_id ############################# # Number of computed egress ############################# - number_of_computed_egress_rules = var.auto_number_of_computed_egress_rules + var.number_of_computed_egress_rules - number_of_computed_egress_with_self = var.auto_number_of_computed_egress_with_self + var.number_of_computed_egress_with_self - number_of_computed_egress_with_cidr_blocks = var.number_of_computed_egress_with_cidr_blocks - number_of_computed_egress_with_ipv6_cidr_blocks = var.number_of_computed_egress_with_ipv6_cidr_blocks - number_of_computed_egress_with_source_security_group_id = var.number_of_computed_egress_with_source_security_group_id - number_of_computed_egress_with_prefix_list_ids = var.number_of_computed_egress_with_prefix_list_ids + number_of_computed_egress_rules = var.auto_number_of_computed_egress_rules + var.number_of_computed_egress_rules + number_of_computed_egress_with_self = var.auto_number_of_computed_egress_with_self + var.number_of_computed_egress_with_self + number_of_computed_egress_with_cidr_ipv4 = var.number_of_computed_egress_with_cidr_ipv4 + number_of_computed_egress_with_cidr_ipv6 = var.number_of_computed_egress_with_cidr_ipv6 + number_of_computed_egress_with_referenced_security_group_id = var.number_of_computed_egress_with_referenced_security_group_id + number_of_computed_egress_with_prefix_list_id = var.number_of_computed_egress_with_prefix_list_id } diff --git a/modules/grafana/variables.tf b/modules/grafana/variables.tf index 60c8c27b..6590c9e3 100644 --- a/modules/grafana/variables.tf +++ b/modules/grafana/variables.tf @@ -56,37 +56,37 @@ variable "ingress_with_self" { default = [] } -variable "ingress_with_cidr_blocks" { - description = "List of ingress rules to create where 'cidr_blocks' is used" +variable "ingress_with_cidr_ipv4" { + description = "List of ingress rules to create where 'cidr_ipv4' is used" type = list(map(string)) default = [] } -variable "ingress_with_ipv6_cidr_blocks" { +variable "ingress_with_cidr_ipv6" { description = "List of ingress rules to create where 'ipv6_cidr_blocks' is used" type = list(map(string)) default = [] } -variable "ingress_with_source_security_group_id" { +variable "ingress_with_referenced_security_group_id" { description = "List of ingress rules to create where 'source_security_group_id' is used" type = list(map(string)) default = [] } -variable "ingress_with_prefix_list_ids" { - description = "List of ingress rules to create where 'prefix_list_ids' is used" +variable "ingress_with_prefix_list_id" { + description = "List of ingress rules to create where 'prefix_list_id' is used" type = list(map(string)) default = [] } -variable "ingress_cidr_blocks" { +variable "ingress_cidr_ipv4" { description = "List of IPv4 CIDR ranges to use on all ingress rules" type = list(string) default = [] } -variable "ingress_ipv6_cidr_blocks" { +variable "ingress_cidr_ipv6" { description = "List of IPv6 CIDR ranges to use on all ingress rules" type = list(string) default = [] @@ -113,26 +113,26 @@ variable "computed_ingress_with_self" { default = [] } -variable "computed_ingress_with_cidr_blocks" { - description = "List of computed ingress rules to create where 'cidr_blocks' is used" +variable "computed_ingress_with_cidr_ipv4" { + description = "List of computed ingress rules to create where 'cidr_ipv4' is used" type = list(map(string)) default = [] } -variable "computed_ingress_with_ipv6_cidr_blocks" { +variable "computed_ingress_with_cidr_ipv6" { description = "List of computed ingress rules to create where 'ipv6_cidr_blocks' is used" type = list(map(string)) default = [] } -variable "computed_ingress_with_source_security_group_id" { +variable "computed_ingress_with_referenced_security_group_id" { description = "List of computed ingress rules to create where 'source_security_group_id' is used" type = list(map(string)) default = [] } -variable "computed_ingress_with_prefix_list_ids" { - description = "List of computed ingress rules to create where 'prefix_list_ids' is used" +variable "computed_ingress_with_prefix_list_id" { + description = "List of computed ingress rules to create where 'prefix_list_id' is used" type = list(map(string)) default = [] } @@ -170,26 +170,26 @@ variable "number_of_computed_ingress_with_self" { default = 0 } -variable "number_of_computed_ingress_with_cidr_blocks" { - description = "Number of computed ingress rules to create where 'cidr_blocks' is used" +variable "number_of_computed_ingress_with_cidr_ipv4" { + description = "Number of computed ingress rules to create where 'cidr_ipv4' is used" type = number default = 0 } -variable "number_of_computed_ingress_with_ipv6_cidr_blocks" { +variable "number_of_computed_ingress_with_cidr_ipv6" { description = "Number of computed ingress rules to create where 'ipv6_cidr_blocks' is used" type = number default = 0 } -variable "number_of_computed_ingress_with_source_security_group_id" { +variable "number_of_computed_ingress_with_referenced_security_group_id" { description = "Number of computed ingress rules to create where 'source_security_group_id' is used" type = number default = 0 } -variable "number_of_computed_ingress_with_prefix_list_ids" { - description = "Number of computed ingress rules to create where 'prefix_list_ids' is used" +variable "number_of_computed_ingress_with_prefix_list_id" { + description = "Number of computed ingress rules to create where 'prefix_list_id' is used" type = number default = 0 } @@ -227,37 +227,37 @@ variable "egress_with_self" { default = [] } -variable "egress_with_cidr_blocks" { - description = "List of egress rules to create where 'cidr_blocks' is used" +variable "egress_with_cidr_ipv4" { + description = "List of egress rules to create where 'cidr_ipv4' is used" type = list(map(string)) default = [] } -variable "egress_with_ipv6_cidr_blocks" { +variable "egress_with_cidr_ipv6" { description = "List of egress rules to create where 'ipv6_cidr_blocks' is used" type = list(map(string)) default = [] } -variable "egress_with_source_security_group_id" { +variable "egress_with_referenced_security_group_id" { description = "List of egress rules to create where 'source_security_group_id' is used" type = list(map(string)) default = [] } -variable "egress_with_prefix_list_ids" { - description = "List of egress rules to create where 'prefix_list_ids' is used" +variable "egress_with_prefix_list_id" { + description = "List of egress rules to create where 'prefix_list_id' is used" type = list(map(string)) default = [] } -variable "egress_cidr_blocks" { +variable "egress_cidr_ipv4" { description = "List of IPv4 CIDR ranges to use on all egress rules" type = list(string) default = ["0.0.0.0/0"] } -variable "egress_ipv6_cidr_blocks" { +variable "egress_cidr_ipv6" { description = "List of IPv6 CIDR ranges to use on all egress rules" type = list(string) default = ["::/0"] @@ -284,26 +284,26 @@ variable "computed_egress_with_self" { default = [] } -variable "computed_egress_with_cidr_blocks" { - description = "List of computed egress rules to create where 'cidr_blocks' is used" +variable "computed_egress_with_cidr_ipv4" { + description = "List of computed egress rules to create where 'cidr_ipv4' is used" type = list(map(string)) default = [] } -variable "computed_egress_with_ipv6_cidr_blocks" { +variable "computed_egress_with_cidr_ipv6" { description = "List of computed egress rules to create where 'ipv6_cidr_blocks' is used" type = list(map(string)) default = [] } -variable "computed_egress_with_source_security_group_id" { +variable "computed_egress_with_referenced_security_group_id" { description = "List of computed egress rules to create where 'source_security_group_id' is used" type = list(map(string)) default = [] } -variable "computed_egress_with_prefix_list_ids" { - description = "List of computed egress rules to create where 'prefix_list_ids' is used" +variable "computed_egress_with_prefix_list_id" { + description = "List of computed egress rules to create where 'prefix_list_id' is used" type = list(map(string)) default = [] } @@ -341,26 +341,26 @@ variable "number_of_computed_egress_with_self" { default = 0 } -variable "number_of_computed_egress_with_cidr_blocks" { - description = "Number of computed egress rules to create where 'cidr_blocks' is used" +variable "number_of_computed_egress_with_cidr_ipv4" { + description = "Number of computed egress rules to create where 'cidr_ipv4' is used" type = number default = 0 } -variable "number_of_computed_egress_with_ipv6_cidr_blocks" { +variable "number_of_computed_egress_with_cidr_ipv6" { description = "Number of computed egress rules to create where 'ipv6_cidr_blocks' is used" type = number default = 0 } -variable "number_of_computed_egress_with_source_security_group_id" { +variable "number_of_computed_egress_with_referenced_security_group_id" { description = "Number of computed egress rules to create where 'source_security_group_id' is used" type = number default = 0 } -variable "number_of_computed_egress_with_prefix_list_ids" { - description = "Number of computed egress rules to create where 'prefix_list_ids' is used" +variable "number_of_computed_egress_with_prefix_list_id" { + description = "Number of computed egress rules to create where 'prefix_list_id' is used" type = number default = 0 } diff --git a/modules/graphite-statsd/README.md b/modules/graphite-statsd/README.md index 7e5624cd..24ddf3e6 100644 --- a/modules/graphite-statsd/README.md +++ b/modules/graphite-statsd/README.md @@ -55,59 +55,59 @@ No resources. | [computed\_egress\_ipv6\_cidr\_blocks](#input\_computed\_egress\_ipv6\_cidr\_blocks) | List of IPv6 CIDR ranges to use on all computed egress rules | `list(string)` |
[
"::/0"
]
| no | | [computed\_egress\_prefix\_list\_ids](#input\_computed\_egress\_prefix\_list\_ids) | List of prefix list IDs (for allowing access to VPC endpoints) to use on all computed egress rules | `list(string)` | `[]` | no | | [computed\_egress\_rules](#input\_computed\_egress\_rules) | List of computed egress rules to create by name | `list(string)` | `[]` | no | -| [computed\_egress\_with\_cidr\_blocks](#input\_computed\_egress\_with\_cidr\_blocks) | List of computed egress rules to create where 'cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [computed\_egress\_with\_ipv6\_cidr\_blocks](#input\_computed\_egress\_with\_ipv6\_cidr\_blocks) | List of computed egress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [computed\_egress\_with\_prefix\_list\_ids](#input\_computed\_egress\_with\_prefix\_list\_ids) | List of computed egress rules to create where 'prefix\_list\_ids' is used | `list(map(string))` | `[]` | no | +| [computed\_egress\_with\_cidr\_ipv4](#input\_computed\_egress\_with\_cidr\_ipv4) | List of computed egress rules to create where 'cidr\_ipv4' is used | `list(map(string))` | `[]` | no | +| [computed\_egress\_with\_cidr\_ipv6](#input\_computed\_egress\_with\_cidr\_ipv6) | List of computed egress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | +| [computed\_egress\_with\_prefix\_list\_id](#input\_computed\_egress\_with\_prefix\_list\_id) | List of computed egress rules to create where 'prefix\_list\_id' is used | `list(map(string))` | `[]` | no | +| [computed\_egress\_with\_referenced\_security\_group\_id](#input\_computed\_egress\_with\_referenced\_security\_group\_id) | List of computed egress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [computed\_egress\_with\_self](#input\_computed\_egress\_with\_self) | List of computed egress rules to create where 'self' is defined | `list(map(string))` | `[]` | no | -| [computed\_egress\_with\_source\_security\_group\_id](#input\_computed\_egress\_with\_source\_security\_group\_id) | List of computed egress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [computed\_ingress\_cidr\_blocks](#input\_computed\_ingress\_cidr\_blocks) | List of IPv4 CIDR ranges to use on all computed ingress rules | `list(string)` | `[]` | no | | [computed\_ingress\_ipv6\_cidr\_blocks](#input\_computed\_ingress\_ipv6\_cidr\_blocks) | List of IPv6 CIDR ranges to use on all computed ingress rules | `list(string)` | `[]` | no | | [computed\_ingress\_prefix\_list\_ids](#input\_computed\_ingress\_prefix\_list\_ids) | List of prefix list IDs (for allowing access to VPC endpoints) to use on all computed ingress rules | `list(string)` | `[]` | no | | [computed\_ingress\_rules](#input\_computed\_ingress\_rules) | List of computed ingress rules to create by name | `list(string)` | `[]` | no | -| [computed\_ingress\_with\_cidr\_blocks](#input\_computed\_ingress\_with\_cidr\_blocks) | List of computed ingress rules to create where 'cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [computed\_ingress\_with\_ipv6\_cidr\_blocks](#input\_computed\_ingress\_with\_ipv6\_cidr\_blocks) | List of computed ingress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [computed\_ingress\_with\_prefix\_list\_ids](#input\_computed\_ingress\_with\_prefix\_list\_ids) | List of computed ingress rules to create where 'prefix\_list\_ids' is used | `list(map(string))` | `[]` | no | +| [computed\_ingress\_with\_cidr\_ipv4](#input\_computed\_ingress\_with\_cidr\_ipv4) | List of computed ingress rules to create where 'cidr\_ipv4' is used | `list(map(string))` | `[]` | no | +| [computed\_ingress\_with\_cidr\_ipv6](#input\_computed\_ingress\_with\_cidr\_ipv6) | List of computed ingress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | +| [computed\_ingress\_with\_prefix\_list\_id](#input\_computed\_ingress\_with\_prefix\_list\_id) | List of computed ingress rules to create where 'prefix\_list\_id' is used | `list(map(string))` | `[]` | no | +| [computed\_ingress\_with\_referenced\_security\_group\_id](#input\_computed\_ingress\_with\_referenced\_security\_group\_id) | List of computed ingress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [computed\_ingress\_with\_self](#input\_computed\_ingress\_with\_self) | List of computed ingress rules to create where 'self' is defined | `list(map(string))` | `[]` | no | -| [computed\_ingress\_with\_source\_security\_group\_id](#input\_computed\_ingress\_with\_source\_security\_group\_id) | List of computed ingress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [create](#input\_create) | Whether to create security group and all rules | `bool` | `true` | no | | [description](#input\_description) | Description of security group | `string` | `"Security Group managed by Terraform"` | no | -| [egress\_cidr\_blocks](#input\_egress\_cidr\_blocks) | List of IPv4 CIDR ranges to use on all egress rules | `list(string)` |
[
"0.0.0.0/0"
]
| no | -| [egress\_ipv6\_cidr\_blocks](#input\_egress\_ipv6\_cidr\_blocks) | List of IPv6 CIDR ranges to use on all egress rules | `list(string)` |
[
"::/0"
]
| no | +| [egress\_cidr\_ipv4](#input\_egress\_cidr\_ipv4) | List of IPv4 CIDR ranges to use on all egress rules | `list(string)` |
[
"0.0.0.0/0"
]
| no | +| [egress\_cidr\_ipv6](#input\_egress\_cidr\_ipv6) | List of IPv6 CIDR ranges to use on all egress rules | `list(string)` |
[
"::/0"
]
| no | | [egress\_prefix\_list\_ids](#input\_egress\_prefix\_list\_ids) | List of prefix list IDs (for allowing access to VPC endpoints) to use on all egress rules | `list(string)` | `[]` | no | | [egress\_rules](#input\_egress\_rules) | List of egress rules to create by name | `list(string)` | `[]` | no | -| [egress\_with\_cidr\_blocks](#input\_egress\_with\_cidr\_blocks) | List of egress rules to create where 'cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [egress\_with\_ipv6\_cidr\_blocks](#input\_egress\_with\_ipv6\_cidr\_blocks) | List of egress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [egress\_with\_prefix\_list\_ids](#input\_egress\_with\_prefix\_list\_ids) | List of egress rules to create where 'prefix\_list\_ids' is used | `list(map(string))` | `[]` | no | +| [egress\_with\_cidr\_ipv4](#input\_egress\_with\_cidr\_ipv4) | List of egress rules to create where 'cidr\_ipv4' is used | `list(map(string))` | `[]` | no | +| [egress\_with\_cidr\_ipv6](#input\_egress\_with\_cidr\_ipv6) | List of egress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | +| [egress\_with\_prefix\_list\_id](#input\_egress\_with\_prefix\_list\_id) | List of egress rules to create where 'prefix\_list\_id' is used | `list(map(string))` | `[]` | no | +| [egress\_with\_referenced\_security\_group\_id](#input\_egress\_with\_referenced\_security\_group\_id) | List of egress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [egress\_with\_self](#input\_egress\_with\_self) | List of egress rules to create where 'self' is defined | `list(map(string))` | `[]` | no | -| [egress\_with\_source\_security\_group\_id](#input\_egress\_with\_source\_security\_group\_id) | List of egress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | -| [ingress\_cidr\_blocks](#input\_ingress\_cidr\_blocks) | List of IPv4 CIDR ranges to use on all ingress rules | `list(string)` | `[]` | no | -| [ingress\_ipv6\_cidr\_blocks](#input\_ingress\_ipv6\_cidr\_blocks) | List of IPv6 CIDR ranges to use on all ingress rules | `list(string)` | `[]` | no | +| [ingress\_cidr\_ipv4](#input\_ingress\_cidr\_ipv4) | List of IPv4 CIDR ranges to use on all ingress rules | `list(string)` | `[]` | no | +| [ingress\_cidr\_ipv6](#input\_ingress\_cidr\_ipv6) | List of IPv6 CIDR ranges to use on all ingress rules | `list(string)` | `[]` | no | | [ingress\_prefix\_list\_ids](#input\_ingress\_prefix\_list\_ids) | List of prefix list IDs (for allowing access to VPC endpoints) to use on all ingress rules | `list(string)` | `[]` | no | | [ingress\_rules](#input\_ingress\_rules) | List of ingress rules to create by name | `list(string)` | `[]` | no | -| [ingress\_with\_cidr\_blocks](#input\_ingress\_with\_cidr\_blocks) | List of ingress rules to create where 'cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [ingress\_with\_ipv6\_cidr\_blocks](#input\_ingress\_with\_ipv6\_cidr\_blocks) | List of ingress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [ingress\_with\_prefix\_list\_ids](#input\_ingress\_with\_prefix\_list\_ids) | List of ingress rules to create where 'prefix\_list\_ids' is used | `list(map(string))` | `[]` | no | +| [ingress\_with\_cidr\_ipv4](#input\_ingress\_with\_cidr\_ipv4) | List of ingress rules to create where 'cidr\_ipv4' is used | `list(map(string))` | `[]` | no | +| [ingress\_with\_cidr\_ipv6](#input\_ingress\_with\_cidr\_ipv6) | List of ingress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | +| [ingress\_with\_prefix\_list\_id](#input\_ingress\_with\_prefix\_list\_id) | List of ingress rules to create where 'prefix\_list\_id' is used | `list(map(string))` | `[]` | no | +| [ingress\_with\_referenced\_security\_group\_id](#input\_ingress\_with\_referenced\_security\_group\_id) | List of ingress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [ingress\_with\_self](#input\_ingress\_with\_self) | List of ingress rules to create where 'self' is defined | `list(map(string))` | `[]` | no | -| [ingress\_with\_source\_security\_group\_id](#input\_ingress\_with\_source\_security\_group\_id) | List of ingress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [name](#input\_name) | Name of security group | `string` | n/a | yes | | [number\_of\_computed\_egress\_cidr\_blocks](#input\_number\_of\_computed\_egress\_cidr\_blocks) | Number of IPv4 CIDR ranges to use on all computed egress rules | `number` | `0` | no | | [number\_of\_computed\_egress\_ipv6\_cidr\_blocks](#input\_number\_of\_computed\_egress\_ipv6\_cidr\_blocks) | Number of IPv6 CIDR ranges to use on all computed egress rules | `number` | `0` | no | | [number\_of\_computed\_egress\_prefix\_list\_ids](#input\_number\_of\_computed\_egress\_prefix\_list\_ids) | Number of prefix list IDs (for allowing access to VPC endpoints) to use on all computed egress rules | `number` | `0` | no | | [number\_of\_computed\_egress\_rules](#input\_number\_of\_computed\_egress\_rules) | Number of computed egress rules to create by name | `number` | `0` | no | -| [number\_of\_computed\_egress\_with\_cidr\_blocks](#input\_number\_of\_computed\_egress\_with\_cidr\_blocks) | Number of computed egress rules to create where 'cidr\_blocks' is used | `number` | `0` | no | -| [number\_of\_computed\_egress\_with\_ipv6\_cidr\_blocks](#input\_number\_of\_computed\_egress\_with\_ipv6\_cidr\_blocks) | Number of computed egress rules to create where 'ipv6\_cidr\_blocks' is used | `number` | `0` | no | -| [number\_of\_computed\_egress\_with\_prefix\_list\_ids](#input\_number\_of\_computed\_egress\_with\_prefix\_list\_ids) | Number of computed egress rules to create where 'prefix\_list\_ids' is used | `number` | `0` | no | +| [number\_of\_computed\_egress\_with\_cidr\_ipv4](#input\_number\_of\_computed\_egress\_with\_cidr\_ipv4) | Number of computed egress rules to create where 'cidr\_ipv4' is used | `number` | `0` | no | +| [number\_of\_computed\_egress\_with\_cidr\_ipv6](#input\_number\_of\_computed\_egress\_with\_cidr\_ipv6) | Number of computed egress rules to create where 'ipv6\_cidr\_blocks' is used | `number` | `0` | no | +| [number\_of\_computed\_egress\_with\_prefix\_list\_id](#input\_number\_of\_computed\_egress\_with\_prefix\_list\_id) | Number of computed egress rules to create where 'prefix\_list\_id' is used | `number` | `0` | no | +| [number\_of\_computed\_egress\_with\_referenced\_security\_group\_id](#input\_number\_of\_computed\_egress\_with\_referenced\_security\_group\_id) | Number of computed egress rules to create where 'source\_security\_group\_id' is used | `number` | `0` | no | | [number\_of\_computed\_egress\_with\_self](#input\_number\_of\_computed\_egress\_with\_self) | Number of computed egress rules to create where 'self' is defined | `number` | `0` | no | -| [number\_of\_computed\_egress\_with\_source\_security\_group\_id](#input\_number\_of\_computed\_egress\_with\_source\_security\_group\_id) | Number of computed egress rules to create where 'source\_security\_group\_id' is used | `number` | `0` | no | | [number\_of\_computed\_ingress\_cidr\_blocks](#input\_number\_of\_computed\_ingress\_cidr\_blocks) | Number of IPv4 CIDR ranges to use on all computed ingress rules | `number` | `0` | no | | [number\_of\_computed\_ingress\_ipv6\_cidr\_blocks](#input\_number\_of\_computed\_ingress\_ipv6\_cidr\_blocks) | Number of IPv6 CIDR ranges to use on all computed ingress rules | `number` | `0` | no | | [number\_of\_computed\_ingress\_prefix\_list\_ids](#input\_number\_of\_computed\_ingress\_prefix\_list\_ids) | Number of prefix list IDs (for allowing access to VPC endpoints) to use on all computed ingress rules | `number` | `0` | no | | [number\_of\_computed\_ingress\_rules](#input\_number\_of\_computed\_ingress\_rules) | Number of computed ingress rules to create by name | `number` | `0` | no | -| [number\_of\_computed\_ingress\_with\_cidr\_blocks](#input\_number\_of\_computed\_ingress\_with\_cidr\_blocks) | Number of computed ingress rules to create where 'cidr\_blocks' is used | `number` | `0` | no | -| [number\_of\_computed\_ingress\_with\_ipv6\_cidr\_blocks](#input\_number\_of\_computed\_ingress\_with\_ipv6\_cidr\_blocks) | Number of computed ingress rules to create where 'ipv6\_cidr\_blocks' is used | `number` | `0` | no | -| [number\_of\_computed\_ingress\_with\_prefix\_list\_ids](#input\_number\_of\_computed\_ingress\_with\_prefix\_list\_ids) | Number of computed ingress rules to create where 'prefix\_list\_ids' is used | `number` | `0` | no | +| [number\_of\_computed\_ingress\_with\_cidr\_ipv4](#input\_number\_of\_computed\_ingress\_with\_cidr\_ipv4) | Number of computed ingress rules to create where 'cidr\_ipv4' is used | `number` | `0` | no | +| [number\_of\_computed\_ingress\_with\_cidr\_ipv6](#input\_number\_of\_computed\_ingress\_with\_cidr\_ipv6) | Number of computed ingress rules to create where 'ipv6\_cidr\_blocks' is used | `number` | `0` | no | +| [number\_of\_computed\_ingress\_with\_prefix\_list\_id](#input\_number\_of\_computed\_ingress\_with\_prefix\_list\_id) | Number of computed ingress rules to create where 'prefix\_list\_id' is used | `number` | `0` | no | +| [number\_of\_computed\_ingress\_with\_referenced\_security\_group\_id](#input\_number\_of\_computed\_ingress\_with\_referenced\_security\_group\_id) | Number of computed ingress rules to create where 'source\_security\_group\_id' is used | `number` | `0` | no | | [number\_of\_computed\_ingress\_with\_self](#input\_number\_of\_computed\_ingress\_with\_self) | Number of computed ingress rules to create where 'self' is defined | `number` | `0` | no | -| [number\_of\_computed\_ingress\_with\_source\_security\_group\_id](#input\_number\_of\_computed\_ingress\_with\_source\_security\_group\_id) | Number of computed ingress rules to create where 'source\_security\_group\_id' is used | `number` | `0` | no | | [revoke\_rules\_on\_delete](#input\_revoke\_rules\_on\_delete) | Instruct Terraform to revoke all of the Security Groups attached ingress and egress rules before deleting the rule itself. Enable for EMR. | `bool` | `false` | no | | [tags](#input\_tags) | A mapping of tags to assign to security group | `map(string)` | `{}` | no | | [use\_name\_prefix](#input\_use\_name\_prefix) | Whether to use name\_prefix or fixed name. Should be true to able to update security group name after initial creation | `bool` | `true` | no | diff --git a/modules/graphite-statsd/main.tf b/modules/graphite-statsd/main.tf index 80ea0adb..d2a1bf93 100644 --- a/modules/graphite-statsd/main.tf +++ b/modules/graphite-statsd/main.tf @@ -19,20 +19,20 @@ module "sg" { ingress_with_self = concat(var.auto_ingress_with_self, var.ingress_with_self) # Open to IPv4 cidr blocks - ingress_with_cidr_blocks = var.ingress_with_cidr_blocks + ingress_with_cidr_ipv4 = var.ingress_with_cidr_ipv4 # Open to IPv6 cidr blocks - ingress_with_ipv6_cidr_blocks = var.ingress_with_ipv6_cidr_blocks + ingress_with_cidr_ipv6 = var.ingress_with_cidr_ipv6 # Open for security group id - ingress_with_source_security_group_id = var.ingress_with_source_security_group_id + ingress_with_referenced_security_group_id = var.ingress_with_referenced_security_group_id # Open for prefix list id - ingress_with_prefix_list_ids = var.ingress_with_prefix_list_ids + ingress_with_prefix_list_id = var.ingress_with_prefix_list_id # Default ingress CIDR blocks - ingress_cidr_blocks = var.ingress_cidr_blocks - ingress_ipv6_cidr_blocks = var.ingress_ipv6_cidr_blocks + ingress_cidr_ipv4 = var.ingress_cidr_ipv4 + ingress_cidr_ipv6 = var.ingress_cidr_ipv6 # Default prefix list ids ingress_prefix_list_ids = var.ingress_prefix_list_ids @@ -47,26 +47,26 @@ module "sg" { computed_ingress_with_self = concat(var.auto_computed_ingress_with_self, var.computed_ingress_with_self) # Open to IPv4 cidr blocks - computed_ingress_with_cidr_blocks = var.computed_ingress_with_cidr_blocks + computed_ingress_with_cidr_ipv4 = var.computed_ingress_with_cidr_ipv4 # Open to IPv6 cidr blocks - computed_ingress_with_ipv6_cidr_blocks = var.computed_ingress_with_ipv6_cidr_blocks + computed_ingress_with_cidr_ipv6 = var.computed_ingress_with_cidr_ipv6 # Open for security group id - computed_ingress_with_source_security_group_id = var.computed_ingress_with_source_security_group_id + computed_ingress_with_referenced_security_group_id = var.computed_ingress_with_referenced_security_group_id # Open for prefix list id - computed_ingress_with_prefix_list_ids = var.computed_ingress_with_prefix_list_ids + computed_ingress_with_prefix_list_id = var.computed_ingress_with_prefix_list_id ############################# # Number of computed ingress ############################# - number_of_computed_ingress_rules = var.auto_number_of_computed_ingress_rules + var.number_of_computed_ingress_rules - number_of_computed_ingress_with_self = var.auto_number_of_computed_ingress_with_self + var.number_of_computed_ingress_with_self - number_of_computed_ingress_with_cidr_blocks = var.number_of_computed_ingress_with_cidr_blocks - number_of_computed_ingress_with_ipv6_cidr_blocks = var.number_of_computed_ingress_with_ipv6_cidr_blocks - number_of_computed_ingress_with_source_security_group_id = var.number_of_computed_ingress_with_source_security_group_id - number_of_computed_ingress_with_prefix_list_ids = var.number_of_computed_ingress_with_prefix_list_ids + number_of_computed_ingress_rules = var.auto_number_of_computed_ingress_rules + var.number_of_computed_ingress_rules + number_of_computed_ingress_with_self = var.auto_number_of_computed_ingress_with_self + var.number_of_computed_ingress_with_self + number_of_computed_ingress_with_cidr_ipv4 = var.number_of_computed_ingress_with_cidr_ipv4 + number_of_computed_ingress_with_cidr_ipv6 = var.number_of_computed_ingress_with_cidr_ipv6 + number_of_computed_ingress_with_referenced_security_group_id = var.number_of_computed_ingress_with_referenced_security_group_id + number_of_computed_ingress_with_prefix_list_id = var.number_of_computed_ingress_with_prefix_list_id ######### # Egress @@ -78,20 +78,20 @@ module "sg" { egress_with_self = concat(var.auto_egress_with_self, var.egress_with_self) # Open to IPv4 cidr blocks - egress_with_cidr_blocks = var.egress_with_cidr_blocks + egress_with_cidr_ipv4 = var.egress_with_cidr_ipv4 # Open to IPv6 cidr blocks - egress_with_ipv6_cidr_blocks = var.egress_with_ipv6_cidr_blocks + egress_with_cidr_ipv6 = var.egress_with_cidr_ipv6 # Open for security group id - egress_with_source_security_group_id = var.egress_with_source_security_group_id + egress_with_referenced_security_group_id = var.egress_with_referenced_security_group_id # Open for prefix list id - egress_with_prefix_list_ids = var.egress_with_prefix_list_ids + egress_with_prefix_list_id = var.egress_with_prefix_list_id # Default egress CIDR blocks - egress_cidr_blocks = var.egress_cidr_blocks - egress_ipv6_cidr_blocks = var.egress_ipv6_cidr_blocks + egress_cidr_ipv4 = var.egress_cidr_ipv4 + egress_cidr_ipv6 = var.egress_cidr_ipv6 # Default prefix list ids egress_prefix_list_ids = var.egress_prefix_list_ids @@ -106,24 +106,24 @@ module "sg" { computed_egress_with_self = concat(var.auto_computed_egress_with_self, var.computed_egress_with_self) # Open to IPv4 cidr blocks - computed_egress_with_cidr_blocks = var.computed_egress_with_cidr_blocks + computed_egress_with_cidr_ipv4 = var.computed_egress_with_cidr_ipv4 # Open to IPv6 cidr blocks - computed_egress_with_ipv6_cidr_blocks = var.computed_egress_with_ipv6_cidr_blocks + computed_egress_with_cidr_ipv6 = var.computed_egress_with_cidr_ipv6 # Open for security group id - computed_egress_with_source_security_group_id = var.computed_egress_with_source_security_group_id + computed_egress_with_referenced_security_group_id = var.computed_egress_with_referenced_security_group_id # Open for prefix list id - computed_egress_with_prefix_list_ids = var.computed_egress_with_prefix_list_ids + computed_egress_with_prefix_list_id = var.computed_egress_with_prefix_list_id ############################# # Number of computed egress ############################# - number_of_computed_egress_rules = var.auto_number_of_computed_egress_rules + var.number_of_computed_egress_rules - number_of_computed_egress_with_self = var.auto_number_of_computed_egress_with_self + var.number_of_computed_egress_with_self - number_of_computed_egress_with_cidr_blocks = var.number_of_computed_egress_with_cidr_blocks - number_of_computed_egress_with_ipv6_cidr_blocks = var.number_of_computed_egress_with_ipv6_cidr_blocks - number_of_computed_egress_with_source_security_group_id = var.number_of_computed_egress_with_source_security_group_id - number_of_computed_egress_with_prefix_list_ids = var.number_of_computed_egress_with_prefix_list_ids + number_of_computed_egress_rules = var.auto_number_of_computed_egress_rules + var.number_of_computed_egress_rules + number_of_computed_egress_with_self = var.auto_number_of_computed_egress_with_self + var.number_of_computed_egress_with_self + number_of_computed_egress_with_cidr_ipv4 = var.number_of_computed_egress_with_cidr_ipv4 + number_of_computed_egress_with_cidr_ipv6 = var.number_of_computed_egress_with_cidr_ipv6 + number_of_computed_egress_with_referenced_security_group_id = var.number_of_computed_egress_with_referenced_security_group_id + number_of_computed_egress_with_prefix_list_id = var.number_of_computed_egress_with_prefix_list_id } diff --git a/modules/graphite-statsd/variables.tf b/modules/graphite-statsd/variables.tf index 60c8c27b..6590c9e3 100644 --- a/modules/graphite-statsd/variables.tf +++ b/modules/graphite-statsd/variables.tf @@ -56,37 +56,37 @@ variable "ingress_with_self" { default = [] } -variable "ingress_with_cidr_blocks" { - description = "List of ingress rules to create where 'cidr_blocks' is used" +variable "ingress_with_cidr_ipv4" { + description = "List of ingress rules to create where 'cidr_ipv4' is used" type = list(map(string)) default = [] } -variable "ingress_with_ipv6_cidr_blocks" { +variable "ingress_with_cidr_ipv6" { description = "List of ingress rules to create where 'ipv6_cidr_blocks' is used" type = list(map(string)) default = [] } -variable "ingress_with_source_security_group_id" { +variable "ingress_with_referenced_security_group_id" { description = "List of ingress rules to create where 'source_security_group_id' is used" type = list(map(string)) default = [] } -variable "ingress_with_prefix_list_ids" { - description = "List of ingress rules to create where 'prefix_list_ids' is used" +variable "ingress_with_prefix_list_id" { + description = "List of ingress rules to create where 'prefix_list_id' is used" type = list(map(string)) default = [] } -variable "ingress_cidr_blocks" { +variable "ingress_cidr_ipv4" { description = "List of IPv4 CIDR ranges to use on all ingress rules" type = list(string) default = [] } -variable "ingress_ipv6_cidr_blocks" { +variable "ingress_cidr_ipv6" { description = "List of IPv6 CIDR ranges to use on all ingress rules" type = list(string) default = [] @@ -113,26 +113,26 @@ variable "computed_ingress_with_self" { default = [] } -variable "computed_ingress_with_cidr_blocks" { - description = "List of computed ingress rules to create where 'cidr_blocks' is used" +variable "computed_ingress_with_cidr_ipv4" { + description = "List of computed ingress rules to create where 'cidr_ipv4' is used" type = list(map(string)) default = [] } -variable "computed_ingress_with_ipv6_cidr_blocks" { +variable "computed_ingress_with_cidr_ipv6" { description = "List of computed ingress rules to create where 'ipv6_cidr_blocks' is used" type = list(map(string)) default = [] } -variable "computed_ingress_with_source_security_group_id" { +variable "computed_ingress_with_referenced_security_group_id" { description = "List of computed ingress rules to create where 'source_security_group_id' is used" type = list(map(string)) default = [] } -variable "computed_ingress_with_prefix_list_ids" { - description = "List of computed ingress rules to create where 'prefix_list_ids' is used" +variable "computed_ingress_with_prefix_list_id" { + description = "List of computed ingress rules to create where 'prefix_list_id' is used" type = list(map(string)) default = [] } @@ -170,26 +170,26 @@ variable "number_of_computed_ingress_with_self" { default = 0 } -variable "number_of_computed_ingress_with_cidr_blocks" { - description = "Number of computed ingress rules to create where 'cidr_blocks' is used" +variable "number_of_computed_ingress_with_cidr_ipv4" { + description = "Number of computed ingress rules to create where 'cidr_ipv4' is used" type = number default = 0 } -variable "number_of_computed_ingress_with_ipv6_cidr_blocks" { +variable "number_of_computed_ingress_with_cidr_ipv6" { description = "Number of computed ingress rules to create where 'ipv6_cidr_blocks' is used" type = number default = 0 } -variable "number_of_computed_ingress_with_source_security_group_id" { +variable "number_of_computed_ingress_with_referenced_security_group_id" { description = "Number of computed ingress rules to create where 'source_security_group_id' is used" type = number default = 0 } -variable "number_of_computed_ingress_with_prefix_list_ids" { - description = "Number of computed ingress rules to create where 'prefix_list_ids' is used" +variable "number_of_computed_ingress_with_prefix_list_id" { + description = "Number of computed ingress rules to create where 'prefix_list_id' is used" type = number default = 0 } @@ -227,37 +227,37 @@ variable "egress_with_self" { default = [] } -variable "egress_with_cidr_blocks" { - description = "List of egress rules to create where 'cidr_blocks' is used" +variable "egress_with_cidr_ipv4" { + description = "List of egress rules to create where 'cidr_ipv4' is used" type = list(map(string)) default = [] } -variable "egress_with_ipv6_cidr_blocks" { +variable "egress_with_cidr_ipv6" { description = "List of egress rules to create where 'ipv6_cidr_blocks' is used" type = list(map(string)) default = [] } -variable "egress_with_source_security_group_id" { +variable "egress_with_referenced_security_group_id" { description = "List of egress rules to create where 'source_security_group_id' is used" type = list(map(string)) default = [] } -variable "egress_with_prefix_list_ids" { - description = "List of egress rules to create where 'prefix_list_ids' is used" +variable "egress_with_prefix_list_id" { + description = "List of egress rules to create where 'prefix_list_id' is used" type = list(map(string)) default = [] } -variable "egress_cidr_blocks" { +variable "egress_cidr_ipv4" { description = "List of IPv4 CIDR ranges to use on all egress rules" type = list(string) default = ["0.0.0.0/0"] } -variable "egress_ipv6_cidr_blocks" { +variable "egress_cidr_ipv6" { description = "List of IPv6 CIDR ranges to use on all egress rules" type = list(string) default = ["::/0"] @@ -284,26 +284,26 @@ variable "computed_egress_with_self" { default = [] } -variable "computed_egress_with_cidr_blocks" { - description = "List of computed egress rules to create where 'cidr_blocks' is used" +variable "computed_egress_with_cidr_ipv4" { + description = "List of computed egress rules to create where 'cidr_ipv4' is used" type = list(map(string)) default = [] } -variable "computed_egress_with_ipv6_cidr_blocks" { +variable "computed_egress_with_cidr_ipv6" { description = "List of computed egress rules to create where 'ipv6_cidr_blocks' is used" type = list(map(string)) default = [] } -variable "computed_egress_with_source_security_group_id" { +variable "computed_egress_with_referenced_security_group_id" { description = "List of computed egress rules to create where 'source_security_group_id' is used" type = list(map(string)) default = [] } -variable "computed_egress_with_prefix_list_ids" { - description = "List of computed egress rules to create where 'prefix_list_ids' is used" +variable "computed_egress_with_prefix_list_id" { + description = "List of computed egress rules to create where 'prefix_list_id' is used" type = list(map(string)) default = [] } @@ -341,26 +341,26 @@ variable "number_of_computed_egress_with_self" { default = 0 } -variable "number_of_computed_egress_with_cidr_blocks" { - description = "Number of computed egress rules to create where 'cidr_blocks' is used" +variable "number_of_computed_egress_with_cidr_ipv4" { + description = "Number of computed egress rules to create where 'cidr_ipv4' is used" type = number default = 0 } -variable "number_of_computed_egress_with_ipv6_cidr_blocks" { +variable "number_of_computed_egress_with_cidr_ipv6" { description = "Number of computed egress rules to create where 'ipv6_cidr_blocks' is used" type = number default = 0 } -variable "number_of_computed_egress_with_source_security_group_id" { +variable "number_of_computed_egress_with_referenced_security_group_id" { description = "Number of computed egress rules to create where 'source_security_group_id' is used" type = number default = 0 } -variable "number_of_computed_egress_with_prefix_list_ids" { - description = "Number of computed egress rules to create where 'prefix_list_ids' is used" +variable "number_of_computed_egress_with_prefix_list_id" { + description = "Number of computed egress rules to create where 'prefix_list_id' is used" type = number default = 0 } diff --git a/modules/http-80/README.md b/modules/http-80/README.md index 85a896fd..1abfe0d4 100644 --- a/modules/http-80/README.md +++ b/modules/http-80/README.md @@ -55,59 +55,59 @@ No resources. | [computed\_egress\_ipv6\_cidr\_blocks](#input\_computed\_egress\_ipv6\_cidr\_blocks) | List of IPv6 CIDR ranges to use on all computed egress rules | `list(string)` |
[
"::/0"
]
| no | | [computed\_egress\_prefix\_list\_ids](#input\_computed\_egress\_prefix\_list\_ids) | List of prefix list IDs (for allowing access to VPC endpoints) to use on all computed egress rules | `list(string)` | `[]` | no | | [computed\_egress\_rules](#input\_computed\_egress\_rules) | List of computed egress rules to create by name | `list(string)` | `[]` | no | -| [computed\_egress\_with\_cidr\_blocks](#input\_computed\_egress\_with\_cidr\_blocks) | List of computed egress rules to create where 'cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [computed\_egress\_with\_ipv6\_cidr\_blocks](#input\_computed\_egress\_with\_ipv6\_cidr\_blocks) | List of computed egress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [computed\_egress\_with\_prefix\_list\_ids](#input\_computed\_egress\_with\_prefix\_list\_ids) | List of computed egress rules to create where 'prefix\_list\_ids' is used | `list(map(string))` | `[]` | no | +| [computed\_egress\_with\_cidr\_ipv4](#input\_computed\_egress\_with\_cidr\_ipv4) | List of computed egress rules to create where 'cidr\_ipv4' is used | `list(map(string))` | `[]` | no | +| [computed\_egress\_with\_cidr\_ipv6](#input\_computed\_egress\_with\_cidr\_ipv6) | List of computed egress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | +| [computed\_egress\_with\_prefix\_list\_id](#input\_computed\_egress\_with\_prefix\_list\_id) | List of computed egress rules to create where 'prefix\_list\_id' is used | `list(map(string))` | `[]` | no | +| [computed\_egress\_with\_referenced\_security\_group\_id](#input\_computed\_egress\_with\_referenced\_security\_group\_id) | List of computed egress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [computed\_egress\_with\_self](#input\_computed\_egress\_with\_self) | List of computed egress rules to create where 'self' is defined | `list(map(string))` | `[]` | no | -| [computed\_egress\_with\_source\_security\_group\_id](#input\_computed\_egress\_with\_source\_security\_group\_id) | List of computed egress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [computed\_ingress\_cidr\_blocks](#input\_computed\_ingress\_cidr\_blocks) | List of IPv4 CIDR ranges to use on all computed ingress rules | `list(string)` | `[]` | no | | [computed\_ingress\_ipv6\_cidr\_blocks](#input\_computed\_ingress\_ipv6\_cidr\_blocks) | List of IPv6 CIDR ranges to use on all computed ingress rules | `list(string)` | `[]` | no | | [computed\_ingress\_prefix\_list\_ids](#input\_computed\_ingress\_prefix\_list\_ids) | List of prefix list IDs (for allowing access to VPC endpoints) to use on all computed ingress rules | `list(string)` | `[]` | no | | [computed\_ingress\_rules](#input\_computed\_ingress\_rules) | List of computed ingress rules to create by name | `list(string)` | `[]` | no | -| [computed\_ingress\_with\_cidr\_blocks](#input\_computed\_ingress\_with\_cidr\_blocks) | List of computed ingress rules to create where 'cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [computed\_ingress\_with\_ipv6\_cidr\_blocks](#input\_computed\_ingress\_with\_ipv6\_cidr\_blocks) | List of computed ingress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [computed\_ingress\_with\_prefix\_list\_ids](#input\_computed\_ingress\_with\_prefix\_list\_ids) | List of computed ingress rules to create where 'prefix\_list\_ids' is used | `list(map(string))` | `[]` | no | +| [computed\_ingress\_with\_cidr\_ipv4](#input\_computed\_ingress\_with\_cidr\_ipv4) | List of computed ingress rules to create where 'cidr\_ipv4' is used | `list(map(string))` | `[]` | no | +| [computed\_ingress\_with\_cidr\_ipv6](#input\_computed\_ingress\_with\_cidr\_ipv6) | List of computed ingress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | +| [computed\_ingress\_with\_prefix\_list\_id](#input\_computed\_ingress\_with\_prefix\_list\_id) | List of computed ingress rules to create where 'prefix\_list\_id' is used | `list(map(string))` | `[]` | no | +| [computed\_ingress\_with\_referenced\_security\_group\_id](#input\_computed\_ingress\_with\_referenced\_security\_group\_id) | List of computed ingress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [computed\_ingress\_with\_self](#input\_computed\_ingress\_with\_self) | List of computed ingress rules to create where 'self' is defined | `list(map(string))` | `[]` | no | -| [computed\_ingress\_with\_source\_security\_group\_id](#input\_computed\_ingress\_with\_source\_security\_group\_id) | List of computed ingress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [create](#input\_create) | Whether to create security group and all rules | `bool` | `true` | no | | [description](#input\_description) | Description of security group | `string` | `"Security Group managed by Terraform"` | no | -| [egress\_cidr\_blocks](#input\_egress\_cidr\_blocks) | List of IPv4 CIDR ranges to use on all egress rules | `list(string)` |
[
"0.0.0.0/0"
]
| no | -| [egress\_ipv6\_cidr\_blocks](#input\_egress\_ipv6\_cidr\_blocks) | List of IPv6 CIDR ranges to use on all egress rules | `list(string)` |
[
"::/0"
]
| no | +| [egress\_cidr\_ipv4](#input\_egress\_cidr\_ipv4) | List of IPv4 CIDR ranges to use on all egress rules | `list(string)` |
[
"0.0.0.0/0"
]
| no | +| [egress\_cidr\_ipv6](#input\_egress\_cidr\_ipv6) | List of IPv6 CIDR ranges to use on all egress rules | `list(string)` |
[
"::/0"
]
| no | | [egress\_prefix\_list\_ids](#input\_egress\_prefix\_list\_ids) | List of prefix list IDs (for allowing access to VPC endpoints) to use on all egress rules | `list(string)` | `[]` | no | | [egress\_rules](#input\_egress\_rules) | List of egress rules to create by name | `list(string)` | `[]` | no | -| [egress\_with\_cidr\_blocks](#input\_egress\_with\_cidr\_blocks) | List of egress rules to create where 'cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [egress\_with\_ipv6\_cidr\_blocks](#input\_egress\_with\_ipv6\_cidr\_blocks) | List of egress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [egress\_with\_prefix\_list\_ids](#input\_egress\_with\_prefix\_list\_ids) | List of egress rules to create where 'prefix\_list\_ids' is used | `list(map(string))` | `[]` | no | +| [egress\_with\_cidr\_ipv4](#input\_egress\_with\_cidr\_ipv4) | List of egress rules to create where 'cidr\_ipv4' is used | `list(map(string))` | `[]` | no | +| [egress\_with\_cidr\_ipv6](#input\_egress\_with\_cidr\_ipv6) | List of egress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | +| [egress\_with\_prefix\_list\_id](#input\_egress\_with\_prefix\_list\_id) | List of egress rules to create where 'prefix\_list\_id' is used | `list(map(string))` | `[]` | no | +| [egress\_with\_referenced\_security\_group\_id](#input\_egress\_with\_referenced\_security\_group\_id) | List of egress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [egress\_with\_self](#input\_egress\_with\_self) | List of egress rules to create where 'self' is defined | `list(map(string))` | `[]` | no | -| [egress\_with\_source\_security\_group\_id](#input\_egress\_with\_source\_security\_group\_id) | List of egress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | -| [ingress\_cidr\_blocks](#input\_ingress\_cidr\_blocks) | List of IPv4 CIDR ranges to use on all ingress rules | `list(string)` | `[]` | no | -| [ingress\_ipv6\_cidr\_blocks](#input\_ingress\_ipv6\_cidr\_blocks) | List of IPv6 CIDR ranges to use on all ingress rules | `list(string)` | `[]` | no | +| [ingress\_cidr\_ipv4](#input\_ingress\_cidr\_ipv4) | List of IPv4 CIDR ranges to use on all ingress rules | `list(string)` | `[]` | no | +| [ingress\_cidr\_ipv6](#input\_ingress\_cidr\_ipv6) | List of IPv6 CIDR ranges to use on all ingress rules | `list(string)` | `[]` | no | | [ingress\_prefix\_list\_ids](#input\_ingress\_prefix\_list\_ids) | List of prefix list IDs (for allowing access to VPC endpoints) to use on all ingress rules | `list(string)` | `[]` | no | | [ingress\_rules](#input\_ingress\_rules) | List of ingress rules to create by name | `list(string)` | `[]` | no | -| [ingress\_with\_cidr\_blocks](#input\_ingress\_with\_cidr\_blocks) | List of ingress rules to create where 'cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [ingress\_with\_ipv6\_cidr\_blocks](#input\_ingress\_with\_ipv6\_cidr\_blocks) | List of ingress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [ingress\_with\_prefix\_list\_ids](#input\_ingress\_with\_prefix\_list\_ids) | List of ingress rules to create where 'prefix\_list\_ids' is used | `list(map(string))` | `[]` | no | +| [ingress\_with\_cidr\_ipv4](#input\_ingress\_with\_cidr\_ipv4) | List of ingress rules to create where 'cidr\_ipv4' is used | `list(map(string))` | `[]` | no | +| [ingress\_with\_cidr\_ipv6](#input\_ingress\_with\_cidr\_ipv6) | List of ingress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | +| [ingress\_with\_prefix\_list\_id](#input\_ingress\_with\_prefix\_list\_id) | List of ingress rules to create where 'prefix\_list\_id' is used | `list(map(string))` | `[]` | no | +| [ingress\_with\_referenced\_security\_group\_id](#input\_ingress\_with\_referenced\_security\_group\_id) | List of ingress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [ingress\_with\_self](#input\_ingress\_with\_self) | List of ingress rules to create where 'self' is defined | `list(map(string))` | `[]` | no | -| [ingress\_with\_source\_security\_group\_id](#input\_ingress\_with\_source\_security\_group\_id) | List of ingress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [name](#input\_name) | Name of security group | `string` | n/a | yes | | [number\_of\_computed\_egress\_cidr\_blocks](#input\_number\_of\_computed\_egress\_cidr\_blocks) | Number of IPv4 CIDR ranges to use on all computed egress rules | `number` | `0` | no | | [number\_of\_computed\_egress\_ipv6\_cidr\_blocks](#input\_number\_of\_computed\_egress\_ipv6\_cidr\_blocks) | Number of IPv6 CIDR ranges to use on all computed egress rules | `number` | `0` | no | | [number\_of\_computed\_egress\_prefix\_list\_ids](#input\_number\_of\_computed\_egress\_prefix\_list\_ids) | Number of prefix list IDs (for allowing access to VPC endpoints) to use on all computed egress rules | `number` | `0` | no | | [number\_of\_computed\_egress\_rules](#input\_number\_of\_computed\_egress\_rules) | Number of computed egress rules to create by name | `number` | `0` | no | -| [number\_of\_computed\_egress\_with\_cidr\_blocks](#input\_number\_of\_computed\_egress\_with\_cidr\_blocks) | Number of computed egress rules to create where 'cidr\_blocks' is used | `number` | `0` | no | -| [number\_of\_computed\_egress\_with\_ipv6\_cidr\_blocks](#input\_number\_of\_computed\_egress\_with\_ipv6\_cidr\_blocks) | Number of computed egress rules to create where 'ipv6\_cidr\_blocks' is used | `number` | `0` | no | -| [number\_of\_computed\_egress\_with\_prefix\_list\_ids](#input\_number\_of\_computed\_egress\_with\_prefix\_list\_ids) | Number of computed egress rules to create where 'prefix\_list\_ids' is used | `number` | `0` | no | +| [number\_of\_computed\_egress\_with\_cidr\_ipv4](#input\_number\_of\_computed\_egress\_with\_cidr\_ipv4) | Number of computed egress rules to create where 'cidr\_ipv4' is used | `number` | `0` | no | +| [number\_of\_computed\_egress\_with\_cidr\_ipv6](#input\_number\_of\_computed\_egress\_with\_cidr\_ipv6) | Number of computed egress rules to create where 'ipv6\_cidr\_blocks' is used | `number` | `0` | no | +| [number\_of\_computed\_egress\_with\_prefix\_list\_id](#input\_number\_of\_computed\_egress\_with\_prefix\_list\_id) | Number of computed egress rules to create where 'prefix\_list\_id' is used | `number` | `0` | no | +| [number\_of\_computed\_egress\_with\_referenced\_security\_group\_id](#input\_number\_of\_computed\_egress\_with\_referenced\_security\_group\_id) | Number of computed egress rules to create where 'source\_security\_group\_id' is used | `number` | `0` | no | | [number\_of\_computed\_egress\_with\_self](#input\_number\_of\_computed\_egress\_with\_self) | Number of computed egress rules to create where 'self' is defined | `number` | `0` | no | -| [number\_of\_computed\_egress\_with\_source\_security\_group\_id](#input\_number\_of\_computed\_egress\_with\_source\_security\_group\_id) | Number of computed egress rules to create where 'source\_security\_group\_id' is used | `number` | `0` | no | | [number\_of\_computed\_ingress\_cidr\_blocks](#input\_number\_of\_computed\_ingress\_cidr\_blocks) | Number of IPv4 CIDR ranges to use on all computed ingress rules | `number` | `0` | no | | [number\_of\_computed\_ingress\_ipv6\_cidr\_blocks](#input\_number\_of\_computed\_ingress\_ipv6\_cidr\_blocks) | Number of IPv6 CIDR ranges to use on all computed ingress rules | `number` | `0` | no | | [number\_of\_computed\_ingress\_prefix\_list\_ids](#input\_number\_of\_computed\_ingress\_prefix\_list\_ids) | Number of prefix list IDs (for allowing access to VPC endpoints) to use on all computed ingress rules | `number` | `0` | no | | [number\_of\_computed\_ingress\_rules](#input\_number\_of\_computed\_ingress\_rules) | Number of computed ingress rules to create by name | `number` | `0` | no | -| [number\_of\_computed\_ingress\_with\_cidr\_blocks](#input\_number\_of\_computed\_ingress\_with\_cidr\_blocks) | Number of computed ingress rules to create where 'cidr\_blocks' is used | `number` | `0` | no | -| [number\_of\_computed\_ingress\_with\_ipv6\_cidr\_blocks](#input\_number\_of\_computed\_ingress\_with\_ipv6\_cidr\_blocks) | Number of computed ingress rules to create where 'ipv6\_cidr\_blocks' is used | `number` | `0` | no | -| [number\_of\_computed\_ingress\_with\_prefix\_list\_ids](#input\_number\_of\_computed\_ingress\_with\_prefix\_list\_ids) | Number of computed ingress rules to create where 'prefix\_list\_ids' is used | `number` | `0` | no | +| [number\_of\_computed\_ingress\_with\_cidr\_ipv4](#input\_number\_of\_computed\_ingress\_with\_cidr\_ipv4) | Number of computed ingress rules to create where 'cidr\_ipv4' is used | `number` | `0` | no | +| [number\_of\_computed\_ingress\_with\_cidr\_ipv6](#input\_number\_of\_computed\_ingress\_with\_cidr\_ipv6) | Number of computed ingress rules to create where 'ipv6\_cidr\_blocks' is used | `number` | `0` | no | +| [number\_of\_computed\_ingress\_with\_prefix\_list\_id](#input\_number\_of\_computed\_ingress\_with\_prefix\_list\_id) | Number of computed ingress rules to create where 'prefix\_list\_id' is used | `number` | `0` | no | +| [number\_of\_computed\_ingress\_with\_referenced\_security\_group\_id](#input\_number\_of\_computed\_ingress\_with\_referenced\_security\_group\_id) | Number of computed ingress rules to create where 'source\_security\_group\_id' is used | `number` | `0` | no | | [number\_of\_computed\_ingress\_with\_self](#input\_number\_of\_computed\_ingress\_with\_self) | Number of computed ingress rules to create where 'self' is defined | `number` | `0` | no | -| [number\_of\_computed\_ingress\_with\_source\_security\_group\_id](#input\_number\_of\_computed\_ingress\_with\_source\_security\_group\_id) | Number of computed ingress rules to create where 'source\_security\_group\_id' is used | `number` | `0` | no | | [revoke\_rules\_on\_delete](#input\_revoke\_rules\_on\_delete) | Instruct Terraform to revoke all of the Security Groups attached ingress and egress rules before deleting the rule itself. Enable for EMR. | `bool` | `false` | no | | [tags](#input\_tags) | A mapping of tags to assign to security group | `map(string)` | `{}` | no | | [use\_name\_prefix](#input\_use\_name\_prefix) | Whether to use name\_prefix or fixed name. Should be true to able to update security group name after initial creation | `bool` | `true` | no | diff --git a/modules/http-80/main.tf b/modules/http-80/main.tf index 80ea0adb..d2a1bf93 100644 --- a/modules/http-80/main.tf +++ b/modules/http-80/main.tf @@ -19,20 +19,20 @@ module "sg" { ingress_with_self = concat(var.auto_ingress_with_self, var.ingress_with_self) # Open to IPv4 cidr blocks - ingress_with_cidr_blocks = var.ingress_with_cidr_blocks + ingress_with_cidr_ipv4 = var.ingress_with_cidr_ipv4 # Open to IPv6 cidr blocks - ingress_with_ipv6_cidr_blocks = var.ingress_with_ipv6_cidr_blocks + ingress_with_cidr_ipv6 = var.ingress_with_cidr_ipv6 # Open for security group id - ingress_with_source_security_group_id = var.ingress_with_source_security_group_id + ingress_with_referenced_security_group_id = var.ingress_with_referenced_security_group_id # Open for prefix list id - ingress_with_prefix_list_ids = var.ingress_with_prefix_list_ids + ingress_with_prefix_list_id = var.ingress_with_prefix_list_id # Default ingress CIDR blocks - ingress_cidr_blocks = var.ingress_cidr_blocks - ingress_ipv6_cidr_blocks = var.ingress_ipv6_cidr_blocks + ingress_cidr_ipv4 = var.ingress_cidr_ipv4 + ingress_cidr_ipv6 = var.ingress_cidr_ipv6 # Default prefix list ids ingress_prefix_list_ids = var.ingress_prefix_list_ids @@ -47,26 +47,26 @@ module "sg" { computed_ingress_with_self = concat(var.auto_computed_ingress_with_self, var.computed_ingress_with_self) # Open to IPv4 cidr blocks - computed_ingress_with_cidr_blocks = var.computed_ingress_with_cidr_blocks + computed_ingress_with_cidr_ipv4 = var.computed_ingress_with_cidr_ipv4 # Open to IPv6 cidr blocks - computed_ingress_with_ipv6_cidr_blocks = var.computed_ingress_with_ipv6_cidr_blocks + computed_ingress_with_cidr_ipv6 = var.computed_ingress_with_cidr_ipv6 # Open for security group id - computed_ingress_with_source_security_group_id = var.computed_ingress_with_source_security_group_id + computed_ingress_with_referenced_security_group_id = var.computed_ingress_with_referenced_security_group_id # Open for prefix list id - computed_ingress_with_prefix_list_ids = var.computed_ingress_with_prefix_list_ids + computed_ingress_with_prefix_list_id = var.computed_ingress_with_prefix_list_id ############################# # Number of computed ingress ############################# - number_of_computed_ingress_rules = var.auto_number_of_computed_ingress_rules + var.number_of_computed_ingress_rules - number_of_computed_ingress_with_self = var.auto_number_of_computed_ingress_with_self + var.number_of_computed_ingress_with_self - number_of_computed_ingress_with_cidr_blocks = var.number_of_computed_ingress_with_cidr_blocks - number_of_computed_ingress_with_ipv6_cidr_blocks = var.number_of_computed_ingress_with_ipv6_cidr_blocks - number_of_computed_ingress_with_source_security_group_id = var.number_of_computed_ingress_with_source_security_group_id - number_of_computed_ingress_with_prefix_list_ids = var.number_of_computed_ingress_with_prefix_list_ids + number_of_computed_ingress_rules = var.auto_number_of_computed_ingress_rules + var.number_of_computed_ingress_rules + number_of_computed_ingress_with_self = var.auto_number_of_computed_ingress_with_self + var.number_of_computed_ingress_with_self + number_of_computed_ingress_with_cidr_ipv4 = var.number_of_computed_ingress_with_cidr_ipv4 + number_of_computed_ingress_with_cidr_ipv6 = var.number_of_computed_ingress_with_cidr_ipv6 + number_of_computed_ingress_with_referenced_security_group_id = var.number_of_computed_ingress_with_referenced_security_group_id + number_of_computed_ingress_with_prefix_list_id = var.number_of_computed_ingress_with_prefix_list_id ######### # Egress @@ -78,20 +78,20 @@ module "sg" { egress_with_self = concat(var.auto_egress_with_self, var.egress_with_self) # Open to IPv4 cidr blocks - egress_with_cidr_blocks = var.egress_with_cidr_blocks + egress_with_cidr_ipv4 = var.egress_with_cidr_ipv4 # Open to IPv6 cidr blocks - egress_with_ipv6_cidr_blocks = var.egress_with_ipv6_cidr_blocks + egress_with_cidr_ipv6 = var.egress_with_cidr_ipv6 # Open for security group id - egress_with_source_security_group_id = var.egress_with_source_security_group_id + egress_with_referenced_security_group_id = var.egress_with_referenced_security_group_id # Open for prefix list id - egress_with_prefix_list_ids = var.egress_with_prefix_list_ids + egress_with_prefix_list_id = var.egress_with_prefix_list_id # Default egress CIDR blocks - egress_cidr_blocks = var.egress_cidr_blocks - egress_ipv6_cidr_blocks = var.egress_ipv6_cidr_blocks + egress_cidr_ipv4 = var.egress_cidr_ipv4 + egress_cidr_ipv6 = var.egress_cidr_ipv6 # Default prefix list ids egress_prefix_list_ids = var.egress_prefix_list_ids @@ -106,24 +106,24 @@ module "sg" { computed_egress_with_self = concat(var.auto_computed_egress_with_self, var.computed_egress_with_self) # Open to IPv4 cidr blocks - computed_egress_with_cidr_blocks = var.computed_egress_with_cidr_blocks + computed_egress_with_cidr_ipv4 = var.computed_egress_with_cidr_ipv4 # Open to IPv6 cidr blocks - computed_egress_with_ipv6_cidr_blocks = var.computed_egress_with_ipv6_cidr_blocks + computed_egress_with_cidr_ipv6 = var.computed_egress_with_cidr_ipv6 # Open for security group id - computed_egress_with_source_security_group_id = var.computed_egress_with_source_security_group_id + computed_egress_with_referenced_security_group_id = var.computed_egress_with_referenced_security_group_id # Open for prefix list id - computed_egress_with_prefix_list_ids = var.computed_egress_with_prefix_list_ids + computed_egress_with_prefix_list_id = var.computed_egress_with_prefix_list_id ############################# # Number of computed egress ############################# - number_of_computed_egress_rules = var.auto_number_of_computed_egress_rules + var.number_of_computed_egress_rules - number_of_computed_egress_with_self = var.auto_number_of_computed_egress_with_self + var.number_of_computed_egress_with_self - number_of_computed_egress_with_cidr_blocks = var.number_of_computed_egress_with_cidr_blocks - number_of_computed_egress_with_ipv6_cidr_blocks = var.number_of_computed_egress_with_ipv6_cidr_blocks - number_of_computed_egress_with_source_security_group_id = var.number_of_computed_egress_with_source_security_group_id - number_of_computed_egress_with_prefix_list_ids = var.number_of_computed_egress_with_prefix_list_ids + number_of_computed_egress_rules = var.auto_number_of_computed_egress_rules + var.number_of_computed_egress_rules + number_of_computed_egress_with_self = var.auto_number_of_computed_egress_with_self + var.number_of_computed_egress_with_self + number_of_computed_egress_with_cidr_ipv4 = var.number_of_computed_egress_with_cidr_ipv4 + number_of_computed_egress_with_cidr_ipv6 = var.number_of_computed_egress_with_cidr_ipv6 + number_of_computed_egress_with_referenced_security_group_id = var.number_of_computed_egress_with_referenced_security_group_id + number_of_computed_egress_with_prefix_list_id = var.number_of_computed_egress_with_prefix_list_id } diff --git a/modules/http-80/variables.tf b/modules/http-80/variables.tf index 60c8c27b..6590c9e3 100644 --- a/modules/http-80/variables.tf +++ b/modules/http-80/variables.tf @@ -56,37 +56,37 @@ variable "ingress_with_self" { default = [] } -variable "ingress_with_cidr_blocks" { - description = "List of ingress rules to create where 'cidr_blocks' is used" +variable "ingress_with_cidr_ipv4" { + description = "List of ingress rules to create where 'cidr_ipv4' is used" type = list(map(string)) default = [] } -variable "ingress_with_ipv6_cidr_blocks" { +variable "ingress_with_cidr_ipv6" { description = "List of ingress rules to create where 'ipv6_cidr_blocks' is used" type = list(map(string)) default = [] } -variable "ingress_with_source_security_group_id" { +variable "ingress_with_referenced_security_group_id" { description = "List of ingress rules to create where 'source_security_group_id' is used" type = list(map(string)) default = [] } -variable "ingress_with_prefix_list_ids" { - description = "List of ingress rules to create where 'prefix_list_ids' is used" +variable "ingress_with_prefix_list_id" { + description = "List of ingress rules to create where 'prefix_list_id' is used" type = list(map(string)) default = [] } -variable "ingress_cidr_blocks" { +variable "ingress_cidr_ipv4" { description = "List of IPv4 CIDR ranges to use on all ingress rules" type = list(string) default = [] } -variable "ingress_ipv6_cidr_blocks" { +variable "ingress_cidr_ipv6" { description = "List of IPv6 CIDR ranges to use on all ingress rules" type = list(string) default = [] @@ -113,26 +113,26 @@ variable "computed_ingress_with_self" { default = [] } -variable "computed_ingress_with_cidr_blocks" { - description = "List of computed ingress rules to create where 'cidr_blocks' is used" +variable "computed_ingress_with_cidr_ipv4" { + description = "List of computed ingress rules to create where 'cidr_ipv4' is used" type = list(map(string)) default = [] } -variable "computed_ingress_with_ipv6_cidr_blocks" { +variable "computed_ingress_with_cidr_ipv6" { description = "List of computed ingress rules to create where 'ipv6_cidr_blocks' is used" type = list(map(string)) default = [] } -variable "computed_ingress_with_source_security_group_id" { +variable "computed_ingress_with_referenced_security_group_id" { description = "List of computed ingress rules to create where 'source_security_group_id' is used" type = list(map(string)) default = [] } -variable "computed_ingress_with_prefix_list_ids" { - description = "List of computed ingress rules to create where 'prefix_list_ids' is used" +variable "computed_ingress_with_prefix_list_id" { + description = "List of computed ingress rules to create where 'prefix_list_id' is used" type = list(map(string)) default = [] } @@ -170,26 +170,26 @@ variable "number_of_computed_ingress_with_self" { default = 0 } -variable "number_of_computed_ingress_with_cidr_blocks" { - description = "Number of computed ingress rules to create where 'cidr_blocks' is used" +variable "number_of_computed_ingress_with_cidr_ipv4" { + description = "Number of computed ingress rules to create where 'cidr_ipv4' is used" type = number default = 0 } -variable "number_of_computed_ingress_with_ipv6_cidr_blocks" { +variable "number_of_computed_ingress_with_cidr_ipv6" { description = "Number of computed ingress rules to create where 'ipv6_cidr_blocks' is used" type = number default = 0 } -variable "number_of_computed_ingress_with_source_security_group_id" { +variable "number_of_computed_ingress_with_referenced_security_group_id" { description = "Number of computed ingress rules to create where 'source_security_group_id' is used" type = number default = 0 } -variable "number_of_computed_ingress_with_prefix_list_ids" { - description = "Number of computed ingress rules to create where 'prefix_list_ids' is used" +variable "number_of_computed_ingress_with_prefix_list_id" { + description = "Number of computed ingress rules to create where 'prefix_list_id' is used" type = number default = 0 } @@ -227,37 +227,37 @@ variable "egress_with_self" { default = [] } -variable "egress_with_cidr_blocks" { - description = "List of egress rules to create where 'cidr_blocks' is used" +variable "egress_with_cidr_ipv4" { + description = "List of egress rules to create where 'cidr_ipv4' is used" type = list(map(string)) default = [] } -variable "egress_with_ipv6_cidr_blocks" { +variable "egress_with_cidr_ipv6" { description = "List of egress rules to create where 'ipv6_cidr_blocks' is used" type = list(map(string)) default = [] } -variable "egress_with_source_security_group_id" { +variable "egress_with_referenced_security_group_id" { description = "List of egress rules to create where 'source_security_group_id' is used" type = list(map(string)) default = [] } -variable "egress_with_prefix_list_ids" { - description = "List of egress rules to create where 'prefix_list_ids' is used" +variable "egress_with_prefix_list_id" { + description = "List of egress rules to create where 'prefix_list_id' is used" type = list(map(string)) default = [] } -variable "egress_cidr_blocks" { +variable "egress_cidr_ipv4" { description = "List of IPv4 CIDR ranges to use on all egress rules" type = list(string) default = ["0.0.0.0/0"] } -variable "egress_ipv6_cidr_blocks" { +variable "egress_cidr_ipv6" { description = "List of IPv6 CIDR ranges to use on all egress rules" type = list(string) default = ["::/0"] @@ -284,26 +284,26 @@ variable "computed_egress_with_self" { default = [] } -variable "computed_egress_with_cidr_blocks" { - description = "List of computed egress rules to create where 'cidr_blocks' is used" +variable "computed_egress_with_cidr_ipv4" { + description = "List of computed egress rules to create where 'cidr_ipv4' is used" type = list(map(string)) default = [] } -variable "computed_egress_with_ipv6_cidr_blocks" { +variable "computed_egress_with_cidr_ipv6" { description = "List of computed egress rules to create where 'ipv6_cidr_blocks' is used" type = list(map(string)) default = [] } -variable "computed_egress_with_source_security_group_id" { +variable "computed_egress_with_referenced_security_group_id" { description = "List of computed egress rules to create where 'source_security_group_id' is used" type = list(map(string)) default = [] } -variable "computed_egress_with_prefix_list_ids" { - description = "List of computed egress rules to create where 'prefix_list_ids' is used" +variable "computed_egress_with_prefix_list_id" { + description = "List of computed egress rules to create where 'prefix_list_id' is used" type = list(map(string)) default = [] } @@ -341,26 +341,26 @@ variable "number_of_computed_egress_with_self" { default = 0 } -variable "number_of_computed_egress_with_cidr_blocks" { - description = "Number of computed egress rules to create where 'cidr_blocks' is used" +variable "number_of_computed_egress_with_cidr_ipv4" { + description = "Number of computed egress rules to create where 'cidr_ipv4' is used" type = number default = 0 } -variable "number_of_computed_egress_with_ipv6_cidr_blocks" { +variable "number_of_computed_egress_with_cidr_ipv6" { description = "Number of computed egress rules to create where 'ipv6_cidr_blocks' is used" type = number default = 0 } -variable "number_of_computed_egress_with_source_security_group_id" { +variable "number_of_computed_egress_with_referenced_security_group_id" { description = "Number of computed egress rules to create where 'source_security_group_id' is used" type = number default = 0 } -variable "number_of_computed_egress_with_prefix_list_ids" { - description = "Number of computed egress rules to create where 'prefix_list_ids' is used" +variable "number_of_computed_egress_with_prefix_list_id" { + description = "Number of computed egress rules to create where 'prefix_list_id' is used" type = number default = 0 } diff --git a/modules/http-8080/README.md b/modules/http-8080/README.md index 6c350305..90302e22 100644 --- a/modules/http-8080/README.md +++ b/modules/http-8080/README.md @@ -55,59 +55,59 @@ No resources. | [computed\_egress\_ipv6\_cidr\_blocks](#input\_computed\_egress\_ipv6\_cidr\_blocks) | List of IPv6 CIDR ranges to use on all computed egress rules | `list(string)` |
[
"::/0"
]
| no | | [computed\_egress\_prefix\_list\_ids](#input\_computed\_egress\_prefix\_list\_ids) | List of prefix list IDs (for allowing access to VPC endpoints) to use on all computed egress rules | `list(string)` | `[]` | no | | [computed\_egress\_rules](#input\_computed\_egress\_rules) | List of computed egress rules to create by name | `list(string)` | `[]` | no | -| [computed\_egress\_with\_cidr\_blocks](#input\_computed\_egress\_with\_cidr\_blocks) | List of computed egress rules to create where 'cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [computed\_egress\_with\_ipv6\_cidr\_blocks](#input\_computed\_egress\_with\_ipv6\_cidr\_blocks) | List of computed egress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [computed\_egress\_with\_prefix\_list\_ids](#input\_computed\_egress\_with\_prefix\_list\_ids) | List of computed egress rules to create where 'prefix\_list\_ids' is used | `list(map(string))` | `[]` | no | +| [computed\_egress\_with\_cidr\_ipv4](#input\_computed\_egress\_with\_cidr\_ipv4) | List of computed egress rules to create where 'cidr\_ipv4' is used | `list(map(string))` | `[]` | no | +| [computed\_egress\_with\_cidr\_ipv6](#input\_computed\_egress\_with\_cidr\_ipv6) | List of computed egress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | +| [computed\_egress\_with\_prefix\_list\_id](#input\_computed\_egress\_with\_prefix\_list\_id) | List of computed egress rules to create where 'prefix\_list\_id' is used | `list(map(string))` | `[]` | no | +| [computed\_egress\_with\_referenced\_security\_group\_id](#input\_computed\_egress\_with\_referenced\_security\_group\_id) | List of computed egress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [computed\_egress\_with\_self](#input\_computed\_egress\_with\_self) | List of computed egress rules to create where 'self' is defined | `list(map(string))` | `[]` | no | -| [computed\_egress\_with\_source\_security\_group\_id](#input\_computed\_egress\_with\_source\_security\_group\_id) | List of computed egress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [computed\_ingress\_cidr\_blocks](#input\_computed\_ingress\_cidr\_blocks) | List of IPv4 CIDR ranges to use on all computed ingress rules | `list(string)` | `[]` | no | | [computed\_ingress\_ipv6\_cidr\_blocks](#input\_computed\_ingress\_ipv6\_cidr\_blocks) | List of IPv6 CIDR ranges to use on all computed ingress rules | `list(string)` | `[]` | no | | [computed\_ingress\_prefix\_list\_ids](#input\_computed\_ingress\_prefix\_list\_ids) | List of prefix list IDs (for allowing access to VPC endpoints) to use on all computed ingress rules | `list(string)` | `[]` | no | | [computed\_ingress\_rules](#input\_computed\_ingress\_rules) | List of computed ingress rules to create by name | `list(string)` | `[]` | no | -| [computed\_ingress\_with\_cidr\_blocks](#input\_computed\_ingress\_with\_cidr\_blocks) | List of computed ingress rules to create where 'cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [computed\_ingress\_with\_ipv6\_cidr\_blocks](#input\_computed\_ingress\_with\_ipv6\_cidr\_blocks) | List of computed ingress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [computed\_ingress\_with\_prefix\_list\_ids](#input\_computed\_ingress\_with\_prefix\_list\_ids) | List of computed ingress rules to create where 'prefix\_list\_ids' is used | `list(map(string))` | `[]` | no | +| [computed\_ingress\_with\_cidr\_ipv4](#input\_computed\_ingress\_with\_cidr\_ipv4) | List of computed ingress rules to create where 'cidr\_ipv4' is used | `list(map(string))` | `[]` | no | +| [computed\_ingress\_with\_cidr\_ipv6](#input\_computed\_ingress\_with\_cidr\_ipv6) | List of computed ingress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | +| [computed\_ingress\_with\_prefix\_list\_id](#input\_computed\_ingress\_with\_prefix\_list\_id) | List of computed ingress rules to create where 'prefix\_list\_id' is used | `list(map(string))` | `[]` | no | +| [computed\_ingress\_with\_referenced\_security\_group\_id](#input\_computed\_ingress\_with\_referenced\_security\_group\_id) | List of computed ingress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [computed\_ingress\_with\_self](#input\_computed\_ingress\_with\_self) | List of computed ingress rules to create where 'self' is defined | `list(map(string))` | `[]` | no | -| [computed\_ingress\_with\_source\_security\_group\_id](#input\_computed\_ingress\_with\_source\_security\_group\_id) | List of computed ingress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [create](#input\_create) | Whether to create security group and all rules | `bool` | `true` | no | | [description](#input\_description) | Description of security group | `string` | `"Security Group managed by Terraform"` | no | -| [egress\_cidr\_blocks](#input\_egress\_cidr\_blocks) | List of IPv4 CIDR ranges to use on all egress rules | `list(string)` |
[
"0.0.0.0/0"
]
| no | -| [egress\_ipv6\_cidr\_blocks](#input\_egress\_ipv6\_cidr\_blocks) | List of IPv6 CIDR ranges to use on all egress rules | `list(string)` |
[
"::/0"
]
| no | +| [egress\_cidr\_ipv4](#input\_egress\_cidr\_ipv4) | List of IPv4 CIDR ranges to use on all egress rules | `list(string)` |
[
"0.0.0.0/0"
]
| no | +| [egress\_cidr\_ipv6](#input\_egress\_cidr\_ipv6) | List of IPv6 CIDR ranges to use on all egress rules | `list(string)` |
[
"::/0"
]
| no | | [egress\_prefix\_list\_ids](#input\_egress\_prefix\_list\_ids) | List of prefix list IDs (for allowing access to VPC endpoints) to use on all egress rules | `list(string)` | `[]` | no | | [egress\_rules](#input\_egress\_rules) | List of egress rules to create by name | `list(string)` | `[]` | no | -| [egress\_with\_cidr\_blocks](#input\_egress\_with\_cidr\_blocks) | List of egress rules to create where 'cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [egress\_with\_ipv6\_cidr\_blocks](#input\_egress\_with\_ipv6\_cidr\_blocks) | List of egress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [egress\_with\_prefix\_list\_ids](#input\_egress\_with\_prefix\_list\_ids) | List of egress rules to create where 'prefix\_list\_ids' is used | `list(map(string))` | `[]` | no | +| [egress\_with\_cidr\_ipv4](#input\_egress\_with\_cidr\_ipv4) | List of egress rules to create where 'cidr\_ipv4' is used | `list(map(string))` | `[]` | no | +| [egress\_with\_cidr\_ipv6](#input\_egress\_with\_cidr\_ipv6) | List of egress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | +| [egress\_with\_prefix\_list\_id](#input\_egress\_with\_prefix\_list\_id) | List of egress rules to create where 'prefix\_list\_id' is used | `list(map(string))` | `[]` | no | +| [egress\_with\_referenced\_security\_group\_id](#input\_egress\_with\_referenced\_security\_group\_id) | List of egress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [egress\_with\_self](#input\_egress\_with\_self) | List of egress rules to create where 'self' is defined | `list(map(string))` | `[]` | no | -| [egress\_with\_source\_security\_group\_id](#input\_egress\_with\_source\_security\_group\_id) | List of egress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | -| [ingress\_cidr\_blocks](#input\_ingress\_cidr\_blocks) | List of IPv4 CIDR ranges to use on all ingress rules | `list(string)` | `[]` | no | -| [ingress\_ipv6\_cidr\_blocks](#input\_ingress\_ipv6\_cidr\_blocks) | List of IPv6 CIDR ranges to use on all ingress rules | `list(string)` | `[]` | no | +| [ingress\_cidr\_ipv4](#input\_ingress\_cidr\_ipv4) | List of IPv4 CIDR ranges to use on all ingress rules | `list(string)` | `[]` | no | +| [ingress\_cidr\_ipv6](#input\_ingress\_cidr\_ipv6) | List of IPv6 CIDR ranges to use on all ingress rules | `list(string)` | `[]` | no | | [ingress\_prefix\_list\_ids](#input\_ingress\_prefix\_list\_ids) | List of prefix list IDs (for allowing access to VPC endpoints) to use on all ingress rules | `list(string)` | `[]` | no | | [ingress\_rules](#input\_ingress\_rules) | List of ingress rules to create by name | `list(string)` | `[]` | no | -| [ingress\_with\_cidr\_blocks](#input\_ingress\_with\_cidr\_blocks) | List of ingress rules to create where 'cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [ingress\_with\_ipv6\_cidr\_blocks](#input\_ingress\_with\_ipv6\_cidr\_blocks) | List of ingress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [ingress\_with\_prefix\_list\_ids](#input\_ingress\_with\_prefix\_list\_ids) | List of ingress rules to create where 'prefix\_list\_ids' is used | `list(map(string))` | `[]` | no | +| [ingress\_with\_cidr\_ipv4](#input\_ingress\_with\_cidr\_ipv4) | List of ingress rules to create where 'cidr\_ipv4' is used | `list(map(string))` | `[]` | no | +| [ingress\_with\_cidr\_ipv6](#input\_ingress\_with\_cidr\_ipv6) | List of ingress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | +| [ingress\_with\_prefix\_list\_id](#input\_ingress\_with\_prefix\_list\_id) | List of ingress rules to create where 'prefix\_list\_id' is used | `list(map(string))` | `[]` | no | +| [ingress\_with\_referenced\_security\_group\_id](#input\_ingress\_with\_referenced\_security\_group\_id) | List of ingress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [ingress\_with\_self](#input\_ingress\_with\_self) | List of ingress rules to create where 'self' is defined | `list(map(string))` | `[]` | no | -| [ingress\_with\_source\_security\_group\_id](#input\_ingress\_with\_source\_security\_group\_id) | List of ingress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [name](#input\_name) | Name of security group | `string` | n/a | yes | | [number\_of\_computed\_egress\_cidr\_blocks](#input\_number\_of\_computed\_egress\_cidr\_blocks) | Number of IPv4 CIDR ranges to use on all computed egress rules | `number` | `0` | no | | [number\_of\_computed\_egress\_ipv6\_cidr\_blocks](#input\_number\_of\_computed\_egress\_ipv6\_cidr\_blocks) | Number of IPv6 CIDR ranges to use on all computed egress rules | `number` | `0` | no | | [number\_of\_computed\_egress\_prefix\_list\_ids](#input\_number\_of\_computed\_egress\_prefix\_list\_ids) | Number of prefix list IDs (for allowing access to VPC endpoints) to use on all computed egress rules | `number` | `0` | no | | [number\_of\_computed\_egress\_rules](#input\_number\_of\_computed\_egress\_rules) | Number of computed egress rules to create by name | `number` | `0` | no | -| [number\_of\_computed\_egress\_with\_cidr\_blocks](#input\_number\_of\_computed\_egress\_with\_cidr\_blocks) | Number of computed egress rules to create where 'cidr\_blocks' is used | `number` | `0` | no | -| [number\_of\_computed\_egress\_with\_ipv6\_cidr\_blocks](#input\_number\_of\_computed\_egress\_with\_ipv6\_cidr\_blocks) | Number of computed egress rules to create where 'ipv6\_cidr\_blocks' is used | `number` | `0` | no | -| [number\_of\_computed\_egress\_with\_prefix\_list\_ids](#input\_number\_of\_computed\_egress\_with\_prefix\_list\_ids) | Number of computed egress rules to create where 'prefix\_list\_ids' is used | `number` | `0` | no | +| [number\_of\_computed\_egress\_with\_cidr\_ipv4](#input\_number\_of\_computed\_egress\_with\_cidr\_ipv4) | Number of computed egress rules to create where 'cidr\_ipv4' is used | `number` | `0` | no | +| [number\_of\_computed\_egress\_with\_cidr\_ipv6](#input\_number\_of\_computed\_egress\_with\_cidr\_ipv6) | Number of computed egress rules to create where 'ipv6\_cidr\_blocks' is used | `number` | `0` | no | +| [number\_of\_computed\_egress\_with\_prefix\_list\_id](#input\_number\_of\_computed\_egress\_with\_prefix\_list\_id) | Number of computed egress rules to create where 'prefix\_list\_id' is used | `number` | `0` | no | +| [number\_of\_computed\_egress\_with\_referenced\_security\_group\_id](#input\_number\_of\_computed\_egress\_with\_referenced\_security\_group\_id) | Number of computed egress rules to create where 'source\_security\_group\_id' is used | `number` | `0` | no | | [number\_of\_computed\_egress\_with\_self](#input\_number\_of\_computed\_egress\_with\_self) | Number of computed egress rules to create where 'self' is defined | `number` | `0` | no | -| [number\_of\_computed\_egress\_with\_source\_security\_group\_id](#input\_number\_of\_computed\_egress\_with\_source\_security\_group\_id) | Number of computed egress rules to create where 'source\_security\_group\_id' is used | `number` | `0` | no | | [number\_of\_computed\_ingress\_cidr\_blocks](#input\_number\_of\_computed\_ingress\_cidr\_blocks) | Number of IPv4 CIDR ranges to use on all computed ingress rules | `number` | `0` | no | | [number\_of\_computed\_ingress\_ipv6\_cidr\_blocks](#input\_number\_of\_computed\_ingress\_ipv6\_cidr\_blocks) | Number of IPv6 CIDR ranges to use on all computed ingress rules | `number` | `0` | no | | [number\_of\_computed\_ingress\_prefix\_list\_ids](#input\_number\_of\_computed\_ingress\_prefix\_list\_ids) | Number of prefix list IDs (for allowing access to VPC endpoints) to use on all computed ingress rules | `number` | `0` | no | | [number\_of\_computed\_ingress\_rules](#input\_number\_of\_computed\_ingress\_rules) | Number of computed ingress rules to create by name | `number` | `0` | no | -| [number\_of\_computed\_ingress\_with\_cidr\_blocks](#input\_number\_of\_computed\_ingress\_with\_cidr\_blocks) | Number of computed ingress rules to create where 'cidr\_blocks' is used | `number` | `0` | no | -| [number\_of\_computed\_ingress\_with\_ipv6\_cidr\_blocks](#input\_number\_of\_computed\_ingress\_with\_ipv6\_cidr\_blocks) | Number of computed ingress rules to create where 'ipv6\_cidr\_blocks' is used | `number` | `0` | no | -| [number\_of\_computed\_ingress\_with\_prefix\_list\_ids](#input\_number\_of\_computed\_ingress\_with\_prefix\_list\_ids) | Number of computed ingress rules to create where 'prefix\_list\_ids' is used | `number` | `0` | no | +| [number\_of\_computed\_ingress\_with\_cidr\_ipv4](#input\_number\_of\_computed\_ingress\_with\_cidr\_ipv4) | Number of computed ingress rules to create where 'cidr\_ipv4' is used | `number` | `0` | no | +| [number\_of\_computed\_ingress\_with\_cidr\_ipv6](#input\_number\_of\_computed\_ingress\_with\_cidr\_ipv6) | Number of computed ingress rules to create where 'ipv6\_cidr\_blocks' is used | `number` | `0` | no | +| [number\_of\_computed\_ingress\_with\_prefix\_list\_id](#input\_number\_of\_computed\_ingress\_with\_prefix\_list\_id) | Number of computed ingress rules to create where 'prefix\_list\_id' is used | `number` | `0` | no | +| [number\_of\_computed\_ingress\_with\_referenced\_security\_group\_id](#input\_number\_of\_computed\_ingress\_with\_referenced\_security\_group\_id) | Number of computed ingress rules to create where 'source\_security\_group\_id' is used | `number` | `0` | no | | [number\_of\_computed\_ingress\_with\_self](#input\_number\_of\_computed\_ingress\_with\_self) | Number of computed ingress rules to create where 'self' is defined | `number` | `0` | no | -| [number\_of\_computed\_ingress\_with\_source\_security\_group\_id](#input\_number\_of\_computed\_ingress\_with\_source\_security\_group\_id) | Number of computed ingress rules to create where 'source\_security\_group\_id' is used | `number` | `0` | no | | [revoke\_rules\_on\_delete](#input\_revoke\_rules\_on\_delete) | Instruct Terraform to revoke all of the Security Groups attached ingress and egress rules before deleting the rule itself. Enable for EMR. | `bool` | `false` | no | | [tags](#input\_tags) | A mapping of tags to assign to security group | `map(string)` | `{}` | no | | [use\_name\_prefix](#input\_use\_name\_prefix) | Whether to use name\_prefix or fixed name. Should be true to able to update security group name after initial creation | `bool` | `true` | no | diff --git a/modules/http-8080/main.tf b/modules/http-8080/main.tf index 80ea0adb..d2a1bf93 100644 --- a/modules/http-8080/main.tf +++ b/modules/http-8080/main.tf @@ -19,20 +19,20 @@ module "sg" { ingress_with_self = concat(var.auto_ingress_with_self, var.ingress_with_self) # Open to IPv4 cidr blocks - ingress_with_cidr_blocks = var.ingress_with_cidr_blocks + ingress_with_cidr_ipv4 = var.ingress_with_cidr_ipv4 # Open to IPv6 cidr blocks - ingress_with_ipv6_cidr_blocks = var.ingress_with_ipv6_cidr_blocks + ingress_with_cidr_ipv6 = var.ingress_with_cidr_ipv6 # Open for security group id - ingress_with_source_security_group_id = var.ingress_with_source_security_group_id + ingress_with_referenced_security_group_id = var.ingress_with_referenced_security_group_id # Open for prefix list id - ingress_with_prefix_list_ids = var.ingress_with_prefix_list_ids + ingress_with_prefix_list_id = var.ingress_with_prefix_list_id # Default ingress CIDR blocks - ingress_cidr_blocks = var.ingress_cidr_blocks - ingress_ipv6_cidr_blocks = var.ingress_ipv6_cidr_blocks + ingress_cidr_ipv4 = var.ingress_cidr_ipv4 + ingress_cidr_ipv6 = var.ingress_cidr_ipv6 # Default prefix list ids ingress_prefix_list_ids = var.ingress_prefix_list_ids @@ -47,26 +47,26 @@ module "sg" { computed_ingress_with_self = concat(var.auto_computed_ingress_with_self, var.computed_ingress_with_self) # Open to IPv4 cidr blocks - computed_ingress_with_cidr_blocks = var.computed_ingress_with_cidr_blocks + computed_ingress_with_cidr_ipv4 = var.computed_ingress_with_cidr_ipv4 # Open to IPv6 cidr blocks - computed_ingress_with_ipv6_cidr_blocks = var.computed_ingress_with_ipv6_cidr_blocks + computed_ingress_with_cidr_ipv6 = var.computed_ingress_with_cidr_ipv6 # Open for security group id - computed_ingress_with_source_security_group_id = var.computed_ingress_with_source_security_group_id + computed_ingress_with_referenced_security_group_id = var.computed_ingress_with_referenced_security_group_id # Open for prefix list id - computed_ingress_with_prefix_list_ids = var.computed_ingress_with_prefix_list_ids + computed_ingress_with_prefix_list_id = var.computed_ingress_with_prefix_list_id ############################# # Number of computed ingress ############################# - number_of_computed_ingress_rules = var.auto_number_of_computed_ingress_rules + var.number_of_computed_ingress_rules - number_of_computed_ingress_with_self = var.auto_number_of_computed_ingress_with_self + var.number_of_computed_ingress_with_self - number_of_computed_ingress_with_cidr_blocks = var.number_of_computed_ingress_with_cidr_blocks - number_of_computed_ingress_with_ipv6_cidr_blocks = var.number_of_computed_ingress_with_ipv6_cidr_blocks - number_of_computed_ingress_with_source_security_group_id = var.number_of_computed_ingress_with_source_security_group_id - number_of_computed_ingress_with_prefix_list_ids = var.number_of_computed_ingress_with_prefix_list_ids + number_of_computed_ingress_rules = var.auto_number_of_computed_ingress_rules + var.number_of_computed_ingress_rules + number_of_computed_ingress_with_self = var.auto_number_of_computed_ingress_with_self + var.number_of_computed_ingress_with_self + number_of_computed_ingress_with_cidr_ipv4 = var.number_of_computed_ingress_with_cidr_ipv4 + number_of_computed_ingress_with_cidr_ipv6 = var.number_of_computed_ingress_with_cidr_ipv6 + number_of_computed_ingress_with_referenced_security_group_id = var.number_of_computed_ingress_with_referenced_security_group_id + number_of_computed_ingress_with_prefix_list_id = var.number_of_computed_ingress_with_prefix_list_id ######### # Egress @@ -78,20 +78,20 @@ module "sg" { egress_with_self = concat(var.auto_egress_with_self, var.egress_with_self) # Open to IPv4 cidr blocks - egress_with_cidr_blocks = var.egress_with_cidr_blocks + egress_with_cidr_ipv4 = var.egress_with_cidr_ipv4 # Open to IPv6 cidr blocks - egress_with_ipv6_cidr_blocks = var.egress_with_ipv6_cidr_blocks + egress_with_cidr_ipv6 = var.egress_with_cidr_ipv6 # Open for security group id - egress_with_source_security_group_id = var.egress_with_source_security_group_id + egress_with_referenced_security_group_id = var.egress_with_referenced_security_group_id # Open for prefix list id - egress_with_prefix_list_ids = var.egress_with_prefix_list_ids + egress_with_prefix_list_id = var.egress_with_prefix_list_id # Default egress CIDR blocks - egress_cidr_blocks = var.egress_cidr_blocks - egress_ipv6_cidr_blocks = var.egress_ipv6_cidr_blocks + egress_cidr_ipv4 = var.egress_cidr_ipv4 + egress_cidr_ipv6 = var.egress_cidr_ipv6 # Default prefix list ids egress_prefix_list_ids = var.egress_prefix_list_ids @@ -106,24 +106,24 @@ module "sg" { computed_egress_with_self = concat(var.auto_computed_egress_with_self, var.computed_egress_with_self) # Open to IPv4 cidr blocks - computed_egress_with_cidr_blocks = var.computed_egress_with_cidr_blocks + computed_egress_with_cidr_ipv4 = var.computed_egress_with_cidr_ipv4 # Open to IPv6 cidr blocks - computed_egress_with_ipv6_cidr_blocks = var.computed_egress_with_ipv6_cidr_blocks + computed_egress_with_cidr_ipv6 = var.computed_egress_with_cidr_ipv6 # Open for security group id - computed_egress_with_source_security_group_id = var.computed_egress_with_source_security_group_id + computed_egress_with_referenced_security_group_id = var.computed_egress_with_referenced_security_group_id # Open for prefix list id - computed_egress_with_prefix_list_ids = var.computed_egress_with_prefix_list_ids + computed_egress_with_prefix_list_id = var.computed_egress_with_prefix_list_id ############################# # Number of computed egress ############################# - number_of_computed_egress_rules = var.auto_number_of_computed_egress_rules + var.number_of_computed_egress_rules - number_of_computed_egress_with_self = var.auto_number_of_computed_egress_with_self + var.number_of_computed_egress_with_self - number_of_computed_egress_with_cidr_blocks = var.number_of_computed_egress_with_cidr_blocks - number_of_computed_egress_with_ipv6_cidr_blocks = var.number_of_computed_egress_with_ipv6_cidr_blocks - number_of_computed_egress_with_source_security_group_id = var.number_of_computed_egress_with_source_security_group_id - number_of_computed_egress_with_prefix_list_ids = var.number_of_computed_egress_with_prefix_list_ids + number_of_computed_egress_rules = var.auto_number_of_computed_egress_rules + var.number_of_computed_egress_rules + number_of_computed_egress_with_self = var.auto_number_of_computed_egress_with_self + var.number_of_computed_egress_with_self + number_of_computed_egress_with_cidr_ipv4 = var.number_of_computed_egress_with_cidr_ipv4 + number_of_computed_egress_with_cidr_ipv6 = var.number_of_computed_egress_with_cidr_ipv6 + number_of_computed_egress_with_referenced_security_group_id = var.number_of_computed_egress_with_referenced_security_group_id + number_of_computed_egress_with_prefix_list_id = var.number_of_computed_egress_with_prefix_list_id } diff --git a/modules/http-8080/variables.tf b/modules/http-8080/variables.tf index 60c8c27b..6590c9e3 100644 --- a/modules/http-8080/variables.tf +++ b/modules/http-8080/variables.tf @@ -56,37 +56,37 @@ variable "ingress_with_self" { default = [] } -variable "ingress_with_cidr_blocks" { - description = "List of ingress rules to create where 'cidr_blocks' is used" +variable "ingress_with_cidr_ipv4" { + description = "List of ingress rules to create where 'cidr_ipv4' is used" type = list(map(string)) default = [] } -variable "ingress_with_ipv6_cidr_blocks" { +variable "ingress_with_cidr_ipv6" { description = "List of ingress rules to create where 'ipv6_cidr_blocks' is used" type = list(map(string)) default = [] } -variable "ingress_with_source_security_group_id" { +variable "ingress_with_referenced_security_group_id" { description = "List of ingress rules to create where 'source_security_group_id' is used" type = list(map(string)) default = [] } -variable "ingress_with_prefix_list_ids" { - description = "List of ingress rules to create where 'prefix_list_ids' is used" +variable "ingress_with_prefix_list_id" { + description = "List of ingress rules to create where 'prefix_list_id' is used" type = list(map(string)) default = [] } -variable "ingress_cidr_blocks" { +variable "ingress_cidr_ipv4" { description = "List of IPv4 CIDR ranges to use on all ingress rules" type = list(string) default = [] } -variable "ingress_ipv6_cidr_blocks" { +variable "ingress_cidr_ipv6" { description = "List of IPv6 CIDR ranges to use on all ingress rules" type = list(string) default = [] @@ -113,26 +113,26 @@ variable "computed_ingress_with_self" { default = [] } -variable "computed_ingress_with_cidr_blocks" { - description = "List of computed ingress rules to create where 'cidr_blocks' is used" +variable "computed_ingress_with_cidr_ipv4" { + description = "List of computed ingress rules to create where 'cidr_ipv4' is used" type = list(map(string)) default = [] } -variable "computed_ingress_with_ipv6_cidr_blocks" { +variable "computed_ingress_with_cidr_ipv6" { description = "List of computed ingress rules to create where 'ipv6_cidr_blocks' is used" type = list(map(string)) default = [] } -variable "computed_ingress_with_source_security_group_id" { +variable "computed_ingress_with_referenced_security_group_id" { description = "List of computed ingress rules to create where 'source_security_group_id' is used" type = list(map(string)) default = [] } -variable "computed_ingress_with_prefix_list_ids" { - description = "List of computed ingress rules to create where 'prefix_list_ids' is used" +variable "computed_ingress_with_prefix_list_id" { + description = "List of computed ingress rules to create where 'prefix_list_id' is used" type = list(map(string)) default = [] } @@ -170,26 +170,26 @@ variable "number_of_computed_ingress_with_self" { default = 0 } -variable "number_of_computed_ingress_with_cidr_blocks" { - description = "Number of computed ingress rules to create where 'cidr_blocks' is used" +variable "number_of_computed_ingress_with_cidr_ipv4" { + description = "Number of computed ingress rules to create where 'cidr_ipv4' is used" type = number default = 0 } -variable "number_of_computed_ingress_with_ipv6_cidr_blocks" { +variable "number_of_computed_ingress_with_cidr_ipv6" { description = "Number of computed ingress rules to create where 'ipv6_cidr_blocks' is used" type = number default = 0 } -variable "number_of_computed_ingress_with_source_security_group_id" { +variable "number_of_computed_ingress_with_referenced_security_group_id" { description = "Number of computed ingress rules to create where 'source_security_group_id' is used" type = number default = 0 } -variable "number_of_computed_ingress_with_prefix_list_ids" { - description = "Number of computed ingress rules to create where 'prefix_list_ids' is used" +variable "number_of_computed_ingress_with_prefix_list_id" { + description = "Number of computed ingress rules to create where 'prefix_list_id' is used" type = number default = 0 } @@ -227,37 +227,37 @@ variable "egress_with_self" { default = [] } -variable "egress_with_cidr_blocks" { - description = "List of egress rules to create where 'cidr_blocks' is used" +variable "egress_with_cidr_ipv4" { + description = "List of egress rules to create where 'cidr_ipv4' is used" type = list(map(string)) default = [] } -variable "egress_with_ipv6_cidr_blocks" { +variable "egress_with_cidr_ipv6" { description = "List of egress rules to create where 'ipv6_cidr_blocks' is used" type = list(map(string)) default = [] } -variable "egress_with_source_security_group_id" { +variable "egress_with_referenced_security_group_id" { description = "List of egress rules to create where 'source_security_group_id' is used" type = list(map(string)) default = [] } -variable "egress_with_prefix_list_ids" { - description = "List of egress rules to create where 'prefix_list_ids' is used" +variable "egress_with_prefix_list_id" { + description = "List of egress rules to create where 'prefix_list_id' is used" type = list(map(string)) default = [] } -variable "egress_cidr_blocks" { +variable "egress_cidr_ipv4" { description = "List of IPv4 CIDR ranges to use on all egress rules" type = list(string) default = ["0.0.0.0/0"] } -variable "egress_ipv6_cidr_blocks" { +variable "egress_cidr_ipv6" { description = "List of IPv6 CIDR ranges to use on all egress rules" type = list(string) default = ["::/0"] @@ -284,26 +284,26 @@ variable "computed_egress_with_self" { default = [] } -variable "computed_egress_with_cidr_blocks" { - description = "List of computed egress rules to create where 'cidr_blocks' is used" +variable "computed_egress_with_cidr_ipv4" { + description = "List of computed egress rules to create where 'cidr_ipv4' is used" type = list(map(string)) default = [] } -variable "computed_egress_with_ipv6_cidr_blocks" { +variable "computed_egress_with_cidr_ipv6" { description = "List of computed egress rules to create where 'ipv6_cidr_blocks' is used" type = list(map(string)) default = [] } -variable "computed_egress_with_source_security_group_id" { +variable "computed_egress_with_referenced_security_group_id" { description = "List of computed egress rules to create where 'source_security_group_id' is used" type = list(map(string)) default = [] } -variable "computed_egress_with_prefix_list_ids" { - description = "List of computed egress rules to create where 'prefix_list_ids' is used" +variable "computed_egress_with_prefix_list_id" { + description = "List of computed egress rules to create where 'prefix_list_id' is used" type = list(map(string)) default = [] } @@ -341,26 +341,26 @@ variable "number_of_computed_egress_with_self" { default = 0 } -variable "number_of_computed_egress_with_cidr_blocks" { - description = "Number of computed egress rules to create where 'cidr_blocks' is used" +variable "number_of_computed_egress_with_cidr_ipv4" { + description = "Number of computed egress rules to create where 'cidr_ipv4' is used" type = number default = 0 } -variable "number_of_computed_egress_with_ipv6_cidr_blocks" { +variable "number_of_computed_egress_with_cidr_ipv6" { description = "Number of computed egress rules to create where 'ipv6_cidr_blocks' is used" type = number default = 0 } -variable "number_of_computed_egress_with_source_security_group_id" { +variable "number_of_computed_egress_with_referenced_security_group_id" { description = "Number of computed egress rules to create where 'source_security_group_id' is used" type = number default = 0 } -variable "number_of_computed_egress_with_prefix_list_ids" { - description = "Number of computed egress rules to create where 'prefix_list_ids' is used" +variable "number_of_computed_egress_with_prefix_list_id" { + description = "Number of computed egress rules to create where 'prefix_list_id' is used" type = number default = 0 } diff --git a/modules/https-443/README.md b/modules/https-443/README.md index 4abeb1ce..a8c9c66b 100644 --- a/modules/https-443/README.md +++ b/modules/https-443/README.md @@ -55,59 +55,59 @@ No resources. | [computed\_egress\_ipv6\_cidr\_blocks](#input\_computed\_egress\_ipv6\_cidr\_blocks) | List of IPv6 CIDR ranges to use on all computed egress rules | `list(string)` |
[
"::/0"
]
| no | | [computed\_egress\_prefix\_list\_ids](#input\_computed\_egress\_prefix\_list\_ids) | List of prefix list IDs (for allowing access to VPC endpoints) to use on all computed egress rules | `list(string)` | `[]` | no | | [computed\_egress\_rules](#input\_computed\_egress\_rules) | List of computed egress rules to create by name | `list(string)` | `[]` | no | -| [computed\_egress\_with\_cidr\_blocks](#input\_computed\_egress\_with\_cidr\_blocks) | List of computed egress rules to create where 'cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [computed\_egress\_with\_ipv6\_cidr\_blocks](#input\_computed\_egress\_with\_ipv6\_cidr\_blocks) | List of computed egress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [computed\_egress\_with\_prefix\_list\_ids](#input\_computed\_egress\_with\_prefix\_list\_ids) | List of computed egress rules to create where 'prefix\_list\_ids' is used | `list(map(string))` | `[]` | no | +| [computed\_egress\_with\_cidr\_ipv4](#input\_computed\_egress\_with\_cidr\_ipv4) | List of computed egress rules to create where 'cidr\_ipv4' is used | `list(map(string))` | `[]` | no | +| [computed\_egress\_with\_cidr\_ipv6](#input\_computed\_egress\_with\_cidr\_ipv6) | List of computed egress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | +| [computed\_egress\_with\_prefix\_list\_id](#input\_computed\_egress\_with\_prefix\_list\_id) | List of computed egress rules to create where 'prefix\_list\_id' is used | `list(map(string))` | `[]` | no | +| [computed\_egress\_with\_referenced\_security\_group\_id](#input\_computed\_egress\_with\_referenced\_security\_group\_id) | List of computed egress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [computed\_egress\_with\_self](#input\_computed\_egress\_with\_self) | List of computed egress rules to create where 'self' is defined | `list(map(string))` | `[]` | no | -| [computed\_egress\_with\_source\_security\_group\_id](#input\_computed\_egress\_with\_source\_security\_group\_id) | List of computed egress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [computed\_ingress\_cidr\_blocks](#input\_computed\_ingress\_cidr\_blocks) | List of IPv4 CIDR ranges to use on all computed ingress rules | `list(string)` | `[]` | no | | [computed\_ingress\_ipv6\_cidr\_blocks](#input\_computed\_ingress\_ipv6\_cidr\_blocks) | List of IPv6 CIDR ranges to use on all computed ingress rules | `list(string)` | `[]` | no | | [computed\_ingress\_prefix\_list\_ids](#input\_computed\_ingress\_prefix\_list\_ids) | List of prefix list IDs (for allowing access to VPC endpoints) to use on all computed ingress rules | `list(string)` | `[]` | no | | [computed\_ingress\_rules](#input\_computed\_ingress\_rules) | List of computed ingress rules to create by name | `list(string)` | `[]` | no | -| [computed\_ingress\_with\_cidr\_blocks](#input\_computed\_ingress\_with\_cidr\_blocks) | List of computed ingress rules to create where 'cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [computed\_ingress\_with\_ipv6\_cidr\_blocks](#input\_computed\_ingress\_with\_ipv6\_cidr\_blocks) | List of computed ingress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [computed\_ingress\_with\_prefix\_list\_ids](#input\_computed\_ingress\_with\_prefix\_list\_ids) | List of computed ingress rules to create where 'prefix\_list\_ids' is used | `list(map(string))` | `[]` | no | +| [computed\_ingress\_with\_cidr\_ipv4](#input\_computed\_ingress\_with\_cidr\_ipv4) | List of computed ingress rules to create where 'cidr\_ipv4' is used | `list(map(string))` | `[]` | no | +| [computed\_ingress\_with\_cidr\_ipv6](#input\_computed\_ingress\_with\_cidr\_ipv6) | List of computed ingress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | +| [computed\_ingress\_with\_prefix\_list\_id](#input\_computed\_ingress\_with\_prefix\_list\_id) | List of computed ingress rules to create where 'prefix\_list\_id' is used | `list(map(string))` | `[]` | no | +| [computed\_ingress\_with\_referenced\_security\_group\_id](#input\_computed\_ingress\_with\_referenced\_security\_group\_id) | List of computed ingress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [computed\_ingress\_with\_self](#input\_computed\_ingress\_with\_self) | List of computed ingress rules to create where 'self' is defined | `list(map(string))` | `[]` | no | -| [computed\_ingress\_with\_source\_security\_group\_id](#input\_computed\_ingress\_with\_source\_security\_group\_id) | List of computed ingress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [create](#input\_create) | Whether to create security group and all rules | `bool` | `true` | no | | [description](#input\_description) | Description of security group | `string` | `"Security Group managed by Terraform"` | no | -| [egress\_cidr\_blocks](#input\_egress\_cidr\_blocks) | List of IPv4 CIDR ranges to use on all egress rules | `list(string)` |
[
"0.0.0.0/0"
]
| no | -| [egress\_ipv6\_cidr\_blocks](#input\_egress\_ipv6\_cidr\_blocks) | List of IPv6 CIDR ranges to use on all egress rules | `list(string)` |
[
"::/0"
]
| no | +| [egress\_cidr\_ipv4](#input\_egress\_cidr\_ipv4) | List of IPv4 CIDR ranges to use on all egress rules | `list(string)` |
[
"0.0.0.0/0"
]
| no | +| [egress\_cidr\_ipv6](#input\_egress\_cidr\_ipv6) | List of IPv6 CIDR ranges to use on all egress rules | `list(string)` |
[
"::/0"
]
| no | | [egress\_prefix\_list\_ids](#input\_egress\_prefix\_list\_ids) | List of prefix list IDs (for allowing access to VPC endpoints) to use on all egress rules | `list(string)` | `[]` | no | | [egress\_rules](#input\_egress\_rules) | List of egress rules to create by name | `list(string)` | `[]` | no | -| [egress\_with\_cidr\_blocks](#input\_egress\_with\_cidr\_blocks) | List of egress rules to create where 'cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [egress\_with\_ipv6\_cidr\_blocks](#input\_egress\_with\_ipv6\_cidr\_blocks) | List of egress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [egress\_with\_prefix\_list\_ids](#input\_egress\_with\_prefix\_list\_ids) | List of egress rules to create where 'prefix\_list\_ids' is used | `list(map(string))` | `[]` | no | +| [egress\_with\_cidr\_ipv4](#input\_egress\_with\_cidr\_ipv4) | List of egress rules to create where 'cidr\_ipv4' is used | `list(map(string))` | `[]` | no | +| [egress\_with\_cidr\_ipv6](#input\_egress\_with\_cidr\_ipv6) | List of egress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | +| [egress\_with\_prefix\_list\_id](#input\_egress\_with\_prefix\_list\_id) | List of egress rules to create where 'prefix\_list\_id' is used | `list(map(string))` | `[]` | no | +| [egress\_with\_referenced\_security\_group\_id](#input\_egress\_with\_referenced\_security\_group\_id) | List of egress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [egress\_with\_self](#input\_egress\_with\_self) | List of egress rules to create where 'self' is defined | `list(map(string))` | `[]` | no | -| [egress\_with\_source\_security\_group\_id](#input\_egress\_with\_source\_security\_group\_id) | List of egress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | -| [ingress\_cidr\_blocks](#input\_ingress\_cidr\_blocks) | List of IPv4 CIDR ranges to use on all ingress rules | `list(string)` | `[]` | no | -| [ingress\_ipv6\_cidr\_blocks](#input\_ingress\_ipv6\_cidr\_blocks) | List of IPv6 CIDR ranges to use on all ingress rules | `list(string)` | `[]` | no | +| [ingress\_cidr\_ipv4](#input\_ingress\_cidr\_ipv4) | List of IPv4 CIDR ranges to use on all ingress rules | `list(string)` | `[]` | no | +| [ingress\_cidr\_ipv6](#input\_ingress\_cidr\_ipv6) | List of IPv6 CIDR ranges to use on all ingress rules | `list(string)` | `[]` | no | | [ingress\_prefix\_list\_ids](#input\_ingress\_prefix\_list\_ids) | List of prefix list IDs (for allowing access to VPC endpoints) to use on all ingress rules | `list(string)` | `[]` | no | | [ingress\_rules](#input\_ingress\_rules) | List of ingress rules to create by name | `list(string)` | `[]` | no | -| [ingress\_with\_cidr\_blocks](#input\_ingress\_with\_cidr\_blocks) | List of ingress rules to create where 'cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [ingress\_with\_ipv6\_cidr\_blocks](#input\_ingress\_with\_ipv6\_cidr\_blocks) | List of ingress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [ingress\_with\_prefix\_list\_ids](#input\_ingress\_with\_prefix\_list\_ids) | List of ingress rules to create where 'prefix\_list\_ids' is used | `list(map(string))` | `[]` | no | +| [ingress\_with\_cidr\_ipv4](#input\_ingress\_with\_cidr\_ipv4) | List of ingress rules to create where 'cidr\_ipv4' is used | `list(map(string))` | `[]` | no | +| [ingress\_with\_cidr\_ipv6](#input\_ingress\_with\_cidr\_ipv6) | List of ingress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | +| [ingress\_with\_prefix\_list\_id](#input\_ingress\_with\_prefix\_list\_id) | List of ingress rules to create where 'prefix\_list\_id' is used | `list(map(string))` | `[]` | no | +| [ingress\_with\_referenced\_security\_group\_id](#input\_ingress\_with\_referenced\_security\_group\_id) | List of ingress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [ingress\_with\_self](#input\_ingress\_with\_self) | List of ingress rules to create where 'self' is defined | `list(map(string))` | `[]` | no | -| [ingress\_with\_source\_security\_group\_id](#input\_ingress\_with\_source\_security\_group\_id) | List of ingress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [name](#input\_name) | Name of security group | `string` | n/a | yes | | [number\_of\_computed\_egress\_cidr\_blocks](#input\_number\_of\_computed\_egress\_cidr\_blocks) | Number of IPv4 CIDR ranges to use on all computed egress rules | `number` | `0` | no | | [number\_of\_computed\_egress\_ipv6\_cidr\_blocks](#input\_number\_of\_computed\_egress\_ipv6\_cidr\_blocks) | Number of IPv6 CIDR ranges to use on all computed egress rules | `number` | `0` | no | | [number\_of\_computed\_egress\_prefix\_list\_ids](#input\_number\_of\_computed\_egress\_prefix\_list\_ids) | Number of prefix list IDs (for allowing access to VPC endpoints) to use on all computed egress rules | `number` | `0` | no | | [number\_of\_computed\_egress\_rules](#input\_number\_of\_computed\_egress\_rules) | Number of computed egress rules to create by name | `number` | `0` | no | -| [number\_of\_computed\_egress\_with\_cidr\_blocks](#input\_number\_of\_computed\_egress\_with\_cidr\_blocks) | Number of computed egress rules to create where 'cidr\_blocks' is used | `number` | `0` | no | -| [number\_of\_computed\_egress\_with\_ipv6\_cidr\_blocks](#input\_number\_of\_computed\_egress\_with\_ipv6\_cidr\_blocks) | Number of computed egress rules to create where 'ipv6\_cidr\_blocks' is used | `number` | `0` | no | -| [number\_of\_computed\_egress\_with\_prefix\_list\_ids](#input\_number\_of\_computed\_egress\_with\_prefix\_list\_ids) | Number of computed egress rules to create where 'prefix\_list\_ids' is used | `number` | `0` | no | +| [number\_of\_computed\_egress\_with\_cidr\_ipv4](#input\_number\_of\_computed\_egress\_with\_cidr\_ipv4) | Number of computed egress rules to create where 'cidr\_ipv4' is used | `number` | `0` | no | +| [number\_of\_computed\_egress\_with\_cidr\_ipv6](#input\_number\_of\_computed\_egress\_with\_cidr\_ipv6) | Number of computed egress rules to create where 'ipv6\_cidr\_blocks' is used | `number` | `0` | no | +| [number\_of\_computed\_egress\_with\_prefix\_list\_id](#input\_number\_of\_computed\_egress\_with\_prefix\_list\_id) | Number of computed egress rules to create where 'prefix\_list\_id' is used | `number` | `0` | no | +| [number\_of\_computed\_egress\_with\_referenced\_security\_group\_id](#input\_number\_of\_computed\_egress\_with\_referenced\_security\_group\_id) | Number of computed egress rules to create where 'source\_security\_group\_id' is used | `number` | `0` | no | | [number\_of\_computed\_egress\_with\_self](#input\_number\_of\_computed\_egress\_with\_self) | Number of computed egress rules to create where 'self' is defined | `number` | `0` | no | -| [number\_of\_computed\_egress\_with\_source\_security\_group\_id](#input\_number\_of\_computed\_egress\_with\_source\_security\_group\_id) | Number of computed egress rules to create where 'source\_security\_group\_id' is used | `number` | `0` | no | | [number\_of\_computed\_ingress\_cidr\_blocks](#input\_number\_of\_computed\_ingress\_cidr\_blocks) | Number of IPv4 CIDR ranges to use on all computed ingress rules | `number` | `0` | no | | [number\_of\_computed\_ingress\_ipv6\_cidr\_blocks](#input\_number\_of\_computed\_ingress\_ipv6\_cidr\_blocks) | Number of IPv6 CIDR ranges to use on all computed ingress rules | `number` | `0` | no | | [number\_of\_computed\_ingress\_prefix\_list\_ids](#input\_number\_of\_computed\_ingress\_prefix\_list\_ids) | Number of prefix list IDs (for allowing access to VPC endpoints) to use on all computed ingress rules | `number` | `0` | no | | [number\_of\_computed\_ingress\_rules](#input\_number\_of\_computed\_ingress\_rules) | Number of computed ingress rules to create by name | `number` | `0` | no | -| [number\_of\_computed\_ingress\_with\_cidr\_blocks](#input\_number\_of\_computed\_ingress\_with\_cidr\_blocks) | Number of computed ingress rules to create where 'cidr\_blocks' is used | `number` | `0` | no | -| [number\_of\_computed\_ingress\_with\_ipv6\_cidr\_blocks](#input\_number\_of\_computed\_ingress\_with\_ipv6\_cidr\_blocks) | Number of computed ingress rules to create where 'ipv6\_cidr\_blocks' is used | `number` | `0` | no | -| [number\_of\_computed\_ingress\_with\_prefix\_list\_ids](#input\_number\_of\_computed\_ingress\_with\_prefix\_list\_ids) | Number of computed ingress rules to create where 'prefix\_list\_ids' is used | `number` | `0` | no | +| [number\_of\_computed\_ingress\_with\_cidr\_ipv4](#input\_number\_of\_computed\_ingress\_with\_cidr\_ipv4) | Number of computed ingress rules to create where 'cidr\_ipv4' is used | `number` | `0` | no | +| [number\_of\_computed\_ingress\_with\_cidr\_ipv6](#input\_number\_of\_computed\_ingress\_with\_cidr\_ipv6) | Number of computed ingress rules to create where 'ipv6\_cidr\_blocks' is used | `number` | `0` | no | +| [number\_of\_computed\_ingress\_with\_prefix\_list\_id](#input\_number\_of\_computed\_ingress\_with\_prefix\_list\_id) | Number of computed ingress rules to create where 'prefix\_list\_id' is used | `number` | `0` | no | +| [number\_of\_computed\_ingress\_with\_referenced\_security\_group\_id](#input\_number\_of\_computed\_ingress\_with\_referenced\_security\_group\_id) | Number of computed ingress rules to create where 'source\_security\_group\_id' is used | `number` | `0` | no | | [number\_of\_computed\_ingress\_with\_self](#input\_number\_of\_computed\_ingress\_with\_self) | Number of computed ingress rules to create where 'self' is defined | `number` | `0` | no | -| [number\_of\_computed\_ingress\_with\_source\_security\_group\_id](#input\_number\_of\_computed\_ingress\_with\_source\_security\_group\_id) | Number of computed ingress rules to create where 'source\_security\_group\_id' is used | `number` | `0` | no | | [revoke\_rules\_on\_delete](#input\_revoke\_rules\_on\_delete) | Instruct Terraform to revoke all of the Security Groups attached ingress and egress rules before deleting the rule itself. Enable for EMR. | `bool` | `false` | no | | [tags](#input\_tags) | A mapping of tags to assign to security group | `map(string)` | `{}` | no | | [use\_name\_prefix](#input\_use\_name\_prefix) | Whether to use name\_prefix or fixed name. Should be true to able to update security group name after initial creation | `bool` | `true` | no | diff --git a/modules/https-443/main.tf b/modules/https-443/main.tf index 80ea0adb..d2a1bf93 100644 --- a/modules/https-443/main.tf +++ b/modules/https-443/main.tf @@ -19,20 +19,20 @@ module "sg" { ingress_with_self = concat(var.auto_ingress_with_self, var.ingress_with_self) # Open to IPv4 cidr blocks - ingress_with_cidr_blocks = var.ingress_with_cidr_blocks + ingress_with_cidr_ipv4 = var.ingress_with_cidr_ipv4 # Open to IPv6 cidr blocks - ingress_with_ipv6_cidr_blocks = var.ingress_with_ipv6_cidr_blocks + ingress_with_cidr_ipv6 = var.ingress_with_cidr_ipv6 # Open for security group id - ingress_with_source_security_group_id = var.ingress_with_source_security_group_id + ingress_with_referenced_security_group_id = var.ingress_with_referenced_security_group_id # Open for prefix list id - ingress_with_prefix_list_ids = var.ingress_with_prefix_list_ids + ingress_with_prefix_list_id = var.ingress_with_prefix_list_id # Default ingress CIDR blocks - ingress_cidr_blocks = var.ingress_cidr_blocks - ingress_ipv6_cidr_blocks = var.ingress_ipv6_cidr_blocks + ingress_cidr_ipv4 = var.ingress_cidr_ipv4 + ingress_cidr_ipv6 = var.ingress_cidr_ipv6 # Default prefix list ids ingress_prefix_list_ids = var.ingress_prefix_list_ids @@ -47,26 +47,26 @@ module "sg" { computed_ingress_with_self = concat(var.auto_computed_ingress_with_self, var.computed_ingress_with_self) # Open to IPv4 cidr blocks - computed_ingress_with_cidr_blocks = var.computed_ingress_with_cidr_blocks + computed_ingress_with_cidr_ipv4 = var.computed_ingress_with_cidr_ipv4 # Open to IPv6 cidr blocks - computed_ingress_with_ipv6_cidr_blocks = var.computed_ingress_with_ipv6_cidr_blocks + computed_ingress_with_cidr_ipv6 = var.computed_ingress_with_cidr_ipv6 # Open for security group id - computed_ingress_with_source_security_group_id = var.computed_ingress_with_source_security_group_id + computed_ingress_with_referenced_security_group_id = var.computed_ingress_with_referenced_security_group_id # Open for prefix list id - computed_ingress_with_prefix_list_ids = var.computed_ingress_with_prefix_list_ids + computed_ingress_with_prefix_list_id = var.computed_ingress_with_prefix_list_id ############################# # Number of computed ingress ############################# - number_of_computed_ingress_rules = var.auto_number_of_computed_ingress_rules + var.number_of_computed_ingress_rules - number_of_computed_ingress_with_self = var.auto_number_of_computed_ingress_with_self + var.number_of_computed_ingress_with_self - number_of_computed_ingress_with_cidr_blocks = var.number_of_computed_ingress_with_cidr_blocks - number_of_computed_ingress_with_ipv6_cidr_blocks = var.number_of_computed_ingress_with_ipv6_cidr_blocks - number_of_computed_ingress_with_source_security_group_id = var.number_of_computed_ingress_with_source_security_group_id - number_of_computed_ingress_with_prefix_list_ids = var.number_of_computed_ingress_with_prefix_list_ids + number_of_computed_ingress_rules = var.auto_number_of_computed_ingress_rules + var.number_of_computed_ingress_rules + number_of_computed_ingress_with_self = var.auto_number_of_computed_ingress_with_self + var.number_of_computed_ingress_with_self + number_of_computed_ingress_with_cidr_ipv4 = var.number_of_computed_ingress_with_cidr_ipv4 + number_of_computed_ingress_with_cidr_ipv6 = var.number_of_computed_ingress_with_cidr_ipv6 + number_of_computed_ingress_with_referenced_security_group_id = var.number_of_computed_ingress_with_referenced_security_group_id + number_of_computed_ingress_with_prefix_list_id = var.number_of_computed_ingress_with_prefix_list_id ######### # Egress @@ -78,20 +78,20 @@ module "sg" { egress_with_self = concat(var.auto_egress_with_self, var.egress_with_self) # Open to IPv4 cidr blocks - egress_with_cidr_blocks = var.egress_with_cidr_blocks + egress_with_cidr_ipv4 = var.egress_with_cidr_ipv4 # Open to IPv6 cidr blocks - egress_with_ipv6_cidr_blocks = var.egress_with_ipv6_cidr_blocks + egress_with_cidr_ipv6 = var.egress_with_cidr_ipv6 # Open for security group id - egress_with_source_security_group_id = var.egress_with_source_security_group_id + egress_with_referenced_security_group_id = var.egress_with_referenced_security_group_id # Open for prefix list id - egress_with_prefix_list_ids = var.egress_with_prefix_list_ids + egress_with_prefix_list_id = var.egress_with_prefix_list_id # Default egress CIDR blocks - egress_cidr_blocks = var.egress_cidr_blocks - egress_ipv6_cidr_blocks = var.egress_ipv6_cidr_blocks + egress_cidr_ipv4 = var.egress_cidr_ipv4 + egress_cidr_ipv6 = var.egress_cidr_ipv6 # Default prefix list ids egress_prefix_list_ids = var.egress_prefix_list_ids @@ -106,24 +106,24 @@ module "sg" { computed_egress_with_self = concat(var.auto_computed_egress_with_self, var.computed_egress_with_self) # Open to IPv4 cidr blocks - computed_egress_with_cidr_blocks = var.computed_egress_with_cidr_blocks + computed_egress_with_cidr_ipv4 = var.computed_egress_with_cidr_ipv4 # Open to IPv6 cidr blocks - computed_egress_with_ipv6_cidr_blocks = var.computed_egress_with_ipv6_cidr_blocks + computed_egress_with_cidr_ipv6 = var.computed_egress_with_cidr_ipv6 # Open for security group id - computed_egress_with_source_security_group_id = var.computed_egress_with_source_security_group_id + computed_egress_with_referenced_security_group_id = var.computed_egress_with_referenced_security_group_id # Open for prefix list id - computed_egress_with_prefix_list_ids = var.computed_egress_with_prefix_list_ids + computed_egress_with_prefix_list_id = var.computed_egress_with_prefix_list_id ############################# # Number of computed egress ############################# - number_of_computed_egress_rules = var.auto_number_of_computed_egress_rules + var.number_of_computed_egress_rules - number_of_computed_egress_with_self = var.auto_number_of_computed_egress_with_self + var.number_of_computed_egress_with_self - number_of_computed_egress_with_cidr_blocks = var.number_of_computed_egress_with_cidr_blocks - number_of_computed_egress_with_ipv6_cidr_blocks = var.number_of_computed_egress_with_ipv6_cidr_blocks - number_of_computed_egress_with_source_security_group_id = var.number_of_computed_egress_with_source_security_group_id - number_of_computed_egress_with_prefix_list_ids = var.number_of_computed_egress_with_prefix_list_ids + number_of_computed_egress_rules = var.auto_number_of_computed_egress_rules + var.number_of_computed_egress_rules + number_of_computed_egress_with_self = var.auto_number_of_computed_egress_with_self + var.number_of_computed_egress_with_self + number_of_computed_egress_with_cidr_ipv4 = var.number_of_computed_egress_with_cidr_ipv4 + number_of_computed_egress_with_cidr_ipv6 = var.number_of_computed_egress_with_cidr_ipv6 + number_of_computed_egress_with_referenced_security_group_id = var.number_of_computed_egress_with_referenced_security_group_id + number_of_computed_egress_with_prefix_list_id = var.number_of_computed_egress_with_prefix_list_id } diff --git a/modules/https-443/variables.tf b/modules/https-443/variables.tf index 60c8c27b..6590c9e3 100644 --- a/modules/https-443/variables.tf +++ b/modules/https-443/variables.tf @@ -56,37 +56,37 @@ variable "ingress_with_self" { default = [] } -variable "ingress_with_cidr_blocks" { - description = "List of ingress rules to create where 'cidr_blocks' is used" +variable "ingress_with_cidr_ipv4" { + description = "List of ingress rules to create where 'cidr_ipv4' is used" type = list(map(string)) default = [] } -variable "ingress_with_ipv6_cidr_blocks" { +variable "ingress_with_cidr_ipv6" { description = "List of ingress rules to create where 'ipv6_cidr_blocks' is used" type = list(map(string)) default = [] } -variable "ingress_with_source_security_group_id" { +variable "ingress_with_referenced_security_group_id" { description = "List of ingress rules to create where 'source_security_group_id' is used" type = list(map(string)) default = [] } -variable "ingress_with_prefix_list_ids" { - description = "List of ingress rules to create where 'prefix_list_ids' is used" +variable "ingress_with_prefix_list_id" { + description = "List of ingress rules to create where 'prefix_list_id' is used" type = list(map(string)) default = [] } -variable "ingress_cidr_blocks" { +variable "ingress_cidr_ipv4" { description = "List of IPv4 CIDR ranges to use on all ingress rules" type = list(string) default = [] } -variable "ingress_ipv6_cidr_blocks" { +variable "ingress_cidr_ipv6" { description = "List of IPv6 CIDR ranges to use on all ingress rules" type = list(string) default = [] @@ -113,26 +113,26 @@ variable "computed_ingress_with_self" { default = [] } -variable "computed_ingress_with_cidr_blocks" { - description = "List of computed ingress rules to create where 'cidr_blocks' is used" +variable "computed_ingress_with_cidr_ipv4" { + description = "List of computed ingress rules to create where 'cidr_ipv4' is used" type = list(map(string)) default = [] } -variable "computed_ingress_with_ipv6_cidr_blocks" { +variable "computed_ingress_with_cidr_ipv6" { description = "List of computed ingress rules to create where 'ipv6_cidr_blocks' is used" type = list(map(string)) default = [] } -variable "computed_ingress_with_source_security_group_id" { +variable "computed_ingress_with_referenced_security_group_id" { description = "List of computed ingress rules to create where 'source_security_group_id' is used" type = list(map(string)) default = [] } -variable "computed_ingress_with_prefix_list_ids" { - description = "List of computed ingress rules to create where 'prefix_list_ids' is used" +variable "computed_ingress_with_prefix_list_id" { + description = "List of computed ingress rules to create where 'prefix_list_id' is used" type = list(map(string)) default = [] } @@ -170,26 +170,26 @@ variable "number_of_computed_ingress_with_self" { default = 0 } -variable "number_of_computed_ingress_with_cidr_blocks" { - description = "Number of computed ingress rules to create where 'cidr_blocks' is used" +variable "number_of_computed_ingress_with_cidr_ipv4" { + description = "Number of computed ingress rules to create where 'cidr_ipv4' is used" type = number default = 0 } -variable "number_of_computed_ingress_with_ipv6_cidr_blocks" { +variable "number_of_computed_ingress_with_cidr_ipv6" { description = "Number of computed ingress rules to create where 'ipv6_cidr_blocks' is used" type = number default = 0 } -variable "number_of_computed_ingress_with_source_security_group_id" { +variable "number_of_computed_ingress_with_referenced_security_group_id" { description = "Number of computed ingress rules to create where 'source_security_group_id' is used" type = number default = 0 } -variable "number_of_computed_ingress_with_prefix_list_ids" { - description = "Number of computed ingress rules to create where 'prefix_list_ids' is used" +variable "number_of_computed_ingress_with_prefix_list_id" { + description = "Number of computed ingress rules to create where 'prefix_list_id' is used" type = number default = 0 } @@ -227,37 +227,37 @@ variable "egress_with_self" { default = [] } -variable "egress_with_cidr_blocks" { - description = "List of egress rules to create where 'cidr_blocks' is used" +variable "egress_with_cidr_ipv4" { + description = "List of egress rules to create where 'cidr_ipv4' is used" type = list(map(string)) default = [] } -variable "egress_with_ipv6_cidr_blocks" { +variable "egress_with_cidr_ipv6" { description = "List of egress rules to create where 'ipv6_cidr_blocks' is used" type = list(map(string)) default = [] } -variable "egress_with_source_security_group_id" { +variable "egress_with_referenced_security_group_id" { description = "List of egress rules to create where 'source_security_group_id' is used" type = list(map(string)) default = [] } -variable "egress_with_prefix_list_ids" { - description = "List of egress rules to create where 'prefix_list_ids' is used" +variable "egress_with_prefix_list_id" { + description = "List of egress rules to create where 'prefix_list_id' is used" type = list(map(string)) default = [] } -variable "egress_cidr_blocks" { +variable "egress_cidr_ipv4" { description = "List of IPv4 CIDR ranges to use on all egress rules" type = list(string) default = ["0.0.0.0/0"] } -variable "egress_ipv6_cidr_blocks" { +variable "egress_cidr_ipv6" { description = "List of IPv6 CIDR ranges to use on all egress rules" type = list(string) default = ["::/0"] @@ -284,26 +284,26 @@ variable "computed_egress_with_self" { default = [] } -variable "computed_egress_with_cidr_blocks" { - description = "List of computed egress rules to create where 'cidr_blocks' is used" +variable "computed_egress_with_cidr_ipv4" { + description = "List of computed egress rules to create where 'cidr_ipv4' is used" type = list(map(string)) default = [] } -variable "computed_egress_with_ipv6_cidr_blocks" { +variable "computed_egress_with_cidr_ipv6" { description = "List of computed egress rules to create where 'ipv6_cidr_blocks' is used" type = list(map(string)) default = [] } -variable "computed_egress_with_source_security_group_id" { +variable "computed_egress_with_referenced_security_group_id" { description = "List of computed egress rules to create where 'source_security_group_id' is used" type = list(map(string)) default = [] } -variable "computed_egress_with_prefix_list_ids" { - description = "List of computed egress rules to create where 'prefix_list_ids' is used" +variable "computed_egress_with_prefix_list_id" { + description = "List of computed egress rules to create where 'prefix_list_id' is used" type = list(map(string)) default = [] } @@ -341,26 +341,26 @@ variable "number_of_computed_egress_with_self" { default = 0 } -variable "number_of_computed_egress_with_cidr_blocks" { - description = "Number of computed egress rules to create where 'cidr_blocks' is used" +variable "number_of_computed_egress_with_cidr_ipv4" { + description = "Number of computed egress rules to create where 'cidr_ipv4' is used" type = number default = 0 } -variable "number_of_computed_egress_with_ipv6_cidr_blocks" { +variable "number_of_computed_egress_with_cidr_ipv6" { description = "Number of computed egress rules to create where 'ipv6_cidr_blocks' is used" type = number default = 0 } -variable "number_of_computed_egress_with_source_security_group_id" { +variable "number_of_computed_egress_with_referenced_security_group_id" { description = "Number of computed egress rules to create where 'source_security_group_id' is used" type = number default = 0 } -variable "number_of_computed_egress_with_prefix_list_ids" { - description = "Number of computed egress rules to create where 'prefix_list_ids' is used" +variable "number_of_computed_egress_with_prefix_list_id" { + description = "Number of computed egress rules to create where 'prefix_list_id' is used" type = number default = 0 } diff --git a/modules/https-8443/README.md b/modules/https-8443/README.md index fcb8c4b3..f1a0b74f 100644 --- a/modules/https-8443/README.md +++ b/modules/https-8443/README.md @@ -55,59 +55,59 @@ No resources. | [computed\_egress\_ipv6\_cidr\_blocks](#input\_computed\_egress\_ipv6\_cidr\_blocks) | List of IPv6 CIDR ranges to use on all computed egress rules | `list(string)` |
[
"::/0"
]
| no | | [computed\_egress\_prefix\_list\_ids](#input\_computed\_egress\_prefix\_list\_ids) | List of prefix list IDs (for allowing access to VPC endpoints) to use on all computed egress rules | `list(string)` | `[]` | no | | [computed\_egress\_rules](#input\_computed\_egress\_rules) | List of computed egress rules to create by name | `list(string)` | `[]` | no | -| [computed\_egress\_with\_cidr\_blocks](#input\_computed\_egress\_with\_cidr\_blocks) | List of computed egress rules to create where 'cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [computed\_egress\_with\_ipv6\_cidr\_blocks](#input\_computed\_egress\_with\_ipv6\_cidr\_blocks) | List of computed egress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [computed\_egress\_with\_prefix\_list\_ids](#input\_computed\_egress\_with\_prefix\_list\_ids) | List of computed egress rules to create where 'prefix\_list\_ids' is used | `list(map(string))` | `[]` | no | +| [computed\_egress\_with\_cidr\_ipv4](#input\_computed\_egress\_with\_cidr\_ipv4) | List of computed egress rules to create where 'cidr\_ipv4' is used | `list(map(string))` | `[]` | no | +| [computed\_egress\_with\_cidr\_ipv6](#input\_computed\_egress\_with\_cidr\_ipv6) | List of computed egress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | +| [computed\_egress\_with\_prefix\_list\_id](#input\_computed\_egress\_with\_prefix\_list\_id) | List of computed egress rules to create where 'prefix\_list\_id' is used | `list(map(string))` | `[]` | no | +| [computed\_egress\_with\_referenced\_security\_group\_id](#input\_computed\_egress\_with\_referenced\_security\_group\_id) | List of computed egress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [computed\_egress\_with\_self](#input\_computed\_egress\_with\_self) | List of computed egress rules to create where 'self' is defined | `list(map(string))` | `[]` | no | -| [computed\_egress\_with\_source\_security\_group\_id](#input\_computed\_egress\_with\_source\_security\_group\_id) | List of computed egress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [computed\_ingress\_cidr\_blocks](#input\_computed\_ingress\_cidr\_blocks) | List of IPv4 CIDR ranges to use on all computed ingress rules | `list(string)` | `[]` | no | | [computed\_ingress\_ipv6\_cidr\_blocks](#input\_computed\_ingress\_ipv6\_cidr\_blocks) | List of IPv6 CIDR ranges to use on all computed ingress rules | `list(string)` | `[]` | no | | [computed\_ingress\_prefix\_list\_ids](#input\_computed\_ingress\_prefix\_list\_ids) | List of prefix list IDs (for allowing access to VPC endpoints) to use on all computed ingress rules | `list(string)` | `[]` | no | | [computed\_ingress\_rules](#input\_computed\_ingress\_rules) | List of computed ingress rules to create by name | `list(string)` | `[]` | no | -| [computed\_ingress\_with\_cidr\_blocks](#input\_computed\_ingress\_with\_cidr\_blocks) | List of computed ingress rules to create where 'cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [computed\_ingress\_with\_ipv6\_cidr\_blocks](#input\_computed\_ingress\_with\_ipv6\_cidr\_blocks) | List of computed ingress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [computed\_ingress\_with\_prefix\_list\_ids](#input\_computed\_ingress\_with\_prefix\_list\_ids) | List of computed ingress rules to create where 'prefix\_list\_ids' is used | `list(map(string))` | `[]` | no | +| [computed\_ingress\_with\_cidr\_ipv4](#input\_computed\_ingress\_with\_cidr\_ipv4) | List of computed ingress rules to create where 'cidr\_ipv4' is used | `list(map(string))` | `[]` | no | +| [computed\_ingress\_with\_cidr\_ipv6](#input\_computed\_ingress\_with\_cidr\_ipv6) | List of computed ingress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | +| [computed\_ingress\_with\_prefix\_list\_id](#input\_computed\_ingress\_with\_prefix\_list\_id) | List of computed ingress rules to create where 'prefix\_list\_id' is used | `list(map(string))` | `[]` | no | +| [computed\_ingress\_with\_referenced\_security\_group\_id](#input\_computed\_ingress\_with\_referenced\_security\_group\_id) | List of computed ingress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [computed\_ingress\_with\_self](#input\_computed\_ingress\_with\_self) | List of computed ingress rules to create where 'self' is defined | `list(map(string))` | `[]` | no | -| [computed\_ingress\_with\_source\_security\_group\_id](#input\_computed\_ingress\_with\_source\_security\_group\_id) | List of computed ingress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [create](#input\_create) | Whether to create security group and all rules | `bool` | `true` | no | | [description](#input\_description) | Description of security group | `string` | `"Security Group managed by Terraform"` | no | -| [egress\_cidr\_blocks](#input\_egress\_cidr\_blocks) | List of IPv4 CIDR ranges to use on all egress rules | `list(string)` |
[
"0.0.0.0/0"
]
| no | -| [egress\_ipv6\_cidr\_blocks](#input\_egress\_ipv6\_cidr\_blocks) | List of IPv6 CIDR ranges to use on all egress rules | `list(string)` |
[
"::/0"
]
| no | +| [egress\_cidr\_ipv4](#input\_egress\_cidr\_ipv4) | List of IPv4 CIDR ranges to use on all egress rules | `list(string)` |
[
"0.0.0.0/0"
]
| no | +| [egress\_cidr\_ipv6](#input\_egress\_cidr\_ipv6) | List of IPv6 CIDR ranges to use on all egress rules | `list(string)` |
[
"::/0"
]
| no | | [egress\_prefix\_list\_ids](#input\_egress\_prefix\_list\_ids) | List of prefix list IDs (for allowing access to VPC endpoints) to use on all egress rules | `list(string)` | `[]` | no | | [egress\_rules](#input\_egress\_rules) | List of egress rules to create by name | `list(string)` | `[]` | no | -| [egress\_with\_cidr\_blocks](#input\_egress\_with\_cidr\_blocks) | List of egress rules to create where 'cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [egress\_with\_ipv6\_cidr\_blocks](#input\_egress\_with\_ipv6\_cidr\_blocks) | List of egress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [egress\_with\_prefix\_list\_ids](#input\_egress\_with\_prefix\_list\_ids) | List of egress rules to create where 'prefix\_list\_ids' is used | `list(map(string))` | `[]` | no | +| [egress\_with\_cidr\_ipv4](#input\_egress\_with\_cidr\_ipv4) | List of egress rules to create where 'cidr\_ipv4' is used | `list(map(string))` | `[]` | no | +| [egress\_with\_cidr\_ipv6](#input\_egress\_with\_cidr\_ipv6) | List of egress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | +| [egress\_with\_prefix\_list\_id](#input\_egress\_with\_prefix\_list\_id) | List of egress rules to create where 'prefix\_list\_id' is used | `list(map(string))` | `[]` | no | +| [egress\_with\_referenced\_security\_group\_id](#input\_egress\_with\_referenced\_security\_group\_id) | List of egress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [egress\_with\_self](#input\_egress\_with\_self) | List of egress rules to create where 'self' is defined | `list(map(string))` | `[]` | no | -| [egress\_with\_source\_security\_group\_id](#input\_egress\_with\_source\_security\_group\_id) | List of egress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | -| [ingress\_cidr\_blocks](#input\_ingress\_cidr\_blocks) | List of IPv4 CIDR ranges to use on all ingress rules | `list(string)` | `[]` | no | -| [ingress\_ipv6\_cidr\_blocks](#input\_ingress\_ipv6\_cidr\_blocks) | List of IPv6 CIDR ranges to use on all ingress rules | `list(string)` | `[]` | no | +| [ingress\_cidr\_ipv4](#input\_ingress\_cidr\_ipv4) | List of IPv4 CIDR ranges to use on all ingress rules | `list(string)` | `[]` | no | +| [ingress\_cidr\_ipv6](#input\_ingress\_cidr\_ipv6) | List of IPv6 CIDR ranges to use on all ingress rules | `list(string)` | `[]` | no | | [ingress\_prefix\_list\_ids](#input\_ingress\_prefix\_list\_ids) | List of prefix list IDs (for allowing access to VPC endpoints) to use on all ingress rules | `list(string)` | `[]` | no | | [ingress\_rules](#input\_ingress\_rules) | List of ingress rules to create by name | `list(string)` | `[]` | no | -| [ingress\_with\_cidr\_blocks](#input\_ingress\_with\_cidr\_blocks) | List of ingress rules to create where 'cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [ingress\_with\_ipv6\_cidr\_blocks](#input\_ingress\_with\_ipv6\_cidr\_blocks) | List of ingress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [ingress\_with\_prefix\_list\_ids](#input\_ingress\_with\_prefix\_list\_ids) | List of ingress rules to create where 'prefix\_list\_ids' is used | `list(map(string))` | `[]` | no | +| [ingress\_with\_cidr\_ipv4](#input\_ingress\_with\_cidr\_ipv4) | List of ingress rules to create where 'cidr\_ipv4' is used | `list(map(string))` | `[]` | no | +| [ingress\_with\_cidr\_ipv6](#input\_ingress\_with\_cidr\_ipv6) | List of ingress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | +| [ingress\_with\_prefix\_list\_id](#input\_ingress\_with\_prefix\_list\_id) | List of ingress rules to create where 'prefix\_list\_id' is used | `list(map(string))` | `[]` | no | +| [ingress\_with\_referenced\_security\_group\_id](#input\_ingress\_with\_referenced\_security\_group\_id) | List of ingress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [ingress\_with\_self](#input\_ingress\_with\_self) | List of ingress rules to create where 'self' is defined | `list(map(string))` | `[]` | no | -| [ingress\_with\_source\_security\_group\_id](#input\_ingress\_with\_source\_security\_group\_id) | List of ingress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [name](#input\_name) | Name of security group | `string` | n/a | yes | | [number\_of\_computed\_egress\_cidr\_blocks](#input\_number\_of\_computed\_egress\_cidr\_blocks) | Number of IPv4 CIDR ranges to use on all computed egress rules | `number` | `0` | no | | [number\_of\_computed\_egress\_ipv6\_cidr\_blocks](#input\_number\_of\_computed\_egress\_ipv6\_cidr\_blocks) | Number of IPv6 CIDR ranges to use on all computed egress rules | `number` | `0` | no | | [number\_of\_computed\_egress\_prefix\_list\_ids](#input\_number\_of\_computed\_egress\_prefix\_list\_ids) | Number of prefix list IDs (for allowing access to VPC endpoints) to use on all computed egress rules | `number` | `0` | no | | [number\_of\_computed\_egress\_rules](#input\_number\_of\_computed\_egress\_rules) | Number of computed egress rules to create by name | `number` | `0` | no | -| [number\_of\_computed\_egress\_with\_cidr\_blocks](#input\_number\_of\_computed\_egress\_with\_cidr\_blocks) | Number of computed egress rules to create where 'cidr\_blocks' is used | `number` | `0` | no | -| [number\_of\_computed\_egress\_with\_ipv6\_cidr\_blocks](#input\_number\_of\_computed\_egress\_with\_ipv6\_cidr\_blocks) | Number of computed egress rules to create where 'ipv6\_cidr\_blocks' is used | `number` | `0` | no | -| [number\_of\_computed\_egress\_with\_prefix\_list\_ids](#input\_number\_of\_computed\_egress\_with\_prefix\_list\_ids) | Number of computed egress rules to create where 'prefix\_list\_ids' is used | `number` | `0` | no | +| [number\_of\_computed\_egress\_with\_cidr\_ipv4](#input\_number\_of\_computed\_egress\_with\_cidr\_ipv4) | Number of computed egress rules to create where 'cidr\_ipv4' is used | `number` | `0` | no | +| [number\_of\_computed\_egress\_with\_cidr\_ipv6](#input\_number\_of\_computed\_egress\_with\_cidr\_ipv6) | Number of computed egress rules to create where 'ipv6\_cidr\_blocks' is used | `number` | `0` | no | +| [number\_of\_computed\_egress\_with\_prefix\_list\_id](#input\_number\_of\_computed\_egress\_with\_prefix\_list\_id) | Number of computed egress rules to create where 'prefix\_list\_id' is used | `number` | `0` | no | +| [number\_of\_computed\_egress\_with\_referenced\_security\_group\_id](#input\_number\_of\_computed\_egress\_with\_referenced\_security\_group\_id) | Number of computed egress rules to create where 'source\_security\_group\_id' is used | `number` | `0` | no | | [number\_of\_computed\_egress\_with\_self](#input\_number\_of\_computed\_egress\_with\_self) | Number of computed egress rules to create where 'self' is defined | `number` | `0` | no | -| [number\_of\_computed\_egress\_with\_source\_security\_group\_id](#input\_number\_of\_computed\_egress\_with\_source\_security\_group\_id) | Number of computed egress rules to create where 'source\_security\_group\_id' is used | `number` | `0` | no | | [number\_of\_computed\_ingress\_cidr\_blocks](#input\_number\_of\_computed\_ingress\_cidr\_blocks) | Number of IPv4 CIDR ranges to use on all computed ingress rules | `number` | `0` | no | | [number\_of\_computed\_ingress\_ipv6\_cidr\_blocks](#input\_number\_of\_computed\_ingress\_ipv6\_cidr\_blocks) | Number of IPv6 CIDR ranges to use on all computed ingress rules | `number` | `0` | no | | [number\_of\_computed\_ingress\_prefix\_list\_ids](#input\_number\_of\_computed\_ingress\_prefix\_list\_ids) | Number of prefix list IDs (for allowing access to VPC endpoints) to use on all computed ingress rules | `number` | `0` | no | | [number\_of\_computed\_ingress\_rules](#input\_number\_of\_computed\_ingress\_rules) | Number of computed ingress rules to create by name | `number` | `0` | no | -| [number\_of\_computed\_ingress\_with\_cidr\_blocks](#input\_number\_of\_computed\_ingress\_with\_cidr\_blocks) | Number of computed ingress rules to create where 'cidr\_blocks' is used | `number` | `0` | no | -| [number\_of\_computed\_ingress\_with\_ipv6\_cidr\_blocks](#input\_number\_of\_computed\_ingress\_with\_ipv6\_cidr\_blocks) | Number of computed ingress rules to create where 'ipv6\_cidr\_blocks' is used | `number` | `0` | no | -| [number\_of\_computed\_ingress\_with\_prefix\_list\_ids](#input\_number\_of\_computed\_ingress\_with\_prefix\_list\_ids) | Number of computed ingress rules to create where 'prefix\_list\_ids' is used | `number` | `0` | no | +| [number\_of\_computed\_ingress\_with\_cidr\_ipv4](#input\_number\_of\_computed\_ingress\_with\_cidr\_ipv4) | Number of computed ingress rules to create where 'cidr\_ipv4' is used | `number` | `0` | no | +| [number\_of\_computed\_ingress\_with\_cidr\_ipv6](#input\_number\_of\_computed\_ingress\_with\_cidr\_ipv6) | Number of computed ingress rules to create where 'ipv6\_cidr\_blocks' is used | `number` | `0` | no | +| [number\_of\_computed\_ingress\_with\_prefix\_list\_id](#input\_number\_of\_computed\_ingress\_with\_prefix\_list\_id) | Number of computed ingress rules to create where 'prefix\_list\_id' is used | `number` | `0` | no | +| [number\_of\_computed\_ingress\_with\_referenced\_security\_group\_id](#input\_number\_of\_computed\_ingress\_with\_referenced\_security\_group\_id) | Number of computed ingress rules to create where 'source\_security\_group\_id' is used | `number` | `0` | no | | [number\_of\_computed\_ingress\_with\_self](#input\_number\_of\_computed\_ingress\_with\_self) | Number of computed ingress rules to create where 'self' is defined | `number` | `0` | no | -| [number\_of\_computed\_ingress\_with\_source\_security\_group\_id](#input\_number\_of\_computed\_ingress\_with\_source\_security\_group\_id) | Number of computed ingress rules to create where 'source\_security\_group\_id' is used | `number` | `0` | no | | [revoke\_rules\_on\_delete](#input\_revoke\_rules\_on\_delete) | Instruct Terraform to revoke all of the Security Groups attached ingress and egress rules before deleting the rule itself. Enable for EMR. | `bool` | `false` | no | | [tags](#input\_tags) | A mapping of tags to assign to security group | `map(string)` | `{}` | no | | [use\_name\_prefix](#input\_use\_name\_prefix) | Whether to use name\_prefix or fixed name. Should be true to able to update security group name after initial creation | `bool` | `true` | no | diff --git a/modules/https-8443/main.tf b/modules/https-8443/main.tf index 80ea0adb..d2a1bf93 100644 --- a/modules/https-8443/main.tf +++ b/modules/https-8443/main.tf @@ -19,20 +19,20 @@ module "sg" { ingress_with_self = concat(var.auto_ingress_with_self, var.ingress_with_self) # Open to IPv4 cidr blocks - ingress_with_cidr_blocks = var.ingress_with_cidr_blocks + ingress_with_cidr_ipv4 = var.ingress_with_cidr_ipv4 # Open to IPv6 cidr blocks - ingress_with_ipv6_cidr_blocks = var.ingress_with_ipv6_cidr_blocks + ingress_with_cidr_ipv6 = var.ingress_with_cidr_ipv6 # Open for security group id - ingress_with_source_security_group_id = var.ingress_with_source_security_group_id + ingress_with_referenced_security_group_id = var.ingress_with_referenced_security_group_id # Open for prefix list id - ingress_with_prefix_list_ids = var.ingress_with_prefix_list_ids + ingress_with_prefix_list_id = var.ingress_with_prefix_list_id # Default ingress CIDR blocks - ingress_cidr_blocks = var.ingress_cidr_blocks - ingress_ipv6_cidr_blocks = var.ingress_ipv6_cidr_blocks + ingress_cidr_ipv4 = var.ingress_cidr_ipv4 + ingress_cidr_ipv6 = var.ingress_cidr_ipv6 # Default prefix list ids ingress_prefix_list_ids = var.ingress_prefix_list_ids @@ -47,26 +47,26 @@ module "sg" { computed_ingress_with_self = concat(var.auto_computed_ingress_with_self, var.computed_ingress_with_self) # Open to IPv4 cidr blocks - computed_ingress_with_cidr_blocks = var.computed_ingress_with_cidr_blocks + computed_ingress_with_cidr_ipv4 = var.computed_ingress_with_cidr_ipv4 # Open to IPv6 cidr blocks - computed_ingress_with_ipv6_cidr_blocks = var.computed_ingress_with_ipv6_cidr_blocks + computed_ingress_with_cidr_ipv6 = var.computed_ingress_with_cidr_ipv6 # Open for security group id - computed_ingress_with_source_security_group_id = var.computed_ingress_with_source_security_group_id + computed_ingress_with_referenced_security_group_id = var.computed_ingress_with_referenced_security_group_id # Open for prefix list id - computed_ingress_with_prefix_list_ids = var.computed_ingress_with_prefix_list_ids + computed_ingress_with_prefix_list_id = var.computed_ingress_with_prefix_list_id ############################# # Number of computed ingress ############################# - number_of_computed_ingress_rules = var.auto_number_of_computed_ingress_rules + var.number_of_computed_ingress_rules - number_of_computed_ingress_with_self = var.auto_number_of_computed_ingress_with_self + var.number_of_computed_ingress_with_self - number_of_computed_ingress_with_cidr_blocks = var.number_of_computed_ingress_with_cidr_blocks - number_of_computed_ingress_with_ipv6_cidr_blocks = var.number_of_computed_ingress_with_ipv6_cidr_blocks - number_of_computed_ingress_with_source_security_group_id = var.number_of_computed_ingress_with_source_security_group_id - number_of_computed_ingress_with_prefix_list_ids = var.number_of_computed_ingress_with_prefix_list_ids + number_of_computed_ingress_rules = var.auto_number_of_computed_ingress_rules + var.number_of_computed_ingress_rules + number_of_computed_ingress_with_self = var.auto_number_of_computed_ingress_with_self + var.number_of_computed_ingress_with_self + number_of_computed_ingress_with_cidr_ipv4 = var.number_of_computed_ingress_with_cidr_ipv4 + number_of_computed_ingress_with_cidr_ipv6 = var.number_of_computed_ingress_with_cidr_ipv6 + number_of_computed_ingress_with_referenced_security_group_id = var.number_of_computed_ingress_with_referenced_security_group_id + number_of_computed_ingress_with_prefix_list_id = var.number_of_computed_ingress_with_prefix_list_id ######### # Egress @@ -78,20 +78,20 @@ module "sg" { egress_with_self = concat(var.auto_egress_with_self, var.egress_with_self) # Open to IPv4 cidr blocks - egress_with_cidr_blocks = var.egress_with_cidr_blocks + egress_with_cidr_ipv4 = var.egress_with_cidr_ipv4 # Open to IPv6 cidr blocks - egress_with_ipv6_cidr_blocks = var.egress_with_ipv6_cidr_blocks + egress_with_cidr_ipv6 = var.egress_with_cidr_ipv6 # Open for security group id - egress_with_source_security_group_id = var.egress_with_source_security_group_id + egress_with_referenced_security_group_id = var.egress_with_referenced_security_group_id # Open for prefix list id - egress_with_prefix_list_ids = var.egress_with_prefix_list_ids + egress_with_prefix_list_id = var.egress_with_prefix_list_id # Default egress CIDR blocks - egress_cidr_blocks = var.egress_cidr_blocks - egress_ipv6_cidr_blocks = var.egress_ipv6_cidr_blocks + egress_cidr_ipv4 = var.egress_cidr_ipv4 + egress_cidr_ipv6 = var.egress_cidr_ipv6 # Default prefix list ids egress_prefix_list_ids = var.egress_prefix_list_ids @@ -106,24 +106,24 @@ module "sg" { computed_egress_with_self = concat(var.auto_computed_egress_with_self, var.computed_egress_with_self) # Open to IPv4 cidr blocks - computed_egress_with_cidr_blocks = var.computed_egress_with_cidr_blocks + computed_egress_with_cidr_ipv4 = var.computed_egress_with_cidr_ipv4 # Open to IPv6 cidr blocks - computed_egress_with_ipv6_cidr_blocks = var.computed_egress_with_ipv6_cidr_blocks + computed_egress_with_cidr_ipv6 = var.computed_egress_with_cidr_ipv6 # Open for security group id - computed_egress_with_source_security_group_id = var.computed_egress_with_source_security_group_id + computed_egress_with_referenced_security_group_id = var.computed_egress_with_referenced_security_group_id # Open for prefix list id - computed_egress_with_prefix_list_ids = var.computed_egress_with_prefix_list_ids + computed_egress_with_prefix_list_id = var.computed_egress_with_prefix_list_id ############################# # Number of computed egress ############################# - number_of_computed_egress_rules = var.auto_number_of_computed_egress_rules + var.number_of_computed_egress_rules - number_of_computed_egress_with_self = var.auto_number_of_computed_egress_with_self + var.number_of_computed_egress_with_self - number_of_computed_egress_with_cidr_blocks = var.number_of_computed_egress_with_cidr_blocks - number_of_computed_egress_with_ipv6_cidr_blocks = var.number_of_computed_egress_with_ipv6_cidr_blocks - number_of_computed_egress_with_source_security_group_id = var.number_of_computed_egress_with_source_security_group_id - number_of_computed_egress_with_prefix_list_ids = var.number_of_computed_egress_with_prefix_list_ids + number_of_computed_egress_rules = var.auto_number_of_computed_egress_rules + var.number_of_computed_egress_rules + number_of_computed_egress_with_self = var.auto_number_of_computed_egress_with_self + var.number_of_computed_egress_with_self + number_of_computed_egress_with_cidr_ipv4 = var.number_of_computed_egress_with_cidr_ipv4 + number_of_computed_egress_with_cidr_ipv6 = var.number_of_computed_egress_with_cidr_ipv6 + number_of_computed_egress_with_referenced_security_group_id = var.number_of_computed_egress_with_referenced_security_group_id + number_of_computed_egress_with_prefix_list_id = var.number_of_computed_egress_with_prefix_list_id } diff --git a/modules/https-8443/variables.tf b/modules/https-8443/variables.tf index 60c8c27b..6590c9e3 100644 --- a/modules/https-8443/variables.tf +++ b/modules/https-8443/variables.tf @@ -56,37 +56,37 @@ variable "ingress_with_self" { default = [] } -variable "ingress_with_cidr_blocks" { - description = "List of ingress rules to create where 'cidr_blocks' is used" +variable "ingress_with_cidr_ipv4" { + description = "List of ingress rules to create where 'cidr_ipv4' is used" type = list(map(string)) default = [] } -variable "ingress_with_ipv6_cidr_blocks" { +variable "ingress_with_cidr_ipv6" { description = "List of ingress rules to create where 'ipv6_cidr_blocks' is used" type = list(map(string)) default = [] } -variable "ingress_with_source_security_group_id" { +variable "ingress_with_referenced_security_group_id" { description = "List of ingress rules to create where 'source_security_group_id' is used" type = list(map(string)) default = [] } -variable "ingress_with_prefix_list_ids" { - description = "List of ingress rules to create where 'prefix_list_ids' is used" +variable "ingress_with_prefix_list_id" { + description = "List of ingress rules to create where 'prefix_list_id' is used" type = list(map(string)) default = [] } -variable "ingress_cidr_blocks" { +variable "ingress_cidr_ipv4" { description = "List of IPv4 CIDR ranges to use on all ingress rules" type = list(string) default = [] } -variable "ingress_ipv6_cidr_blocks" { +variable "ingress_cidr_ipv6" { description = "List of IPv6 CIDR ranges to use on all ingress rules" type = list(string) default = [] @@ -113,26 +113,26 @@ variable "computed_ingress_with_self" { default = [] } -variable "computed_ingress_with_cidr_blocks" { - description = "List of computed ingress rules to create where 'cidr_blocks' is used" +variable "computed_ingress_with_cidr_ipv4" { + description = "List of computed ingress rules to create where 'cidr_ipv4' is used" type = list(map(string)) default = [] } -variable "computed_ingress_with_ipv6_cidr_blocks" { +variable "computed_ingress_with_cidr_ipv6" { description = "List of computed ingress rules to create where 'ipv6_cidr_blocks' is used" type = list(map(string)) default = [] } -variable "computed_ingress_with_source_security_group_id" { +variable "computed_ingress_with_referenced_security_group_id" { description = "List of computed ingress rules to create where 'source_security_group_id' is used" type = list(map(string)) default = [] } -variable "computed_ingress_with_prefix_list_ids" { - description = "List of computed ingress rules to create where 'prefix_list_ids' is used" +variable "computed_ingress_with_prefix_list_id" { + description = "List of computed ingress rules to create where 'prefix_list_id' is used" type = list(map(string)) default = [] } @@ -170,26 +170,26 @@ variable "number_of_computed_ingress_with_self" { default = 0 } -variable "number_of_computed_ingress_with_cidr_blocks" { - description = "Number of computed ingress rules to create where 'cidr_blocks' is used" +variable "number_of_computed_ingress_with_cidr_ipv4" { + description = "Number of computed ingress rules to create where 'cidr_ipv4' is used" type = number default = 0 } -variable "number_of_computed_ingress_with_ipv6_cidr_blocks" { +variable "number_of_computed_ingress_with_cidr_ipv6" { description = "Number of computed ingress rules to create where 'ipv6_cidr_blocks' is used" type = number default = 0 } -variable "number_of_computed_ingress_with_source_security_group_id" { +variable "number_of_computed_ingress_with_referenced_security_group_id" { description = "Number of computed ingress rules to create where 'source_security_group_id' is used" type = number default = 0 } -variable "number_of_computed_ingress_with_prefix_list_ids" { - description = "Number of computed ingress rules to create where 'prefix_list_ids' is used" +variable "number_of_computed_ingress_with_prefix_list_id" { + description = "Number of computed ingress rules to create where 'prefix_list_id' is used" type = number default = 0 } @@ -227,37 +227,37 @@ variable "egress_with_self" { default = [] } -variable "egress_with_cidr_blocks" { - description = "List of egress rules to create where 'cidr_blocks' is used" +variable "egress_with_cidr_ipv4" { + description = "List of egress rules to create where 'cidr_ipv4' is used" type = list(map(string)) default = [] } -variable "egress_with_ipv6_cidr_blocks" { +variable "egress_with_cidr_ipv6" { description = "List of egress rules to create where 'ipv6_cidr_blocks' is used" type = list(map(string)) default = [] } -variable "egress_with_source_security_group_id" { +variable "egress_with_referenced_security_group_id" { description = "List of egress rules to create where 'source_security_group_id' is used" type = list(map(string)) default = [] } -variable "egress_with_prefix_list_ids" { - description = "List of egress rules to create where 'prefix_list_ids' is used" +variable "egress_with_prefix_list_id" { + description = "List of egress rules to create where 'prefix_list_id' is used" type = list(map(string)) default = [] } -variable "egress_cidr_blocks" { +variable "egress_cidr_ipv4" { description = "List of IPv4 CIDR ranges to use on all egress rules" type = list(string) default = ["0.0.0.0/0"] } -variable "egress_ipv6_cidr_blocks" { +variable "egress_cidr_ipv6" { description = "List of IPv6 CIDR ranges to use on all egress rules" type = list(string) default = ["::/0"] @@ -284,26 +284,26 @@ variable "computed_egress_with_self" { default = [] } -variable "computed_egress_with_cidr_blocks" { - description = "List of computed egress rules to create where 'cidr_blocks' is used" +variable "computed_egress_with_cidr_ipv4" { + description = "List of computed egress rules to create where 'cidr_ipv4' is used" type = list(map(string)) default = [] } -variable "computed_egress_with_ipv6_cidr_blocks" { +variable "computed_egress_with_cidr_ipv6" { description = "List of computed egress rules to create where 'ipv6_cidr_blocks' is used" type = list(map(string)) default = [] } -variable "computed_egress_with_source_security_group_id" { +variable "computed_egress_with_referenced_security_group_id" { description = "List of computed egress rules to create where 'source_security_group_id' is used" type = list(map(string)) default = [] } -variable "computed_egress_with_prefix_list_ids" { - description = "List of computed egress rules to create where 'prefix_list_ids' is used" +variable "computed_egress_with_prefix_list_id" { + description = "List of computed egress rules to create where 'prefix_list_id' is used" type = list(map(string)) default = [] } @@ -341,26 +341,26 @@ variable "number_of_computed_egress_with_self" { default = 0 } -variable "number_of_computed_egress_with_cidr_blocks" { - description = "Number of computed egress rules to create where 'cidr_blocks' is used" +variable "number_of_computed_egress_with_cidr_ipv4" { + description = "Number of computed egress rules to create where 'cidr_ipv4' is used" type = number default = 0 } -variable "number_of_computed_egress_with_ipv6_cidr_blocks" { +variable "number_of_computed_egress_with_cidr_ipv6" { description = "Number of computed egress rules to create where 'ipv6_cidr_blocks' is used" type = number default = 0 } -variable "number_of_computed_egress_with_source_security_group_id" { +variable "number_of_computed_egress_with_referenced_security_group_id" { description = "Number of computed egress rules to create where 'source_security_group_id' is used" type = number default = 0 } -variable "number_of_computed_egress_with_prefix_list_ids" { - description = "Number of computed egress rules to create where 'prefix_list_ids' is used" +variable "number_of_computed_egress_with_prefix_list_id" { + description = "Number of computed egress rules to create where 'prefix_list_id' is used" type = number default = 0 } diff --git a/modules/ipsec-4500/README.md b/modules/ipsec-4500/README.md index e938f72c..668249ca 100644 --- a/modules/ipsec-4500/README.md +++ b/modules/ipsec-4500/README.md @@ -55,59 +55,59 @@ No resources. | [computed\_egress\_ipv6\_cidr\_blocks](#input\_computed\_egress\_ipv6\_cidr\_blocks) | List of IPv6 CIDR ranges to use on all computed egress rules | `list(string)` |
[
"::/0"
]
| no | | [computed\_egress\_prefix\_list\_ids](#input\_computed\_egress\_prefix\_list\_ids) | List of prefix list IDs (for allowing access to VPC endpoints) to use on all computed egress rules | `list(string)` | `[]` | no | | [computed\_egress\_rules](#input\_computed\_egress\_rules) | List of computed egress rules to create by name | `list(string)` | `[]` | no | -| [computed\_egress\_with\_cidr\_blocks](#input\_computed\_egress\_with\_cidr\_blocks) | List of computed egress rules to create where 'cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [computed\_egress\_with\_ipv6\_cidr\_blocks](#input\_computed\_egress\_with\_ipv6\_cidr\_blocks) | List of computed egress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [computed\_egress\_with\_prefix\_list\_ids](#input\_computed\_egress\_with\_prefix\_list\_ids) | List of computed egress rules to create where 'prefix\_list\_ids' is used | `list(map(string))` | `[]` | no | +| [computed\_egress\_with\_cidr\_ipv4](#input\_computed\_egress\_with\_cidr\_ipv4) | List of computed egress rules to create where 'cidr\_ipv4' is used | `list(map(string))` | `[]` | no | +| [computed\_egress\_with\_cidr\_ipv6](#input\_computed\_egress\_with\_cidr\_ipv6) | List of computed egress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | +| [computed\_egress\_with\_prefix\_list\_id](#input\_computed\_egress\_with\_prefix\_list\_id) | List of computed egress rules to create where 'prefix\_list\_id' is used | `list(map(string))` | `[]` | no | +| [computed\_egress\_with\_referenced\_security\_group\_id](#input\_computed\_egress\_with\_referenced\_security\_group\_id) | List of computed egress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [computed\_egress\_with\_self](#input\_computed\_egress\_with\_self) | List of computed egress rules to create where 'self' is defined | `list(map(string))` | `[]` | no | -| [computed\_egress\_with\_source\_security\_group\_id](#input\_computed\_egress\_with\_source\_security\_group\_id) | List of computed egress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [computed\_ingress\_cidr\_blocks](#input\_computed\_ingress\_cidr\_blocks) | List of IPv4 CIDR ranges to use on all computed ingress rules | `list(string)` | `[]` | no | | [computed\_ingress\_ipv6\_cidr\_blocks](#input\_computed\_ingress\_ipv6\_cidr\_blocks) | List of IPv6 CIDR ranges to use on all computed ingress rules | `list(string)` | `[]` | no | | [computed\_ingress\_prefix\_list\_ids](#input\_computed\_ingress\_prefix\_list\_ids) | List of prefix list IDs (for allowing access to VPC endpoints) to use on all computed ingress rules | `list(string)` | `[]` | no | | [computed\_ingress\_rules](#input\_computed\_ingress\_rules) | List of computed ingress rules to create by name | `list(string)` | `[]` | no | -| [computed\_ingress\_with\_cidr\_blocks](#input\_computed\_ingress\_with\_cidr\_blocks) | List of computed ingress rules to create where 'cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [computed\_ingress\_with\_ipv6\_cidr\_blocks](#input\_computed\_ingress\_with\_ipv6\_cidr\_blocks) | List of computed ingress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [computed\_ingress\_with\_prefix\_list\_ids](#input\_computed\_ingress\_with\_prefix\_list\_ids) | List of computed ingress rules to create where 'prefix\_list\_ids' is used | `list(map(string))` | `[]` | no | +| [computed\_ingress\_with\_cidr\_ipv4](#input\_computed\_ingress\_with\_cidr\_ipv4) | List of computed ingress rules to create where 'cidr\_ipv4' is used | `list(map(string))` | `[]` | no | +| [computed\_ingress\_with\_cidr\_ipv6](#input\_computed\_ingress\_with\_cidr\_ipv6) | List of computed ingress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | +| [computed\_ingress\_with\_prefix\_list\_id](#input\_computed\_ingress\_with\_prefix\_list\_id) | List of computed ingress rules to create where 'prefix\_list\_id' is used | `list(map(string))` | `[]` | no | +| [computed\_ingress\_with\_referenced\_security\_group\_id](#input\_computed\_ingress\_with\_referenced\_security\_group\_id) | List of computed ingress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [computed\_ingress\_with\_self](#input\_computed\_ingress\_with\_self) | List of computed ingress rules to create where 'self' is defined | `list(map(string))` | `[]` | no | -| [computed\_ingress\_with\_source\_security\_group\_id](#input\_computed\_ingress\_with\_source\_security\_group\_id) | List of computed ingress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [create](#input\_create) | Whether to create security group and all rules | `bool` | `true` | no | | [description](#input\_description) | Description of security group | `string` | `"Security Group managed by Terraform"` | no | -| [egress\_cidr\_blocks](#input\_egress\_cidr\_blocks) | List of IPv4 CIDR ranges to use on all egress rules | `list(string)` |
[
"0.0.0.0/0"
]
| no | -| [egress\_ipv6\_cidr\_blocks](#input\_egress\_ipv6\_cidr\_blocks) | List of IPv6 CIDR ranges to use on all egress rules | `list(string)` |
[
"::/0"
]
| no | +| [egress\_cidr\_ipv4](#input\_egress\_cidr\_ipv4) | List of IPv4 CIDR ranges to use on all egress rules | `list(string)` |
[
"0.0.0.0/0"
]
| no | +| [egress\_cidr\_ipv6](#input\_egress\_cidr\_ipv6) | List of IPv6 CIDR ranges to use on all egress rules | `list(string)` |
[
"::/0"
]
| no | | [egress\_prefix\_list\_ids](#input\_egress\_prefix\_list\_ids) | List of prefix list IDs (for allowing access to VPC endpoints) to use on all egress rules | `list(string)` | `[]` | no | | [egress\_rules](#input\_egress\_rules) | List of egress rules to create by name | `list(string)` | `[]` | no | -| [egress\_with\_cidr\_blocks](#input\_egress\_with\_cidr\_blocks) | List of egress rules to create where 'cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [egress\_with\_ipv6\_cidr\_blocks](#input\_egress\_with\_ipv6\_cidr\_blocks) | List of egress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [egress\_with\_prefix\_list\_ids](#input\_egress\_with\_prefix\_list\_ids) | List of egress rules to create where 'prefix\_list\_ids' is used | `list(map(string))` | `[]` | no | +| [egress\_with\_cidr\_ipv4](#input\_egress\_with\_cidr\_ipv4) | List of egress rules to create where 'cidr\_ipv4' is used | `list(map(string))` | `[]` | no | +| [egress\_with\_cidr\_ipv6](#input\_egress\_with\_cidr\_ipv6) | List of egress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | +| [egress\_with\_prefix\_list\_id](#input\_egress\_with\_prefix\_list\_id) | List of egress rules to create where 'prefix\_list\_id' is used | `list(map(string))` | `[]` | no | +| [egress\_with\_referenced\_security\_group\_id](#input\_egress\_with\_referenced\_security\_group\_id) | List of egress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [egress\_with\_self](#input\_egress\_with\_self) | List of egress rules to create where 'self' is defined | `list(map(string))` | `[]` | no | -| [egress\_with\_source\_security\_group\_id](#input\_egress\_with\_source\_security\_group\_id) | List of egress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | -| [ingress\_cidr\_blocks](#input\_ingress\_cidr\_blocks) | List of IPv4 CIDR ranges to use on all ingress rules | `list(string)` | `[]` | no | -| [ingress\_ipv6\_cidr\_blocks](#input\_ingress\_ipv6\_cidr\_blocks) | List of IPv6 CIDR ranges to use on all ingress rules | `list(string)` | `[]` | no | +| [ingress\_cidr\_ipv4](#input\_ingress\_cidr\_ipv4) | List of IPv4 CIDR ranges to use on all ingress rules | `list(string)` | `[]` | no | +| [ingress\_cidr\_ipv6](#input\_ingress\_cidr\_ipv6) | List of IPv6 CIDR ranges to use on all ingress rules | `list(string)` | `[]` | no | | [ingress\_prefix\_list\_ids](#input\_ingress\_prefix\_list\_ids) | List of prefix list IDs (for allowing access to VPC endpoints) to use on all ingress rules | `list(string)` | `[]` | no | | [ingress\_rules](#input\_ingress\_rules) | List of ingress rules to create by name | `list(string)` | `[]` | no | -| [ingress\_with\_cidr\_blocks](#input\_ingress\_with\_cidr\_blocks) | List of ingress rules to create where 'cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [ingress\_with\_ipv6\_cidr\_blocks](#input\_ingress\_with\_ipv6\_cidr\_blocks) | List of ingress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [ingress\_with\_prefix\_list\_ids](#input\_ingress\_with\_prefix\_list\_ids) | List of ingress rules to create where 'prefix\_list\_ids' is used | `list(map(string))` | `[]` | no | +| [ingress\_with\_cidr\_ipv4](#input\_ingress\_with\_cidr\_ipv4) | List of ingress rules to create where 'cidr\_ipv4' is used | `list(map(string))` | `[]` | no | +| [ingress\_with\_cidr\_ipv6](#input\_ingress\_with\_cidr\_ipv6) | List of ingress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | +| [ingress\_with\_prefix\_list\_id](#input\_ingress\_with\_prefix\_list\_id) | List of ingress rules to create where 'prefix\_list\_id' is used | `list(map(string))` | `[]` | no | +| [ingress\_with\_referenced\_security\_group\_id](#input\_ingress\_with\_referenced\_security\_group\_id) | List of ingress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [ingress\_with\_self](#input\_ingress\_with\_self) | List of ingress rules to create where 'self' is defined | `list(map(string))` | `[]` | no | -| [ingress\_with\_source\_security\_group\_id](#input\_ingress\_with\_source\_security\_group\_id) | List of ingress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [name](#input\_name) | Name of security group | `string` | n/a | yes | | [number\_of\_computed\_egress\_cidr\_blocks](#input\_number\_of\_computed\_egress\_cidr\_blocks) | Number of IPv4 CIDR ranges to use on all computed egress rules | `number` | `0` | no | | [number\_of\_computed\_egress\_ipv6\_cidr\_blocks](#input\_number\_of\_computed\_egress\_ipv6\_cidr\_blocks) | Number of IPv6 CIDR ranges to use on all computed egress rules | `number` | `0` | no | | [number\_of\_computed\_egress\_prefix\_list\_ids](#input\_number\_of\_computed\_egress\_prefix\_list\_ids) | Number of prefix list IDs (for allowing access to VPC endpoints) to use on all computed egress rules | `number` | `0` | no | | [number\_of\_computed\_egress\_rules](#input\_number\_of\_computed\_egress\_rules) | Number of computed egress rules to create by name | `number` | `0` | no | -| [number\_of\_computed\_egress\_with\_cidr\_blocks](#input\_number\_of\_computed\_egress\_with\_cidr\_blocks) | Number of computed egress rules to create where 'cidr\_blocks' is used | `number` | `0` | no | -| [number\_of\_computed\_egress\_with\_ipv6\_cidr\_blocks](#input\_number\_of\_computed\_egress\_with\_ipv6\_cidr\_blocks) | Number of computed egress rules to create where 'ipv6\_cidr\_blocks' is used | `number` | `0` | no | -| [number\_of\_computed\_egress\_with\_prefix\_list\_ids](#input\_number\_of\_computed\_egress\_with\_prefix\_list\_ids) | Number of computed egress rules to create where 'prefix\_list\_ids' is used | `number` | `0` | no | +| [number\_of\_computed\_egress\_with\_cidr\_ipv4](#input\_number\_of\_computed\_egress\_with\_cidr\_ipv4) | Number of computed egress rules to create where 'cidr\_ipv4' is used | `number` | `0` | no | +| [number\_of\_computed\_egress\_with\_cidr\_ipv6](#input\_number\_of\_computed\_egress\_with\_cidr\_ipv6) | Number of computed egress rules to create where 'ipv6\_cidr\_blocks' is used | `number` | `0` | no | +| [number\_of\_computed\_egress\_with\_prefix\_list\_id](#input\_number\_of\_computed\_egress\_with\_prefix\_list\_id) | Number of computed egress rules to create where 'prefix\_list\_id' is used | `number` | `0` | no | +| [number\_of\_computed\_egress\_with\_referenced\_security\_group\_id](#input\_number\_of\_computed\_egress\_with\_referenced\_security\_group\_id) | Number of computed egress rules to create where 'source\_security\_group\_id' is used | `number` | `0` | no | | [number\_of\_computed\_egress\_with\_self](#input\_number\_of\_computed\_egress\_with\_self) | Number of computed egress rules to create where 'self' is defined | `number` | `0` | no | -| [number\_of\_computed\_egress\_with\_source\_security\_group\_id](#input\_number\_of\_computed\_egress\_with\_source\_security\_group\_id) | Number of computed egress rules to create where 'source\_security\_group\_id' is used | `number` | `0` | no | | [number\_of\_computed\_ingress\_cidr\_blocks](#input\_number\_of\_computed\_ingress\_cidr\_blocks) | Number of IPv4 CIDR ranges to use on all computed ingress rules | `number` | `0` | no | | [number\_of\_computed\_ingress\_ipv6\_cidr\_blocks](#input\_number\_of\_computed\_ingress\_ipv6\_cidr\_blocks) | Number of IPv6 CIDR ranges to use on all computed ingress rules | `number` | `0` | no | | [number\_of\_computed\_ingress\_prefix\_list\_ids](#input\_number\_of\_computed\_ingress\_prefix\_list\_ids) | Number of prefix list IDs (for allowing access to VPC endpoints) to use on all computed ingress rules | `number` | `0` | no | | [number\_of\_computed\_ingress\_rules](#input\_number\_of\_computed\_ingress\_rules) | Number of computed ingress rules to create by name | `number` | `0` | no | -| [number\_of\_computed\_ingress\_with\_cidr\_blocks](#input\_number\_of\_computed\_ingress\_with\_cidr\_blocks) | Number of computed ingress rules to create where 'cidr\_blocks' is used | `number` | `0` | no | -| [number\_of\_computed\_ingress\_with\_ipv6\_cidr\_blocks](#input\_number\_of\_computed\_ingress\_with\_ipv6\_cidr\_blocks) | Number of computed ingress rules to create where 'ipv6\_cidr\_blocks' is used | `number` | `0` | no | -| [number\_of\_computed\_ingress\_with\_prefix\_list\_ids](#input\_number\_of\_computed\_ingress\_with\_prefix\_list\_ids) | Number of computed ingress rules to create where 'prefix\_list\_ids' is used | `number` | `0` | no | +| [number\_of\_computed\_ingress\_with\_cidr\_ipv4](#input\_number\_of\_computed\_ingress\_with\_cidr\_ipv4) | Number of computed ingress rules to create where 'cidr\_ipv4' is used | `number` | `0` | no | +| [number\_of\_computed\_ingress\_with\_cidr\_ipv6](#input\_number\_of\_computed\_ingress\_with\_cidr\_ipv6) | Number of computed ingress rules to create where 'ipv6\_cidr\_blocks' is used | `number` | `0` | no | +| [number\_of\_computed\_ingress\_with\_prefix\_list\_id](#input\_number\_of\_computed\_ingress\_with\_prefix\_list\_id) | Number of computed ingress rules to create where 'prefix\_list\_id' is used | `number` | `0` | no | +| [number\_of\_computed\_ingress\_with\_referenced\_security\_group\_id](#input\_number\_of\_computed\_ingress\_with\_referenced\_security\_group\_id) | Number of computed ingress rules to create where 'source\_security\_group\_id' is used | `number` | `0` | no | | [number\_of\_computed\_ingress\_with\_self](#input\_number\_of\_computed\_ingress\_with\_self) | Number of computed ingress rules to create where 'self' is defined | `number` | `0` | no | -| [number\_of\_computed\_ingress\_with\_source\_security\_group\_id](#input\_number\_of\_computed\_ingress\_with\_source\_security\_group\_id) | Number of computed ingress rules to create where 'source\_security\_group\_id' is used | `number` | `0` | no | | [revoke\_rules\_on\_delete](#input\_revoke\_rules\_on\_delete) | Instruct Terraform to revoke all of the Security Groups attached ingress and egress rules before deleting the rule itself. Enable for EMR. | `bool` | `false` | no | | [tags](#input\_tags) | A mapping of tags to assign to security group | `map(string)` | `{}` | no | | [use\_name\_prefix](#input\_use\_name\_prefix) | Whether to use name\_prefix or fixed name. Should be true to able to update security group name after initial creation | `bool` | `true` | no | diff --git a/modules/ipsec-4500/main.tf b/modules/ipsec-4500/main.tf index 80ea0adb..d2a1bf93 100644 --- a/modules/ipsec-4500/main.tf +++ b/modules/ipsec-4500/main.tf @@ -19,20 +19,20 @@ module "sg" { ingress_with_self = concat(var.auto_ingress_with_self, var.ingress_with_self) # Open to IPv4 cidr blocks - ingress_with_cidr_blocks = var.ingress_with_cidr_blocks + ingress_with_cidr_ipv4 = var.ingress_with_cidr_ipv4 # Open to IPv6 cidr blocks - ingress_with_ipv6_cidr_blocks = var.ingress_with_ipv6_cidr_blocks + ingress_with_cidr_ipv6 = var.ingress_with_cidr_ipv6 # Open for security group id - ingress_with_source_security_group_id = var.ingress_with_source_security_group_id + ingress_with_referenced_security_group_id = var.ingress_with_referenced_security_group_id # Open for prefix list id - ingress_with_prefix_list_ids = var.ingress_with_prefix_list_ids + ingress_with_prefix_list_id = var.ingress_with_prefix_list_id # Default ingress CIDR blocks - ingress_cidr_blocks = var.ingress_cidr_blocks - ingress_ipv6_cidr_blocks = var.ingress_ipv6_cidr_blocks + ingress_cidr_ipv4 = var.ingress_cidr_ipv4 + ingress_cidr_ipv6 = var.ingress_cidr_ipv6 # Default prefix list ids ingress_prefix_list_ids = var.ingress_prefix_list_ids @@ -47,26 +47,26 @@ module "sg" { computed_ingress_with_self = concat(var.auto_computed_ingress_with_self, var.computed_ingress_with_self) # Open to IPv4 cidr blocks - computed_ingress_with_cidr_blocks = var.computed_ingress_with_cidr_blocks + computed_ingress_with_cidr_ipv4 = var.computed_ingress_with_cidr_ipv4 # Open to IPv6 cidr blocks - computed_ingress_with_ipv6_cidr_blocks = var.computed_ingress_with_ipv6_cidr_blocks + computed_ingress_with_cidr_ipv6 = var.computed_ingress_with_cidr_ipv6 # Open for security group id - computed_ingress_with_source_security_group_id = var.computed_ingress_with_source_security_group_id + computed_ingress_with_referenced_security_group_id = var.computed_ingress_with_referenced_security_group_id # Open for prefix list id - computed_ingress_with_prefix_list_ids = var.computed_ingress_with_prefix_list_ids + computed_ingress_with_prefix_list_id = var.computed_ingress_with_prefix_list_id ############################# # Number of computed ingress ############################# - number_of_computed_ingress_rules = var.auto_number_of_computed_ingress_rules + var.number_of_computed_ingress_rules - number_of_computed_ingress_with_self = var.auto_number_of_computed_ingress_with_self + var.number_of_computed_ingress_with_self - number_of_computed_ingress_with_cidr_blocks = var.number_of_computed_ingress_with_cidr_blocks - number_of_computed_ingress_with_ipv6_cidr_blocks = var.number_of_computed_ingress_with_ipv6_cidr_blocks - number_of_computed_ingress_with_source_security_group_id = var.number_of_computed_ingress_with_source_security_group_id - number_of_computed_ingress_with_prefix_list_ids = var.number_of_computed_ingress_with_prefix_list_ids + number_of_computed_ingress_rules = var.auto_number_of_computed_ingress_rules + var.number_of_computed_ingress_rules + number_of_computed_ingress_with_self = var.auto_number_of_computed_ingress_with_self + var.number_of_computed_ingress_with_self + number_of_computed_ingress_with_cidr_ipv4 = var.number_of_computed_ingress_with_cidr_ipv4 + number_of_computed_ingress_with_cidr_ipv6 = var.number_of_computed_ingress_with_cidr_ipv6 + number_of_computed_ingress_with_referenced_security_group_id = var.number_of_computed_ingress_with_referenced_security_group_id + number_of_computed_ingress_with_prefix_list_id = var.number_of_computed_ingress_with_prefix_list_id ######### # Egress @@ -78,20 +78,20 @@ module "sg" { egress_with_self = concat(var.auto_egress_with_self, var.egress_with_self) # Open to IPv4 cidr blocks - egress_with_cidr_blocks = var.egress_with_cidr_blocks + egress_with_cidr_ipv4 = var.egress_with_cidr_ipv4 # Open to IPv6 cidr blocks - egress_with_ipv6_cidr_blocks = var.egress_with_ipv6_cidr_blocks + egress_with_cidr_ipv6 = var.egress_with_cidr_ipv6 # Open for security group id - egress_with_source_security_group_id = var.egress_with_source_security_group_id + egress_with_referenced_security_group_id = var.egress_with_referenced_security_group_id # Open for prefix list id - egress_with_prefix_list_ids = var.egress_with_prefix_list_ids + egress_with_prefix_list_id = var.egress_with_prefix_list_id # Default egress CIDR blocks - egress_cidr_blocks = var.egress_cidr_blocks - egress_ipv6_cidr_blocks = var.egress_ipv6_cidr_blocks + egress_cidr_ipv4 = var.egress_cidr_ipv4 + egress_cidr_ipv6 = var.egress_cidr_ipv6 # Default prefix list ids egress_prefix_list_ids = var.egress_prefix_list_ids @@ -106,24 +106,24 @@ module "sg" { computed_egress_with_self = concat(var.auto_computed_egress_with_self, var.computed_egress_with_self) # Open to IPv4 cidr blocks - computed_egress_with_cidr_blocks = var.computed_egress_with_cidr_blocks + computed_egress_with_cidr_ipv4 = var.computed_egress_with_cidr_ipv4 # Open to IPv6 cidr blocks - computed_egress_with_ipv6_cidr_blocks = var.computed_egress_with_ipv6_cidr_blocks + computed_egress_with_cidr_ipv6 = var.computed_egress_with_cidr_ipv6 # Open for security group id - computed_egress_with_source_security_group_id = var.computed_egress_with_source_security_group_id + computed_egress_with_referenced_security_group_id = var.computed_egress_with_referenced_security_group_id # Open for prefix list id - computed_egress_with_prefix_list_ids = var.computed_egress_with_prefix_list_ids + computed_egress_with_prefix_list_id = var.computed_egress_with_prefix_list_id ############################# # Number of computed egress ############################# - number_of_computed_egress_rules = var.auto_number_of_computed_egress_rules + var.number_of_computed_egress_rules - number_of_computed_egress_with_self = var.auto_number_of_computed_egress_with_self + var.number_of_computed_egress_with_self - number_of_computed_egress_with_cidr_blocks = var.number_of_computed_egress_with_cidr_blocks - number_of_computed_egress_with_ipv6_cidr_blocks = var.number_of_computed_egress_with_ipv6_cidr_blocks - number_of_computed_egress_with_source_security_group_id = var.number_of_computed_egress_with_source_security_group_id - number_of_computed_egress_with_prefix_list_ids = var.number_of_computed_egress_with_prefix_list_ids + number_of_computed_egress_rules = var.auto_number_of_computed_egress_rules + var.number_of_computed_egress_rules + number_of_computed_egress_with_self = var.auto_number_of_computed_egress_with_self + var.number_of_computed_egress_with_self + number_of_computed_egress_with_cidr_ipv4 = var.number_of_computed_egress_with_cidr_ipv4 + number_of_computed_egress_with_cidr_ipv6 = var.number_of_computed_egress_with_cidr_ipv6 + number_of_computed_egress_with_referenced_security_group_id = var.number_of_computed_egress_with_referenced_security_group_id + number_of_computed_egress_with_prefix_list_id = var.number_of_computed_egress_with_prefix_list_id } diff --git a/modules/ipsec-4500/variables.tf b/modules/ipsec-4500/variables.tf index 60c8c27b..6590c9e3 100644 --- a/modules/ipsec-4500/variables.tf +++ b/modules/ipsec-4500/variables.tf @@ -56,37 +56,37 @@ variable "ingress_with_self" { default = [] } -variable "ingress_with_cidr_blocks" { - description = "List of ingress rules to create where 'cidr_blocks' is used" +variable "ingress_with_cidr_ipv4" { + description = "List of ingress rules to create where 'cidr_ipv4' is used" type = list(map(string)) default = [] } -variable "ingress_with_ipv6_cidr_blocks" { +variable "ingress_with_cidr_ipv6" { description = "List of ingress rules to create where 'ipv6_cidr_blocks' is used" type = list(map(string)) default = [] } -variable "ingress_with_source_security_group_id" { +variable "ingress_with_referenced_security_group_id" { description = "List of ingress rules to create where 'source_security_group_id' is used" type = list(map(string)) default = [] } -variable "ingress_with_prefix_list_ids" { - description = "List of ingress rules to create where 'prefix_list_ids' is used" +variable "ingress_with_prefix_list_id" { + description = "List of ingress rules to create where 'prefix_list_id' is used" type = list(map(string)) default = [] } -variable "ingress_cidr_blocks" { +variable "ingress_cidr_ipv4" { description = "List of IPv4 CIDR ranges to use on all ingress rules" type = list(string) default = [] } -variable "ingress_ipv6_cidr_blocks" { +variable "ingress_cidr_ipv6" { description = "List of IPv6 CIDR ranges to use on all ingress rules" type = list(string) default = [] @@ -113,26 +113,26 @@ variable "computed_ingress_with_self" { default = [] } -variable "computed_ingress_with_cidr_blocks" { - description = "List of computed ingress rules to create where 'cidr_blocks' is used" +variable "computed_ingress_with_cidr_ipv4" { + description = "List of computed ingress rules to create where 'cidr_ipv4' is used" type = list(map(string)) default = [] } -variable "computed_ingress_with_ipv6_cidr_blocks" { +variable "computed_ingress_with_cidr_ipv6" { description = "List of computed ingress rules to create where 'ipv6_cidr_blocks' is used" type = list(map(string)) default = [] } -variable "computed_ingress_with_source_security_group_id" { +variable "computed_ingress_with_referenced_security_group_id" { description = "List of computed ingress rules to create where 'source_security_group_id' is used" type = list(map(string)) default = [] } -variable "computed_ingress_with_prefix_list_ids" { - description = "List of computed ingress rules to create where 'prefix_list_ids' is used" +variable "computed_ingress_with_prefix_list_id" { + description = "List of computed ingress rules to create where 'prefix_list_id' is used" type = list(map(string)) default = [] } @@ -170,26 +170,26 @@ variable "number_of_computed_ingress_with_self" { default = 0 } -variable "number_of_computed_ingress_with_cidr_blocks" { - description = "Number of computed ingress rules to create where 'cidr_blocks' is used" +variable "number_of_computed_ingress_with_cidr_ipv4" { + description = "Number of computed ingress rules to create where 'cidr_ipv4' is used" type = number default = 0 } -variable "number_of_computed_ingress_with_ipv6_cidr_blocks" { +variable "number_of_computed_ingress_with_cidr_ipv6" { description = "Number of computed ingress rules to create where 'ipv6_cidr_blocks' is used" type = number default = 0 } -variable "number_of_computed_ingress_with_source_security_group_id" { +variable "number_of_computed_ingress_with_referenced_security_group_id" { description = "Number of computed ingress rules to create where 'source_security_group_id' is used" type = number default = 0 } -variable "number_of_computed_ingress_with_prefix_list_ids" { - description = "Number of computed ingress rules to create where 'prefix_list_ids' is used" +variable "number_of_computed_ingress_with_prefix_list_id" { + description = "Number of computed ingress rules to create where 'prefix_list_id' is used" type = number default = 0 } @@ -227,37 +227,37 @@ variable "egress_with_self" { default = [] } -variable "egress_with_cidr_blocks" { - description = "List of egress rules to create where 'cidr_blocks' is used" +variable "egress_with_cidr_ipv4" { + description = "List of egress rules to create where 'cidr_ipv4' is used" type = list(map(string)) default = [] } -variable "egress_with_ipv6_cidr_blocks" { +variable "egress_with_cidr_ipv6" { description = "List of egress rules to create where 'ipv6_cidr_blocks' is used" type = list(map(string)) default = [] } -variable "egress_with_source_security_group_id" { +variable "egress_with_referenced_security_group_id" { description = "List of egress rules to create where 'source_security_group_id' is used" type = list(map(string)) default = [] } -variable "egress_with_prefix_list_ids" { - description = "List of egress rules to create where 'prefix_list_ids' is used" +variable "egress_with_prefix_list_id" { + description = "List of egress rules to create where 'prefix_list_id' is used" type = list(map(string)) default = [] } -variable "egress_cidr_blocks" { +variable "egress_cidr_ipv4" { description = "List of IPv4 CIDR ranges to use on all egress rules" type = list(string) default = ["0.0.0.0/0"] } -variable "egress_ipv6_cidr_blocks" { +variable "egress_cidr_ipv6" { description = "List of IPv6 CIDR ranges to use on all egress rules" type = list(string) default = ["::/0"] @@ -284,26 +284,26 @@ variable "computed_egress_with_self" { default = [] } -variable "computed_egress_with_cidr_blocks" { - description = "List of computed egress rules to create where 'cidr_blocks' is used" +variable "computed_egress_with_cidr_ipv4" { + description = "List of computed egress rules to create where 'cidr_ipv4' is used" type = list(map(string)) default = [] } -variable "computed_egress_with_ipv6_cidr_blocks" { +variable "computed_egress_with_cidr_ipv6" { description = "List of computed egress rules to create where 'ipv6_cidr_blocks' is used" type = list(map(string)) default = [] } -variable "computed_egress_with_source_security_group_id" { +variable "computed_egress_with_referenced_security_group_id" { description = "List of computed egress rules to create where 'source_security_group_id' is used" type = list(map(string)) default = [] } -variable "computed_egress_with_prefix_list_ids" { - description = "List of computed egress rules to create where 'prefix_list_ids' is used" +variable "computed_egress_with_prefix_list_id" { + description = "List of computed egress rules to create where 'prefix_list_id' is used" type = list(map(string)) default = [] } @@ -341,26 +341,26 @@ variable "number_of_computed_egress_with_self" { default = 0 } -variable "number_of_computed_egress_with_cidr_blocks" { - description = "Number of computed egress rules to create where 'cidr_blocks' is used" +variable "number_of_computed_egress_with_cidr_ipv4" { + description = "Number of computed egress rules to create where 'cidr_ipv4' is used" type = number default = 0 } -variable "number_of_computed_egress_with_ipv6_cidr_blocks" { +variable "number_of_computed_egress_with_cidr_ipv6" { description = "Number of computed egress rules to create where 'ipv6_cidr_blocks' is used" type = number default = 0 } -variable "number_of_computed_egress_with_source_security_group_id" { +variable "number_of_computed_egress_with_referenced_security_group_id" { description = "Number of computed egress rules to create where 'source_security_group_id' is used" type = number default = 0 } -variable "number_of_computed_egress_with_prefix_list_ids" { - description = "Number of computed egress rules to create where 'prefix_list_ids' is used" +variable "number_of_computed_egress_with_prefix_list_id" { + description = "Number of computed egress rules to create where 'prefix_list_id' is used" type = number default = 0 } diff --git a/modules/ipsec-500/README.md b/modules/ipsec-500/README.md index 37a50e02..bd3eab0d 100644 --- a/modules/ipsec-500/README.md +++ b/modules/ipsec-500/README.md @@ -55,59 +55,59 @@ No resources. | [computed\_egress\_ipv6\_cidr\_blocks](#input\_computed\_egress\_ipv6\_cidr\_blocks) | List of IPv6 CIDR ranges to use on all computed egress rules | `list(string)` |
[
"::/0"
]
| no | | [computed\_egress\_prefix\_list\_ids](#input\_computed\_egress\_prefix\_list\_ids) | List of prefix list IDs (for allowing access to VPC endpoints) to use on all computed egress rules | `list(string)` | `[]` | no | | [computed\_egress\_rules](#input\_computed\_egress\_rules) | List of computed egress rules to create by name | `list(string)` | `[]` | no | -| [computed\_egress\_with\_cidr\_blocks](#input\_computed\_egress\_with\_cidr\_blocks) | List of computed egress rules to create where 'cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [computed\_egress\_with\_ipv6\_cidr\_blocks](#input\_computed\_egress\_with\_ipv6\_cidr\_blocks) | List of computed egress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [computed\_egress\_with\_prefix\_list\_ids](#input\_computed\_egress\_with\_prefix\_list\_ids) | List of computed egress rules to create where 'prefix\_list\_ids' is used | `list(map(string))` | `[]` | no | +| [computed\_egress\_with\_cidr\_ipv4](#input\_computed\_egress\_with\_cidr\_ipv4) | List of computed egress rules to create where 'cidr\_ipv4' is used | `list(map(string))` | `[]` | no | +| [computed\_egress\_with\_cidr\_ipv6](#input\_computed\_egress\_with\_cidr\_ipv6) | List of computed egress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | +| [computed\_egress\_with\_prefix\_list\_id](#input\_computed\_egress\_with\_prefix\_list\_id) | List of computed egress rules to create where 'prefix\_list\_id' is used | `list(map(string))` | `[]` | no | +| [computed\_egress\_with\_referenced\_security\_group\_id](#input\_computed\_egress\_with\_referenced\_security\_group\_id) | List of computed egress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [computed\_egress\_with\_self](#input\_computed\_egress\_with\_self) | List of computed egress rules to create where 'self' is defined | `list(map(string))` | `[]` | no | -| [computed\_egress\_with\_source\_security\_group\_id](#input\_computed\_egress\_with\_source\_security\_group\_id) | List of computed egress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [computed\_ingress\_cidr\_blocks](#input\_computed\_ingress\_cidr\_blocks) | List of IPv4 CIDR ranges to use on all computed ingress rules | `list(string)` | `[]` | no | | [computed\_ingress\_ipv6\_cidr\_blocks](#input\_computed\_ingress\_ipv6\_cidr\_blocks) | List of IPv6 CIDR ranges to use on all computed ingress rules | `list(string)` | `[]` | no | | [computed\_ingress\_prefix\_list\_ids](#input\_computed\_ingress\_prefix\_list\_ids) | List of prefix list IDs (for allowing access to VPC endpoints) to use on all computed ingress rules | `list(string)` | `[]` | no | | [computed\_ingress\_rules](#input\_computed\_ingress\_rules) | List of computed ingress rules to create by name | `list(string)` | `[]` | no | -| [computed\_ingress\_with\_cidr\_blocks](#input\_computed\_ingress\_with\_cidr\_blocks) | List of computed ingress rules to create where 'cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [computed\_ingress\_with\_ipv6\_cidr\_blocks](#input\_computed\_ingress\_with\_ipv6\_cidr\_blocks) | List of computed ingress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [computed\_ingress\_with\_prefix\_list\_ids](#input\_computed\_ingress\_with\_prefix\_list\_ids) | List of computed ingress rules to create where 'prefix\_list\_ids' is used | `list(map(string))` | `[]` | no | +| [computed\_ingress\_with\_cidr\_ipv4](#input\_computed\_ingress\_with\_cidr\_ipv4) | List of computed ingress rules to create where 'cidr\_ipv4' is used | `list(map(string))` | `[]` | no | +| [computed\_ingress\_with\_cidr\_ipv6](#input\_computed\_ingress\_with\_cidr\_ipv6) | List of computed ingress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | +| [computed\_ingress\_with\_prefix\_list\_id](#input\_computed\_ingress\_with\_prefix\_list\_id) | List of computed ingress rules to create where 'prefix\_list\_id' is used | `list(map(string))` | `[]` | no | +| [computed\_ingress\_with\_referenced\_security\_group\_id](#input\_computed\_ingress\_with\_referenced\_security\_group\_id) | List of computed ingress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [computed\_ingress\_with\_self](#input\_computed\_ingress\_with\_self) | List of computed ingress rules to create where 'self' is defined | `list(map(string))` | `[]` | no | -| [computed\_ingress\_with\_source\_security\_group\_id](#input\_computed\_ingress\_with\_source\_security\_group\_id) | List of computed ingress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [create](#input\_create) | Whether to create security group and all rules | `bool` | `true` | no | | [description](#input\_description) | Description of security group | `string` | `"Security Group managed by Terraform"` | no | -| [egress\_cidr\_blocks](#input\_egress\_cidr\_blocks) | List of IPv4 CIDR ranges to use on all egress rules | `list(string)` |
[
"0.0.0.0/0"
]
| no | -| [egress\_ipv6\_cidr\_blocks](#input\_egress\_ipv6\_cidr\_blocks) | List of IPv6 CIDR ranges to use on all egress rules | `list(string)` |
[
"::/0"
]
| no | +| [egress\_cidr\_ipv4](#input\_egress\_cidr\_ipv4) | List of IPv4 CIDR ranges to use on all egress rules | `list(string)` |
[
"0.0.0.0/0"
]
| no | +| [egress\_cidr\_ipv6](#input\_egress\_cidr\_ipv6) | List of IPv6 CIDR ranges to use on all egress rules | `list(string)` |
[
"::/0"
]
| no | | [egress\_prefix\_list\_ids](#input\_egress\_prefix\_list\_ids) | List of prefix list IDs (for allowing access to VPC endpoints) to use on all egress rules | `list(string)` | `[]` | no | | [egress\_rules](#input\_egress\_rules) | List of egress rules to create by name | `list(string)` | `[]` | no | -| [egress\_with\_cidr\_blocks](#input\_egress\_with\_cidr\_blocks) | List of egress rules to create where 'cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [egress\_with\_ipv6\_cidr\_blocks](#input\_egress\_with\_ipv6\_cidr\_blocks) | List of egress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [egress\_with\_prefix\_list\_ids](#input\_egress\_with\_prefix\_list\_ids) | List of egress rules to create where 'prefix\_list\_ids' is used | `list(map(string))` | `[]` | no | +| [egress\_with\_cidr\_ipv4](#input\_egress\_with\_cidr\_ipv4) | List of egress rules to create where 'cidr\_ipv4' is used | `list(map(string))` | `[]` | no | +| [egress\_with\_cidr\_ipv6](#input\_egress\_with\_cidr\_ipv6) | List of egress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | +| [egress\_with\_prefix\_list\_id](#input\_egress\_with\_prefix\_list\_id) | List of egress rules to create where 'prefix\_list\_id' is used | `list(map(string))` | `[]` | no | +| [egress\_with\_referenced\_security\_group\_id](#input\_egress\_with\_referenced\_security\_group\_id) | List of egress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [egress\_with\_self](#input\_egress\_with\_self) | List of egress rules to create where 'self' is defined | `list(map(string))` | `[]` | no | -| [egress\_with\_source\_security\_group\_id](#input\_egress\_with\_source\_security\_group\_id) | List of egress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | -| [ingress\_cidr\_blocks](#input\_ingress\_cidr\_blocks) | List of IPv4 CIDR ranges to use on all ingress rules | `list(string)` | `[]` | no | -| [ingress\_ipv6\_cidr\_blocks](#input\_ingress\_ipv6\_cidr\_blocks) | List of IPv6 CIDR ranges to use on all ingress rules | `list(string)` | `[]` | no | +| [ingress\_cidr\_ipv4](#input\_ingress\_cidr\_ipv4) | List of IPv4 CIDR ranges to use on all ingress rules | `list(string)` | `[]` | no | +| [ingress\_cidr\_ipv6](#input\_ingress\_cidr\_ipv6) | List of IPv6 CIDR ranges to use on all ingress rules | `list(string)` | `[]` | no | | [ingress\_prefix\_list\_ids](#input\_ingress\_prefix\_list\_ids) | List of prefix list IDs (for allowing access to VPC endpoints) to use on all ingress rules | `list(string)` | `[]` | no | | [ingress\_rules](#input\_ingress\_rules) | List of ingress rules to create by name | `list(string)` | `[]` | no | -| [ingress\_with\_cidr\_blocks](#input\_ingress\_with\_cidr\_blocks) | List of ingress rules to create where 'cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [ingress\_with\_ipv6\_cidr\_blocks](#input\_ingress\_with\_ipv6\_cidr\_blocks) | List of ingress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [ingress\_with\_prefix\_list\_ids](#input\_ingress\_with\_prefix\_list\_ids) | List of ingress rules to create where 'prefix\_list\_ids' is used | `list(map(string))` | `[]` | no | +| [ingress\_with\_cidr\_ipv4](#input\_ingress\_with\_cidr\_ipv4) | List of ingress rules to create where 'cidr\_ipv4' is used | `list(map(string))` | `[]` | no | +| [ingress\_with\_cidr\_ipv6](#input\_ingress\_with\_cidr\_ipv6) | List of ingress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | +| [ingress\_with\_prefix\_list\_id](#input\_ingress\_with\_prefix\_list\_id) | List of ingress rules to create where 'prefix\_list\_id' is used | `list(map(string))` | `[]` | no | +| [ingress\_with\_referenced\_security\_group\_id](#input\_ingress\_with\_referenced\_security\_group\_id) | List of ingress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [ingress\_with\_self](#input\_ingress\_with\_self) | List of ingress rules to create where 'self' is defined | `list(map(string))` | `[]` | no | -| [ingress\_with\_source\_security\_group\_id](#input\_ingress\_with\_source\_security\_group\_id) | List of ingress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [name](#input\_name) | Name of security group | `string` | n/a | yes | | [number\_of\_computed\_egress\_cidr\_blocks](#input\_number\_of\_computed\_egress\_cidr\_blocks) | Number of IPv4 CIDR ranges to use on all computed egress rules | `number` | `0` | no | | [number\_of\_computed\_egress\_ipv6\_cidr\_blocks](#input\_number\_of\_computed\_egress\_ipv6\_cidr\_blocks) | Number of IPv6 CIDR ranges to use on all computed egress rules | `number` | `0` | no | | [number\_of\_computed\_egress\_prefix\_list\_ids](#input\_number\_of\_computed\_egress\_prefix\_list\_ids) | Number of prefix list IDs (for allowing access to VPC endpoints) to use on all computed egress rules | `number` | `0` | no | | [number\_of\_computed\_egress\_rules](#input\_number\_of\_computed\_egress\_rules) | Number of computed egress rules to create by name | `number` | `0` | no | -| [number\_of\_computed\_egress\_with\_cidr\_blocks](#input\_number\_of\_computed\_egress\_with\_cidr\_blocks) | Number of computed egress rules to create where 'cidr\_blocks' is used | `number` | `0` | no | -| [number\_of\_computed\_egress\_with\_ipv6\_cidr\_blocks](#input\_number\_of\_computed\_egress\_with\_ipv6\_cidr\_blocks) | Number of computed egress rules to create where 'ipv6\_cidr\_blocks' is used | `number` | `0` | no | -| [number\_of\_computed\_egress\_with\_prefix\_list\_ids](#input\_number\_of\_computed\_egress\_with\_prefix\_list\_ids) | Number of computed egress rules to create where 'prefix\_list\_ids' is used | `number` | `0` | no | +| [number\_of\_computed\_egress\_with\_cidr\_ipv4](#input\_number\_of\_computed\_egress\_with\_cidr\_ipv4) | Number of computed egress rules to create where 'cidr\_ipv4' is used | `number` | `0` | no | +| [number\_of\_computed\_egress\_with\_cidr\_ipv6](#input\_number\_of\_computed\_egress\_with\_cidr\_ipv6) | Number of computed egress rules to create where 'ipv6\_cidr\_blocks' is used | `number` | `0` | no | +| [number\_of\_computed\_egress\_with\_prefix\_list\_id](#input\_number\_of\_computed\_egress\_with\_prefix\_list\_id) | Number of computed egress rules to create where 'prefix\_list\_id' is used | `number` | `0` | no | +| [number\_of\_computed\_egress\_with\_referenced\_security\_group\_id](#input\_number\_of\_computed\_egress\_with\_referenced\_security\_group\_id) | Number of computed egress rules to create where 'source\_security\_group\_id' is used | `number` | `0` | no | | [number\_of\_computed\_egress\_with\_self](#input\_number\_of\_computed\_egress\_with\_self) | Number of computed egress rules to create where 'self' is defined | `number` | `0` | no | -| [number\_of\_computed\_egress\_with\_source\_security\_group\_id](#input\_number\_of\_computed\_egress\_with\_source\_security\_group\_id) | Number of computed egress rules to create where 'source\_security\_group\_id' is used | `number` | `0` | no | | [number\_of\_computed\_ingress\_cidr\_blocks](#input\_number\_of\_computed\_ingress\_cidr\_blocks) | Number of IPv4 CIDR ranges to use on all computed ingress rules | `number` | `0` | no | | [number\_of\_computed\_ingress\_ipv6\_cidr\_blocks](#input\_number\_of\_computed\_ingress\_ipv6\_cidr\_blocks) | Number of IPv6 CIDR ranges to use on all computed ingress rules | `number` | `0` | no | | [number\_of\_computed\_ingress\_prefix\_list\_ids](#input\_number\_of\_computed\_ingress\_prefix\_list\_ids) | Number of prefix list IDs (for allowing access to VPC endpoints) to use on all computed ingress rules | `number` | `0` | no | | [number\_of\_computed\_ingress\_rules](#input\_number\_of\_computed\_ingress\_rules) | Number of computed ingress rules to create by name | `number` | `0` | no | -| [number\_of\_computed\_ingress\_with\_cidr\_blocks](#input\_number\_of\_computed\_ingress\_with\_cidr\_blocks) | Number of computed ingress rules to create where 'cidr\_blocks' is used | `number` | `0` | no | -| [number\_of\_computed\_ingress\_with\_ipv6\_cidr\_blocks](#input\_number\_of\_computed\_ingress\_with\_ipv6\_cidr\_blocks) | Number of computed ingress rules to create where 'ipv6\_cidr\_blocks' is used | `number` | `0` | no | -| [number\_of\_computed\_ingress\_with\_prefix\_list\_ids](#input\_number\_of\_computed\_ingress\_with\_prefix\_list\_ids) | Number of computed ingress rules to create where 'prefix\_list\_ids' is used | `number` | `0` | no | +| [number\_of\_computed\_ingress\_with\_cidr\_ipv4](#input\_number\_of\_computed\_ingress\_with\_cidr\_ipv4) | Number of computed ingress rules to create where 'cidr\_ipv4' is used | `number` | `0` | no | +| [number\_of\_computed\_ingress\_with\_cidr\_ipv6](#input\_number\_of\_computed\_ingress\_with\_cidr\_ipv6) | Number of computed ingress rules to create where 'ipv6\_cidr\_blocks' is used | `number` | `0` | no | +| [number\_of\_computed\_ingress\_with\_prefix\_list\_id](#input\_number\_of\_computed\_ingress\_with\_prefix\_list\_id) | Number of computed ingress rules to create where 'prefix\_list\_id' is used | `number` | `0` | no | +| [number\_of\_computed\_ingress\_with\_referenced\_security\_group\_id](#input\_number\_of\_computed\_ingress\_with\_referenced\_security\_group\_id) | Number of computed ingress rules to create where 'source\_security\_group\_id' is used | `number` | `0` | no | | [number\_of\_computed\_ingress\_with\_self](#input\_number\_of\_computed\_ingress\_with\_self) | Number of computed ingress rules to create where 'self' is defined | `number` | `0` | no | -| [number\_of\_computed\_ingress\_with\_source\_security\_group\_id](#input\_number\_of\_computed\_ingress\_with\_source\_security\_group\_id) | Number of computed ingress rules to create where 'source\_security\_group\_id' is used | `number` | `0` | no | | [revoke\_rules\_on\_delete](#input\_revoke\_rules\_on\_delete) | Instruct Terraform to revoke all of the Security Groups attached ingress and egress rules before deleting the rule itself. Enable for EMR. | `bool` | `false` | no | | [tags](#input\_tags) | A mapping of tags to assign to security group | `map(string)` | `{}` | no | | [use\_name\_prefix](#input\_use\_name\_prefix) | Whether to use name\_prefix or fixed name. Should be true to able to update security group name after initial creation | `bool` | `true` | no | diff --git a/modules/ipsec-500/main.tf b/modules/ipsec-500/main.tf index 80ea0adb..d2a1bf93 100644 --- a/modules/ipsec-500/main.tf +++ b/modules/ipsec-500/main.tf @@ -19,20 +19,20 @@ module "sg" { ingress_with_self = concat(var.auto_ingress_with_self, var.ingress_with_self) # Open to IPv4 cidr blocks - ingress_with_cidr_blocks = var.ingress_with_cidr_blocks + ingress_with_cidr_ipv4 = var.ingress_with_cidr_ipv4 # Open to IPv6 cidr blocks - ingress_with_ipv6_cidr_blocks = var.ingress_with_ipv6_cidr_blocks + ingress_with_cidr_ipv6 = var.ingress_with_cidr_ipv6 # Open for security group id - ingress_with_source_security_group_id = var.ingress_with_source_security_group_id + ingress_with_referenced_security_group_id = var.ingress_with_referenced_security_group_id # Open for prefix list id - ingress_with_prefix_list_ids = var.ingress_with_prefix_list_ids + ingress_with_prefix_list_id = var.ingress_with_prefix_list_id # Default ingress CIDR blocks - ingress_cidr_blocks = var.ingress_cidr_blocks - ingress_ipv6_cidr_blocks = var.ingress_ipv6_cidr_blocks + ingress_cidr_ipv4 = var.ingress_cidr_ipv4 + ingress_cidr_ipv6 = var.ingress_cidr_ipv6 # Default prefix list ids ingress_prefix_list_ids = var.ingress_prefix_list_ids @@ -47,26 +47,26 @@ module "sg" { computed_ingress_with_self = concat(var.auto_computed_ingress_with_self, var.computed_ingress_with_self) # Open to IPv4 cidr blocks - computed_ingress_with_cidr_blocks = var.computed_ingress_with_cidr_blocks + computed_ingress_with_cidr_ipv4 = var.computed_ingress_with_cidr_ipv4 # Open to IPv6 cidr blocks - computed_ingress_with_ipv6_cidr_blocks = var.computed_ingress_with_ipv6_cidr_blocks + computed_ingress_with_cidr_ipv6 = var.computed_ingress_with_cidr_ipv6 # Open for security group id - computed_ingress_with_source_security_group_id = var.computed_ingress_with_source_security_group_id + computed_ingress_with_referenced_security_group_id = var.computed_ingress_with_referenced_security_group_id # Open for prefix list id - computed_ingress_with_prefix_list_ids = var.computed_ingress_with_prefix_list_ids + computed_ingress_with_prefix_list_id = var.computed_ingress_with_prefix_list_id ############################# # Number of computed ingress ############################# - number_of_computed_ingress_rules = var.auto_number_of_computed_ingress_rules + var.number_of_computed_ingress_rules - number_of_computed_ingress_with_self = var.auto_number_of_computed_ingress_with_self + var.number_of_computed_ingress_with_self - number_of_computed_ingress_with_cidr_blocks = var.number_of_computed_ingress_with_cidr_blocks - number_of_computed_ingress_with_ipv6_cidr_blocks = var.number_of_computed_ingress_with_ipv6_cidr_blocks - number_of_computed_ingress_with_source_security_group_id = var.number_of_computed_ingress_with_source_security_group_id - number_of_computed_ingress_with_prefix_list_ids = var.number_of_computed_ingress_with_prefix_list_ids + number_of_computed_ingress_rules = var.auto_number_of_computed_ingress_rules + var.number_of_computed_ingress_rules + number_of_computed_ingress_with_self = var.auto_number_of_computed_ingress_with_self + var.number_of_computed_ingress_with_self + number_of_computed_ingress_with_cidr_ipv4 = var.number_of_computed_ingress_with_cidr_ipv4 + number_of_computed_ingress_with_cidr_ipv6 = var.number_of_computed_ingress_with_cidr_ipv6 + number_of_computed_ingress_with_referenced_security_group_id = var.number_of_computed_ingress_with_referenced_security_group_id + number_of_computed_ingress_with_prefix_list_id = var.number_of_computed_ingress_with_prefix_list_id ######### # Egress @@ -78,20 +78,20 @@ module "sg" { egress_with_self = concat(var.auto_egress_with_self, var.egress_with_self) # Open to IPv4 cidr blocks - egress_with_cidr_blocks = var.egress_with_cidr_blocks + egress_with_cidr_ipv4 = var.egress_with_cidr_ipv4 # Open to IPv6 cidr blocks - egress_with_ipv6_cidr_blocks = var.egress_with_ipv6_cidr_blocks + egress_with_cidr_ipv6 = var.egress_with_cidr_ipv6 # Open for security group id - egress_with_source_security_group_id = var.egress_with_source_security_group_id + egress_with_referenced_security_group_id = var.egress_with_referenced_security_group_id # Open for prefix list id - egress_with_prefix_list_ids = var.egress_with_prefix_list_ids + egress_with_prefix_list_id = var.egress_with_prefix_list_id # Default egress CIDR blocks - egress_cidr_blocks = var.egress_cidr_blocks - egress_ipv6_cidr_blocks = var.egress_ipv6_cidr_blocks + egress_cidr_ipv4 = var.egress_cidr_ipv4 + egress_cidr_ipv6 = var.egress_cidr_ipv6 # Default prefix list ids egress_prefix_list_ids = var.egress_prefix_list_ids @@ -106,24 +106,24 @@ module "sg" { computed_egress_with_self = concat(var.auto_computed_egress_with_self, var.computed_egress_with_self) # Open to IPv4 cidr blocks - computed_egress_with_cidr_blocks = var.computed_egress_with_cidr_blocks + computed_egress_with_cidr_ipv4 = var.computed_egress_with_cidr_ipv4 # Open to IPv6 cidr blocks - computed_egress_with_ipv6_cidr_blocks = var.computed_egress_with_ipv6_cidr_blocks + computed_egress_with_cidr_ipv6 = var.computed_egress_with_cidr_ipv6 # Open for security group id - computed_egress_with_source_security_group_id = var.computed_egress_with_source_security_group_id + computed_egress_with_referenced_security_group_id = var.computed_egress_with_referenced_security_group_id # Open for prefix list id - computed_egress_with_prefix_list_ids = var.computed_egress_with_prefix_list_ids + computed_egress_with_prefix_list_id = var.computed_egress_with_prefix_list_id ############################# # Number of computed egress ############################# - number_of_computed_egress_rules = var.auto_number_of_computed_egress_rules + var.number_of_computed_egress_rules - number_of_computed_egress_with_self = var.auto_number_of_computed_egress_with_self + var.number_of_computed_egress_with_self - number_of_computed_egress_with_cidr_blocks = var.number_of_computed_egress_with_cidr_blocks - number_of_computed_egress_with_ipv6_cidr_blocks = var.number_of_computed_egress_with_ipv6_cidr_blocks - number_of_computed_egress_with_source_security_group_id = var.number_of_computed_egress_with_source_security_group_id - number_of_computed_egress_with_prefix_list_ids = var.number_of_computed_egress_with_prefix_list_ids + number_of_computed_egress_rules = var.auto_number_of_computed_egress_rules + var.number_of_computed_egress_rules + number_of_computed_egress_with_self = var.auto_number_of_computed_egress_with_self + var.number_of_computed_egress_with_self + number_of_computed_egress_with_cidr_ipv4 = var.number_of_computed_egress_with_cidr_ipv4 + number_of_computed_egress_with_cidr_ipv6 = var.number_of_computed_egress_with_cidr_ipv6 + number_of_computed_egress_with_referenced_security_group_id = var.number_of_computed_egress_with_referenced_security_group_id + number_of_computed_egress_with_prefix_list_id = var.number_of_computed_egress_with_prefix_list_id } diff --git a/modules/ipsec-500/variables.tf b/modules/ipsec-500/variables.tf index 60c8c27b..6590c9e3 100644 --- a/modules/ipsec-500/variables.tf +++ b/modules/ipsec-500/variables.tf @@ -56,37 +56,37 @@ variable "ingress_with_self" { default = [] } -variable "ingress_with_cidr_blocks" { - description = "List of ingress rules to create where 'cidr_blocks' is used" +variable "ingress_with_cidr_ipv4" { + description = "List of ingress rules to create where 'cidr_ipv4' is used" type = list(map(string)) default = [] } -variable "ingress_with_ipv6_cidr_blocks" { +variable "ingress_with_cidr_ipv6" { description = "List of ingress rules to create where 'ipv6_cidr_blocks' is used" type = list(map(string)) default = [] } -variable "ingress_with_source_security_group_id" { +variable "ingress_with_referenced_security_group_id" { description = "List of ingress rules to create where 'source_security_group_id' is used" type = list(map(string)) default = [] } -variable "ingress_with_prefix_list_ids" { - description = "List of ingress rules to create where 'prefix_list_ids' is used" +variable "ingress_with_prefix_list_id" { + description = "List of ingress rules to create where 'prefix_list_id' is used" type = list(map(string)) default = [] } -variable "ingress_cidr_blocks" { +variable "ingress_cidr_ipv4" { description = "List of IPv4 CIDR ranges to use on all ingress rules" type = list(string) default = [] } -variable "ingress_ipv6_cidr_blocks" { +variable "ingress_cidr_ipv6" { description = "List of IPv6 CIDR ranges to use on all ingress rules" type = list(string) default = [] @@ -113,26 +113,26 @@ variable "computed_ingress_with_self" { default = [] } -variable "computed_ingress_with_cidr_blocks" { - description = "List of computed ingress rules to create where 'cidr_blocks' is used" +variable "computed_ingress_with_cidr_ipv4" { + description = "List of computed ingress rules to create where 'cidr_ipv4' is used" type = list(map(string)) default = [] } -variable "computed_ingress_with_ipv6_cidr_blocks" { +variable "computed_ingress_with_cidr_ipv6" { description = "List of computed ingress rules to create where 'ipv6_cidr_blocks' is used" type = list(map(string)) default = [] } -variable "computed_ingress_with_source_security_group_id" { +variable "computed_ingress_with_referenced_security_group_id" { description = "List of computed ingress rules to create where 'source_security_group_id' is used" type = list(map(string)) default = [] } -variable "computed_ingress_with_prefix_list_ids" { - description = "List of computed ingress rules to create where 'prefix_list_ids' is used" +variable "computed_ingress_with_prefix_list_id" { + description = "List of computed ingress rules to create where 'prefix_list_id' is used" type = list(map(string)) default = [] } @@ -170,26 +170,26 @@ variable "number_of_computed_ingress_with_self" { default = 0 } -variable "number_of_computed_ingress_with_cidr_blocks" { - description = "Number of computed ingress rules to create where 'cidr_blocks' is used" +variable "number_of_computed_ingress_with_cidr_ipv4" { + description = "Number of computed ingress rules to create where 'cidr_ipv4' is used" type = number default = 0 } -variable "number_of_computed_ingress_with_ipv6_cidr_blocks" { +variable "number_of_computed_ingress_with_cidr_ipv6" { description = "Number of computed ingress rules to create where 'ipv6_cidr_blocks' is used" type = number default = 0 } -variable "number_of_computed_ingress_with_source_security_group_id" { +variable "number_of_computed_ingress_with_referenced_security_group_id" { description = "Number of computed ingress rules to create where 'source_security_group_id' is used" type = number default = 0 } -variable "number_of_computed_ingress_with_prefix_list_ids" { - description = "Number of computed ingress rules to create where 'prefix_list_ids' is used" +variable "number_of_computed_ingress_with_prefix_list_id" { + description = "Number of computed ingress rules to create where 'prefix_list_id' is used" type = number default = 0 } @@ -227,37 +227,37 @@ variable "egress_with_self" { default = [] } -variable "egress_with_cidr_blocks" { - description = "List of egress rules to create where 'cidr_blocks' is used" +variable "egress_with_cidr_ipv4" { + description = "List of egress rules to create where 'cidr_ipv4' is used" type = list(map(string)) default = [] } -variable "egress_with_ipv6_cidr_blocks" { +variable "egress_with_cidr_ipv6" { description = "List of egress rules to create where 'ipv6_cidr_blocks' is used" type = list(map(string)) default = [] } -variable "egress_with_source_security_group_id" { +variable "egress_with_referenced_security_group_id" { description = "List of egress rules to create where 'source_security_group_id' is used" type = list(map(string)) default = [] } -variable "egress_with_prefix_list_ids" { - description = "List of egress rules to create where 'prefix_list_ids' is used" +variable "egress_with_prefix_list_id" { + description = "List of egress rules to create where 'prefix_list_id' is used" type = list(map(string)) default = [] } -variable "egress_cidr_blocks" { +variable "egress_cidr_ipv4" { description = "List of IPv4 CIDR ranges to use on all egress rules" type = list(string) default = ["0.0.0.0/0"] } -variable "egress_ipv6_cidr_blocks" { +variable "egress_cidr_ipv6" { description = "List of IPv6 CIDR ranges to use on all egress rules" type = list(string) default = ["::/0"] @@ -284,26 +284,26 @@ variable "computed_egress_with_self" { default = [] } -variable "computed_egress_with_cidr_blocks" { - description = "List of computed egress rules to create where 'cidr_blocks' is used" +variable "computed_egress_with_cidr_ipv4" { + description = "List of computed egress rules to create where 'cidr_ipv4' is used" type = list(map(string)) default = [] } -variable "computed_egress_with_ipv6_cidr_blocks" { +variable "computed_egress_with_cidr_ipv6" { description = "List of computed egress rules to create where 'ipv6_cidr_blocks' is used" type = list(map(string)) default = [] } -variable "computed_egress_with_source_security_group_id" { +variable "computed_egress_with_referenced_security_group_id" { description = "List of computed egress rules to create where 'source_security_group_id' is used" type = list(map(string)) default = [] } -variable "computed_egress_with_prefix_list_ids" { - description = "List of computed egress rules to create where 'prefix_list_ids' is used" +variable "computed_egress_with_prefix_list_id" { + description = "List of computed egress rules to create where 'prefix_list_id' is used" type = list(map(string)) default = [] } @@ -341,26 +341,26 @@ variable "number_of_computed_egress_with_self" { default = 0 } -variable "number_of_computed_egress_with_cidr_blocks" { - description = "Number of computed egress rules to create where 'cidr_blocks' is used" +variable "number_of_computed_egress_with_cidr_ipv4" { + description = "Number of computed egress rules to create where 'cidr_ipv4' is used" type = number default = 0 } -variable "number_of_computed_egress_with_ipv6_cidr_blocks" { +variable "number_of_computed_egress_with_cidr_ipv6" { description = "Number of computed egress rules to create where 'ipv6_cidr_blocks' is used" type = number default = 0 } -variable "number_of_computed_egress_with_source_security_group_id" { +variable "number_of_computed_egress_with_referenced_security_group_id" { description = "Number of computed egress rules to create where 'source_security_group_id' is used" type = number default = 0 } -variable "number_of_computed_egress_with_prefix_list_ids" { - description = "Number of computed egress rules to create where 'prefix_list_ids' is used" +variable "number_of_computed_egress_with_prefix_list_id" { + description = "Number of computed egress rules to create where 'prefix_list_id' is used" type = number default = 0 } diff --git a/modules/kafka/README.md b/modules/kafka/README.md index c0ba8024..138151b3 100644 --- a/modules/kafka/README.md +++ b/modules/kafka/README.md @@ -55,59 +55,59 @@ No resources. | [computed\_egress\_ipv6\_cidr\_blocks](#input\_computed\_egress\_ipv6\_cidr\_blocks) | List of IPv6 CIDR ranges to use on all computed egress rules | `list(string)` |
[
"::/0"
]
| no | | [computed\_egress\_prefix\_list\_ids](#input\_computed\_egress\_prefix\_list\_ids) | List of prefix list IDs (for allowing access to VPC endpoints) to use on all computed egress rules | `list(string)` | `[]` | no | | [computed\_egress\_rules](#input\_computed\_egress\_rules) | List of computed egress rules to create by name | `list(string)` | `[]` | no | -| [computed\_egress\_with\_cidr\_blocks](#input\_computed\_egress\_with\_cidr\_blocks) | List of computed egress rules to create where 'cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [computed\_egress\_with\_ipv6\_cidr\_blocks](#input\_computed\_egress\_with\_ipv6\_cidr\_blocks) | List of computed egress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [computed\_egress\_with\_prefix\_list\_ids](#input\_computed\_egress\_with\_prefix\_list\_ids) | List of computed egress rules to create where 'prefix\_list\_ids' is used | `list(map(string))` | `[]` | no | +| [computed\_egress\_with\_cidr\_ipv4](#input\_computed\_egress\_with\_cidr\_ipv4) | List of computed egress rules to create where 'cidr\_ipv4' is used | `list(map(string))` | `[]` | no | +| [computed\_egress\_with\_cidr\_ipv6](#input\_computed\_egress\_with\_cidr\_ipv6) | List of computed egress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | +| [computed\_egress\_with\_prefix\_list\_id](#input\_computed\_egress\_with\_prefix\_list\_id) | List of computed egress rules to create where 'prefix\_list\_id' is used | `list(map(string))` | `[]` | no | +| [computed\_egress\_with\_referenced\_security\_group\_id](#input\_computed\_egress\_with\_referenced\_security\_group\_id) | List of computed egress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [computed\_egress\_with\_self](#input\_computed\_egress\_with\_self) | List of computed egress rules to create where 'self' is defined | `list(map(string))` | `[]` | no | -| [computed\_egress\_with\_source\_security\_group\_id](#input\_computed\_egress\_with\_source\_security\_group\_id) | List of computed egress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [computed\_ingress\_cidr\_blocks](#input\_computed\_ingress\_cidr\_blocks) | List of IPv4 CIDR ranges to use on all computed ingress rules | `list(string)` | `[]` | no | | [computed\_ingress\_ipv6\_cidr\_blocks](#input\_computed\_ingress\_ipv6\_cidr\_blocks) | List of IPv6 CIDR ranges to use on all computed ingress rules | `list(string)` | `[]` | no | | [computed\_ingress\_prefix\_list\_ids](#input\_computed\_ingress\_prefix\_list\_ids) | List of prefix list IDs (for allowing access to VPC endpoints) to use on all computed ingress rules | `list(string)` | `[]` | no | | [computed\_ingress\_rules](#input\_computed\_ingress\_rules) | List of computed ingress rules to create by name | `list(string)` | `[]` | no | -| [computed\_ingress\_with\_cidr\_blocks](#input\_computed\_ingress\_with\_cidr\_blocks) | List of computed ingress rules to create where 'cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [computed\_ingress\_with\_ipv6\_cidr\_blocks](#input\_computed\_ingress\_with\_ipv6\_cidr\_blocks) | List of computed ingress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [computed\_ingress\_with\_prefix\_list\_ids](#input\_computed\_ingress\_with\_prefix\_list\_ids) | List of computed ingress rules to create where 'prefix\_list\_ids' is used | `list(map(string))` | `[]` | no | +| [computed\_ingress\_with\_cidr\_ipv4](#input\_computed\_ingress\_with\_cidr\_ipv4) | List of computed ingress rules to create where 'cidr\_ipv4' is used | `list(map(string))` | `[]` | no | +| [computed\_ingress\_with\_cidr\_ipv6](#input\_computed\_ingress\_with\_cidr\_ipv6) | List of computed ingress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | +| [computed\_ingress\_with\_prefix\_list\_id](#input\_computed\_ingress\_with\_prefix\_list\_id) | List of computed ingress rules to create where 'prefix\_list\_id' is used | `list(map(string))` | `[]` | no | +| [computed\_ingress\_with\_referenced\_security\_group\_id](#input\_computed\_ingress\_with\_referenced\_security\_group\_id) | List of computed ingress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [computed\_ingress\_with\_self](#input\_computed\_ingress\_with\_self) | List of computed ingress rules to create where 'self' is defined | `list(map(string))` | `[]` | no | -| [computed\_ingress\_with\_source\_security\_group\_id](#input\_computed\_ingress\_with\_source\_security\_group\_id) | List of computed ingress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [create](#input\_create) | Whether to create security group and all rules | `bool` | `true` | no | | [description](#input\_description) | Description of security group | `string` | `"Security Group managed by Terraform"` | no | -| [egress\_cidr\_blocks](#input\_egress\_cidr\_blocks) | List of IPv4 CIDR ranges to use on all egress rules | `list(string)` |
[
"0.0.0.0/0"
]
| no | -| [egress\_ipv6\_cidr\_blocks](#input\_egress\_ipv6\_cidr\_blocks) | List of IPv6 CIDR ranges to use on all egress rules | `list(string)` |
[
"::/0"
]
| no | +| [egress\_cidr\_ipv4](#input\_egress\_cidr\_ipv4) | List of IPv4 CIDR ranges to use on all egress rules | `list(string)` |
[
"0.0.0.0/0"
]
| no | +| [egress\_cidr\_ipv6](#input\_egress\_cidr\_ipv6) | List of IPv6 CIDR ranges to use on all egress rules | `list(string)` |
[
"::/0"
]
| no | | [egress\_prefix\_list\_ids](#input\_egress\_prefix\_list\_ids) | List of prefix list IDs (for allowing access to VPC endpoints) to use on all egress rules | `list(string)` | `[]` | no | | [egress\_rules](#input\_egress\_rules) | List of egress rules to create by name | `list(string)` | `[]` | no | -| [egress\_with\_cidr\_blocks](#input\_egress\_with\_cidr\_blocks) | List of egress rules to create where 'cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [egress\_with\_ipv6\_cidr\_blocks](#input\_egress\_with\_ipv6\_cidr\_blocks) | List of egress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [egress\_with\_prefix\_list\_ids](#input\_egress\_with\_prefix\_list\_ids) | List of egress rules to create where 'prefix\_list\_ids' is used | `list(map(string))` | `[]` | no | +| [egress\_with\_cidr\_ipv4](#input\_egress\_with\_cidr\_ipv4) | List of egress rules to create where 'cidr\_ipv4' is used | `list(map(string))` | `[]` | no | +| [egress\_with\_cidr\_ipv6](#input\_egress\_with\_cidr\_ipv6) | List of egress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | +| [egress\_with\_prefix\_list\_id](#input\_egress\_with\_prefix\_list\_id) | List of egress rules to create where 'prefix\_list\_id' is used | `list(map(string))` | `[]` | no | +| [egress\_with\_referenced\_security\_group\_id](#input\_egress\_with\_referenced\_security\_group\_id) | List of egress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [egress\_with\_self](#input\_egress\_with\_self) | List of egress rules to create where 'self' is defined | `list(map(string))` | `[]` | no | -| [egress\_with\_source\_security\_group\_id](#input\_egress\_with\_source\_security\_group\_id) | List of egress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | -| [ingress\_cidr\_blocks](#input\_ingress\_cidr\_blocks) | List of IPv4 CIDR ranges to use on all ingress rules | `list(string)` | `[]` | no | -| [ingress\_ipv6\_cidr\_blocks](#input\_ingress\_ipv6\_cidr\_blocks) | List of IPv6 CIDR ranges to use on all ingress rules | `list(string)` | `[]` | no | +| [ingress\_cidr\_ipv4](#input\_ingress\_cidr\_ipv4) | List of IPv4 CIDR ranges to use on all ingress rules | `list(string)` | `[]` | no | +| [ingress\_cidr\_ipv6](#input\_ingress\_cidr\_ipv6) | List of IPv6 CIDR ranges to use on all ingress rules | `list(string)` | `[]` | no | | [ingress\_prefix\_list\_ids](#input\_ingress\_prefix\_list\_ids) | List of prefix list IDs (for allowing access to VPC endpoints) to use on all ingress rules | `list(string)` | `[]` | no | | [ingress\_rules](#input\_ingress\_rules) | List of ingress rules to create by name | `list(string)` | `[]` | no | -| [ingress\_with\_cidr\_blocks](#input\_ingress\_with\_cidr\_blocks) | List of ingress rules to create where 'cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [ingress\_with\_ipv6\_cidr\_blocks](#input\_ingress\_with\_ipv6\_cidr\_blocks) | List of ingress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [ingress\_with\_prefix\_list\_ids](#input\_ingress\_with\_prefix\_list\_ids) | List of ingress rules to create where 'prefix\_list\_ids' is used | `list(map(string))` | `[]` | no | +| [ingress\_with\_cidr\_ipv4](#input\_ingress\_with\_cidr\_ipv4) | List of ingress rules to create where 'cidr\_ipv4' is used | `list(map(string))` | `[]` | no | +| [ingress\_with\_cidr\_ipv6](#input\_ingress\_with\_cidr\_ipv6) | List of ingress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | +| [ingress\_with\_prefix\_list\_id](#input\_ingress\_with\_prefix\_list\_id) | List of ingress rules to create where 'prefix\_list\_id' is used | `list(map(string))` | `[]` | no | +| [ingress\_with\_referenced\_security\_group\_id](#input\_ingress\_with\_referenced\_security\_group\_id) | List of ingress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [ingress\_with\_self](#input\_ingress\_with\_self) | List of ingress rules to create where 'self' is defined | `list(map(string))` | `[]` | no | -| [ingress\_with\_source\_security\_group\_id](#input\_ingress\_with\_source\_security\_group\_id) | List of ingress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [name](#input\_name) | Name of security group | `string` | n/a | yes | | [number\_of\_computed\_egress\_cidr\_blocks](#input\_number\_of\_computed\_egress\_cidr\_blocks) | Number of IPv4 CIDR ranges to use on all computed egress rules | `number` | `0` | no | | [number\_of\_computed\_egress\_ipv6\_cidr\_blocks](#input\_number\_of\_computed\_egress\_ipv6\_cidr\_blocks) | Number of IPv6 CIDR ranges to use on all computed egress rules | `number` | `0` | no | | [number\_of\_computed\_egress\_prefix\_list\_ids](#input\_number\_of\_computed\_egress\_prefix\_list\_ids) | Number of prefix list IDs (for allowing access to VPC endpoints) to use on all computed egress rules | `number` | `0` | no | | [number\_of\_computed\_egress\_rules](#input\_number\_of\_computed\_egress\_rules) | Number of computed egress rules to create by name | `number` | `0` | no | -| [number\_of\_computed\_egress\_with\_cidr\_blocks](#input\_number\_of\_computed\_egress\_with\_cidr\_blocks) | Number of computed egress rules to create where 'cidr\_blocks' is used | `number` | `0` | no | -| [number\_of\_computed\_egress\_with\_ipv6\_cidr\_blocks](#input\_number\_of\_computed\_egress\_with\_ipv6\_cidr\_blocks) | Number of computed egress rules to create where 'ipv6\_cidr\_blocks' is used | `number` | `0` | no | -| [number\_of\_computed\_egress\_with\_prefix\_list\_ids](#input\_number\_of\_computed\_egress\_with\_prefix\_list\_ids) | Number of computed egress rules to create where 'prefix\_list\_ids' is used | `number` | `0` | no | +| [number\_of\_computed\_egress\_with\_cidr\_ipv4](#input\_number\_of\_computed\_egress\_with\_cidr\_ipv4) | Number of computed egress rules to create where 'cidr\_ipv4' is used | `number` | `0` | no | +| [number\_of\_computed\_egress\_with\_cidr\_ipv6](#input\_number\_of\_computed\_egress\_with\_cidr\_ipv6) | Number of computed egress rules to create where 'ipv6\_cidr\_blocks' is used | `number` | `0` | no | +| [number\_of\_computed\_egress\_with\_prefix\_list\_id](#input\_number\_of\_computed\_egress\_with\_prefix\_list\_id) | Number of computed egress rules to create where 'prefix\_list\_id' is used | `number` | `0` | no | +| [number\_of\_computed\_egress\_with\_referenced\_security\_group\_id](#input\_number\_of\_computed\_egress\_with\_referenced\_security\_group\_id) | Number of computed egress rules to create where 'source\_security\_group\_id' is used | `number` | `0` | no | | [number\_of\_computed\_egress\_with\_self](#input\_number\_of\_computed\_egress\_with\_self) | Number of computed egress rules to create where 'self' is defined | `number` | `0` | no | -| [number\_of\_computed\_egress\_with\_source\_security\_group\_id](#input\_number\_of\_computed\_egress\_with\_source\_security\_group\_id) | Number of computed egress rules to create where 'source\_security\_group\_id' is used | `number` | `0` | no | | [number\_of\_computed\_ingress\_cidr\_blocks](#input\_number\_of\_computed\_ingress\_cidr\_blocks) | Number of IPv4 CIDR ranges to use on all computed ingress rules | `number` | `0` | no | | [number\_of\_computed\_ingress\_ipv6\_cidr\_blocks](#input\_number\_of\_computed\_ingress\_ipv6\_cidr\_blocks) | Number of IPv6 CIDR ranges to use on all computed ingress rules | `number` | `0` | no | | [number\_of\_computed\_ingress\_prefix\_list\_ids](#input\_number\_of\_computed\_ingress\_prefix\_list\_ids) | Number of prefix list IDs (for allowing access to VPC endpoints) to use on all computed ingress rules | `number` | `0` | no | | [number\_of\_computed\_ingress\_rules](#input\_number\_of\_computed\_ingress\_rules) | Number of computed ingress rules to create by name | `number` | `0` | no | -| [number\_of\_computed\_ingress\_with\_cidr\_blocks](#input\_number\_of\_computed\_ingress\_with\_cidr\_blocks) | Number of computed ingress rules to create where 'cidr\_blocks' is used | `number` | `0` | no | -| [number\_of\_computed\_ingress\_with\_ipv6\_cidr\_blocks](#input\_number\_of\_computed\_ingress\_with\_ipv6\_cidr\_blocks) | Number of computed ingress rules to create where 'ipv6\_cidr\_blocks' is used | `number` | `0` | no | -| [number\_of\_computed\_ingress\_with\_prefix\_list\_ids](#input\_number\_of\_computed\_ingress\_with\_prefix\_list\_ids) | Number of computed ingress rules to create where 'prefix\_list\_ids' is used | `number` | `0` | no | +| [number\_of\_computed\_ingress\_with\_cidr\_ipv4](#input\_number\_of\_computed\_ingress\_with\_cidr\_ipv4) | Number of computed ingress rules to create where 'cidr\_ipv4' is used | `number` | `0` | no | +| [number\_of\_computed\_ingress\_with\_cidr\_ipv6](#input\_number\_of\_computed\_ingress\_with\_cidr\_ipv6) | Number of computed ingress rules to create where 'ipv6\_cidr\_blocks' is used | `number` | `0` | no | +| [number\_of\_computed\_ingress\_with\_prefix\_list\_id](#input\_number\_of\_computed\_ingress\_with\_prefix\_list\_id) | Number of computed ingress rules to create where 'prefix\_list\_id' is used | `number` | `0` | no | +| [number\_of\_computed\_ingress\_with\_referenced\_security\_group\_id](#input\_number\_of\_computed\_ingress\_with\_referenced\_security\_group\_id) | Number of computed ingress rules to create where 'source\_security\_group\_id' is used | `number` | `0` | no | | [number\_of\_computed\_ingress\_with\_self](#input\_number\_of\_computed\_ingress\_with\_self) | Number of computed ingress rules to create where 'self' is defined | `number` | `0` | no | -| [number\_of\_computed\_ingress\_with\_source\_security\_group\_id](#input\_number\_of\_computed\_ingress\_with\_source\_security\_group\_id) | Number of computed ingress rules to create where 'source\_security\_group\_id' is used | `number` | `0` | no | | [revoke\_rules\_on\_delete](#input\_revoke\_rules\_on\_delete) | Instruct Terraform to revoke all of the Security Groups attached ingress and egress rules before deleting the rule itself. Enable for EMR. | `bool` | `false` | no | | [tags](#input\_tags) | A mapping of tags to assign to security group | `map(string)` | `{}` | no | | [use\_name\_prefix](#input\_use\_name\_prefix) | Whether to use name\_prefix or fixed name. Should be true to able to update security group name after initial creation | `bool` | `true` | no | diff --git a/modules/kafka/main.tf b/modules/kafka/main.tf index 80ea0adb..d2a1bf93 100644 --- a/modules/kafka/main.tf +++ b/modules/kafka/main.tf @@ -19,20 +19,20 @@ module "sg" { ingress_with_self = concat(var.auto_ingress_with_self, var.ingress_with_self) # Open to IPv4 cidr blocks - ingress_with_cidr_blocks = var.ingress_with_cidr_blocks + ingress_with_cidr_ipv4 = var.ingress_with_cidr_ipv4 # Open to IPv6 cidr blocks - ingress_with_ipv6_cidr_blocks = var.ingress_with_ipv6_cidr_blocks + ingress_with_cidr_ipv6 = var.ingress_with_cidr_ipv6 # Open for security group id - ingress_with_source_security_group_id = var.ingress_with_source_security_group_id + ingress_with_referenced_security_group_id = var.ingress_with_referenced_security_group_id # Open for prefix list id - ingress_with_prefix_list_ids = var.ingress_with_prefix_list_ids + ingress_with_prefix_list_id = var.ingress_with_prefix_list_id # Default ingress CIDR blocks - ingress_cidr_blocks = var.ingress_cidr_blocks - ingress_ipv6_cidr_blocks = var.ingress_ipv6_cidr_blocks + ingress_cidr_ipv4 = var.ingress_cidr_ipv4 + ingress_cidr_ipv6 = var.ingress_cidr_ipv6 # Default prefix list ids ingress_prefix_list_ids = var.ingress_prefix_list_ids @@ -47,26 +47,26 @@ module "sg" { computed_ingress_with_self = concat(var.auto_computed_ingress_with_self, var.computed_ingress_with_self) # Open to IPv4 cidr blocks - computed_ingress_with_cidr_blocks = var.computed_ingress_with_cidr_blocks + computed_ingress_with_cidr_ipv4 = var.computed_ingress_with_cidr_ipv4 # Open to IPv6 cidr blocks - computed_ingress_with_ipv6_cidr_blocks = var.computed_ingress_with_ipv6_cidr_blocks + computed_ingress_with_cidr_ipv6 = var.computed_ingress_with_cidr_ipv6 # Open for security group id - computed_ingress_with_source_security_group_id = var.computed_ingress_with_source_security_group_id + computed_ingress_with_referenced_security_group_id = var.computed_ingress_with_referenced_security_group_id # Open for prefix list id - computed_ingress_with_prefix_list_ids = var.computed_ingress_with_prefix_list_ids + computed_ingress_with_prefix_list_id = var.computed_ingress_with_prefix_list_id ############################# # Number of computed ingress ############################# - number_of_computed_ingress_rules = var.auto_number_of_computed_ingress_rules + var.number_of_computed_ingress_rules - number_of_computed_ingress_with_self = var.auto_number_of_computed_ingress_with_self + var.number_of_computed_ingress_with_self - number_of_computed_ingress_with_cidr_blocks = var.number_of_computed_ingress_with_cidr_blocks - number_of_computed_ingress_with_ipv6_cidr_blocks = var.number_of_computed_ingress_with_ipv6_cidr_blocks - number_of_computed_ingress_with_source_security_group_id = var.number_of_computed_ingress_with_source_security_group_id - number_of_computed_ingress_with_prefix_list_ids = var.number_of_computed_ingress_with_prefix_list_ids + number_of_computed_ingress_rules = var.auto_number_of_computed_ingress_rules + var.number_of_computed_ingress_rules + number_of_computed_ingress_with_self = var.auto_number_of_computed_ingress_with_self + var.number_of_computed_ingress_with_self + number_of_computed_ingress_with_cidr_ipv4 = var.number_of_computed_ingress_with_cidr_ipv4 + number_of_computed_ingress_with_cidr_ipv6 = var.number_of_computed_ingress_with_cidr_ipv6 + number_of_computed_ingress_with_referenced_security_group_id = var.number_of_computed_ingress_with_referenced_security_group_id + number_of_computed_ingress_with_prefix_list_id = var.number_of_computed_ingress_with_prefix_list_id ######### # Egress @@ -78,20 +78,20 @@ module "sg" { egress_with_self = concat(var.auto_egress_with_self, var.egress_with_self) # Open to IPv4 cidr blocks - egress_with_cidr_blocks = var.egress_with_cidr_blocks + egress_with_cidr_ipv4 = var.egress_with_cidr_ipv4 # Open to IPv6 cidr blocks - egress_with_ipv6_cidr_blocks = var.egress_with_ipv6_cidr_blocks + egress_with_cidr_ipv6 = var.egress_with_cidr_ipv6 # Open for security group id - egress_with_source_security_group_id = var.egress_with_source_security_group_id + egress_with_referenced_security_group_id = var.egress_with_referenced_security_group_id # Open for prefix list id - egress_with_prefix_list_ids = var.egress_with_prefix_list_ids + egress_with_prefix_list_id = var.egress_with_prefix_list_id # Default egress CIDR blocks - egress_cidr_blocks = var.egress_cidr_blocks - egress_ipv6_cidr_blocks = var.egress_ipv6_cidr_blocks + egress_cidr_ipv4 = var.egress_cidr_ipv4 + egress_cidr_ipv6 = var.egress_cidr_ipv6 # Default prefix list ids egress_prefix_list_ids = var.egress_prefix_list_ids @@ -106,24 +106,24 @@ module "sg" { computed_egress_with_self = concat(var.auto_computed_egress_with_self, var.computed_egress_with_self) # Open to IPv4 cidr blocks - computed_egress_with_cidr_blocks = var.computed_egress_with_cidr_blocks + computed_egress_with_cidr_ipv4 = var.computed_egress_with_cidr_ipv4 # Open to IPv6 cidr blocks - computed_egress_with_ipv6_cidr_blocks = var.computed_egress_with_ipv6_cidr_blocks + computed_egress_with_cidr_ipv6 = var.computed_egress_with_cidr_ipv6 # Open for security group id - computed_egress_with_source_security_group_id = var.computed_egress_with_source_security_group_id + computed_egress_with_referenced_security_group_id = var.computed_egress_with_referenced_security_group_id # Open for prefix list id - computed_egress_with_prefix_list_ids = var.computed_egress_with_prefix_list_ids + computed_egress_with_prefix_list_id = var.computed_egress_with_prefix_list_id ############################# # Number of computed egress ############################# - number_of_computed_egress_rules = var.auto_number_of_computed_egress_rules + var.number_of_computed_egress_rules - number_of_computed_egress_with_self = var.auto_number_of_computed_egress_with_self + var.number_of_computed_egress_with_self - number_of_computed_egress_with_cidr_blocks = var.number_of_computed_egress_with_cidr_blocks - number_of_computed_egress_with_ipv6_cidr_blocks = var.number_of_computed_egress_with_ipv6_cidr_blocks - number_of_computed_egress_with_source_security_group_id = var.number_of_computed_egress_with_source_security_group_id - number_of_computed_egress_with_prefix_list_ids = var.number_of_computed_egress_with_prefix_list_ids + number_of_computed_egress_rules = var.auto_number_of_computed_egress_rules + var.number_of_computed_egress_rules + number_of_computed_egress_with_self = var.auto_number_of_computed_egress_with_self + var.number_of_computed_egress_with_self + number_of_computed_egress_with_cidr_ipv4 = var.number_of_computed_egress_with_cidr_ipv4 + number_of_computed_egress_with_cidr_ipv6 = var.number_of_computed_egress_with_cidr_ipv6 + number_of_computed_egress_with_referenced_security_group_id = var.number_of_computed_egress_with_referenced_security_group_id + number_of_computed_egress_with_prefix_list_id = var.number_of_computed_egress_with_prefix_list_id } diff --git a/modules/kafka/variables.tf b/modules/kafka/variables.tf index 60c8c27b..6590c9e3 100644 --- a/modules/kafka/variables.tf +++ b/modules/kafka/variables.tf @@ -56,37 +56,37 @@ variable "ingress_with_self" { default = [] } -variable "ingress_with_cidr_blocks" { - description = "List of ingress rules to create where 'cidr_blocks' is used" +variable "ingress_with_cidr_ipv4" { + description = "List of ingress rules to create where 'cidr_ipv4' is used" type = list(map(string)) default = [] } -variable "ingress_with_ipv6_cidr_blocks" { +variable "ingress_with_cidr_ipv6" { description = "List of ingress rules to create where 'ipv6_cidr_blocks' is used" type = list(map(string)) default = [] } -variable "ingress_with_source_security_group_id" { +variable "ingress_with_referenced_security_group_id" { description = "List of ingress rules to create where 'source_security_group_id' is used" type = list(map(string)) default = [] } -variable "ingress_with_prefix_list_ids" { - description = "List of ingress rules to create where 'prefix_list_ids' is used" +variable "ingress_with_prefix_list_id" { + description = "List of ingress rules to create where 'prefix_list_id' is used" type = list(map(string)) default = [] } -variable "ingress_cidr_blocks" { +variable "ingress_cidr_ipv4" { description = "List of IPv4 CIDR ranges to use on all ingress rules" type = list(string) default = [] } -variable "ingress_ipv6_cidr_blocks" { +variable "ingress_cidr_ipv6" { description = "List of IPv6 CIDR ranges to use on all ingress rules" type = list(string) default = [] @@ -113,26 +113,26 @@ variable "computed_ingress_with_self" { default = [] } -variable "computed_ingress_with_cidr_blocks" { - description = "List of computed ingress rules to create where 'cidr_blocks' is used" +variable "computed_ingress_with_cidr_ipv4" { + description = "List of computed ingress rules to create where 'cidr_ipv4' is used" type = list(map(string)) default = [] } -variable "computed_ingress_with_ipv6_cidr_blocks" { +variable "computed_ingress_with_cidr_ipv6" { description = "List of computed ingress rules to create where 'ipv6_cidr_blocks' is used" type = list(map(string)) default = [] } -variable "computed_ingress_with_source_security_group_id" { +variable "computed_ingress_with_referenced_security_group_id" { description = "List of computed ingress rules to create where 'source_security_group_id' is used" type = list(map(string)) default = [] } -variable "computed_ingress_with_prefix_list_ids" { - description = "List of computed ingress rules to create where 'prefix_list_ids' is used" +variable "computed_ingress_with_prefix_list_id" { + description = "List of computed ingress rules to create where 'prefix_list_id' is used" type = list(map(string)) default = [] } @@ -170,26 +170,26 @@ variable "number_of_computed_ingress_with_self" { default = 0 } -variable "number_of_computed_ingress_with_cidr_blocks" { - description = "Number of computed ingress rules to create where 'cidr_blocks' is used" +variable "number_of_computed_ingress_with_cidr_ipv4" { + description = "Number of computed ingress rules to create where 'cidr_ipv4' is used" type = number default = 0 } -variable "number_of_computed_ingress_with_ipv6_cidr_blocks" { +variable "number_of_computed_ingress_with_cidr_ipv6" { description = "Number of computed ingress rules to create where 'ipv6_cidr_blocks' is used" type = number default = 0 } -variable "number_of_computed_ingress_with_source_security_group_id" { +variable "number_of_computed_ingress_with_referenced_security_group_id" { description = "Number of computed ingress rules to create where 'source_security_group_id' is used" type = number default = 0 } -variable "number_of_computed_ingress_with_prefix_list_ids" { - description = "Number of computed ingress rules to create where 'prefix_list_ids' is used" +variable "number_of_computed_ingress_with_prefix_list_id" { + description = "Number of computed ingress rules to create where 'prefix_list_id' is used" type = number default = 0 } @@ -227,37 +227,37 @@ variable "egress_with_self" { default = [] } -variable "egress_with_cidr_blocks" { - description = "List of egress rules to create where 'cidr_blocks' is used" +variable "egress_with_cidr_ipv4" { + description = "List of egress rules to create where 'cidr_ipv4' is used" type = list(map(string)) default = [] } -variable "egress_with_ipv6_cidr_blocks" { +variable "egress_with_cidr_ipv6" { description = "List of egress rules to create where 'ipv6_cidr_blocks' is used" type = list(map(string)) default = [] } -variable "egress_with_source_security_group_id" { +variable "egress_with_referenced_security_group_id" { description = "List of egress rules to create where 'source_security_group_id' is used" type = list(map(string)) default = [] } -variable "egress_with_prefix_list_ids" { - description = "List of egress rules to create where 'prefix_list_ids' is used" +variable "egress_with_prefix_list_id" { + description = "List of egress rules to create where 'prefix_list_id' is used" type = list(map(string)) default = [] } -variable "egress_cidr_blocks" { +variable "egress_cidr_ipv4" { description = "List of IPv4 CIDR ranges to use on all egress rules" type = list(string) default = ["0.0.0.0/0"] } -variable "egress_ipv6_cidr_blocks" { +variable "egress_cidr_ipv6" { description = "List of IPv6 CIDR ranges to use on all egress rules" type = list(string) default = ["::/0"] @@ -284,26 +284,26 @@ variable "computed_egress_with_self" { default = [] } -variable "computed_egress_with_cidr_blocks" { - description = "List of computed egress rules to create where 'cidr_blocks' is used" +variable "computed_egress_with_cidr_ipv4" { + description = "List of computed egress rules to create where 'cidr_ipv4' is used" type = list(map(string)) default = [] } -variable "computed_egress_with_ipv6_cidr_blocks" { +variable "computed_egress_with_cidr_ipv6" { description = "List of computed egress rules to create where 'ipv6_cidr_blocks' is used" type = list(map(string)) default = [] } -variable "computed_egress_with_source_security_group_id" { +variable "computed_egress_with_referenced_security_group_id" { description = "List of computed egress rules to create where 'source_security_group_id' is used" type = list(map(string)) default = [] } -variable "computed_egress_with_prefix_list_ids" { - description = "List of computed egress rules to create where 'prefix_list_ids' is used" +variable "computed_egress_with_prefix_list_id" { + description = "List of computed egress rules to create where 'prefix_list_id' is used" type = list(map(string)) default = [] } @@ -341,26 +341,26 @@ variable "number_of_computed_egress_with_self" { default = 0 } -variable "number_of_computed_egress_with_cidr_blocks" { - description = "Number of computed egress rules to create where 'cidr_blocks' is used" +variable "number_of_computed_egress_with_cidr_ipv4" { + description = "Number of computed egress rules to create where 'cidr_ipv4' is used" type = number default = 0 } -variable "number_of_computed_egress_with_ipv6_cidr_blocks" { +variable "number_of_computed_egress_with_cidr_ipv6" { description = "Number of computed egress rules to create where 'ipv6_cidr_blocks' is used" type = number default = 0 } -variable "number_of_computed_egress_with_source_security_group_id" { +variable "number_of_computed_egress_with_referenced_security_group_id" { description = "Number of computed egress rules to create where 'source_security_group_id' is used" type = number default = 0 } -variable "number_of_computed_egress_with_prefix_list_ids" { - description = "Number of computed egress rules to create where 'prefix_list_ids' is used" +variable "number_of_computed_egress_with_prefix_list_id" { + description = "Number of computed egress rules to create where 'prefix_list_id' is used" type = number default = 0 } diff --git a/modules/kibana/README.md b/modules/kibana/README.md index 6a2b68dc..e8d16bd8 100644 --- a/modules/kibana/README.md +++ b/modules/kibana/README.md @@ -55,59 +55,59 @@ No resources. | [computed\_egress\_ipv6\_cidr\_blocks](#input\_computed\_egress\_ipv6\_cidr\_blocks) | List of IPv6 CIDR ranges to use on all computed egress rules | `list(string)` |
[
"::/0"
]
| no | | [computed\_egress\_prefix\_list\_ids](#input\_computed\_egress\_prefix\_list\_ids) | List of prefix list IDs (for allowing access to VPC endpoints) to use on all computed egress rules | `list(string)` | `[]` | no | | [computed\_egress\_rules](#input\_computed\_egress\_rules) | List of computed egress rules to create by name | `list(string)` | `[]` | no | -| [computed\_egress\_with\_cidr\_blocks](#input\_computed\_egress\_with\_cidr\_blocks) | List of computed egress rules to create where 'cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [computed\_egress\_with\_ipv6\_cidr\_blocks](#input\_computed\_egress\_with\_ipv6\_cidr\_blocks) | List of computed egress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [computed\_egress\_with\_prefix\_list\_ids](#input\_computed\_egress\_with\_prefix\_list\_ids) | List of computed egress rules to create where 'prefix\_list\_ids' is used | `list(map(string))` | `[]` | no | +| [computed\_egress\_with\_cidr\_ipv4](#input\_computed\_egress\_with\_cidr\_ipv4) | List of computed egress rules to create where 'cidr\_ipv4' is used | `list(map(string))` | `[]` | no | +| [computed\_egress\_with\_cidr\_ipv6](#input\_computed\_egress\_with\_cidr\_ipv6) | List of computed egress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | +| [computed\_egress\_with\_prefix\_list\_id](#input\_computed\_egress\_with\_prefix\_list\_id) | List of computed egress rules to create where 'prefix\_list\_id' is used | `list(map(string))` | `[]` | no | +| [computed\_egress\_with\_referenced\_security\_group\_id](#input\_computed\_egress\_with\_referenced\_security\_group\_id) | List of computed egress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [computed\_egress\_with\_self](#input\_computed\_egress\_with\_self) | List of computed egress rules to create where 'self' is defined | `list(map(string))` | `[]` | no | -| [computed\_egress\_with\_source\_security\_group\_id](#input\_computed\_egress\_with\_source\_security\_group\_id) | List of computed egress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [computed\_ingress\_cidr\_blocks](#input\_computed\_ingress\_cidr\_blocks) | List of IPv4 CIDR ranges to use on all computed ingress rules | `list(string)` | `[]` | no | | [computed\_ingress\_ipv6\_cidr\_blocks](#input\_computed\_ingress\_ipv6\_cidr\_blocks) | List of IPv6 CIDR ranges to use on all computed ingress rules | `list(string)` | `[]` | no | | [computed\_ingress\_prefix\_list\_ids](#input\_computed\_ingress\_prefix\_list\_ids) | List of prefix list IDs (for allowing access to VPC endpoints) to use on all computed ingress rules | `list(string)` | `[]` | no | | [computed\_ingress\_rules](#input\_computed\_ingress\_rules) | List of computed ingress rules to create by name | `list(string)` | `[]` | no | -| [computed\_ingress\_with\_cidr\_blocks](#input\_computed\_ingress\_with\_cidr\_blocks) | List of computed ingress rules to create where 'cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [computed\_ingress\_with\_ipv6\_cidr\_blocks](#input\_computed\_ingress\_with\_ipv6\_cidr\_blocks) | List of computed ingress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [computed\_ingress\_with\_prefix\_list\_ids](#input\_computed\_ingress\_with\_prefix\_list\_ids) | List of computed ingress rules to create where 'prefix\_list\_ids' is used | `list(map(string))` | `[]` | no | +| [computed\_ingress\_with\_cidr\_ipv4](#input\_computed\_ingress\_with\_cidr\_ipv4) | List of computed ingress rules to create where 'cidr\_ipv4' is used | `list(map(string))` | `[]` | no | +| [computed\_ingress\_with\_cidr\_ipv6](#input\_computed\_ingress\_with\_cidr\_ipv6) | List of computed ingress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | +| [computed\_ingress\_with\_prefix\_list\_id](#input\_computed\_ingress\_with\_prefix\_list\_id) | List of computed ingress rules to create where 'prefix\_list\_id' is used | `list(map(string))` | `[]` | no | +| [computed\_ingress\_with\_referenced\_security\_group\_id](#input\_computed\_ingress\_with\_referenced\_security\_group\_id) | List of computed ingress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [computed\_ingress\_with\_self](#input\_computed\_ingress\_with\_self) | List of computed ingress rules to create where 'self' is defined | `list(map(string))` | `[]` | no | -| [computed\_ingress\_with\_source\_security\_group\_id](#input\_computed\_ingress\_with\_source\_security\_group\_id) | List of computed ingress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [create](#input\_create) | Whether to create security group and all rules | `bool` | `true` | no | | [description](#input\_description) | Description of security group | `string` | `"Security Group managed by Terraform"` | no | -| [egress\_cidr\_blocks](#input\_egress\_cidr\_blocks) | List of IPv4 CIDR ranges to use on all egress rules | `list(string)` |
[
"0.0.0.0/0"
]
| no | -| [egress\_ipv6\_cidr\_blocks](#input\_egress\_ipv6\_cidr\_blocks) | List of IPv6 CIDR ranges to use on all egress rules | `list(string)` |
[
"::/0"
]
| no | +| [egress\_cidr\_ipv4](#input\_egress\_cidr\_ipv4) | List of IPv4 CIDR ranges to use on all egress rules | `list(string)` |
[
"0.0.0.0/0"
]
| no | +| [egress\_cidr\_ipv6](#input\_egress\_cidr\_ipv6) | List of IPv6 CIDR ranges to use on all egress rules | `list(string)` |
[
"::/0"
]
| no | | [egress\_prefix\_list\_ids](#input\_egress\_prefix\_list\_ids) | List of prefix list IDs (for allowing access to VPC endpoints) to use on all egress rules | `list(string)` | `[]` | no | | [egress\_rules](#input\_egress\_rules) | List of egress rules to create by name | `list(string)` | `[]` | no | -| [egress\_with\_cidr\_blocks](#input\_egress\_with\_cidr\_blocks) | List of egress rules to create where 'cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [egress\_with\_ipv6\_cidr\_blocks](#input\_egress\_with\_ipv6\_cidr\_blocks) | List of egress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [egress\_with\_prefix\_list\_ids](#input\_egress\_with\_prefix\_list\_ids) | List of egress rules to create where 'prefix\_list\_ids' is used | `list(map(string))` | `[]` | no | +| [egress\_with\_cidr\_ipv4](#input\_egress\_with\_cidr\_ipv4) | List of egress rules to create where 'cidr\_ipv4' is used | `list(map(string))` | `[]` | no | +| [egress\_with\_cidr\_ipv6](#input\_egress\_with\_cidr\_ipv6) | List of egress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | +| [egress\_with\_prefix\_list\_id](#input\_egress\_with\_prefix\_list\_id) | List of egress rules to create where 'prefix\_list\_id' is used | `list(map(string))` | `[]` | no | +| [egress\_with\_referenced\_security\_group\_id](#input\_egress\_with\_referenced\_security\_group\_id) | List of egress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [egress\_with\_self](#input\_egress\_with\_self) | List of egress rules to create where 'self' is defined | `list(map(string))` | `[]` | no | -| [egress\_with\_source\_security\_group\_id](#input\_egress\_with\_source\_security\_group\_id) | List of egress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | -| [ingress\_cidr\_blocks](#input\_ingress\_cidr\_blocks) | List of IPv4 CIDR ranges to use on all ingress rules | `list(string)` | `[]` | no | -| [ingress\_ipv6\_cidr\_blocks](#input\_ingress\_ipv6\_cidr\_blocks) | List of IPv6 CIDR ranges to use on all ingress rules | `list(string)` | `[]` | no | +| [ingress\_cidr\_ipv4](#input\_ingress\_cidr\_ipv4) | List of IPv4 CIDR ranges to use on all ingress rules | `list(string)` | `[]` | no | +| [ingress\_cidr\_ipv6](#input\_ingress\_cidr\_ipv6) | List of IPv6 CIDR ranges to use on all ingress rules | `list(string)` | `[]` | no | | [ingress\_prefix\_list\_ids](#input\_ingress\_prefix\_list\_ids) | List of prefix list IDs (for allowing access to VPC endpoints) to use on all ingress rules | `list(string)` | `[]` | no | | [ingress\_rules](#input\_ingress\_rules) | List of ingress rules to create by name | `list(string)` | `[]` | no | -| [ingress\_with\_cidr\_blocks](#input\_ingress\_with\_cidr\_blocks) | List of ingress rules to create where 'cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [ingress\_with\_ipv6\_cidr\_blocks](#input\_ingress\_with\_ipv6\_cidr\_blocks) | List of ingress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [ingress\_with\_prefix\_list\_ids](#input\_ingress\_with\_prefix\_list\_ids) | List of ingress rules to create where 'prefix\_list\_ids' is used | `list(map(string))` | `[]` | no | +| [ingress\_with\_cidr\_ipv4](#input\_ingress\_with\_cidr\_ipv4) | List of ingress rules to create where 'cidr\_ipv4' is used | `list(map(string))` | `[]` | no | +| [ingress\_with\_cidr\_ipv6](#input\_ingress\_with\_cidr\_ipv6) | List of ingress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | +| [ingress\_with\_prefix\_list\_id](#input\_ingress\_with\_prefix\_list\_id) | List of ingress rules to create where 'prefix\_list\_id' is used | `list(map(string))` | `[]` | no | +| [ingress\_with\_referenced\_security\_group\_id](#input\_ingress\_with\_referenced\_security\_group\_id) | List of ingress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [ingress\_with\_self](#input\_ingress\_with\_self) | List of ingress rules to create where 'self' is defined | `list(map(string))` | `[]` | no | -| [ingress\_with\_source\_security\_group\_id](#input\_ingress\_with\_source\_security\_group\_id) | List of ingress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [name](#input\_name) | Name of security group | `string` | n/a | yes | | [number\_of\_computed\_egress\_cidr\_blocks](#input\_number\_of\_computed\_egress\_cidr\_blocks) | Number of IPv4 CIDR ranges to use on all computed egress rules | `number` | `0` | no | | [number\_of\_computed\_egress\_ipv6\_cidr\_blocks](#input\_number\_of\_computed\_egress\_ipv6\_cidr\_blocks) | Number of IPv6 CIDR ranges to use on all computed egress rules | `number` | `0` | no | | [number\_of\_computed\_egress\_prefix\_list\_ids](#input\_number\_of\_computed\_egress\_prefix\_list\_ids) | Number of prefix list IDs (for allowing access to VPC endpoints) to use on all computed egress rules | `number` | `0` | no | | [number\_of\_computed\_egress\_rules](#input\_number\_of\_computed\_egress\_rules) | Number of computed egress rules to create by name | `number` | `0` | no | -| [number\_of\_computed\_egress\_with\_cidr\_blocks](#input\_number\_of\_computed\_egress\_with\_cidr\_blocks) | Number of computed egress rules to create where 'cidr\_blocks' is used | `number` | `0` | no | -| [number\_of\_computed\_egress\_with\_ipv6\_cidr\_blocks](#input\_number\_of\_computed\_egress\_with\_ipv6\_cidr\_blocks) | Number of computed egress rules to create where 'ipv6\_cidr\_blocks' is used | `number` | `0` | no | -| [number\_of\_computed\_egress\_with\_prefix\_list\_ids](#input\_number\_of\_computed\_egress\_with\_prefix\_list\_ids) | Number of computed egress rules to create where 'prefix\_list\_ids' is used | `number` | `0` | no | +| [number\_of\_computed\_egress\_with\_cidr\_ipv4](#input\_number\_of\_computed\_egress\_with\_cidr\_ipv4) | Number of computed egress rules to create where 'cidr\_ipv4' is used | `number` | `0` | no | +| [number\_of\_computed\_egress\_with\_cidr\_ipv6](#input\_number\_of\_computed\_egress\_with\_cidr\_ipv6) | Number of computed egress rules to create where 'ipv6\_cidr\_blocks' is used | `number` | `0` | no | +| [number\_of\_computed\_egress\_with\_prefix\_list\_id](#input\_number\_of\_computed\_egress\_with\_prefix\_list\_id) | Number of computed egress rules to create where 'prefix\_list\_id' is used | `number` | `0` | no | +| [number\_of\_computed\_egress\_with\_referenced\_security\_group\_id](#input\_number\_of\_computed\_egress\_with\_referenced\_security\_group\_id) | Number of computed egress rules to create where 'source\_security\_group\_id' is used | `number` | `0` | no | | [number\_of\_computed\_egress\_with\_self](#input\_number\_of\_computed\_egress\_with\_self) | Number of computed egress rules to create where 'self' is defined | `number` | `0` | no | -| [number\_of\_computed\_egress\_with\_source\_security\_group\_id](#input\_number\_of\_computed\_egress\_with\_source\_security\_group\_id) | Number of computed egress rules to create where 'source\_security\_group\_id' is used | `number` | `0` | no | | [number\_of\_computed\_ingress\_cidr\_blocks](#input\_number\_of\_computed\_ingress\_cidr\_blocks) | Number of IPv4 CIDR ranges to use on all computed ingress rules | `number` | `0` | no | | [number\_of\_computed\_ingress\_ipv6\_cidr\_blocks](#input\_number\_of\_computed\_ingress\_ipv6\_cidr\_blocks) | Number of IPv6 CIDR ranges to use on all computed ingress rules | `number` | `0` | no | | [number\_of\_computed\_ingress\_prefix\_list\_ids](#input\_number\_of\_computed\_ingress\_prefix\_list\_ids) | Number of prefix list IDs (for allowing access to VPC endpoints) to use on all computed ingress rules | `number` | `0` | no | | [number\_of\_computed\_ingress\_rules](#input\_number\_of\_computed\_ingress\_rules) | Number of computed ingress rules to create by name | `number` | `0` | no | -| [number\_of\_computed\_ingress\_with\_cidr\_blocks](#input\_number\_of\_computed\_ingress\_with\_cidr\_blocks) | Number of computed ingress rules to create where 'cidr\_blocks' is used | `number` | `0` | no | -| [number\_of\_computed\_ingress\_with\_ipv6\_cidr\_blocks](#input\_number\_of\_computed\_ingress\_with\_ipv6\_cidr\_blocks) | Number of computed ingress rules to create where 'ipv6\_cidr\_blocks' is used | `number` | `0` | no | -| [number\_of\_computed\_ingress\_with\_prefix\_list\_ids](#input\_number\_of\_computed\_ingress\_with\_prefix\_list\_ids) | Number of computed ingress rules to create where 'prefix\_list\_ids' is used | `number` | `0` | no | +| [number\_of\_computed\_ingress\_with\_cidr\_ipv4](#input\_number\_of\_computed\_ingress\_with\_cidr\_ipv4) | Number of computed ingress rules to create where 'cidr\_ipv4' is used | `number` | `0` | no | +| [number\_of\_computed\_ingress\_with\_cidr\_ipv6](#input\_number\_of\_computed\_ingress\_with\_cidr\_ipv6) | Number of computed ingress rules to create where 'ipv6\_cidr\_blocks' is used | `number` | `0` | no | +| [number\_of\_computed\_ingress\_with\_prefix\_list\_id](#input\_number\_of\_computed\_ingress\_with\_prefix\_list\_id) | Number of computed ingress rules to create where 'prefix\_list\_id' is used | `number` | `0` | no | +| [number\_of\_computed\_ingress\_with\_referenced\_security\_group\_id](#input\_number\_of\_computed\_ingress\_with\_referenced\_security\_group\_id) | Number of computed ingress rules to create where 'source\_security\_group\_id' is used | `number` | `0` | no | | [number\_of\_computed\_ingress\_with\_self](#input\_number\_of\_computed\_ingress\_with\_self) | Number of computed ingress rules to create where 'self' is defined | `number` | `0` | no | -| [number\_of\_computed\_ingress\_with\_source\_security\_group\_id](#input\_number\_of\_computed\_ingress\_with\_source\_security\_group\_id) | Number of computed ingress rules to create where 'source\_security\_group\_id' is used | `number` | `0` | no | | [revoke\_rules\_on\_delete](#input\_revoke\_rules\_on\_delete) | Instruct Terraform to revoke all of the Security Groups attached ingress and egress rules before deleting the rule itself. Enable for EMR. | `bool` | `false` | no | | [tags](#input\_tags) | A mapping of tags to assign to security group | `map(string)` | `{}` | no | | [use\_name\_prefix](#input\_use\_name\_prefix) | Whether to use name\_prefix or fixed name. Should be true to able to update security group name after initial creation | `bool` | `true` | no | diff --git a/modules/kibana/main.tf b/modules/kibana/main.tf index 80ea0adb..d2a1bf93 100644 --- a/modules/kibana/main.tf +++ b/modules/kibana/main.tf @@ -19,20 +19,20 @@ module "sg" { ingress_with_self = concat(var.auto_ingress_with_self, var.ingress_with_self) # Open to IPv4 cidr blocks - ingress_with_cidr_blocks = var.ingress_with_cidr_blocks + ingress_with_cidr_ipv4 = var.ingress_with_cidr_ipv4 # Open to IPv6 cidr blocks - ingress_with_ipv6_cidr_blocks = var.ingress_with_ipv6_cidr_blocks + ingress_with_cidr_ipv6 = var.ingress_with_cidr_ipv6 # Open for security group id - ingress_with_source_security_group_id = var.ingress_with_source_security_group_id + ingress_with_referenced_security_group_id = var.ingress_with_referenced_security_group_id # Open for prefix list id - ingress_with_prefix_list_ids = var.ingress_with_prefix_list_ids + ingress_with_prefix_list_id = var.ingress_with_prefix_list_id # Default ingress CIDR blocks - ingress_cidr_blocks = var.ingress_cidr_blocks - ingress_ipv6_cidr_blocks = var.ingress_ipv6_cidr_blocks + ingress_cidr_ipv4 = var.ingress_cidr_ipv4 + ingress_cidr_ipv6 = var.ingress_cidr_ipv6 # Default prefix list ids ingress_prefix_list_ids = var.ingress_prefix_list_ids @@ -47,26 +47,26 @@ module "sg" { computed_ingress_with_self = concat(var.auto_computed_ingress_with_self, var.computed_ingress_with_self) # Open to IPv4 cidr blocks - computed_ingress_with_cidr_blocks = var.computed_ingress_with_cidr_blocks + computed_ingress_with_cidr_ipv4 = var.computed_ingress_with_cidr_ipv4 # Open to IPv6 cidr blocks - computed_ingress_with_ipv6_cidr_blocks = var.computed_ingress_with_ipv6_cidr_blocks + computed_ingress_with_cidr_ipv6 = var.computed_ingress_with_cidr_ipv6 # Open for security group id - computed_ingress_with_source_security_group_id = var.computed_ingress_with_source_security_group_id + computed_ingress_with_referenced_security_group_id = var.computed_ingress_with_referenced_security_group_id # Open for prefix list id - computed_ingress_with_prefix_list_ids = var.computed_ingress_with_prefix_list_ids + computed_ingress_with_prefix_list_id = var.computed_ingress_with_prefix_list_id ############################# # Number of computed ingress ############################# - number_of_computed_ingress_rules = var.auto_number_of_computed_ingress_rules + var.number_of_computed_ingress_rules - number_of_computed_ingress_with_self = var.auto_number_of_computed_ingress_with_self + var.number_of_computed_ingress_with_self - number_of_computed_ingress_with_cidr_blocks = var.number_of_computed_ingress_with_cidr_blocks - number_of_computed_ingress_with_ipv6_cidr_blocks = var.number_of_computed_ingress_with_ipv6_cidr_blocks - number_of_computed_ingress_with_source_security_group_id = var.number_of_computed_ingress_with_source_security_group_id - number_of_computed_ingress_with_prefix_list_ids = var.number_of_computed_ingress_with_prefix_list_ids + number_of_computed_ingress_rules = var.auto_number_of_computed_ingress_rules + var.number_of_computed_ingress_rules + number_of_computed_ingress_with_self = var.auto_number_of_computed_ingress_with_self + var.number_of_computed_ingress_with_self + number_of_computed_ingress_with_cidr_ipv4 = var.number_of_computed_ingress_with_cidr_ipv4 + number_of_computed_ingress_with_cidr_ipv6 = var.number_of_computed_ingress_with_cidr_ipv6 + number_of_computed_ingress_with_referenced_security_group_id = var.number_of_computed_ingress_with_referenced_security_group_id + number_of_computed_ingress_with_prefix_list_id = var.number_of_computed_ingress_with_prefix_list_id ######### # Egress @@ -78,20 +78,20 @@ module "sg" { egress_with_self = concat(var.auto_egress_with_self, var.egress_with_self) # Open to IPv4 cidr blocks - egress_with_cidr_blocks = var.egress_with_cidr_blocks + egress_with_cidr_ipv4 = var.egress_with_cidr_ipv4 # Open to IPv6 cidr blocks - egress_with_ipv6_cidr_blocks = var.egress_with_ipv6_cidr_blocks + egress_with_cidr_ipv6 = var.egress_with_cidr_ipv6 # Open for security group id - egress_with_source_security_group_id = var.egress_with_source_security_group_id + egress_with_referenced_security_group_id = var.egress_with_referenced_security_group_id # Open for prefix list id - egress_with_prefix_list_ids = var.egress_with_prefix_list_ids + egress_with_prefix_list_id = var.egress_with_prefix_list_id # Default egress CIDR blocks - egress_cidr_blocks = var.egress_cidr_blocks - egress_ipv6_cidr_blocks = var.egress_ipv6_cidr_blocks + egress_cidr_ipv4 = var.egress_cidr_ipv4 + egress_cidr_ipv6 = var.egress_cidr_ipv6 # Default prefix list ids egress_prefix_list_ids = var.egress_prefix_list_ids @@ -106,24 +106,24 @@ module "sg" { computed_egress_with_self = concat(var.auto_computed_egress_with_self, var.computed_egress_with_self) # Open to IPv4 cidr blocks - computed_egress_with_cidr_blocks = var.computed_egress_with_cidr_blocks + computed_egress_with_cidr_ipv4 = var.computed_egress_with_cidr_ipv4 # Open to IPv6 cidr blocks - computed_egress_with_ipv6_cidr_blocks = var.computed_egress_with_ipv6_cidr_blocks + computed_egress_with_cidr_ipv6 = var.computed_egress_with_cidr_ipv6 # Open for security group id - computed_egress_with_source_security_group_id = var.computed_egress_with_source_security_group_id + computed_egress_with_referenced_security_group_id = var.computed_egress_with_referenced_security_group_id # Open for prefix list id - computed_egress_with_prefix_list_ids = var.computed_egress_with_prefix_list_ids + computed_egress_with_prefix_list_id = var.computed_egress_with_prefix_list_id ############################# # Number of computed egress ############################# - number_of_computed_egress_rules = var.auto_number_of_computed_egress_rules + var.number_of_computed_egress_rules - number_of_computed_egress_with_self = var.auto_number_of_computed_egress_with_self + var.number_of_computed_egress_with_self - number_of_computed_egress_with_cidr_blocks = var.number_of_computed_egress_with_cidr_blocks - number_of_computed_egress_with_ipv6_cidr_blocks = var.number_of_computed_egress_with_ipv6_cidr_blocks - number_of_computed_egress_with_source_security_group_id = var.number_of_computed_egress_with_source_security_group_id - number_of_computed_egress_with_prefix_list_ids = var.number_of_computed_egress_with_prefix_list_ids + number_of_computed_egress_rules = var.auto_number_of_computed_egress_rules + var.number_of_computed_egress_rules + number_of_computed_egress_with_self = var.auto_number_of_computed_egress_with_self + var.number_of_computed_egress_with_self + number_of_computed_egress_with_cidr_ipv4 = var.number_of_computed_egress_with_cidr_ipv4 + number_of_computed_egress_with_cidr_ipv6 = var.number_of_computed_egress_with_cidr_ipv6 + number_of_computed_egress_with_referenced_security_group_id = var.number_of_computed_egress_with_referenced_security_group_id + number_of_computed_egress_with_prefix_list_id = var.number_of_computed_egress_with_prefix_list_id } diff --git a/modules/kibana/variables.tf b/modules/kibana/variables.tf index 60c8c27b..6590c9e3 100644 --- a/modules/kibana/variables.tf +++ b/modules/kibana/variables.tf @@ -56,37 +56,37 @@ variable "ingress_with_self" { default = [] } -variable "ingress_with_cidr_blocks" { - description = "List of ingress rules to create where 'cidr_blocks' is used" +variable "ingress_with_cidr_ipv4" { + description = "List of ingress rules to create where 'cidr_ipv4' is used" type = list(map(string)) default = [] } -variable "ingress_with_ipv6_cidr_blocks" { +variable "ingress_with_cidr_ipv6" { description = "List of ingress rules to create where 'ipv6_cidr_blocks' is used" type = list(map(string)) default = [] } -variable "ingress_with_source_security_group_id" { +variable "ingress_with_referenced_security_group_id" { description = "List of ingress rules to create where 'source_security_group_id' is used" type = list(map(string)) default = [] } -variable "ingress_with_prefix_list_ids" { - description = "List of ingress rules to create where 'prefix_list_ids' is used" +variable "ingress_with_prefix_list_id" { + description = "List of ingress rules to create where 'prefix_list_id' is used" type = list(map(string)) default = [] } -variable "ingress_cidr_blocks" { +variable "ingress_cidr_ipv4" { description = "List of IPv4 CIDR ranges to use on all ingress rules" type = list(string) default = [] } -variable "ingress_ipv6_cidr_blocks" { +variable "ingress_cidr_ipv6" { description = "List of IPv6 CIDR ranges to use on all ingress rules" type = list(string) default = [] @@ -113,26 +113,26 @@ variable "computed_ingress_with_self" { default = [] } -variable "computed_ingress_with_cidr_blocks" { - description = "List of computed ingress rules to create where 'cidr_blocks' is used" +variable "computed_ingress_with_cidr_ipv4" { + description = "List of computed ingress rules to create where 'cidr_ipv4' is used" type = list(map(string)) default = [] } -variable "computed_ingress_with_ipv6_cidr_blocks" { +variable "computed_ingress_with_cidr_ipv6" { description = "List of computed ingress rules to create where 'ipv6_cidr_blocks' is used" type = list(map(string)) default = [] } -variable "computed_ingress_with_source_security_group_id" { +variable "computed_ingress_with_referenced_security_group_id" { description = "List of computed ingress rules to create where 'source_security_group_id' is used" type = list(map(string)) default = [] } -variable "computed_ingress_with_prefix_list_ids" { - description = "List of computed ingress rules to create where 'prefix_list_ids' is used" +variable "computed_ingress_with_prefix_list_id" { + description = "List of computed ingress rules to create where 'prefix_list_id' is used" type = list(map(string)) default = [] } @@ -170,26 +170,26 @@ variable "number_of_computed_ingress_with_self" { default = 0 } -variable "number_of_computed_ingress_with_cidr_blocks" { - description = "Number of computed ingress rules to create where 'cidr_blocks' is used" +variable "number_of_computed_ingress_with_cidr_ipv4" { + description = "Number of computed ingress rules to create where 'cidr_ipv4' is used" type = number default = 0 } -variable "number_of_computed_ingress_with_ipv6_cidr_blocks" { +variable "number_of_computed_ingress_with_cidr_ipv6" { description = "Number of computed ingress rules to create where 'ipv6_cidr_blocks' is used" type = number default = 0 } -variable "number_of_computed_ingress_with_source_security_group_id" { +variable "number_of_computed_ingress_with_referenced_security_group_id" { description = "Number of computed ingress rules to create where 'source_security_group_id' is used" type = number default = 0 } -variable "number_of_computed_ingress_with_prefix_list_ids" { - description = "Number of computed ingress rules to create where 'prefix_list_ids' is used" +variable "number_of_computed_ingress_with_prefix_list_id" { + description = "Number of computed ingress rules to create where 'prefix_list_id' is used" type = number default = 0 } @@ -227,37 +227,37 @@ variable "egress_with_self" { default = [] } -variable "egress_with_cidr_blocks" { - description = "List of egress rules to create where 'cidr_blocks' is used" +variable "egress_with_cidr_ipv4" { + description = "List of egress rules to create where 'cidr_ipv4' is used" type = list(map(string)) default = [] } -variable "egress_with_ipv6_cidr_blocks" { +variable "egress_with_cidr_ipv6" { description = "List of egress rules to create where 'ipv6_cidr_blocks' is used" type = list(map(string)) default = [] } -variable "egress_with_source_security_group_id" { +variable "egress_with_referenced_security_group_id" { description = "List of egress rules to create where 'source_security_group_id' is used" type = list(map(string)) default = [] } -variable "egress_with_prefix_list_ids" { - description = "List of egress rules to create where 'prefix_list_ids' is used" +variable "egress_with_prefix_list_id" { + description = "List of egress rules to create where 'prefix_list_id' is used" type = list(map(string)) default = [] } -variable "egress_cidr_blocks" { +variable "egress_cidr_ipv4" { description = "List of IPv4 CIDR ranges to use on all egress rules" type = list(string) default = ["0.0.0.0/0"] } -variable "egress_ipv6_cidr_blocks" { +variable "egress_cidr_ipv6" { description = "List of IPv6 CIDR ranges to use on all egress rules" type = list(string) default = ["::/0"] @@ -284,26 +284,26 @@ variable "computed_egress_with_self" { default = [] } -variable "computed_egress_with_cidr_blocks" { - description = "List of computed egress rules to create where 'cidr_blocks' is used" +variable "computed_egress_with_cidr_ipv4" { + description = "List of computed egress rules to create where 'cidr_ipv4' is used" type = list(map(string)) default = [] } -variable "computed_egress_with_ipv6_cidr_blocks" { +variable "computed_egress_with_cidr_ipv6" { description = "List of computed egress rules to create where 'ipv6_cidr_blocks' is used" type = list(map(string)) default = [] } -variable "computed_egress_with_source_security_group_id" { +variable "computed_egress_with_referenced_security_group_id" { description = "List of computed egress rules to create where 'source_security_group_id' is used" type = list(map(string)) default = [] } -variable "computed_egress_with_prefix_list_ids" { - description = "List of computed egress rules to create where 'prefix_list_ids' is used" +variable "computed_egress_with_prefix_list_id" { + description = "List of computed egress rules to create where 'prefix_list_id' is used" type = list(map(string)) default = [] } @@ -341,26 +341,26 @@ variable "number_of_computed_egress_with_self" { default = 0 } -variable "number_of_computed_egress_with_cidr_blocks" { - description = "Number of computed egress rules to create where 'cidr_blocks' is used" +variable "number_of_computed_egress_with_cidr_ipv4" { + description = "Number of computed egress rules to create where 'cidr_ipv4' is used" type = number default = 0 } -variable "number_of_computed_egress_with_ipv6_cidr_blocks" { +variable "number_of_computed_egress_with_cidr_ipv6" { description = "Number of computed egress rules to create where 'ipv6_cidr_blocks' is used" type = number default = 0 } -variable "number_of_computed_egress_with_source_security_group_id" { +variable "number_of_computed_egress_with_referenced_security_group_id" { description = "Number of computed egress rules to create where 'source_security_group_id' is used" type = number default = 0 } -variable "number_of_computed_egress_with_prefix_list_ids" { - description = "Number of computed egress rules to create where 'prefix_list_ids' is used" +variable "number_of_computed_egress_with_prefix_list_id" { + description = "Number of computed egress rules to create where 'prefix_list_id' is used" type = number default = 0 } diff --git a/modules/kubernetes-api/README.md b/modules/kubernetes-api/README.md index 25f9d934..32162cf9 100644 --- a/modules/kubernetes-api/README.md +++ b/modules/kubernetes-api/README.md @@ -55,59 +55,59 @@ No resources. | [computed\_egress\_ipv6\_cidr\_blocks](#input\_computed\_egress\_ipv6\_cidr\_blocks) | List of IPv6 CIDR ranges to use on all computed egress rules | `list(string)` |
[
"::/0"
]
| no | | [computed\_egress\_prefix\_list\_ids](#input\_computed\_egress\_prefix\_list\_ids) | List of prefix list IDs (for allowing access to VPC endpoints) to use on all computed egress rules | `list(string)` | `[]` | no | | [computed\_egress\_rules](#input\_computed\_egress\_rules) | List of computed egress rules to create by name | `list(string)` | `[]` | no | -| [computed\_egress\_with\_cidr\_blocks](#input\_computed\_egress\_with\_cidr\_blocks) | List of computed egress rules to create where 'cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [computed\_egress\_with\_ipv6\_cidr\_blocks](#input\_computed\_egress\_with\_ipv6\_cidr\_blocks) | List of computed egress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [computed\_egress\_with\_prefix\_list\_ids](#input\_computed\_egress\_with\_prefix\_list\_ids) | List of computed egress rules to create where 'prefix\_list\_ids' is used | `list(map(string))` | `[]` | no | +| [computed\_egress\_with\_cidr\_ipv4](#input\_computed\_egress\_with\_cidr\_ipv4) | List of computed egress rules to create where 'cidr\_ipv4' is used | `list(map(string))` | `[]` | no | +| [computed\_egress\_with\_cidr\_ipv6](#input\_computed\_egress\_with\_cidr\_ipv6) | List of computed egress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | +| [computed\_egress\_with\_prefix\_list\_id](#input\_computed\_egress\_with\_prefix\_list\_id) | List of computed egress rules to create where 'prefix\_list\_id' is used | `list(map(string))` | `[]` | no | +| [computed\_egress\_with\_referenced\_security\_group\_id](#input\_computed\_egress\_with\_referenced\_security\_group\_id) | List of computed egress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [computed\_egress\_with\_self](#input\_computed\_egress\_with\_self) | List of computed egress rules to create where 'self' is defined | `list(map(string))` | `[]` | no | -| [computed\_egress\_with\_source\_security\_group\_id](#input\_computed\_egress\_with\_source\_security\_group\_id) | List of computed egress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [computed\_ingress\_cidr\_blocks](#input\_computed\_ingress\_cidr\_blocks) | List of IPv4 CIDR ranges to use on all computed ingress rules | `list(string)` | `[]` | no | | [computed\_ingress\_ipv6\_cidr\_blocks](#input\_computed\_ingress\_ipv6\_cidr\_blocks) | List of IPv6 CIDR ranges to use on all computed ingress rules | `list(string)` | `[]` | no | | [computed\_ingress\_prefix\_list\_ids](#input\_computed\_ingress\_prefix\_list\_ids) | List of prefix list IDs (for allowing access to VPC endpoints) to use on all computed ingress rules | `list(string)` | `[]` | no | | [computed\_ingress\_rules](#input\_computed\_ingress\_rules) | List of computed ingress rules to create by name | `list(string)` | `[]` | no | -| [computed\_ingress\_with\_cidr\_blocks](#input\_computed\_ingress\_with\_cidr\_blocks) | List of computed ingress rules to create where 'cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [computed\_ingress\_with\_ipv6\_cidr\_blocks](#input\_computed\_ingress\_with\_ipv6\_cidr\_blocks) | List of computed ingress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [computed\_ingress\_with\_prefix\_list\_ids](#input\_computed\_ingress\_with\_prefix\_list\_ids) | List of computed ingress rules to create where 'prefix\_list\_ids' is used | `list(map(string))` | `[]` | no | +| [computed\_ingress\_with\_cidr\_ipv4](#input\_computed\_ingress\_with\_cidr\_ipv4) | List of computed ingress rules to create where 'cidr\_ipv4' is used | `list(map(string))` | `[]` | no | +| [computed\_ingress\_with\_cidr\_ipv6](#input\_computed\_ingress\_with\_cidr\_ipv6) | List of computed ingress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | +| [computed\_ingress\_with\_prefix\_list\_id](#input\_computed\_ingress\_with\_prefix\_list\_id) | List of computed ingress rules to create where 'prefix\_list\_id' is used | `list(map(string))` | `[]` | no | +| [computed\_ingress\_with\_referenced\_security\_group\_id](#input\_computed\_ingress\_with\_referenced\_security\_group\_id) | List of computed ingress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [computed\_ingress\_with\_self](#input\_computed\_ingress\_with\_self) | List of computed ingress rules to create where 'self' is defined | `list(map(string))` | `[]` | no | -| [computed\_ingress\_with\_source\_security\_group\_id](#input\_computed\_ingress\_with\_source\_security\_group\_id) | List of computed ingress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [create](#input\_create) | Whether to create security group and all rules | `bool` | `true` | no | | [description](#input\_description) | Description of security group | `string` | `"Security Group managed by Terraform"` | no | -| [egress\_cidr\_blocks](#input\_egress\_cidr\_blocks) | List of IPv4 CIDR ranges to use on all egress rules | `list(string)` |
[
"0.0.0.0/0"
]
| no | -| [egress\_ipv6\_cidr\_blocks](#input\_egress\_ipv6\_cidr\_blocks) | List of IPv6 CIDR ranges to use on all egress rules | `list(string)` |
[
"::/0"
]
| no | +| [egress\_cidr\_ipv4](#input\_egress\_cidr\_ipv4) | List of IPv4 CIDR ranges to use on all egress rules | `list(string)` |
[
"0.0.0.0/0"
]
| no | +| [egress\_cidr\_ipv6](#input\_egress\_cidr\_ipv6) | List of IPv6 CIDR ranges to use on all egress rules | `list(string)` |
[
"::/0"
]
| no | | [egress\_prefix\_list\_ids](#input\_egress\_prefix\_list\_ids) | List of prefix list IDs (for allowing access to VPC endpoints) to use on all egress rules | `list(string)` | `[]` | no | | [egress\_rules](#input\_egress\_rules) | List of egress rules to create by name | `list(string)` | `[]` | no | -| [egress\_with\_cidr\_blocks](#input\_egress\_with\_cidr\_blocks) | List of egress rules to create where 'cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [egress\_with\_ipv6\_cidr\_blocks](#input\_egress\_with\_ipv6\_cidr\_blocks) | List of egress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [egress\_with\_prefix\_list\_ids](#input\_egress\_with\_prefix\_list\_ids) | List of egress rules to create where 'prefix\_list\_ids' is used | `list(map(string))` | `[]` | no | +| [egress\_with\_cidr\_ipv4](#input\_egress\_with\_cidr\_ipv4) | List of egress rules to create where 'cidr\_ipv4' is used | `list(map(string))` | `[]` | no | +| [egress\_with\_cidr\_ipv6](#input\_egress\_with\_cidr\_ipv6) | List of egress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | +| [egress\_with\_prefix\_list\_id](#input\_egress\_with\_prefix\_list\_id) | List of egress rules to create where 'prefix\_list\_id' is used | `list(map(string))` | `[]` | no | +| [egress\_with\_referenced\_security\_group\_id](#input\_egress\_with\_referenced\_security\_group\_id) | List of egress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [egress\_with\_self](#input\_egress\_with\_self) | List of egress rules to create where 'self' is defined | `list(map(string))` | `[]` | no | -| [egress\_with\_source\_security\_group\_id](#input\_egress\_with\_source\_security\_group\_id) | List of egress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | -| [ingress\_cidr\_blocks](#input\_ingress\_cidr\_blocks) | List of IPv4 CIDR ranges to use on all ingress rules | `list(string)` | `[]` | no | -| [ingress\_ipv6\_cidr\_blocks](#input\_ingress\_ipv6\_cidr\_blocks) | List of IPv6 CIDR ranges to use on all ingress rules | `list(string)` | `[]` | no | +| [ingress\_cidr\_ipv4](#input\_ingress\_cidr\_ipv4) | List of IPv4 CIDR ranges to use on all ingress rules | `list(string)` | `[]` | no | +| [ingress\_cidr\_ipv6](#input\_ingress\_cidr\_ipv6) | List of IPv6 CIDR ranges to use on all ingress rules | `list(string)` | `[]` | no | | [ingress\_prefix\_list\_ids](#input\_ingress\_prefix\_list\_ids) | List of prefix list IDs (for allowing access to VPC endpoints) to use on all ingress rules | `list(string)` | `[]` | no | | [ingress\_rules](#input\_ingress\_rules) | List of ingress rules to create by name | `list(string)` | `[]` | no | -| [ingress\_with\_cidr\_blocks](#input\_ingress\_with\_cidr\_blocks) | List of ingress rules to create where 'cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [ingress\_with\_ipv6\_cidr\_blocks](#input\_ingress\_with\_ipv6\_cidr\_blocks) | List of ingress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [ingress\_with\_prefix\_list\_ids](#input\_ingress\_with\_prefix\_list\_ids) | List of ingress rules to create where 'prefix\_list\_ids' is used | `list(map(string))` | `[]` | no | +| [ingress\_with\_cidr\_ipv4](#input\_ingress\_with\_cidr\_ipv4) | List of ingress rules to create where 'cidr\_ipv4' is used | `list(map(string))` | `[]` | no | +| [ingress\_with\_cidr\_ipv6](#input\_ingress\_with\_cidr\_ipv6) | List of ingress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | +| [ingress\_with\_prefix\_list\_id](#input\_ingress\_with\_prefix\_list\_id) | List of ingress rules to create where 'prefix\_list\_id' is used | `list(map(string))` | `[]` | no | +| [ingress\_with\_referenced\_security\_group\_id](#input\_ingress\_with\_referenced\_security\_group\_id) | List of ingress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [ingress\_with\_self](#input\_ingress\_with\_self) | List of ingress rules to create where 'self' is defined | `list(map(string))` | `[]` | no | -| [ingress\_with\_source\_security\_group\_id](#input\_ingress\_with\_source\_security\_group\_id) | List of ingress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [name](#input\_name) | Name of security group | `string` | n/a | yes | | [number\_of\_computed\_egress\_cidr\_blocks](#input\_number\_of\_computed\_egress\_cidr\_blocks) | Number of IPv4 CIDR ranges to use on all computed egress rules | `number` | `0` | no | | [number\_of\_computed\_egress\_ipv6\_cidr\_blocks](#input\_number\_of\_computed\_egress\_ipv6\_cidr\_blocks) | Number of IPv6 CIDR ranges to use on all computed egress rules | `number` | `0` | no | | [number\_of\_computed\_egress\_prefix\_list\_ids](#input\_number\_of\_computed\_egress\_prefix\_list\_ids) | Number of prefix list IDs (for allowing access to VPC endpoints) to use on all computed egress rules | `number` | `0` | no | | [number\_of\_computed\_egress\_rules](#input\_number\_of\_computed\_egress\_rules) | Number of computed egress rules to create by name | `number` | `0` | no | -| [number\_of\_computed\_egress\_with\_cidr\_blocks](#input\_number\_of\_computed\_egress\_with\_cidr\_blocks) | Number of computed egress rules to create where 'cidr\_blocks' is used | `number` | `0` | no | -| [number\_of\_computed\_egress\_with\_ipv6\_cidr\_blocks](#input\_number\_of\_computed\_egress\_with\_ipv6\_cidr\_blocks) | Number of computed egress rules to create where 'ipv6\_cidr\_blocks' is used | `number` | `0` | no | -| [number\_of\_computed\_egress\_with\_prefix\_list\_ids](#input\_number\_of\_computed\_egress\_with\_prefix\_list\_ids) | Number of computed egress rules to create where 'prefix\_list\_ids' is used | `number` | `0` | no | +| [number\_of\_computed\_egress\_with\_cidr\_ipv4](#input\_number\_of\_computed\_egress\_with\_cidr\_ipv4) | Number of computed egress rules to create where 'cidr\_ipv4' is used | `number` | `0` | no | +| [number\_of\_computed\_egress\_with\_cidr\_ipv6](#input\_number\_of\_computed\_egress\_with\_cidr\_ipv6) | Number of computed egress rules to create where 'ipv6\_cidr\_blocks' is used | `number` | `0` | no | +| [number\_of\_computed\_egress\_with\_prefix\_list\_id](#input\_number\_of\_computed\_egress\_with\_prefix\_list\_id) | Number of computed egress rules to create where 'prefix\_list\_id' is used | `number` | `0` | no | +| [number\_of\_computed\_egress\_with\_referenced\_security\_group\_id](#input\_number\_of\_computed\_egress\_with\_referenced\_security\_group\_id) | Number of computed egress rules to create where 'source\_security\_group\_id' is used | `number` | `0` | no | | [number\_of\_computed\_egress\_with\_self](#input\_number\_of\_computed\_egress\_with\_self) | Number of computed egress rules to create where 'self' is defined | `number` | `0` | no | -| [number\_of\_computed\_egress\_with\_source\_security\_group\_id](#input\_number\_of\_computed\_egress\_with\_source\_security\_group\_id) | Number of computed egress rules to create where 'source\_security\_group\_id' is used | `number` | `0` | no | | [number\_of\_computed\_ingress\_cidr\_blocks](#input\_number\_of\_computed\_ingress\_cidr\_blocks) | Number of IPv4 CIDR ranges to use on all computed ingress rules | `number` | `0` | no | | [number\_of\_computed\_ingress\_ipv6\_cidr\_blocks](#input\_number\_of\_computed\_ingress\_ipv6\_cidr\_blocks) | Number of IPv6 CIDR ranges to use on all computed ingress rules | `number` | `0` | no | | [number\_of\_computed\_ingress\_prefix\_list\_ids](#input\_number\_of\_computed\_ingress\_prefix\_list\_ids) | Number of prefix list IDs (for allowing access to VPC endpoints) to use on all computed ingress rules | `number` | `0` | no | | [number\_of\_computed\_ingress\_rules](#input\_number\_of\_computed\_ingress\_rules) | Number of computed ingress rules to create by name | `number` | `0` | no | -| [number\_of\_computed\_ingress\_with\_cidr\_blocks](#input\_number\_of\_computed\_ingress\_with\_cidr\_blocks) | Number of computed ingress rules to create where 'cidr\_blocks' is used | `number` | `0` | no | -| [number\_of\_computed\_ingress\_with\_ipv6\_cidr\_blocks](#input\_number\_of\_computed\_ingress\_with\_ipv6\_cidr\_blocks) | Number of computed ingress rules to create where 'ipv6\_cidr\_blocks' is used | `number` | `0` | no | -| [number\_of\_computed\_ingress\_with\_prefix\_list\_ids](#input\_number\_of\_computed\_ingress\_with\_prefix\_list\_ids) | Number of computed ingress rules to create where 'prefix\_list\_ids' is used | `number` | `0` | no | +| [number\_of\_computed\_ingress\_with\_cidr\_ipv4](#input\_number\_of\_computed\_ingress\_with\_cidr\_ipv4) | Number of computed ingress rules to create where 'cidr\_ipv4' is used | `number` | `0` | no | +| [number\_of\_computed\_ingress\_with\_cidr\_ipv6](#input\_number\_of\_computed\_ingress\_with\_cidr\_ipv6) | Number of computed ingress rules to create where 'ipv6\_cidr\_blocks' is used | `number` | `0` | no | +| [number\_of\_computed\_ingress\_with\_prefix\_list\_id](#input\_number\_of\_computed\_ingress\_with\_prefix\_list\_id) | Number of computed ingress rules to create where 'prefix\_list\_id' is used | `number` | `0` | no | +| [number\_of\_computed\_ingress\_with\_referenced\_security\_group\_id](#input\_number\_of\_computed\_ingress\_with\_referenced\_security\_group\_id) | Number of computed ingress rules to create where 'source\_security\_group\_id' is used | `number` | `0` | no | | [number\_of\_computed\_ingress\_with\_self](#input\_number\_of\_computed\_ingress\_with\_self) | Number of computed ingress rules to create where 'self' is defined | `number` | `0` | no | -| [number\_of\_computed\_ingress\_with\_source\_security\_group\_id](#input\_number\_of\_computed\_ingress\_with\_source\_security\_group\_id) | Number of computed ingress rules to create where 'source\_security\_group\_id' is used | `number` | `0` | no | | [revoke\_rules\_on\_delete](#input\_revoke\_rules\_on\_delete) | Instruct Terraform to revoke all of the Security Groups attached ingress and egress rules before deleting the rule itself. Enable for EMR. | `bool` | `false` | no | | [tags](#input\_tags) | A mapping of tags to assign to security group | `map(string)` | `{}` | no | | [use\_name\_prefix](#input\_use\_name\_prefix) | Whether to use name\_prefix or fixed name. Should be true to able to update security group name after initial creation | `bool` | `true` | no | diff --git a/modules/kubernetes-api/main.tf b/modules/kubernetes-api/main.tf index 80ea0adb..d2a1bf93 100644 --- a/modules/kubernetes-api/main.tf +++ b/modules/kubernetes-api/main.tf @@ -19,20 +19,20 @@ module "sg" { ingress_with_self = concat(var.auto_ingress_with_self, var.ingress_with_self) # Open to IPv4 cidr blocks - ingress_with_cidr_blocks = var.ingress_with_cidr_blocks + ingress_with_cidr_ipv4 = var.ingress_with_cidr_ipv4 # Open to IPv6 cidr blocks - ingress_with_ipv6_cidr_blocks = var.ingress_with_ipv6_cidr_blocks + ingress_with_cidr_ipv6 = var.ingress_with_cidr_ipv6 # Open for security group id - ingress_with_source_security_group_id = var.ingress_with_source_security_group_id + ingress_with_referenced_security_group_id = var.ingress_with_referenced_security_group_id # Open for prefix list id - ingress_with_prefix_list_ids = var.ingress_with_prefix_list_ids + ingress_with_prefix_list_id = var.ingress_with_prefix_list_id # Default ingress CIDR blocks - ingress_cidr_blocks = var.ingress_cidr_blocks - ingress_ipv6_cidr_blocks = var.ingress_ipv6_cidr_blocks + ingress_cidr_ipv4 = var.ingress_cidr_ipv4 + ingress_cidr_ipv6 = var.ingress_cidr_ipv6 # Default prefix list ids ingress_prefix_list_ids = var.ingress_prefix_list_ids @@ -47,26 +47,26 @@ module "sg" { computed_ingress_with_self = concat(var.auto_computed_ingress_with_self, var.computed_ingress_with_self) # Open to IPv4 cidr blocks - computed_ingress_with_cidr_blocks = var.computed_ingress_with_cidr_blocks + computed_ingress_with_cidr_ipv4 = var.computed_ingress_with_cidr_ipv4 # Open to IPv6 cidr blocks - computed_ingress_with_ipv6_cidr_blocks = var.computed_ingress_with_ipv6_cidr_blocks + computed_ingress_with_cidr_ipv6 = var.computed_ingress_with_cidr_ipv6 # Open for security group id - computed_ingress_with_source_security_group_id = var.computed_ingress_with_source_security_group_id + computed_ingress_with_referenced_security_group_id = var.computed_ingress_with_referenced_security_group_id # Open for prefix list id - computed_ingress_with_prefix_list_ids = var.computed_ingress_with_prefix_list_ids + computed_ingress_with_prefix_list_id = var.computed_ingress_with_prefix_list_id ############################# # Number of computed ingress ############################# - number_of_computed_ingress_rules = var.auto_number_of_computed_ingress_rules + var.number_of_computed_ingress_rules - number_of_computed_ingress_with_self = var.auto_number_of_computed_ingress_with_self + var.number_of_computed_ingress_with_self - number_of_computed_ingress_with_cidr_blocks = var.number_of_computed_ingress_with_cidr_blocks - number_of_computed_ingress_with_ipv6_cidr_blocks = var.number_of_computed_ingress_with_ipv6_cidr_blocks - number_of_computed_ingress_with_source_security_group_id = var.number_of_computed_ingress_with_source_security_group_id - number_of_computed_ingress_with_prefix_list_ids = var.number_of_computed_ingress_with_prefix_list_ids + number_of_computed_ingress_rules = var.auto_number_of_computed_ingress_rules + var.number_of_computed_ingress_rules + number_of_computed_ingress_with_self = var.auto_number_of_computed_ingress_with_self + var.number_of_computed_ingress_with_self + number_of_computed_ingress_with_cidr_ipv4 = var.number_of_computed_ingress_with_cidr_ipv4 + number_of_computed_ingress_with_cidr_ipv6 = var.number_of_computed_ingress_with_cidr_ipv6 + number_of_computed_ingress_with_referenced_security_group_id = var.number_of_computed_ingress_with_referenced_security_group_id + number_of_computed_ingress_with_prefix_list_id = var.number_of_computed_ingress_with_prefix_list_id ######### # Egress @@ -78,20 +78,20 @@ module "sg" { egress_with_self = concat(var.auto_egress_with_self, var.egress_with_self) # Open to IPv4 cidr blocks - egress_with_cidr_blocks = var.egress_with_cidr_blocks + egress_with_cidr_ipv4 = var.egress_with_cidr_ipv4 # Open to IPv6 cidr blocks - egress_with_ipv6_cidr_blocks = var.egress_with_ipv6_cidr_blocks + egress_with_cidr_ipv6 = var.egress_with_cidr_ipv6 # Open for security group id - egress_with_source_security_group_id = var.egress_with_source_security_group_id + egress_with_referenced_security_group_id = var.egress_with_referenced_security_group_id # Open for prefix list id - egress_with_prefix_list_ids = var.egress_with_prefix_list_ids + egress_with_prefix_list_id = var.egress_with_prefix_list_id # Default egress CIDR blocks - egress_cidr_blocks = var.egress_cidr_blocks - egress_ipv6_cidr_blocks = var.egress_ipv6_cidr_blocks + egress_cidr_ipv4 = var.egress_cidr_ipv4 + egress_cidr_ipv6 = var.egress_cidr_ipv6 # Default prefix list ids egress_prefix_list_ids = var.egress_prefix_list_ids @@ -106,24 +106,24 @@ module "sg" { computed_egress_with_self = concat(var.auto_computed_egress_with_self, var.computed_egress_with_self) # Open to IPv4 cidr blocks - computed_egress_with_cidr_blocks = var.computed_egress_with_cidr_blocks + computed_egress_with_cidr_ipv4 = var.computed_egress_with_cidr_ipv4 # Open to IPv6 cidr blocks - computed_egress_with_ipv6_cidr_blocks = var.computed_egress_with_ipv6_cidr_blocks + computed_egress_with_cidr_ipv6 = var.computed_egress_with_cidr_ipv6 # Open for security group id - computed_egress_with_source_security_group_id = var.computed_egress_with_source_security_group_id + computed_egress_with_referenced_security_group_id = var.computed_egress_with_referenced_security_group_id # Open for prefix list id - computed_egress_with_prefix_list_ids = var.computed_egress_with_prefix_list_ids + computed_egress_with_prefix_list_id = var.computed_egress_with_prefix_list_id ############################# # Number of computed egress ############################# - number_of_computed_egress_rules = var.auto_number_of_computed_egress_rules + var.number_of_computed_egress_rules - number_of_computed_egress_with_self = var.auto_number_of_computed_egress_with_self + var.number_of_computed_egress_with_self - number_of_computed_egress_with_cidr_blocks = var.number_of_computed_egress_with_cidr_blocks - number_of_computed_egress_with_ipv6_cidr_blocks = var.number_of_computed_egress_with_ipv6_cidr_blocks - number_of_computed_egress_with_source_security_group_id = var.number_of_computed_egress_with_source_security_group_id - number_of_computed_egress_with_prefix_list_ids = var.number_of_computed_egress_with_prefix_list_ids + number_of_computed_egress_rules = var.auto_number_of_computed_egress_rules + var.number_of_computed_egress_rules + number_of_computed_egress_with_self = var.auto_number_of_computed_egress_with_self + var.number_of_computed_egress_with_self + number_of_computed_egress_with_cidr_ipv4 = var.number_of_computed_egress_with_cidr_ipv4 + number_of_computed_egress_with_cidr_ipv6 = var.number_of_computed_egress_with_cidr_ipv6 + number_of_computed_egress_with_referenced_security_group_id = var.number_of_computed_egress_with_referenced_security_group_id + number_of_computed_egress_with_prefix_list_id = var.number_of_computed_egress_with_prefix_list_id } diff --git a/modules/kubernetes-api/variables.tf b/modules/kubernetes-api/variables.tf index 60c8c27b..6590c9e3 100644 --- a/modules/kubernetes-api/variables.tf +++ b/modules/kubernetes-api/variables.tf @@ -56,37 +56,37 @@ variable "ingress_with_self" { default = [] } -variable "ingress_with_cidr_blocks" { - description = "List of ingress rules to create where 'cidr_blocks' is used" +variable "ingress_with_cidr_ipv4" { + description = "List of ingress rules to create where 'cidr_ipv4' is used" type = list(map(string)) default = [] } -variable "ingress_with_ipv6_cidr_blocks" { +variable "ingress_with_cidr_ipv6" { description = "List of ingress rules to create where 'ipv6_cidr_blocks' is used" type = list(map(string)) default = [] } -variable "ingress_with_source_security_group_id" { +variable "ingress_with_referenced_security_group_id" { description = "List of ingress rules to create where 'source_security_group_id' is used" type = list(map(string)) default = [] } -variable "ingress_with_prefix_list_ids" { - description = "List of ingress rules to create where 'prefix_list_ids' is used" +variable "ingress_with_prefix_list_id" { + description = "List of ingress rules to create where 'prefix_list_id' is used" type = list(map(string)) default = [] } -variable "ingress_cidr_blocks" { +variable "ingress_cidr_ipv4" { description = "List of IPv4 CIDR ranges to use on all ingress rules" type = list(string) default = [] } -variable "ingress_ipv6_cidr_blocks" { +variable "ingress_cidr_ipv6" { description = "List of IPv6 CIDR ranges to use on all ingress rules" type = list(string) default = [] @@ -113,26 +113,26 @@ variable "computed_ingress_with_self" { default = [] } -variable "computed_ingress_with_cidr_blocks" { - description = "List of computed ingress rules to create where 'cidr_blocks' is used" +variable "computed_ingress_with_cidr_ipv4" { + description = "List of computed ingress rules to create where 'cidr_ipv4' is used" type = list(map(string)) default = [] } -variable "computed_ingress_with_ipv6_cidr_blocks" { +variable "computed_ingress_with_cidr_ipv6" { description = "List of computed ingress rules to create where 'ipv6_cidr_blocks' is used" type = list(map(string)) default = [] } -variable "computed_ingress_with_source_security_group_id" { +variable "computed_ingress_with_referenced_security_group_id" { description = "List of computed ingress rules to create where 'source_security_group_id' is used" type = list(map(string)) default = [] } -variable "computed_ingress_with_prefix_list_ids" { - description = "List of computed ingress rules to create where 'prefix_list_ids' is used" +variable "computed_ingress_with_prefix_list_id" { + description = "List of computed ingress rules to create where 'prefix_list_id' is used" type = list(map(string)) default = [] } @@ -170,26 +170,26 @@ variable "number_of_computed_ingress_with_self" { default = 0 } -variable "number_of_computed_ingress_with_cidr_blocks" { - description = "Number of computed ingress rules to create where 'cidr_blocks' is used" +variable "number_of_computed_ingress_with_cidr_ipv4" { + description = "Number of computed ingress rules to create where 'cidr_ipv4' is used" type = number default = 0 } -variable "number_of_computed_ingress_with_ipv6_cidr_blocks" { +variable "number_of_computed_ingress_with_cidr_ipv6" { description = "Number of computed ingress rules to create where 'ipv6_cidr_blocks' is used" type = number default = 0 } -variable "number_of_computed_ingress_with_source_security_group_id" { +variable "number_of_computed_ingress_with_referenced_security_group_id" { description = "Number of computed ingress rules to create where 'source_security_group_id' is used" type = number default = 0 } -variable "number_of_computed_ingress_with_prefix_list_ids" { - description = "Number of computed ingress rules to create where 'prefix_list_ids' is used" +variable "number_of_computed_ingress_with_prefix_list_id" { + description = "Number of computed ingress rules to create where 'prefix_list_id' is used" type = number default = 0 } @@ -227,37 +227,37 @@ variable "egress_with_self" { default = [] } -variable "egress_with_cidr_blocks" { - description = "List of egress rules to create where 'cidr_blocks' is used" +variable "egress_with_cidr_ipv4" { + description = "List of egress rules to create where 'cidr_ipv4' is used" type = list(map(string)) default = [] } -variable "egress_with_ipv6_cidr_blocks" { +variable "egress_with_cidr_ipv6" { description = "List of egress rules to create where 'ipv6_cidr_blocks' is used" type = list(map(string)) default = [] } -variable "egress_with_source_security_group_id" { +variable "egress_with_referenced_security_group_id" { description = "List of egress rules to create where 'source_security_group_id' is used" type = list(map(string)) default = [] } -variable "egress_with_prefix_list_ids" { - description = "List of egress rules to create where 'prefix_list_ids' is used" +variable "egress_with_prefix_list_id" { + description = "List of egress rules to create where 'prefix_list_id' is used" type = list(map(string)) default = [] } -variable "egress_cidr_blocks" { +variable "egress_cidr_ipv4" { description = "List of IPv4 CIDR ranges to use on all egress rules" type = list(string) default = ["0.0.0.0/0"] } -variable "egress_ipv6_cidr_blocks" { +variable "egress_cidr_ipv6" { description = "List of IPv6 CIDR ranges to use on all egress rules" type = list(string) default = ["::/0"] @@ -284,26 +284,26 @@ variable "computed_egress_with_self" { default = [] } -variable "computed_egress_with_cidr_blocks" { - description = "List of computed egress rules to create where 'cidr_blocks' is used" +variable "computed_egress_with_cidr_ipv4" { + description = "List of computed egress rules to create where 'cidr_ipv4' is used" type = list(map(string)) default = [] } -variable "computed_egress_with_ipv6_cidr_blocks" { +variable "computed_egress_with_cidr_ipv6" { description = "List of computed egress rules to create where 'ipv6_cidr_blocks' is used" type = list(map(string)) default = [] } -variable "computed_egress_with_source_security_group_id" { +variable "computed_egress_with_referenced_security_group_id" { description = "List of computed egress rules to create where 'source_security_group_id' is used" type = list(map(string)) default = [] } -variable "computed_egress_with_prefix_list_ids" { - description = "List of computed egress rules to create where 'prefix_list_ids' is used" +variable "computed_egress_with_prefix_list_id" { + description = "List of computed egress rules to create where 'prefix_list_id' is used" type = list(map(string)) default = [] } @@ -341,26 +341,26 @@ variable "number_of_computed_egress_with_self" { default = 0 } -variable "number_of_computed_egress_with_cidr_blocks" { - description = "Number of computed egress rules to create where 'cidr_blocks' is used" +variable "number_of_computed_egress_with_cidr_ipv4" { + description = "Number of computed egress rules to create where 'cidr_ipv4' is used" type = number default = 0 } -variable "number_of_computed_egress_with_ipv6_cidr_blocks" { +variable "number_of_computed_egress_with_cidr_ipv6" { description = "Number of computed egress rules to create where 'ipv6_cidr_blocks' is used" type = number default = 0 } -variable "number_of_computed_egress_with_source_security_group_id" { +variable "number_of_computed_egress_with_referenced_security_group_id" { description = "Number of computed egress rules to create where 'source_security_group_id' is used" type = number default = 0 } -variable "number_of_computed_egress_with_prefix_list_ids" { - description = "Number of computed egress rules to create where 'prefix_list_ids' is used" +variable "number_of_computed_egress_with_prefix_list_id" { + description = "Number of computed egress rules to create where 'prefix_list_id' is used" type = number default = 0 } diff --git a/modules/ldap/README.md b/modules/ldap/README.md index 362a30b3..92216870 100644 --- a/modules/ldap/README.md +++ b/modules/ldap/README.md @@ -55,59 +55,59 @@ No resources. | [computed\_egress\_ipv6\_cidr\_blocks](#input\_computed\_egress\_ipv6\_cidr\_blocks) | List of IPv6 CIDR ranges to use on all computed egress rules | `list(string)` |
[
"::/0"
]
| no | | [computed\_egress\_prefix\_list\_ids](#input\_computed\_egress\_prefix\_list\_ids) | List of prefix list IDs (for allowing access to VPC endpoints) to use on all computed egress rules | `list(string)` | `[]` | no | | [computed\_egress\_rules](#input\_computed\_egress\_rules) | List of computed egress rules to create by name | `list(string)` | `[]` | no | -| [computed\_egress\_with\_cidr\_blocks](#input\_computed\_egress\_with\_cidr\_blocks) | List of computed egress rules to create where 'cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [computed\_egress\_with\_ipv6\_cidr\_blocks](#input\_computed\_egress\_with\_ipv6\_cidr\_blocks) | List of computed egress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [computed\_egress\_with\_prefix\_list\_ids](#input\_computed\_egress\_with\_prefix\_list\_ids) | List of computed egress rules to create where 'prefix\_list\_ids' is used | `list(map(string))` | `[]` | no | +| [computed\_egress\_with\_cidr\_ipv4](#input\_computed\_egress\_with\_cidr\_ipv4) | List of computed egress rules to create where 'cidr\_ipv4' is used | `list(map(string))` | `[]` | no | +| [computed\_egress\_with\_cidr\_ipv6](#input\_computed\_egress\_with\_cidr\_ipv6) | List of computed egress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | +| [computed\_egress\_with\_prefix\_list\_id](#input\_computed\_egress\_with\_prefix\_list\_id) | List of computed egress rules to create where 'prefix\_list\_id' is used | `list(map(string))` | `[]` | no | +| [computed\_egress\_with\_referenced\_security\_group\_id](#input\_computed\_egress\_with\_referenced\_security\_group\_id) | List of computed egress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [computed\_egress\_with\_self](#input\_computed\_egress\_with\_self) | List of computed egress rules to create where 'self' is defined | `list(map(string))` | `[]` | no | -| [computed\_egress\_with\_source\_security\_group\_id](#input\_computed\_egress\_with\_source\_security\_group\_id) | List of computed egress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [computed\_ingress\_cidr\_blocks](#input\_computed\_ingress\_cidr\_blocks) | List of IPv4 CIDR ranges to use on all computed ingress rules | `list(string)` | `[]` | no | | [computed\_ingress\_ipv6\_cidr\_blocks](#input\_computed\_ingress\_ipv6\_cidr\_blocks) | List of IPv6 CIDR ranges to use on all computed ingress rules | `list(string)` | `[]` | no | | [computed\_ingress\_prefix\_list\_ids](#input\_computed\_ingress\_prefix\_list\_ids) | List of prefix list IDs (for allowing access to VPC endpoints) to use on all computed ingress rules | `list(string)` | `[]` | no | | [computed\_ingress\_rules](#input\_computed\_ingress\_rules) | List of computed ingress rules to create by name | `list(string)` | `[]` | no | -| [computed\_ingress\_with\_cidr\_blocks](#input\_computed\_ingress\_with\_cidr\_blocks) | List of computed ingress rules to create where 'cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [computed\_ingress\_with\_ipv6\_cidr\_blocks](#input\_computed\_ingress\_with\_ipv6\_cidr\_blocks) | List of computed ingress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [computed\_ingress\_with\_prefix\_list\_ids](#input\_computed\_ingress\_with\_prefix\_list\_ids) | List of computed ingress rules to create where 'prefix\_list\_ids' is used | `list(map(string))` | `[]` | no | +| [computed\_ingress\_with\_cidr\_ipv4](#input\_computed\_ingress\_with\_cidr\_ipv4) | List of computed ingress rules to create where 'cidr\_ipv4' is used | `list(map(string))` | `[]` | no | +| [computed\_ingress\_with\_cidr\_ipv6](#input\_computed\_ingress\_with\_cidr\_ipv6) | List of computed ingress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | +| [computed\_ingress\_with\_prefix\_list\_id](#input\_computed\_ingress\_with\_prefix\_list\_id) | List of computed ingress rules to create where 'prefix\_list\_id' is used | `list(map(string))` | `[]` | no | +| [computed\_ingress\_with\_referenced\_security\_group\_id](#input\_computed\_ingress\_with\_referenced\_security\_group\_id) | List of computed ingress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [computed\_ingress\_with\_self](#input\_computed\_ingress\_with\_self) | List of computed ingress rules to create where 'self' is defined | `list(map(string))` | `[]` | no | -| [computed\_ingress\_with\_source\_security\_group\_id](#input\_computed\_ingress\_with\_source\_security\_group\_id) | List of computed ingress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [create](#input\_create) | Whether to create security group and all rules | `bool` | `true` | no | | [description](#input\_description) | Description of security group | `string` | `"Security Group managed by Terraform"` | no | -| [egress\_cidr\_blocks](#input\_egress\_cidr\_blocks) | List of IPv4 CIDR ranges to use on all egress rules | `list(string)` |
[
"0.0.0.0/0"
]
| no | -| [egress\_ipv6\_cidr\_blocks](#input\_egress\_ipv6\_cidr\_blocks) | List of IPv6 CIDR ranges to use on all egress rules | `list(string)` |
[
"::/0"
]
| no | +| [egress\_cidr\_ipv4](#input\_egress\_cidr\_ipv4) | List of IPv4 CIDR ranges to use on all egress rules | `list(string)` |
[
"0.0.0.0/0"
]
| no | +| [egress\_cidr\_ipv6](#input\_egress\_cidr\_ipv6) | List of IPv6 CIDR ranges to use on all egress rules | `list(string)` |
[
"::/0"
]
| no | | [egress\_prefix\_list\_ids](#input\_egress\_prefix\_list\_ids) | List of prefix list IDs (for allowing access to VPC endpoints) to use on all egress rules | `list(string)` | `[]` | no | | [egress\_rules](#input\_egress\_rules) | List of egress rules to create by name | `list(string)` | `[]` | no | -| [egress\_with\_cidr\_blocks](#input\_egress\_with\_cidr\_blocks) | List of egress rules to create where 'cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [egress\_with\_ipv6\_cidr\_blocks](#input\_egress\_with\_ipv6\_cidr\_blocks) | List of egress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [egress\_with\_prefix\_list\_ids](#input\_egress\_with\_prefix\_list\_ids) | List of egress rules to create where 'prefix\_list\_ids' is used | `list(map(string))` | `[]` | no | +| [egress\_with\_cidr\_ipv4](#input\_egress\_with\_cidr\_ipv4) | List of egress rules to create where 'cidr\_ipv4' is used | `list(map(string))` | `[]` | no | +| [egress\_with\_cidr\_ipv6](#input\_egress\_with\_cidr\_ipv6) | List of egress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | +| [egress\_with\_prefix\_list\_id](#input\_egress\_with\_prefix\_list\_id) | List of egress rules to create where 'prefix\_list\_id' is used | `list(map(string))` | `[]` | no | +| [egress\_with\_referenced\_security\_group\_id](#input\_egress\_with\_referenced\_security\_group\_id) | List of egress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [egress\_with\_self](#input\_egress\_with\_self) | List of egress rules to create where 'self' is defined | `list(map(string))` | `[]` | no | -| [egress\_with\_source\_security\_group\_id](#input\_egress\_with\_source\_security\_group\_id) | List of egress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | -| [ingress\_cidr\_blocks](#input\_ingress\_cidr\_blocks) | List of IPv4 CIDR ranges to use on all ingress rules | `list(string)` | `[]` | no | -| [ingress\_ipv6\_cidr\_blocks](#input\_ingress\_ipv6\_cidr\_blocks) | List of IPv6 CIDR ranges to use on all ingress rules | `list(string)` | `[]` | no | +| [ingress\_cidr\_ipv4](#input\_ingress\_cidr\_ipv4) | List of IPv4 CIDR ranges to use on all ingress rules | `list(string)` | `[]` | no | +| [ingress\_cidr\_ipv6](#input\_ingress\_cidr\_ipv6) | List of IPv6 CIDR ranges to use on all ingress rules | `list(string)` | `[]` | no | | [ingress\_prefix\_list\_ids](#input\_ingress\_prefix\_list\_ids) | List of prefix list IDs (for allowing access to VPC endpoints) to use on all ingress rules | `list(string)` | `[]` | no | | [ingress\_rules](#input\_ingress\_rules) | List of ingress rules to create by name | `list(string)` | `[]` | no | -| [ingress\_with\_cidr\_blocks](#input\_ingress\_with\_cidr\_blocks) | List of ingress rules to create where 'cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [ingress\_with\_ipv6\_cidr\_blocks](#input\_ingress\_with\_ipv6\_cidr\_blocks) | List of ingress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [ingress\_with\_prefix\_list\_ids](#input\_ingress\_with\_prefix\_list\_ids) | List of ingress rules to create where 'prefix\_list\_ids' is used | `list(map(string))` | `[]` | no | +| [ingress\_with\_cidr\_ipv4](#input\_ingress\_with\_cidr\_ipv4) | List of ingress rules to create where 'cidr\_ipv4' is used | `list(map(string))` | `[]` | no | +| [ingress\_with\_cidr\_ipv6](#input\_ingress\_with\_cidr\_ipv6) | List of ingress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | +| [ingress\_with\_prefix\_list\_id](#input\_ingress\_with\_prefix\_list\_id) | List of ingress rules to create where 'prefix\_list\_id' is used | `list(map(string))` | `[]` | no | +| [ingress\_with\_referenced\_security\_group\_id](#input\_ingress\_with\_referenced\_security\_group\_id) | List of ingress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [ingress\_with\_self](#input\_ingress\_with\_self) | List of ingress rules to create where 'self' is defined | `list(map(string))` | `[]` | no | -| [ingress\_with\_source\_security\_group\_id](#input\_ingress\_with\_source\_security\_group\_id) | List of ingress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [name](#input\_name) | Name of security group | `string` | n/a | yes | | [number\_of\_computed\_egress\_cidr\_blocks](#input\_number\_of\_computed\_egress\_cidr\_blocks) | Number of IPv4 CIDR ranges to use on all computed egress rules | `number` | `0` | no | | [number\_of\_computed\_egress\_ipv6\_cidr\_blocks](#input\_number\_of\_computed\_egress\_ipv6\_cidr\_blocks) | Number of IPv6 CIDR ranges to use on all computed egress rules | `number` | `0` | no | | [number\_of\_computed\_egress\_prefix\_list\_ids](#input\_number\_of\_computed\_egress\_prefix\_list\_ids) | Number of prefix list IDs (for allowing access to VPC endpoints) to use on all computed egress rules | `number` | `0` | no | | [number\_of\_computed\_egress\_rules](#input\_number\_of\_computed\_egress\_rules) | Number of computed egress rules to create by name | `number` | `0` | no | -| [number\_of\_computed\_egress\_with\_cidr\_blocks](#input\_number\_of\_computed\_egress\_with\_cidr\_blocks) | Number of computed egress rules to create where 'cidr\_blocks' is used | `number` | `0` | no | -| [number\_of\_computed\_egress\_with\_ipv6\_cidr\_blocks](#input\_number\_of\_computed\_egress\_with\_ipv6\_cidr\_blocks) | Number of computed egress rules to create where 'ipv6\_cidr\_blocks' is used | `number` | `0` | no | -| [number\_of\_computed\_egress\_with\_prefix\_list\_ids](#input\_number\_of\_computed\_egress\_with\_prefix\_list\_ids) | Number of computed egress rules to create where 'prefix\_list\_ids' is used | `number` | `0` | no | +| [number\_of\_computed\_egress\_with\_cidr\_ipv4](#input\_number\_of\_computed\_egress\_with\_cidr\_ipv4) | Number of computed egress rules to create where 'cidr\_ipv4' is used | `number` | `0` | no | +| [number\_of\_computed\_egress\_with\_cidr\_ipv6](#input\_number\_of\_computed\_egress\_with\_cidr\_ipv6) | Number of computed egress rules to create where 'ipv6\_cidr\_blocks' is used | `number` | `0` | no | +| [number\_of\_computed\_egress\_with\_prefix\_list\_id](#input\_number\_of\_computed\_egress\_with\_prefix\_list\_id) | Number of computed egress rules to create where 'prefix\_list\_id' is used | `number` | `0` | no | +| [number\_of\_computed\_egress\_with\_referenced\_security\_group\_id](#input\_number\_of\_computed\_egress\_with\_referenced\_security\_group\_id) | Number of computed egress rules to create where 'source\_security\_group\_id' is used | `number` | `0` | no | | [number\_of\_computed\_egress\_with\_self](#input\_number\_of\_computed\_egress\_with\_self) | Number of computed egress rules to create where 'self' is defined | `number` | `0` | no | -| [number\_of\_computed\_egress\_with\_source\_security\_group\_id](#input\_number\_of\_computed\_egress\_with\_source\_security\_group\_id) | Number of computed egress rules to create where 'source\_security\_group\_id' is used | `number` | `0` | no | | [number\_of\_computed\_ingress\_cidr\_blocks](#input\_number\_of\_computed\_ingress\_cidr\_blocks) | Number of IPv4 CIDR ranges to use on all computed ingress rules | `number` | `0` | no | | [number\_of\_computed\_ingress\_ipv6\_cidr\_blocks](#input\_number\_of\_computed\_ingress\_ipv6\_cidr\_blocks) | Number of IPv6 CIDR ranges to use on all computed ingress rules | `number` | `0` | no | | [number\_of\_computed\_ingress\_prefix\_list\_ids](#input\_number\_of\_computed\_ingress\_prefix\_list\_ids) | Number of prefix list IDs (for allowing access to VPC endpoints) to use on all computed ingress rules | `number` | `0` | no | | [number\_of\_computed\_ingress\_rules](#input\_number\_of\_computed\_ingress\_rules) | Number of computed ingress rules to create by name | `number` | `0` | no | -| [number\_of\_computed\_ingress\_with\_cidr\_blocks](#input\_number\_of\_computed\_ingress\_with\_cidr\_blocks) | Number of computed ingress rules to create where 'cidr\_blocks' is used | `number` | `0` | no | -| [number\_of\_computed\_ingress\_with\_ipv6\_cidr\_blocks](#input\_number\_of\_computed\_ingress\_with\_ipv6\_cidr\_blocks) | Number of computed ingress rules to create where 'ipv6\_cidr\_blocks' is used | `number` | `0` | no | -| [number\_of\_computed\_ingress\_with\_prefix\_list\_ids](#input\_number\_of\_computed\_ingress\_with\_prefix\_list\_ids) | Number of computed ingress rules to create where 'prefix\_list\_ids' is used | `number` | `0` | no | +| [number\_of\_computed\_ingress\_with\_cidr\_ipv4](#input\_number\_of\_computed\_ingress\_with\_cidr\_ipv4) | Number of computed ingress rules to create where 'cidr\_ipv4' is used | `number` | `0` | no | +| [number\_of\_computed\_ingress\_with\_cidr\_ipv6](#input\_number\_of\_computed\_ingress\_with\_cidr\_ipv6) | Number of computed ingress rules to create where 'ipv6\_cidr\_blocks' is used | `number` | `0` | no | +| [number\_of\_computed\_ingress\_with\_prefix\_list\_id](#input\_number\_of\_computed\_ingress\_with\_prefix\_list\_id) | Number of computed ingress rules to create where 'prefix\_list\_id' is used | `number` | `0` | no | +| [number\_of\_computed\_ingress\_with\_referenced\_security\_group\_id](#input\_number\_of\_computed\_ingress\_with\_referenced\_security\_group\_id) | Number of computed ingress rules to create where 'source\_security\_group\_id' is used | `number` | `0` | no | | [number\_of\_computed\_ingress\_with\_self](#input\_number\_of\_computed\_ingress\_with\_self) | Number of computed ingress rules to create where 'self' is defined | `number` | `0` | no | -| [number\_of\_computed\_ingress\_with\_source\_security\_group\_id](#input\_number\_of\_computed\_ingress\_with\_source\_security\_group\_id) | Number of computed ingress rules to create where 'source\_security\_group\_id' is used | `number` | `0` | no | | [revoke\_rules\_on\_delete](#input\_revoke\_rules\_on\_delete) | Instruct Terraform to revoke all of the Security Groups attached ingress and egress rules before deleting the rule itself. Enable for EMR. | `bool` | `false` | no | | [tags](#input\_tags) | A mapping of tags to assign to security group | `map(string)` | `{}` | no | | [use\_name\_prefix](#input\_use\_name\_prefix) | Whether to use name\_prefix or fixed name. Should be true to able to update security group name after initial creation | `bool` | `true` | no | diff --git a/modules/ldap/main.tf b/modules/ldap/main.tf index 80ea0adb..d2a1bf93 100644 --- a/modules/ldap/main.tf +++ b/modules/ldap/main.tf @@ -19,20 +19,20 @@ module "sg" { ingress_with_self = concat(var.auto_ingress_with_self, var.ingress_with_self) # Open to IPv4 cidr blocks - ingress_with_cidr_blocks = var.ingress_with_cidr_blocks + ingress_with_cidr_ipv4 = var.ingress_with_cidr_ipv4 # Open to IPv6 cidr blocks - ingress_with_ipv6_cidr_blocks = var.ingress_with_ipv6_cidr_blocks + ingress_with_cidr_ipv6 = var.ingress_with_cidr_ipv6 # Open for security group id - ingress_with_source_security_group_id = var.ingress_with_source_security_group_id + ingress_with_referenced_security_group_id = var.ingress_with_referenced_security_group_id # Open for prefix list id - ingress_with_prefix_list_ids = var.ingress_with_prefix_list_ids + ingress_with_prefix_list_id = var.ingress_with_prefix_list_id # Default ingress CIDR blocks - ingress_cidr_blocks = var.ingress_cidr_blocks - ingress_ipv6_cidr_blocks = var.ingress_ipv6_cidr_blocks + ingress_cidr_ipv4 = var.ingress_cidr_ipv4 + ingress_cidr_ipv6 = var.ingress_cidr_ipv6 # Default prefix list ids ingress_prefix_list_ids = var.ingress_prefix_list_ids @@ -47,26 +47,26 @@ module "sg" { computed_ingress_with_self = concat(var.auto_computed_ingress_with_self, var.computed_ingress_with_self) # Open to IPv4 cidr blocks - computed_ingress_with_cidr_blocks = var.computed_ingress_with_cidr_blocks + computed_ingress_with_cidr_ipv4 = var.computed_ingress_with_cidr_ipv4 # Open to IPv6 cidr blocks - computed_ingress_with_ipv6_cidr_blocks = var.computed_ingress_with_ipv6_cidr_blocks + computed_ingress_with_cidr_ipv6 = var.computed_ingress_with_cidr_ipv6 # Open for security group id - computed_ingress_with_source_security_group_id = var.computed_ingress_with_source_security_group_id + computed_ingress_with_referenced_security_group_id = var.computed_ingress_with_referenced_security_group_id # Open for prefix list id - computed_ingress_with_prefix_list_ids = var.computed_ingress_with_prefix_list_ids + computed_ingress_with_prefix_list_id = var.computed_ingress_with_prefix_list_id ############################# # Number of computed ingress ############################# - number_of_computed_ingress_rules = var.auto_number_of_computed_ingress_rules + var.number_of_computed_ingress_rules - number_of_computed_ingress_with_self = var.auto_number_of_computed_ingress_with_self + var.number_of_computed_ingress_with_self - number_of_computed_ingress_with_cidr_blocks = var.number_of_computed_ingress_with_cidr_blocks - number_of_computed_ingress_with_ipv6_cidr_blocks = var.number_of_computed_ingress_with_ipv6_cidr_blocks - number_of_computed_ingress_with_source_security_group_id = var.number_of_computed_ingress_with_source_security_group_id - number_of_computed_ingress_with_prefix_list_ids = var.number_of_computed_ingress_with_prefix_list_ids + number_of_computed_ingress_rules = var.auto_number_of_computed_ingress_rules + var.number_of_computed_ingress_rules + number_of_computed_ingress_with_self = var.auto_number_of_computed_ingress_with_self + var.number_of_computed_ingress_with_self + number_of_computed_ingress_with_cidr_ipv4 = var.number_of_computed_ingress_with_cidr_ipv4 + number_of_computed_ingress_with_cidr_ipv6 = var.number_of_computed_ingress_with_cidr_ipv6 + number_of_computed_ingress_with_referenced_security_group_id = var.number_of_computed_ingress_with_referenced_security_group_id + number_of_computed_ingress_with_prefix_list_id = var.number_of_computed_ingress_with_prefix_list_id ######### # Egress @@ -78,20 +78,20 @@ module "sg" { egress_with_self = concat(var.auto_egress_with_self, var.egress_with_self) # Open to IPv4 cidr blocks - egress_with_cidr_blocks = var.egress_with_cidr_blocks + egress_with_cidr_ipv4 = var.egress_with_cidr_ipv4 # Open to IPv6 cidr blocks - egress_with_ipv6_cidr_blocks = var.egress_with_ipv6_cidr_blocks + egress_with_cidr_ipv6 = var.egress_with_cidr_ipv6 # Open for security group id - egress_with_source_security_group_id = var.egress_with_source_security_group_id + egress_with_referenced_security_group_id = var.egress_with_referenced_security_group_id # Open for prefix list id - egress_with_prefix_list_ids = var.egress_with_prefix_list_ids + egress_with_prefix_list_id = var.egress_with_prefix_list_id # Default egress CIDR blocks - egress_cidr_blocks = var.egress_cidr_blocks - egress_ipv6_cidr_blocks = var.egress_ipv6_cidr_blocks + egress_cidr_ipv4 = var.egress_cidr_ipv4 + egress_cidr_ipv6 = var.egress_cidr_ipv6 # Default prefix list ids egress_prefix_list_ids = var.egress_prefix_list_ids @@ -106,24 +106,24 @@ module "sg" { computed_egress_with_self = concat(var.auto_computed_egress_with_self, var.computed_egress_with_self) # Open to IPv4 cidr blocks - computed_egress_with_cidr_blocks = var.computed_egress_with_cidr_blocks + computed_egress_with_cidr_ipv4 = var.computed_egress_with_cidr_ipv4 # Open to IPv6 cidr blocks - computed_egress_with_ipv6_cidr_blocks = var.computed_egress_with_ipv6_cidr_blocks + computed_egress_with_cidr_ipv6 = var.computed_egress_with_cidr_ipv6 # Open for security group id - computed_egress_with_source_security_group_id = var.computed_egress_with_source_security_group_id + computed_egress_with_referenced_security_group_id = var.computed_egress_with_referenced_security_group_id # Open for prefix list id - computed_egress_with_prefix_list_ids = var.computed_egress_with_prefix_list_ids + computed_egress_with_prefix_list_id = var.computed_egress_with_prefix_list_id ############################# # Number of computed egress ############################# - number_of_computed_egress_rules = var.auto_number_of_computed_egress_rules + var.number_of_computed_egress_rules - number_of_computed_egress_with_self = var.auto_number_of_computed_egress_with_self + var.number_of_computed_egress_with_self - number_of_computed_egress_with_cidr_blocks = var.number_of_computed_egress_with_cidr_blocks - number_of_computed_egress_with_ipv6_cidr_blocks = var.number_of_computed_egress_with_ipv6_cidr_blocks - number_of_computed_egress_with_source_security_group_id = var.number_of_computed_egress_with_source_security_group_id - number_of_computed_egress_with_prefix_list_ids = var.number_of_computed_egress_with_prefix_list_ids + number_of_computed_egress_rules = var.auto_number_of_computed_egress_rules + var.number_of_computed_egress_rules + number_of_computed_egress_with_self = var.auto_number_of_computed_egress_with_self + var.number_of_computed_egress_with_self + number_of_computed_egress_with_cidr_ipv4 = var.number_of_computed_egress_with_cidr_ipv4 + number_of_computed_egress_with_cidr_ipv6 = var.number_of_computed_egress_with_cidr_ipv6 + number_of_computed_egress_with_referenced_security_group_id = var.number_of_computed_egress_with_referenced_security_group_id + number_of_computed_egress_with_prefix_list_id = var.number_of_computed_egress_with_prefix_list_id } diff --git a/modules/ldap/variables.tf b/modules/ldap/variables.tf index 60c8c27b..6590c9e3 100644 --- a/modules/ldap/variables.tf +++ b/modules/ldap/variables.tf @@ -56,37 +56,37 @@ variable "ingress_with_self" { default = [] } -variable "ingress_with_cidr_blocks" { - description = "List of ingress rules to create where 'cidr_blocks' is used" +variable "ingress_with_cidr_ipv4" { + description = "List of ingress rules to create where 'cidr_ipv4' is used" type = list(map(string)) default = [] } -variable "ingress_with_ipv6_cidr_blocks" { +variable "ingress_with_cidr_ipv6" { description = "List of ingress rules to create where 'ipv6_cidr_blocks' is used" type = list(map(string)) default = [] } -variable "ingress_with_source_security_group_id" { +variable "ingress_with_referenced_security_group_id" { description = "List of ingress rules to create where 'source_security_group_id' is used" type = list(map(string)) default = [] } -variable "ingress_with_prefix_list_ids" { - description = "List of ingress rules to create where 'prefix_list_ids' is used" +variable "ingress_with_prefix_list_id" { + description = "List of ingress rules to create where 'prefix_list_id' is used" type = list(map(string)) default = [] } -variable "ingress_cidr_blocks" { +variable "ingress_cidr_ipv4" { description = "List of IPv4 CIDR ranges to use on all ingress rules" type = list(string) default = [] } -variable "ingress_ipv6_cidr_blocks" { +variable "ingress_cidr_ipv6" { description = "List of IPv6 CIDR ranges to use on all ingress rules" type = list(string) default = [] @@ -113,26 +113,26 @@ variable "computed_ingress_with_self" { default = [] } -variable "computed_ingress_with_cidr_blocks" { - description = "List of computed ingress rules to create where 'cidr_blocks' is used" +variable "computed_ingress_with_cidr_ipv4" { + description = "List of computed ingress rules to create where 'cidr_ipv4' is used" type = list(map(string)) default = [] } -variable "computed_ingress_with_ipv6_cidr_blocks" { +variable "computed_ingress_with_cidr_ipv6" { description = "List of computed ingress rules to create where 'ipv6_cidr_blocks' is used" type = list(map(string)) default = [] } -variable "computed_ingress_with_source_security_group_id" { +variable "computed_ingress_with_referenced_security_group_id" { description = "List of computed ingress rules to create where 'source_security_group_id' is used" type = list(map(string)) default = [] } -variable "computed_ingress_with_prefix_list_ids" { - description = "List of computed ingress rules to create where 'prefix_list_ids' is used" +variable "computed_ingress_with_prefix_list_id" { + description = "List of computed ingress rules to create where 'prefix_list_id' is used" type = list(map(string)) default = [] } @@ -170,26 +170,26 @@ variable "number_of_computed_ingress_with_self" { default = 0 } -variable "number_of_computed_ingress_with_cidr_blocks" { - description = "Number of computed ingress rules to create where 'cidr_blocks' is used" +variable "number_of_computed_ingress_with_cidr_ipv4" { + description = "Number of computed ingress rules to create where 'cidr_ipv4' is used" type = number default = 0 } -variable "number_of_computed_ingress_with_ipv6_cidr_blocks" { +variable "number_of_computed_ingress_with_cidr_ipv6" { description = "Number of computed ingress rules to create where 'ipv6_cidr_blocks' is used" type = number default = 0 } -variable "number_of_computed_ingress_with_source_security_group_id" { +variable "number_of_computed_ingress_with_referenced_security_group_id" { description = "Number of computed ingress rules to create where 'source_security_group_id' is used" type = number default = 0 } -variable "number_of_computed_ingress_with_prefix_list_ids" { - description = "Number of computed ingress rules to create where 'prefix_list_ids' is used" +variable "number_of_computed_ingress_with_prefix_list_id" { + description = "Number of computed ingress rules to create where 'prefix_list_id' is used" type = number default = 0 } @@ -227,37 +227,37 @@ variable "egress_with_self" { default = [] } -variable "egress_with_cidr_blocks" { - description = "List of egress rules to create where 'cidr_blocks' is used" +variable "egress_with_cidr_ipv4" { + description = "List of egress rules to create where 'cidr_ipv4' is used" type = list(map(string)) default = [] } -variable "egress_with_ipv6_cidr_blocks" { +variable "egress_with_cidr_ipv6" { description = "List of egress rules to create where 'ipv6_cidr_blocks' is used" type = list(map(string)) default = [] } -variable "egress_with_source_security_group_id" { +variable "egress_with_referenced_security_group_id" { description = "List of egress rules to create where 'source_security_group_id' is used" type = list(map(string)) default = [] } -variable "egress_with_prefix_list_ids" { - description = "List of egress rules to create where 'prefix_list_ids' is used" +variable "egress_with_prefix_list_id" { + description = "List of egress rules to create where 'prefix_list_id' is used" type = list(map(string)) default = [] } -variable "egress_cidr_blocks" { +variable "egress_cidr_ipv4" { description = "List of IPv4 CIDR ranges to use on all egress rules" type = list(string) default = ["0.0.0.0/0"] } -variable "egress_ipv6_cidr_blocks" { +variable "egress_cidr_ipv6" { description = "List of IPv6 CIDR ranges to use on all egress rules" type = list(string) default = ["::/0"] @@ -284,26 +284,26 @@ variable "computed_egress_with_self" { default = [] } -variable "computed_egress_with_cidr_blocks" { - description = "List of computed egress rules to create where 'cidr_blocks' is used" +variable "computed_egress_with_cidr_ipv4" { + description = "List of computed egress rules to create where 'cidr_ipv4' is used" type = list(map(string)) default = [] } -variable "computed_egress_with_ipv6_cidr_blocks" { +variable "computed_egress_with_cidr_ipv6" { description = "List of computed egress rules to create where 'ipv6_cidr_blocks' is used" type = list(map(string)) default = [] } -variable "computed_egress_with_source_security_group_id" { +variable "computed_egress_with_referenced_security_group_id" { description = "List of computed egress rules to create where 'source_security_group_id' is used" type = list(map(string)) default = [] } -variable "computed_egress_with_prefix_list_ids" { - description = "List of computed egress rules to create where 'prefix_list_ids' is used" +variable "computed_egress_with_prefix_list_id" { + description = "List of computed egress rules to create where 'prefix_list_id' is used" type = list(map(string)) default = [] } @@ -341,26 +341,26 @@ variable "number_of_computed_egress_with_self" { default = 0 } -variable "number_of_computed_egress_with_cidr_blocks" { - description = "Number of computed egress rules to create where 'cidr_blocks' is used" +variable "number_of_computed_egress_with_cidr_ipv4" { + description = "Number of computed egress rules to create where 'cidr_ipv4' is used" type = number default = 0 } -variable "number_of_computed_egress_with_ipv6_cidr_blocks" { +variable "number_of_computed_egress_with_cidr_ipv6" { description = "Number of computed egress rules to create where 'ipv6_cidr_blocks' is used" type = number default = 0 } -variable "number_of_computed_egress_with_source_security_group_id" { +variable "number_of_computed_egress_with_referenced_security_group_id" { description = "Number of computed egress rules to create where 'source_security_group_id' is used" type = number default = 0 } -variable "number_of_computed_egress_with_prefix_list_ids" { - description = "Number of computed egress rules to create where 'prefix_list_ids' is used" +variable "number_of_computed_egress_with_prefix_list_id" { + description = "Number of computed egress rules to create where 'prefix_list_id' is used" type = number default = 0 } diff --git a/modules/ldaps/README.md b/modules/ldaps/README.md index 0655ad05..9b33e14a 100644 --- a/modules/ldaps/README.md +++ b/modules/ldaps/README.md @@ -55,59 +55,59 @@ No resources. | [computed\_egress\_ipv6\_cidr\_blocks](#input\_computed\_egress\_ipv6\_cidr\_blocks) | List of IPv6 CIDR ranges to use on all computed egress rules | `list(string)` |
[
"::/0"
]
| no | | [computed\_egress\_prefix\_list\_ids](#input\_computed\_egress\_prefix\_list\_ids) | List of prefix list IDs (for allowing access to VPC endpoints) to use on all computed egress rules | `list(string)` | `[]` | no | | [computed\_egress\_rules](#input\_computed\_egress\_rules) | List of computed egress rules to create by name | `list(string)` | `[]` | no | -| [computed\_egress\_with\_cidr\_blocks](#input\_computed\_egress\_with\_cidr\_blocks) | List of computed egress rules to create where 'cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [computed\_egress\_with\_ipv6\_cidr\_blocks](#input\_computed\_egress\_with\_ipv6\_cidr\_blocks) | List of computed egress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [computed\_egress\_with\_prefix\_list\_ids](#input\_computed\_egress\_with\_prefix\_list\_ids) | List of computed egress rules to create where 'prefix\_list\_ids' is used | `list(map(string))` | `[]` | no | +| [computed\_egress\_with\_cidr\_ipv4](#input\_computed\_egress\_with\_cidr\_ipv4) | List of computed egress rules to create where 'cidr\_ipv4' is used | `list(map(string))` | `[]` | no | +| [computed\_egress\_with\_cidr\_ipv6](#input\_computed\_egress\_with\_cidr\_ipv6) | List of computed egress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | +| [computed\_egress\_with\_prefix\_list\_id](#input\_computed\_egress\_with\_prefix\_list\_id) | List of computed egress rules to create where 'prefix\_list\_id' is used | `list(map(string))` | `[]` | no | +| [computed\_egress\_with\_referenced\_security\_group\_id](#input\_computed\_egress\_with\_referenced\_security\_group\_id) | List of computed egress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [computed\_egress\_with\_self](#input\_computed\_egress\_with\_self) | List of computed egress rules to create where 'self' is defined | `list(map(string))` | `[]` | no | -| [computed\_egress\_with\_source\_security\_group\_id](#input\_computed\_egress\_with\_source\_security\_group\_id) | List of computed egress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [computed\_ingress\_cidr\_blocks](#input\_computed\_ingress\_cidr\_blocks) | List of IPv4 CIDR ranges to use on all computed ingress rules | `list(string)` | `[]` | no | | [computed\_ingress\_ipv6\_cidr\_blocks](#input\_computed\_ingress\_ipv6\_cidr\_blocks) | List of IPv6 CIDR ranges to use on all computed ingress rules | `list(string)` | `[]` | no | | [computed\_ingress\_prefix\_list\_ids](#input\_computed\_ingress\_prefix\_list\_ids) | List of prefix list IDs (for allowing access to VPC endpoints) to use on all computed ingress rules | `list(string)` | `[]` | no | | [computed\_ingress\_rules](#input\_computed\_ingress\_rules) | List of computed ingress rules to create by name | `list(string)` | `[]` | no | -| [computed\_ingress\_with\_cidr\_blocks](#input\_computed\_ingress\_with\_cidr\_blocks) | List of computed ingress rules to create where 'cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [computed\_ingress\_with\_ipv6\_cidr\_blocks](#input\_computed\_ingress\_with\_ipv6\_cidr\_blocks) | List of computed ingress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [computed\_ingress\_with\_prefix\_list\_ids](#input\_computed\_ingress\_with\_prefix\_list\_ids) | List of computed ingress rules to create where 'prefix\_list\_ids' is used | `list(map(string))` | `[]` | no | +| [computed\_ingress\_with\_cidr\_ipv4](#input\_computed\_ingress\_with\_cidr\_ipv4) | List of computed ingress rules to create where 'cidr\_ipv4' is used | `list(map(string))` | `[]` | no | +| [computed\_ingress\_with\_cidr\_ipv6](#input\_computed\_ingress\_with\_cidr\_ipv6) | List of computed ingress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | +| [computed\_ingress\_with\_prefix\_list\_id](#input\_computed\_ingress\_with\_prefix\_list\_id) | List of computed ingress rules to create where 'prefix\_list\_id' is used | `list(map(string))` | `[]` | no | +| [computed\_ingress\_with\_referenced\_security\_group\_id](#input\_computed\_ingress\_with\_referenced\_security\_group\_id) | List of computed ingress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [computed\_ingress\_with\_self](#input\_computed\_ingress\_with\_self) | List of computed ingress rules to create where 'self' is defined | `list(map(string))` | `[]` | no | -| [computed\_ingress\_with\_source\_security\_group\_id](#input\_computed\_ingress\_with\_source\_security\_group\_id) | List of computed ingress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [create](#input\_create) | Whether to create security group and all rules | `bool` | `true` | no | | [description](#input\_description) | Description of security group | `string` | `"Security Group managed by Terraform"` | no | -| [egress\_cidr\_blocks](#input\_egress\_cidr\_blocks) | List of IPv4 CIDR ranges to use on all egress rules | `list(string)` |
[
"0.0.0.0/0"
]
| no | -| [egress\_ipv6\_cidr\_blocks](#input\_egress\_ipv6\_cidr\_blocks) | List of IPv6 CIDR ranges to use on all egress rules | `list(string)` |
[
"::/0"
]
| no | +| [egress\_cidr\_ipv4](#input\_egress\_cidr\_ipv4) | List of IPv4 CIDR ranges to use on all egress rules | `list(string)` |
[
"0.0.0.0/0"
]
| no | +| [egress\_cidr\_ipv6](#input\_egress\_cidr\_ipv6) | List of IPv6 CIDR ranges to use on all egress rules | `list(string)` |
[
"::/0"
]
| no | | [egress\_prefix\_list\_ids](#input\_egress\_prefix\_list\_ids) | List of prefix list IDs (for allowing access to VPC endpoints) to use on all egress rules | `list(string)` | `[]` | no | | [egress\_rules](#input\_egress\_rules) | List of egress rules to create by name | `list(string)` | `[]` | no | -| [egress\_with\_cidr\_blocks](#input\_egress\_with\_cidr\_blocks) | List of egress rules to create where 'cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [egress\_with\_ipv6\_cidr\_blocks](#input\_egress\_with\_ipv6\_cidr\_blocks) | List of egress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [egress\_with\_prefix\_list\_ids](#input\_egress\_with\_prefix\_list\_ids) | List of egress rules to create where 'prefix\_list\_ids' is used | `list(map(string))` | `[]` | no | +| [egress\_with\_cidr\_ipv4](#input\_egress\_with\_cidr\_ipv4) | List of egress rules to create where 'cidr\_ipv4' is used | `list(map(string))` | `[]` | no | +| [egress\_with\_cidr\_ipv6](#input\_egress\_with\_cidr\_ipv6) | List of egress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | +| [egress\_with\_prefix\_list\_id](#input\_egress\_with\_prefix\_list\_id) | List of egress rules to create where 'prefix\_list\_id' is used | `list(map(string))` | `[]` | no | +| [egress\_with\_referenced\_security\_group\_id](#input\_egress\_with\_referenced\_security\_group\_id) | List of egress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [egress\_with\_self](#input\_egress\_with\_self) | List of egress rules to create where 'self' is defined | `list(map(string))` | `[]` | no | -| [egress\_with\_source\_security\_group\_id](#input\_egress\_with\_source\_security\_group\_id) | List of egress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | -| [ingress\_cidr\_blocks](#input\_ingress\_cidr\_blocks) | List of IPv4 CIDR ranges to use on all ingress rules | `list(string)` | `[]` | no | -| [ingress\_ipv6\_cidr\_blocks](#input\_ingress\_ipv6\_cidr\_blocks) | List of IPv6 CIDR ranges to use on all ingress rules | `list(string)` | `[]` | no | +| [ingress\_cidr\_ipv4](#input\_ingress\_cidr\_ipv4) | List of IPv4 CIDR ranges to use on all ingress rules | `list(string)` | `[]` | no | +| [ingress\_cidr\_ipv6](#input\_ingress\_cidr\_ipv6) | List of IPv6 CIDR ranges to use on all ingress rules | `list(string)` | `[]` | no | | [ingress\_prefix\_list\_ids](#input\_ingress\_prefix\_list\_ids) | List of prefix list IDs (for allowing access to VPC endpoints) to use on all ingress rules | `list(string)` | `[]` | no | | [ingress\_rules](#input\_ingress\_rules) | List of ingress rules to create by name | `list(string)` | `[]` | no | -| [ingress\_with\_cidr\_blocks](#input\_ingress\_with\_cidr\_blocks) | List of ingress rules to create where 'cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [ingress\_with\_ipv6\_cidr\_blocks](#input\_ingress\_with\_ipv6\_cidr\_blocks) | List of ingress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [ingress\_with\_prefix\_list\_ids](#input\_ingress\_with\_prefix\_list\_ids) | List of ingress rules to create where 'prefix\_list\_ids' is used | `list(map(string))` | `[]` | no | +| [ingress\_with\_cidr\_ipv4](#input\_ingress\_with\_cidr\_ipv4) | List of ingress rules to create where 'cidr\_ipv4' is used | `list(map(string))` | `[]` | no | +| [ingress\_with\_cidr\_ipv6](#input\_ingress\_with\_cidr\_ipv6) | List of ingress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | +| [ingress\_with\_prefix\_list\_id](#input\_ingress\_with\_prefix\_list\_id) | List of ingress rules to create where 'prefix\_list\_id' is used | `list(map(string))` | `[]` | no | +| [ingress\_with\_referenced\_security\_group\_id](#input\_ingress\_with\_referenced\_security\_group\_id) | List of ingress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [ingress\_with\_self](#input\_ingress\_with\_self) | List of ingress rules to create where 'self' is defined | `list(map(string))` | `[]` | no | -| [ingress\_with\_source\_security\_group\_id](#input\_ingress\_with\_source\_security\_group\_id) | List of ingress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [name](#input\_name) | Name of security group | `string` | n/a | yes | | [number\_of\_computed\_egress\_cidr\_blocks](#input\_number\_of\_computed\_egress\_cidr\_blocks) | Number of IPv4 CIDR ranges to use on all computed egress rules | `number` | `0` | no | | [number\_of\_computed\_egress\_ipv6\_cidr\_blocks](#input\_number\_of\_computed\_egress\_ipv6\_cidr\_blocks) | Number of IPv6 CIDR ranges to use on all computed egress rules | `number` | `0` | no | | [number\_of\_computed\_egress\_prefix\_list\_ids](#input\_number\_of\_computed\_egress\_prefix\_list\_ids) | Number of prefix list IDs (for allowing access to VPC endpoints) to use on all computed egress rules | `number` | `0` | no | | [number\_of\_computed\_egress\_rules](#input\_number\_of\_computed\_egress\_rules) | Number of computed egress rules to create by name | `number` | `0` | no | -| [number\_of\_computed\_egress\_with\_cidr\_blocks](#input\_number\_of\_computed\_egress\_with\_cidr\_blocks) | Number of computed egress rules to create where 'cidr\_blocks' is used | `number` | `0` | no | -| [number\_of\_computed\_egress\_with\_ipv6\_cidr\_blocks](#input\_number\_of\_computed\_egress\_with\_ipv6\_cidr\_blocks) | Number of computed egress rules to create where 'ipv6\_cidr\_blocks' is used | `number` | `0` | no | -| [number\_of\_computed\_egress\_with\_prefix\_list\_ids](#input\_number\_of\_computed\_egress\_with\_prefix\_list\_ids) | Number of computed egress rules to create where 'prefix\_list\_ids' is used | `number` | `0` | no | +| [number\_of\_computed\_egress\_with\_cidr\_ipv4](#input\_number\_of\_computed\_egress\_with\_cidr\_ipv4) | Number of computed egress rules to create where 'cidr\_ipv4' is used | `number` | `0` | no | +| [number\_of\_computed\_egress\_with\_cidr\_ipv6](#input\_number\_of\_computed\_egress\_with\_cidr\_ipv6) | Number of computed egress rules to create where 'ipv6\_cidr\_blocks' is used | `number` | `0` | no | +| [number\_of\_computed\_egress\_with\_prefix\_list\_id](#input\_number\_of\_computed\_egress\_with\_prefix\_list\_id) | Number of computed egress rules to create where 'prefix\_list\_id' is used | `number` | `0` | no | +| [number\_of\_computed\_egress\_with\_referenced\_security\_group\_id](#input\_number\_of\_computed\_egress\_with\_referenced\_security\_group\_id) | Number of computed egress rules to create where 'source\_security\_group\_id' is used | `number` | `0` | no | | [number\_of\_computed\_egress\_with\_self](#input\_number\_of\_computed\_egress\_with\_self) | Number of computed egress rules to create where 'self' is defined | `number` | `0` | no | -| [number\_of\_computed\_egress\_with\_source\_security\_group\_id](#input\_number\_of\_computed\_egress\_with\_source\_security\_group\_id) | Number of computed egress rules to create where 'source\_security\_group\_id' is used | `number` | `0` | no | | [number\_of\_computed\_ingress\_cidr\_blocks](#input\_number\_of\_computed\_ingress\_cidr\_blocks) | Number of IPv4 CIDR ranges to use on all computed ingress rules | `number` | `0` | no | | [number\_of\_computed\_ingress\_ipv6\_cidr\_blocks](#input\_number\_of\_computed\_ingress\_ipv6\_cidr\_blocks) | Number of IPv6 CIDR ranges to use on all computed ingress rules | `number` | `0` | no | | [number\_of\_computed\_ingress\_prefix\_list\_ids](#input\_number\_of\_computed\_ingress\_prefix\_list\_ids) | Number of prefix list IDs (for allowing access to VPC endpoints) to use on all computed ingress rules | `number` | `0` | no | | [number\_of\_computed\_ingress\_rules](#input\_number\_of\_computed\_ingress\_rules) | Number of computed ingress rules to create by name | `number` | `0` | no | -| [number\_of\_computed\_ingress\_with\_cidr\_blocks](#input\_number\_of\_computed\_ingress\_with\_cidr\_blocks) | Number of computed ingress rules to create where 'cidr\_blocks' is used | `number` | `0` | no | -| [number\_of\_computed\_ingress\_with\_ipv6\_cidr\_blocks](#input\_number\_of\_computed\_ingress\_with\_ipv6\_cidr\_blocks) | Number of computed ingress rules to create where 'ipv6\_cidr\_blocks' is used | `number` | `0` | no | -| [number\_of\_computed\_ingress\_with\_prefix\_list\_ids](#input\_number\_of\_computed\_ingress\_with\_prefix\_list\_ids) | Number of computed ingress rules to create where 'prefix\_list\_ids' is used | `number` | `0` | no | +| [number\_of\_computed\_ingress\_with\_cidr\_ipv4](#input\_number\_of\_computed\_ingress\_with\_cidr\_ipv4) | Number of computed ingress rules to create where 'cidr\_ipv4' is used | `number` | `0` | no | +| [number\_of\_computed\_ingress\_with\_cidr\_ipv6](#input\_number\_of\_computed\_ingress\_with\_cidr\_ipv6) | Number of computed ingress rules to create where 'ipv6\_cidr\_blocks' is used | `number` | `0` | no | +| [number\_of\_computed\_ingress\_with\_prefix\_list\_id](#input\_number\_of\_computed\_ingress\_with\_prefix\_list\_id) | Number of computed ingress rules to create where 'prefix\_list\_id' is used | `number` | `0` | no | +| [number\_of\_computed\_ingress\_with\_referenced\_security\_group\_id](#input\_number\_of\_computed\_ingress\_with\_referenced\_security\_group\_id) | Number of computed ingress rules to create where 'source\_security\_group\_id' is used | `number` | `0` | no | | [number\_of\_computed\_ingress\_with\_self](#input\_number\_of\_computed\_ingress\_with\_self) | Number of computed ingress rules to create where 'self' is defined | `number` | `0` | no | -| [number\_of\_computed\_ingress\_with\_source\_security\_group\_id](#input\_number\_of\_computed\_ingress\_with\_source\_security\_group\_id) | Number of computed ingress rules to create where 'source\_security\_group\_id' is used | `number` | `0` | no | | [revoke\_rules\_on\_delete](#input\_revoke\_rules\_on\_delete) | Instruct Terraform to revoke all of the Security Groups attached ingress and egress rules before deleting the rule itself. Enable for EMR. | `bool` | `false` | no | | [tags](#input\_tags) | A mapping of tags to assign to security group | `map(string)` | `{}` | no | | [use\_name\_prefix](#input\_use\_name\_prefix) | Whether to use name\_prefix or fixed name. Should be true to able to update security group name after initial creation | `bool` | `true` | no | diff --git a/modules/ldaps/main.tf b/modules/ldaps/main.tf index 80ea0adb..d2a1bf93 100644 --- a/modules/ldaps/main.tf +++ b/modules/ldaps/main.tf @@ -19,20 +19,20 @@ module "sg" { ingress_with_self = concat(var.auto_ingress_with_self, var.ingress_with_self) # Open to IPv4 cidr blocks - ingress_with_cidr_blocks = var.ingress_with_cidr_blocks + ingress_with_cidr_ipv4 = var.ingress_with_cidr_ipv4 # Open to IPv6 cidr blocks - ingress_with_ipv6_cidr_blocks = var.ingress_with_ipv6_cidr_blocks + ingress_with_cidr_ipv6 = var.ingress_with_cidr_ipv6 # Open for security group id - ingress_with_source_security_group_id = var.ingress_with_source_security_group_id + ingress_with_referenced_security_group_id = var.ingress_with_referenced_security_group_id # Open for prefix list id - ingress_with_prefix_list_ids = var.ingress_with_prefix_list_ids + ingress_with_prefix_list_id = var.ingress_with_prefix_list_id # Default ingress CIDR blocks - ingress_cidr_blocks = var.ingress_cidr_blocks - ingress_ipv6_cidr_blocks = var.ingress_ipv6_cidr_blocks + ingress_cidr_ipv4 = var.ingress_cidr_ipv4 + ingress_cidr_ipv6 = var.ingress_cidr_ipv6 # Default prefix list ids ingress_prefix_list_ids = var.ingress_prefix_list_ids @@ -47,26 +47,26 @@ module "sg" { computed_ingress_with_self = concat(var.auto_computed_ingress_with_self, var.computed_ingress_with_self) # Open to IPv4 cidr blocks - computed_ingress_with_cidr_blocks = var.computed_ingress_with_cidr_blocks + computed_ingress_with_cidr_ipv4 = var.computed_ingress_with_cidr_ipv4 # Open to IPv6 cidr blocks - computed_ingress_with_ipv6_cidr_blocks = var.computed_ingress_with_ipv6_cidr_blocks + computed_ingress_with_cidr_ipv6 = var.computed_ingress_with_cidr_ipv6 # Open for security group id - computed_ingress_with_source_security_group_id = var.computed_ingress_with_source_security_group_id + computed_ingress_with_referenced_security_group_id = var.computed_ingress_with_referenced_security_group_id # Open for prefix list id - computed_ingress_with_prefix_list_ids = var.computed_ingress_with_prefix_list_ids + computed_ingress_with_prefix_list_id = var.computed_ingress_with_prefix_list_id ############################# # Number of computed ingress ############################# - number_of_computed_ingress_rules = var.auto_number_of_computed_ingress_rules + var.number_of_computed_ingress_rules - number_of_computed_ingress_with_self = var.auto_number_of_computed_ingress_with_self + var.number_of_computed_ingress_with_self - number_of_computed_ingress_with_cidr_blocks = var.number_of_computed_ingress_with_cidr_blocks - number_of_computed_ingress_with_ipv6_cidr_blocks = var.number_of_computed_ingress_with_ipv6_cidr_blocks - number_of_computed_ingress_with_source_security_group_id = var.number_of_computed_ingress_with_source_security_group_id - number_of_computed_ingress_with_prefix_list_ids = var.number_of_computed_ingress_with_prefix_list_ids + number_of_computed_ingress_rules = var.auto_number_of_computed_ingress_rules + var.number_of_computed_ingress_rules + number_of_computed_ingress_with_self = var.auto_number_of_computed_ingress_with_self + var.number_of_computed_ingress_with_self + number_of_computed_ingress_with_cidr_ipv4 = var.number_of_computed_ingress_with_cidr_ipv4 + number_of_computed_ingress_with_cidr_ipv6 = var.number_of_computed_ingress_with_cidr_ipv6 + number_of_computed_ingress_with_referenced_security_group_id = var.number_of_computed_ingress_with_referenced_security_group_id + number_of_computed_ingress_with_prefix_list_id = var.number_of_computed_ingress_with_prefix_list_id ######### # Egress @@ -78,20 +78,20 @@ module "sg" { egress_with_self = concat(var.auto_egress_with_self, var.egress_with_self) # Open to IPv4 cidr blocks - egress_with_cidr_blocks = var.egress_with_cidr_blocks + egress_with_cidr_ipv4 = var.egress_with_cidr_ipv4 # Open to IPv6 cidr blocks - egress_with_ipv6_cidr_blocks = var.egress_with_ipv6_cidr_blocks + egress_with_cidr_ipv6 = var.egress_with_cidr_ipv6 # Open for security group id - egress_with_source_security_group_id = var.egress_with_source_security_group_id + egress_with_referenced_security_group_id = var.egress_with_referenced_security_group_id # Open for prefix list id - egress_with_prefix_list_ids = var.egress_with_prefix_list_ids + egress_with_prefix_list_id = var.egress_with_prefix_list_id # Default egress CIDR blocks - egress_cidr_blocks = var.egress_cidr_blocks - egress_ipv6_cidr_blocks = var.egress_ipv6_cidr_blocks + egress_cidr_ipv4 = var.egress_cidr_ipv4 + egress_cidr_ipv6 = var.egress_cidr_ipv6 # Default prefix list ids egress_prefix_list_ids = var.egress_prefix_list_ids @@ -106,24 +106,24 @@ module "sg" { computed_egress_with_self = concat(var.auto_computed_egress_with_self, var.computed_egress_with_self) # Open to IPv4 cidr blocks - computed_egress_with_cidr_blocks = var.computed_egress_with_cidr_blocks + computed_egress_with_cidr_ipv4 = var.computed_egress_with_cidr_ipv4 # Open to IPv6 cidr blocks - computed_egress_with_ipv6_cidr_blocks = var.computed_egress_with_ipv6_cidr_blocks + computed_egress_with_cidr_ipv6 = var.computed_egress_with_cidr_ipv6 # Open for security group id - computed_egress_with_source_security_group_id = var.computed_egress_with_source_security_group_id + computed_egress_with_referenced_security_group_id = var.computed_egress_with_referenced_security_group_id # Open for prefix list id - computed_egress_with_prefix_list_ids = var.computed_egress_with_prefix_list_ids + computed_egress_with_prefix_list_id = var.computed_egress_with_prefix_list_id ############################# # Number of computed egress ############################# - number_of_computed_egress_rules = var.auto_number_of_computed_egress_rules + var.number_of_computed_egress_rules - number_of_computed_egress_with_self = var.auto_number_of_computed_egress_with_self + var.number_of_computed_egress_with_self - number_of_computed_egress_with_cidr_blocks = var.number_of_computed_egress_with_cidr_blocks - number_of_computed_egress_with_ipv6_cidr_blocks = var.number_of_computed_egress_with_ipv6_cidr_blocks - number_of_computed_egress_with_source_security_group_id = var.number_of_computed_egress_with_source_security_group_id - number_of_computed_egress_with_prefix_list_ids = var.number_of_computed_egress_with_prefix_list_ids + number_of_computed_egress_rules = var.auto_number_of_computed_egress_rules + var.number_of_computed_egress_rules + number_of_computed_egress_with_self = var.auto_number_of_computed_egress_with_self + var.number_of_computed_egress_with_self + number_of_computed_egress_with_cidr_ipv4 = var.number_of_computed_egress_with_cidr_ipv4 + number_of_computed_egress_with_cidr_ipv6 = var.number_of_computed_egress_with_cidr_ipv6 + number_of_computed_egress_with_referenced_security_group_id = var.number_of_computed_egress_with_referenced_security_group_id + number_of_computed_egress_with_prefix_list_id = var.number_of_computed_egress_with_prefix_list_id } diff --git a/modules/ldaps/variables.tf b/modules/ldaps/variables.tf index 60c8c27b..6590c9e3 100644 --- a/modules/ldaps/variables.tf +++ b/modules/ldaps/variables.tf @@ -56,37 +56,37 @@ variable "ingress_with_self" { default = [] } -variable "ingress_with_cidr_blocks" { - description = "List of ingress rules to create where 'cidr_blocks' is used" +variable "ingress_with_cidr_ipv4" { + description = "List of ingress rules to create where 'cidr_ipv4' is used" type = list(map(string)) default = [] } -variable "ingress_with_ipv6_cidr_blocks" { +variable "ingress_with_cidr_ipv6" { description = "List of ingress rules to create where 'ipv6_cidr_blocks' is used" type = list(map(string)) default = [] } -variable "ingress_with_source_security_group_id" { +variable "ingress_with_referenced_security_group_id" { description = "List of ingress rules to create where 'source_security_group_id' is used" type = list(map(string)) default = [] } -variable "ingress_with_prefix_list_ids" { - description = "List of ingress rules to create where 'prefix_list_ids' is used" +variable "ingress_with_prefix_list_id" { + description = "List of ingress rules to create where 'prefix_list_id' is used" type = list(map(string)) default = [] } -variable "ingress_cidr_blocks" { +variable "ingress_cidr_ipv4" { description = "List of IPv4 CIDR ranges to use on all ingress rules" type = list(string) default = [] } -variable "ingress_ipv6_cidr_blocks" { +variable "ingress_cidr_ipv6" { description = "List of IPv6 CIDR ranges to use on all ingress rules" type = list(string) default = [] @@ -113,26 +113,26 @@ variable "computed_ingress_with_self" { default = [] } -variable "computed_ingress_with_cidr_blocks" { - description = "List of computed ingress rules to create where 'cidr_blocks' is used" +variable "computed_ingress_with_cidr_ipv4" { + description = "List of computed ingress rules to create where 'cidr_ipv4' is used" type = list(map(string)) default = [] } -variable "computed_ingress_with_ipv6_cidr_blocks" { +variable "computed_ingress_with_cidr_ipv6" { description = "List of computed ingress rules to create where 'ipv6_cidr_blocks' is used" type = list(map(string)) default = [] } -variable "computed_ingress_with_source_security_group_id" { +variable "computed_ingress_with_referenced_security_group_id" { description = "List of computed ingress rules to create where 'source_security_group_id' is used" type = list(map(string)) default = [] } -variable "computed_ingress_with_prefix_list_ids" { - description = "List of computed ingress rules to create where 'prefix_list_ids' is used" +variable "computed_ingress_with_prefix_list_id" { + description = "List of computed ingress rules to create where 'prefix_list_id' is used" type = list(map(string)) default = [] } @@ -170,26 +170,26 @@ variable "number_of_computed_ingress_with_self" { default = 0 } -variable "number_of_computed_ingress_with_cidr_blocks" { - description = "Number of computed ingress rules to create where 'cidr_blocks' is used" +variable "number_of_computed_ingress_with_cidr_ipv4" { + description = "Number of computed ingress rules to create where 'cidr_ipv4' is used" type = number default = 0 } -variable "number_of_computed_ingress_with_ipv6_cidr_blocks" { +variable "number_of_computed_ingress_with_cidr_ipv6" { description = "Number of computed ingress rules to create where 'ipv6_cidr_blocks' is used" type = number default = 0 } -variable "number_of_computed_ingress_with_source_security_group_id" { +variable "number_of_computed_ingress_with_referenced_security_group_id" { description = "Number of computed ingress rules to create where 'source_security_group_id' is used" type = number default = 0 } -variable "number_of_computed_ingress_with_prefix_list_ids" { - description = "Number of computed ingress rules to create where 'prefix_list_ids' is used" +variable "number_of_computed_ingress_with_prefix_list_id" { + description = "Number of computed ingress rules to create where 'prefix_list_id' is used" type = number default = 0 } @@ -227,37 +227,37 @@ variable "egress_with_self" { default = [] } -variable "egress_with_cidr_blocks" { - description = "List of egress rules to create where 'cidr_blocks' is used" +variable "egress_with_cidr_ipv4" { + description = "List of egress rules to create where 'cidr_ipv4' is used" type = list(map(string)) default = [] } -variable "egress_with_ipv6_cidr_blocks" { +variable "egress_with_cidr_ipv6" { description = "List of egress rules to create where 'ipv6_cidr_blocks' is used" type = list(map(string)) default = [] } -variable "egress_with_source_security_group_id" { +variable "egress_with_referenced_security_group_id" { description = "List of egress rules to create where 'source_security_group_id' is used" type = list(map(string)) default = [] } -variable "egress_with_prefix_list_ids" { - description = "List of egress rules to create where 'prefix_list_ids' is used" +variable "egress_with_prefix_list_id" { + description = "List of egress rules to create where 'prefix_list_id' is used" type = list(map(string)) default = [] } -variable "egress_cidr_blocks" { +variable "egress_cidr_ipv4" { description = "List of IPv4 CIDR ranges to use on all egress rules" type = list(string) default = ["0.0.0.0/0"] } -variable "egress_ipv6_cidr_blocks" { +variable "egress_cidr_ipv6" { description = "List of IPv6 CIDR ranges to use on all egress rules" type = list(string) default = ["::/0"] @@ -284,26 +284,26 @@ variable "computed_egress_with_self" { default = [] } -variable "computed_egress_with_cidr_blocks" { - description = "List of computed egress rules to create where 'cidr_blocks' is used" +variable "computed_egress_with_cidr_ipv4" { + description = "List of computed egress rules to create where 'cidr_ipv4' is used" type = list(map(string)) default = [] } -variable "computed_egress_with_ipv6_cidr_blocks" { +variable "computed_egress_with_cidr_ipv6" { description = "List of computed egress rules to create where 'ipv6_cidr_blocks' is used" type = list(map(string)) default = [] } -variable "computed_egress_with_source_security_group_id" { +variable "computed_egress_with_referenced_security_group_id" { description = "List of computed egress rules to create where 'source_security_group_id' is used" type = list(map(string)) default = [] } -variable "computed_egress_with_prefix_list_ids" { - description = "List of computed egress rules to create where 'prefix_list_ids' is used" +variable "computed_egress_with_prefix_list_id" { + description = "List of computed egress rules to create where 'prefix_list_id' is used" type = list(map(string)) default = [] } @@ -341,26 +341,26 @@ variable "number_of_computed_egress_with_self" { default = 0 } -variable "number_of_computed_egress_with_cidr_blocks" { - description = "Number of computed egress rules to create where 'cidr_blocks' is used" +variable "number_of_computed_egress_with_cidr_ipv4" { + description = "Number of computed egress rules to create where 'cidr_ipv4' is used" type = number default = 0 } -variable "number_of_computed_egress_with_ipv6_cidr_blocks" { +variable "number_of_computed_egress_with_cidr_ipv6" { description = "Number of computed egress rules to create where 'ipv6_cidr_blocks' is used" type = number default = 0 } -variable "number_of_computed_egress_with_source_security_group_id" { +variable "number_of_computed_egress_with_referenced_security_group_id" { description = "Number of computed egress rules to create where 'source_security_group_id' is used" type = number default = 0 } -variable "number_of_computed_egress_with_prefix_list_ids" { - description = "Number of computed egress rules to create where 'prefix_list_ids' is used" +variable "number_of_computed_egress_with_prefix_list_id" { + description = "Number of computed egress rules to create where 'prefix_list_id' is used" type = number default = 0 } diff --git a/modules/logstash/README.md b/modules/logstash/README.md index c9f3d2b6..151ad965 100644 --- a/modules/logstash/README.md +++ b/modules/logstash/README.md @@ -55,59 +55,59 @@ No resources. | [computed\_egress\_ipv6\_cidr\_blocks](#input\_computed\_egress\_ipv6\_cidr\_blocks) | List of IPv6 CIDR ranges to use on all computed egress rules | `list(string)` |
[
"::/0"
]
| no | | [computed\_egress\_prefix\_list\_ids](#input\_computed\_egress\_prefix\_list\_ids) | List of prefix list IDs (for allowing access to VPC endpoints) to use on all computed egress rules | `list(string)` | `[]` | no | | [computed\_egress\_rules](#input\_computed\_egress\_rules) | List of computed egress rules to create by name | `list(string)` | `[]` | no | -| [computed\_egress\_with\_cidr\_blocks](#input\_computed\_egress\_with\_cidr\_blocks) | List of computed egress rules to create where 'cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [computed\_egress\_with\_ipv6\_cidr\_blocks](#input\_computed\_egress\_with\_ipv6\_cidr\_blocks) | List of computed egress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [computed\_egress\_with\_prefix\_list\_ids](#input\_computed\_egress\_with\_prefix\_list\_ids) | List of computed egress rules to create where 'prefix\_list\_ids' is used | `list(map(string))` | `[]` | no | +| [computed\_egress\_with\_cidr\_ipv4](#input\_computed\_egress\_with\_cidr\_ipv4) | List of computed egress rules to create where 'cidr\_ipv4' is used | `list(map(string))` | `[]` | no | +| [computed\_egress\_with\_cidr\_ipv6](#input\_computed\_egress\_with\_cidr\_ipv6) | List of computed egress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | +| [computed\_egress\_with\_prefix\_list\_id](#input\_computed\_egress\_with\_prefix\_list\_id) | List of computed egress rules to create where 'prefix\_list\_id' is used | `list(map(string))` | `[]` | no | +| [computed\_egress\_with\_referenced\_security\_group\_id](#input\_computed\_egress\_with\_referenced\_security\_group\_id) | List of computed egress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [computed\_egress\_with\_self](#input\_computed\_egress\_with\_self) | List of computed egress rules to create where 'self' is defined | `list(map(string))` | `[]` | no | -| [computed\_egress\_with\_source\_security\_group\_id](#input\_computed\_egress\_with\_source\_security\_group\_id) | List of computed egress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [computed\_ingress\_cidr\_blocks](#input\_computed\_ingress\_cidr\_blocks) | List of IPv4 CIDR ranges to use on all computed ingress rules | `list(string)` | `[]` | no | | [computed\_ingress\_ipv6\_cidr\_blocks](#input\_computed\_ingress\_ipv6\_cidr\_blocks) | List of IPv6 CIDR ranges to use on all computed ingress rules | `list(string)` | `[]` | no | | [computed\_ingress\_prefix\_list\_ids](#input\_computed\_ingress\_prefix\_list\_ids) | List of prefix list IDs (for allowing access to VPC endpoints) to use on all computed ingress rules | `list(string)` | `[]` | no | | [computed\_ingress\_rules](#input\_computed\_ingress\_rules) | List of computed ingress rules to create by name | `list(string)` | `[]` | no | -| [computed\_ingress\_with\_cidr\_blocks](#input\_computed\_ingress\_with\_cidr\_blocks) | List of computed ingress rules to create where 'cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [computed\_ingress\_with\_ipv6\_cidr\_blocks](#input\_computed\_ingress\_with\_ipv6\_cidr\_blocks) | List of computed ingress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [computed\_ingress\_with\_prefix\_list\_ids](#input\_computed\_ingress\_with\_prefix\_list\_ids) | List of computed ingress rules to create where 'prefix\_list\_ids' is used | `list(map(string))` | `[]` | no | +| [computed\_ingress\_with\_cidr\_ipv4](#input\_computed\_ingress\_with\_cidr\_ipv4) | List of computed ingress rules to create where 'cidr\_ipv4' is used | `list(map(string))` | `[]` | no | +| [computed\_ingress\_with\_cidr\_ipv6](#input\_computed\_ingress\_with\_cidr\_ipv6) | List of computed ingress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | +| [computed\_ingress\_with\_prefix\_list\_id](#input\_computed\_ingress\_with\_prefix\_list\_id) | List of computed ingress rules to create where 'prefix\_list\_id' is used | `list(map(string))` | `[]` | no | +| [computed\_ingress\_with\_referenced\_security\_group\_id](#input\_computed\_ingress\_with\_referenced\_security\_group\_id) | List of computed ingress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [computed\_ingress\_with\_self](#input\_computed\_ingress\_with\_self) | List of computed ingress rules to create where 'self' is defined | `list(map(string))` | `[]` | no | -| [computed\_ingress\_with\_source\_security\_group\_id](#input\_computed\_ingress\_with\_source\_security\_group\_id) | List of computed ingress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [create](#input\_create) | Whether to create security group and all rules | `bool` | `true` | no | | [description](#input\_description) | Description of security group | `string` | `"Security Group managed by Terraform"` | no | -| [egress\_cidr\_blocks](#input\_egress\_cidr\_blocks) | List of IPv4 CIDR ranges to use on all egress rules | `list(string)` |
[
"0.0.0.0/0"
]
| no | -| [egress\_ipv6\_cidr\_blocks](#input\_egress\_ipv6\_cidr\_blocks) | List of IPv6 CIDR ranges to use on all egress rules | `list(string)` |
[
"::/0"
]
| no | +| [egress\_cidr\_ipv4](#input\_egress\_cidr\_ipv4) | List of IPv4 CIDR ranges to use on all egress rules | `list(string)` |
[
"0.0.0.0/0"
]
| no | +| [egress\_cidr\_ipv6](#input\_egress\_cidr\_ipv6) | List of IPv6 CIDR ranges to use on all egress rules | `list(string)` |
[
"::/0"
]
| no | | [egress\_prefix\_list\_ids](#input\_egress\_prefix\_list\_ids) | List of prefix list IDs (for allowing access to VPC endpoints) to use on all egress rules | `list(string)` | `[]` | no | | [egress\_rules](#input\_egress\_rules) | List of egress rules to create by name | `list(string)` | `[]` | no | -| [egress\_with\_cidr\_blocks](#input\_egress\_with\_cidr\_blocks) | List of egress rules to create where 'cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [egress\_with\_ipv6\_cidr\_blocks](#input\_egress\_with\_ipv6\_cidr\_blocks) | List of egress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [egress\_with\_prefix\_list\_ids](#input\_egress\_with\_prefix\_list\_ids) | List of egress rules to create where 'prefix\_list\_ids' is used | `list(map(string))` | `[]` | no | +| [egress\_with\_cidr\_ipv4](#input\_egress\_with\_cidr\_ipv4) | List of egress rules to create where 'cidr\_ipv4' is used | `list(map(string))` | `[]` | no | +| [egress\_with\_cidr\_ipv6](#input\_egress\_with\_cidr\_ipv6) | List of egress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | +| [egress\_with\_prefix\_list\_id](#input\_egress\_with\_prefix\_list\_id) | List of egress rules to create where 'prefix\_list\_id' is used | `list(map(string))` | `[]` | no | +| [egress\_with\_referenced\_security\_group\_id](#input\_egress\_with\_referenced\_security\_group\_id) | List of egress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [egress\_with\_self](#input\_egress\_with\_self) | List of egress rules to create where 'self' is defined | `list(map(string))` | `[]` | no | -| [egress\_with\_source\_security\_group\_id](#input\_egress\_with\_source\_security\_group\_id) | List of egress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | -| [ingress\_cidr\_blocks](#input\_ingress\_cidr\_blocks) | List of IPv4 CIDR ranges to use on all ingress rules | `list(string)` | `[]` | no | -| [ingress\_ipv6\_cidr\_blocks](#input\_ingress\_ipv6\_cidr\_blocks) | List of IPv6 CIDR ranges to use on all ingress rules | `list(string)` | `[]` | no | +| [ingress\_cidr\_ipv4](#input\_ingress\_cidr\_ipv4) | List of IPv4 CIDR ranges to use on all ingress rules | `list(string)` | `[]` | no | +| [ingress\_cidr\_ipv6](#input\_ingress\_cidr\_ipv6) | List of IPv6 CIDR ranges to use on all ingress rules | `list(string)` | `[]` | no | | [ingress\_prefix\_list\_ids](#input\_ingress\_prefix\_list\_ids) | List of prefix list IDs (for allowing access to VPC endpoints) to use on all ingress rules | `list(string)` | `[]` | no | | [ingress\_rules](#input\_ingress\_rules) | List of ingress rules to create by name | `list(string)` | `[]` | no | -| [ingress\_with\_cidr\_blocks](#input\_ingress\_with\_cidr\_blocks) | List of ingress rules to create where 'cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [ingress\_with\_ipv6\_cidr\_blocks](#input\_ingress\_with\_ipv6\_cidr\_blocks) | List of ingress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [ingress\_with\_prefix\_list\_ids](#input\_ingress\_with\_prefix\_list\_ids) | List of ingress rules to create where 'prefix\_list\_ids' is used | `list(map(string))` | `[]` | no | +| [ingress\_with\_cidr\_ipv4](#input\_ingress\_with\_cidr\_ipv4) | List of ingress rules to create where 'cidr\_ipv4' is used | `list(map(string))` | `[]` | no | +| [ingress\_with\_cidr\_ipv6](#input\_ingress\_with\_cidr\_ipv6) | List of ingress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | +| [ingress\_with\_prefix\_list\_id](#input\_ingress\_with\_prefix\_list\_id) | List of ingress rules to create where 'prefix\_list\_id' is used | `list(map(string))` | `[]` | no | +| [ingress\_with\_referenced\_security\_group\_id](#input\_ingress\_with\_referenced\_security\_group\_id) | List of ingress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [ingress\_with\_self](#input\_ingress\_with\_self) | List of ingress rules to create where 'self' is defined | `list(map(string))` | `[]` | no | -| [ingress\_with\_source\_security\_group\_id](#input\_ingress\_with\_source\_security\_group\_id) | List of ingress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [name](#input\_name) | Name of security group | `string` | n/a | yes | | [number\_of\_computed\_egress\_cidr\_blocks](#input\_number\_of\_computed\_egress\_cidr\_blocks) | Number of IPv4 CIDR ranges to use on all computed egress rules | `number` | `0` | no | | [number\_of\_computed\_egress\_ipv6\_cidr\_blocks](#input\_number\_of\_computed\_egress\_ipv6\_cidr\_blocks) | Number of IPv6 CIDR ranges to use on all computed egress rules | `number` | `0` | no | | [number\_of\_computed\_egress\_prefix\_list\_ids](#input\_number\_of\_computed\_egress\_prefix\_list\_ids) | Number of prefix list IDs (for allowing access to VPC endpoints) to use on all computed egress rules | `number` | `0` | no | | [number\_of\_computed\_egress\_rules](#input\_number\_of\_computed\_egress\_rules) | Number of computed egress rules to create by name | `number` | `0` | no | -| [number\_of\_computed\_egress\_with\_cidr\_blocks](#input\_number\_of\_computed\_egress\_with\_cidr\_blocks) | Number of computed egress rules to create where 'cidr\_blocks' is used | `number` | `0` | no | -| [number\_of\_computed\_egress\_with\_ipv6\_cidr\_blocks](#input\_number\_of\_computed\_egress\_with\_ipv6\_cidr\_blocks) | Number of computed egress rules to create where 'ipv6\_cidr\_blocks' is used | `number` | `0` | no | -| [number\_of\_computed\_egress\_with\_prefix\_list\_ids](#input\_number\_of\_computed\_egress\_with\_prefix\_list\_ids) | Number of computed egress rules to create where 'prefix\_list\_ids' is used | `number` | `0` | no | +| [number\_of\_computed\_egress\_with\_cidr\_ipv4](#input\_number\_of\_computed\_egress\_with\_cidr\_ipv4) | Number of computed egress rules to create where 'cidr\_ipv4' is used | `number` | `0` | no | +| [number\_of\_computed\_egress\_with\_cidr\_ipv6](#input\_number\_of\_computed\_egress\_with\_cidr\_ipv6) | Number of computed egress rules to create where 'ipv6\_cidr\_blocks' is used | `number` | `0` | no | +| [number\_of\_computed\_egress\_with\_prefix\_list\_id](#input\_number\_of\_computed\_egress\_with\_prefix\_list\_id) | Number of computed egress rules to create where 'prefix\_list\_id' is used | `number` | `0` | no | +| [number\_of\_computed\_egress\_with\_referenced\_security\_group\_id](#input\_number\_of\_computed\_egress\_with\_referenced\_security\_group\_id) | Number of computed egress rules to create where 'source\_security\_group\_id' is used | `number` | `0` | no | | [number\_of\_computed\_egress\_with\_self](#input\_number\_of\_computed\_egress\_with\_self) | Number of computed egress rules to create where 'self' is defined | `number` | `0` | no | -| [number\_of\_computed\_egress\_with\_source\_security\_group\_id](#input\_number\_of\_computed\_egress\_with\_source\_security\_group\_id) | Number of computed egress rules to create where 'source\_security\_group\_id' is used | `number` | `0` | no | | [number\_of\_computed\_ingress\_cidr\_blocks](#input\_number\_of\_computed\_ingress\_cidr\_blocks) | Number of IPv4 CIDR ranges to use on all computed ingress rules | `number` | `0` | no | | [number\_of\_computed\_ingress\_ipv6\_cidr\_blocks](#input\_number\_of\_computed\_ingress\_ipv6\_cidr\_blocks) | Number of IPv6 CIDR ranges to use on all computed ingress rules | `number` | `0` | no | | [number\_of\_computed\_ingress\_prefix\_list\_ids](#input\_number\_of\_computed\_ingress\_prefix\_list\_ids) | Number of prefix list IDs (for allowing access to VPC endpoints) to use on all computed ingress rules | `number` | `0` | no | | [number\_of\_computed\_ingress\_rules](#input\_number\_of\_computed\_ingress\_rules) | Number of computed ingress rules to create by name | `number` | `0` | no | -| [number\_of\_computed\_ingress\_with\_cidr\_blocks](#input\_number\_of\_computed\_ingress\_with\_cidr\_blocks) | Number of computed ingress rules to create where 'cidr\_blocks' is used | `number` | `0` | no | -| [number\_of\_computed\_ingress\_with\_ipv6\_cidr\_blocks](#input\_number\_of\_computed\_ingress\_with\_ipv6\_cidr\_blocks) | Number of computed ingress rules to create where 'ipv6\_cidr\_blocks' is used | `number` | `0` | no | -| [number\_of\_computed\_ingress\_with\_prefix\_list\_ids](#input\_number\_of\_computed\_ingress\_with\_prefix\_list\_ids) | Number of computed ingress rules to create where 'prefix\_list\_ids' is used | `number` | `0` | no | +| [number\_of\_computed\_ingress\_with\_cidr\_ipv4](#input\_number\_of\_computed\_ingress\_with\_cidr\_ipv4) | Number of computed ingress rules to create where 'cidr\_ipv4' is used | `number` | `0` | no | +| [number\_of\_computed\_ingress\_with\_cidr\_ipv6](#input\_number\_of\_computed\_ingress\_with\_cidr\_ipv6) | Number of computed ingress rules to create where 'ipv6\_cidr\_blocks' is used | `number` | `0` | no | +| [number\_of\_computed\_ingress\_with\_prefix\_list\_id](#input\_number\_of\_computed\_ingress\_with\_prefix\_list\_id) | Number of computed ingress rules to create where 'prefix\_list\_id' is used | `number` | `0` | no | +| [number\_of\_computed\_ingress\_with\_referenced\_security\_group\_id](#input\_number\_of\_computed\_ingress\_with\_referenced\_security\_group\_id) | Number of computed ingress rules to create where 'source\_security\_group\_id' is used | `number` | `0` | no | | [number\_of\_computed\_ingress\_with\_self](#input\_number\_of\_computed\_ingress\_with\_self) | Number of computed ingress rules to create where 'self' is defined | `number` | `0` | no | -| [number\_of\_computed\_ingress\_with\_source\_security\_group\_id](#input\_number\_of\_computed\_ingress\_with\_source\_security\_group\_id) | Number of computed ingress rules to create where 'source\_security\_group\_id' is used | `number` | `0` | no | | [revoke\_rules\_on\_delete](#input\_revoke\_rules\_on\_delete) | Instruct Terraform to revoke all of the Security Groups attached ingress and egress rules before deleting the rule itself. Enable for EMR. | `bool` | `false` | no | | [tags](#input\_tags) | A mapping of tags to assign to security group | `map(string)` | `{}` | no | | [use\_name\_prefix](#input\_use\_name\_prefix) | Whether to use name\_prefix or fixed name. Should be true to able to update security group name after initial creation | `bool` | `true` | no | diff --git a/modules/logstash/main.tf b/modules/logstash/main.tf index 80ea0adb..d2a1bf93 100644 --- a/modules/logstash/main.tf +++ b/modules/logstash/main.tf @@ -19,20 +19,20 @@ module "sg" { ingress_with_self = concat(var.auto_ingress_with_self, var.ingress_with_self) # Open to IPv4 cidr blocks - ingress_with_cidr_blocks = var.ingress_with_cidr_blocks + ingress_with_cidr_ipv4 = var.ingress_with_cidr_ipv4 # Open to IPv6 cidr blocks - ingress_with_ipv6_cidr_blocks = var.ingress_with_ipv6_cidr_blocks + ingress_with_cidr_ipv6 = var.ingress_with_cidr_ipv6 # Open for security group id - ingress_with_source_security_group_id = var.ingress_with_source_security_group_id + ingress_with_referenced_security_group_id = var.ingress_with_referenced_security_group_id # Open for prefix list id - ingress_with_prefix_list_ids = var.ingress_with_prefix_list_ids + ingress_with_prefix_list_id = var.ingress_with_prefix_list_id # Default ingress CIDR blocks - ingress_cidr_blocks = var.ingress_cidr_blocks - ingress_ipv6_cidr_blocks = var.ingress_ipv6_cidr_blocks + ingress_cidr_ipv4 = var.ingress_cidr_ipv4 + ingress_cidr_ipv6 = var.ingress_cidr_ipv6 # Default prefix list ids ingress_prefix_list_ids = var.ingress_prefix_list_ids @@ -47,26 +47,26 @@ module "sg" { computed_ingress_with_self = concat(var.auto_computed_ingress_with_self, var.computed_ingress_with_self) # Open to IPv4 cidr blocks - computed_ingress_with_cidr_blocks = var.computed_ingress_with_cidr_blocks + computed_ingress_with_cidr_ipv4 = var.computed_ingress_with_cidr_ipv4 # Open to IPv6 cidr blocks - computed_ingress_with_ipv6_cidr_blocks = var.computed_ingress_with_ipv6_cidr_blocks + computed_ingress_with_cidr_ipv6 = var.computed_ingress_with_cidr_ipv6 # Open for security group id - computed_ingress_with_source_security_group_id = var.computed_ingress_with_source_security_group_id + computed_ingress_with_referenced_security_group_id = var.computed_ingress_with_referenced_security_group_id # Open for prefix list id - computed_ingress_with_prefix_list_ids = var.computed_ingress_with_prefix_list_ids + computed_ingress_with_prefix_list_id = var.computed_ingress_with_prefix_list_id ############################# # Number of computed ingress ############################# - number_of_computed_ingress_rules = var.auto_number_of_computed_ingress_rules + var.number_of_computed_ingress_rules - number_of_computed_ingress_with_self = var.auto_number_of_computed_ingress_with_self + var.number_of_computed_ingress_with_self - number_of_computed_ingress_with_cidr_blocks = var.number_of_computed_ingress_with_cidr_blocks - number_of_computed_ingress_with_ipv6_cidr_blocks = var.number_of_computed_ingress_with_ipv6_cidr_blocks - number_of_computed_ingress_with_source_security_group_id = var.number_of_computed_ingress_with_source_security_group_id - number_of_computed_ingress_with_prefix_list_ids = var.number_of_computed_ingress_with_prefix_list_ids + number_of_computed_ingress_rules = var.auto_number_of_computed_ingress_rules + var.number_of_computed_ingress_rules + number_of_computed_ingress_with_self = var.auto_number_of_computed_ingress_with_self + var.number_of_computed_ingress_with_self + number_of_computed_ingress_with_cidr_ipv4 = var.number_of_computed_ingress_with_cidr_ipv4 + number_of_computed_ingress_with_cidr_ipv6 = var.number_of_computed_ingress_with_cidr_ipv6 + number_of_computed_ingress_with_referenced_security_group_id = var.number_of_computed_ingress_with_referenced_security_group_id + number_of_computed_ingress_with_prefix_list_id = var.number_of_computed_ingress_with_prefix_list_id ######### # Egress @@ -78,20 +78,20 @@ module "sg" { egress_with_self = concat(var.auto_egress_with_self, var.egress_with_self) # Open to IPv4 cidr blocks - egress_with_cidr_blocks = var.egress_with_cidr_blocks + egress_with_cidr_ipv4 = var.egress_with_cidr_ipv4 # Open to IPv6 cidr blocks - egress_with_ipv6_cidr_blocks = var.egress_with_ipv6_cidr_blocks + egress_with_cidr_ipv6 = var.egress_with_cidr_ipv6 # Open for security group id - egress_with_source_security_group_id = var.egress_with_source_security_group_id + egress_with_referenced_security_group_id = var.egress_with_referenced_security_group_id # Open for prefix list id - egress_with_prefix_list_ids = var.egress_with_prefix_list_ids + egress_with_prefix_list_id = var.egress_with_prefix_list_id # Default egress CIDR blocks - egress_cidr_blocks = var.egress_cidr_blocks - egress_ipv6_cidr_blocks = var.egress_ipv6_cidr_blocks + egress_cidr_ipv4 = var.egress_cidr_ipv4 + egress_cidr_ipv6 = var.egress_cidr_ipv6 # Default prefix list ids egress_prefix_list_ids = var.egress_prefix_list_ids @@ -106,24 +106,24 @@ module "sg" { computed_egress_with_self = concat(var.auto_computed_egress_with_self, var.computed_egress_with_self) # Open to IPv4 cidr blocks - computed_egress_with_cidr_blocks = var.computed_egress_with_cidr_blocks + computed_egress_with_cidr_ipv4 = var.computed_egress_with_cidr_ipv4 # Open to IPv6 cidr blocks - computed_egress_with_ipv6_cidr_blocks = var.computed_egress_with_ipv6_cidr_blocks + computed_egress_with_cidr_ipv6 = var.computed_egress_with_cidr_ipv6 # Open for security group id - computed_egress_with_source_security_group_id = var.computed_egress_with_source_security_group_id + computed_egress_with_referenced_security_group_id = var.computed_egress_with_referenced_security_group_id # Open for prefix list id - computed_egress_with_prefix_list_ids = var.computed_egress_with_prefix_list_ids + computed_egress_with_prefix_list_id = var.computed_egress_with_prefix_list_id ############################# # Number of computed egress ############################# - number_of_computed_egress_rules = var.auto_number_of_computed_egress_rules + var.number_of_computed_egress_rules - number_of_computed_egress_with_self = var.auto_number_of_computed_egress_with_self + var.number_of_computed_egress_with_self - number_of_computed_egress_with_cidr_blocks = var.number_of_computed_egress_with_cidr_blocks - number_of_computed_egress_with_ipv6_cidr_blocks = var.number_of_computed_egress_with_ipv6_cidr_blocks - number_of_computed_egress_with_source_security_group_id = var.number_of_computed_egress_with_source_security_group_id - number_of_computed_egress_with_prefix_list_ids = var.number_of_computed_egress_with_prefix_list_ids + number_of_computed_egress_rules = var.auto_number_of_computed_egress_rules + var.number_of_computed_egress_rules + number_of_computed_egress_with_self = var.auto_number_of_computed_egress_with_self + var.number_of_computed_egress_with_self + number_of_computed_egress_with_cidr_ipv4 = var.number_of_computed_egress_with_cidr_ipv4 + number_of_computed_egress_with_cidr_ipv6 = var.number_of_computed_egress_with_cidr_ipv6 + number_of_computed_egress_with_referenced_security_group_id = var.number_of_computed_egress_with_referenced_security_group_id + number_of_computed_egress_with_prefix_list_id = var.number_of_computed_egress_with_prefix_list_id } diff --git a/modules/logstash/variables.tf b/modules/logstash/variables.tf index 60c8c27b..6590c9e3 100644 --- a/modules/logstash/variables.tf +++ b/modules/logstash/variables.tf @@ -56,37 +56,37 @@ variable "ingress_with_self" { default = [] } -variable "ingress_with_cidr_blocks" { - description = "List of ingress rules to create where 'cidr_blocks' is used" +variable "ingress_with_cidr_ipv4" { + description = "List of ingress rules to create where 'cidr_ipv4' is used" type = list(map(string)) default = [] } -variable "ingress_with_ipv6_cidr_blocks" { +variable "ingress_with_cidr_ipv6" { description = "List of ingress rules to create where 'ipv6_cidr_blocks' is used" type = list(map(string)) default = [] } -variable "ingress_with_source_security_group_id" { +variable "ingress_with_referenced_security_group_id" { description = "List of ingress rules to create where 'source_security_group_id' is used" type = list(map(string)) default = [] } -variable "ingress_with_prefix_list_ids" { - description = "List of ingress rules to create where 'prefix_list_ids' is used" +variable "ingress_with_prefix_list_id" { + description = "List of ingress rules to create where 'prefix_list_id' is used" type = list(map(string)) default = [] } -variable "ingress_cidr_blocks" { +variable "ingress_cidr_ipv4" { description = "List of IPv4 CIDR ranges to use on all ingress rules" type = list(string) default = [] } -variable "ingress_ipv6_cidr_blocks" { +variable "ingress_cidr_ipv6" { description = "List of IPv6 CIDR ranges to use on all ingress rules" type = list(string) default = [] @@ -113,26 +113,26 @@ variable "computed_ingress_with_self" { default = [] } -variable "computed_ingress_with_cidr_blocks" { - description = "List of computed ingress rules to create where 'cidr_blocks' is used" +variable "computed_ingress_with_cidr_ipv4" { + description = "List of computed ingress rules to create where 'cidr_ipv4' is used" type = list(map(string)) default = [] } -variable "computed_ingress_with_ipv6_cidr_blocks" { +variable "computed_ingress_with_cidr_ipv6" { description = "List of computed ingress rules to create where 'ipv6_cidr_blocks' is used" type = list(map(string)) default = [] } -variable "computed_ingress_with_source_security_group_id" { +variable "computed_ingress_with_referenced_security_group_id" { description = "List of computed ingress rules to create where 'source_security_group_id' is used" type = list(map(string)) default = [] } -variable "computed_ingress_with_prefix_list_ids" { - description = "List of computed ingress rules to create where 'prefix_list_ids' is used" +variable "computed_ingress_with_prefix_list_id" { + description = "List of computed ingress rules to create where 'prefix_list_id' is used" type = list(map(string)) default = [] } @@ -170,26 +170,26 @@ variable "number_of_computed_ingress_with_self" { default = 0 } -variable "number_of_computed_ingress_with_cidr_blocks" { - description = "Number of computed ingress rules to create where 'cidr_blocks' is used" +variable "number_of_computed_ingress_with_cidr_ipv4" { + description = "Number of computed ingress rules to create where 'cidr_ipv4' is used" type = number default = 0 } -variable "number_of_computed_ingress_with_ipv6_cidr_blocks" { +variable "number_of_computed_ingress_with_cidr_ipv6" { description = "Number of computed ingress rules to create where 'ipv6_cidr_blocks' is used" type = number default = 0 } -variable "number_of_computed_ingress_with_source_security_group_id" { +variable "number_of_computed_ingress_with_referenced_security_group_id" { description = "Number of computed ingress rules to create where 'source_security_group_id' is used" type = number default = 0 } -variable "number_of_computed_ingress_with_prefix_list_ids" { - description = "Number of computed ingress rules to create where 'prefix_list_ids' is used" +variable "number_of_computed_ingress_with_prefix_list_id" { + description = "Number of computed ingress rules to create where 'prefix_list_id' is used" type = number default = 0 } @@ -227,37 +227,37 @@ variable "egress_with_self" { default = [] } -variable "egress_with_cidr_blocks" { - description = "List of egress rules to create where 'cidr_blocks' is used" +variable "egress_with_cidr_ipv4" { + description = "List of egress rules to create where 'cidr_ipv4' is used" type = list(map(string)) default = [] } -variable "egress_with_ipv6_cidr_blocks" { +variable "egress_with_cidr_ipv6" { description = "List of egress rules to create where 'ipv6_cidr_blocks' is used" type = list(map(string)) default = [] } -variable "egress_with_source_security_group_id" { +variable "egress_with_referenced_security_group_id" { description = "List of egress rules to create where 'source_security_group_id' is used" type = list(map(string)) default = [] } -variable "egress_with_prefix_list_ids" { - description = "List of egress rules to create where 'prefix_list_ids' is used" +variable "egress_with_prefix_list_id" { + description = "List of egress rules to create where 'prefix_list_id' is used" type = list(map(string)) default = [] } -variable "egress_cidr_blocks" { +variable "egress_cidr_ipv4" { description = "List of IPv4 CIDR ranges to use on all egress rules" type = list(string) default = ["0.0.0.0/0"] } -variable "egress_ipv6_cidr_blocks" { +variable "egress_cidr_ipv6" { description = "List of IPv6 CIDR ranges to use on all egress rules" type = list(string) default = ["::/0"] @@ -284,26 +284,26 @@ variable "computed_egress_with_self" { default = [] } -variable "computed_egress_with_cidr_blocks" { - description = "List of computed egress rules to create where 'cidr_blocks' is used" +variable "computed_egress_with_cidr_ipv4" { + description = "List of computed egress rules to create where 'cidr_ipv4' is used" type = list(map(string)) default = [] } -variable "computed_egress_with_ipv6_cidr_blocks" { +variable "computed_egress_with_cidr_ipv6" { description = "List of computed egress rules to create where 'ipv6_cidr_blocks' is used" type = list(map(string)) default = [] } -variable "computed_egress_with_source_security_group_id" { +variable "computed_egress_with_referenced_security_group_id" { description = "List of computed egress rules to create where 'source_security_group_id' is used" type = list(map(string)) default = [] } -variable "computed_egress_with_prefix_list_ids" { - description = "List of computed egress rules to create where 'prefix_list_ids' is used" +variable "computed_egress_with_prefix_list_id" { + description = "List of computed egress rules to create where 'prefix_list_id' is used" type = list(map(string)) default = [] } @@ -341,26 +341,26 @@ variable "number_of_computed_egress_with_self" { default = 0 } -variable "number_of_computed_egress_with_cidr_blocks" { - description = "Number of computed egress rules to create where 'cidr_blocks' is used" +variable "number_of_computed_egress_with_cidr_ipv4" { + description = "Number of computed egress rules to create where 'cidr_ipv4' is used" type = number default = 0 } -variable "number_of_computed_egress_with_ipv6_cidr_blocks" { +variable "number_of_computed_egress_with_cidr_ipv6" { description = "Number of computed egress rules to create where 'ipv6_cidr_blocks' is used" type = number default = 0 } -variable "number_of_computed_egress_with_source_security_group_id" { +variable "number_of_computed_egress_with_referenced_security_group_id" { description = "Number of computed egress rules to create where 'source_security_group_id' is used" type = number default = 0 } -variable "number_of_computed_egress_with_prefix_list_ids" { - description = "Number of computed egress rules to create where 'prefix_list_ids' is used" +variable "number_of_computed_egress_with_prefix_list_id" { + description = "Number of computed egress rules to create where 'prefix_list_id' is used" type = number default = 0 } diff --git a/modules/loki/README.md b/modules/loki/README.md index 3583b967..5a71edc0 100644 --- a/modules/loki/README.md +++ b/modules/loki/README.md @@ -55,59 +55,59 @@ No resources. | [computed\_egress\_ipv6\_cidr\_blocks](#input\_computed\_egress\_ipv6\_cidr\_blocks) | List of IPv6 CIDR ranges to use on all computed egress rules | `list(string)` |
[
"::/0"
]
| no | | [computed\_egress\_prefix\_list\_ids](#input\_computed\_egress\_prefix\_list\_ids) | List of prefix list IDs (for allowing access to VPC endpoints) to use on all computed egress rules | `list(string)` | `[]` | no | | [computed\_egress\_rules](#input\_computed\_egress\_rules) | List of computed egress rules to create by name | `list(string)` | `[]` | no | -| [computed\_egress\_with\_cidr\_blocks](#input\_computed\_egress\_with\_cidr\_blocks) | List of computed egress rules to create where 'cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [computed\_egress\_with\_ipv6\_cidr\_blocks](#input\_computed\_egress\_with\_ipv6\_cidr\_blocks) | List of computed egress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [computed\_egress\_with\_prefix\_list\_ids](#input\_computed\_egress\_with\_prefix\_list\_ids) | List of computed egress rules to create where 'prefix\_list\_ids' is used | `list(map(string))` | `[]` | no | +| [computed\_egress\_with\_cidr\_ipv4](#input\_computed\_egress\_with\_cidr\_ipv4) | List of computed egress rules to create where 'cidr\_ipv4' is used | `list(map(string))` | `[]` | no | +| [computed\_egress\_with\_cidr\_ipv6](#input\_computed\_egress\_with\_cidr\_ipv6) | List of computed egress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | +| [computed\_egress\_with\_prefix\_list\_id](#input\_computed\_egress\_with\_prefix\_list\_id) | List of computed egress rules to create where 'prefix\_list\_id' is used | `list(map(string))` | `[]` | no | +| [computed\_egress\_with\_referenced\_security\_group\_id](#input\_computed\_egress\_with\_referenced\_security\_group\_id) | List of computed egress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [computed\_egress\_with\_self](#input\_computed\_egress\_with\_self) | List of computed egress rules to create where 'self' is defined | `list(map(string))` | `[]` | no | -| [computed\_egress\_with\_source\_security\_group\_id](#input\_computed\_egress\_with\_source\_security\_group\_id) | List of computed egress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [computed\_ingress\_cidr\_blocks](#input\_computed\_ingress\_cidr\_blocks) | List of IPv4 CIDR ranges to use on all computed ingress rules | `list(string)` | `[]` | no | | [computed\_ingress\_ipv6\_cidr\_blocks](#input\_computed\_ingress\_ipv6\_cidr\_blocks) | List of IPv6 CIDR ranges to use on all computed ingress rules | `list(string)` | `[]` | no | | [computed\_ingress\_prefix\_list\_ids](#input\_computed\_ingress\_prefix\_list\_ids) | List of prefix list IDs (for allowing access to VPC endpoints) to use on all computed ingress rules | `list(string)` | `[]` | no | | [computed\_ingress\_rules](#input\_computed\_ingress\_rules) | List of computed ingress rules to create by name | `list(string)` | `[]` | no | -| [computed\_ingress\_with\_cidr\_blocks](#input\_computed\_ingress\_with\_cidr\_blocks) | List of computed ingress rules to create where 'cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [computed\_ingress\_with\_ipv6\_cidr\_blocks](#input\_computed\_ingress\_with\_ipv6\_cidr\_blocks) | List of computed ingress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [computed\_ingress\_with\_prefix\_list\_ids](#input\_computed\_ingress\_with\_prefix\_list\_ids) | List of computed ingress rules to create where 'prefix\_list\_ids' is used | `list(map(string))` | `[]` | no | +| [computed\_ingress\_with\_cidr\_ipv4](#input\_computed\_ingress\_with\_cidr\_ipv4) | List of computed ingress rules to create where 'cidr\_ipv4' is used | `list(map(string))` | `[]` | no | +| [computed\_ingress\_with\_cidr\_ipv6](#input\_computed\_ingress\_with\_cidr\_ipv6) | List of computed ingress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | +| [computed\_ingress\_with\_prefix\_list\_id](#input\_computed\_ingress\_with\_prefix\_list\_id) | List of computed ingress rules to create where 'prefix\_list\_id' is used | `list(map(string))` | `[]` | no | +| [computed\_ingress\_with\_referenced\_security\_group\_id](#input\_computed\_ingress\_with\_referenced\_security\_group\_id) | List of computed ingress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [computed\_ingress\_with\_self](#input\_computed\_ingress\_with\_self) | List of computed ingress rules to create where 'self' is defined | `list(map(string))` | `[]` | no | -| [computed\_ingress\_with\_source\_security\_group\_id](#input\_computed\_ingress\_with\_source\_security\_group\_id) | List of computed ingress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [create](#input\_create) | Whether to create security group and all rules | `bool` | `true` | no | | [description](#input\_description) | Description of security group | `string` | `"Security Group managed by Terraform"` | no | -| [egress\_cidr\_blocks](#input\_egress\_cidr\_blocks) | List of IPv4 CIDR ranges to use on all egress rules | `list(string)` |
[
"0.0.0.0/0"
]
| no | -| [egress\_ipv6\_cidr\_blocks](#input\_egress\_ipv6\_cidr\_blocks) | List of IPv6 CIDR ranges to use on all egress rules | `list(string)` |
[
"::/0"
]
| no | +| [egress\_cidr\_ipv4](#input\_egress\_cidr\_ipv4) | List of IPv4 CIDR ranges to use on all egress rules | `list(string)` |
[
"0.0.0.0/0"
]
| no | +| [egress\_cidr\_ipv6](#input\_egress\_cidr\_ipv6) | List of IPv6 CIDR ranges to use on all egress rules | `list(string)` |
[
"::/0"
]
| no | | [egress\_prefix\_list\_ids](#input\_egress\_prefix\_list\_ids) | List of prefix list IDs (for allowing access to VPC endpoints) to use on all egress rules | `list(string)` | `[]` | no | | [egress\_rules](#input\_egress\_rules) | List of egress rules to create by name | `list(string)` | `[]` | no | -| [egress\_with\_cidr\_blocks](#input\_egress\_with\_cidr\_blocks) | List of egress rules to create where 'cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [egress\_with\_ipv6\_cidr\_blocks](#input\_egress\_with\_ipv6\_cidr\_blocks) | List of egress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [egress\_with\_prefix\_list\_ids](#input\_egress\_with\_prefix\_list\_ids) | List of egress rules to create where 'prefix\_list\_ids' is used | `list(map(string))` | `[]` | no | +| [egress\_with\_cidr\_ipv4](#input\_egress\_with\_cidr\_ipv4) | List of egress rules to create where 'cidr\_ipv4' is used | `list(map(string))` | `[]` | no | +| [egress\_with\_cidr\_ipv6](#input\_egress\_with\_cidr\_ipv6) | List of egress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | +| [egress\_with\_prefix\_list\_id](#input\_egress\_with\_prefix\_list\_id) | List of egress rules to create where 'prefix\_list\_id' is used | `list(map(string))` | `[]` | no | +| [egress\_with\_referenced\_security\_group\_id](#input\_egress\_with\_referenced\_security\_group\_id) | List of egress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [egress\_with\_self](#input\_egress\_with\_self) | List of egress rules to create where 'self' is defined | `list(map(string))` | `[]` | no | -| [egress\_with\_source\_security\_group\_id](#input\_egress\_with\_source\_security\_group\_id) | List of egress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | -| [ingress\_cidr\_blocks](#input\_ingress\_cidr\_blocks) | List of IPv4 CIDR ranges to use on all ingress rules | `list(string)` | `[]` | no | -| [ingress\_ipv6\_cidr\_blocks](#input\_ingress\_ipv6\_cidr\_blocks) | List of IPv6 CIDR ranges to use on all ingress rules | `list(string)` | `[]` | no | +| [ingress\_cidr\_ipv4](#input\_ingress\_cidr\_ipv4) | List of IPv4 CIDR ranges to use on all ingress rules | `list(string)` | `[]` | no | +| [ingress\_cidr\_ipv6](#input\_ingress\_cidr\_ipv6) | List of IPv6 CIDR ranges to use on all ingress rules | `list(string)` | `[]` | no | | [ingress\_prefix\_list\_ids](#input\_ingress\_prefix\_list\_ids) | List of prefix list IDs (for allowing access to VPC endpoints) to use on all ingress rules | `list(string)` | `[]` | no | | [ingress\_rules](#input\_ingress\_rules) | List of ingress rules to create by name | `list(string)` | `[]` | no | -| [ingress\_with\_cidr\_blocks](#input\_ingress\_with\_cidr\_blocks) | List of ingress rules to create where 'cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [ingress\_with\_ipv6\_cidr\_blocks](#input\_ingress\_with\_ipv6\_cidr\_blocks) | List of ingress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [ingress\_with\_prefix\_list\_ids](#input\_ingress\_with\_prefix\_list\_ids) | List of ingress rules to create where 'prefix\_list\_ids' is used | `list(map(string))` | `[]` | no | +| [ingress\_with\_cidr\_ipv4](#input\_ingress\_with\_cidr\_ipv4) | List of ingress rules to create where 'cidr\_ipv4' is used | `list(map(string))` | `[]` | no | +| [ingress\_with\_cidr\_ipv6](#input\_ingress\_with\_cidr\_ipv6) | List of ingress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | +| [ingress\_with\_prefix\_list\_id](#input\_ingress\_with\_prefix\_list\_id) | List of ingress rules to create where 'prefix\_list\_id' is used | `list(map(string))` | `[]` | no | +| [ingress\_with\_referenced\_security\_group\_id](#input\_ingress\_with\_referenced\_security\_group\_id) | List of ingress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [ingress\_with\_self](#input\_ingress\_with\_self) | List of ingress rules to create where 'self' is defined | `list(map(string))` | `[]` | no | -| [ingress\_with\_source\_security\_group\_id](#input\_ingress\_with\_source\_security\_group\_id) | List of ingress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [name](#input\_name) | Name of security group | `string` | n/a | yes | | [number\_of\_computed\_egress\_cidr\_blocks](#input\_number\_of\_computed\_egress\_cidr\_blocks) | Number of IPv4 CIDR ranges to use on all computed egress rules | `number` | `0` | no | | [number\_of\_computed\_egress\_ipv6\_cidr\_blocks](#input\_number\_of\_computed\_egress\_ipv6\_cidr\_blocks) | Number of IPv6 CIDR ranges to use on all computed egress rules | `number` | `0` | no | | [number\_of\_computed\_egress\_prefix\_list\_ids](#input\_number\_of\_computed\_egress\_prefix\_list\_ids) | Number of prefix list IDs (for allowing access to VPC endpoints) to use on all computed egress rules | `number` | `0` | no | | [number\_of\_computed\_egress\_rules](#input\_number\_of\_computed\_egress\_rules) | Number of computed egress rules to create by name | `number` | `0` | no | -| [number\_of\_computed\_egress\_with\_cidr\_blocks](#input\_number\_of\_computed\_egress\_with\_cidr\_blocks) | Number of computed egress rules to create where 'cidr\_blocks' is used | `number` | `0` | no | -| [number\_of\_computed\_egress\_with\_ipv6\_cidr\_blocks](#input\_number\_of\_computed\_egress\_with\_ipv6\_cidr\_blocks) | Number of computed egress rules to create where 'ipv6\_cidr\_blocks' is used | `number` | `0` | no | -| [number\_of\_computed\_egress\_with\_prefix\_list\_ids](#input\_number\_of\_computed\_egress\_with\_prefix\_list\_ids) | Number of computed egress rules to create where 'prefix\_list\_ids' is used | `number` | `0` | no | +| [number\_of\_computed\_egress\_with\_cidr\_ipv4](#input\_number\_of\_computed\_egress\_with\_cidr\_ipv4) | Number of computed egress rules to create where 'cidr\_ipv4' is used | `number` | `0` | no | +| [number\_of\_computed\_egress\_with\_cidr\_ipv6](#input\_number\_of\_computed\_egress\_with\_cidr\_ipv6) | Number of computed egress rules to create where 'ipv6\_cidr\_blocks' is used | `number` | `0` | no | +| [number\_of\_computed\_egress\_with\_prefix\_list\_id](#input\_number\_of\_computed\_egress\_with\_prefix\_list\_id) | Number of computed egress rules to create where 'prefix\_list\_id' is used | `number` | `0` | no | +| [number\_of\_computed\_egress\_with\_referenced\_security\_group\_id](#input\_number\_of\_computed\_egress\_with\_referenced\_security\_group\_id) | Number of computed egress rules to create where 'source\_security\_group\_id' is used | `number` | `0` | no | | [number\_of\_computed\_egress\_with\_self](#input\_number\_of\_computed\_egress\_with\_self) | Number of computed egress rules to create where 'self' is defined | `number` | `0` | no | -| [number\_of\_computed\_egress\_with\_source\_security\_group\_id](#input\_number\_of\_computed\_egress\_with\_source\_security\_group\_id) | Number of computed egress rules to create where 'source\_security\_group\_id' is used | `number` | `0` | no | | [number\_of\_computed\_ingress\_cidr\_blocks](#input\_number\_of\_computed\_ingress\_cidr\_blocks) | Number of IPv4 CIDR ranges to use on all computed ingress rules | `number` | `0` | no | | [number\_of\_computed\_ingress\_ipv6\_cidr\_blocks](#input\_number\_of\_computed\_ingress\_ipv6\_cidr\_blocks) | Number of IPv6 CIDR ranges to use on all computed ingress rules | `number` | `0` | no | | [number\_of\_computed\_ingress\_prefix\_list\_ids](#input\_number\_of\_computed\_ingress\_prefix\_list\_ids) | Number of prefix list IDs (for allowing access to VPC endpoints) to use on all computed ingress rules | `number` | `0` | no | | [number\_of\_computed\_ingress\_rules](#input\_number\_of\_computed\_ingress\_rules) | Number of computed ingress rules to create by name | `number` | `0` | no | -| [number\_of\_computed\_ingress\_with\_cidr\_blocks](#input\_number\_of\_computed\_ingress\_with\_cidr\_blocks) | Number of computed ingress rules to create where 'cidr\_blocks' is used | `number` | `0` | no | -| [number\_of\_computed\_ingress\_with\_ipv6\_cidr\_blocks](#input\_number\_of\_computed\_ingress\_with\_ipv6\_cidr\_blocks) | Number of computed ingress rules to create where 'ipv6\_cidr\_blocks' is used | `number` | `0` | no | -| [number\_of\_computed\_ingress\_with\_prefix\_list\_ids](#input\_number\_of\_computed\_ingress\_with\_prefix\_list\_ids) | Number of computed ingress rules to create where 'prefix\_list\_ids' is used | `number` | `0` | no | +| [number\_of\_computed\_ingress\_with\_cidr\_ipv4](#input\_number\_of\_computed\_ingress\_with\_cidr\_ipv4) | Number of computed ingress rules to create where 'cidr\_ipv4' is used | `number` | `0` | no | +| [number\_of\_computed\_ingress\_with\_cidr\_ipv6](#input\_number\_of\_computed\_ingress\_with\_cidr\_ipv6) | Number of computed ingress rules to create where 'ipv6\_cidr\_blocks' is used | `number` | `0` | no | +| [number\_of\_computed\_ingress\_with\_prefix\_list\_id](#input\_number\_of\_computed\_ingress\_with\_prefix\_list\_id) | Number of computed ingress rules to create where 'prefix\_list\_id' is used | `number` | `0` | no | +| [number\_of\_computed\_ingress\_with\_referenced\_security\_group\_id](#input\_number\_of\_computed\_ingress\_with\_referenced\_security\_group\_id) | Number of computed ingress rules to create where 'source\_security\_group\_id' is used | `number` | `0` | no | | [number\_of\_computed\_ingress\_with\_self](#input\_number\_of\_computed\_ingress\_with\_self) | Number of computed ingress rules to create where 'self' is defined | `number` | `0` | no | -| [number\_of\_computed\_ingress\_with\_source\_security\_group\_id](#input\_number\_of\_computed\_ingress\_with\_source\_security\_group\_id) | Number of computed ingress rules to create where 'source\_security\_group\_id' is used | `number` | `0` | no | | [revoke\_rules\_on\_delete](#input\_revoke\_rules\_on\_delete) | Instruct Terraform to revoke all of the Security Groups attached ingress and egress rules before deleting the rule itself. Enable for EMR. | `bool` | `false` | no | | [tags](#input\_tags) | A mapping of tags to assign to security group | `map(string)` | `{}` | no | | [use\_name\_prefix](#input\_use\_name\_prefix) | Whether to use name\_prefix or fixed name. Should be true to able to update security group name after initial creation | `bool` | `true` | no | diff --git a/modules/loki/main.tf b/modules/loki/main.tf index 80ea0adb..d2a1bf93 100644 --- a/modules/loki/main.tf +++ b/modules/loki/main.tf @@ -19,20 +19,20 @@ module "sg" { ingress_with_self = concat(var.auto_ingress_with_self, var.ingress_with_self) # Open to IPv4 cidr blocks - ingress_with_cidr_blocks = var.ingress_with_cidr_blocks + ingress_with_cidr_ipv4 = var.ingress_with_cidr_ipv4 # Open to IPv6 cidr blocks - ingress_with_ipv6_cidr_blocks = var.ingress_with_ipv6_cidr_blocks + ingress_with_cidr_ipv6 = var.ingress_with_cidr_ipv6 # Open for security group id - ingress_with_source_security_group_id = var.ingress_with_source_security_group_id + ingress_with_referenced_security_group_id = var.ingress_with_referenced_security_group_id # Open for prefix list id - ingress_with_prefix_list_ids = var.ingress_with_prefix_list_ids + ingress_with_prefix_list_id = var.ingress_with_prefix_list_id # Default ingress CIDR blocks - ingress_cidr_blocks = var.ingress_cidr_blocks - ingress_ipv6_cidr_blocks = var.ingress_ipv6_cidr_blocks + ingress_cidr_ipv4 = var.ingress_cidr_ipv4 + ingress_cidr_ipv6 = var.ingress_cidr_ipv6 # Default prefix list ids ingress_prefix_list_ids = var.ingress_prefix_list_ids @@ -47,26 +47,26 @@ module "sg" { computed_ingress_with_self = concat(var.auto_computed_ingress_with_self, var.computed_ingress_with_self) # Open to IPv4 cidr blocks - computed_ingress_with_cidr_blocks = var.computed_ingress_with_cidr_blocks + computed_ingress_with_cidr_ipv4 = var.computed_ingress_with_cidr_ipv4 # Open to IPv6 cidr blocks - computed_ingress_with_ipv6_cidr_blocks = var.computed_ingress_with_ipv6_cidr_blocks + computed_ingress_with_cidr_ipv6 = var.computed_ingress_with_cidr_ipv6 # Open for security group id - computed_ingress_with_source_security_group_id = var.computed_ingress_with_source_security_group_id + computed_ingress_with_referenced_security_group_id = var.computed_ingress_with_referenced_security_group_id # Open for prefix list id - computed_ingress_with_prefix_list_ids = var.computed_ingress_with_prefix_list_ids + computed_ingress_with_prefix_list_id = var.computed_ingress_with_prefix_list_id ############################# # Number of computed ingress ############################# - number_of_computed_ingress_rules = var.auto_number_of_computed_ingress_rules + var.number_of_computed_ingress_rules - number_of_computed_ingress_with_self = var.auto_number_of_computed_ingress_with_self + var.number_of_computed_ingress_with_self - number_of_computed_ingress_with_cidr_blocks = var.number_of_computed_ingress_with_cidr_blocks - number_of_computed_ingress_with_ipv6_cidr_blocks = var.number_of_computed_ingress_with_ipv6_cidr_blocks - number_of_computed_ingress_with_source_security_group_id = var.number_of_computed_ingress_with_source_security_group_id - number_of_computed_ingress_with_prefix_list_ids = var.number_of_computed_ingress_with_prefix_list_ids + number_of_computed_ingress_rules = var.auto_number_of_computed_ingress_rules + var.number_of_computed_ingress_rules + number_of_computed_ingress_with_self = var.auto_number_of_computed_ingress_with_self + var.number_of_computed_ingress_with_self + number_of_computed_ingress_with_cidr_ipv4 = var.number_of_computed_ingress_with_cidr_ipv4 + number_of_computed_ingress_with_cidr_ipv6 = var.number_of_computed_ingress_with_cidr_ipv6 + number_of_computed_ingress_with_referenced_security_group_id = var.number_of_computed_ingress_with_referenced_security_group_id + number_of_computed_ingress_with_prefix_list_id = var.number_of_computed_ingress_with_prefix_list_id ######### # Egress @@ -78,20 +78,20 @@ module "sg" { egress_with_self = concat(var.auto_egress_with_self, var.egress_with_self) # Open to IPv4 cidr blocks - egress_with_cidr_blocks = var.egress_with_cidr_blocks + egress_with_cidr_ipv4 = var.egress_with_cidr_ipv4 # Open to IPv6 cidr blocks - egress_with_ipv6_cidr_blocks = var.egress_with_ipv6_cidr_blocks + egress_with_cidr_ipv6 = var.egress_with_cidr_ipv6 # Open for security group id - egress_with_source_security_group_id = var.egress_with_source_security_group_id + egress_with_referenced_security_group_id = var.egress_with_referenced_security_group_id # Open for prefix list id - egress_with_prefix_list_ids = var.egress_with_prefix_list_ids + egress_with_prefix_list_id = var.egress_with_prefix_list_id # Default egress CIDR blocks - egress_cidr_blocks = var.egress_cidr_blocks - egress_ipv6_cidr_blocks = var.egress_ipv6_cidr_blocks + egress_cidr_ipv4 = var.egress_cidr_ipv4 + egress_cidr_ipv6 = var.egress_cidr_ipv6 # Default prefix list ids egress_prefix_list_ids = var.egress_prefix_list_ids @@ -106,24 +106,24 @@ module "sg" { computed_egress_with_self = concat(var.auto_computed_egress_with_self, var.computed_egress_with_self) # Open to IPv4 cidr blocks - computed_egress_with_cidr_blocks = var.computed_egress_with_cidr_blocks + computed_egress_with_cidr_ipv4 = var.computed_egress_with_cidr_ipv4 # Open to IPv6 cidr blocks - computed_egress_with_ipv6_cidr_blocks = var.computed_egress_with_ipv6_cidr_blocks + computed_egress_with_cidr_ipv6 = var.computed_egress_with_cidr_ipv6 # Open for security group id - computed_egress_with_source_security_group_id = var.computed_egress_with_source_security_group_id + computed_egress_with_referenced_security_group_id = var.computed_egress_with_referenced_security_group_id # Open for prefix list id - computed_egress_with_prefix_list_ids = var.computed_egress_with_prefix_list_ids + computed_egress_with_prefix_list_id = var.computed_egress_with_prefix_list_id ############################# # Number of computed egress ############################# - number_of_computed_egress_rules = var.auto_number_of_computed_egress_rules + var.number_of_computed_egress_rules - number_of_computed_egress_with_self = var.auto_number_of_computed_egress_with_self + var.number_of_computed_egress_with_self - number_of_computed_egress_with_cidr_blocks = var.number_of_computed_egress_with_cidr_blocks - number_of_computed_egress_with_ipv6_cidr_blocks = var.number_of_computed_egress_with_ipv6_cidr_blocks - number_of_computed_egress_with_source_security_group_id = var.number_of_computed_egress_with_source_security_group_id - number_of_computed_egress_with_prefix_list_ids = var.number_of_computed_egress_with_prefix_list_ids + number_of_computed_egress_rules = var.auto_number_of_computed_egress_rules + var.number_of_computed_egress_rules + number_of_computed_egress_with_self = var.auto_number_of_computed_egress_with_self + var.number_of_computed_egress_with_self + number_of_computed_egress_with_cidr_ipv4 = var.number_of_computed_egress_with_cidr_ipv4 + number_of_computed_egress_with_cidr_ipv6 = var.number_of_computed_egress_with_cidr_ipv6 + number_of_computed_egress_with_referenced_security_group_id = var.number_of_computed_egress_with_referenced_security_group_id + number_of_computed_egress_with_prefix_list_id = var.number_of_computed_egress_with_prefix_list_id } diff --git a/modules/loki/variables.tf b/modules/loki/variables.tf index 60c8c27b..6590c9e3 100644 --- a/modules/loki/variables.tf +++ b/modules/loki/variables.tf @@ -56,37 +56,37 @@ variable "ingress_with_self" { default = [] } -variable "ingress_with_cidr_blocks" { - description = "List of ingress rules to create where 'cidr_blocks' is used" +variable "ingress_with_cidr_ipv4" { + description = "List of ingress rules to create where 'cidr_ipv4' is used" type = list(map(string)) default = [] } -variable "ingress_with_ipv6_cidr_blocks" { +variable "ingress_with_cidr_ipv6" { description = "List of ingress rules to create where 'ipv6_cidr_blocks' is used" type = list(map(string)) default = [] } -variable "ingress_with_source_security_group_id" { +variable "ingress_with_referenced_security_group_id" { description = "List of ingress rules to create where 'source_security_group_id' is used" type = list(map(string)) default = [] } -variable "ingress_with_prefix_list_ids" { - description = "List of ingress rules to create where 'prefix_list_ids' is used" +variable "ingress_with_prefix_list_id" { + description = "List of ingress rules to create where 'prefix_list_id' is used" type = list(map(string)) default = [] } -variable "ingress_cidr_blocks" { +variable "ingress_cidr_ipv4" { description = "List of IPv4 CIDR ranges to use on all ingress rules" type = list(string) default = [] } -variable "ingress_ipv6_cidr_blocks" { +variable "ingress_cidr_ipv6" { description = "List of IPv6 CIDR ranges to use on all ingress rules" type = list(string) default = [] @@ -113,26 +113,26 @@ variable "computed_ingress_with_self" { default = [] } -variable "computed_ingress_with_cidr_blocks" { - description = "List of computed ingress rules to create where 'cidr_blocks' is used" +variable "computed_ingress_with_cidr_ipv4" { + description = "List of computed ingress rules to create where 'cidr_ipv4' is used" type = list(map(string)) default = [] } -variable "computed_ingress_with_ipv6_cidr_blocks" { +variable "computed_ingress_with_cidr_ipv6" { description = "List of computed ingress rules to create where 'ipv6_cidr_blocks' is used" type = list(map(string)) default = [] } -variable "computed_ingress_with_source_security_group_id" { +variable "computed_ingress_with_referenced_security_group_id" { description = "List of computed ingress rules to create where 'source_security_group_id' is used" type = list(map(string)) default = [] } -variable "computed_ingress_with_prefix_list_ids" { - description = "List of computed ingress rules to create where 'prefix_list_ids' is used" +variable "computed_ingress_with_prefix_list_id" { + description = "List of computed ingress rules to create where 'prefix_list_id' is used" type = list(map(string)) default = [] } @@ -170,26 +170,26 @@ variable "number_of_computed_ingress_with_self" { default = 0 } -variable "number_of_computed_ingress_with_cidr_blocks" { - description = "Number of computed ingress rules to create where 'cidr_blocks' is used" +variable "number_of_computed_ingress_with_cidr_ipv4" { + description = "Number of computed ingress rules to create where 'cidr_ipv4' is used" type = number default = 0 } -variable "number_of_computed_ingress_with_ipv6_cidr_blocks" { +variable "number_of_computed_ingress_with_cidr_ipv6" { description = "Number of computed ingress rules to create where 'ipv6_cidr_blocks' is used" type = number default = 0 } -variable "number_of_computed_ingress_with_source_security_group_id" { +variable "number_of_computed_ingress_with_referenced_security_group_id" { description = "Number of computed ingress rules to create where 'source_security_group_id' is used" type = number default = 0 } -variable "number_of_computed_ingress_with_prefix_list_ids" { - description = "Number of computed ingress rules to create where 'prefix_list_ids' is used" +variable "number_of_computed_ingress_with_prefix_list_id" { + description = "Number of computed ingress rules to create where 'prefix_list_id' is used" type = number default = 0 } @@ -227,37 +227,37 @@ variable "egress_with_self" { default = [] } -variable "egress_with_cidr_blocks" { - description = "List of egress rules to create where 'cidr_blocks' is used" +variable "egress_with_cidr_ipv4" { + description = "List of egress rules to create where 'cidr_ipv4' is used" type = list(map(string)) default = [] } -variable "egress_with_ipv6_cidr_blocks" { +variable "egress_with_cidr_ipv6" { description = "List of egress rules to create where 'ipv6_cidr_blocks' is used" type = list(map(string)) default = [] } -variable "egress_with_source_security_group_id" { +variable "egress_with_referenced_security_group_id" { description = "List of egress rules to create where 'source_security_group_id' is used" type = list(map(string)) default = [] } -variable "egress_with_prefix_list_ids" { - description = "List of egress rules to create where 'prefix_list_ids' is used" +variable "egress_with_prefix_list_id" { + description = "List of egress rules to create where 'prefix_list_id' is used" type = list(map(string)) default = [] } -variable "egress_cidr_blocks" { +variable "egress_cidr_ipv4" { description = "List of IPv4 CIDR ranges to use on all egress rules" type = list(string) default = ["0.0.0.0/0"] } -variable "egress_ipv6_cidr_blocks" { +variable "egress_cidr_ipv6" { description = "List of IPv6 CIDR ranges to use on all egress rules" type = list(string) default = ["::/0"] @@ -284,26 +284,26 @@ variable "computed_egress_with_self" { default = [] } -variable "computed_egress_with_cidr_blocks" { - description = "List of computed egress rules to create where 'cidr_blocks' is used" +variable "computed_egress_with_cidr_ipv4" { + description = "List of computed egress rules to create where 'cidr_ipv4' is used" type = list(map(string)) default = [] } -variable "computed_egress_with_ipv6_cidr_blocks" { +variable "computed_egress_with_cidr_ipv6" { description = "List of computed egress rules to create where 'ipv6_cidr_blocks' is used" type = list(map(string)) default = [] } -variable "computed_egress_with_source_security_group_id" { +variable "computed_egress_with_referenced_security_group_id" { description = "List of computed egress rules to create where 'source_security_group_id' is used" type = list(map(string)) default = [] } -variable "computed_egress_with_prefix_list_ids" { - description = "List of computed egress rules to create where 'prefix_list_ids' is used" +variable "computed_egress_with_prefix_list_id" { + description = "List of computed egress rules to create where 'prefix_list_id' is used" type = list(map(string)) default = [] } @@ -341,26 +341,26 @@ variable "number_of_computed_egress_with_self" { default = 0 } -variable "number_of_computed_egress_with_cidr_blocks" { - description = "Number of computed egress rules to create where 'cidr_blocks' is used" +variable "number_of_computed_egress_with_cidr_ipv4" { + description = "Number of computed egress rules to create where 'cidr_ipv4' is used" type = number default = 0 } -variable "number_of_computed_egress_with_ipv6_cidr_blocks" { +variable "number_of_computed_egress_with_cidr_ipv6" { description = "Number of computed egress rules to create where 'ipv6_cidr_blocks' is used" type = number default = 0 } -variable "number_of_computed_egress_with_source_security_group_id" { +variable "number_of_computed_egress_with_referenced_security_group_id" { description = "Number of computed egress rules to create where 'source_security_group_id' is used" type = number default = 0 } -variable "number_of_computed_egress_with_prefix_list_ids" { - description = "Number of computed egress rules to create where 'prefix_list_ids' is used" +variable "number_of_computed_egress_with_prefix_list_id" { + description = "Number of computed egress rules to create where 'prefix_list_id' is used" type = number default = 0 } diff --git a/modules/memcached/README.md b/modules/memcached/README.md index fc39b004..45cc6e41 100644 --- a/modules/memcached/README.md +++ b/modules/memcached/README.md @@ -55,59 +55,59 @@ No resources. | [computed\_egress\_ipv6\_cidr\_blocks](#input\_computed\_egress\_ipv6\_cidr\_blocks) | List of IPv6 CIDR ranges to use on all computed egress rules | `list(string)` |
[
"::/0"
]
| no | | [computed\_egress\_prefix\_list\_ids](#input\_computed\_egress\_prefix\_list\_ids) | List of prefix list IDs (for allowing access to VPC endpoints) to use on all computed egress rules | `list(string)` | `[]` | no | | [computed\_egress\_rules](#input\_computed\_egress\_rules) | List of computed egress rules to create by name | `list(string)` | `[]` | no | -| [computed\_egress\_with\_cidr\_blocks](#input\_computed\_egress\_with\_cidr\_blocks) | List of computed egress rules to create where 'cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [computed\_egress\_with\_ipv6\_cidr\_blocks](#input\_computed\_egress\_with\_ipv6\_cidr\_blocks) | List of computed egress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [computed\_egress\_with\_prefix\_list\_ids](#input\_computed\_egress\_with\_prefix\_list\_ids) | List of computed egress rules to create where 'prefix\_list\_ids' is used | `list(map(string))` | `[]` | no | +| [computed\_egress\_with\_cidr\_ipv4](#input\_computed\_egress\_with\_cidr\_ipv4) | List of computed egress rules to create where 'cidr\_ipv4' is used | `list(map(string))` | `[]` | no | +| [computed\_egress\_with\_cidr\_ipv6](#input\_computed\_egress\_with\_cidr\_ipv6) | List of computed egress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | +| [computed\_egress\_with\_prefix\_list\_id](#input\_computed\_egress\_with\_prefix\_list\_id) | List of computed egress rules to create where 'prefix\_list\_id' is used | `list(map(string))` | `[]` | no | +| [computed\_egress\_with\_referenced\_security\_group\_id](#input\_computed\_egress\_with\_referenced\_security\_group\_id) | List of computed egress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [computed\_egress\_with\_self](#input\_computed\_egress\_with\_self) | List of computed egress rules to create where 'self' is defined | `list(map(string))` | `[]` | no | -| [computed\_egress\_with\_source\_security\_group\_id](#input\_computed\_egress\_with\_source\_security\_group\_id) | List of computed egress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [computed\_ingress\_cidr\_blocks](#input\_computed\_ingress\_cidr\_blocks) | List of IPv4 CIDR ranges to use on all computed ingress rules | `list(string)` | `[]` | no | | [computed\_ingress\_ipv6\_cidr\_blocks](#input\_computed\_ingress\_ipv6\_cidr\_blocks) | List of IPv6 CIDR ranges to use on all computed ingress rules | `list(string)` | `[]` | no | | [computed\_ingress\_prefix\_list\_ids](#input\_computed\_ingress\_prefix\_list\_ids) | List of prefix list IDs (for allowing access to VPC endpoints) to use on all computed ingress rules | `list(string)` | `[]` | no | | [computed\_ingress\_rules](#input\_computed\_ingress\_rules) | List of computed ingress rules to create by name | `list(string)` | `[]` | no | -| [computed\_ingress\_with\_cidr\_blocks](#input\_computed\_ingress\_with\_cidr\_blocks) | List of computed ingress rules to create where 'cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [computed\_ingress\_with\_ipv6\_cidr\_blocks](#input\_computed\_ingress\_with\_ipv6\_cidr\_blocks) | List of computed ingress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [computed\_ingress\_with\_prefix\_list\_ids](#input\_computed\_ingress\_with\_prefix\_list\_ids) | List of computed ingress rules to create where 'prefix\_list\_ids' is used | `list(map(string))` | `[]` | no | +| [computed\_ingress\_with\_cidr\_ipv4](#input\_computed\_ingress\_with\_cidr\_ipv4) | List of computed ingress rules to create where 'cidr\_ipv4' is used | `list(map(string))` | `[]` | no | +| [computed\_ingress\_with\_cidr\_ipv6](#input\_computed\_ingress\_with\_cidr\_ipv6) | List of computed ingress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | +| [computed\_ingress\_with\_prefix\_list\_id](#input\_computed\_ingress\_with\_prefix\_list\_id) | List of computed ingress rules to create where 'prefix\_list\_id' is used | `list(map(string))` | `[]` | no | +| [computed\_ingress\_with\_referenced\_security\_group\_id](#input\_computed\_ingress\_with\_referenced\_security\_group\_id) | List of computed ingress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [computed\_ingress\_with\_self](#input\_computed\_ingress\_with\_self) | List of computed ingress rules to create where 'self' is defined | `list(map(string))` | `[]` | no | -| [computed\_ingress\_with\_source\_security\_group\_id](#input\_computed\_ingress\_with\_source\_security\_group\_id) | List of computed ingress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [create](#input\_create) | Whether to create security group and all rules | `bool` | `true` | no | | [description](#input\_description) | Description of security group | `string` | `"Security Group managed by Terraform"` | no | -| [egress\_cidr\_blocks](#input\_egress\_cidr\_blocks) | List of IPv4 CIDR ranges to use on all egress rules | `list(string)` |
[
"0.0.0.0/0"
]
| no | -| [egress\_ipv6\_cidr\_blocks](#input\_egress\_ipv6\_cidr\_blocks) | List of IPv6 CIDR ranges to use on all egress rules | `list(string)` |
[
"::/0"
]
| no | +| [egress\_cidr\_ipv4](#input\_egress\_cidr\_ipv4) | List of IPv4 CIDR ranges to use on all egress rules | `list(string)` |
[
"0.0.0.0/0"
]
| no | +| [egress\_cidr\_ipv6](#input\_egress\_cidr\_ipv6) | List of IPv6 CIDR ranges to use on all egress rules | `list(string)` |
[
"::/0"
]
| no | | [egress\_prefix\_list\_ids](#input\_egress\_prefix\_list\_ids) | List of prefix list IDs (for allowing access to VPC endpoints) to use on all egress rules | `list(string)` | `[]` | no | | [egress\_rules](#input\_egress\_rules) | List of egress rules to create by name | `list(string)` | `[]` | no | -| [egress\_with\_cidr\_blocks](#input\_egress\_with\_cidr\_blocks) | List of egress rules to create where 'cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [egress\_with\_ipv6\_cidr\_blocks](#input\_egress\_with\_ipv6\_cidr\_blocks) | List of egress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [egress\_with\_prefix\_list\_ids](#input\_egress\_with\_prefix\_list\_ids) | List of egress rules to create where 'prefix\_list\_ids' is used | `list(map(string))` | `[]` | no | +| [egress\_with\_cidr\_ipv4](#input\_egress\_with\_cidr\_ipv4) | List of egress rules to create where 'cidr\_ipv4' is used | `list(map(string))` | `[]` | no | +| [egress\_with\_cidr\_ipv6](#input\_egress\_with\_cidr\_ipv6) | List of egress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | +| [egress\_with\_prefix\_list\_id](#input\_egress\_with\_prefix\_list\_id) | List of egress rules to create where 'prefix\_list\_id' is used | `list(map(string))` | `[]` | no | +| [egress\_with\_referenced\_security\_group\_id](#input\_egress\_with\_referenced\_security\_group\_id) | List of egress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [egress\_with\_self](#input\_egress\_with\_self) | List of egress rules to create where 'self' is defined | `list(map(string))` | `[]` | no | -| [egress\_with\_source\_security\_group\_id](#input\_egress\_with\_source\_security\_group\_id) | List of egress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | -| [ingress\_cidr\_blocks](#input\_ingress\_cidr\_blocks) | List of IPv4 CIDR ranges to use on all ingress rules | `list(string)` | `[]` | no | -| [ingress\_ipv6\_cidr\_blocks](#input\_ingress\_ipv6\_cidr\_blocks) | List of IPv6 CIDR ranges to use on all ingress rules | `list(string)` | `[]` | no | +| [ingress\_cidr\_ipv4](#input\_ingress\_cidr\_ipv4) | List of IPv4 CIDR ranges to use on all ingress rules | `list(string)` | `[]` | no | +| [ingress\_cidr\_ipv6](#input\_ingress\_cidr\_ipv6) | List of IPv6 CIDR ranges to use on all ingress rules | `list(string)` | `[]` | no | | [ingress\_prefix\_list\_ids](#input\_ingress\_prefix\_list\_ids) | List of prefix list IDs (for allowing access to VPC endpoints) to use on all ingress rules | `list(string)` | `[]` | no | | [ingress\_rules](#input\_ingress\_rules) | List of ingress rules to create by name | `list(string)` | `[]` | no | -| [ingress\_with\_cidr\_blocks](#input\_ingress\_with\_cidr\_blocks) | List of ingress rules to create where 'cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [ingress\_with\_ipv6\_cidr\_blocks](#input\_ingress\_with\_ipv6\_cidr\_blocks) | List of ingress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [ingress\_with\_prefix\_list\_ids](#input\_ingress\_with\_prefix\_list\_ids) | List of ingress rules to create where 'prefix\_list\_ids' is used | `list(map(string))` | `[]` | no | +| [ingress\_with\_cidr\_ipv4](#input\_ingress\_with\_cidr\_ipv4) | List of ingress rules to create where 'cidr\_ipv4' is used | `list(map(string))` | `[]` | no | +| [ingress\_with\_cidr\_ipv6](#input\_ingress\_with\_cidr\_ipv6) | List of ingress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | +| [ingress\_with\_prefix\_list\_id](#input\_ingress\_with\_prefix\_list\_id) | List of ingress rules to create where 'prefix\_list\_id' is used | `list(map(string))` | `[]` | no | +| [ingress\_with\_referenced\_security\_group\_id](#input\_ingress\_with\_referenced\_security\_group\_id) | List of ingress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [ingress\_with\_self](#input\_ingress\_with\_self) | List of ingress rules to create where 'self' is defined | `list(map(string))` | `[]` | no | -| [ingress\_with\_source\_security\_group\_id](#input\_ingress\_with\_source\_security\_group\_id) | List of ingress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [name](#input\_name) | Name of security group | `string` | n/a | yes | | [number\_of\_computed\_egress\_cidr\_blocks](#input\_number\_of\_computed\_egress\_cidr\_blocks) | Number of IPv4 CIDR ranges to use on all computed egress rules | `number` | `0` | no | | [number\_of\_computed\_egress\_ipv6\_cidr\_blocks](#input\_number\_of\_computed\_egress\_ipv6\_cidr\_blocks) | Number of IPv6 CIDR ranges to use on all computed egress rules | `number` | `0` | no | | [number\_of\_computed\_egress\_prefix\_list\_ids](#input\_number\_of\_computed\_egress\_prefix\_list\_ids) | Number of prefix list IDs (for allowing access to VPC endpoints) to use on all computed egress rules | `number` | `0` | no | | [number\_of\_computed\_egress\_rules](#input\_number\_of\_computed\_egress\_rules) | Number of computed egress rules to create by name | `number` | `0` | no | -| [number\_of\_computed\_egress\_with\_cidr\_blocks](#input\_number\_of\_computed\_egress\_with\_cidr\_blocks) | Number of computed egress rules to create where 'cidr\_blocks' is used | `number` | `0` | no | -| [number\_of\_computed\_egress\_with\_ipv6\_cidr\_blocks](#input\_number\_of\_computed\_egress\_with\_ipv6\_cidr\_blocks) | Number of computed egress rules to create where 'ipv6\_cidr\_blocks' is used | `number` | `0` | no | -| [number\_of\_computed\_egress\_with\_prefix\_list\_ids](#input\_number\_of\_computed\_egress\_with\_prefix\_list\_ids) | Number of computed egress rules to create where 'prefix\_list\_ids' is used | `number` | `0` | no | +| [number\_of\_computed\_egress\_with\_cidr\_ipv4](#input\_number\_of\_computed\_egress\_with\_cidr\_ipv4) | Number of computed egress rules to create where 'cidr\_ipv4' is used | `number` | `0` | no | +| [number\_of\_computed\_egress\_with\_cidr\_ipv6](#input\_number\_of\_computed\_egress\_with\_cidr\_ipv6) | Number of computed egress rules to create where 'ipv6\_cidr\_blocks' is used | `number` | `0` | no | +| [number\_of\_computed\_egress\_with\_prefix\_list\_id](#input\_number\_of\_computed\_egress\_with\_prefix\_list\_id) | Number of computed egress rules to create where 'prefix\_list\_id' is used | `number` | `0` | no | +| [number\_of\_computed\_egress\_with\_referenced\_security\_group\_id](#input\_number\_of\_computed\_egress\_with\_referenced\_security\_group\_id) | Number of computed egress rules to create where 'source\_security\_group\_id' is used | `number` | `0` | no | | [number\_of\_computed\_egress\_with\_self](#input\_number\_of\_computed\_egress\_with\_self) | Number of computed egress rules to create where 'self' is defined | `number` | `0` | no | -| [number\_of\_computed\_egress\_with\_source\_security\_group\_id](#input\_number\_of\_computed\_egress\_with\_source\_security\_group\_id) | Number of computed egress rules to create where 'source\_security\_group\_id' is used | `number` | `0` | no | | [number\_of\_computed\_ingress\_cidr\_blocks](#input\_number\_of\_computed\_ingress\_cidr\_blocks) | Number of IPv4 CIDR ranges to use on all computed ingress rules | `number` | `0` | no | | [number\_of\_computed\_ingress\_ipv6\_cidr\_blocks](#input\_number\_of\_computed\_ingress\_ipv6\_cidr\_blocks) | Number of IPv6 CIDR ranges to use on all computed ingress rules | `number` | `0` | no | | [number\_of\_computed\_ingress\_prefix\_list\_ids](#input\_number\_of\_computed\_ingress\_prefix\_list\_ids) | Number of prefix list IDs (for allowing access to VPC endpoints) to use on all computed ingress rules | `number` | `0` | no | | [number\_of\_computed\_ingress\_rules](#input\_number\_of\_computed\_ingress\_rules) | Number of computed ingress rules to create by name | `number` | `0` | no | -| [number\_of\_computed\_ingress\_with\_cidr\_blocks](#input\_number\_of\_computed\_ingress\_with\_cidr\_blocks) | Number of computed ingress rules to create where 'cidr\_blocks' is used | `number` | `0` | no | -| [number\_of\_computed\_ingress\_with\_ipv6\_cidr\_blocks](#input\_number\_of\_computed\_ingress\_with\_ipv6\_cidr\_blocks) | Number of computed ingress rules to create where 'ipv6\_cidr\_blocks' is used | `number` | `0` | no | -| [number\_of\_computed\_ingress\_with\_prefix\_list\_ids](#input\_number\_of\_computed\_ingress\_with\_prefix\_list\_ids) | Number of computed ingress rules to create where 'prefix\_list\_ids' is used | `number` | `0` | no | +| [number\_of\_computed\_ingress\_with\_cidr\_ipv4](#input\_number\_of\_computed\_ingress\_with\_cidr\_ipv4) | Number of computed ingress rules to create where 'cidr\_ipv4' is used | `number` | `0` | no | +| [number\_of\_computed\_ingress\_with\_cidr\_ipv6](#input\_number\_of\_computed\_ingress\_with\_cidr\_ipv6) | Number of computed ingress rules to create where 'ipv6\_cidr\_blocks' is used | `number` | `0` | no | +| [number\_of\_computed\_ingress\_with\_prefix\_list\_id](#input\_number\_of\_computed\_ingress\_with\_prefix\_list\_id) | Number of computed ingress rules to create where 'prefix\_list\_id' is used | `number` | `0` | no | +| [number\_of\_computed\_ingress\_with\_referenced\_security\_group\_id](#input\_number\_of\_computed\_ingress\_with\_referenced\_security\_group\_id) | Number of computed ingress rules to create where 'source\_security\_group\_id' is used | `number` | `0` | no | | [number\_of\_computed\_ingress\_with\_self](#input\_number\_of\_computed\_ingress\_with\_self) | Number of computed ingress rules to create where 'self' is defined | `number` | `0` | no | -| [number\_of\_computed\_ingress\_with\_source\_security\_group\_id](#input\_number\_of\_computed\_ingress\_with\_source\_security\_group\_id) | Number of computed ingress rules to create where 'source\_security\_group\_id' is used | `number` | `0` | no | | [revoke\_rules\_on\_delete](#input\_revoke\_rules\_on\_delete) | Instruct Terraform to revoke all of the Security Groups attached ingress and egress rules before deleting the rule itself. Enable for EMR. | `bool` | `false` | no | | [tags](#input\_tags) | A mapping of tags to assign to security group | `map(string)` | `{}` | no | | [use\_name\_prefix](#input\_use\_name\_prefix) | Whether to use name\_prefix or fixed name. Should be true to able to update security group name after initial creation | `bool` | `true` | no | diff --git a/modules/memcached/main.tf b/modules/memcached/main.tf index 80ea0adb..d2a1bf93 100644 --- a/modules/memcached/main.tf +++ b/modules/memcached/main.tf @@ -19,20 +19,20 @@ module "sg" { ingress_with_self = concat(var.auto_ingress_with_self, var.ingress_with_self) # Open to IPv4 cidr blocks - ingress_with_cidr_blocks = var.ingress_with_cidr_blocks + ingress_with_cidr_ipv4 = var.ingress_with_cidr_ipv4 # Open to IPv6 cidr blocks - ingress_with_ipv6_cidr_blocks = var.ingress_with_ipv6_cidr_blocks + ingress_with_cidr_ipv6 = var.ingress_with_cidr_ipv6 # Open for security group id - ingress_with_source_security_group_id = var.ingress_with_source_security_group_id + ingress_with_referenced_security_group_id = var.ingress_with_referenced_security_group_id # Open for prefix list id - ingress_with_prefix_list_ids = var.ingress_with_prefix_list_ids + ingress_with_prefix_list_id = var.ingress_with_prefix_list_id # Default ingress CIDR blocks - ingress_cidr_blocks = var.ingress_cidr_blocks - ingress_ipv6_cidr_blocks = var.ingress_ipv6_cidr_blocks + ingress_cidr_ipv4 = var.ingress_cidr_ipv4 + ingress_cidr_ipv6 = var.ingress_cidr_ipv6 # Default prefix list ids ingress_prefix_list_ids = var.ingress_prefix_list_ids @@ -47,26 +47,26 @@ module "sg" { computed_ingress_with_self = concat(var.auto_computed_ingress_with_self, var.computed_ingress_with_self) # Open to IPv4 cidr blocks - computed_ingress_with_cidr_blocks = var.computed_ingress_with_cidr_blocks + computed_ingress_with_cidr_ipv4 = var.computed_ingress_with_cidr_ipv4 # Open to IPv6 cidr blocks - computed_ingress_with_ipv6_cidr_blocks = var.computed_ingress_with_ipv6_cidr_blocks + computed_ingress_with_cidr_ipv6 = var.computed_ingress_with_cidr_ipv6 # Open for security group id - computed_ingress_with_source_security_group_id = var.computed_ingress_with_source_security_group_id + computed_ingress_with_referenced_security_group_id = var.computed_ingress_with_referenced_security_group_id # Open for prefix list id - computed_ingress_with_prefix_list_ids = var.computed_ingress_with_prefix_list_ids + computed_ingress_with_prefix_list_id = var.computed_ingress_with_prefix_list_id ############################# # Number of computed ingress ############################# - number_of_computed_ingress_rules = var.auto_number_of_computed_ingress_rules + var.number_of_computed_ingress_rules - number_of_computed_ingress_with_self = var.auto_number_of_computed_ingress_with_self + var.number_of_computed_ingress_with_self - number_of_computed_ingress_with_cidr_blocks = var.number_of_computed_ingress_with_cidr_blocks - number_of_computed_ingress_with_ipv6_cidr_blocks = var.number_of_computed_ingress_with_ipv6_cidr_blocks - number_of_computed_ingress_with_source_security_group_id = var.number_of_computed_ingress_with_source_security_group_id - number_of_computed_ingress_with_prefix_list_ids = var.number_of_computed_ingress_with_prefix_list_ids + number_of_computed_ingress_rules = var.auto_number_of_computed_ingress_rules + var.number_of_computed_ingress_rules + number_of_computed_ingress_with_self = var.auto_number_of_computed_ingress_with_self + var.number_of_computed_ingress_with_self + number_of_computed_ingress_with_cidr_ipv4 = var.number_of_computed_ingress_with_cidr_ipv4 + number_of_computed_ingress_with_cidr_ipv6 = var.number_of_computed_ingress_with_cidr_ipv6 + number_of_computed_ingress_with_referenced_security_group_id = var.number_of_computed_ingress_with_referenced_security_group_id + number_of_computed_ingress_with_prefix_list_id = var.number_of_computed_ingress_with_prefix_list_id ######### # Egress @@ -78,20 +78,20 @@ module "sg" { egress_with_self = concat(var.auto_egress_with_self, var.egress_with_self) # Open to IPv4 cidr blocks - egress_with_cidr_blocks = var.egress_with_cidr_blocks + egress_with_cidr_ipv4 = var.egress_with_cidr_ipv4 # Open to IPv6 cidr blocks - egress_with_ipv6_cidr_blocks = var.egress_with_ipv6_cidr_blocks + egress_with_cidr_ipv6 = var.egress_with_cidr_ipv6 # Open for security group id - egress_with_source_security_group_id = var.egress_with_source_security_group_id + egress_with_referenced_security_group_id = var.egress_with_referenced_security_group_id # Open for prefix list id - egress_with_prefix_list_ids = var.egress_with_prefix_list_ids + egress_with_prefix_list_id = var.egress_with_prefix_list_id # Default egress CIDR blocks - egress_cidr_blocks = var.egress_cidr_blocks - egress_ipv6_cidr_blocks = var.egress_ipv6_cidr_blocks + egress_cidr_ipv4 = var.egress_cidr_ipv4 + egress_cidr_ipv6 = var.egress_cidr_ipv6 # Default prefix list ids egress_prefix_list_ids = var.egress_prefix_list_ids @@ -106,24 +106,24 @@ module "sg" { computed_egress_with_self = concat(var.auto_computed_egress_with_self, var.computed_egress_with_self) # Open to IPv4 cidr blocks - computed_egress_with_cidr_blocks = var.computed_egress_with_cidr_blocks + computed_egress_with_cidr_ipv4 = var.computed_egress_with_cidr_ipv4 # Open to IPv6 cidr blocks - computed_egress_with_ipv6_cidr_blocks = var.computed_egress_with_ipv6_cidr_blocks + computed_egress_with_cidr_ipv6 = var.computed_egress_with_cidr_ipv6 # Open for security group id - computed_egress_with_source_security_group_id = var.computed_egress_with_source_security_group_id + computed_egress_with_referenced_security_group_id = var.computed_egress_with_referenced_security_group_id # Open for prefix list id - computed_egress_with_prefix_list_ids = var.computed_egress_with_prefix_list_ids + computed_egress_with_prefix_list_id = var.computed_egress_with_prefix_list_id ############################# # Number of computed egress ############################# - number_of_computed_egress_rules = var.auto_number_of_computed_egress_rules + var.number_of_computed_egress_rules - number_of_computed_egress_with_self = var.auto_number_of_computed_egress_with_self + var.number_of_computed_egress_with_self - number_of_computed_egress_with_cidr_blocks = var.number_of_computed_egress_with_cidr_blocks - number_of_computed_egress_with_ipv6_cidr_blocks = var.number_of_computed_egress_with_ipv6_cidr_blocks - number_of_computed_egress_with_source_security_group_id = var.number_of_computed_egress_with_source_security_group_id - number_of_computed_egress_with_prefix_list_ids = var.number_of_computed_egress_with_prefix_list_ids + number_of_computed_egress_rules = var.auto_number_of_computed_egress_rules + var.number_of_computed_egress_rules + number_of_computed_egress_with_self = var.auto_number_of_computed_egress_with_self + var.number_of_computed_egress_with_self + number_of_computed_egress_with_cidr_ipv4 = var.number_of_computed_egress_with_cidr_ipv4 + number_of_computed_egress_with_cidr_ipv6 = var.number_of_computed_egress_with_cidr_ipv6 + number_of_computed_egress_with_referenced_security_group_id = var.number_of_computed_egress_with_referenced_security_group_id + number_of_computed_egress_with_prefix_list_id = var.number_of_computed_egress_with_prefix_list_id } diff --git a/modules/memcached/variables.tf b/modules/memcached/variables.tf index 60c8c27b..6590c9e3 100644 --- a/modules/memcached/variables.tf +++ b/modules/memcached/variables.tf @@ -56,37 +56,37 @@ variable "ingress_with_self" { default = [] } -variable "ingress_with_cidr_blocks" { - description = "List of ingress rules to create where 'cidr_blocks' is used" +variable "ingress_with_cidr_ipv4" { + description = "List of ingress rules to create where 'cidr_ipv4' is used" type = list(map(string)) default = [] } -variable "ingress_with_ipv6_cidr_blocks" { +variable "ingress_with_cidr_ipv6" { description = "List of ingress rules to create where 'ipv6_cidr_blocks' is used" type = list(map(string)) default = [] } -variable "ingress_with_source_security_group_id" { +variable "ingress_with_referenced_security_group_id" { description = "List of ingress rules to create where 'source_security_group_id' is used" type = list(map(string)) default = [] } -variable "ingress_with_prefix_list_ids" { - description = "List of ingress rules to create where 'prefix_list_ids' is used" +variable "ingress_with_prefix_list_id" { + description = "List of ingress rules to create where 'prefix_list_id' is used" type = list(map(string)) default = [] } -variable "ingress_cidr_blocks" { +variable "ingress_cidr_ipv4" { description = "List of IPv4 CIDR ranges to use on all ingress rules" type = list(string) default = [] } -variable "ingress_ipv6_cidr_blocks" { +variable "ingress_cidr_ipv6" { description = "List of IPv6 CIDR ranges to use on all ingress rules" type = list(string) default = [] @@ -113,26 +113,26 @@ variable "computed_ingress_with_self" { default = [] } -variable "computed_ingress_with_cidr_blocks" { - description = "List of computed ingress rules to create where 'cidr_blocks' is used" +variable "computed_ingress_with_cidr_ipv4" { + description = "List of computed ingress rules to create where 'cidr_ipv4' is used" type = list(map(string)) default = [] } -variable "computed_ingress_with_ipv6_cidr_blocks" { +variable "computed_ingress_with_cidr_ipv6" { description = "List of computed ingress rules to create where 'ipv6_cidr_blocks' is used" type = list(map(string)) default = [] } -variable "computed_ingress_with_source_security_group_id" { +variable "computed_ingress_with_referenced_security_group_id" { description = "List of computed ingress rules to create where 'source_security_group_id' is used" type = list(map(string)) default = [] } -variable "computed_ingress_with_prefix_list_ids" { - description = "List of computed ingress rules to create where 'prefix_list_ids' is used" +variable "computed_ingress_with_prefix_list_id" { + description = "List of computed ingress rules to create where 'prefix_list_id' is used" type = list(map(string)) default = [] } @@ -170,26 +170,26 @@ variable "number_of_computed_ingress_with_self" { default = 0 } -variable "number_of_computed_ingress_with_cidr_blocks" { - description = "Number of computed ingress rules to create where 'cidr_blocks' is used" +variable "number_of_computed_ingress_with_cidr_ipv4" { + description = "Number of computed ingress rules to create where 'cidr_ipv4' is used" type = number default = 0 } -variable "number_of_computed_ingress_with_ipv6_cidr_blocks" { +variable "number_of_computed_ingress_with_cidr_ipv6" { description = "Number of computed ingress rules to create where 'ipv6_cidr_blocks' is used" type = number default = 0 } -variable "number_of_computed_ingress_with_source_security_group_id" { +variable "number_of_computed_ingress_with_referenced_security_group_id" { description = "Number of computed ingress rules to create where 'source_security_group_id' is used" type = number default = 0 } -variable "number_of_computed_ingress_with_prefix_list_ids" { - description = "Number of computed ingress rules to create where 'prefix_list_ids' is used" +variable "number_of_computed_ingress_with_prefix_list_id" { + description = "Number of computed ingress rules to create where 'prefix_list_id' is used" type = number default = 0 } @@ -227,37 +227,37 @@ variable "egress_with_self" { default = [] } -variable "egress_with_cidr_blocks" { - description = "List of egress rules to create where 'cidr_blocks' is used" +variable "egress_with_cidr_ipv4" { + description = "List of egress rules to create where 'cidr_ipv4' is used" type = list(map(string)) default = [] } -variable "egress_with_ipv6_cidr_blocks" { +variable "egress_with_cidr_ipv6" { description = "List of egress rules to create where 'ipv6_cidr_blocks' is used" type = list(map(string)) default = [] } -variable "egress_with_source_security_group_id" { +variable "egress_with_referenced_security_group_id" { description = "List of egress rules to create where 'source_security_group_id' is used" type = list(map(string)) default = [] } -variable "egress_with_prefix_list_ids" { - description = "List of egress rules to create where 'prefix_list_ids' is used" +variable "egress_with_prefix_list_id" { + description = "List of egress rules to create where 'prefix_list_id' is used" type = list(map(string)) default = [] } -variable "egress_cidr_blocks" { +variable "egress_cidr_ipv4" { description = "List of IPv4 CIDR ranges to use on all egress rules" type = list(string) default = ["0.0.0.0/0"] } -variable "egress_ipv6_cidr_blocks" { +variable "egress_cidr_ipv6" { description = "List of IPv6 CIDR ranges to use on all egress rules" type = list(string) default = ["::/0"] @@ -284,26 +284,26 @@ variable "computed_egress_with_self" { default = [] } -variable "computed_egress_with_cidr_blocks" { - description = "List of computed egress rules to create where 'cidr_blocks' is used" +variable "computed_egress_with_cidr_ipv4" { + description = "List of computed egress rules to create where 'cidr_ipv4' is used" type = list(map(string)) default = [] } -variable "computed_egress_with_ipv6_cidr_blocks" { +variable "computed_egress_with_cidr_ipv6" { description = "List of computed egress rules to create where 'ipv6_cidr_blocks' is used" type = list(map(string)) default = [] } -variable "computed_egress_with_source_security_group_id" { +variable "computed_egress_with_referenced_security_group_id" { description = "List of computed egress rules to create where 'source_security_group_id' is used" type = list(map(string)) default = [] } -variable "computed_egress_with_prefix_list_ids" { - description = "List of computed egress rules to create where 'prefix_list_ids' is used" +variable "computed_egress_with_prefix_list_id" { + description = "List of computed egress rules to create where 'prefix_list_id' is used" type = list(map(string)) default = [] } @@ -341,26 +341,26 @@ variable "number_of_computed_egress_with_self" { default = 0 } -variable "number_of_computed_egress_with_cidr_blocks" { - description = "Number of computed egress rules to create where 'cidr_blocks' is used" +variable "number_of_computed_egress_with_cidr_ipv4" { + description = "Number of computed egress rules to create where 'cidr_ipv4' is used" type = number default = 0 } -variable "number_of_computed_egress_with_ipv6_cidr_blocks" { +variable "number_of_computed_egress_with_cidr_ipv6" { description = "Number of computed egress rules to create where 'ipv6_cidr_blocks' is used" type = number default = 0 } -variable "number_of_computed_egress_with_source_security_group_id" { +variable "number_of_computed_egress_with_referenced_security_group_id" { description = "Number of computed egress rules to create where 'source_security_group_id' is used" type = number default = 0 } -variable "number_of_computed_egress_with_prefix_list_ids" { - description = "Number of computed egress rules to create where 'prefix_list_ids' is used" +variable "number_of_computed_egress_with_prefix_list_id" { + description = "Number of computed egress rules to create where 'prefix_list_id' is used" type = number default = 0 } diff --git a/modules/minio/README.md b/modules/minio/README.md index 2c542957..b998d85a 100644 --- a/modules/minio/README.md +++ b/modules/minio/README.md @@ -55,59 +55,59 @@ No resources. | [computed\_egress\_ipv6\_cidr\_blocks](#input\_computed\_egress\_ipv6\_cidr\_blocks) | List of IPv6 CIDR ranges to use on all computed egress rules | `list(string)` |
[
"::/0"
]
| no | | [computed\_egress\_prefix\_list\_ids](#input\_computed\_egress\_prefix\_list\_ids) | List of prefix list IDs (for allowing access to VPC endpoints) to use on all computed egress rules | `list(string)` | `[]` | no | | [computed\_egress\_rules](#input\_computed\_egress\_rules) | List of computed egress rules to create by name | `list(string)` | `[]` | no | -| [computed\_egress\_with\_cidr\_blocks](#input\_computed\_egress\_with\_cidr\_blocks) | List of computed egress rules to create where 'cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [computed\_egress\_with\_ipv6\_cidr\_blocks](#input\_computed\_egress\_with\_ipv6\_cidr\_blocks) | List of computed egress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [computed\_egress\_with\_prefix\_list\_ids](#input\_computed\_egress\_with\_prefix\_list\_ids) | List of computed egress rules to create where 'prefix\_list\_ids' is used | `list(map(string))` | `[]` | no | +| [computed\_egress\_with\_cidr\_ipv4](#input\_computed\_egress\_with\_cidr\_ipv4) | List of computed egress rules to create where 'cidr\_ipv4' is used | `list(map(string))` | `[]` | no | +| [computed\_egress\_with\_cidr\_ipv6](#input\_computed\_egress\_with\_cidr\_ipv6) | List of computed egress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | +| [computed\_egress\_with\_prefix\_list\_id](#input\_computed\_egress\_with\_prefix\_list\_id) | List of computed egress rules to create where 'prefix\_list\_id' is used | `list(map(string))` | `[]` | no | +| [computed\_egress\_with\_referenced\_security\_group\_id](#input\_computed\_egress\_with\_referenced\_security\_group\_id) | List of computed egress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [computed\_egress\_with\_self](#input\_computed\_egress\_with\_self) | List of computed egress rules to create where 'self' is defined | `list(map(string))` | `[]` | no | -| [computed\_egress\_with\_source\_security\_group\_id](#input\_computed\_egress\_with\_source\_security\_group\_id) | List of computed egress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [computed\_ingress\_cidr\_blocks](#input\_computed\_ingress\_cidr\_blocks) | List of IPv4 CIDR ranges to use on all computed ingress rules | `list(string)` | `[]` | no | | [computed\_ingress\_ipv6\_cidr\_blocks](#input\_computed\_ingress\_ipv6\_cidr\_blocks) | List of IPv6 CIDR ranges to use on all computed ingress rules | `list(string)` | `[]` | no | | [computed\_ingress\_prefix\_list\_ids](#input\_computed\_ingress\_prefix\_list\_ids) | List of prefix list IDs (for allowing access to VPC endpoints) to use on all computed ingress rules | `list(string)` | `[]` | no | | [computed\_ingress\_rules](#input\_computed\_ingress\_rules) | List of computed ingress rules to create by name | `list(string)` | `[]` | no | -| [computed\_ingress\_with\_cidr\_blocks](#input\_computed\_ingress\_with\_cidr\_blocks) | List of computed ingress rules to create where 'cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [computed\_ingress\_with\_ipv6\_cidr\_blocks](#input\_computed\_ingress\_with\_ipv6\_cidr\_blocks) | List of computed ingress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [computed\_ingress\_with\_prefix\_list\_ids](#input\_computed\_ingress\_with\_prefix\_list\_ids) | List of computed ingress rules to create where 'prefix\_list\_ids' is used | `list(map(string))` | `[]` | no | +| [computed\_ingress\_with\_cidr\_ipv4](#input\_computed\_ingress\_with\_cidr\_ipv4) | List of computed ingress rules to create where 'cidr\_ipv4' is used | `list(map(string))` | `[]` | no | +| [computed\_ingress\_with\_cidr\_ipv6](#input\_computed\_ingress\_with\_cidr\_ipv6) | List of computed ingress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | +| [computed\_ingress\_with\_prefix\_list\_id](#input\_computed\_ingress\_with\_prefix\_list\_id) | List of computed ingress rules to create where 'prefix\_list\_id' is used | `list(map(string))` | `[]` | no | +| [computed\_ingress\_with\_referenced\_security\_group\_id](#input\_computed\_ingress\_with\_referenced\_security\_group\_id) | List of computed ingress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [computed\_ingress\_with\_self](#input\_computed\_ingress\_with\_self) | List of computed ingress rules to create where 'self' is defined | `list(map(string))` | `[]` | no | -| [computed\_ingress\_with\_source\_security\_group\_id](#input\_computed\_ingress\_with\_source\_security\_group\_id) | List of computed ingress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [create](#input\_create) | Whether to create security group and all rules | `bool` | `true` | no | | [description](#input\_description) | Description of security group | `string` | `"Security Group managed by Terraform"` | no | -| [egress\_cidr\_blocks](#input\_egress\_cidr\_blocks) | List of IPv4 CIDR ranges to use on all egress rules | `list(string)` |
[
"0.0.0.0/0"
]
| no | -| [egress\_ipv6\_cidr\_blocks](#input\_egress\_ipv6\_cidr\_blocks) | List of IPv6 CIDR ranges to use on all egress rules | `list(string)` |
[
"::/0"
]
| no | +| [egress\_cidr\_ipv4](#input\_egress\_cidr\_ipv4) | List of IPv4 CIDR ranges to use on all egress rules | `list(string)` |
[
"0.0.0.0/0"
]
| no | +| [egress\_cidr\_ipv6](#input\_egress\_cidr\_ipv6) | List of IPv6 CIDR ranges to use on all egress rules | `list(string)` |
[
"::/0"
]
| no | | [egress\_prefix\_list\_ids](#input\_egress\_prefix\_list\_ids) | List of prefix list IDs (for allowing access to VPC endpoints) to use on all egress rules | `list(string)` | `[]` | no | | [egress\_rules](#input\_egress\_rules) | List of egress rules to create by name | `list(string)` | `[]` | no | -| [egress\_with\_cidr\_blocks](#input\_egress\_with\_cidr\_blocks) | List of egress rules to create where 'cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [egress\_with\_ipv6\_cidr\_blocks](#input\_egress\_with\_ipv6\_cidr\_blocks) | List of egress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [egress\_with\_prefix\_list\_ids](#input\_egress\_with\_prefix\_list\_ids) | List of egress rules to create where 'prefix\_list\_ids' is used | `list(map(string))` | `[]` | no | +| [egress\_with\_cidr\_ipv4](#input\_egress\_with\_cidr\_ipv4) | List of egress rules to create where 'cidr\_ipv4' is used | `list(map(string))` | `[]` | no | +| [egress\_with\_cidr\_ipv6](#input\_egress\_with\_cidr\_ipv6) | List of egress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | +| [egress\_with\_prefix\_list\_id](#input\_egress\_with\_prefix\_list\_id) | List of egress rules to create where 'prefix\_list\_id' is used | `list(map(string))` | `[]` | no | +| [egress\_with\_referenced\_security\_group\_id](#input\_egress\_with\_referenced\_security\_group\_id) | List of egress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [egress\_with\_self](#input\_egress\_with\_self) | List of egress rules to create where 'self' is defined | `list(map(string))` | `[]` | no | -| [egress\_with\_source\_security\_group\_id](#input\_egress\_with\_source\_security\_group\_id) | List of egress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | -| [ingress\_cidr\_blocks](#input\_ingress\_cidr\_blocks) | List of IPv4 CIDR ranges to use on all ingress rules | `list(string)` | `[]` | no | -| [ingress\_ipv6\_cidr\_blocks](#input\_ingress\_ipv6\_cidr\_blocks) | List of IPv6 CIDR ranges to use on all ingress rules | `list(string)` | `[]` | no | +| [ingress\_cidr\_ipv4](#input\_ingress\_cidr\_ipv4) | List of IPv4 CIDR ranges to use on all ingress rules | `list(string)` | `[]` | no | +| [ingress\_cidr\_ipv6](#input\_ingress\_cidr\_ipv6) | List of IPv6 CIDR ranges to use on all ingress rules | `list(string)` | `[]` | no | | [ingress\_prefix\_list\_ids](#input\_ingress\_prefix\_list\_ids) | List of prefix list IDs (for allowing access to VPC endpoints) to use on all ingress rules | `list(string)` | `[]` | no | | [ingress\_rules](#input\_ingress\_rules) | List of ingress rules to create by name | `list(string)` | `[]` | no | -| [ingress\_with\_cidr\_blocks](#input\_ingress\_with\_cidr\_blocks) | List of ingress rules to create where 'cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [ingress\_with\_ipv6\_cidr\_blocks](#input\_ingress\_with\_ipv6\_cidr\_blocks) | List of ingress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [ingress\_with\_prefix\_list\_ids](#input\_ingress\_with\_prefix\_list\_ids) | List of ingress rules to create where 'prefix\_list\_ids' is used | `list(map(string))` | `[]` | no | +| [ingress\_with\_cidr\_ipv4](#input\_ingress\_with\_cidr\_ipv4) | List of ingress rules to create where 'cidr\_ipv4' is used | `list(map(string))` | `[]` | no | +| [ingress\_with\_cidr\_ipv6](#input\_ingress\_with\_cidr\_ipv6) | List of ingress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | +| [ingress\_with\_prefix\_list\_id](#input\_ingress\_with\_prefix\_list\_id) | List of ingress rules to create where 'prefix\_list\_id' is used | `list(map(string))` | `[]` | no | +| [ingress\_with\_referenced\_security\_group\_id](#input\_ingress\_with\_referenced\_security\_group\_id) | List of ingress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [ingress\_with\_self](#input\_ingress\_with\_self) | List of ingress rules to create where 'self' is defined | `list(map(string))` | `[]` | no | -| [ingress\_with\_source\_security\_group\_id](#input\_ingress\_with\_source\_security\_group\_id) | List of ingress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [name](#input\_name) | Name of security group | `string` | n/a | yes | | [number\_of\_computed\_egress\_cidr\_blocks](#input\_number\_of\_computed\_egress\_cidr\_blocks) | Number of IPv4 CIDR ranges to use on all computed egress rules | `number` | `0` | no | | [number\_of\_computed\_egress\_ipv6\_cidr\_blocks](#input\_number\_of\_computed\_egress\_ipv6\_cidr\_blocks) | Number of IPv6 CIDR ranges to use on all computed egress rules | `number` | `0` | no | | [number\_of\_computed\_egress\_prefix\_list\_ids](#input\_number\_of\_computed\_egress\_prefix\_list\_ids) | Number of prefix list IDs (for allowing access to VPC endpoints) to use on all computed egress rules | `number` | `0` | no | | [number\_of\_computed\_egress\_rules](#input\_number\_of\_computed\_egress\_rules) | Number of computed egress rules to create by name | `number` | `0` | no | -| [number\_of\_computed\_egress\_with\_cidr\_blocks](#input\_number\_of\_computed\_egress\_with\_cidr\_blocks) | Number of computed egress rules to create where 'cidr\_blocks' is used | `number` | `0` | no | -| [number\_of\_computed\_egress\_with\_ipv6\_cidr\_blocks](#input\_number\_of\_computed\_egress\_with\_ipv6\_cidr\_blocks) | Number of computed egress rules to create where 'ipv6\_cidr\_blocks' is used | `number` | `0` | no | -| [number\_of\_computed\_egress\_with\_prefix\_list\_ids](#input\_number\_of\_computed\_egress\_with\_prefix\_list\_ids) | Number of computed egress rules to create where 'prefix\_list\_ids' is used | `number` | `0` | no | +| [number\_of\_computed\_egress\_with\_cidr\_ipv4](#input\_number\_of\_computed\_egress\_with\_cidr\_ipv4) | Number of computed egress rules to create where 'cidr\_ipv4' is used | `number` | `0` | no | +| [number\_of\_computed\_egress\_with\_cidr\_ipv6](#input\_number\_of\_computed\_egress\_with\_cidr\_ipv6) | Number of computed egress rules to create where 'ipv6\_cidr\_blocks' is used | `number` | `0` | no | +| [number\_of\_computed\_egress\_with\_prefix\_list\_id](#input\_number\_of\_computed\_egress\_with\_prefix\_list\_id) | Number of computed egress rules to create where 'prefix\_list\_id' is used | `number` | `0` | no | +| [number\_of\_computed\_egress\_with\_referenced\_security\_group\_id](#input\_number\_of\_computed\_egress\_with\_referenced\_security\_group\_id) | Number of computed egress rules to create where 'source\_security\_group\_id' is used | `number` | `0` | no | | [number\_of\_computed\_egress\_with\_self](#input\_number\_of\_computed\_egress\_with\_self) | Number of computed egress rules to create where 'self' is defined | `number` | `0` | no | -| [number\_of\_computed\_egress\_with\_source\_security\_group\_id](#input\_number\_of\_computed\_egress\_with\_source\_security\_group\_id) | Number of computed egress rules to create where 'source\_security\_group\_id' is used | `number` | `0` | no | | [number\_of\_computed\_ingress\_cidr\_blocks](#input\_number\_of\_computed\_ingress\_cidr\_blocks) | Number of IPv4 CIDR ranges to use on all computed ingress rules | `number` | `0` | no | | [number\_of\_computed\_ingress\_ipv6\_cidr\_blocks](#input\_number\_of\_computed\_ingress\_ipv6\_cidr\_blocks) | Number of IPv6 CIDR ranges to use on all computed ingress rules | `number` | `0` | no | | [number\_of\_computed\_ingress\_prefix\_list\_ids](#input\_number\_of\_computed\_ingress\_prefix\_list\_ids) | Number of prefix list IDs (for allowing access to VPC endpoints) to use on all computed ingress rules | `number` | `0` | no | | [number\_of\_computed\_ingress\_rules](#input\_number\_of\_computed\_ingress\_rules) | Number of computed ingress rules to create by name | `number` | `0` | no | -| [number\_of\_computed\_ingress\_with\_cidr\_blocks](#input\_number\_of\_computed\_ingress\_with\_cidr\_blocks) | Number of computed ingress rules to create where 'cidr\_blocks' is used | `number` | `0` | no | -| [number\_of\_computed\_ingress\_with\_ipv6\_cidr\_blocks](#input\_number\_of\_computed\_ingress\_with\_ipv6\_cidr\_blocks) | Number of computed ingress rules to create where 'ipv6\_cidr\_blocks' is used | `number` | `0` | no | -| [number\_of\_computed\_ingress\_with\_prefix\_list\_ids](#input\_number\_of\_computed\_ingress\_with\_prefix\_list\_ids) | Number of computed ingress rules to create where 'prefix\_list\_ids' is used | `number` | `0` | no | +| [number\_of\_computed\_ingress\_with\_cidr\_ipv4](#input\_number\_of\_computed\_ingress\_with\_cidr\_ipv4) | Number of computed ingress rules to create where 'cidr\_ipv4' is used | `number` | `0` | no | +| [number\_of\_computed\_ingress\_with\_cidr\_ipv6](#input\_number\_of\_computed\_ingress\_with\_cidr\_ipv6) | Number of computed ingress rules to create where 'ipv6\_cidr\_blocks' is used | `number` | `0` | no | +| [number\_of\_computed\_ingress\_with\_prefix\_list\_id](#input\_number\_of\_computed\_ingress\_with\_prefix\_list\_id) | Number of computed ingress rules to create where 'prefix\_list\_id' is used | `number` | `0` | no | +| [number\_of\_computed\_ingress\_with\_referenced\_security\_group\_id](#input\_number\_of\_computed\_ingress\_with\_referenced\_security\_group\_id) | Number of computed ingress rules to create where 'source\_security\_group\_id' is used | `number` | `0` | no | | [number\_of\_computed\_ingress\_with\_self](#input\_number\_of\_computed\_ingress\_with\_self) | Number of computed ingress rules to create where 'self' is defined | `number` | `0` | no | -| [number\_of\_computed\_ingress\_with\_source\_security\_group\_id](#input\_number\_of\_computed\_ingress\_with\_source\_security\_group\_id) | Number of computed ingress rules to create where 'source\_security\_group\_id' is used | `number` | `0` | no | | [revoke\_rules\_on\_delete](#input\_revoke\_rules\_on\_delete) | Instruct Terraform to revoke all of the Security Groups attached ingress and egress rules before deleting the rule itself. Enable for EMR. | `bool` | `false` | no | | [tags](#input\_tags) | A mapping of tags to assign to security group | `map(string)` | `{}` | no | | [use\_name\_prefix](#input\_use\_name\_prefix) | Whether to use name\_prefix or fixed name. Should be true to able to update security group name after initial creation | `bool` | `true` | no | diff --git a/modules/minio/main.tf b/modules/minio/main.tf index 80ea0adb..d2a1bf93 100644 --- a/modules/minio/main.tf +++ b/modules/minio/main.tf @@ -19,20 +19,20 @@ module "sg" { ingress_with_self = concat(var.auto_ingress_with_self, var.ingress_with_self) # Open to IPv4 cidr blocks - ingress_with_cidr_blocks = var.ingress_with_cidr_blocks + ingress_with_cidr_ipv4 = var.ingress_with_cidr_ipv4 # Open to IPv6 cidr blocks - ingress_with_ipv6_cidr_blocks = var.ingress_with_ipv6_cidr_blocks + ingress_with_cidr_ipv6 = var.ingress_with_cidr_ipv6 # Open for security group id - ingress_with_source_security_group_id = var.ingress_with_source_security_group_id + ingress_with_referenced_security_group_id = var.ingress_with_referenced_security_group_id # Open for prefix list id - ingress_with_prefix_list_ids = var.ingress_with_prefix_list_ids + ingress_with_prefix_list_id = var.ingress_with_prefix_list_id # Default ingress CIDR blocks - ingress_cidr_blocks = var.ingress_cidr_blocks - ingress_ipv6_cidr_blocks = var.ingress_ipv6_cidr_blocks + ingress_cidr_ipv4 = var.ingress_cidr_ipv4 + ingress_cidr_ipv6 = var.ingress_cidr_ipv6 # Default prefix list ids ingress_prefix_list_ids = var.ingress_prefix_list_ids @@ -47,26 +47,26 @@ module "sg" { computed_ingress_with_self = concat(var.auto_computed_ingress_with_self, var.computed_ingress_with_self) # Open to IPv4 cidr blocks - computed_ingress_with_cidr_blocks = var.computed_ingress_with_cidr_blocks + computed_ingress_with_cidr_ipv4 = var.computed_ingress_with_cidr_ipv4 # Open to IPv6 cidr blocks - computed_ingress_with_ipv6_cidr_blocks = var.computed_ingress_with_ipv6_cidr_blocks + computed_ingress_with_cidr_ipv6 = var.computed_ingress_with_cidr_ipv6 # Open for security group id - computed_ingress_with_source_security_group_id = var.computed_ingress_with_source_security_group_id + computed_ingress_with_referenced_security_group_id = var.computed_ingress_with_referenced_security_group_id # Open for prefix list id - computed_ingress_with_prefix_list_ids = var.computed_ingress_with_prefix_list_ids + computed_ingress_with_prefix_list_id = var.computed_ingress_with_prefix_list_id ############################# # Number of computed ingress ############################# - number_of_computed_ingress_rules = var.auto_number_of_computed_ingress_rules + var.number_of_computed_ingress_rules - number_of_computed_ingress_with_self = var.auto_number_of_computed_ingress_with_self + var.number_of_computed_ingress_with_self - number_of_computed_ingress_with_cidr_blocks = var.number_of_computed_ingress_with_cidr_blocks - number_of_computed_ingress_with_ipv6_cidr_blocks = var.number_of_computed_ingress_with_ipv6_cidr_blocks - number_of_computed_ingress_with_source_security_group_id = var.number_of_computed_ingress_with_source_security_group_id - number_of_computed_ingress_with_prefix_list_ids = var.number_of_computed_ingress_with_prefix_list_ids + number_of_computed_ingress_rules = var.auto_number_of_computed_ingress_rules + var.number_of_computed_ingress_rules + number_of_computed_ingress_with_self = var.auto_number_of_computed_ingress_with_self + var.number_of_computed_ingress_with_self + number_of_computed_ingress_with_cidr_ipv4 = var.number_of_computed_ingress_with_cidr_ipv4 + number_of_computed_ingress_with_cidr_ipv6 = var.number_of_computed_ingress_with_cidr_ipv6 + number_of_computed_ingress_with_referenced_security_group_id = var.number_of_computed_ingress_with_referenced_security_group_id + number_of_computed_ingress_with_prefix_list_id = var.number_of_computed_ingress_with_prefix_list_id ######### # Egress @@ -78,20 +78,20 @@ module "sg" { egress_with_self = concat(var.auto_egress_with_self, var.egress_with_self) # Open to IPv4 cidr blocks - egress_with_cidr_blocks = var.egress_with_cidr_blocks + egress_with_cidr_ipv4 = var.egress_with_cidr_ipv4 # Open to IPv6 cidr blocks - egress_with_ipv6_cidr_blocks = var.egress_with_ipv6_cidr_blocks + egress_with_cidr_ipv6 = var.egress_with_cidr_ipv6 # Open for security group id - egress_with_source_security_group_id = var.egress_with_source_security_group_id + egress_with_referenced_security_group_id = var.egress_with_referenced_security_group_id # Open for prefix list id - egress_with_prefix_list_ids = var.egress_with_prefix_list_ids + egress_with_prefix_list_id = var.egress_with_prefix_list_id # Default egress CIDR blocks - egress_cidr_blocks = var.egress_cidr_blocks - egress_ipv6_cidr_blocks = var.egress_ipv6_cidr_blocks + egress_cidr_ipv4 = var.egress_cidr_ipv4 + egress_cidr_ipv6 = var.egress_cidr_ipv6 # Default prefix list ids egress_prefix_list_ids = var.egress_prefix_list_ids @@ -106,24 +106,24 @@ module "sg" { computed_egress_with_self = concat(var.auto_computed_egress_with_self, var.computed_egress_with_self) # Open to IPv4 cidr blocks - computed_egress_with_cidr_blocks = var.computed_egress_with_cidr_blocks + computed_egress_with_cidr_ipv4 = var.computed_egress_with_cidr_ipv4 # Open to IPv6 cidr blocks - computed_egress_with_ipv6_cidr_blocks = var.computed_egress_with_ipv6_cidr_blocks + computed_egress_with_cidr_ipv6 = var.computed_egress_with_cidr_ipv6 # Open for security group id - computed_egress_with_source_security_group_id = var.computed_egress_with_source_security_group_id + computed_egress_with_referenced_security_group_id = var.computed_egress_with_referenced_security_group_id # Open for prefix list id - computed_egress_with_prefix_list_ids = var.computed_egress_with_prefix_list_ids + computed_egress_with_prefix_list_id = var.computed_egress_with_prefix_list_id ############################# # Number of computed egress ############################# - number_of_computed_egress_rules = var.auto_number_of_computed_egress_rules + var.number_of_computed_egress_rules - number_of_computed_egress_with_self = var.auto_number_of_computed_egress_with_self + var.number_of_computed_egress_with_self - number_of_computed_egress_with_cidr_blocks = var.number_of_computed_egress_with_cidr_blocks - number_of_computed_egress_with_ipv6_cidr_blocks = var.number_of_computed_egress_with_ipv6_cidr_blocks - number_of_computed_egress_with_source_security_group_id = var.number_of_computed_egress_with_source_security_group_id - number_of_computed_egress_with_prefix_list_ids = var.number_of_computed_egress_with_prefix_list_ids + number_of_computed_egress_rules = var.auto_number_of_computed_egress_rules + var.number_of_computed_egress_rules + number_of_computed_egress_with_self = var.auto_number_of_computed_egress_with_self + var.number_of_computed_egress_with_self + number_of_computed_egress_with_cidr_ipv4 = var.number_of_computed_egress_with_cidr_ipv4 + number_of_computed_egress_with_cidr_ipv6 = var.number_of_computed_egress_with_cidr_ipv6 + number_of_computed_egress_with_referenced_security_group_id = var.number_of_computed_egress_with_referenced_security_group_id + number_of_computed_egress_with_prefix_list_id = var.number_of_computed_egress_with_prefix_list_id } diff --git a/modules/minio/variables.tf b/modules/minio/variables.tf index 60c8c27b..6590c9e3 100644 --- a/modules/minio/variables.tf +++ b/modules/minio/variables.tf @@ -56,37 +56,37 @@ variable "ingress_with_self" { default = [] } -variable "ingress_with_cidr_blocks" { - description = "List of ingress rules to create where 'cidr_blocks' is used" +variable "ingress_with_cidr_ipv4" { + description = "List of ingress rules to create where 'cidr_ipv4' is used" type = list(map(string)) default = [] } -variable "ingress_with_ipv6_cidr_blocks" { +variable "ingress_with_cidr_ipv6" { description = "List of ingress rules to create where 'ipv6_cidr_blocks' is used" type = list(map(string)) default = [] } -variable "ingress_with_source_security_group_id" { +variable "ingress_with_referenced_security_group_id" { description = "List of ingress rules to create where 'source_security_group_id' is used" type = list(map(string)) default = [] } -variable "ingress_with_prefix_list_ids" { - description = "List of ingress rules to create where 'prefix_list_ids' is used" +variable "ingress_with_prefix_list_id" { + description = "List of ingress rules to create where 'prefix_list_id' is used" type = list(map(string)) default = [] } -variable "ingress_cidr_blocks" { +variable "ingress_cidr_ipv4" { description = "List of IPv4 CIDR ranges to use on all ingress rules" type = list(string) default = [] } -variable "ingress_ipv6_cidr_blocks" { +variable "ingress_cidr_ipv6" { description = "List of IPv6 CIDR ranges to use on all ingress rules" type = list(string) default = [] @@ -113,26 +113,26 @@ variable "computed_ingress_with_self" { default = [] } -variable "computed_ingress_with_cidr_blocks" { - description = "List of computed ingress rules to create where 'cidr_blocks' is used" +variable "computed_ingress_with_cidr_ipv4" { + description = "List of computed ingress rules to create where 'cidr_ipv4' is used" type = list(map(string)) default = [] } -variable "computed_ingress_with_ipv6_cidr_blocks" { +variable "computed_ingress_with_cidr_ipv6" { description = "List of computed ingress rules to create where 'ipv6_cidr_blocks' is used" type = list(map(string)) default = [] } -variable "computed_ingress_with_source_security_group_id" { +variable "computed_ingress_with_referenced_security_group_id" { description = "List of computed ingress rules to create where 'source_security_group_id' is used" type = list(map(string)) default = [] } -variable "computed_ingress_with_prefix_list_ids" { - description = "List of computed ingress rules to create where 'prefix_list_ids' is used" +variable "computed_ingress_with_prefix_list_id" { + description = "List of computed ingress rules to create where 'prefix_list_id' is used" type = list(map(string)) default = [] } @@ -170,26 +170,26 @@ variable "number_of_computed_ingress_with_self" { default = 0 } -variable "number_of_computed_ingress_with_cidr_blocks" { - description = "Number of computed ingress rules to create where 'cidr_blocks' is used" +variable "number_of_computed_ingress_with_cidr_ipv4" { + description = "Number of computed ingress rules to create where 'cidr_ipv4' is used" type = number default = 0 } -variable "number_of_computed_ingress_with_ipv6_cidr_blocks" { +variable "number_of_computed_ingress_with_cidr_ipv6" { description = "Number of computed ingress rules to create where 'ipv6_cidr_blocks' is used" type = number default = 0 } -variable "number_of_computed_ingress_with_source_security_group_id" { +variable "number_of_computed_ingress_with_referenced_security_group_id" { description = "Number of computed ingress rules to create where 'source_security_group_id' is used" type = number default = 0 } -variable "number_of_computed_ingress_with_prefix_list_ids" { - description = "Number of computed ingress rules to create where 'prefix_list_ids' is used" +variable "number_of_computed_ingress_with_prefix_list_id" { + description = "Number of computed ingress rules to create where 'prefix_list_id' is used" type = number default = 0 } @@ -227,37 +227,37 @@ variable "egress_with_self" { default = [] } -variable "egress_with_cidr_blocks" { - description = "List of egress rules to create where 'cidr_blocks' is used" +variable "egress_with_cidr_ipv4" { + description = "List of egress rules to create where 'cidr_ipv4' is used" type = list(map(string)) default = [] } -variable "egress_with_ipv6_cidr_blocks" { +variable "egress_with_cidr_ipv6" { description = "List of egress rules to create where 'ipv6_cidr_blocks' is used" type = list(map(string)) default = [] } -variable "egress_with_source_security_group_id" { +variable "egress_with_referenced_security_group_id" { description = "List of egress rules to create where 'source_security_group_id' is used" type = list(map(string)) default = [] } -variable "egress_with_prefix_list_ids" { - description = "List of egress rules to create where 'prefix_list_ids' is used" +variable "egress_with_prefix_list_id" { + description = "List of egress rules to create where 'prefix_list_id' is used" type = list(map(string)) default = [] } -variable "egress_cidr_blocks" { +variable "egress_cidr_ipv4" { description = "List of IPv4 CIDR ranges to use on all egress rules" type = list(string) default = ["0.0.0.0/0"] } -variable "egress_ipv6_cidr_blocks" { +variable "egress_cidr_ipv6" { description = "List of IPv6 CIDR ranges to use on all egress rules" type = list(string) default = ["::/0"] @@ -284,26 +284,26 @@ variable "computed_egress_with_self" { default = [] } -variable "computed_egress_with_cidr_blocks" { - description = "List of computed egress rules to create where 'cidr_blocks' is used" +variable "computed_egress_with_cidr_ipv4" { + description = "List of computed egress rules to create where 'cidr_ipv4' is used" type = list(map(string)) default = [] } -variable "computed_egress_with_ipv6_cidr_blocks" { +variable "computed_egress_with_cidr_ipv6" { description = "List of computed egress rules to create where 'ipv6_cidr_blocks' is used" type = list(map(string)) default = [] } -variable "computed_egress_with_source_security_group_id" { +variable "computed_egress_with_referenced_security_group_id" { description = "List of computed egress rules to create where 'source_security_group_id' is used" type = list(map(string)) default = [] } -variable "computed_egress_with_prefix_list_ids" { - description = "List of computed egress rules to create where 'prefix_list_ids' is used" +variable "computed_egress_with_prefix_list_id" { + description = "List of computed egress rules to create where 'prefix_list_id' is used" type = list(map(string)) default = [] } @@ -341,26 +341,26 @@ variable "number_of_computed_egress_with_self" { default = 0 } -variable "number_of_computed_egress_with_cidr_blocks" { - description = "Number of computed egress rules to create where 'cidr_blocks' is used" +variable "number_of_computed_egress_with_cidr_ipv4" { + description = "Number of computed egress rules to create where 'cidr_ipv4' is used" type = number default = 0 } -variable "number_of_computed_egress_with_ipv6_cidr_blocks" { +variable "number_of_computed_egress_with_cidr_ipv6" { description = "Number of computed egress rules to create where 'ipv6_cidr_blocks' is used" type = number default = 0 } -variable "number_of_computed_egress_with_source_security_group_id" { +variable "number_of_computed_egress_with_referenced_security_group_id" { description = "Number of computed egress rules to create where 'source_security_group_id' is used" type = number default = 0 } -variable "number_of_computed_egress_with_prefix_list_ids" { - description = "Number of computed egress rules to create where 'prefix_list_ids' is used" +variable "number_of_computed_egress_with_prefix_list_id" { + description = "Number of computed egress rules to create where 'prefix_list_id' is used" type = number default = 0 } diff --git a/modules/mongodb/README.md b/modules/mongodb/README.md index 40decfa1..955ee5f1 100644 --- a/modules/mongodb/README.md +++ b/modules/mongodb/README.md @@ -55,59 +55,59 @@ No resources. | [computed\_egress\_ipv6\_cidr\_blocks](#input\_computed\_egress\_ipv6\_cidr\_blocks) | List of IPv6 CIDR ranges to use on all computed egress rules | `list(string)` |
[
"::/0"
]
| no | | [computed\_egress\_prefix\_list\_ids](#input\_computed\_egress\_prefix\_list\_ids) | List of prefix list IDs (for allowing access to VPC endpoints) to use on all computed egress rules | `list(string)` | `[]` | no | | [computed\_egress\_rules](#input\_computed\_egress\_rules) | List of computed egress rules to create by name | `list(string)` | `[]` | no | -| [computed\_egress\_with\_cidr\_blocks](#input\_computed\_egress\_with\_cidr\_blocks) | List of computed egress rules to create where 'cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [computed\_egress\_with\_ipv6\_cidr\_blocks](#input\_computed\_egress\_with\_ipv6\_cidr\_blocks) | List of computed egress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [computed\_egress\_with\_prefix\_list\_ids](#input\_computed\_egress\_with\_prefix\_list\_ids) | List of computed egress rules to create where 'prefix\_list\_ids' is used | `list(map(string))` | `[]` | no | +| [computed\_egress\_with\_cidr\_ipv4](#input\_computed\_egress\_with\_cidr\_ipv4) | List of computed egress rules to create where 'cidr\_ipv4' is used | `list(map(string))` | `[]` | no | +| [computed\_egress\_with\_cidr\_ipv6](#input\_computed\_egress\_with\_cidr\_ipv6) | List of computed egress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | +| [computed\_egress\_with\_prefix\_list\_id](#input\_computed\_egress\_with\_prefix\_list\_id) | List of computed egress rules to create where 'prefix\_list\_id' is used | `list(map(string))` | `[]` | no | +| [computed\_egress\_with\_referenced\_security\_group\_id](#input\_computed\_egress\_with\_referenced\_security\_group\_id) | List of computed egress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [computed\_egress\_with\_self](#input\_computed\_egress\_with\_self) | List of computed egress rules to create where 'self' is defined | `list(map(string))` | `[]` | no | -| [computed\_egress\_with\_source\_security\_group\_id](#input\_computed\_egress\_with\_source\_security\_group\_id) | List of computed egress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [computed\_ingress\_cidr\_blocks](#input\_computed\_ingress\_cidr\_blocks) | List of IPv4 CIDR ranges to use on all computed ingress rules | `list(string)` | `[]` | no | | [computed\_ingress\_ipv6\_cidr\_blocks](#input\_computed\_ingress\_ipv6\_cidr\_blocks) | List of IPv6 CIDR ranges to use on all computed ingress rules | `list(string)` | `[]` | no | | [computed\_ingress\_prefix\_list\_ids](#input\_computed\_ingress\_prefix\_list\_ids) | List of prefix list IDs (for allowing access to VPC endpoints) to use on all computed ingress rules | `list(string)` | `[]` | no | | [computed\_ingress\_rules](#input\_computed\_ingress\_rules) | List of computed ingress rules to create by name | `list(string)` | `[]` | no | -| [computed\_ingress\_with\_cidr\_blocks](#input\_computed\_ingress\_with\_cidr\_blocks) | List of computed ingress rules to create where 'cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [computed\_ingress\_with\_ipv6\_cidr\_blocks](#input\_computed\_ingress\_with\_ipv6\_cidr\_blocks) | List of computed ingress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [computed\_ingress\_with\_prefix\_list\_ids](#input\_computed\_ingress\_with\_prefix\_list\_ids) | List of computed ingress rules to create where 'prefix\_list\_ids' is used | `list(map(string))` | `[]` | no | +| [computed\_ingress\_with\_cidr\_ipv4](#input\_computed\_ingress\_with\_cidr\_ipv4) | List of computed ingress rules to create where 'cidr\_ipv4' is used | `list(map(string))` | `[]` | no | +| [computed\_ingress\_with\_cidr\_ipv6](#input\_computed\_ingress\_with\_cidr\_ipv6) | List of computed ingress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | +| [computed\_ingress\_with\_prefix\_list\_id](#input\_computed\_ingress\_with\_prefix\_list\_id) | List of computed ingress rules to create where 'prefix\_list\_id' is used | `list(map(string))` | `[]` | no | +| [computed\_ingress\_with\_referenced\_security\_group\_id](#input\_computed\_ingress\_with\_referenced\_security\_group\_id) | List of computed ingress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [computed\_ingress\_with\_self](#input\_computed\_ingress\_with\_self) | List of computed ingress rules to create where 'self' is defined | `list(map(string))` | `[]` | no | -| [computed\_ingress\_with\_source\_security\_group\_id](#input\_computed\_ingress\_with\_source\_security\_group\_id) | List of computed ingress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [create](#input\_create) | Whether to create security group and all rules | `bool` | `true` | no | | [description](#input\_description) | Description of security group | `string` | `"Security Group managed by Terraform"` | no | -| [egress\_cidr\_blocks](#input\_egress\_cidr\_blocks) | List of IPv4 CIDR ranges to use on all egress rules | `list(string)` |
[
"0.0.0.0/0"
]
| no | -| [egress\_ipv6\_cidr\_blocks](#input\_egress\_ipv6\_cidr\_blocks) | List of IPv6 CIDR ranges to use on all egress rules | `list(string)` |
[
"::/0"
]
| no | +| [egress\_cidr\_ipv4](#input\_egress\_cidr\_ipv4) | List of IPv4 CIDR ranges to use on all egress rules | `list(string)` |
[
"0.0.0.0/0"
]
| no | +| [egress\_cidr\_ipv6](#input\_egress\_cidr\_ipv6) | List of IPv6 CIDR ranges to use on all egress rules | `list(string)` |
[
"::/0"
]
| no | | [egress\_prefix\_list\_ids](#input\_egress\_prefix\_list\_ids) | List of prefix list IDs (for allowing access to VPC endpoints) to use on all egress rules | `list(string)` | `[]` | no | | [egress\_rules](#input\_egress\_rules) | List of egress rules to create by name | `list(string)` | `[]` | no | -| [egress\_with\_cidr\_blocks](#input\_egress\_with\_cidr\_blocks) | List of egress rules to create where 'cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [egress\_with\_ipv6\_cidr\_blocks](#input\_egress\_with\_ipv6\_cidr\_blocks) | List of egress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [egress\_with\_prefix\_list\_ids](#input\_egress\_with\_prefix\_list\_ids) | List of egress rules to create where 'prefix\_list\_ids' is used | `list(map(string))` | `[]` | no | +| [egress\_with\_cidr\_ipv4](#input\_egress\_with\_cidr\_ipv4) | List of egress rules to create where 'cidr\_ipv4' is used | `list(map(string))` | `[]` | no | +| [egress\_with\_cidr\_ipv6](#input\_egress\_with\_cidr\_ipv6) | List of egress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | +| [egress\_with\_prefix\_list\_id](#input\_egress\_with\_prefix\_list\_id) | List of egress rules to create where 'prefix\_list\_id' is used | `list(map(string))` | `[]` | no | +| [egress\_with\_referenced\_security\_group\_id](#input\_egress\_with\_referenced\_security\_group\_id) | List of egress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [egress\_with\_self](#input\_egress\_with\_self) | List of egress rules to create where 'self' is defined | `list(map(string))` | `[]` | no | -| [egress\_with\_source\_security\_group\_id](#input\_egress\_with\_source\_security\_group\_id) | List of egress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | -| [ingress\_cidr\_blocks](#input\_ingress\_cidr\_blocks) | List of IPv4 CIDR ranges to use on all ingress rules | `list(string)` | `[]` | no | -| [ingress\_ipv6\_cidr\_blocks](#input\_ingress\_ipv6\_cidr\_blocks) | List of IPv6 CIDR ranges to use on all ingress rules | `list(string)` | `[]` | no | +| [ingress\_cidr\_ipv4](#input\_ingress\_cidr\_ipv4) | List of IPv4 CIDR ranges to use on all ingress rules | `list(string)` | `[]` | no | +| [ingress\_cidr\_ipv6](#input\_ingress\_cidr\_ipv6) | List of IPv6 CIDR ranges to use on all ingress rules | `list(string)` | `[]` | no | | [ingress\_prefix\_list\_ids](#input\_ingress\_prefix\_list\_ids) | List of prefix list IDs (for allowing access to VPC endpoints) to use on all ingress rules | `list(string)` | `[]` | no | | [ingress\_rules](#input\_ingress\_rules) | List of ingress rules to create by name | `list(string)` | `[]` | no | -| [ingress\_with\_cidr\_blocks](#input\_ingress\_with\_cidr\_blocks) | List of ingress rules to create where 'cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [ingress\_with\_ipv6\_cidr\_blocks](#input\_ingress\_with\_ipv6\_cidr\_blocks) | List of ingress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [ingress\_with\_prefix\_list\_ids](#input\_ingress\_with\_prefix\_list\_ids) | List of ingress rules to create where 'prefix\_list\_ids' is used | `list(map(string))` | `[]` | no | +| [ingress\_with\_cidr\_ipv4](#input\_ingress\_with\_cidr\_ipv4) | List of ingress rules to create where 'cidr\_ipv4' is used | `list(map(string))` | `[]` | no | +| [ingress\_with\_cidr\_ipv6](#input\_ingress\_with\_cidr\_ipv6) | List of ingress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | +| [ingress\_with\_prefix\_list\_id](#input\_ingress\_with\_prefix\_list\_id) | List of ingress rules to create where 'prefix\_list\_id' is used | `list(map(string))` | `[]` | no | +| [ingress\_with\_referenced\_security\_group\_id](#input\_ingress\_with\_referenced\_security\_group\_id) | List of ingress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [ingress\_with\_self](#input\_ingress\_with\_self) | List of ingress rules to create where 'self' is defined | `list(map(string))` | `[]` | no | -| [ingress\_with\_source\_security\_group\_id](#input\_ingress\_with\_source\_security\_group\_id) | List of ingress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [name](#input\_name) | Name of security group | `string` | n/a | yes | | [number\_of\_computed\_egress\_cidr\_blocks](#input\_number\_of\_computed\_egress\_cidr\_blocks) | Number of IPv4 CIDR ranges to use on all computed egress rules | `number` | `0` | no | | [number\_of\_computed\_egress\_ipv6\_cidr\_blocks](#input\_number\_of\_computed\_egress\_ipv6\_cidr\_blocks) | Number of IPv6 CIDR ranges to use on all computed egress rules | `number` | `0` | no | | [number\_of\_computed\_egress\_prefix\_list\_ids](#input\_number\_of\_computed\_egress\_prefix\_list\_ids) | Number of prefix list IDs (for allowing access to VPC endpoints) to use on all computed egress rules | `number` | `0` | no | | [number\_of\_computed\_egress\_rules](#input\_number\_of\_computed\_egress\_rules) | Number of computed egress rules to create by name | `number` | `0` | no | -| [number\_of\_computed\_egress\_with\_cidr\_blocks](#input\_number\_of\_computed\_egress\_with\_cidr\_blocks) | Number of computed egress rules to create where 'cidr\_blocks' is used | `number` | `0` | no | -| [number\_of\_computed\_egress\_with\_ipv6\_cidr\_blocks](#input\_number\_of\_computed\_egress\_with\_ipv6\_cidr\_blocks) | Number of computed egress rules to create where 'ipv6\_cidr\_blocks' is used | `number` | `0` | no | -| [number\_of\_computed\_egress\_with\_prefix\_list\_ids](#input\_number\_of\_computed\_egress\_with\_prefix\_list\_ids) | Number of computed egress rules to create where 'prefix\_list\_ids' is used | `number` | `0` | no | +| [number\_of\_computed\_egress\_with\_cidr\_ipv4](#input\_number\_of\_computed\_egress\_with\_cidr\_ipv4) | Number of computed egress rules to create where 'cidr\_ipv4' is used | `number` | `0` | no | +| [number\_of\_computed\_egress\_with\_cidr\_ipv6](#input\_number\_of\_computed\_egress\_with\_cidr\_ipv6) | Number of computed egress rules to create where 'ipv6\_cidr\_blocks' is used | `number` | `0` | no | +| [number\_of\_computed\_egress\_with\_prefix\_list\_id](#input\_number\_of\_computed\_egress\_with\_prefix\_list\_id) | Number of computed egress rules to create where 'prefix\_list\_id' is used | `number` | `0` | no | +| [number\_of\_computed\_egress\_with\_referenced\_security\_group\_id](#input\_number\_of\_computed\_egress\_with\_referenced\_security\_group\_id) | Number of computed egress rules to create where 'source\_security\_group\_id' is used | `number` | `0` | no | | [number\_of\_computed\_egress\_with\_self](#input\_number\_of\_computed\_egress\_with\_self) | Number of computed egress rules to create where 'self' is defined | `number` | `0` | no | -| [number\_of\_computed\_egress\_with\_source\_security\_group\_id](#input\_number\_of\_computed\_egress\_with\_source\_security\_group\_id) | Number of computed egress rules to create where 'source\_security\_group\_id' is used | `number` | `0` | no | | [number\_of\_computed\_ingress\_cidr\_blocks](#input\_number\_of\_computed\_ingress\_cidr\_blocks) | Number of IPv4 CIDR ranges to use on all computed ingress rules | `number` | `0` | no | | [number\_of\_computed\_ingress\_ipv6\_cidr\_blocks](#input\_number\_of\_computed\_ingress\_ipv6\_cidr\_blocks) | Number of IPv6 CIDR ranges to use on all computed ingress rules | `number` | `0` | no | | [number\_of\_computed\_ingress\_prefix\_list\_ids](#input\_number\_of\_computed\_ingress\_prefix\_list\_ids) | Number of prefix list IDs (for allowing access to VPC endpoints) to use on all computed ingress rules | `number` | `0` | no | | [number\_of\_computed\_ingress\_rules](#input\_number\_of\_computed\_ingress\_rules) | Number of computed ingress rules to create by name | `number` | `0` | no | -| [number\_of\_computed\_ingress\_with\_cidr\_blocks](#input\_number\_of\_computed\_ingress\_with\_cidr\_blocks) | Number of computed ingress rules to create where 'cidr\_blocks' is used | `number` | `0` | no | -| [number\_of\_computed\_ingress\_with\_ipv6\_cidr\_blocks](#input\_number\_of\_computed\_ingress\_with\_ipv6\_cidr\_blocks) | Number of computed ingress rules to create where 'ipv6\_cidr\_blocks' is used | `number` | `0` | no | -| [number\_of\_computed\_ingress\_with\_prefix\_list\_ids](#input\_number\_of\_computed\_ingress\_with\_prefix\_list\_ids) | Number of computed ingress rules to create where 'prefix\_list\_ids' is used | `number` | `0` | no | +| [number\_of\_computed\_ingress\_with\_cidr\_ipv4](#input\_number\_of\_computed\_ingress\_with\_cidr\_ipv4) | Number of computed ingress rules to create where 'cidr\_ipv4' is used | `number` | `0` | no | +| [number\_of\_computed\_ingress\_with\_cidr\_ipv6](#input\_number\_of\_computed\_ingress\_with\_cidr\_ipv6) | Number of computed ingress rules to create where 'ipv6\_cidr\_blocks' is used | `number` | `0` | no | +| [number\_of\_computed\_ingress\_with\_prefix\_list\_id](#input\_number\_of\_computed\_ingress\_with\_prefix\_list\_id) | Number of computed ingress rules to create where 'prefix\_list\_id' is used | `number` | `0` | no | +| [number\_of\_computed\_ingress\_with\_referenced\_security\_group\_id](#input\_number\_of\_computed\_ingress\_with\_referenced\_security\_group\_id) | Number of computed ingress rules to create where 'source\_security\_group\_id' is used | `number` | `0` | no | | [number\_of\_computed\_ingress\_with\_self](#input\_number\_of\_computed\_ingress\_with\_self) | Number of computed ingress rules to create where 'self' is defined | `number` | `0` | no | -| [number\_of\_computed\_ingress\_with\_source\_security\_group\_id](#input\_number\_of\_computed\_ingress\_with\_source\_security\_group\_id) | Number of computed ingress rules to create where 'source\_security\_group\_id' is used | `number` | `0` | no | | [revoke\_rules\_on\_delete](#input\_revoke\_rules\_on\_delete) | Instruct Terraform to revoke all of the Security Groups attached ingress and egress rules before deleting the rule itself. Enable for EMR. | `bool` | `false` | no | | [tags](#input\_tags) | A mapping of tags to assign to security group | `map(string)` | `{}` | no | | [use\_name\_prefix](#input\_use\_name\_prefix) | Whether to use name\_prefix or fixed name. Should be true to able to update security group name after initial creation | `bool` | `true` | no | diff --git a/modules/mongodb/main.tf b/modules/mongodb/main.tf index 80ea0adb..d2a1bf93 100644 --- a/modules/mongodb/main.tf +++ b/modules/mongodb/main.tf @@ -19,20 +19,20 @@ module "sg" { ingress_with_self = concat(var.auto_ingress_with_self, var.ingress_with_self) # Open to IPv4 cidr blocks - ingress_with_cidr_blocks = var.ingress_with_cidr_blocks + ingress_with_cidr_ipv4 = var.ingress_with_cidr_ipv4 # Open to IPv6 cidr blocks - ingress_with_ipv6_cidr_blocks = var.ingress_with_ipv6_cidr_blocks + ingress_with_cidr_ipv6 = var.ingress_with_cidr_ipv6 # Open for security group id - ingress_with_source_security_group_id = var.ingress_with_source_security_group_id + ingress_with_referenced_security_group_id = var.ingress_with_referenced_security_group_id # Open for prefix list id - ingress_with_prefix_list_ids = var.ingress_with_prefix_list_ids + ingress_with_prefix_list_id = var.ingress_with_prefix_list_id # Default ingress CIDR blocks - ingress_cidr_blocks = var.ingress_cidr_blocks - ingress_ipv6_cidr_blocks = var.ingress_ipv6_cidr_blocks + ingress_cidr_ipv4 = var.ingress_cidr_ipv4 + ingress_cidr_ipv6 = var.ingress_cidr_ipv6 # Default prefix list ids ingress_prefix_list_ids = var.ingress_prefix_list_ids @@ -47,26 +47,26 @@ module "sg" { computed_ingress_with_self = concat(var.auto_computed_ingress_with_self, var.computed_ingress_with_self) # Open to IPv4 cidr blocks - computed_ingress_with_cidr_blocks = var.computed_ingress_with_cidr_blocks + computed_ingress_with_cidr_ipv4 = var.computed_ingress_with_cidr_ipv4 # Open to IPv6 cidr blocks - computed_ingress_with_ipv6_cidr_blocks = var.computed_ingress_with_ipv6_cidr_blocks + computed_ingress_with_cidr_ipv6 = var.computed_ingress_with_cidr_ipv6 # Open for security group id - computed_ingress_with_source_security_group_id = var.computed_ingress_with_source_security_group_id + computed_ingress_with_referenced_security_group_id = var.computed_ingress_with_referenced_security_group_id # Open for prefix list id - computed_ingress_with_prefix_list_ids = var.computed_ingress_with_prefix_list_ids + computed_ingress_with_prefix_list_id = var.computed_ingress_with_prefix_list_id ############################# # Number of computed ingress ############################# - number_of_computed_ingress_rules = var.auto_number_of_computed_ingress_rules + var.number_of_computed_ingress_rules - number_of_computed_ingress_with_self = var.auto_number_of_computed_ingress_with_self + var.number_of_computed_ingress_with_self - number_of_computed_ingress_with_cidr_blocks = var.number_of_computed_ingress_with_cidr_blocks - number_of_computed_ingress_with_ipv6_cidr_blocks = var.number_of_computed_ingress_with_ipv6_cidr_blocks - number_of_computed_ingress_with_source_security_group_id = var.number_of_computed_ingress_with_source_security_group_id - number_of_computed_ingress_with_prefix_list_ids = var.number_of_computed_ingress_with_prefix_list_ids + number_of_computed_ingress_rules = var.auto_number_of_computed_ingress_rules + var.number_of_computed_ingress_rules + number_of_computed_ingress_with_self = var.auto_number_of_computed_ingress_with_self + var.number_of_computed_ingress_with_self + number_of_computed_ingress_with_cidr_ipv4 = var.number_of_computed_ingress_with_cidr_ipv4 + number_of_computed_ingress_with_cidr_ipv6 = var.number_of_computed_ingress_with_cidr_ipv6 + number_of_computed_ingress_with_referenced_security_group_id = var.number_of_computed_ingress_with_referenced_security_group_id + number_of_computed_ingress_with_prefix_list_id = var.number_of_computed_ingress_with_prefix_list_id ######### # Egress @@ -78,20 +78,20 @@ module "sg" { egress_with_self = concat(var.auto_egress_with_self, var.egress_with_self) # Open to IPv4 cidr blocks - egress_with_cidr_blocks = var.egress_with_cidr_blocks + egress_with_cidr_ipv4 = var.egress_with_cidr_ipv4 # Open to IPv6 cidr blocks - egress_with_ipv6_cidr_blocks = var.egress_with_ipv6_cidr_blocks + egress_with_cidr_ipv6 = var.egress_with_cidr_ipv6 # Open for security group id - egress_with_source_security_group_id = var.egress_with_source_security_group_id + egress_with_referenced_security_group_id = var.egress_with_referenced_security_group_id # Open for prefix list id - egress_with_prefix_list_ids = var.egress_with_prefix_list_ids + egress_with_prefix_list_id = var.egress_with_prefix_list_id # Default egress CIDR blocks - egress_cidr_blocks = var.egress_cidr_blocks - egress_ipv6_cidr_blocks = var.egress_ipv6_cidr_blocks + egress_cidr_ipv4 = var.egress_cidr_ipv4 + egress_cidr_ipv6 = var.egress_cidr_ipv6 # Default prefix list ids egress_prefix_list_ids = var.egress_prefix_list_ids @@ -106,24 +106,24 @@ module "sg" { computed_egress_with_self = concat(var.auto_computed_egress_with_self, var.computed_egress_with_self) # Open to IPv4 cidr blocks - computed_egress_with_cidr_blocks = var.computed_egress_with_cidr_blocks + computed_egress_with_cidr_ipv4 = var.computed_egress_with_cidr_ipv4 # Open to IPv6 cidr blocks - computed_egress_with_ipv6_cidr_blocks = var.computed_egress_with_ipv6_cidr_blocks + computed_egress_with_cidr_ipv6 = var.computed_egress_with_cidr_ipv6 # Open for security group id - computed_egress_with_source_security_group_id = var.computed_egress_with_source_security_group_id + computed_egress_with_referenced_security_group_id = var.computed_egress_with_referenced_security_group_id # Open for prefix list id - computed_egress_with_prefix_list_ids = var.computed_egress_with_prefix_list_ids + computed_egress_with_prefix_list_id = var.computed_egress_with_prefix_list_id ############################# # Number of computed egress ############################# - number_of_computed_egress_rules = var.auto_number_of_computed_egress_rules + var.number_of_computed_egress_rules - number_of_computed_egress_with_self = var.auto_number_of_computed_egress_with_self + var.number_of_computed_egress_with_self - number_of_computed_egress_with_cidr_blocks = var.number_of_computed_egress_with_cidr_blocks - number_of_computed_egress_with_ipv6_cidr_blocks = var.number_of_computed_egress_with_ipv6_cidr_blocks - number_of_computed_egress_with_source_security_group_id = var.number_of_computed_egress_with_source_security_group_id - number_of_computed_egress_with_prefix_list_ids = var.number_of_computed_egress_with_prefix_list_ids + number_of_computed_egress_rules = var.auto_number_of_computed_egress_rules + var.number_of_computed_egress_rules + number_of_computed_egress_with_self = var.auto_number_of_computed_egress_with_self + var.number_of_computed_egress_with_self + number_of_computed_egress_with_cidr_ipv4 = var.number_of_computed_egress_with_cidr_ipv4 + number_of_computed_egress_with_cidr_ipv6 = var.number_of_computed_egress_with_cidr_ipv6 + number_of_computed_egress_with_referenced_security_group_id = var.number_of_computed_egress_with_referenced_security_group_id + number_of_computed_egress_with_prefix_list_id = var.number_of_computed_egress_with_prefix_list_id } diff --git a/modules/mongodb/variables.tf b/modules/mongodb/variables.tf index 60c8c27b..6590c9e3 100644 --- a/modules/mongodb/variables.tf +++ b/modules/mongodb/variables.tf @@ -56,37 +56,37 @@ variable "ingress_with_self" { default = [] } -variable "ingress_with_cidr_blocks" { - description = "List of ingress rules to create where 'cidr_blocks' is used" +variable "ingress_with_cidr_ipv4" { + description = "List of ingress rules to create where 'cidr_ipv4' is used" type = list(map(string)) default = [] } -variable "ingress_with_ipv6_cidr_blocks" { +variable "ingress_with_cidr_ipv6" { description = "List of ingress rules to create where 'ipv6_cidr_blocks' is used" type = list(map(string)) default = [] } -variable "ingress_with_source_security_group_id" { +variable "ingress_with_referenced_security_group_id" { description = "List of ingress rules to create where 'source_security_group_id' is used" type = list(map(string)) default = [] } -variable "ingress_with_prefix_list_ids" { - description = "List of ingress rules to create where 'prefix_list_ids' is used" +variable "ingress_with_prefix_list_id" { + description = "List of ingress rules to create where 'prefix_list_id' is used" type = list(map(string)) default = [] } -variable "ingress_cidr_blocks" { +variable "ingress_cidr_ipv4" { description = "List of IPv4 CIDR ranges to use on all ingress rules" type = list(string) default = [] } -variable "ingress_ipv6_cidr_blocks" { +variable "ingress_cidr_ipv6" { description = "List of IPv6 CIDR ranges to use on all ingress rules" type = list(string) default = [] @@ -113,26 +113,26 @@ variable "computed_ingress_with_self" { default = [] } -variable "computed_ingress_with_cidr_blocks" { - description = "List of computed ingress rules to create where 'cidr_blocks' is used" +variable "computed_ingress_with_cidr_ipv4" { + description = "List of computed ingress rules to create where 'cidr_ipv4' is used" type = list(map(string)) default = [] } -variable "computed_ingress_with_ipv6_cidr_blocks" { +variable "computed_ingress_with_cidr_ipv6" { description = "List of computed ingress rules to create where 'ipv6_cidr_blocks' is used" type = list(map(string)) default = [] } -variable "computed_ingress_with_source_security_group_id" { +variable "computed_ingress_with_referenced_security_group_id" { description = "List of computed ingress rules to create where 'source_security_group_id' is used" type = list(map(string)) default = [] } -variable "computed_ingress_with_prefix_list_ids" { - description = "List of computed ingress rules to create where 'prefix_list_ids' is used" +variable "computed_ingress_with_prefix_list_id" { + description = "List of computed ingress rules to create where 'prefix_list_id' is used" type = list(map(string)) default = [] } @@ -170,26 +170,26 @@ variable "number_of_computed_ingress_with_self" { default = 0 } -variable "number_of_computed_ingress_with_cidr_blocks" { - description = "Number of computed ingress rules to create where 'cidr_blocks' is used" +variable "number_of_computed_ingress_with_cidr_ipv4" { + description = "Number of computed ingress rules to create where 'cidr_ipv4' is used" type = number default = 0 } -variable "number_of_computed_ingress_with_ipv6_cidr_blocks" { +variable "number_of_computed_ingress_with_cidr_ipv6" { description = "Number of computed ingress rules to create where 'ipv6_cidr_blocks' is used" type = number default = 0 } -variable "number_of_computed_ingress_with_source_security_group_id" { +variable "number_of_computed_ingress_with_referenced_security_group_id" { description = "Number of computed ingress rules to create where 'source_security_group_id' is used" type = number default = 0 } -variable "number_of_computed_ingress_with_prefix_list_ids" { - description = "Number of computed ingress rules to create where 'prefix_list_ids' is used" +variable "number_of_computed_ingress_with_prefix_list_id" { + description = "Number of computed ingress rules to create where 'prefix_list_id' is used" type = number default = 0 } @@ -227,37 +227,37 @@ variable "egress_with_self" { default = [] } -variable "egress_with_cidr_blocks" { - description = "List of egress rules to create where 'cidr_blocks' is used" +variable "egress_with_cidr_ipv4" { + description = "List of egress rules to create where 'cidr_ipv4' is used" type = list(map(string)) default = [] } -variable "egress_with_ipv6_cidr_blocks" { +variable "egress_with_cidr_ipv6" { description = "List of egress rules to create where 'ipv6_cidr_blocks' is used" type = list(map(string)) default = [] } -variable "egress_with_source_security_group_id" { +variable "egress_with_referenced_security_group_id" { description = "List of egress rules to create where 'source_security_group_id' is used" type = list(map(string)) default = [] } -variable "egress_with_prefix_list_ids" { - description = "List of egress rules to create where 'prefix_list_ids' is used" +variable "egress_with_prefix_list_id" { + description = "List of egress rules to create where 'prefix_list_id' is used" type = list(map(string)) default = [] } -variable "egress_cidr_blocks" { +variable "egress_cidr_ipv4" { description = "List of IPv4 CIDR ranges to use on all egress rules" type = list(string) default = ["0.0.0.0/0"] } -variable "egress_ipv6_cidr_blocks" { +variable "egress_cidr_ipv6" { description = "List of IPv6 CIDR ranges to use on all egress rules" type = list(string) default = ["::/0"] @@ -284,26 +284,26 @@ variable "computed_egress_with_self" { default = [] } -variable "computed_egress_with_cidr_blocks" { - description = "List of computed egress rules to create where 'cidr_blocks' is used" +variable "computed_egress_with_cidr_ipv4" { + description = "List of computed egress rules to create where 'cidr_ipv4' is used" type = list(map(string)) default = [] } -variable "computed_egress_with_ipv6_cidr_blocks" { +variable "computed_egress_with_cidr_ipv6" { description = "List of computed egress rules to create where 'ipv6_cidr_blocks' is used" type = list(map(string)) default = [] } -variable "computed_egress_with_source_security_group_id" { +variable "computed_egress_with_referenced_security_group_id" { description = "List of computed egress rules to create where 'source_security_group_id' is used" type = list(map(string)) default = [] } -variable "computed_egress_with_prefix_list_ids" { - description = "List of computed egress rules to create where 'prefix_list_ids' is used" +variable "computed_egress_with_prefix_list_id" { + description = "List of computed egress rules to create where 'prefix_list_id' is used" type = list(map(string)) default = [] } @@ -341,26 +341,26 @@ variable "number_of_computed_egress_with_self" { default = 0 } -variable "number_of_computed_egress_with_cidr_blocks" { - description = "Number of computed egress rules to create where 'cidr_blocks' is used" +variable "number_of_computed_egress_with_cidr_ipv4" { + description = "Number of computed egress rules to create where 'cidr_ipv4' is used" type = number default = 0 } -variable "number_of_computed_egress_with_ipv6_cidr_blocks" { +variable "number_of_computed_egress_with_cidr_ipv6" { description = "Number of computed egress rules to create where 'ipv6_cidr_blocks' is used" type = number default = 0 } -variable "number_of_computed_egress_with_source_security_group_id" { +variable "number_of_computed_egress_with_referenced_security_group_id" { description = "Number of computed egress rules to create where 'source_security_group_id' is used" type = number default = 0 } -variable "number_of_computed_egress_with_prefix_list_ids" { - description = "Number of computed egress rules to create where 'prefix_list_ids' is used" +variable "number_of_computed_egress_with_prefix_list_id" { + description = "Number of computed egress rules to create where 'prefix_list_id' is used" type = number default = 0 } diff --git a/modules/mssql/README.md b/modules/mssql/README.md index cce23f10..ab812426 100644 --- a/modules/mssql/README.md +++ b/modules/mssql/README.md @@ -55,59 +55,59 @@ No resources. | [computed\_egress\_ipv6\_cidr\_blocks](#input\_computed\_egress\_ipv6\_cidr\_blocks) | List of IPv6 CIDR ranges to use on all computed egress rules | `list(string)` |
[
"::/0"
]
| no | | [computed\_egress\_prefix\_list\_ids](#input\_computed\_egress\_prefix\_list\_ids) | List of prefix list IDs (for allowing access to VPC endpoints) to use on all computed egress rules | `list(string)` | `[]` | no | | [computed\_egress\_rules](#input\_computed\_egress\_rules) | List of computed egress rules to create by name | `list(string)` | `[]` | no | -| [computed\_egress\_with\_cidr\_blocks](#input\_computed\_egress\_with\_cidr\_blocks) | List of computed egress rules to create where 'cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [computed\_egress\_with\_ipv6\_cidr\_blocks](#input\_computed\_egress\_with\_ipv6\_cidr\_blocks) | List of computed egress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [computed\_egress\_with\_prefix\_list\_ids](#input\_computed\_egress\_with\_prefix\_list\_ids) | List of computed egress rules to create where 'prefix\_list\_ids' is used | `list(map(string))` | `[]` | no | +| [computed\_egress\_with\_cidr\_ipv4](#input\_computed\_egress\_with\_cidr\_ipv4) | List of computed egress rules to create where 'cidr\_ipv4' is used | `list(map(string))` | `[]` | no | +| [computed\_egress\_with\_cidr\_ipv6](#input\_computed\_egress\_with\_cidr\_ipv6) | List of computed egress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | +| [computed\_egress\_with\_prefix\_list\_id](#input\_computed\_egress\_with\_prefix\_list\_id) | List of computed egress rules to create where 'prefix\_list\_id' is used | `list(map(string))` | `[]` | no | +| [computed\_egress\_with\_referenced\_security\_group\_id](#input\_computed\_egress\_with\_referenced\_security\_group\_id) | List of computed egress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [computed\_egress\_with\_self](#input\_computed\_egress\_with\_self) | List of computed egress rules to create where 'self' is defined | `list(map(string))` | `[]` | no | -| [computed\_egress\_with\_source\_security\_group\_id](#input\_computed\_egress\_with\_source\_security\_group\_id) | List of computed egress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [computed\_ingress\_cidr\_blocks](#input\_computed\_ingress\_cidr\_blocks) | List of IPv4 CIDR ranges to use on all computed ingress rules | `list(string)` | `[]` | no | | [computed\_ingress\_ipv6\_cidr\_blocks](#input\_computed\_ingress\_ipv6\_cidr\_blocks) | List of IPv6 CIDR ranges to use on all computed ingress rules | `list(string)` | `[]` | no | | [computed\_ingress\_prefix\_list\_ids](#input\_computed\_ingress\_prefix\_list\_ids) | List of prefix list IDs (for allowing access to VPC endpoints) to use on all computed ingress rules | `list(string)` | `[]` | no | | [computed\_ingress\_rules](#input\_computed\_ingress\_rules) | List of computed ingress rules to create by name | `list(string)` | `[]` | no | -| [computed\_ingress\_with\_cidr\_blocks](#input\_computed\_ingress\_with\_cidr\_blocks) | List of computed ingress rules to create where 'cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [computed\_ingress\_with\_ipv6\_cidr\_blocks](#input\_computed\_ingress\_with\_ipv6\_cidr\_blocks) | List of computed ingress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [computed\_ingress\_with\_prefix\_list\_ids](#input\_computed\_ingress\_with\_prefix\_list\_ids) | List of computed ingress rules to create where 'prefix\_list\_ids' is used | `list(map(string))` | `[]` | no | +| [computed\_ingress\_with\_cidr\_ipv4](#input\_computed\_ingress\_with\_cidr\_ipv4) | List of computed ingress rules to create where 'cidr\_ipv4' is used | `list(map(string))` | `[]` | no | +| [computed\_ingress\_with\_cidr\_ipv6](#input\_computed\_ingress\_with\_cidr\_ipv6) | List of computed ingress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | +| [computed\_ingress\_with\_prefix\_list\_id](#input\_computed\_ingress\_with\_prefix\_list\_id) | List of computed ingress rules to create where 'prefix\_list\_id' is used | `list(map(string))` | `[]` | no | +| [computed\_ingress\_with\_referenced\_security\_group\_id](#input\_computed\_ingress\_with\_referenced\_security\_group\_id) | List of computed ingress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [computed\_ingress\_with\_self](#input\_computed\_ingress\_with\_self) | List of computed ingress rules to create where 'self' is defined | `list(map(string))` | `[]` | no | -| [computed\_ingress\_with\_source\_security\_group\_id](#input\_computed\_ingress\_with\_source\_security\_group\_id) | List of computed ingress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [create](#input\_create) | Whether to create security group and all rules | `bool` | `true` | no | | [description](#input\_description) | Description of security group | `string` | `"Security Group managed by Terraform"` | no | -| [egress\_cidr\_blocks](#input\_egress\_cidr\_blocks) | List of IPv4 CIDR ranges to use on all egress rules | `list(string)` |
[
"0.0.0.0/0"
]
| no | -| [egress\_ipv6\_cidr\_blocks](#input\_egress\_ipv6\_cidr\_blocks) | List of IPv6 CIDR ranges to use on all egress rules | `list(string)` |
[
"::/0"
]
| no | +| [egress\_cidr\_ipv4](#input\_egress\_cidr\_ipv4) | List of IPv4 CIDR ranges to use on all egress rules | `list(string)` |
[
"0.0.0.0/0"
]
| no | +| [egress\_cidr\_ipv6](#input\_egress\_cidr\_ipv6) | List of IPv6 CIDR ranges to use on all egress rules | `list(string)` |
[
"::/0"
]
| no | | [egress\_prefix\_list\_ids](#input\_egress\_prefix\_list\_ids) | List of prefix list IDs (for allowing access to VPC endpoints) to use on all egress rules | `list(string)` | `[]` | no | | [egress\_rules](#input\_egress\_rules) | List of egress rules to create by name | `list(string)` | `[]` | no | -| [egress\_with\_cidr\_blocks](#input\_egress\_with\_cidr\_blocks) | List of egress rules to create where 'cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [egress\_with\_ipv6\_cidr\_blocks](#input\_egress\_with\_ipv6\_cidr\_blocks) | List of egress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [egress\_with\_prefix\_list\_ids](#input\_egress\_with\_prefix\_list\_ids) | List of egress rules to create where 'prefix\_list\_ids' is used | `list(map(string))` | `[]` | no | +| [egress\_with\_cidr\_ipv4](#input\_egress\_with\_cidr\_ipv4) | List of egress rules to create where 'cidr\_ipv4' is used | `list(map(string))` | `[]` | no | +| [egress\_with\_cidr\_ipv6](#input\_egress\_with\_cidr\_ipv6) | List of egress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | +| [egress\_with\_prefix\_list\_id](#input\_egress\_with\_prefix\_list\_id) | List of egress rules to create where 'prefix\_list\_id' is used | `list(map(string))` | `[]` | no | +| [egress\_with\_referenced\_security\_group\_id](#input\_egress\_with\_referenced\_security\_group\_id) | List of egress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [egress\_with\_self](#input\_egress\_with\_self) | List of egress rules to create where 'self' is defined | `list(map(string))` | `[]` | no | -| [egress\_with\_source\_security\_group\_id](#input\_egress\_with\_source\_security\_group\_id) | List of egress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | -| [ingress\_cidr\_blocks](#input\_ingress\_cidr\_blocks) | List of IPv4 CIDR ranges to use on all ingress rules | `list(string)` | `[]` | no | -| [ingress\_ipv6\_cidr\_blocks](#input\_ingress\_ipv6\_cidr\_blocks) | List of IPv6 CIDR ranges to use on all ingress rules | `list(string)` | `[]` | no | +| [ingress\_cidr\_ipv4](#input\_ingress\_cidr\_ipv4) | List of IPv4 CIDR ranges to use on all ingress rules | `list(string)` | `[]` | no | +| [ingress\_cidr\_ipv6](#input\_ingress\_cidr\_ipv6) | List of IPv6 CIDR ranges to use on all ingress rules | `list(string)` | `[]` | no | | [ingress\_prefix\_list\_ids](#input\_ingress\_prefix\_list\_ids) | List of prefix list IDs (for allowing access to VPC endpoints) to use on all ingress rules | `list(string)` | `[]` | no | | [ingress\_rules](#input\_ingress\_rules) | List of ingress rules to create by name | `list(string)` | `[]` | no | -| [ingress\_with\_cidr\_blocks](#input\_ingress\_with\_cidr\_blocks) | List of ingress rules to create where 'cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [ingress\_with\_ipv6\_cidr\_blocks](#input\_ingress\_with\_ipv6\_cidr\_blocks) | List of ingress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [ingress\_with\_prefix\_list\_ids](#input\_ingress\_with\_prefix\_list\_ids) | List of ingress rules to create where 'prefix\_list\_ids' is used | `list(map(string))` | `[]` | no | +| [ingress\_with\_cidr\_ipv4](#input\_ingress\_with\_cidr\_ipv4) | List of ingress rules to create where 'cidr\_ipv4' is used | `list(map(string))` | `[]` | no | +| [ingress\_with\_cidr\_ipv6](#input\_ingress\_with\_cidr\_ipv6) | List of ingress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | +| [ingress\_with\_prefix\_list\_id](#input\_ingress\_with\_prefix\_list\_id) | List of ingress rules to create where 'prefix\_list\_id' is used | `list(map(string))` | `[]` | no | +| [ingress\_with\_referenced\_security\_group\_id](#input\_ingress\_with\_referenced\_security\_group\_id) | List of ingress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [ingress\_with\_self](#input\_ingress\_with\_self) | List of ingress rules to create where 'self' is defined | `list(map(string))` | `[]` | no | -| [ingress\_with\_source\_security\_group\_id](#input\_ingress\_with\_source\_security\_group\_id) | List of ingress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [name](#input\_name) | Name of security group | `string` | n/a | yes | | [number\_of\_computed\_egress\_cidr\_blocks](#input\_number\_of\_computed\_egress\_cidr\_blocks) | Number of IPv4 CIDR ranges to use on all computed egress rules | `number` | `0` | no | | [number\_of\_computed\_egress\_ipv6\_cidr\_blocks](#input\_number\_of\_computed\_egress\_ipv6\_cidr\_blocks) | Number of IPv6 CIDR ranges to use on all computed egress rules | `number` | `0` | no | | [number\_of\_computed\_egress\_prefix\_list\_ids](#input\_number\_of\_computed\_egress\_prefix\_list\_ids) | Number of prefix list IDs (for allowing access to VPC endpoints) to use on all computed egress rules | `number` | `0` | no | | [number\_of\_computed\_egress\_rules](#input\_number\_of\_computed\_egress\_rules) | Number of computed egress rules to create by name | `number` | `0` | no | -| [number\_of\_computed\_egress\_with\_cidr\_blocks](#input\_number\_of\_computed\_egress\_with\_cidr\_blocks) | Number of computed egress rules to create where 'cidr\_blocks' is used | `number` | `0` | no | -| [number\_of\_computed\_egress\_with\_ipv6\_cidr\_blocks](#input\_number\_of\_computed\_egress\_with\_ipv6\_cidr\_blocks) | Number of computed egress rules to create where 'ipv6\_cidr\_blocks' is used | `number` | `0` | no | -| [number\_of\_computed\_egress\_with\_prefix\_list\_ids](#input\_number\_of\_computed\_egress\_with\_prefix\_list\_ids) | Number of computed egress rules to create where 'prefix\_list\_ids' is used | `number` | `0` | no | +| [number\_of\_computed\_egress\_with\_cidr\_ipv4](#input\_number\_of\_computed\_egress\_with\_cidr\_ipv4) | Number of computed egress rules to create where 'cidr\_ipv4' is used | `number` | `0` | no | +| [number\_of\_computed\_egress\_with\_cidr\_ipv6](#input\_number\_of\_computed\_egress\_with\_cidr\_ipv6) | Number of computed egress rules to create where 'ipv6\_cidr\_blocks' is used | `number` | `0` | no | +| [number\_of\_computed\_egress\_with\_prefix\_list\_id](#input\_number\_of\_computed\_egress\_with\_prefix\_list\_id) | Number of computed egress rules to create where 'prefix\_list\_id' is used | `number` | `0` | no | +| [number\_of\_computed\_egress\_with\_referenced\_security\_group\_id](#input\_number\_of\_computed\_egress\_with\_referenced\_security\_group\_id) | Number of computed egress rules to create where 'source\_security\_group\_id' is used | `number` | `0` | no | | [number\_of\_computed\_egress\_with\_self](#input\_number\_of\_computed\_egress\_with\_self) | Number of computed egress rules to create where 'self' is defined | `number` | `0` | no | -| [number\_of\_computed\_egress\_with\_source\_security\_group\_id](#input\_number\_of\_computed\_egress\_with\_source\_security\_group\_id) | Number of computed egress rules to create where 'source\_security\_group\_id' is used | `number` | `0` | no | | [number\_of\_computed\_ingress\_cidr\_blocks](#input\_number\_of\_computed\_ingress\_cidr\_blocks) | Number of IPv4 CIDR ranges to use on all computed ingress rules | `number` | `0` | no | | [number\_of\_computed\_ingress\_ipv6\_cidr\_blocks](#input\_number\_of\_computed\_ingress\_ipv6\_cidr\_blocks) | Number of IPv6 CIDR ranges to use on all computed ingress rules | `number` | `0` | no | | [number\_of\_computed\_ingress\_prefix\_list\_ids](#input\_number\_of\_computed\_ingress\_prefix\_list\_ids) | Number of prefix list IDs (for allowing access to VPC endpoints) to use on all computed ingress rules | `number` | `0` | no | | [number\_of\_computed\_ingress\_rules](#input\_number\_of\_computed\_ingress\_rules) | Number of computed ingress rules to create by name | `number` | `0` | no | -| [number\_of\_computed\_ingress\_with\_cidr\_blocks](#input\_number\_of\_computed\_ingress\_with\_cidr\_blocks) | Number of computed ingress rules to create where 'cidr\_blocks' is used | `number` | `0` | no | -| [number\_of\_computed\_ingress\_with\_ipv6\_cidr\_blocks](#input\_number\_of\_computed\_ingress\_with\_ipv6\_cidr\_blocks) | Number of computed ingress rules to create where 'ipv6\_cidr\_blocks' is used | `number` | `0` | no | -| [number\_of\_computed\_ingress\_with\_prefix\_list\_ids](#input\_number\_of\_computed\_ingress\_with\_prefix\_list\_ids) | Number of computed ingress rules to create where 'prefix\_list\_ids' is used | `number` | `0` | no | +| [number\_of\_computed\_ingress\_with\_cidr\_ipv4](#input\_number\_of\_computed\_ingress\_with\_cidr\_ipv4) | Number of computed ingress rules to create where 'cidr\_ipv4' is used | `number` | `0` | no | +| [number\_of\_computed\_ingress\_with\_cidr\_ipv6](#input\_number\_of\_computed\_ingress\_with\_cidr\_ipv6) | Number of computed ingress rules to create where 'ipv6\_cidr\_blocks' is used | `number` | `0` | no | +| [number\_of\_computed\_ingress\_with\_prefix\_list\_id](#input\_number\_of\_computed\_ingress\_with\_prefix\_list\_id) | Number of computed ingress rules to create where 'prefix\_list\_id' is used | `number` | `0` | no | +| [number\_of\_computed\_ingress\_with\_referenced\_security\_group\_id](#input\_number\_of\_computed\_ingress\_with\_referenced\_security\_group\_id) | Number of computed ingress rules to create where 'source\_security\_group\_id' is used | `number` | `0` | no | | [number\_of\_computed\_ingress\_with\_self](#input\_number\_of\_computed\_ingress\_with\_self) | Number of computed ingress rules to create where 'self' is defined | `number` | `0` | no | -| [number\_of\_computed\_ingress\_with\_source\_security\_group\_id](#input\_number\_of\_computed\_ingress\_with\_source\_security\_group\_id) | Number of computed ingress rules to create where 'source\_security\_group\_id' is used | `number` | `0` | no | | [revoke\_rules\_on\_delete](#input\_revoke\_rules\_on\_delete) | Instruct Terraform to revoke all of the Security Groups attached ingress and egress rules before deleting the rule itself. Enable for EMR. | `bool` | `false` | no | | [tags](#input\_tags) | A mapping of tags to assign to security group | `map(string)` | `{}` | no | | [use\_name\_prefix](#input\_use\_name\_prefix) | Whether to use name\_prefix or fixed name. Should be true to able to update security group name after initial creation | `bool` | `true` | no | diff --git a/modules/mssql/main.tf b/modules/mssql/main.tf index 80ea0adb..d2a1bf93 100644 --- a/modules/mssql/main.tf +++ b/modules/mssql/main.tf @@ -19,20 +19,20 @@ module "sg" { ingress_with_self = concat(var.auto_ingress_with_self, var.ingress_with_self) # Open to IPv4 cidr blocks - ingress_with_cidr_blocks = var.ingress_with_cidr_blocks + ingress_with_cidr_ipv4 = var.ingress_with_cidr_ipv4 # Open to IPv6 cidr blocks - ingress_with_ipv6_cidr_blocks = var.ingress_with_ipv6_cidr_blocks + ingress_with_cidr_ipv6 = var.ingress_with_cidr_ipv6 # Open for security group id - ingress_with_source_security_group_id = var.ingress_with_source_security_group_id + ingress_with_referenced_security_group_id = var.ingress_with_referenced_security_group_id # Open for prefix list id - ingress_with_prefix_list_ids = var.ingress_with_prefix_list_ids + ingress_with_prefix_list_id = var.ingress_with_prefix_list_id # Default ingress CIDR blocks - ingress_cidr_blocks = var.ingress_cidr_blocks - ingress_ipv6_cidr_blocks = var.ingress_ipv6_cidr_blocks + ingress_cidr_ipv4 = var.ingress_cidr_ipv4 + ingress_cidr_ipv6 = var.ingress_cidr_ipv6 # Default prefix list ids ingress_prefix_list_ids = var.ingress_prefix_list_ids @@ -47,26 +47,26 @@ module "sg" { computed_ingress_with_self = concat(var.auto_computed_ingress_with_self, var.computed_ingress_with_self) # Open to IPv4 cidr blocks - computed_ingress_with_cidr_blocks = var.computed_ingress_with_cidr_blocks + computed_ingress_with_cidr_ipv4 = var.computed_ingress_with_cidr_ipv4 # Open to IPv6 cidr blocks - computed_ingress_with_ipv6_cidr_blocks = var.computed_ingress_with_ipv6_cidr_blocks + computed_ingress_with_cidr_ipv6 = var.computed_ingress_with_cidr_ipv6 # Open for security group id - computed_ingress_with_source_security_group_id = var.computed_ingress_with_source_security_group_id + computed_ingress_with_referenced_security_group_id = var.computed_ingress_with_referenced_security_group_id # Open for prefix list id - computed_ingress_with_prefix_list_ids = var.computed_ingress_with_prefix_list_ids + computed_ingress_with_prefix_list_id = var.computed_ingress_with_prefix_list_id ############################# # Number of computed ingress ############################# - number_of_computed_ingress_rules = var.auto_number_of_computed_ingress_rules + var.number_of_computed_ingress_rules - number_of_computed_ingress_with_self = var.auto_number_of_computed_ingress_with_self + var.number_of_computed_ingress_with_self - number_of_computed_ingress_with_cidr_blocks = var.number_of_computed_ingress_with_cidr_blocks - number_of_computed_ingress_with_ipv6_cidr_blocks = var.number_of_computed_ingress_with_ipv6_cidr_blocks - number_of_computed_ingress_with_source_security_group_id = var.number_of_computed_ingress_with_source_security_group_id - number_of_computed_ingress_with_prefix_list_ids = var.number_of_computed_ingress_with_prefix_list_ids + number_of_computed_ingress_rules = var.auto_number_of_computed_ingress_rules + var.number_of_computed_ingress_rules + number_of_computed_ingress_with_self = var.auto_number_of_computed_ingress_with_self + var.number_of_computed_ingress_with_self + number_of_computed_ingress_with_cidr_ipv4 = var.number_of_computed_ingress_with_cidr_ipv4 + number_of_computed_ingress_with_cidr_ipv6 = var.number_of_computed_ingress_with_cidr_ipv6 + number_of_computed_ingress_with_referenced_security_group_id = var.number_of_computed_ingress_with_referenced_security_group_id + number_of_computed_ingress_with_prefix_list_id = var.number_of_computed_ingress_with_prefix_list_id ######### # Egress @@ -78,20 +78,20 @@ module "sg" { egress_with_self = concat(var.auto_egress_with_self, var.egress_with_self) # Open to IPv4 cidr blocks - egress_with_cidr_blocks = var.egress_with_cidr_blocks + egress_with_cidr_ipv4 = var.egress_with_cidr_ipv4 # Open to IPv6 cidr blocks - egress_with_ipv6_cidr_blocks = var.egress_with_ipv6_cidr_blocks + egress_with_cidr_ipv6 = var.egress_with_cidr_ipv6 # Open for security group id - egress_with_source_security_group_id = var.egress_with_source_security_group_id + egress_with_referenced_security_group_id = var.egress_with_referenced_security_group_id # Open for prefix list id - egress_with_prefix_list_ids = var.egress_with_prefix_list_ids + egress_with_prefix_list_id = var.egress_with_prefix_list_id # Default egress CIDR blocks - egress_cidr_blocks = var.egress_cidr_blocks - egress_ipv6_cidr_blocks = var.egress_ipv6_cidr_blocks + egress_cidr_ipv4 = var.egress_cidr_ipv4 + egress_cidr_ipv6 = var.egress_cidr_ipv6 # Default prefix list ids egress_prefix_list_ids = var.egress_prefix_list_ids @@ -106,24 +106,24 @@ module "sg" { computed_egress_with_self = concat(var.auto_computed_egress_with_self, var.computed_egress_with_self) # Open to IPv4 cidr blocks - computed_egress_with_cidr_blocks = var.computed_egress_with_cidr_blocks + computed_egress_with_cidr_ipv4 = var.computed_egress_with_cidr_ipv4 # Open to IPv6 cidr blocks - computed_egress_with_ipv6_cidr_blocks = var.computed_egress_with_ipv6_cidr_blocks + computed_egress_with_cidr_ipv6 = var.computed_egress_with_cidr_ipv6 # Open for security group id - computed_egress_with_source_security_group_id = var.computed_egress_with_source_security_group_id + computed_egress_with_referenced_security_group_id = var.computed_egress_with_referenced_security_group_id # Open for prefix list id - computed_egress_with_prefix_list_ids = var.computed_egress_with_prefix_list_ids + computed_egress_with_prefix_list_id = var.computed_egress_with_prefix_list_id ############################# # Number of computed egress ############################# - number_of_computed_egress_rules = var.auto_number_of_computed_egress_rules + var.number_of_computed_egress_rules - number_of_computed_egress_with_self = var.auto_number_of_computed_egress_with_self + var.number_of_computed_egress_with_self - number_of_computed_egress_with_cidr_blocks = var.number_of_computed_egress_with_cidr_blocks - number_of_computed_egress_with_ipv6_cidr_blocks = var.number_of_computed_egress_with_ipv6_cidr_blocks - number_of_computed_egress_with_source_security_group_id = var.number_of_computed_egress_with_source_security_group_id - number_of_computed_egress_with_prefix_list_ids = var.number_of_computed_egress_with_prefix_list_ids + number_of_computed_egress_rules = var.auto_number_of_computed_egress_rules + var.number_of_computed_egress_rules + number_of_computed_egress_with_self = var.auto_number_of_computed_egress_with_self + var.number_of_computed_egress_with_self + number_of_computed_egress_with_cidr_ipv4 = var.number_of_computed_egress_with_cidr_ipv4 + number_of_computed_egress_with_cidr_ipv6 = var.number_of_computed_egress_with_cidr_ipv6 + number_of_computed_egress_with_referenced_security_group_id = var.number_of_computed_egress_with_referenced_security_group_id + number_of_computed_egress_with_prefix_list_id = var.number_of_computed_egress_with_prefix_list_id } diff --git a/modules/mssql/variables.tf b/modules/mssql/variables.tf index 60c8c27b..6590c9e3 100644 --- a/modules/mssql/variables.tf +++ b/modules/mssql/variables.tf @@ -56,37 +56,37 @@ variable "ingress_with_self" { default = [] } -variable "ingress_with_cidr_blocks" { - description = "List of ingress rules to create where 'cidr_blocks' is used" +variable "ingress_with_cidr_ipv4" { + description = "List of ingress rules to create where 'cidr_ipv4' is used" type = list(map(string)) default = [] } -variable "ingress_with_ipv6_cidr_blocks" { +variable "ingress_with_cidr_ipv6" { description = "List of ingress rules to create where 'ipv6_cidr_blocks' is used" type = list(map(string)) default = [] } -variable "ingress_with_source_security_group_id" { +variable "ingress_with_referenced_security_group_id" { description = "List of ingress rules to create where 'source_security_group_id' is used" type = list(map(string)) default = [] } -variable "ingress_with_prefix_list_ids" { - description = "List of ingress rules to create where 'prefix_list_ids' is used" +variable "ingress_with_prefix_list_id" { + description = "List of ingress rules to create where 'prefix_list_id' is used" type = list(map(string)) default = [] } -variable "ingress_cidr_blocks" { +variable "ingress_cidr_ipv4" { description = "List of IPv4 CIDR ranges to use on all ingress rules" type = list(string) default = [] } -variable "ingress_ipv6_cidr_blocks" { +variable "ingress_cidr_ipv6" { description = "List of IPv6 CIDR ranges to use on all ingress rules" type = list(string) default = [] @@ -113,26 +113,26 @@ variable "computed_ingress_with_self" { default = [] } -variable "computed_ingress_with_cidr_blocks" { - description = "List of computed ingress rules to create where 'cidr_blocks' is used" +variable "computed_ingress_with_cidr_ipv4" { + description = "List of computed ingress rules to create where 'cidr_ipv4' is used" type = list(map(string)) default = [] } -variable "computed_ingress_with_ipv6_cidr_blocks" { +variable "computed_ingress_with_cidr_ipv6" { description = "List of computed ingress rules to create where 'ipv6_cidr_blocks' is used" type = list(map(string)) default = [] } -variable "computed_ingress_with_source_security_group_id" { +variable "computed_ingress_with_referenced_security_group_id" { description = "List of computed ingress rules to create where 'source_security_group_id' is used" type = list(map(string)) default = [] } -variable "computed_ingress_with_prefix_list_ids" { - description = "List of computed ingress rules to create where 'prefix_list_ids' is used" +variable "computed_ingress_with_prefix_list_id" { + description = "List of computed ingress rules to create where 'prefix_list_id' is used" type = list(map(string)) default = [] } @@ -170,26 +170,26 @@ variable "number_of_computed_ingress_with_self" { default = 0 } -variable "number_of_computed_ingress_with_cidr_blocks" { - description = "Number of computed ingress rules to create where 'cidr_blocks' is used" +variable "number_of_computed_ingress_with_cidr_ipv4" { + description = "Number of computed ingress rules to create where 'cidr_ipv4' is used" type = number default = 0 } -variable "number_of_computed_ingress_with_ipv6_cidr_blocks" { +variable "number_of_computed_ingress_with_cidr_ipv6" { description = "Number of computed ingress rules to create where 'ipv6_cidr_blocks' is used" type = number default = 0 } -variable "number_of_computed_ingress_with_source_security_group_id" { +variable "number_of_computed_ingress_with_referenced_security_group_id" { description = "Number of computed ingress rules to create where 'source_security_group_id' is used" type = number default = 0 } -variable "number_of_computed_ingress_with_prefix_list_ids" { - description = "Number of computed ingress rules to create where 'prefix_list_ids' is used" +variable "number_of_computed_ingress_with_prefix_list_id" { + description = "Number of computed ingress rules to create where 'prefix_list_id' is used" type = number default = 0 } @@ -227,37 +227,37 @@ variable "egress_with_self" { default = [] } -variable "egress_with_cidr_blocks" { - description = "List of egress rules to create where 'cidr_blocks' is used" +variable "egress_with_cidr_ipv4" { + description = "List of egress rules to create where 'cidr_ipv4' is used" type = list(map(string)) default = [] } -variable "egress_with_ipv6_cidr_blocks" { +variable "egress_with_cidr_ipv6" { description = "List of egress rules to create where 'ipv6_cidr_blocks' is used" type = list(map(string)) default = [] } -variable "egress_with_source_security_group_id" { +variable "egress_with_referenced_security_group_id" { description = "List of egress rules to create where 'source_security_group_id' is used" type = list(map(string)) default = [] } -variable "egress_with_prefix_list_ids" { - description = "List of egress rules to create where 'prefix_list_ids' is used" +variable "egress_with_prefix_list_id" { + description = "List of egress rules to create where 'prefix_list_id' is used" type = list(map(string)) default = [] } -variable "egress_cidr_blocks" { +variable "egress_cidr_ipv4" { description = "List of IPv4 CIDR ranges to use on all egress rules" type = list(string) default = ["0.0.0.0/0"] } -variable "egress_ipv6_cidr_blocks" { +variable "egress_cidr_ipv6" { description = "List of IPv6 CIDR ranges to use on all egress rules" type = list(string) default = ["::/0"] @@ -284,26 +284,26 @@ variable "computed_egress_with_self" { default = [] } -variable "computed_egress_with_cidr_blocks" { - description = "List of computed egress rules to create where 'cidr_blocks' is used" +variable "computed_egress_with_cidr_ipv4" { + description = "List of computed egress rules to create where 'cidr_ipv4' is used" type = list(map(string)) default = [] } -variable "computed_egress_with_ipv6_cidr_blocks" { +variable "computed_egress_with_cidr_ipv6" { description = "List of computed egress rules to create where 'ipv6_cidr_blocks' is used" type = list(map(string)) default = [] } -variable "computed_egress_with_source_security_group_id" { +variable "computed_egress_with_referenced_security_group_id" { description = "List of computed egress rules to create where 'source_security_group_id' is used" type = list(map(string)) default = [] } -variable "computed_egress_with_prefix_list_ids" { - description = "List of computed egress rules to create where 'prefix_list_ids' is used" +variable "computed_egress_with_prefix_list_id" { + description = "List of computed egress rules to create where 'prefix_list_id' is used" type = list(map(string)) default = [] } @@ -341,26 +341,26 @@ variable "number_of_computed_egress_with_self" { default = 0 } -variable "number_of_computed_egress_with_cidr_blocks" { - description = "Number of computed egress rules to create where 'cidr_blocks' is used" +variable "number_of_computed_egress_with_cidr_ipv4" { + description = "Number of computed egress rules to create where 'cidr_ipv4' is used" type = number default = 0 } -variable "number_of_computed_egress_with_ipv6_cidr_blocks" { +variable "number_of_computed_egress_with_cidr_ipv6" { description = "Number of computed egress rules to create where 'ipv6_cidr_blocks' is used" type = number default = 0 } -variable "number_of_computed_egress_with_source_security_group_id" { +variable "number_of_computed_egress_with_referenced_security_group_id" { description = "Number of computed egress rules to create where 'source_security_group_id' is used" type = number default = 0 } -variable "number_of_computed_egress_with_prefix_list_ids" { - description = "Number of computed egress rules to create where 'prefix_list_ids' is used" +variable "number_of_computed_egress_with_prefix_list_id" { + description = "Number of computed egress rules to create where 'prefix_list_id' is used" type = number default = 0 } diff --git a/modules/mysql/README.md b/modules/mysql/README.md index 7d7b1586..ce977642 100644 --- a/modules/mysql/README.md +++ b/modules/mysql/README.md @@ -55,59 +55,59 @@ No resources. | [computed\_egress\_ipv6\_cidr\_blocks](#input\_computed\_egress\_ipv6\_cidr\_blocks) | List of IPv6 CIDR ranges to use on all computed egress rules | `list(string)` |
[
"::/0"
]
| no | | [computed\_egress\_prefix\_list\_ids](#input\_computed\_egress\_prefix\_list\_ids) | List of prefix list IDs (for allowing access to VPC endpoints) to use on all computed egress rules | `list(string)` | `[]` | no | | [computed\_egress\_rules](#input\_computed\_egress\_rules) | List of computed egress rules to create by name | `list(string)` | `[]` | no | -| [computed\_egress\_with\_cidr\_blocks](#input\_computed\_egress\_with\_cidr\_blocks) | List of computed egress rules to create where 'cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [computed\_egress\_with\_ipv6\_cidr\_blocks](#input\_computed\_egress\_with\_ipv6\_cidr\_blocks) | List of computed egress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [computed\_egress\_with\_prefix\_list\_ids](#input\_computed\_egress\_with\_prefix\_list\_ids) | List of computed egress rules to create where 'prefix\_list\_ids' is used | `list(map(string))` | `[]` | no | +| [computed\_egress\_with\_cidr\_ipv4](#input\_computed\_egress\_with\_cidr\_ipv4) | List of computed egress rules to create where 'cidr\_ipv4' is used | `list(map(string))` | `[]` | no | +| [computed\_egress\_with\_cidr\_ipv6](#input\_computed\_egress\_with\_cidr\_ipv6) | List of computed egress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | +| [computed\_egress\_with\_prefix\_list\_id](#input\_computed\_egress\_with\_prefix\_list\_id) | List of computed egress rules to create where 'prefix\_list\_id' is used | `list(map(string))` | `[]` | no | +| [computed\_egress\_with\_referenced\_security\_group\_id](#input\_computed\_egress\_with\_referenced\_security\_group\_id) | List of computed egress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [computed\_egress\_with\_self](#input\_computed\_egress\_with\_self) | List of computed egress rules to create where 'self' is defined | `list(map(string))` | `[]` | no | -| [computed\_egress\_with\_source\_security\_group\_id](#input\_computed\_egress\_with\_source\_security\_group\_id) | List of computed egress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [computed\_ingress\_cidr\_blocks](#input\_computed\_ingress\_cidr\_blocks) | List of IPv4 CIDR ranges to use on all computed ingress rules | `list(string)` | `[]` | no | | [computed\_ingress\_ipv6\_cidr\_blocks](#input\_computed\_ingress\_ipv6\_cidr\_blocks) | List of IPv6 CIDR ranges to use on all computed ingress rules | `list(string)` | `[]` | no | | [computed\_ingress\_prefix\_list\_ids](#input\_computed\_ingress\_prefix\_list\_ids) | List of prefix list IDs (for allowing access to VPC endpoints) to use on all computed ingress rules | `list(string)` | `[]` | no | | [computed\_ingress\_rules](#input\_computed\_ingress\_rules) | List of computed ingress rules to create by name | `list(string)` | `[]` | no | -| [computed\_ingress\_with\_cidr\_blocks](#input\_computed\_ingress\_with\_cidr\_blocks) | List of computed ingress rules to create where 'cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [computed\_ingress\_with\_ipv6\_cidr\_blocks](#input\_computed\_ingress\_with\_ipv6\_cidr\_blocks) | List of computed ingress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [computed\_ingress\_with\_prefix\_list\_ids](#input\_computed\_ingress\_with\_prefix\_list\_ids) | List of computed ingress rules to create where 'prefix\_list\_ids' is used | `list(map(string))` | `[]` | no | +| [computed\_ingress\_with\_cidr\_ipv4](#input\_computed\_ingress\_with\_cidr\_ipv4) | List of computed ingress rules to create where 'cidr\_ipv4' is used | `list(map(string))` | `[]` | no | +| [computed\_ingress\_with\_cidr\_ipv6](#input\_computed\_ingress\_with\_cidr\_ipv6) | List of computed ingress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | +| [computed\_ingress\_with\_prefix\_list\_id](#input\_computed\_ingress\_with\_prefix\_list\_id) | List of computed ingress rules to create where 'prefix\_list\_id' is used | `list(map(string))` | `[]` | no | +| [computed\_ingress\_with\_referenced\_security\_group\_id](#input\_computed\_ingress\_with\_referenced\_security\_group\_id) | List of computed ingress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [computed\_ingress\_with\_self](#input\_computed\_ingress\_with\_self) | List of computed ingress rules to create where 'self' is defined | `list(map(string))` | `[]` | no | -| [computed\_ingress\_with\_source\_security\_group\_id](#input\_computed\_ingress\_with\_source\_security\_group\_id) | List of computed ingress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [create](#input\_create) | Whether to create security group and all rules | `bool` | `true` | no | | [description](#input\_description) | Description of security group | `string` | `"Security Group managed by Terraform"` | no | -| [egress\_cidr\_blocks](#input\_egress\_cidr\_blocks) | List of IPv4 CIDR ranges to use on all egress rules | `list(string)` |
[
"0.0.0.0/0"
]
| no | -| [egress\_ipv6\_cidr\_blocks](#input\_egress\_ipv6\_cidr\_blocks) | List of IPv6 CIDR ranges to use on all egress rules | `list(string)` |
[
"::/0"
]
| no | +| [egress\_cidr\_ipv4](#input\_egress\_cidr\_ipv4) | List of IPv4 CIDR ranges to use on all egress rules | `list(string)` |
[
"0.0.0.0/0"
]
| no | +| [egress\_cidr\_ipv6](#input\_egress\_cidr\_ipv6) | List of IPv6 CIDR ranges to use on all egress rules | `list(string)` |
[
"::/0"
]
| no | | [egress\_prefix\_list\_ids](#input\_egress\_prefix\_list\_ids) | List of prefix list IDs (for allowing access to VPC endpoints) to use on all egress rules | `list(string)` | `[]` | no | | [egress\_rules](#input\_egress\_rules) | List of egress rules to create by name | `list(string)` | `[]` | no | -| [egress\_with\_cidr\_blocks](#input\_egress\_with\_cidr\_blocks) | List of egress rules to create where 'cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [egress\_with\_ipv6\_cidr\_blocks](#input\_egress\_with\_ipv6\_cidr\_blocks) | List of egress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [egress\_with\_prefix\_list\_ids](#input\_egress\_with\_prefix\_list\_ids) | List of egress rules to create where 'prefix\_list\_ids' is used | `list(map(string))` | `[]` | no | +| [egress\_with\_cidr\_ipv4](#input\_egress\_with\_cidr\_ipv4) | List of egress rules to create where 'cidr\_ipv4' is used | `list(map(string))` | `[]` | no | +| [egress\_with\_cidr\_ipv6](#input\_egress\_with\_cidr\_ipv6) | List of egress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | +| [egress\_with\_prefix\_list\_id](#input\_egress\_with\_prefix\_list\_id) | List of egress rules to create where 'prefix\_list\_id' is used | `list(map(string))` | `[]` | no | +| [egress\_with\_referenced\_security\_group\_id](#input\_egress\_with\_referenced\_security\_group\_id) | List of egress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [egress\_with\_self](#input\_egress\_with\_self) | List of egress rules to create where 'self' is defined | `list(map(string))` | `[]` | no | -| [egress\_with\_source\_security\_group\_id](#input\_egress\_with\_source\_security\_group\_id) | List of egress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | -| [ingress\_cidr\_blocks](#input\_ingress\_cidr\_blocks) | List of IPv4 CIDR ranges to use on all ingress rules | `list(string)` | `[]` | no | -| [ingress\_ipv6\_cidr\_blocks](#input\_ingress\_ipv6\_cidr\_blocks) | List of IPv6 CIDR ranges to use on all ingress rules | `list(string)` | `[]` | no | +| [ingress\_cidr\_ipv4](#input\_ingress\_cidr\_ipv4) | List of IPv4 CIDR ranges to use on all ingress rules | `list(string)` | `[]` | no | +| [ingress\_cidr\_ipv6](#input\_ingress\_cidr\_ipv6) | List of IPv6 CIDR ranges to use on all ingress rules | `list(string)` | `[]` | no | | [ingress\_prefix\_list\_ids](#input\_ingress\_prefix\_list\_ids) | List of prefix list IDs (for allowing access to VPC endpoints) to use on all ingress rules | `list(string)` | `[]` | no | | [ingress\_rules](#input\_ingress\_rules) | List of ingress rules to create by name | `list(string)` | `[]` | no | -| [ingress\_with\_cidr\_blocks](#input\_ingress\_with\_cidr\_blocks) | List of ingress rules to create where 'cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [ingress\_with\_ipv6\_cidr\_blocks](#input\_ingress\_with\_ipv6\_cidr\_blocks) | List of ingress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [ingress\_with\_prefix\_list\_ids](#input\_ingress\_with\_prefix\_list\_ids) | List of ingress rules to create where 'prefix\_list\_ids' is used | `list(map(string))` | `[]` | no | +| [ingress\_with\_cidr\_ipv4](#input\_ingress\_with\_cidr\_ipv4) | List of ingress rules to create where 'cidr\_ipv4' is used | `list(map(string))` | `[]` | no | +| [ingress\_with\_cidr\_ipv6](#input\_ingress\_with\_cidr\_ipv6) | List of ingress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | +| [ingress\_with\_prefix\_list\_id](#input\_ingress\_with\_prefix\_list\_id) | List of ingress rules to create where 'prefix\_list\_id' is used | `list(map(string))` | `[]` | no | +| [ingress\_with\_referenced\_security\_group\_id](#input\_ingress\_with\_referenced\_security\_group\_id) | List of ingress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [ingress\_with\_self](#input\_ingress\_with\_self) | List of ingress rules to create where 'self' is defined | `list(map(string))` | `[]` | no | -| [ingress\_with\_source\_security\_group\_id](#input\_ingress\_with\_source\_security\_group\_id) | List of ingress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [name](#input\_name) | Name of security group | `string` | n/a | yes | | [number\_of\_computed\_egress\_cidr\_blocks](#input\_number\_of\_computed\_egress\_cidr\_blocks) | Number of IPv4 CIDR ranges to use on all computed egress rules | `number` | `0` | no | | [number\_of\_computed\_egress\_ipv6\_cidr\_blocks](#input\_number\_of\_computed\_egress\_ipv6\_cidr\_blocks) | Number of IPv6 CIDR ranges to use on all computed egress rules | `number` | `0` | no | | [number\_of\_computed\_egress\_prefix\_list\_ids](#input\_number\_of\_computed\_egress\_prefix\_list\_ids) | Number of prefix list IDs (for allowing access to VPC endpoints) to use on all computed egress rules | `number` | `0` | no | | [number\_of\_computed\_egress\_rules](#input\_number\_of\_computed\_egress\_rules) | Number of computed egress rules to create by name | `number` | `0` | no | -| [number\_of\_computed\_egress\_with\_cidr\_blocks](#input\_number\_of\_computed\_egress\_with\_cidr\_blocks) | Number of computed egress rules to create where 'cidr\_blocks' is used | `number` | `0` | no | -| [number\_of\_computed\_egress\_with\_ipv6\_cidr\_blocks](#input\_number\_of\_computed\_egress\_with\_ipv6\_cidr\_blocks) | Number of computed egress rules to create where 'ipv6\_cidr\_blocks' is used | `number` | `0` | no | -| [number\_of\_computed\_egress\_with\_prefix\_list\_ids](#input\_number\_of\_computed\_egress\_with\_prefix\_list\_ids) | Number of computed egress rules to create where 'prefix\_list\_ids' is used | `number` | `0` | no | +| [number\_of\_computed\_egress\_with\_cidr\_ipv4](#input\_number\_of\_computed\_egress\_with\_cidr\_ipv4) | Number of computed egress rules to create where 'cidr\_ipv4' is used | `number` | `0` | no | +| [number\_of\_computed\_egress\_with\_cidr\_ipv6](#input\_number\_of\_computed\_egress\_with\_cidr\_ipv6) | Number of computed egress rules to create where 'ipv6\_cidr\_blocks' is used | `number` | `0` | no | +| [number\_of\_computed\_egress\_with\_prefix\_list\_id](#input\_number\_of\_computed\_egress\_with\_prefix\_list\_id) | Number of computed egress rules to create where 'prefix\_list\_id' is used | `number` | `0` | no | +| [number\_of\_computed\_egress\_with\_referenced\_security\_group\_id](#input\_number\_of\_computed\_egress\_with\_referenced\_security\_group\_id) | Number of computed egress rules to create where 'source\_security\_group\_id' is used | `number` | `0` | no | | [number\_of\_computed\_egress\_with\_self](#input\_number\_of\_computed\_egress\_with\_self) | Number of computed egress rules to create where 'self' is defined | `number` | `0` | no | -| [number\_of\_computed\_egress\_with\_source\_security\_group\_id](#input\_number\_of\_computed\_egress\_with\_source\_security\_group\_id) | Number of computed egress rules to create where 'source\_security\_group\_id' is used | `number` | `0` | no | | [number\_of\_computed\_ingress\_cidr\_blocks](#input\_number\_of\_computed\_ingress\_cidr\_blocks) | Number of IPv4 CIDR ranges to use on all computed ingress rules | `number` | `0` | no | | [number\_of\_computed\_ingress\_ipv6\_cidr\_blocks](#input\_number\_of\_computed\_ingress\_ipv6\_cidr\_blocks) | Number of IPv6 CIDR ranges to use on all computed ingress rules | `number` | `0` | no | | [number\_of\_computed\_ingress\_prefix\_list\_ids](#input\_number\_of\_computed\_ingress\_prefix\_list\_ids) | Number of prefix list IDs (for allowing access to VPC endpoints) to use on all computed ingress rules | `number` | `0` | no | | [number\_of\_computed\_ingress\_rules](#input\_number\_of\_computed\_ingress\_rules) | Number of computed ingress rules to create by name | `number` | `0` | no | -| [number\_of\_computed\_ingress\_with\_cidr\_blocks](#input\_number\_of\_computed\_ingress\_with\_cidr\_blocks) | Number of computed ingress rules to create where 'cidr\_blocks' is used | `number` | `0` | no | -| [number\_of\_computed\_ingress\_with\_ipv6\_cidr\_blocks](#input\_number\_of\_computed\_ingress\_with\_ipv6\_cidr\_blocks) | Number of computed ingress rules to create where 'ipv6\_cidr\_blocks' is used | `number` | `0` | no | -| [number\_of\_computed\_ingress\_with\_prefix\_list\_ids](#input\_number\_of\_computed\_ingress\_with\_prefix\_list\_ids) | Number of computed ingress rules to create where 'prefix\_list\_ids' is used | `number` | `0` | no | +| [number\_of\_computed\_ingress\_with\_cidr\_ipv4](#input\_number\_of\_computed\_ingress\_with\_cidr\_ipv4) | Number of computed ingress rules to create where 'cidr\_ipv4' is used | `number` | `0` | no | +| [number\_of\_computed\_ingress\_with\_cidr\_ipv6](#input\_number\_of\_computed\_ingress\_with\_cidr\_ipv6) | Number of computed ingress rules to create where 'ipv6\_cidr\_blocks' is used | `number` | `0` | no | +| [number\_of\_computed\_ingress\_with\_prefix\_list\_id](#input\_number\_of\_computed\_ingress\_with\_prefix\_list\_id) | Number of computed ingress rules to create where 'prefix\_list\_id' is used | `number` | `0` | no | +| [number\_of\_computed\_ingress\_with\_referenced\_security\_group\_id](#input\_number\_of\_computed\_ingress\_with\_referenced\_security\_group\_id) | Number of computed ingress rules to create where 'source\_security\_group\_id' is used | `number` | `0` | no | | [number\_of\_computed\_ingress\_with\_self](#input\_number\_of\_computed\_ingress\_with\_self) | Number of computed ingress rules to create where 'self' is defined | `number` | `0` | no | -| [number\_of\_computed\_ingress\_with\_source\_security\_group\_id](#input\_number\_of\_computed\_ingress\_with\_source\_security\_group\_id) | Number of computed ingress rules to create where 'source\_security\_group\_id' is used | `number` | `0` | no | | [revoke\_rules\_on\_delete](#input\_revoke\_rules\_on\_delete) | Instruct Terraform to revoke all of the Security Groups attached ingress and egress rules before deleting the rule itself. Enable for EMR. | `bool` | `false` | no | | [tags](#input\_tags) | A mapping of tags to assign to security group | `map(string)` | `{}` | no | | [use\_name\_prefix](#input\_use\_name\_prefix) | Whether to use name\_prefix or fixed name. Should be true to able to update security group name after initial creation | `bool` | `true` | no | diff --git a/modules/mysql/main.tf b/modules/mysql/main.tf index 80ea0adb..d2a1bf93 100644 --- a/modules/mysql/main.tf +++ b/modules/mysql/main.tf @@ -19,20 +19,20 @@ module "sg" { ingress_with_self = concat(var.auto_ingress_with_self, var.ingress_with_self) # Open to IPv4 cidr blocks - ingress_with_cidr_blocks = var.ingress_with_cidr_blocks + ingress_with_cidr_ipv4 = var.ingress_with_cidr_ipv4 # Open to IPv6 cidr blocks - ingress_with_ipv6_cidr_blocks = var.ingress_with_ipv6_cidr_blocks + ingress_with_cidr_ipv6 = var.ingress_with_cidr_ipv6 # Open for security group id - ingress_with_source_security_group_id = var.ingress_with_source_security_group_id + ingress_with_referenced_security_group_id = var.ingress_with_referenced_security_group_id # Open for prefix list id - ingress_with_prefix_list_ids = var.ingress_with_prefix_list_ids + ingress_with_prefix_list_id = var.ingress_with_prefix_list_id # Default ingress CIDR blocks - ingress_cidr_blocks = var.ingress_cidr_blocks - ingress_ipv6_cidr_blocks = var.ingress_ipv6_cidr_blocks + ingress_cidr_ipv4 = var.ingress_cidr_ipv4 + ingress_cidr_ipv6 = var.ingress_cidr_ipv6 # Default prefix list ids ingress_prefix_list_ids = var.ingress_prefix_list_ids @@ -47,26 +47,26 @@ module "sg" { computed_ingress_with_self = concat(var.auto_computed_ingress_with_self, var.computed_ingress_with_self) # Open to IPv4 cidr blocks - computed_ingress_with_cidr_blocks = var.computed_ingress_with_cidr_blocks + computed_ingress_with_cidr_ipv4 = var.computed_ingress_with_cidr_ipv4 # Open to IPv6 cidr blocks - computed_ingress_with_ipv6_cidr_blocks = var.computed_ingress_with_ipv6_cidr_blocks + computed_ingress_with_cidr_ipv6 = var.computed_ingress_with_cidr_ipv6 # Open for security group id - computed_ingress_with_source_security_group_id = var.computed_ingress_with_source_security_group_id + computed_ingress_with_referenced_security_group_id = var.computed_ingress_with_referenced_security_group_id # Open for prefix list id - computed_ingress_with_prefix_list_ids = var.computed_ingress_with_prefix_list_ids + computed_ingress_with_prefix_list_id = var.computed_ingress_with_prefix_list_id ############################# # Number of computed ingress ############################# - number_of_computed_ingress_rules = var.auto_number_of_computed_ingress_rules + var.number_of_computed_ingress_rules - number_of_computed_ingress_with_self = var.auto_number_of_computed_ingress_with_self + var.number_of_computed_ingress_with_self - number_of_computed_ingress_with_cidr_blocks = var.number_of_computed_ingress_with_cidr_blocks - number_of_computed_ingress_with_ipv6_cidr_blocks = var.number_of_computed_ingress_with_ipv6_cidr_blocks - number_of_computed_ingress_with_source_security_group_id = var.number_of_computed_ingress_with_source_security_group_id - number_of_computed_ingress_with_prefix_list_ids = var.number_of_computed_ingress_with_prefix_list_ids + number_of_computed_ingress_rules = var.auto_number_of_computed_ingress_rules + var.number_of_computed_ingress_rules + number_of_computed_ingress_with_self = var.auto_number_of_computed_ingress_with_self + var.number_of_computed_ingress_with_self + number_of_computed_ingress_with_cidr_ipv4 = var.number_of_computed_ingress_with_cidr_ipv4 + number_of_computed_ingress_with_cidr_ipv6 = var.number_of_computed_ingress_with_cidr_ipv6 + number_of_computed_ingress_with_referenced_security_group_id = var.number_of_computed_ingress_with_referenced_security_group_id + number_of_computed_ingress_with_prefix_list_id = var.number_of_computed_ingress_with_prefix_list_id ######### # Egress @@ -78,20 +78,20 @@ module "sg" { egress_with_self = concat(var.auto_egress_with_self, var.egress_with_self) # Open to IPv4 cidr blocks - egress_with_cidr_blocks = var.egress_with_cidr_blocks + egress_with_cidr_ipv4 = var.egress_with_cidr_ipv4 # Open to IPv6 cidr blocks - egress_with_ipv6_cidr_blocks = var.egress_with_ipv6_cidr_blocks + egress_with_cidr_ipv6 = var.egress_with_cidr_ipv6 # Open for security group id - egress_with_source_security_group_id = var.egress_with_source_security_group_id + egress_with_referenced_security_group_id = var.egress_with_referenced_security_group_id # Open for prefix list id - egress_with_prefix_list_ids = var.egress_with_prefix_list_ids + egress_with_prefix_list_id = var.egress_with_prefix_list_id # Default egress CIDR blocks - egress_cidr_blocks = var.egress_cidr_blocks - egress_ipv6_cidr_blocks = var.egress_ipv6_cidr_blocks + egress_cidr_ipv4 = var.egress_cidr_ipv4 + egress_cidr_ipv6 = var.egress_cidr_ipv6 # Default prefix list ids egress_prefix_list_ids = var.egress_prefix_list_ids @@ -106,24 +106,24 @@ module "sg" { computed_egress_with_self = concat(var.auto_computed_egress_with_self, var.computed_egress_with_self) # Open to IPv4 cidr blocks - computed_egress_with_cidr_blocks = var.computed_egress_with_cidr_blocks + computed_egress_with_cidr_ipv4 = var.computed_egress_with_cidr_ipv4 # Open to IPv6 cidr blocks - computed_egress_with_ipv6_cidr_blocks = var.computed_egress_with_ipv6_cidr_blocks + computed_egress_with_cidr_ipv6 = var.computed_egress_with_cidr_ipv6 # Open for security group id - computed_egress_with_source_security_group_id = var.computed_egress_with_source_security_group_id + computed_egress_with_referenced_security_group_id = var.computed_egress_with_referenced_security_group_id # Open for prefix list id - computed_egress_with_prefix_list_ids = var.computed_egress_with_prefix_list_ids + computed_egress_with_prefix_list_id = var.computed_egress_with_prefix_list_id ############################# # Number of computed egress ############################# - number_of_computed_egress_rules = var.auto_number_of_computed_egress_rules + var.number_of_computed_egress_rules - number_of_computed_egress_with_self = var.auto_number_of_computed_egress_with_self + var.number_of_computed_egress_with_self - number_of_computed_egress_with_cidr_blocks = var.number_of_computed_egress_with_cidr_blocks - number_of_computed_egress_with_ipv6_cidr_blocks = var.number_of_computed_egress_with_ipv6_cidr_blocks - number_of_computed_egress_with_source_security_group_id = var.number_of_computed_egress_with_source_security_group_id - number_of_computed_egress_with_prefix_list_ids = var.number_of_computed_egress_with_prefix_list_ids + number_of_computed_egress_rules = var.auto_number_of_computed_egress_rules + var.number_of_computed_egress_rules + number_of_computed_egress_with_self = var.auto_number_of_computed_egress_with_self + var.number_of_computed_egress_with_self + number_of_computed_egress_with_cidr_ipv4 = var.number_of_computed_egress_with_cidr_ipv4 + number_of_computed_egress_with_cidr_ipv6 = var.number_of_computed_egress_with_cidr_ipv6 + number_of_computed_egress_with_referenced_security_group_id = var.number_of_computed_egress_with_referenced_security_group_id + number_of_computed_egress_with_prefix_list_id = var.number_of_computed_egress_with_prefix_list_id } diff --git a/modules/mysql/variables.tf b/modules/mysql/variables.tf index 60c8c27b..6590c9e3 100644 --- a/modules/mysql/variables.tf +++ b/modules/mysql/variables.tf @@ -56,37 +56,37 @@ variable "ingress_with_self" { default = [] } -variable "ingress_with_cidr_blocks" { - description = "List of ingress rules to create where 'cidr_blocks' is used" +variable "ingress_with_cidr_ipv4" { + description = "List of ingress rules to create where 'cidr_ipv4' is used" type = list(map(string)) default = [] } -variable "ingress_with_ipv6_cidr_blocks" { +variable "ingress_with_cidr_ipv6" { description = "List of ingress rules to create where 'ipv6_cidr_blocks' is used" type = list(map(string)) default = [] } -variable "ingress_with_source_security_group_id" { +variable "ingress_with_referenced_security_group_id" { description = "List of ingress rules to create where 'source_security_group_id' is used" type = list(map(string)) default = [] } -variable "ingress_with_prefix_list_ids" { - description = "List of ingress rules to create where 'prefix_list_ids' is used" +variable "ingress_with_prefix_list_id" { + description = "List of ingress rules to create where 'prefix_list_id' is used" type = list(map(string)) default = [] } -variable "ingress_cidr_blocks" { +variable "ingress_cidr_ipv4" { description = "List of IPv4 CIDR ranges to use on all ingress rules" type = list(string) default = [] } -variable "ingress_ipv6_cidr_blocks" { +variable "ingress_cidr_ipv6" { description = "List of IPv6 CIDR ranges to use on all ingress rules" type = list(string) default = [] @@ -113,26 +113,26 @@ variable "computed_ingress_with_self" { default = [] } -variable "computed_ingress_with_cidr_blocks" { - description = "List of computed ingress rules to create where 'cidr_blocks' is used" +variable "computed_ingress_with_cidr_ipv4" { + description = "List of computed ingress rules to create where 'cidr_ipv4' is used" type = list(map(string)) default = [] } -variable "computed_ingress_with_ipv6_cidr_blocks" { +variable "computed_ingress_with_cidr_ipv6" { description = "List of computed ingress rules to create where 'ipv6_cidr_blocks' is used" type = list(map(string)) default = [] } -variable "computed_ingress_with_source_security_group_id" { +variable "computed_ingress_with_referenced_security_group_id" { description = "List of computed ingress rules to create where 'source_security_group_id' is used" type = list(map(string)) default = [] } -variable "computed_ingress_with_prefix_list_ids" { - description = "List of computed ingress rules to create where 'prefix_list_ids' is used" +variable "computed_ingress_with_prefix_list_id" { + description = "List of computed ingress rules to create where 'prefix_list_id' is used" type = list(map(string)) default = [] } @@ -170,26 +170,26 @@ variable "number_of_computed_ingress_with_self" { default = 0 } -variable "number_of_computed_ingress_with_cidr_blocks" { - description = "Number of computed ingress rules to create where 'cidr_blocks' is used" +variable "number_of_computed_ingress_with_cidr_ipv4" { + description = "Number of computed ingress rules to create where 'cidr_ipv4' is used" type = number default = 0 } -variable "number_of_computed_ingress_with_ipv6_cidr_blocks" { +variable "number_of_computed_ingress_with_cidr_ipv6" { description = "Number of computed ingress rules to create where 'ipv6_cidr_blocks' is used" type = number default = 0 } -variable "number_of_computed_ingress_with_source_security_group_id" { +variable "number_of_computed_ingress_with_referenced_security_group_id" { description = "Number of computed ingress rules to create where 'source_security_group_id' is used" type = number default = 0 } -variable "number_of_computed_ingress_with_prefix_list_ids" { - description = "Number of computed ingress rules to create where 'prefix_list_ids' is used" +variable "number_of_computed_ingress_with_prefix_list_id" { + description = "Number of computed ingress rules to create where 'prefix_list_id' is used" type = number default = 0 } @@ -227,37 +227,37 @@ variable "egress_with_self" { default = [] } -variable "egress_with_cidr_blocks" { - description = "List of egress rules to create where 'cidr_blocks' is used" +variable "egress_with_cidr_ipv4" { + description = "List of egress rules to create where 'cidr_ipv4' is used" type = list(map(string)) default = [] } -variable "egress_with_ipv6_cidr_blocks" { +variable "egress_with_cidr_ipv6" { description = "List of egress rules to create where 'ipv6_cidr_blocks' is used" type = list(map(string)) default = [] } -variable "egress_with_source_security_group_id" { +variable "egress_with_referenced_security_group_id" { description = "List of egress rules to create where 'source_security_group_id' is used" type = list(map(string)) default = [] } -variable "egress_with_prefix_list_ids" { - description = "List of egress rules to create where 'prefix_list_ids' is used" +variable "egress_with_prefix_list_id" { + description = "List of egress rules to create where 'prefix_list_id' is used" type = list(map(string)) default = [] } -variable "egress_cidr_blocks" { +variable "egress_cidr_ipv4" { description = "List of IPv4 CIDR ranges to use on all egress rules" type = list(string) default = ["0.0.0.0/0"] } -variable "egress_ipv6_cidr_blocks" { +variable "egress_cidr_ipv6" { description = "List of IPv6 CIDR ranges to use on all egress rules" type = list(string) default = ["::/0"] @@ -284,26 +284,26 @@ variable "computed_egress_with_self" { default = [] } -variable "computed_egress_with_cidr_blocks" { - description = "List of computed egress rules to create where 'cidr_blocks' is used" +variable "computed_egress_with_cidr_ipv4" { + description = "List of computed egress rules to create where 'cidr_ipv4' is used" type = list(map(string)) default = [] } -variable "computed_egress_with_ipv6_cidr_blocks" { +variable "computed_egress_with_cidr_ipv6" { description = "List of computed egress rules to create where 'ipv6_cidr_blocks' is used" type = list(map(string)) default = [] } -variable "computed_egress_with_source_security_group_id" { +variable "computed_egress_with_referenced_security_group_id" { description = "List of computed egress rules to create where 'source_security_group_id' is used" type = list(map(string)) default = [] } -variable "computed_egress_with_prefix_list_ids" { - description = "List of computed egress rules to create where 'prefix_list_ids' is used" +variable "computed_egress_with_prefix_list_id" { + description = "List of computed egress rules to create where 'prefix_list_id' is used" type = list(map(string)) default = [] } @@ -341,26 +341,26 @@ variable "number_of_computed_egress_with_self" { default = 0 } -variable "number_of_computed_egress_with_cidr_blocks" { - description = "Number of computed egress rules to create where 'cidr_blocks' is used" +variable "number_of_computed_egress_with_cidr_ipv4" { + description = "Number of computed egress rules to create where 'cidr_ipv4' is used" type = number default = 0 } -variable "number_of_computed_egress_with_ipv6_cidr_blocks" { +variable "number_of_computed_egress_with_cidr_ipv6" { description = "Number of computed egress rules to create where 'ipv6_cidr_blocks' is used" type = number default = 0 } -variable "number_of_computed_egress_with_source_security_group_id" { +variable "number_of_computed_egress_with_referenced_security_group_id" { description = "Number of computed egress rules to create where 'source_security_group_id' is used" type = number default = 0 } -variable "number_of_computed_egress_with_prefix_list_ids" { - description = "Number of computed egress rules to create where 'prefix_list_ids' is used" +variable "number_of_computed_egress_with_prefix_list_id" { + description = "Number of computed egress rules to create where 'prefix_list_id' is used" type = number default = 0 } diff --git a/modules/nfs/README.md b/modules/nfs/README.md index 94f7489f..4381ff23 100644 --- a/modules/nfs/README.md +++ b/modules/nfs/README.md @@ -55,59 +55,59 @@ No resources. | [computed\_egress\_ipv6\_cidr\_blocks](#input\_computed\_egress\_ipv6\_cidr\_blocks) | List of IPv6 CIDR ranges to use on all computed egress rules | `list(string)` |
[
"::/0"
]
| no | | [computed\_egress\_prefix\_list\_ids](#input\_computed\_egress\_prefix\_list\_ids) | List of prefix list IDs (for allowing access to VPC endpoints) to use on all computed egress rules | `list(string)` | `[]` | no | | [computed\_egress\_rules](#input\_computed\_egress\_rules) | List of computed egress rules to create by name | `list(string)` | `[]` | no | -| [computed\_egress\_with\_cidr\_blocks](#input\_computed\_egress\_with\_cidr\_blocks) | List of computed egress rules to create where 'cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [computed\_egress\_with\_ipv6\_cidr\_blocks](#input\_computed\_egress\_with\_ipv6\_cidr\_blocks) | List of computed egress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [computed\_egress\_with\_prefix\_list\_ids](#input\_computed\_egress\_with\_prefix\_list\_ids) | List of computed egress rules to create where 'prefix\_list\_ids' is used | `list(map(string))` | `[]` | no | +| [computed\_egress\_with\_cidr\_ipv4](#input\_computed\_egress\_with\_cidr\_ipv4) | List of computed egress rules to create where 'cidr\_ipv4' is used | `list(map(string))` | `[]` | no | +| [computed\_egress\_with\_cidr\_ipv6](#input\_computed\_egress\_with\_cidr\_ipv6) | List of computed egress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | +| [computed\_egress\_with\_prefix\_list\_id](#input\_computed\_egress\_with\_prefix\_list\_id) | List of computed egress rules to create where 'prefix\_list\_id' is used | `list(map(string))` | `[]` | no | +| [computed\_egress\_with\_referenced\_security\_group\_id](#input\_computed\_egress\_with\_referenced\_security\_group\_id) | List of computed egress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [computed\_egress\_with\_self](#input\_computed\_egress\_with\_self) | List of computed egress rules to create where 'self' is defined | `list(map(string))` | `[]` | no | -| [computed\_egress\_with\_source\_security\_group\_id](#input\_computed\_egress\_with\_source\_security\_group\_id) | List of computed egress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [computed\_ingress\_cidr\_blocks](#input\_computed\_ingress\_cidr\_blocks) | List of IPv4 CIDR ranges to use on all computed ingress rules | `list(string)` | `[]` | no | | [computed\_ingress\_ipv6\_cidr\_blocks](#input\_computed\_ingress\_ipv6\_cidr\_blocks) | List of IPv6 CIDR ranges to use on all computed ingress rules | `list(string)` | `[]` | no | | [computed\_ingress\_prefix\_list\_ids](#input\_computed\_ingress\_prefix\_list\_ids) | List of prefix list IDs (for allowing access to VPC endpoints) to use on all computed ingress rules | `list(string)` | `[]` | no | | [computed\_ingress\_rules](#input\_computed\_ingress\_rules) | List of computed ingress rules to create by name | `list(string)` | `[]` | no | -| [computed\_ingress\_with\_cidr\_blocks](#input\_computed\_ingress\_with\_cidr\_blocks) | List of computed ingress rules to create where 'cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [computed\_ingress\_with\_ipv6\_cidr\_blocks](#input\_computed\_ingress\_with\_ipv6\_cidr\_blocks) | List of computed ingress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [computed\_ingress\_with\_prefix\_list\_ids](#input\_computed\_ingress\_with\_prefix\_list\_ids) | List of computed ingress rules to create where 'prefix\_list\_ids' is used | `list(map(string))` | `[]` | no | +| [computed\_ingress\_with\_cidr\_ipv4](#input\_computed\_ingress\_with\_cidr\_ipv4) | List of computed ingress rules to create where 'cidr\_ipv4' is used | `list(map(string))` | `[]` | no | +| [computed\_ingress\_with\_cidr\_ipv6](#input\_computed\_ingress\_with\_cidr\_ipv6) | List of computed ingress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | +| [computed\_ingress\_with\_prefix\_list\_id](#input\_computed\_ingress\_with\_prefix\_list\_id) | List of computed ingress rules to create where 'prefix\_list\_id' is used | `list(map(string))` | `[]` | no | +| [computed\_ingress\_with\_referenced\_security\_group\_id](#input\_computed\_ingress\_with\_referenced\_security\_group\_id) | List of computed ingress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [computed\_ingress\_with\_self](#input\_computed\_ingress\_with\_self) | List of computed ingress rules to create where 'self' is defined | `list(map(string))` | `[]` | no | -| [computed\_ingress\_with\_source\_security\_group\_id](#input\_computed\_ingress\_with\_source\_security\_group\_id) | List of computed ingress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [create](#input\_create) | Whether to create security group and all rules | `bool` | `true` | no | | [description](#input\_description) | Description of security group | `string` | `"Security Group managed by Terraform"` | no | -| [egress\_cidr\_blocks](#input\_egress\_cidr\_blocks) | List of IPv4 CIDR ranges to use on all egress rules | `list(string)` |
[
"0.0.0.0/0"
]
| no | -| [egress\_ipv6\_cidr\_blocks](#input\_egress\_ipv6\_cidr\_blocks) | List of IPv6 CIDR ranges to use on all egress rules | `list(string)` |
[
"::/0"
]
| no | +| [egress\_cidr\_ipv4](#input\_egress\_cidr\_ipv4) | List of IPv4 CIDR ranges to use on all egress rules | `list(string)` |
[
"0.0.0.0/0"
]
| no | +| [egress\_cidr\_ipv6](#input\_egress\_cidr\_ipv6) | List of IPv6 CIDR ranges to use on all egress rules | `list(string)` |
[
"::/0"
]
| no | | [egress\_prefix\_list\_ids](#input\_egress\_prefix\_list\_ids) | List of prefix list IDs (for allowing access to VPC endpoints) to use on all egress rules | `list(string)` | `[]` | no | | [egress\_rules](#input\_egress\_rules) | List of egress rules to create by name | `list(string)` | `[]` | no | -| [egress\_with\_cidr\_blocks](#input\_egress\_with\_cidr\_blocks) | List of egress rules to create where 'cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [egress\_with\_ipv6\_cidr\_blocks](#input\_egress\_with\_ipv6\_cidr\_blocks) | List of egress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [egress\_with\_prefix\_list\_ids](#input\_egress\_with\_prefix\_list\_ids) | List of egress rules to create where 'prefix\_list\_ids' is used | `list(map(string))` | `[]` | no | +| [egress\_with\_cidr\_ipv4](#input\_egress\_with\_cidr\_ipv4) | List of egress rules to create where 'cidr\_ipv4' is used | `list(map(string))` | `[]` | no | +| [egress\_with\_cidr\_ipv6](#input\_egress\_with\_cidr\_ipv6) | List of egress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | +| [egress\_with\_prefix\_list\_id](#input\_egress\_with\_prefix\_list\_id) | List of egress rules to create where 'prefix\_list\_id' is used | `list(map(string))` | `[]` | no | +| [egress\_with\_referenced\_security\_group\_id](#input\_egress\_with\_referenced\_security\_group\_id) | List of egress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [egress\_with\_self](#input\_egress\_with\_self) | List of egress rules to create where 'self' is defined | `list(map(string))` | `[]` | no | -| [egress\_with\_source\_security\_group\_id](#input\_egress\_with\_source\_security\_group\_id) | List of egress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | -| [ingress\_cidr\_blocks](#input\_ingress\_cidr\_blocks) | List of IPv4 CIDR ranges to use on all ingress rules | `list(string)` | `[]` | no | -| [ingress\_ipv6\_cidr\_blocks](#input\_ingress\_ipv6\_cidr\_blocks) | List of IPv6 CIDR ranges to use on all ingress rules | `list(string)` | `[]` | no | +| [ingress\_cidr\_ipv4](#input\_ingress\_cidr\_ipv4) | List of IPv4 CIDR ranges to use on all ingress rules | `list(string)` | `[]` | no | +| [ingress\_cidr\_ipv6](#input\_ingress\_cidr\_ipv6) | List of IPv6 CIDR ranges to use on all ingress rules | `list(string)` | `[]` | no | | [ingress\_prefix\_list\_ids](#input\_ingress\_prefix\_list\_ids) | List of prefix list IDs (for allowing access to VPC endpoints) to use on all ingress rules | `list(string)` | `[]` | no | | [ingress\_rules](#input\_ingress\_rules) | List of ingress rules to create by name | `list(string)` | `[]` | no | -| [ingress\_with\_cidr\_blocks](#input\_ingress\_with\_cidr\_blocks) | List of ingress rules to create where 'cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [ingress\_with\_ipv6\_cidr\_blocks](#input\_ingress\_with\_ipv6\_cidr\_blocks) | List of ingress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [ingress\_with\_prefix\_list\_ids](#input\_ingress\_with\_prefix\_list\_ids) | List of ingress rules to create where 'prefix\_list\_ids' is used | `list(map(string))` | `[]` | no | +| [ingress\_with\_cidr\_ipv4](#input\_ingress\_with\_cidr\_ipv4) | List of ingress rules to create where 'cidr\_ipv4' is used | `list(map(string))` | `[]` | no | +| [ingress\_with\_cidr\_ipv6](#input\_ingress\_with\_cidr\_ipv6) | List of ingress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | +| [ingress\_with\_prefix\_list\_id](#input\_ingress\_with\_prefix\_list\_id) | List of ingress rules to create where 'prefix\_list\_id' is used | `list(map(string))` | `[]` | no | +| [ingress\_with\_referenced\_security\_group\_id](#input\_ingress\_with\_referenced\_security\_group\_id) | List of ingress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [ingress\_with\_self](#input\_ingress\_with\_self) | List of ingress rules to create where 'self' is defined | `list(map(string))` | `[]` | no | -| [ingress\_with\_source\_security\_group\_id](#input\_ingress\_with\_source\_security\_group\_id) | List of ingress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [name](#input\_name) | Name of security group | `string` | n/a | yes | | [number\_of\_computed\_egress\_cidr\_blocks](#input\_number\_of\_computed\_egress\_cidr\_blocks) | Number of IPv4 CIDR ranges to use on all computed egress rules | `number` | `0` | no | | [number\_of\_computed\_egress\_ipv6\_cidr\_blocks](#input\_number\_of\_computed\_egress\_ipv6\_cidr\_blocks) | Number of IPv6 CIDR ranges to use on all computed egress rules | `number` | `0` | no | | [number\_of\_computed\_egress\_prefix\_list\_ids](#input\_number\_of\_computed\_egress\_prefix\_list\_ids) | Number of prefix list IDs (for allowing access to VPC endpoints) to use on all computed egress rules | `number` | `0` | no | | [number\_of\_computed\_egress\_rules](#input\_number\_of\_computed\_egress\_rules) | Number of computed egress rules to create by name | `number` | `0` | no | -| [number\_of\_computed\_egress\_with\_cidr\_blocks](#input\_number\_of\_computed\_egress\_with\_cidr\_blocks) | Number of computed egress rules to create where 'cidr\_blocks' is used | `number` | `0` | no | -| [number\_of\_computed\_egress\_with\_ipv6\_cidr\_blocks](#input\_number\_of\_computed\_egress\_with\_ipv6\_cidr\_blocks) | Number of computed egress rules to create where 'ipv6\_cidr\_blocks' is used | `number` | `0` | no | -| [number\_of\_computed\_egress\_with\_prefix\_list\_ids](#input\_number\_of\_computed\_egress\_with\_prefix\_list\_ids) | Number of computed egress rules to create where 'prefix\_list\_ids' is used | `number` | `0` | no | +| [number\_of\_computed\_egress\_with\_cidr\_ipv4](#input\_number\_of\_computed\_egress\_with\_cidr\_ipv4) | Number of computed egress rules to create where 'cidr\_ipv4' is used | `number` | `0` | no | +| [number\_of\_computed\_egress\_with\_cidr\_ipv6](#input\_number\_of\_computed\_egress\_with\_cidr\_ipv6) | Number of computed egress rules to create where 'ipv6\_cidr\_blocks' is used | `number` | `0` | no | +| [number\_of\_computed\_egress\_with\_prefix\_list\_id](#input\_number\_of\_computed\_egress\_with\_prefix\_list\_id) | Number of computed egress rules to create where 'prefix\_list\_id' is used | `number` | `0` | no | +| [number\_of\_computed\_egress\_with\_referenced\_security\_group\_id](#input\_number\_of\_computed\_egress\_with\_referenced\_security\_group\_id) | Number of computed egress rules to create where 'source\_security\_group\_id' is used | `number` | `0` | no | | [number\_of\_computed\_egress\_with\_self](#input\_number\_of\_computed\_egress\_with\_self) | Number of computed egress rules to create where 'self' is defined | `number` | `0` | no | -| [number\_of\_computed\_egress\_with\_source\_security\_group\_id](#input\_number\_of\_computed\_egress\_with\_source\_security\_group\_id) | Number of computed egress rules to create where 'source\_security\_group\_id' is used | `number` | `0` | no | | [number\_of\_computed\_ingress\_cidr\_blocks](#input\_number\_of\_computed\_ingress\_cidr\_blocks) | Number of IPv4 CIDR ranges to use on all computed ingress rules | `number` | `0` | no | | [number\_of\_computed\_ingress\_ipv6\_cidr\_blocks](#input\_number\_of\_computed\_ingress\_ipv6\_cidr\_blocks) | Number of IPv6 CIDR ranges to use on all computed ingress rules | `number` | `0` | no | | [number\_of\_computed\_ingress\_prefix\_list\_ids](#input\_number\_of\_computed\_ingress\_prefix\_list\_ids) | Number of prefix list IDs (for allowing access to VPC endpoints) to use on all computed ingress rules | `number` | `0` | no | | [number\_of\_computed\_ingress\_rules](#input\_number\_of\_computed\_ingress\_rules) | Number of computed ingress rules to create by name | `number` | `0` | no | -| [number\_of\_computed\_ingress\_with\_cidr\_blocks](#input\_number\_of\_computed\_ingress\_with\_cidr\_blocks) | Number of computed ingress rules to create where 'cidr\_blocks' is used | `number` | `0` | no | -| [number\_of\_computed\_ingress\_with\_ipv6\_cidr\_blocks](#input\_number\_of\_computed\_ingress\_with\_ipv6\_cidr\_blocks) | Number of computed ingress rules to create where 'ipv6\_cidr\_blocks' is used | `number` | `0` | no | -| [number\_of\_computed\_ingress\_with\_prefix\_list\_ids](#input\_number\_of\_computed\_ingress\_with\_prefix\_list\_ids) | Number of computed ingress rules to create where 'prefix\_list\_ids' is used | `number` | `0` | no | +| [number\_of\_computed\_ingress\_with\_cidr\_ipv4](#input\_number\_of\_computed\_ingress\_with\_cidr\_ipv4) | Number of computed ingress rules to create where 'cidr\_ipv4' is used | `number` | `0` | no | +| [number\_of\_computed\_ingress\_with\_cidr\_ipv6](#input\_number\_of\_computed\_ingress\_with\_cidr\_ipv6) | Number of computed ingress rules to create where 'ipv6\_cidr\_blocks' is used | `number` | `0` | no | +| [number\_of\_computed\_ingress\_with\_prefix\_list\_id](#input\_number\_of\_computed\_ingress\_with\_prefix\_list\_id) | Number of computed ingress rules to create where 'prefix\_list\_id' is used | `number` | `0` | no | +| [number\_of\_computed\_ingress\_with\_referenced\_security\_group\_id](#input\_number\_of\_computed\_ingress\_with\_referenced\_security\_group\_id) | Number of computed ingress rules to create where 'source\_security\_group\_id' is used | `number` | `0` | no | | [number\_of\_computed\_ingress\_with\_self](#input\_number\_of\_computed\_ingress\_with\_self) | Number of computed ingress rules to create where 'self' is defined | `number` | `0` | no | -| [number\_of\_computed\_ingress\_with\_source\_security\_group\_id](#input\_number\_of\_computed\_ingress\_with\_source\_security\_group\_id) | Number of computed ingress rules to create where 'source\_security\_group\_id' is used | `number` | `0` | no | | [revoke\_rules\_on\_delete](#input\_revoke\_rules\_on\_delete) | Instruct Terraform to revoke all of the Security Groups attached ingress and egress rules before deleting the rule itself. Enable for EMR. | `bool` | `false` | no | | [tags](#input\_tags) | A mapping of tags to assign to security group | `map(string)` | `{}` | no | | [use\_name\_prefix](#input\_use\_name\_prefix) | Whether to use name\_prefix or fixed name. Should be true to able to update security group name after initial creation | `bool` | `true` | no | diff --git a/modules/nfs/main.tf b/modules/nfs/main.tf index 80ea0adb..d2a1bf93 100644 --- a/modules/nfs/main.tf +++ b/modules/nfs/main.tf @@ -19,20 +19,20 @@ module "sg" { ingress_with_self = concat(var.auto_ingress_with_self, var.ingress_with_self) # Open to IPv4 cidr blocks - ingress_with_cidr_blocks = var.ingress_with_cidr_blocks + ingress_with_cidr_ipv4 = var.ingress_with_cidr_ipv4 # Open to IPv6 cidr blocks - ingress_with_ipv6_cidr_blocks = var.ingress_with_ipv6_cidr_blocks + ingress_with_cidr_ipv6 = var.ingress_with_cidr_ipv6 # Open for security group id - ingress_with_source_security_group_id = var.ingress_with_source_security_group_id + ingress_with_referenced_security_group_id = var.ingress_with_referenced_security_group_id # Open for prefix list id - ingress_with_prefix_list_ids = var.ingress_with_prefix_list_ids + ingress_with_prefix_list_id = var.ingress_with_prefix_list_id # Default ingress CIDR blocks - ingress_cidr_blocks = var.ingress_cidr_blocks - ingress_ipv6_cidr_blocks = var.ingress_ipv6_cidr_blocks + ingress_cidr_ipv4 = var.ingress_cidr_ipv4 + ingress_cidr_ipv6 = var.ingress_cidr_ipv6 # Default prefix list ids ingress_prefix_list_ids = var.ingress_prefix_list_ids @@ -47,26 +47,26 @@ module "sg" { computed_ingress_with_self = concat(var.auto_computed_ingress_with_self, var.computed_ingress_with_self) # Open to IPv4 cidr blocks - computed_ingress_with_cidr_blocks = var.computed_ingress_with_cidr_blocks + computed_ingress_with_cidr_ipv4 = var.computed_ingress_with_cidr_ipv4 # Open to IPv6 cidr blocks - computed_ingress_with_ipv6_cidr_blocks = var.computed_ingress_with_ipv6_cidr_blocks + computed_ingress_with_cidr_ipv6 = var.computed_ingress_with_cidr_ipv6 # Open for security group id - computed_ingress_with_source_security_group_id = var.computed_ingress_with_source_security_group_id + computed_ingress_with_referenced_security_group_id = var.computed_ingress_with_referenced_security_group_id # Open for prefix list id - computed_ingress_with_prefix_list_ids = var.computed_ingress_with_prefix_list_ids + computed_ingress_with_prefix_list_id = var.computed_ingress_with_prefix_list_id ############################# # Number of computed ingress ############################# - number_of_computed_ingress_rules = var.auto_number_of_computed_ingress_rules + var.number_of_computed_ingress_rules - number_of_computed_ingress_with_self = var.auto_number_of_computed_ingress_with_self + var.number_of_computed_ingress_with_self - number_of_computed_ingress_with_cidr_blocks = var.number_of_computed_ingress_with_cidr_blocks - number_of_computed_ingress_with_ipv6_cidr_blocks = var.number_of_computed_ingress_with_ipv6_cidr_blocks - number_of_computed_ingress_with_source_security_group_id = var.number_of_computed_ingress_with_source_security_group_id - number_of_computed_ingress_with_prefix_list_ids = var.number_of_computed_ingress_with_prefix_list_ids + number_of_computed_ingress_rules = var.auto_number_of_computed_ingress_rules + var.number_of_computed_ingress_rules + number_of_computed_ingress_with_self = var.auto_number_of_computed_ingress_with_self + var.number_of_computed_ingress_with_self + number_of_computed_ingress_with_cidr_ipv4 = var.number_of_computed_ingress_with_cidr_ipv4 + number_of_computed_ingress_with_cidr_ipv6 = var.number_of_computed_ingress_with_cidr_ipv6 + number_of_computed_ingress_with_referenced_security_group_id = var.number_of_computed_ingress_with_referenced_security_group_id + number_of_computed_ingress_with_prefix_list_id = var.number_of_computed_ingress_with_prefix_list_id ######### # Egress @@ -78,20 +78,20 @@ module "sg" { egress_with_self = concat(var.auto_egress_with_self, var.egress_with_self) # Open to IPv4 cidr blocks - egress_with_cidr_blocks = var.egress_with_cidr_blocks + egress_with_cidr_ipv4 = var.egress_with_cidr_ipv4 # Open to IPv6 cidr blocks - egress_with_ipv6_cidr_blocks = var.egress_with_ipv6_cidr_blocks + egress_with_cidr_ipv6 = var.egress_with_cidr_ipv6 # Open for security group id - egress_with_source_security_group_id = var.egress_with_source_security_group_id + egress_with_referenced_security_group_id = var.egress_with_referenced_security_group_id # Open for prefix list id - egress_with_prefix_list_ids = var.egress_with_prefix_list_ids + egress_with_prefix_list_id = var.egress_with_prefix_list_id # Default egress CIDR blocks - egress_cidr_blocks = var.egress_cidr_blocks - egress_ipv6_cidr_blocks = var.egress_ipv6_cidr_blocks + egress_cidr_ipv4 = var.egress_cidr_ipv4 + egress_cidr_ipv6 = var.egress_cidr_ipv6 # Default prefix list ids egress_prefix_list_ids = var.egress_prefix_list_ids @@ -106,24 +106,24 @@ module "sg" { computed_egress_with_self = concat(var.auto_computed_egress_with_self, var.computed_egress_with_self) # Open to IPv4 cidr blocks - computed_egress_with_cidr_blocks = var.computed_egress_with_cidr_blocks + computed_egress_with_cidr_ipv4 = var.computed_egress_with_cidr_ipv4 # Open to IPv6 cidr blocks - computed_egress_with_ipv6_cidr_blocks = var.computed_egress_with_ipv6_cidr_blocks + computed_egress_with_cidr_ipv6 = var.computed_egress_with_cidr_ipv6 # Open for security group id - computed_egress_with_source_security_group_id = var.computed_egress_with_source_security_group_id + computed_egress_with_referenced_security_group_id = var.computed_egress_with_referenced_security_group_id # Open for prefix list id - computed_egress_with_prefix_list_ids = var.computed_egress_with_prefix_list_ids + computed_egress_with_prefix_list_id = var.computed_egress_with_prefix_list_id ############################# # Number of computed egress ############################# - number_of_computed_egress_rules = var.auto_number_of_computed_egress_rules + var.number_of_computed_egress_rules - number_of_computed_egress_with_self = var.auto_number_of_computed_egress_with_self + var.number_of_computed_egress_with_self - number_of_computed_egress_with_cidr_blocks = var.number_of_computed_egress_with_cidr_blocks - number_of_computed_egress_with_ipv6_cidr_blocks = var.number_of_computed_egress_with_ipv6_cidr_blocks - number_of_computed_egress_with_source_security_group_id = var.number_of_computed_egress_with_source_security_group_id - number_of_computed_egress_with_prefix_list_ids = var.number_of_computed_egress_with_prefix_list_ids + number_of_computed_egress_rules = var.auto_number_of_computed_egress_rules + var.number_of_computed_egress_rules + number_of_computed_egress_with_self = var.auto_number_of_computed_egress_with_self + var.number_of_computed_egress_with_self + number_of_computed_egress_with_cidr_ipv4 = var.number_of_computed_egress_with_cidr_ipv4 + number_of_computed_egress_with_cidr_ipv6 = var.number_of_computed_egress_with_cidr_ipv6 + number_of_computed_egress_with_referenced_security_group_id = var.number_of_computed_egress_with_referenced_security_group_id + number_of_computed_egress_with_prefix_list_id = var.number_of_computed_egress_with_prefix_list_id } diff --git a/modules/nfs/variables.tf b/modules/nfs/variables.tf index 60c8c27b..6590c9e3 100644 --- a/modules/nfs/variables.tf +++ b/modules/nfs/variables.tf @@ -56,37 +56,37 @@ variable "ingress_with_self" { default = [] } -variable "ingress_with_cidr_blocks" { - description = "List of ingress rules to create where 'cidr_blocks' is used" +variable "ingress_with_cidr_ipv4" { + description = "List of ingress rules to create where 'cidr_ipv4' is used" type = list(map(string)) default = [] } -variable "ingress_with_ipv6_cidr_blocks" { +variable "ingress_with_cidr_ipv6" { description = "List of ingress rules to create where 'ipv6_cidr_blocks' is used" type = list(map(string)) default = [] } -variable "ingress_with_source_security_group_id" { +variable "ingress_with_referenced_security_group_id" { description = "List of ingress rules to create where 'source_security_group_id' is used" type = list(map(string)) default = [] } -variable "ingress_with_prefix_list_ids" { - description = "List of ingress rules to create where 'prefix_list_ids' is used" +variable "ingress_with_prefix_list_id" { + description = "List of ingress rules to create where 'prefix_list_id' is used" type = list(map(string)) default = [] } -variable "ingress_cidr_blocks" { +variable "ingress_cidr_ipv4" { description = "List of IPv4 CIDR ranges to use on all ingress rules" type = list(string) default = [] } -variable "ingress_ipv6_cidr_blocks" { +variable "ingress_cidr_ipv6" { description = "List of IPv6 CIDR ranges to use on all ingress rules" type = list(string) default = [] @@ -113,26 +113,26 @@ variable "computed_ingress_with_self" { default = [] } -variable "computed_ingress_with_cidr_blocks" { - description = "List of computed ingress rules to create where 'cidr_blocks' is used" +variable "computed_ingress_with_cidr_ipv4" { + description = "List of computed ingress rules to create where 'cidr_ipv4' is used" type = list(map(string)) default = [] } -variable "computed_ingress_with_ipv6_cidr_blocks" { +variable "computed_ingress_with_cidr_ipv6" { description = "List of computed ingress rules to create where 'ipv6_cidr_blocks' is used" type = list(map(string)) default = [] } -variable "computed_ingress_with_source_security_group_id" { +variable "computed_ingress_with_referenced_security_group_id" { description = "List of computed ingress rules to create where 'source_security_group_id' is used" type = list(map(string)) default = [] } -variable "computed_ingress_with_prefix_list_ids" { - description = "List of computed ingress rules to create where 'prefix_list_ids' is used" +variable "computed_ingress_with_prefix_list_id" { + description = "List of computed ingress rules to create where 'prefix_list_id' is used" type = list(map(string)) default = [] } @@ -170,26 +170,26 @@ variable "number_of_computed_ingress_with_self" { default = 0 } -variable "number_of_computed_ingress_with_cidr_blocks" { - description = "Number of computed ingress rules to create where 'cidr_blocks' is used" +variable "number_of_computed_ingress_with_cidr_ipv4" { + description = "Number of computed ingress rules to create where 'cidr_ipv4' is used" type = number default = 0 } -variable "number_of_computed_ingress_with_ipv6_cidr_blocks" { +variable "number_of_computed_ingress_with_cidr_ipv6" { description = "Number of computed ingress rules to create where 'ipv6_cidr_blocks' is used" type = number default = 0 } -variable "number_of_computed_ingress_with_source_security_group_id" { +variable "number_of_computed_ingress_with_referenced_security_group_id" { description = "Number of computed ingress rules to create where 'source_security_group_id' is used" type = number default = 0 } -variable "number_of_computed_ingress_with_prefix_list_ids" { - description = "Number of computed ingress rules to create where 'prefix_list_ids' is used" +variable "number_of_computed_ingress_with_prefix_list_id" { + description = "Number of computed ingress rules to create where 'prefix_list_id' is used" type = number default = 0 } @@ -227,37 +227,37 @@ variable "egress_with_self" { default = [] } -variable "egress_with_cidr_blocks" { - description = "List of egress rules to create where 'cidr_blocks' is used" +variable "egress_with_cidr_ipv4" { + description = "List of egress rules to create where 'cidr_ipv4' is used" type = list(map(string)) default = [] } -variable "egress_with_ipv6_cidr_blocks" { +variable "egress_with_cidr_ipv6" { description = "List of egress rules to create where 'ipv6_cidr_blocks' is used" type = list(map(string)) default = [] } -variable "egress_with_source_security_group_id" { +variable "egress_with_referenced_security_group_id" { description = "List of egress rules to create where 'source_security_group_id' is used" type = list(map(string)) default = [] } -variable "egress_with_prefix_list_ids" { - description = "List of egress rules to create where 'prefix_list_ids' is used" +variable "egress_with_prefix_list_id" { + description = "List of egress rules to create where 'prefix_list_id' is used" type = list(map(string)) default = [] } -variable "egress_cidr_blocks" { +variable "egress_cidr_ipv4" { description = "List of IPv4 CIDR ranges to use on all egress rules" type = list(string) default = ["0.0.0.0/0"] } -variable "egress_ipv6_cidr_blocks" { +variable "egress_cidr_ipv6" { description = "List of IPv6 CIDR ranges to use on all egress rules" type = list(string) default = ["::/0"] @@ -284,26 +284,26 @@ variable "computed_egress_with_self" { default = [] } -variable "computed_egress_with_cidr_blocks" { - description = "List of computed egress rules to create where 'cidr_blocks' is used" +variable "computed_egress_with_cidr_ipv4" { + description = "List of computed egress rules to create where 'cidr_ipv4' is used" type = list(map(string)) default = [] } -variable "computed_egress_with_ipv6_cidr_blocks" { +variable "computed_egress_with_cidr_ipv6" { description = "List of computed egress rules to create where 'ipv6_cidr_blocks' is used" type = list(map(string)) default = [] } -variable "computed_egress_with_source_security_group_id" { +variable "computed_egress_with_referenced_security_group_id" { description = "List of computed egress rules to create where 'source_security_group_id' is used" type = list(map(string)) default = [] } -variable "computed_egress_with_prefix_list_ids" { - description = "List of computed egress rules to create where 'prefix_list_ids' is used" +variable "computed_egress_with_prefix_list_id" { + description = "List of computed egress rules to create where 'prefix_list_id' is used" type = list(map(string)) default = [] } @@ -341,26 +341,26 @@ variable "number_of_computed_egress_with_self" { default = 0 } -variable "number_of_computed_egress_with_cidr_blocks" { - description = "Number of computed egress rules to create where 'cidr_blocks' is used" +variable "number_of_computed_egress_with_cidr_ipv4" { + description = "Number of computed egress rules to create where 'cidr_ipv4' is used" type = number default = 0 } -variable "number_of_computed_egress_with_ipv6_cidr_blocks" { +variable "number_of_computed_egress_with_cidr_ipv6" { description = "Number of computed egress rules to create where 'ipv6_cidr_blocks' is used" type = number default = 0 } -variable "number_of_computed_egress_with_source_security_group_id" { +variable "number_of_computed_egress_with_referenced_security_group_id" { description = "Number of computed egress rules to create where 'source_security_group_id' is used" type = number default = 0 } -variable "number_of_computed_egress_with_prefix_list_ids" { - description = "Number of computed egress rules to create where 'prefix_list_ids' is used" +variable "number_of_computed_egress_with_prefix_list_id" { + description = "Number of computed egress rules to create where 'prefix_list_id' is used" type = number default = 0 } diff --git a/modules/nomad/README.md b/modules/nomad/README.md index 89b59635..9bf26e3e 100644 --- a/modules/nomad/README.md +++ b/modules/nomad/README.md @@ -55,59 +55,59 @@ No resources. | [computed\_egress\_ipv6\_cidr\_blocks](#input\_computed\_egress\_ipv6\_cidr\_blocks) | List of IPv6 CIDR ranges to use on all computed egress rules | `list(string)` |
[
"::/0"
]
| no | | [computed\_egress\_prefix\_list\_ids](#input\_computed\_egress\_prefix\_list\_ids) | List of prefix list IDs (for allowing access to VPC endpoints) to use on all computed egress rules | `list(string)` | `[]` | no | | [computed\_egress\_rules](#input\_computed\_egress\_rules) | List of computed egress rules to create by name | `list(string)` | `[]` | no | -| [computed\_egress\_with\_cidr\_blocks](#input\_computed\_egress\_with\_cidr\_blocks) | List of computed egress rules to create where 'cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [computed\_egress\_with\_ipv6\_cidr\_blocks](#input\_computed\_egress\_with\_ipv6\_cidr\_blocks) | List of computed egress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [computed\_egress\_with\_prefix\_list\_ids](#input\_computed\_egress\_with\_prefix\_list\_ids) | List of computed egress rules to create where 'prefix\_list\_ids' is used | `list(map(string))` | `[]` | no | +| [computed\_egress\_with\_cidr\_ipv4](#input\_computed\_egress\_with\_cidr\_ipv4) | List of computed egress rules to create where 'cidr\_ipv4' is used | `list(map(string))` | `[]` | no | +| [computed\_egress\_with\_cidr\_ipv6](#input\_computed\_egress\_with\_cidr\_ipv6) | List of computed egress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | +| [computed\_egress\_with\_prefix\_list\_id](#input\_computed\_egress\_with\_prefix\_list\_id) | List of computed egress rules to create where 'prefix\_list\_id' is used | `list(map(string))` | `[]` | no | +| [computed\_egress\_with\_referenced\_security\_group\_id](#input\_computed\_egress\_with\_referenced\_security\_group\_id) | List of computed egress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [computed\_egress\_with\_self](#input\_computed\_egress\_with\_self) | List of computed egress rules to create where 'self' is defined | `list(map(string))` | `[]` | no | -| [computed\_egress\_with\_source\_security\_group\_id](#input\_computed\_egress\_with\_source\_security\_group\_id) | List of computed egress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [computed\_ingress\_cidr\_blocks](#input\_computed\_ingress\_cidr\_blocks) | List of IPv4 CIDR ranges to use on all computed ingress rules | `list(string)` | `[]` | no | | [computed\_ingress\_ipv6\_cidr\_blocks](#input\_computed\_ingress\_ipv6\_cidr\_blocks) | List of IPv6 CIDR ranges to use on all computed ingress rules | `list(string)` | `[]` | no | | [computed\_ingress\_prefix\_list\_ids](#input\_computed\_ingress\_prefix\_list\_ids) | List of prefix list IDs (for allowing access to VPC endpoints) to use on all computed ingress rules | `list(string)` | `[]` | no | | [computed\_ingress\_rules](#input\_computed\_ingress\_rules) | List of computed ingress rules to create by name | `list(string)` | `[]` | no | -| [computed\_ingress\_with\_cidr\_blocks](#input\_computed\_ingress\_with\_cidr\_blocks) | List of computed ingress rules to create where 'cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [computed\_ingress\_with\_ipv6\_cidr\_blocks](#input\_computed\_ingress\_with\_ipv6\_cidr\_blocks) | List of computed ingress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [computed\_ingress\_with\_prefix\_list\_ids](#input\_computed\_ingress\_with\_prefix\_list\_ids) | List of computed ingress rules to create where 'prefix\_list\_ids' is used | `list(map(string))` | `[]` | no | +| [computed\_ingress\_with\_cidr\_ipv4](#input\_computed\_ingress\_with\_cidr\_ipv4) | List of computed ingress rules to create where 'cidr\_ipv4' is used | `list(map(string))` | `[]` | no | +| [computed\_ingress\_with\_cidr\_ipv6](#input\_computed\_ingress\_with\_cidr\_ipv6) | List of computed ingress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | +| [computed\_ingress\_with\_prefix\_list\_id](#input\_computed\_ingress\_with\_prefix\_list\_id) | List of computed ingress rules to create where 'prefix\_list\_id' is used | `list(map(string))` | `[]` | no | +| [computed\_ingress\_with\_referenced\_security\_group\_id](#input\_computed\_ingress\_with\_referenced\_security\_group\_id) | List of computed ingress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [computed\_ingress\_with\_self](#input\_computed\_ingress\_with\_self) | List of computed ingress rules to create where 'self' is defined | `list(map(string))` | `[]` | no | -| [computed\_ingress\_with\_source\_security\_group\_id](#input\_computed\_ingress\_with\_source\_security\_group\_id) | List of computed ingress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [create](#input\_create) | Whether to create security group and all rules | `bool` | `true` | no | | [description](#input\_description) | Description of security group | `string` | `"Security Group managed by Terraform"` | no | -| [egress\_cidr\_blocks](#input\_egress\_cidr\_blocks) | List of IPv4 CIDR ranges to use on all egress rules | `list(string)` |
[
"0.0.0.0/0"
]
| no | -| [egress\_ipv6\_cidr\_blocks](#input\_egress\_ipv6\_cidr\_blocks) | List of IPv6 CIDR ranges to use on all egress rules | `list(string)` |
[
"::/0"
]
| no | +| [egress\_cidr\_ipv4](#input\_egress\_cidr\_ipv4) | List of IPv4 CIDR ranges to use on all egress rules | `list(string)` |
[
"0.0.0.0/0"
]
| no | +| [egress\_cidr\_ipv6](#input\_egress\_cidr\_ipv6) | List of IPv6 CIDR ranges to use on all egress rules | `list(string)` |
[
"::/0"
]
| no | | [egress\_prefix\_list\_ids](#input\_egress\_prefix\_list\_ids) | List of prefix list IDs (for allowing access to VPC endpoints) to use on all egress rules | `list(string)` | `[]` | no | | [egress\_rules](#input\_egress\_rules) | List of egress rules to create by name | `list(string)` | `[]` | no | -| [egress\_with\_cidr\_blocks](#input\_egress\_with\_cidr\_blocks) | List of egress rules to create where 'cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [egress\_with\_ipv6\_cidr\_blocks](#input\_egress\_with\_ipv6\_cidr\_blocks) | List of egress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [egress\_with\_prefix\_list\_ids](#input\_egress\_with\_prefix\_list\_ids) | List of egress rules to create where 'prefix\_list\_ids' is used | `list(map(string))` | `[]` | no | +| [egress\_with\_cidr\_ipv4](#input\_egress\_with\_cidr\_ipv4) | List of egress rules to create where 'cidr\_ipv4' is used | `list(map(string))` | `[]` | no | +| [egress\_with\_cidr\_ipv6](#input\_egress\_with\_cidr\_ipv6) | List of egress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | +| [egress\_with\_prefix\_list\_id](#input\_egress\_with\_prefix\_list\_id) | List of egress rules to create where 'prefix\_list\_id' is used | `list(map(string))` | `[]` | no | +| [egress\_with\_referenced\_security\_group\_id](#input\_egress\_with\_referenced\_security\_group\_id) | List of egress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [egress\_with\_self](#input\_egress\_with\_self) | List of egress rules to create where 'self' is defined | `list(map(string))` | `[]` | no | -| [egress\_with\_source\_security\_group\_id](#input\_egress\_with\_source\_security\_group\_id) | List of egress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | -| [ingress\_cidr\_blocks](#input\_ingress\_cidr\_blocks) | List of IPv4 CIDR ranges to use on all ingress rules | `list(string)` | `[]` | no | -| [ingress\_ipv6\_cidr\_blocks](#input\_ingress\_ipv6\_cidr\_blocks) | List of IPv6 CIDR ranges to use on all ingress rules | `list(string)` | `[]` | no | +| [ingress\_cidr\_ipv4](#input\_ingress\_cidr\_ipv4) | List of IPv4 CIDR ranges to use on all ingress rules | `list(string)` | `[]` | no | +| [ingress\_cidr\_ipv6](#input\_ingress\_cidr\_ipv6) | List of IPv6 CIDR ranges to use on all ingress rules | `list(string)` | `[]` | no | | [ingress\_prefix\_list\_ids](#input\_ingress\_prefix\_list\_ids) | List of prefix list IDs (for allowing access to VPC endpoints) to use on all ingress rules | `list(string)` | `[]` | no | | [ingress\_rules](#input\_ingress\_rules) | List of ingress rules to create by name | `list(string)` | `[]` | no | -| [ingress\_with\_cidr\_blocks](#input\_ingress\_with\_cidr\_blocks) | List of ingress rules to create where 'cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [ingress\_with\_ipv6\_cidr\_blocks](#input\_ingress\_with\_ipv6\_cidr\_blocks) | List of ingress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [ingress\_with\_prefix\_list\_ids](#input\_ingress\_with\_prefix\_list\_ids) | List of ingress rules to create where 'prefix\_list\_ids' is used | `list(map(string))` | `[]` | no | +| [ingress\_with\_cidr\_ipv4](#input\_ingress\_with\_cidr\_ipv4) | List of ingress rules to create where 'cidr\_ipv4' is used | `list(map(string))` | `[]` | no | +| [ingress\_with\_cidr\_ipv6](#input\_ingress\_with\_cidr\_ipv6) | List of ingress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | +| [ingress\_with\_prefix\_list\_id](#input\_ingress\_with\_prefix\_list\_id) | List of ingress rules to create where 'prefix\_list\_id' is used | `list(map(string))` | `[]` | no | +| [ingress\_with\_referenced\_security\_group\_id](#input\_ingress\_with\_referenced\_security\_group\_id) | List of ingress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [ingress\_with\_self](#input\_ingress\_with\_self) | List of ingress rules to create where 'self' is defined | `list(map(string))` | `[]` | no | -| [ingress\_with\_source\_security\_group\_id](#input\_ingress\_with\_source\_security\_group\_id) | List of ingress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [name](#input\_name) | Name of security group | `string` | n/a | yes | | [number\_of\_computed\_egress\_cidr\_blocks](#input\_number\_of\_computed\_egress\_cidr\_blocks) | Number of IPv4 CIDR ranges to use on all computed egress rules | `number` | `0` | no | | [number\_of\_computed\_egress\_ipv6\_cidr\_blocks](#input\_number\_of\_computed\_egress\_ipv6\_cidr\_blocks) | Number of IPv6 CIDR ranges to use on all computed egress rules | `number` | `0` | no | | [number\_of\_computed\_egress\_prefix\_list\_ids](#input\_number\_of\_computed\_egress\_prefix\_list\_ids) | Number of prefix list IDs (for allowing access to VPC endpoints) to use on all computed egress rules | `number` | `0` | no | | [number\_of\_computed\_egress\_rules](#input\_number\_of\_computed\_egress\_rules) | Number of computed egress rules to create by name | `number` | `0` | no | -| [number\_of\_computed\_egress\_with\_cidr\_blocks](#input\_number\_of\_computed\_egress\_with\_cidr\_blocks) | Number of computed egress rules to create where 'cidr\_blocks' is used | `number` | `0` | no | -| [number\_of\_computed\_egress\_with\_ipv6\_cidr\_blocks](#input\_number\_of\_computed\_egress\_with\_ipv6\_cidr\_blocks) | Number of computed egress rules to create where 'ipv6\_cidr\_blocks' is used | `number` | `0` | no | -| [number\_of\_computed\_egress\_with\_prefix\_list\_ids](#input\_number\_of\_computed\_egress\_with\_prefix\_list\_ids) | Number of computed egress rules to create where 'prefix\_list\_ids' is used | `number` | `0` | no | +| [number\_of\_computed\_egress\_with\_cidr\_ipv4](#input\_number\_of\_computed\_egress\_with\_cidr\_ipv4) | Number of computed egress rules to create where 'cidr\_ipv4' is used | `number` | `0` | no | +| [number\_of\_computed\_egress\_with\_cidr\_ipv6](#input\_number\_of\_computed\_egress\_with\_cidr\_ipv6) | Number of computed egress rules to create where 'ipv6\_cidr\_blocks' is used | `number` | `0` | no | +| [number\_of\_computed\_egress\_with\_prefix\_list\_id](#input\_number\_of\_computed\_egress\_with\_prefix\_list\_id) | Number of computed egress rules to create where 'prefix\_list\_id' is used | `number` | `0` | no | +| [number\_of\_computed\_egress\_with\_referenced\_security\_group\_id](#input\_number\_of\_computed\_egress\_with\_referenced\_security\_group\_id) | Number of computed egress rules to create where 'source\_security\_group\_id' is used | `number` | `0` | no | | [number\_of\_computed\_egress\_with\_self](#input\_number\_of\_computed\_egress\_with\_self) | Number of computed egress rules to create where 'self' is defined | `number` | `0` | no | -| [number\_of\_computed\_egress\_with\_source\_security\_group\_id](#input\_number\_of\_computed\_egress\_with\_source\_security\_group\_id) | Number of computed egress rules to create where 'source\_security\_group\_id' is used | `number` | `0` | no | | [number\_of\_computed\_ingress\_cidr\_blocks](#input\_number\_of\_computed\_ingress\_cidr\_blocks) | Number of IPv4 CIDR ranges to use on all computed ingress rules | `number` | `0` | no | | [number\_of\_computed\_ingress\_ipv6\_cidr\_blocks](#input\_number\_of\_computed\_ingress\_ipv6\_cidr\_blocks) | Number of IPv6 CIDR ranges to use on all computed ingress rules | `number` | `0` | no | | [number\_of\_computed\_ingress\_prefix\_list\_ids](#input\_number\_of\_computed\_ingress\_prefix\_list\_ids) | Number of prefix list IDs (for allowing access to VPC endpoints) to use on all computed ingress rules | `number` | `0` | no | | [number\_of\_computed\_ingress\_rules](#input\_number\_of\_computed\_ingress\_rules) | Number of computed ingress rules to create by name | `number` | `0` | no | -| [number\_of\_computed\_ingress\_with\_cidr\_blocks](#input\_number\_of\_computed\_ingress\_with\_cidr\_blocks) | Number of computed ingress rules to create where 'cidr\_blocks' is used | `number` | `0` | no | -| [number\_of\_computed\_ingress\_with\_ipv6\_cidr\_blocks](#input\_number\_of\_computed\_ingress\_with\_ipv6\_cidr\_blocks) | Number of computed ingress rules to create where 'ipv6\_cidr\_blocks' is used | `number` | `0` | no | -| [number\_of\_computed\_ingress\_with\_prefix\_list\_ids](#input\_number\_of\_computed\_ingress\_with\_prefix\_list\_ids) | Number of computed ingress rules to create where 'prefix\_list\_ids' is used | `number` | `0` | no | +| [number\_of\_computed\_ingress\_with\_cidr\_ipv4](#input\_number\_of\_computed\_ingress\_with\_cidr\_ipv4) | Number of computed ingress rules to create where 'cidr\_ipv4' is used | `number` | `0` | no | +| [number\_of\_computed\_ingress\_with\_cidr\_ipv6](#input\_number\_of\_computed\_ingress\_with\_cidr\_ipv6) | Number of computed ingress rules to create where 'ipv6\_cidr\_blocks' is used | `number` | `0` | no | +| [number\_of\_computed\_ingress\_with\_prefix\_list\_id](#input\_number\_of\_computed\_ingress\_with\_prefix\_list\_id) | Number of computed ingress rules to create where 'prefix\_list\_id' is used | `number` | `0` | no | +| [number\_of\_computed\_ingress\_with\_referenced\_security\_group\_id](#input\_number\_of\_computed\_ingress\_with\_referenced\_security\_group\_id) | Number of computed ingress rules to create where 'source\_security\_group\_id' is used | `number` | `0` | no | | [number\_of\_computed\_ingress\_with\_self](#input\_number\_of\_computed\_ingress\_with\_self) | Number of computed ingress rules to create where 'self' is defined | `number` | `0` | no | -| [number\_of\_computed\_ingress\_with\_source\_security\_group\_id](#input\_number\_of\_computed\_ingress\_with\_source\_security\_group\_id) | Number of computed ingress rules to create where 'source\_security\_group\_id' is used | `number` | `0` | no | | [revoke\_rules\_on\_delete](#input\_revoke\_rules\_on\_delete) | Instruct Terraform to revoke all of the Security Groups attached ingress and egress rules before deleting the rule itself. Enable for EMR. | `bool` | `false` | no | | [tags](#input\_tags) | A mapping of tags to assign to security group | `map(string)` | `{}` | no | | [use\_name\_prefix](#input\_use\_name\_prefix) | Whether to use name\_prefix or fixed name. Should be true to able to update security group name after initial creation | `bool` | `true` | no | diff --git a/modules/nomad/main.tf b/modules/nomad/main.tf index 80ea0adb..d2a1bf93 100644 --- a/modules/nomad/main.tf +++ b/modules/nomad/main.tf @@ -19,20 +19,20 @@ module "sg" { ingress_with_self = concat(var.auto_ingress_with_self, var.ingress_with_self) # Open to IPv4 cidr blocks - ingress_with_cidr_blocks = var.ingress_with_cidr_blocks + ingress_with_cidr_ipv4 = var.ingress_with_cidr_ipv4 # Open to IPv6 cidr blocks - ingress_with_ipv6_cidr_blocks = var.ingress_with_ipv6_cidr_blocks + ingress_with_cidr_ipv6 = var.ingress_with_cidr_ipv6 # Open for security group id - ingress_with_source_security_group_id = var.ingress_with_source_security_group_id + ingress_with_referenced_security_group_id = var.ingress_with_referenced_security_group_id # Open for prefix list id - ingress_with_prefix_list_ids = var.ingress_with_prefix_list_ids + ingress_with_prefix_list_id = var.ingress_with_prefix_list_id # Default ingress CIDR blocks - ingress_cidr_blocks = var.ingress_cidr_blocks - ingress_ipv6_cidr_blocks = var.ingress_ipv6_cidr_blocks + ingress_cidr_ipv4 = var.ingress_cidr_ipv4 + ingress_cidr_ipv6 = var.ingress_cidr_ipv6 # Default prefix list ids ingress_prefix_list_ids = var.ingress_prefix_list_ids @@ -47,26 +47,26 @@ module "sg" { computed_ingress_with_self = concat(var.auto_computed_ingress_with_self, var.computed_ingress_with_self) # Open to IPv4 cidr blocks - computed_ingress_with_cidr_blocks = var.computed_ingress_with_cidr_blocks + computed_ingress_with_cidr_ipv4 = var.computed_ingress_with_cidr_ipv4 # Open to IPv6 cidr blocks - computed_ingress_with_ipv6_cidr_blocks = var.computed_ingress_with_ipv6_cidr_blocks + computed_ingress_with_cidr_ipv6 = var.computed_ingress_with_cidr_ipv6 # Open for security group id - computed_ingress_with_source_security_group_id = var.computed_ingress_with_source_security_group_id + computed_ingress_with_referenced_security_group_id = var.computed_ingress_with_referenced_security_group_id # Open for prefix list id - computed_ingress_with_prefix_list_ids = var.computed_ingress_with_prefix_list_ids + computed_ingress_with_prefix_list_id = var.computed_ingress_with_prefix_list_id ############################# # Number of computed ingress ############################# - number_of_computed_ingress_rules = var.auto_number_of_computed_ingress_rules + var.number_of_computed_ingress_rules - number_of_computed_ingress_with_self = var.auto_number_of_computed_ingress_with_self + var.number_of_computed_ingress_with_self - number_of_computed_ingress_with_cidr_blocks = var.number_of_computed_ingress_with_cidr_blocks - number_of_computed_ingress_with_ipv6_cidr_blocks = var.number_of_computed_ingress_with_ipv6_cidr_blocks - number_of_computed_ingress_with_source_security_group_id = var.number_of_computed_ingress_with_source_security_group_id - number_of_computed_ingress_with_prefix_list_ids = var.number_of_computed_ingress_with_prefix_list_ids + number_of_computed_ingress_rules = var.auto_number_of_computed_ingress_rules + var.number_of_computed_ingress_rules + number_of_computed_ingress_with_self = var.auto_number_of_computed_ingress_with_self + var.number_of_computed_ingress_with_self + number_of_computed_ingress_with_cidr_ipv4 = var.number_of_computed_ingress_with_cidr_ipv4 + number_of_computed_ingress_with_cidr_ipv6 = var.number_of_computed_ingress_with_cidr_ipv6 + number_of_computed_ingress_with_referenced_security_group_id = var.number_of_computed_ingress_with_referenced_security_group_id + number_of_computed_ingress_with_prefix_list_id = var.number_of_computed_ingress_with_prefix_list_id ######### # Egress @@ -78,20 +78,20 @@ module "sg" { egress_with_self = concat(var.auto_egress_with_self, var.egress_with_self) # Open to IPv4 cidr blocks - egress_with_cidr_blocks = var.egress_with_cidr_blocks + egress_with_cidr_ipv4 = var.egress_with_cidr_ipv4 # Open to IPv6 cidr blocks - egress_with_ipv6_cidr_blocks = var.egress_with_ipv6_cidr_blocks + egress_with_cidr_ipv6 = var.egress_with_cidr_ipv6 # Open for security group id - egress_with_source_security_group_id = var.egress_with_source_security_group_id + egress_with_referenced_security_group_id = var.egress_with_referenced_security_group_id # Open for prefix list id - egress_with_prefix_list_ids = var.egress_with_prefix_list_ids + egress_with_prefix_list_id = var.egress_with_prefix_list_id # Default egress CIDR blocks - egress_cidr_blocks = var.egress_cidr_blocks - egress_ipv6_cidr_blocks = var.egress_ipv6_cidr_blocks + egress_cidr_ipv4 = var.egress_cidr_ipv4 + egress_cidr_ipv6 = var.egress_cidr_ipv6 # Default prefix list ids egress_prefix_list_ids = var.egress_prefix_list_ids @@ -106,24 +106,24 @@ module "sg" { computed_egress_with_self = concat(var.auto_computed_egress_with_self, var.computed_egress_with_self) # Open to IPv4 cidr blocks - computed_egress_with_cidr_blocks = var.computed_egress_with_cidr_blocks + computed_egress_with_cidr_ipv4 = var.computed_egress_with_cidr_ipv4 # Open to IPv6 cidr blocks - computed_egress_with_ipv6_cidr_blocks = var.computed_egress_with_ipv6_cidr_blocks + computed_egress_with_cidr_ipv6 = var.computed_egress_with_cidr_ipv6 # Open for security group id - computed_egress_with_source_security_group_id = var.computed_egress_with_source_security_group_id + computed_egress_with_referenced_security_group_id = var.computed_egress_with_referenced_security_group_id # Open for prefix list id - computed_egress_with_prefix_list_ids = var.computed_egress_with_prefix_list_ids + computed_egress_with_prefix_list_id = var.computed_egress_with_prefix_list_id ############################# # Number of computed egress ############################# - number_of_computed_egress_rules = var.auto_number_of_computed_egress_rules + var.number_of_computed_egress_rules - number_of_computed_egress_with_self = var.auto_number_of_computed_egress_with_self + var.number_of_computed_egress_with_self - number_of_computed_egress_with_cidr_blocks = var.number_of_computed_egress_with_cidr_blocks - number_of_computed_egress_with_ipv6_cidr_blocks = var.number_of_computed_egress_with_ipv6_cidr_blocks - number_of_computed_egress_with_source_security_group_id = var.number_of_computed_egress_with_source_security_group_id - number_of_computed_egress_with_prefix_list_ids = var.number_of_computed_egress_with_prefix_list_ids + number_of_computed_egress_rules = var.auto_number_of_computed_egress_rules + var.number_of_computed_egress_rules + number_of_computed_egress_with_self = var.auto_number_of_computed_egress_with_self + var.number_of_computed_egress_with_self + number_of_computed_egress_with_cidr_ipv4 = var.number_of_computed_egress_with_cidr_ipv4 + number_of_computed_egress_with_cidr_ipv6 = var.number_of_computed_egress_with_cidr_ipv6 + number_of_computed_egress_with_referenced_security_group_id = var.number_of_computed_egress_with_referenced_security_group_id + number_of_computed_egress_with_prefix_list_id = var.number_of_computed_egress_with_prefix_list_id } diff --git a/modules/nomad/variables.tf b/modules/nomad/variables.tf index 60c8c27b..6590c9e3 100644 --- a/modules/nomad/variables.tf +++ b/modules/nomad/variables.tf @@ -56,37 +56,37 @@ variable "ingress_with_self" { default = [] } -variable "ingress_with_cidr_blocks" { - description = "List of ingress rules to create where 'cidr_blocks' is used" +variable "ingress_with_cidr_ipv4" { + description = "List of ingress rules to create where 'cidr_ipv4' is used" type = list(map(string)) default = [] } -variable "ingress_with_ipv6_cidr_blocks" { +variable "ingress_with_cidr_ipv6" { description = "List of ingress rules to create where 'ipv6_cidr_blocks' is used" type = list(map(string)) default = [] } -variable "ingress_with_source_security_group_id" { +variable "ingress_with_referenced_security_group_id" { description = "List of ingress rules to create where 'source_security_group_id' is used" type = list(map(string)) default = [] } -variable "ingress_with_prefix_list_ids" { - description = "List of ingress rules to create where 'prefix_list_ids' is used" +variable "ingress_with_prefix_list_id" { + description = "List of ingress rules to create where 'prefix_list_id' is used" type = list(map(string)) default = [] } -variable "ingress_cidr_blocks" { +variable "ingress_cidr_ipv4" { description = "List of IPv4 CIDR ranges to use on all ingress rules" type = list(string) default = [] } -variable "ingress_ipv6_cidr_blocks" { +variable "ingress_cidr_ipv6" { description = "List of IPv6 CIDR ranges to use on all ingress rules" type = list(string) default = [] @@ -113,26 +113,26 @@ variable "computed_ingress_with_self" { default = [] } -variable "computed_ingress_with_cidr_blocks" { - description = "List of computed ingress rules to create where 'cidr_blocks' is used" +variable "computed_ingress_with_cidr_ipv4" { + description = "List of computed ingress rules to create where 'cidr_ipv4' is used" type = list(map(string)) default = [] } -variable "computed_ingress_with_ipv6_cidr_blocks" { +variable "computed_ingress_with_cidr_ipv6" { description = "List of computed ingress rules to create where 'ipv6_cidr_blocks' is used" type = list(map(string)) default = [] } -variable "computed_ingress_with_source_security_group_id" { +variable "computed_ingress_with_referenced_security_group_id" { description = "List of computed ingress rules to create where 'source_security_group_id' is used" type = list(map(string)) default = [] } -variable "computed_ingress_with_prefix_list_ids" { - description = "List of computed ingress rules to create where 'prefix_list_ids' is used" +variable "computed_ingress_with_prefix_list_id" { + description = "List of computed ingress rules to create where 'prefix_list_id' is used" type = list(map(string)) default = [] } @@ -170,26 +170,26 @@ variable "number_of_computed_ingress_with_self" { default = 0 } -variable "number_of_computed_ingress_with_cidr_blocks" { - description = "Number of computed ingress rules to create where 'cidr_blocks' is used" +variable "number_of_computed_ingress_with_cidr_ipv4" { + description = "Number of computed ingress rules to create where 'cidr_ipv4' is used" type = number default = 0 } -variable "number_of_computed_ingress_with_ipv6_cidr_blocks" { +variable "number_of_computed_ingress_with_cidr_ipv6" { description = "Number of computed ingress rules to create where 'ipv6_cidr_blocks' is used" type = number default = 0 } -variable "number_of_computed_ingress_with_source_security_group_id" { +variable "number_of_computed_ingress_with_referenced_security_group_id" { description = "Number of computed ingress rules to create where 'source_security_group_id' is used" type = number default = 0 } -variable "number_of_computed_ingress_with_prefix_list_ids" { - description = "Number of computed ingress rules to create where 'prefix_list_ids' is used" +variable "number_of_computed_ingress_with_prefix_list_id" { + description = "Number of computed ingress rules to create where 'prefix_list_id' is used" type = number default = 0 } @@ -227,37 +227,37 @@ variable "egress_with_self" { default = [] } -variable "egress_with_cidr_blocks" { - description = "List of egress rules to create where 'cidr_blocks' is used" +variable "egress_with_cidr_ipv4" { + description = "List of egress rules to create where 'cidr_ipv4' is used" type = list(map(string)) default = [] } -variable "egress_with_ipv6_cidr_blocks" { +variable "egress_with_cidr_ipv6" { description = "List of egress rules to create where 'ipv6_cidr_blocks' is used" type = list(map(string)) default = [] } -variable "egress_with_source_security_group_id" { +variable "egress_with_referenced_security_group_id" { description = "List of egress rules to create where 'source_security_group_id' is used" type = list(map(string)) default = [] } -variable "egress_with_prefix_list_ids" { - description = "List of egress rules to create where 'prefix_list_ids' is used" +variable "egress_with_prefix_list_id" { + description = "List of egress rules to create where 'prefix_list_id' is used" type = list(map(string)) default = [] } -variable "egress_cidr_blocks" { +variable "egress_cidr_ipv4" { description = "List of IPv4 CIDR ranges to use on all egress rules" type = list(string) default = ["0.0.0.0/0"] } -variable "egress_ipv6_cidr_blocks" { +variable "egress_cidr_ipv6" { description = "List of IPv6 CIDR ranges to use on all egress rules" type = list(string) default = ["::/0"] @@ -284,26 +284,26 @@ variable "computed_egress_with_self" { default = [] } -variable "computed_egress_with_cidr_blocks" { - description = "List of computed egress rules to create where 'cidr_blocks' is used" +variable "computed_egress_with_cidr_ipv4" { + description = "List of computed egress rules to create where 'cidr_ipv4' is used" type = list(map(string)) default = [] } -variable "computed_egress_with_ipv6_cidr_blocks" { +variable "computed_egress_with_cidr_ipv6" { description = "List of computed egress rules to create where 'ipv6_cidr_blocks' is used" type = list(map(string)) default = [] } -variable "computed_egress_with_source_security_group_id" { +variable "computed_egress_with_referenced_security_group_id" { description = "List of computed egress rules to create where 'source_security_group_id' is used" type = list(map(string)) default = [] } -variable "computed_egress_with_prefix_list_ids" { - description = "List of computed egress rules to create where 'prefix_list_ids' is used" +variable "computed_egress_with_prefix_list_id" { + description = "List of computed egress rules to create where 'prefix_list_id' is used" type = list(map(string)) default = [] } @@ -341,26 +341,26 @@ variable "number_of_computed_egress_with_self" { default = 0 } -variable "number_of_computed_egress_with_cidr_blocks" { - description = "Number of computed egress rules to create where 'cidr_blocks' is used" +variable "number_of_computed_egress_with_cidr_ipv4" { + description = "Number of computed egress rules to create where 'cidr_ipv4' is used" type = number default = 0 } -variable "number_of_computed_egress_with_ipv6_cidr_blocks" { +variable "number_of_computed_egress_with_cidr_ipv6" { description = "Number of computed egress rules to create where 'ipv6_cidr_blocks' is used" type = number default = 0 } -variable "number_of_computed_egress_with_source_security_group_id" { +variable "number_of_computed_egress_with_referenced_security_group_id" { description = "Number of computed egress rules to create where 'source_security_group_id' is used" type = number default = 0 } -variable "number_of_computed_egress_with_prefix_list_ids" { - description = "Number of computed egress rules to create where 'prefix_list_ids' is used" +variable "number_of_computed_egress_with_prefix_list_id" { + description = "Number of computed egress rules to create where 'prefix_list_id' is used" type = number default = 0 } diff --git a/modules/ntp/README.md b/modules/ntp/README.md index 89b15ffd..da97492c 100644 --- a/modules/ntp/README.md +++ b/modules/ntp/README.md @@ -55,59 +55,59 @@ No resources. | [computed\_egress\_ipv6\_cidr\_blocks](#input\_computed\_egress\_ipv6\_cidr\_blocks) | List of IPv6 CIDR ranges to use on all computed egress rules | `list(string)` |
[
"::/0"
]
| no | | [computed\_egress\_prefix\_list\_ids](#input\_computed\_egress\_prefix\_list\_ids) | List of prefix list IDs (for allowing access to VPC endpoints) to use on all computed egress rules | `list(string)` | `[]` | no | | [computed\_egress\_rules](#input\_computed\_egress\_rules) | List of computed egress rules to create by name | `list(string)` | `[]` | no | -| [computed\_egress\_with\_cidr\_blocks](#input\_computed\_egress\_with\_cidr\_blocks) | List of computed egress rules to create where 'cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [computed\_egress\_with\_ipv6\_cidr\_blocks](#input\_computed\_egress\_with\_ipv6\_cidr\_blocks) | List of computed egress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [computed\_egress\_with\_prefix\_list\_ids](#input\_computed\_egress\_with\_prefix\_list\_ids) | List of computed egress rules to create where 'prefix\_list\_ids' is used | `list(map(string))` | `[]` | no | +| [computed\_egress\_with\_cidr\_ipv4](#input\_computed\_egress\_with\_cidr\_ipv4) | List of computed egress rules to create where 'cidr\_ipv4' is used | `list(map(string))` | `[]` | no | +| [computed\_egress\_with\_cidr\_ipv6](#input\_computed\_egress\_with\_cidr\_ipv6) | List of computed egress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | +| [computed\_egress\_with\_prefix\_list\_id](#input\_computed\_egress\_with\_prefix\_list\_id) | List of computed egress rules to create where 'prefix\_list\_id' is used | `list(map(string))` | `[]` | no | +| [computed\_egress\_with\_referenced\_security\_group\_id](#input\_computed\_egress\_with\_referenced\_security\_group\_id) | List of computed egress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [computed\_egress\_with\_self](#input\_computed\_egress\_with\_self) | List of computed egress rules to create where 'self' is defined | `list(map(string))` | `[]` | no | -| [computed\_egress\_with\_source\_security\_group\_id](#input\_computed\_egress\_with\_source\_security\_group\_id) | List of computed egress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [computed\_ingress\_cidr\_blocks](#input\_computed\_ingress\_cidr\_blocks) | List of IPv4 CIDR ranges to use on all computed ingress rules | `list(string)` | `[]` | no | | [computed\_ingress\_ipv6\_cidr\_blocks](#input\_computed\_ingress\_ipv6\_cidr\_blocks) | List of IPv6 CIDR ranges to use on all computed ingress rules | `list(string)` | `[]` | no | | [computed\_ingress\_prefix\_list\_ids](#input\_computed\_ingress\_prefix\_list\_ids) | List of prefix list IDs (for allowing access to VPC endpoints) to use on all computed ingress rules | `list(string)` | `[]` | no | | [computed\_ingress\_rules](#input\_computed\_ingress\_rules) | List of computed ingress rules to create by name | `list(string)` | `[]` | no | -| [computed\_ingress\_with\_cidr\_blocks](#input\_computed\_ingress\_with\_cidr\_blocks) | List of computed ingress rules to create where 'cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [computed\_ingress\_with\_ipv6\_cidr\_blocks](#input\_computed\_ingress\_with\_ipv6\_cidr\_blocks) | List of computed ingress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [computed\_ingress\_with\_prefix\_list\_ids](#input\_computed\_ingress\_with\_prefix\_list\_ids) | List of computed ingress rules to create where 'prefix\_list\_ids' is used | `list(map(string))` | `[]` | no | +| [computed\_ingress\_with\_cidr\_ipv4](#input\_computed\_ingress\_with\_cidr\_ipv4) | List of computed ingress rules to create where 'cidr\_ipv4' is used | `list(map(string))` | `[]` | no | +| [computed\_ingress\_with\_cidr\_ipv6](#input\_computed\_ingress\_with\_cidr\_ipv6) | List of computed ingress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | +| [computed\_ingress\_with\_prefix\_list\_id](#input\_computed\_ingress\_with\_prefix\_list\_id) | List of computed ingress rules to create where 'prefix\_list\_id' is used | `list(map(string))` | `[]` | no | +| [computed\_ingress\_with\_referenced\_security\_group\_id](#input\_computed\_ingress\_with\_referenced\_security\_group\_id) | List of computed ingress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [computed\_ingress\_with\_self](#input\_computed\_ingress\_with\_self) | List of computed ingress rules to create where 'self' is defined | `list(map(string))` | `[]` | no | -| [computed\_ingress\_with\_source\_security\_group\_id](#input\_computed\_ingress\_with\_source\_security\_group\_id) | List of computed ingress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [create](#input\_create) | Whether to create security group and all rules | `bool` | `true` | no | | [description](#input\_description) | Description of security group | `string` | `"Security Group managed by Terraform"` | no | -| [egress\_cidr\_blocks](#input\_egress\_cidr\_blocks) | List of IPv4 CIDR ranges to use on all egress rules | `list(string)` |
[
"0.0.0.0/0"
]
| no | -| [egress\_ipv6\_cidr\_blocks](#input\_egress\_ipv6\_cidr\_blocks) | List of IPv6 CIDR ranges to use on all egress rules | `list(string)` |
[
"::/0"
]
| no | +| [egress\_cidr\_ipv4](#input\_egress\_cidr\_ipv4) | List of IPv4 CIDR ranges to use on all egress rules | `list(string)` |
[
"0.0.0.0/0"
]
| no | +| [egress\_cidr\_ipv6](#input\_egress\_cidr\_ipv6) | List of IPv6 CIDR ranges to use on all egress rules | `list(string)` |
[
"::/0"
]
| no | | [egress\_prefix\_list\_ids](#input\_egress\_prefix\_list\_ids) | List of prefix list IDs (for allowing access to VPC endpoints) to use on all egress rules | `list(string)` | `[]` | no | | [egress\_rules](#input\_egress\_rules) | List of egress rules to create by name | `list(string)` | `[]` | no | -| [egress\_with\_cidr\_blocks](#input\_egress\_with\_cidr\_blocks) | List of egress rules to create where 'cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [egress\_with\_ipv6\_cidr\_blocks](#input\_egress\_with\_ipv6\_cidr\_blocks) | List of egress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [egress\_with\_prefix\_list\_ids](#input\_egress\_with\_prefix\_list\_ids) | List of egress rules to create where 'prefix\_list\_ids' is used | `list(map(string))` | `[]` | no | +| [egress\_with\_cidr\_ipv4](#input\_egress\_with\_cidr\_ipv4) | List of egress rules to create where 'cidr\_ipv4' is used | `list(map(string))` | `[]` | no | +| [egress\_with\_cidr\_ipv6](#input\_egress\_with\_cidr\_ipv6) | List of egress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | +| [egress\_with\_prefix\_list\_id](#input\_egress\_with\_prefix\_list\_id) | List of egress rules to create where 'prefix\_list\_id' is used | `list(map(string))` | `[]` | no | +| [egress\_with\_referenced\_security\_group\_id](#input\_egress\_with\_referenced\_security\_group\_id) | List of egress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [egress\_with\_self](#input\_egress\_with\_self) | List of egress rules to create where 'self' is defined | `list(map(string))` | `[]` | no | -| [egress\_with\_source\_security\_group\_id](#input\_egress\_with\_source\_security\_group\_id) | List of egress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | -| [ingress\_cidr\_blocks](#input\_ingress\_cidr\_blocks) | List of IPv4 CIDR ranges to use on all ingress rules | `list(string)` | `[]` | no | -| [ingress\_ipv6\_cidr\_blocks](#input\_ingress\_ipv6\_cidr\_blocks) | List of IPv6 CIDR ranges to use on all ingress rules | `list(string)` | `[]` | no | +| [ingress\_cidr\_ipv4](#input\_ingress\_cidr\_ipv4) | List of IPv4 CIDR ranges to use on all ingress rules | `list(string)` | `[]` | no | +| [ingress\_cidr\_ipv6](#input\_ingress\_cidr\_ipv6) | List of IPv6 CIDR ranges to use on all ingress rules | `list(string)` | `[]` | no | | [ingress\_prefix\_list\_ids](#input\_ingress\_prefix\_list\_ids) | List of prefix list IDs (for allowing access to VPC endpoints) to use on all ingress rules | `list(string)` | `[]` | no | | [ingress\_rules](#input\_ingress\_rules) | List of ingress rules to create by name | `list(string)` | `[]` | no | -| [ingress\_with\_cidr\_blocks](#input\_ingress\_with\_cidr\_blocks) | List of ingress rules to create where 'cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [ingress\_with\_ipv6\_cidr\_blocks](#input\_ingress\_with\_ipv6\_cidr\_blocks) | List of ingress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [ingress\_with\_prefix\_list\_ids](#input\_ingress\_with\_prefix\_list\_ids) | List of ingress rules to create where 'prefix\_list\_ids' is used | `list(map(string))` | `[]` | no | +| [ingress\_with\_cidr\_ipv4](#input\_ingress\_with\_cidr\_ipv4) | List of ingress rules to create where 'cidr\_ipv4' is used | `list(map(string))` | `[]` | no | +| [ingress\_with\_cidr\_ipv6](#input\_ingress\_with\_cidr\_ipv6) | List of ingress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | +| [ingress\_with\_prefix\_list\_id](#input\_ingress\_with\_prefix\_list\_id) | List of ingress rules to create where 'prefix\_list\_id' is used | `list(map(string))` | `[]` | no | +| [ingress\_with\_referenced\_security\_group\_id](#input\_ingress\_with\_referenced\_security\_group\_id) | List of ingress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [ingress\_with\_self](#input\_ingress\_with\_self) | List of ingress rules to create where 'self' is defined | `list(map(string))` | `[]` | no | -| [ingress\_with\_source\_security\_group\_id](#input\_ingress\_with\_source\_security\_group\_id) | List of ingress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [name](#input\_name) | Name of security group | `string` | n/a | yes | | [number\_of\_computed\_egress\_cidr\_blocks](#input\_number\_of\_computed\_egress\_cidr\_blocks) | Number of IPv4 CIDR ranges to use on all computed egress rules | `number` | `0` | no | | [number\_of\_computed\_egress\_ipv6\_cidr\_blocks](#input\_number\_of\_computed\_egress\_ipv6\_cidr\_blocks) | Number of IPv6 CIDR ranges to use on all computed egress rules | `number` | `0` | no | | [number\_of\_computed\_egress\_prefix\_list\_ids](#input\_number\_of\_computed\_egress\_prefix\_list\_ids) | Number of prefix list IDs (for allowing access to VPC endpoints) to use on all computed egress rules | `number` | `0` | no | | [number\_of\_computed\_egress\_rules](#input\_number\_of\_computed\_egress\_rules) | Number of computed egress rules to create by name | `number` | `0` | no | -| [number\_of\_computed\_egress\_with\_cidr\_blocks](#input\_number\_of\_computed\_egress\_with\_cidr\_blocks) | Number of computed egress rules to create where 'cidr\_blocks' is used | `number` | `0` | no | -| [number\_of\_computed\_egress\_with\_ipv6\_cidr\_blocks](#input\_number\_of\_computed\_egress\_with\_ipv6\_cidr\_blocks) | Number of computed egress rules to create where 'ipv6\_cidr\_blocks' is used | `number` | `0` | no | -| [number\_of\_computed\_egress\_with\_prefix\_list\_ids](#input\_number\_of\_computed\_egress\_with\_prefix\_list\_ids) | Number of computed egress rules to create where 'prefix\_list\_ids' is used | `number` | `0` | no | +| [number\_of\_computed\_egress\_with\_cidr\_ipv4](#input\_number\_of\_computed\_egress\_with\_cidr\_ipv4) | Number of computed egress rules to create where 'cidr\_ipv4' is used | `number` | `0` | no | +| [number\_of\_computed\_egress\_with\_cidr\_ipv6](#input\_number\_of\_computed\_egress\_with\_cidr\_ipv6) | Number of computed egress rules to create where 'ipv6\_cidr\_blocks' is used | `number` | `0` | no | +| [number\_of\_computed\_egress\_with\_prefix\_list\_id](#input\_number\_of\_computed\_egress\_with\_prefix\_list\_id) | Number of computed egress rules to create where 'prefix\_list\_id' is used | `number` | `0` | no | +| [number\_of\_computed\_egress\_with\_referenced\_security\_group\_id](#input\_number\_of\_computed\_egress\_with\_referenced\_security\_group\_id) | Number of computed egress rules to create where 'source\_security\_group\_id' is used | `number` | `0` | no | | [number\_of\_computed\_egress\_with\_self](#input\_number\_of\_computed\_egress\_with\_self) | Number of computed egress rules to create where 'self' is defined | `number` | `0` | no | -| [number\_of\_computed\_egress\_with\_source\_security\_group\_id](#input\_number\_of\_computed\_egress\_with\_source\_security\_group\_id) | Number of computed egress rules to create where 'source\_security\_group\_id' is used | `number` | `0` | no | | [number\_of\_computed\_ingress\_cidr\_blocks](#input\_number\_of\_computed\_ingress\_cidr\_blocks) | Number of IPv4 CIDR ranges to use on all computed ingress rules | `number` | `0` | no | | [number\_of\_computed\_ingress\_ipv6\_cidr\_blocks](#input\_number\_of\_computed\_ingress\_ipv6\_cidr\_blocks) | Number of IPv6 CIDR ranges to use on all computed ingress rules | `number` | `0` | no | | [number\_of\_computed\_ingress\_prefix\_list\_ids](#input\_number\_of\_computed\_ingress\_prefix\_list\_ids) | Number of prefix list IDs (for allowing access to VPC endpoints) to use on all computed ingress rules | `number` | `0` | no | | [number\_of\_computed\_ingress\_rules](#input\_number\_of\_computed\_ingress\_rules) | Number of computed ingress rules to create by name | `number` | `0` | no | -| [number\_of\_computed\_ingress\_with\_cidr\_blocks](#input\_number\_of\_computed\_ingress\_with\_cidr\_blocks) | Number of computed ingress rules to create where 'cidr\_blocks' is used | `number` | `0` | no | -| [number\_of\_computed\_ingress\_with\_ipv6\_cidr\_blocks](#input\_number\_of\_computed\_ingress\_with\_ipv6\_cidr\_blocks) | Number of computed ingress rules to create where 'ipv6\_cidr\_blocks' is used | `number` | `0` | no | -| [number\_of\_computed\_ingress\_with\_prefix\_list\_ids](#input\_number\_of\_computed\_ingress\_with\_prefix\_list\_ids) | Number of computed ingress rules to create where 'prefix\_list\_ids' is used | `number` | `0` | no | +| [number\_of\_computed\_ingress\_with\_cidr\_ipv4](#input\_number\_of\_computed\_ingress\_with\_cidr\_ipv4) | Number of computed ingress rules to create where 'cidr\_ipv4' is used | `number` | `0` | no | +| [number\_of\_computed\_ingress\_with\_cidr\_ipv6](#input\_number\_of\_computed\_ingress\_with\_cidr\_ipv6) | Number of computed ingress rules to create where 'ipv6\_cidr\_blocks' is used | `number` | `0` | no | +| [number\_of\_computed\_ingress\_with\_prefix\_list\_id](#input\_number\_of\_computed\_ingress\_with\_prefix\_list\_id) | Number of computed ingress rules to create where 'prefix\_list\_id' is used | `number` | `0` | no | +| [number\_of\_computed\_ingress\_with\_referenced\_security\_group\_id](#input\_number\_of\_computed\_ingress\_with\_referenced\_security\_group\_id) | Number of computed ingress rules to create where 'source\_security\_group\_id' is used | `number` | `0` | no | | [number\_of\_computed\_ingress\_with\_self](#input\_number\_of\_computed\_ingress\_with\_self) | Number of computed ingress rules to create where 'self' is defined | `number` | `0` | no | -| [number\_of\_computed\_ingress\_with\_source\_security\_group\_id](#input\_number\_of\_computed\_ingress\_with\_source\_security\_group\_id) | Number of computed ingress rules to create where 'source\_security\_group\_id' is used | `number` | `0` | no | | [revoke\_rules\_on\_delete](#input\_revoke\_rules\_on\_delete) | Instruct Terraform to revoke all of the Security Groups attached ingress and egress rules before deleting the rule itself. Enable for EMR. | `bool` | `false` | no | | [tags](#input\_tags) | A mapping of tags to assign to security group | `map(string)` | `{}` | no | | [use\_name\_prefix](#input\_use\_name\_prefix) | Whether to use name\_prefix or fixed name. Should be true to able to update security group name after initial creation | `bool` | `true` | no | diff --git a/modules/ntp/main.tf b/modules/ntp/main.tf index 80ea0adb..d2a1bf93 100644 --- a/modules/ntp/main.tf +++ b/modules/ntp/main.tf @@ -19,20 +19,20 @@ module "sg" { ingress_with_self = concat(var.auto_ingress_with_self, var.ingress_with_self) # Open to IPv4 cidr blocks - ingress_with_cidr_blocks = var.ingress_with_cidr_blocks + ingress_with_cidr_ipv4 = var.ingress_with_cidr_ipv4 # Open to IPv6 cidr blocks - ingress_with_ipv6_cidr_blocks = var.ingress_with_ipv6_cidr_blocks + ingress_with_cidr_ipv6 = var.ingress_with_cidr_ipv6 # Open for security group id - ingress_with_source_security_group_id = var.ingress_with_source_security_group_id + ingress_with_referenced_security_group_id = var.ingress_with_referenced_security_group_id # Open for prefix list id - ingress_with_prefix_list_ids = var.ingress_with_prefix_list_ids + ingress_with_prefix_list_id = var.ingress_with_prefix_list_id # Default ingress CIDR blocks - ingress_cidr_blocks = var.ingress_cidr_blocks - ingress_ipv6_cidr_blocks = var.ingress_ipv6_cidr_blocks + ingress_cidr_ipv4 = var.ingress_cidr_ipv4 + ingress_cidr_ipv6 = var.ingress_cidr_ipv6 # Default prefix list ids ingress_prefix_list_ids = var.ingress_prefix_list_ids @@ -47,26 +47,26 @@ module "sg" { computed_ingress_with_self = concat(var.auto_computed_ingress_with_self, var.computed_ingress_with_self) # Open to IPv4 cidr blocks - computed_ingress_with_cidr_blocks = var.computed_ingress_with_cidr_blocks + computed_ingress_with_cidr_ipv4 = var.computed_ingress_with_cidr_ipv4 # Open to IPv6 cidr blocks - computed_ingress_with_ipv6_cidr_blocks = var.computed_ingress_with_ipv6_cidr_blocks + computed_ingress_with_cidr_ipv6 = var.computed_ingress_with_cidr_ipv6 # Open for security group id - computed_ingress_with_source_security_group_id = var.computed_ingress_with_source_security_group_id + computed_ingress_with_referenced_security_group_id = var.computed_ingress_with_referenced_security_group_id # Open for prefix list id - computed_ingress_with_prefix_list_ids = var.computed_ingress_with_prefix_list_ids + computed_ingress_with_prefix_list_id = var.computed_ingress_with_prefix_list_id ############################# # Number of computed ingress ############################# - number_of_computed_ingress_rules = var.auto_number_of_computed_ingress_rules + var.number_of_computed_ingress_rules - number_of_computed_ingress_with_self = var.auto_number_of_computed_ingress_with_self + var.number_of_computed_ingress_with_self - number_of_computed_ingress_with_cidr_blocks = var.number_of_computed_ingress_with_cidr_blocks - number_of_computed_ingress_with_ipv6_cidr_blocks = var.number_of_computed_ingress_with_ipv6_cidr_blocks - number_of_computed_ingress_with_source_security_group_id = var.number_of_computed_ingress_with_source_security_group_id - number_of_computed_ingress_with_prefix_list_ids = var.number_of_computed_ingress_with_prefix_list_ids + number_of_computed_ingress_rules = var.auto_number_of_computed_ingress_rules + var.number_of_computed_ingress_rules + number_of_computed_ingress_with_self = var.auto_number_of_computed_ingress_with_self + var.number_of_computed_ingress_with_self + number_of_computed_ingress_with_cidr_ipv4 = var.number_of_computed_ingress_with_cidr_ipv4 + number_of_computed_ingress_with_cidr_ipv6 = var.number_of_computed_ingress_with_cidr_ipv6 + number_of_computed_ingress_with_referenced_security_group_id = var.number_of_computed_ingress_with_referenced_security_group_id + number_of_computed_ingress_with_prefix_list_id = var.number_of_computed_ingress_with_prefix_list_id ######### # Egress @@ -78,20 +78,20 @@ module "sg" { egress_with_self = concat(var.auto_egress_with_self, var.egress_with_self) # Open to IPv4 cidr blocks - egress_with_cidr_blocks = var.egress_with_cidr_blocks + egress_with_cidr_ipv4 = var.egress_with_cidr_ipv4 # Open to IPv6 cidr blocks - egress_with_ipv6_cidr_blocks = var.egress_with_ipv6_cidr_blocks + egress_with_cidr_ipv6 = var.egress_with_cidr_ipv6 # Open for security group id - egress_with_source_security_group_id = var.egress_with_source_security_group_id + egress_with_referenced_security_group_id = var.egress_with_referenced_security_group_id # Open for prefix list id - egress_with_prefix_list_ids = var.egress_with_prefix_list_ids + egress_with_prefix_list_id = var.egress_with_prefix_list_id # Default egress CIDR blocks - egress_cidr_blocks = var.egress_cidr_blocks - egress_ipv6_cidr_blocks = var.egress_ipv6_cidr_blocks + egress_cidr_ipv4 = var.egress_cidr_ipv4 + egress_cidr_ipv6 = var.egress_cidr_ipv6 # Default prefix list ids egress_prefix_list_ids = var.egress_prefix_list_ids @@ -106,24 +106,24 @@ module "sg" { computed_egress_with_self = concat(var.auto_computed_egress_with_self, var.computed_egress_with_self) # Open to IPv4 cidr blocks - computed_egress_with_cidr_blocks = var.computed_egress_with_cidr_blocks + computed_egress_with_cidr_ipv4 = var.computed_egress_with_cidr_ipv4 # Open to IPv6 cidr blocks - computed_egress_with_ipv6_cidr_blocks = var.computed_egress_with_ipv6_cidr_blocks + computed_egress_with_cidr_ipv6 = var.computed_egress_with_cidr_ipv6 # Open for security group id - computed_egress_with_source_security_group_id = var.computed_egress_with_source_security_group_id + computed_egress_with_referenced_security_group_id = var.computed_egress_with_referenced_security_group_id # Open for prefix list id - computed_egress_with_prefix_list_ids = var.computed_egress_with_prefix_list_ids + computed_egress_with_prefix_list_id = var.computed_egress_with_prefix_list_id ############################# # Number of computed egress ############################# - number_of_computed_egress_rules = var.auto_number_of_computed_egress_rules + var.number_of_computed_egress_rules - number_of_computed_egress_with_self = var.auto_number_of_computed_egress_with_self + var.number_of_computed_egress_with_self - number_of_computed_egress_with_cidr_blocks = var.number_of_computed_egress_with_cidr_blocks - number_of_computed_egress_with_ipv6_cidr_blocks = var.number_of_computed_egress_with_ipv6_cidr_blocks - number_of_computed_egress_with_source_security_group_id = var.number_of_computed_egress_with_source_security_group_id - number_of_computed_egress_with_prefix_list_ids = var.number_of_computed_egress_with_prefix_list_ids + number_of_computed_egress_rules = var.auto_number_of_computed_egress_rules + var.number_of_computed_egress_rules + number_of_computed_egress_with_self = var.auto_number_of_computed_egress_with_self + var.number_of_computed_egress_with_self + number_of_computed_egress_with_cidr_ipv4 = var.number_of_computed_egress_with_cidr_ipv4 + number_of_computed_egress_with_cidr_ipv6 = var.number_of_computed_egress_with_cidr_ipv6 + number_of_computed_egress_with_referenced_security_group_id = var.number_of_computed_egress_with_referenced_security_group_id + number_of_computed_egress_with_prefix_list_id = var.number_of_computed_egress_with_prefix_list_id } diff --git a/modules/ntp/variables.tf b/modules/ntp/variables.tf index 60c8c27b..6590c9e3 100644 --- a/modules/ntp/variables.tf +++ b/modules/ntp/variables.tf @@ -56,37 +56,37 @@ variable "ingress_with_self" { default = [] } -variable "ingress_with_cidr_blocks" { - description = "List of ingress rules to create where 'cidr_blocks' is used" +variable "ingress_with_cidr_ipv4" { + description = "List of ingress rules to create where 'cidr_ipv4' is used" type = list(map(string)) default = [] } -variable "ingress_with_ipv6_cidr_blocks" { +variable "ingress_with_cidr_ipv6" { description = "List of ingress rules to create where 'ipv6_cidr_blocks' is used" type = list(map(string)) default = [] } -variable "ingress_with_source_security_group_id" { +variable "ingress_with_referenced_security_group_id" { description = "List of ingress rules to create where 'source_security_group_id' is used" type = list(map(string)) default = [] } -variable "ingress_with_prefix_list_ids" { - description = "List of ingress rules to create where 'prefix_list_ids' is used" +variable "ingress_with_prefix_list_id" { + description = "List of ingress rules to create where 'prefix_list_id' is used" type = list(map(string)) default = [] } -variable "ingress_cidr_blocks" { +variable "ingress_cidr_ipv4" { description = "List of IPv4 CIDR ranges to use on all ingress rules" type = list(string) default = [] } -variable "ingress_ipv6_cidr_blocks" { +variable "ingress_cidr_ipv6" { description = "List of IPv6 CIDR ranges to use on all ingress rules" type = list(string) default = [] @@ -113,26 +113,26 @@ variable "computed_ingress_with_self" { default = [] } -variable "computed_ingress_with_cidr_blocks" { - description = "List of computed ingress rules to create where 'cidr_blocks' is used" +variable "computed_ingress_with_cidr_ipv4" { + description = "List of computed ingress rules to create where 'cidr_ipv4' is used" type = list(map(string)) default = [] } -variable "computed_ingress_with_ipv6_cidr_blocks" { +variable "computed_ingress_with_cidr_ipv6" { description = "List of computed ingress rules to create where 'ipv6_cidr_blocks' is used" type = list(map(string)) default = [] } -variable "computed_ingress_with_source_security_group_id" { +variable "computed_ingress_with_referenced_security_group_id" { description = "List of computed ingress rules to create where 'source_security_group_id' is used" type = list(map(string)) default = [] } -variable "computed_ingress_with_prefix_list_ids" { - description = "List of computed ingress rules to create where 'prefix_list_ids' is used" +variable "computed_ingress_with_prefix_list_id" { + description = "List of computed ingress rules to create where 'prefix_list_id' is used" type = list(map(string)) default = [] } @@ -170,26 +170,26 @@ variable "number_of_computed_ingress_with_self" { default = 0 } -variable "number_of_computed_ingress_with_cidr_blocks" { - description = "Number of computed ingress rules to create where 'cidr_blocks' is used" +variable "number_of_computed_ingress_with_cidr_ipv4" { + description = "Number of computed ingress rules to create where 'cidr_ipv4' is used" type = number default = 0 } -variable "number_of_computed_ingress_with_ipv6_cidr_blocks" { +variable "number_of_computed_ingress_with_cidr_ipv6" { description = "Number of computed ingress rules to create where 'ipv6_cidr_blocks' is used" type = number default = 0 } -variable "number_of_computed_ingress_with_source_security_group_id" { +variable "number_of_computed_ingress_with_referenced_security_group_id" { description = "Number of computed ingress rules to create where 'source_security_group_id' is used" type = number default = 0 } -variable "number_of_computed_ingress_with_prefix_list_ids" { - description = "Number of computed ingress rules to create where 'prefix_list_ids' is used" +variable "number_of_computed_ingress_with_prefix_list_id" { + description = "Number of computed ingress rules to create where 'prefix_list_id' is used" type = number default = 0 } @@ -227,37 +227,37 @@ variable "egress_with_self" { default = [] } -variable "egress_with_cidr_blocks" { - description = "List of egress rules to create where 'cidr_blocks' is used" +variable "egress_with_cidr_ipv4" { + description = "List of egress rules to create where 'cidr_ipv4' is used" type = list(map(string)) default = [] } -variable "egress_with_ipv6_cidr_blocks" { +variable "egress_with_cidr_ipv6" { description = "List of egress rules to create where 'ipv6_cidr_blocks' is used" type = list(map(string)) default = [] } -variable "egress_with_source_security_group_id" { +variable "egress_with_referenced_security_group_id" { description = "List of egress rules to create where 'source_security_group_id' is used" type = list(map(string)) default = [] } -variable "egress_with_prefix_list_ids" { - description = "List of egress rules to create where 'prefix_list_ids' is used" +variable "egress_with_prefix_list_id" { + description = "List of egress rules to create where 'prefix_list_id' is used" type = list(map(string)) default = [] } -variable "egress_cidr_blocks" { +variable "egress_cidr_ipv4" { description = "List of IPv4 CIDR ranges to use on all egress rules" type = list(string) default = ["0.0.0.0/0"] } -variable "egress_ipv6_cidr_blocks" { +variable "egress_cidr_ipv6" { description = "List of IPv6 CIDR ranges to use on all egress rules" type = list(string) default = ["::/0"] @@ -284,26 +284,26 @@ variable "computed_egress_with_self" { default = [] } -variable "computed_egress_with_cidr_blocks" { - description = "List of computed egress rules to create where 'cidr_blocks' is used" +variable "computed_egress_with_cidr_ipv4" { + description = "List of computed egress rules to create where 'cidr_ipv4' is used" type = list(map(string)) default = [] } -variable "computed_egress_with_ipv6_cidr_blocks" { +variable "computed_egress_with_cidr_ipv6" { description = "List of computed egress rules to create where 'ipv6_cidr_blocks' is used" type = list(map(string)) default = [] } -variable "computed_egress_with_source_security_group_id" { +variable "computed_egress_with_referenced_security_group_id" { description = "List of computed egress rules to create where 'source_security_group_id' is used" type = list(map(string)) default = [] } -variable "computed_egress_with_prefix_list_ids" { - description = "List of computed egress rules to create where 'prefix_list_ids' is used" +variable "computed_egress_with_prefix_list_id" { + description = "List of computed egress rules to create where 'prefix_list_id' is used" type = list(map(string)) default = [] } @@ -341,26 +341,26 @@ variable "number_of_computed_egress_with_self" { default = 0 } -variable "number_of_computed_egress_with_cidr_blocks" { - description = "Number of computed egress rules to create where 'cidr_blocks' is used" +variable "number_of_computed_egress_with_cidr_ipv4" { + description = "Number of computed egress rules to create where 'cidr_ipv4' is used" type = number default = 0 } -variable "number_of_computed_egress_with_ipv6_cidr_blocks" { +variable "number_of_computed_egress_with_cidr_ipv6" { description = "Number of computed egress rules to create where 'ipv6_cidr_blocks' is used" type = number default = 0 } -variable "number_of_computed_egress_with_source_security_group_id" { +variable "number_of_computed_egress_with_referenced_security_group_id" { description = "Number of computed egress rules to create where 'source_security_group_id' is used" type = number default = 0 } -variable "number_of_computed_egress_with_prefix_list_ids" { - description = "Number of computed egress rules to create where 'prefix_list_ids' is used" +variable "number_of_computed_egress_with_prefix_list_id" { + description = "Number of computed egress rules to create where 'prefix_list_id' is used" type = number default = 0 } diff --git a/modules/openvpn/README.md b/modules/openvpn/README.md index ee2b41d8..c7041069 100644 --- a/modules/openvpn/README.md +++ b/modules/openvpn/README.md @@ -55,59 +55,59 @@ No resources. | [computed\_egress\_ipv6\_cidr\_blocks](#input\_computed\_egress\_ipv6\_cidr\_blocks) | List of IPv6 CIDR ranges to use on all computed egress rules | `list(string)` |
[
"::/0"
]
| no | | [computed\_egress\_prefix\_list\_ids](#input\_computed\_egress\_prefix\_list\_ids) | List of prefix list IDs (for allowing access to VPC endpoints) to use on all computed egress rules | `list(string)` | `[]` | no | | [computed\_egress\_rules](#input\_computed\_egress\_rules) | List of computed egress rules to create by name | `list(string)` | `[]` | no | -| [computed\_egress\_with\_cidr\_blocks](#input\_computed\_egress\_with\_cidr\_blocks) | List of computed egress rules to create where 'cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [computed\_egress\_with\_ipv6\_cidr\_blocks](#input\_computed\_egress\_with\_ipv6\_cidr\_blocks) | List of computed egress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [computed\_egress\_with\_prefix\_list\_ids](#input\_computed\_egress\_with\_prefix\_list\_ids) | List of computed egress rules to create where 'prefix\_list\_ids' is used | `list(map(string))` | `[]` | no | +| [computed\_egress\_with\_cidr\_ipv4](#input\_computed\_egress\_with\_cidr\_ipv4) | List of computed egress rules to create where 'cidr\_ipv4' is used | `list(map(string))` | `[]` | no | +| [computed\_egress\_with\_cidr\_ipv6](#input\_computed\_egress\_with\_cidr\_ipv6) | List of computed egress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | +| [computed\_egress\_with\_prefix\_list\_id](#input\_computed\_egress\_with\_prefix\_list\_id) | List of computed egress rules to create where 'prefix\_list\_id' is used | `list(map(string))` | `[]` | no | +| [computed\_egress\_with\_referenced\_security\_group\_id](#input\_computed\_egress\_with\_referenced\_security\_group\_id) | List of computed egress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [computed\_egress\_with\_self](#input\_computed\_egress\_with\_self) | List of computed egress rules to create where 'self' is defined | `list(map(string))` | `[]` | no | -| [computed\_egress\_with\_source\_security\_group\_id](#input\_computed\_egress\_with\_source\_security\_group\_id) | List of computed egress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [computed\_ingress\_cidr\_blocks](#input\_computed\_ingress\_cidr\_blocks) | List of IPv4 CIDR ranges to use on all computed ingress rules | `list(string)` | `[]` | no | | [computed\_ingress\_ipv6\_cidr\_blocks](#input\_computed\_ingress\_ipv6\_cidr\_blocks) | List of IPv6 CIDR ranges to use on all computed ingress rules | `list(string)` | `[]` | no | | [computed\_ingress\_prefix\_list\_ids](#input\_computed\_ingress\_prefix\_list\_ids) | List of prefix list IDs (for allowing access to VPC endpoints) to use on all computed ingress rules | `list(string)` | `[]` | no | | [computed\_ingress\_rules](#input\_computed\_ingress\_rules) | List of computed ingress rules to create by name | `list(string)` | `[]` | no | -| [computed\_ingress\_with\_cidr\_blocks](#input\_computed\_ingress\_with\_cidr\_blocks) | List of computed ingress rules to create where 'cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [computed\_ingress\_with\_ipv6\_cidr\_blocks](#input\_computed\_ingress\_with\_ipv6\_cidr\_blocks) | List of computed ingress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [computed\_ingress\_with\_prefix\_list\_ids](#input\_computed\_ingress\_with\_prefix\_list\_ids) | List of computed ingress rules to create where 'prefix\_list\_ids' is used | `list(map(string))` | `[]` | no | +| [computed\_ingress\_with\_cidr\_ipv4](#input\_computed\_ingress\_with\_cidr\_ipv4) | List of computed ingress rules to create where 'cidr\_ipv4' is used | `list(map(string))` | `[]` | no | +| [computed\_ingress\_with\_cidr\_ipv6](#input\_computed\_ingress\_with\_cidr\_ipv6) | List of computed ingress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | +| [computed\_ingress\_with\_prefix\_list\_id](#input\_computed\_ingress\_with\_prefix\_list\_id) | List of computed ingress rules to create where 'prefix\_list\_id' is used | `list(map(string))` | `[]` | no | +| [computed\_ingress\_with\_referenced\_security\_group\_id](#input\_computed\_ingress\_with\_referenced\_security\_group\_id) | List of computed ingress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [computed\_ingress\_with\_self](#input\_computed\_ingress\_with\_self) | List of computed ingress rules to create where 'self' is defined | `list(map(string))` | `[]` | no | -| [computed\_ingress\_with\_source\_security\_group\_id](#input\_computed\_ingress\_with\_source\_security\_group\_id) | List of computed ingress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [create](#input\_create) | Whether to create security group and all rules | `bool` | `true` | no | | [description](#input\_description) | Description of security group | `string` | `"Security Group managed by Terraform"` | no | -| [egress\_cidr\_blocks](#input\_egress\_cidr\_blocks) | List of IPv4 CIDR ranges to use on all egress rules | `list(string)` |
[
"0.0.0.0/0"
]
| no | -| [egress\_ipv6\_cidr\_blocks](#input\_egress\_ipv6\_cidr\_blocks) | List of IPv6 CIDR ranges to use on all egress rules | `list(string)` |
[
"::/0"
]
| no | +| [egress\_cidr\_ipv4](#input\_egress\_cidr\_ipv4) | List of IPv4 CIDR ranges to use on all egress rules | `list(string)` |
[
"0.0.0.0/0"
]
| no | +| [egress\_cidr\_ipv6](#input\_egress\_cidr\_ipv6) | List of IPv6 CIDR ranges to use on all egress rules | `list(string)` |
[
"::/0"
]
| no | | [egress\_prefix\_list\_ids](#input\_egress\_prefix\_list\_ids) | List of prefix list IDs (for allowing access to VPC endpoints) to use on all egress rules | `list(string)` | `[]` | no | | [egress\_rules](#input\_egress\_rules) | List of egress rules to create by name | `list(string)` | `[]` | no | -| [egress\_with\_cidr\_blocks](#input\_egress\_with\_cidr\_blocks) | List of egress rules to create where 'cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [egress\_with\_ipv6\_cidr\_blocks](#input\_egress\_with\_ipv6\_cidr\_blocks) | List of egress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [egress\_with\_prefix\_list\_ids](#input\_egress\_with\_prefix\_list\_ids) | List of egress rules to create where 'prefix\_list\_ids' is used | `list(map(string))` | `[]` | no | +| [egress\_with\_cidr\_ipv4](#input\_egress\_with\_cidr\_ipv4) | List of egress rules to create where 'cidr\_ipv4' is used | `list(map(string))` | `[]` | no | +| [egress\_with\_cidr\_ipv6](#input\_egress\_with\_cidr\_ipv6) | List of egress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | +| [egress\_with\_prefix\_list\_id](#input\_egress\_with\_prefix\_list\_id) | List of egress rules to create where 'prefix\_list\_id' is used | `list(map(string))` | `[]` | no | +| [egress\_with\_referenced\_security\_group\_id](#input\_egress\_with\_referenced\_security\_group\_id) | List of egress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [egress\_with\_self](#input\_egress\_with\_self) | List of egress rules to create where 'self' is defined | `list(map(string))` | `[]` | no | -| [egress\_with\_source\_security\_group\_id](#input\_egress\_with\_source\_security\_group\_id) | List of egress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | -| [ingress\_cidr\_blocks](#input\_ingress\_cidr\_blocks) | List of IPv4 CIDR ranges to use on all ingress rules | `list(string)` | `[]` | no | -| [ingress\_ipv6\_cidr\_blocks](#input\_ingress\_ipv6\_cidr\_blocks) | List of IPv6 CIDR ranges to use on all ingress rules | `list(string)` | `[]` | no | +| [ingress\_cidr\_ipv4](#input\_ingress\_cidr\_ipv4) | List of IPv4 CIDR ranges to use on all ingress rules | `list(string)` | `[]` | no | +| [ingress\_cidr\_ipv6](#input\_ingress\_cidr\_ipv6) | List of IPv6 CIDR ranges to use on all ingress rules | `list(string)` | `[]` | no | | [ingress\_prefix\_list\_ids](#input\_ingress\_prefix\_list\_ids) | List of prefix list IDs (for allowing access to VPC endpoints) to use on all ingress rules | `list(string)` | `[]` | no | | [ingress\_rules](#input\_ingress\_rules) | List of ingress rules to create by name | `list(string)` | `[]` | no | -| [ingress\_with\_cidr\_blocks](#input\_ingress\_with\_cidr\_blocks) | List of ingress rules to create where 'cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [ingress\_with\_ipv6\_cidr\_blocks](#input\_ingress\_with\_ipv6\_cidr\_blocks) | List of ingress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [ingress\_with\_prefix\_list\_ids](#input\_ingress\_with\_prefix\_list\_ids) | List of ingress rules to create where 'prefix\_list\_ids' is used | `list(map(string))` | `[]` | no | +| [ingress\_with\_cidr\_ipv4](#input\_ingress\_with\_cidr\_ipv4) | List of ingress rules to create where 'cidr\_ipv4' is used | `list(map(string))` | `[]` | no | +| [ingress\_with\_cidr\_ipv6](#input\_ingress\_with\_cidr\_ipv6) | List of ingress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | +| [ingress\_with\_prefix\_list\_id](#input\_ingress\_with\_prefix\_list\_id) | List of ingress rules to create where 'prefix\_list\_id' is used | `list(map(string))` | `[]` | no | +| [ingress\_with\_referenced\_security\_group\_id](#input\_ingress\_with\_referenced\_security\_group\_id) | List of ingress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [ingress\_with\_self](#input\_ingress\_with\_self) | List of ingress rules to create where 'self' is defined | `list(map(string))` | `[]` | no | -| [ingress\_with\_source\_security\_group\_id](#input\_ingress\_with\_source\_security\_group\_id) | List of ingress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [name](#input\_name) | Name of security group | `string` | n/a | yes | | [number\_of\_computed\_egress\_cidr\_blocks](#input\_number\_of\_computed\_egress\_cidr\_blocks) | Number of IPv4 CIDR ranges to use on all computed egress rules | `number` | `0` | no | | [number\_of\_computed\_egress\_ipv6\_cidr\_blocks](#input\_number\_of\_computed\_egress\_ipv6\_cidr\_blocks) | Number of IPv6 CIDR ranges to use on all computed egress rules | `number` | `0` | no | | [number\_of\_computed\_egress\_prefix\_list\_ids](#input\_number\_of\_computed\_egress\_prefix\_list\_ids) | Number of prefix list IDs (for allowing access to VPC endpoints) to use on all computed egress rules | `number` | `0` | no | | [number\_of\_computed\_egress\_rules](#input\_number\_of\_computed\_egress\_rules) | Number of computed egress rules to create by name | `number` | `0` | no | -| [number\_of\_computed\_egress\_with\_cidr\_blocks](#input\_number\_of\_computed\_egress\_with\_cidr\_blocks) | Number of computed egress rules to create where 'cidr\_blocks' is used | `number` | `0` | no | -| [number\_of\_computed\_egress\_with\_ipv6\_cidr\_blocks](#input\_number\_of\_computed\_egress\_with\_ipv6\_cidr\_blocks) | Number of computed egress rules to create where 'ipv6\_cidr\_blocks' is used | `number` | `0` | no | -| [number\_of\_computed\_egress\_with\_prefix\_list\_ids](#input\_number\_of\_computed\_egress\_with\_prefix\_list\_ids) | Number of computed egress rules to create where 'prefix\_list\_ids' is used | `number` | `0` | no | +| [number\_of\_computed\_egress\_with\_cidr\_ipv4](#input\_number\_of\_computed\_egress\_with\_cidr\_ipv4) | Number of computed egress rules to create where 'cidr\_ipv4' is used | `number` | `0` | no | +| [number\_of\_computed\_egress\_with\_cidr\_ipv6](#input\_number\_of\_computed\_egress\_with\_cidr\_ipv6) | Number of computed egress rules to create where 'ipv6\_cidr\_blocks' is used | `number` | `0` | no | +| [number\_of\_computed\_egress\_with\_prefix\_list\_id](#input\_number\_of\_computed\_egress\_with\_prefix\_list\_id) | Number of computed egress rules to create where 'prefix\_list\_id' is used | `number` | `0` | no | +| [number\_of\_computed\_egress\_with\_referenced\_security\_group\_id](#input\_number\_of\_computed\_egress\_with\_referenced\_security\_group\_id) | Number of computed egress rules to create where 'source\_security\_group\_id' is used | `number` | `0` | no | | [number\_of\_computed\_egress\_with\_self](#input\_number\_of\_computed\_egress\_with\_self) | Number of computed egress rules to create where 'self' is defined | `number` | `0` | no | -| [number\_of\_computed\_egress\_with\_source\_security\_group\_id](#input\_number\_of\_computed\_egress\_with\_source\_security\_group\_id) | Number of computed egress rules to create where 'source\_security\_group\_id' is used | `number` | `0` | no | | [number\_of\_computed\_ingress\_cidr\_blocks](#input\_number\_of\_computed\_ingress\_cidr\_blocks) | Number of IPv4 CIDR ranges to use on all computed ingress rules | `number` | `0` | no | | [number\_of\_computed\_ingress\_ipv6\_cidr\_blocks](#input\_number\_of\_computed\_ingress\_ipv6\_cidr\_blocks) | Number of IPv6 CIDR ranges to use on all computed ingress rules | `number` | `0` | no | | [number\_of\_computed\_ingress\_prefix\_list\_ids](#input\_number\_of\_computed\_ingress\_prefix\_list\_ids) | Number of prefix list IDs (for allowing access to VPC endpoints) to use on all computed ingress rules | `number` | `0` | no | | [number\_of\_computed\_ingress\_rules](#input\_number\_of\_computed\_ingress\_rules) | Number of computed ingress rules to create by name | `number` | `0` | no | -| [number\_of\_computed\_ingress\_with\_cidr\_blocks](#input\_number\_of\_computed\_ingress\_with\_cidr\_blocks) | Number of computed ingress rules to create where 'cidr\_blocks' is used | `number` | `0` | no | -| [number\_of\_computed\_ingress\_with\_ipv6\_cidr\_blocks](#input\_number\_of\_computed\_ingress\_with\_ipv6\_cidr\_blocks) | Number of computed ingress rules to create where 'ipv6\_cidr\_blocks' is used | `number` | `0` | no | -| [number\_of\_computed\_ingress\_with\_prefix\_list\_ids](#input\_number\_of\_computed\_ingress\_with\_prefix\_list\_ids) | Number of computed ingress rules to create where 'prefix\_list\_ids' is used | `number` | `0` | no | +| [number\_of\_computed\_ingress\_with\_cidr\_ipv4](#input\_number\_of\_computed\_ingress\_with\_cidr\_ipv4) | Number of computed ingress rules to create where 'cidr\_ipv4' is used | `number` | `0` | no | +| [number\_of\_computed\_ingress\_with\_cidr\_ipv6](#input\_number\_of\_computed\_ingress\_with\_cidr\_ipv6) | Number of computed ingress rules to create where 'ipv6\_cidr\_blocks' is used | `number` | `0` | no | +| [number\_of\_computed\_ingress\_with\_prefix\_list\_id](#input\_number\_of\_computed\_ingress\_with\_prefix\_list\_id) | Number of computed ingress rules to create where 'prefix\_list\_id' is used | `number` | `0` | no | +| [number\_of\_computed\_ingress\_with\_referenced\_security\_group\_id](#input\_number\_of\_computed\_ingress\_with\_referenced\_security\_group\_id) | Number of computed ingress rules to create where 'source\_security\_group\_id' is used | `number` | `0` | no | | [number\_of\_computed\_ingress\_with\_self](#input\_number\_of\_computed\_ingress\_with\_self) | Number of computed ingress rules to create where 'self' is defined | `number` | `0` | no | -| [number\_of\_computed\_ingress\_with\_source\_security\_group\_id](#input\_number\_of\_computed\_ingress\_with\_source\_security\_group\_id) | Number of computed ingress rules to create where 'source\_security\_group\_id' is used | `number` | `0` | no | | [revoke\_rules\_on\_delete](#input\_revoke\_rules\_on\_delete) | Instruct Terraform to revoke all of the Security Groups attached ingress and egress rules before deleting the rule itself. Enable for EMR. | `bool` | `false` | no | | [tags](#input\_tags) | A mapping of tags to assign to security group | `map(string)` | `{}` | no | | [use\_name\_prefix](#input\_use\_name\_prefix) | Whether to use name\_prefix or fixed name. Should be true to able to update security group name after initial creation | `bool` | `true` | no | diff --git a/modules/openvpn/main.tf b/modules/openvpn/main.tf index 80ea0adb..d2a1bf93 100644 --- a/modules/openvpn/main.tf +++ b/modules/openvpn/main.tf @@ -19,20 +19,20 @@ module "sg" { ingress_with_self = concat(var.auto_ingress_with_self, var.ingress_with_self) # Open to IPv4 cidr blocks - ingress_with_cidr_blocks = var.ingress_with_cidr_blocks + ingress_with_cidr_ipv4 = var.ingress_with_cidr_ipv4 # Open to IPv6 cidr blocks - ingress_with_ipv6_cidr_blocks = var.ingress_with_ipv6_cidr_blocks + ingress_with_cidr_ipv6 = var.ingress_with_cidr_ipv6 # Open for security group id - ingress_with_source_security_group_id = var.ingress_with_source_security_group_id + ingress_with_referenced_security_group_id = var.ingress_with_referenced_security_group_id # Open for prefix list id - ingress_with_prefix_list_ids = var.ingress_with_prefix_list_ids + ingress_with_prefix_list_id = var.ingress_with_prefix_list_id # Default ingress CIDR blocks - ingress_cidr_blocks = var.ingress_cidr_blocks - ingress_ipv6_cidr_blocks = var.ingress_ipv6_cidr_blocks + ingress_cidr_ipv4 = var.ingress_cidr_ipv4 + ingress_cidr_ipv6 = var.ingress_cidr_ipv6 # Default prefix list ids ingress_prefix_list_ids = var.ingress_prefix_list_ids @@ -47,26 +47,26 @@ module "sg" { computed_ingress_with_self = concat(var.auto_computed_ingress_with_self, var.computed_ingress_with_self) # Open to IPv4 cidr blocks - computed_ingress_with_cidr_blocks = var.computed_ingress_with_cidr_blocks + computed_ingress_with_cidr_ipv4 = var.computed_ingress_with_cidr_ipv4 # Open to IPv6 cidr blocks - computed_ingress_with_ipv6_cidr_blocks = var.computed_ingress_with_ipv6_cidr_blocks + computed_ingress_with_cidr_ipv6 = var.computed_ingress_with_cidr_ipv6 # Open for security group id - computed_ingress_with_source_security_group_id = var.computed_ingress_with_source_security_group_id + computed_ingress_with_referenced_security_group_id = var.computed_ingress_with_referenced_security_group_id # Open for prefix list id - computed_ingress_with_prefix_list_ids = var.computed_ingress_with_prefix_list_ids + computed_ingress_with_prefix_list_id = var.computed_ingress_with_prefix_list_id ############################# # Number of computed ingress ############################# - number_of_computed_ingress_rules = var.auto_number_of_computed_ingress_rules + var.number_of_computed_ingress_rules - number_of_computed_ingress_with_self = var.auto_number_of_computed_ingress_with_self + var.number_of_computed_ingress_with_self - number_of_computed_ingress_with_cidr_blocks = var.number_of_computed_ingress_with_cidr_blocks - number_of_computed_ingress_with_ipv6_cidr_blocks = var.number_of_computed_ingress_with_ipv6_cidr_blocks - number_of_computed_ingress_with_source_security_group_id = var.number_of_computed_ingress_with_source_security_group_id - number_of_computed_ingress_with_prefix_list_ids = var.number_of_computed_ingress_with_prefix_list_ids + number_of_computed_ingress_rules = var.auto_number_of_computed_ingress_rules + var.number_of_computed_ingress_rules + number_of_computed_ingress_with_self = var.auto_number_of_computed_ingress_with_self + var.number_of_computed_ingress_with_self + number_of_computed_ingress_with_cidr_ipv4 = var.number_of_computed_ingress_with_cidr_ipv4 + number_of_computed_ingress_with_cidr_ipv6 = var.number_of_computed_ingress_with_cidr_ipv6 + number_of_computed_ingress_with_referenced_security_group_id = var.number_of_computed_ingress_with_referenced_security_group_id + number_of_computed_ingress_with_prefix_list_id = var.number_of_computed_ingress_with_prefix_list_id ######### # Egress @@ -78,20 +78,20 @@ module "sg" { egress_with_self = concat(var.auto_egress_with_self, var.egress_with_self) # Open to IPv4 cidr blocks - egress_with_cidr_blocks = var.egress_with_cidr_blocks + egress_with_cidr_ipv4 = var.egress_with_cidr_ipv4 # Open to IPv6 cidr blocks - egress_with_ipv6_cidr_blocks = var.egress_with_ipv6_cidr_blocks + egress_with_cidr_ipv6 = var.egress_with_cidr_ipv6 # Open for security group id - egress_with_source_security_group_id = var.egress_with_source_security_group_id + egress_with_referenced_security_group_id = var.egress_with_referenced_security_group_id # Open for prefix list id - egress_with_prefix_list_ids = var.egress_with_prefix_list_ids + egress_with_prefix_list_id = var.egress_with_prefix_list_id # Default egress CIDR blocks - egress_cidr_blocks = var.egress_cidr_blocks - egress_ipv6_cidr_blocks = var.egress_ipv6_cidr_blocks + egress_cidr_ipv4 = var.egress_cidr_ipv4 + egress_cidr_ipv6 = var.egress_cidr_ipv6 # Default prefix list ids egress_prefix_list_ids = var.egress_prefix_list_ids @@ -106,24 +106,24 @@ module "sg" { computed_egress_with_self = concat(var.auto_computed_egress_with_self, var.computed_egress_with_self) # Open to IPv4 cidr blocks - computed_egress_with_cidr_blocks = var.computed_egress_with_cidr_blocks + computed_egress_with_cidr_ipv4 = var.computed_egress_with_cidr_ipv4 # Open to IPv6 cidr blocks - computed_egress_with_ipv6_cidr_blocks = var.computed_egress_with_ipv6_cidr_blocks + computed_egress_with_cidr_ipv6 = var.computed_egress_with_cidr_ipv6 # Open for security group id - computed_egress_with_source_security_group_id = var.computed_egress_with_source_security_group_id + computed_egress_with_referenced_security_group_id = var.computed_egress_with_referenced_security_group_id # Open for prefix list id - computed_egress_with_prefix_list_ids = var.computed_egress_with_prefix_list_ids + computed_egress_with_prefix_list_id = var.computed_egress_with_prefix_list_id ############################# # Number of computed egress ############################# - number_of_computed_egress_rules = var.auto_number_of_computed_egress_rules + var.number_of_computed_egress_rules - number_of_computed_egress_with_self = var.auto_number_of_computed_egress_with_self + var.number_of_computed_egress_with_self - number_of_computed_egress_with_cidr_blocks = var.number_of_computed_egress_with_cidr_blocks - number_of_computed_egress_with_ipv6_cidr_blocks = var.number_of_computed_egress_with_ipv6_cidr_blocks - number_of_computed_egress_with_source_security_group_id = var.number_of_computed_egress_with_source_security_group_id - number_of_computed_egress_with_prefix_list_ids = var.number_of_computed_egress_with_prefix_list_ids + number_of_computed_egress_rules = var.auto_number_of_computed_egress_rules + var.number_of_computed_egress_rules + number_of_computed_egress_with_self = var.auto_number_of_computed_egress_with_self + var.number_of_computed_egress_with_self + number_of_computed_egress_with_cidr_ipv4 = var.number_of_computed_egress_with_cidr_ipv4 + number_of_computed_egress_with_cidr_ipv6 = var.number_of_computed_egress_with_cidr_ipv6 + number_of_computed_egress_with_referenced_security_group_id = var.number_of_computed_egress_with_referenced_security_group_id + number_of_computed_egress_with_prefix_list_id = var.number_of_computed_egress_with_prefix_list_id } diff --git a/modules/openvpn/variables.tf b/modules/openvpn/variables.tf index 60c8c27b..6590c9e3 100644 --- a/modules/openvpn/variables.tf +++ b/modules/openvpn/variables.tf @@ -56,37 +56,37 @@ variable "ingress_with_self" { default = [] } -variable "ingress_with_cidr_blocks" { - description = "List of ingress rules to create where 'cidr_blocks' is used" +variable "ingress_with_cidr_ipv4" { + description = "List of ingress rules to create where 'cidr_ipv4' is used" type = list(map(string)) default = [] } -variable "ingress_with_ipv6_cidr_blocks" { +variable "ingress_with_cidr_ipv6" { description = "List of ingress rules to create where 'ipv6_cidr_blocks' is used" type = list(map(string)) default = [] } -variable "ingress_with_source_security_group_id" { +variable "ingress_with_referenced_security_group_id" { description = "List of ingress rules to create where 'source_security_group_id' is used" type = list(map(string)) default = [] } -variable "ingress_with_prefix_list_ids" { - description = "List of ingress rules to create where 'prefix_list_ids' is used" +variable "ingress_with_prefix_list_id" { + description = "List of ingress rules to create where 'prefix_list_id' is used" type = list(map(string)) default = [] } -variable "ingress_cidr_blocks" { +variable "ingress_cidr_ipv4" { description = "List of IPv4 CIDR ranges to use on all ingress rules" type = list(string) default = [] } -variable "ingress_ipv6_cidr_blocks" { +variable "ingress_cidr_ipv6" { description = "List of IPv6 CIDR ranges to use on all ingress rules" type = list(string) default = [] @@ -113,26 +113,26 @@ variable "computed_ingress_with_self" { default = [] } -variable "computed_ingress_with_cidr_blocks" { - description = "List of computed ingress rules to create where 'cidr_blocks' is used" +variable "computed_ingress_with_cidr_ipv4" { + description = "List of computed ingress rules to create where 'cidr_ipv4' is used" type = list(map(string)) default = [] } -variable "computed_ingress_with_ipv6_cidr_blocks" { +variable "computed_ingress_with_cidr_ipv6" { description = "List of computed ingress rules to create where 'ipv6_cidr_blocks' is used" type = list(map(string)) default = [] } -variable "computed_ingress_with_source_security_group_id" { +variable "computed_ingress_with_referenced_security_group_id" { description = "List of computed ingress rules to create where 'source_security_group_id' is used" type = list(map(string)) default = [] } -variable "computed_ingress_with_prefix_list_ids" { - description = "List of computed ingress rules to create where 'prefix_list_ids' is used" +variable "computed_ingress_with_prefix_list_id" { + description = "List of computed ingress rules to create where 'prefix_list_id' is used" type = list(map(string)) default = [] } @@ -170,26 +170,26 @@ variable "number_of_computed_ingress_with_self" { default = 0 } -variable "number_of_computed_ingress_with_cidr_blocks" { - description = "Number of computed ingress rules to create where 'cidr_blocks' is used" +variable "number_of_computed_ingress_with_cidr_ipv4" { + description = "Number of computed ingress rules to create where 'cidr_ipv4' is used" type = number default = 0 } -variable "number_of_computed_ingress_with_ipv6_cidr_blocks" { +variable "number_of_computed_ingress_with_cidr_ipv6" { description = "Number of computed ingress rules to create where 'ipv6_cidr_blocks' is used" type = number default = 0 } -variable "number_of_computed_ingress_with_source_security_group_id" { +variable "number_of_computed_ingress_with_referenced_security_group_id" { description = "Number of computed ingress rules to create where 'source_security_group_id' is used" type = number default = 0 } -variable "number_of_computed_ingress_with_prefix_list_ids" { - description = "Number of computed ingress rules to create where 'prefix_list_ids' is used" +variable "number_of_computed_ingress_with_prefix_list_id" { + description = "Number of computed ingress rules to create where 'prefix_list_id' is used" type = number default = 0 } @@ -227,37 +227,37 @@ variable "egress_with_self" { default = [] } -variable "egress_with_cidr_blocks" { - description = "List of egress rules to create where 'cidr_blocks' is used" +variable "egress_with_cidr_ipv4" { + description = "List of egress rules to create where 'cidr_ipv4' is used" type = list(map(string)) default = [] } -variable "egress_with_ipv6_cidr_blocks" { +variable "egress_with_cidr_ipv6" { description = "List of egress rules to create where 'ipv6_cidr_blocks' is used" type = list(map(string)) default = [] } -variable "egress_with_source_security_group_id" { +variable "egress_with_referenced_security_group_id" { description = "List of egress rules to create where 'source_security_group_id' is used" type = list(map(string)) default = [] } -variable "egress_with_prefix_list_ids" { - description = "List of egress rules to create where 'prefix_list_ids' is used" +variable "egress_with_prefix_list_id" { + description = "List of egress rules to create where 'prefix_list_id' is used" type = list(map(string)) default = [] } -variable "egress_cidr_blocks" { +variable "egress_cidr_ipv4" { description = "List of IPv4 CIDR ranges to use on all egress rules" type = list(string) default = ["0.0.0.0/0"] } -variable "egress_ipv6_cidr_blocks" { +variable "egress_cidr_ipv6" { description = "List of IPv6 CIDR ranges to use on all egress rules" type = list(string) default = ["::/0"] @@ -284,26 +284,26 @@ variable "computed_egress_with_self" { default = [] } -variable "computed_egress_with_cidr_blocks" { - description = "List of computed egress rules to create where 'cidr_blocks' is used" +variable "computed_egress_with_cidr_ipv4" { + description = "List of computed egress rules to create where 'cidr_ipv4' is used" type = list(map(string)) default = [] } -variable "computed_egress_with_ipv6_cidr_blocks" { +variable "computed_egress_with_cidr_ipv6" { description = "List of computed egress rules to create where 'ipv6_cidr_blocks' is used" type = list(map(string)) default = [] } -variable "computed_egress_with_source_security_group_id" { +variable "computed_egress_with_referenced_security_group_id" { description = "List of computed egress rules to create where 'source_security_group_id' is used" type = list(map(string)) default = [] } -variable "computed_egress_with_prefix_list_ids" { - description = "List of computed egress rules to create where 'prefix_list_ids' is used" +variable "computed_egress_with_prefix_list_id" { + description = "List of computed egress rules to create where 'prefix_list_id' is used" type = list(map(string)) default = [] } @@ -341,26 +341,26 @@ variable "number_of_computed_egress_with_self" { default = 0 } -variable "number_of_computed_egress_with_cidr_blocks" { - description = "Number of computed egress rules to create where 'cidr_blocks' is used" +variable "number_of_computed_egress_with_cidr_ipv4" { + description = "Number of computed egress rules to create where 'cidr_ipv4' is used" type = number default = 0 } -variable "number_of_computed_egress_with_ipv6_cidr_blocks" { +variable "number_of_computed_egress_with_cidr_ipv6" { description = "Number of computed egress rules to create where 'ipv6_cidr_blocks' is used" type = number default = 0 } -variable "number_of_computed_egress_with_source_security_group_id" { +variable "number_of_computed_egress_with_referenced_security_group_id" { description = "Number of computed egress rules to create where 'source_security_group_id' is used" type = number default = 0 } -variable "number_of_computed_egress_with_prefix_list_ids" { - description = "Number of computed egress rules to create where 'prefix_list_ids' is used" +variable "number_of_computed_egress_with_prefix_list_id" { + description = "Number of computed egress rules to create where 'prefix_list_id' is used" type = number default = 0 } diff --git a/modules/oracle-db/README.md b/modules/oracle-db/README.md index 97be5acc..417ce950 100644 --- a/modules/oracle-db/README.md +++ b/modules/oracle-db/README.md @@ -55,59 +55,59 @@ No resources. | [computed\_egress\_ipv6\_cidr\_blocks](#input\_computed\_egress\_ipv6\_cidr\_blocks) | List of IPv6 CIDR ranges to use on all computed egress rules | `list(string)` |
[
"::/0"
]
| no | | [computed\_egress\_prefix\_list\_ids](#input\_computed\_egress\_prefix\_list\_ids) | List of prefix list IDs (for allowing access to VPC endpoints) to use on all computed egress rules | `list(string)` | `[]` | no | | [computed\_egress\_rules](#input\_computed\_egress\_rules) | List of computed egress rules to create by name | `list(string)` | `[]` | no | -| [computed\_egress\_with\_cidr\_blocks](#input\_computed\_egress\_with\_cidr\_blocks) | List of computed egress rules to create where 'cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [computed\_egress\_with\_ipv6\_cidr\_blocks](#input\_computed\_egress\_with\_ipv6\_cidr\_blocks) | List of computed egress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [computed\_egress\_with\_prefix\_list\_ids](#input\_computed\_egress\_with\_prefix\_list\_ids) | List of computed egress rules to create where 'prefix\_list\_ids' is used | `list(map(string))` | `[]` | no | +| [computed\_egress\_with\_cidr\_ipv4](#input\_computed\_egress\_with\_cidr\_ipv4) | List of computed egress rules to create where 'cidr\_ipv4' is used | `list(map(string))` | `[]` | no | +| [computed\_egress\_with\_cidr\_ipv6](#input\_computed\_egress\_with\_cidr\_ipv6) | List of computed egress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | +| [computed\_egress\_with\_prefix\_list\_id](#input\_computed\_egress\_with\_prefix\_list\_id) | List of computed egress rules to create where 'prefix\_list\_id' is used | `list(map(string))` | `[]` | no | +| [computed\_egress\_with\_referenced\_security\_group\_id](#input\_computed\_egress\_with\_referenced\_security\_group\_id) | List of computed egress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [computed\_egress\_with\_self](#input\_computed\_egress\_with\_self) | List of computed egress rules to create where 'self' is defined | `list(map(string))` | `[]` | no | -| [computed\_egress\_with\_source\_security\_group\_id](#input\_computed\_egress\_with\_source\_security\_group\_id) | List of computed egress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [computed\_ingress\_cidr\_blocks](#input\_computed\_ingress\_cidr\_blocks) | List of IPv4 CIDR ranges to use on all computed ingress rules | `list(string)` | `[]` | no | | [computed\_ingress\_ipv6\_cidr\_blocks](#input\_computed\_ingress\_ipv6\_cidr\_blocks) | List of IPv6 CIDR ranges to use on all computed ingress rules | `list(string)` | `[]` | no | | [computed\_ingress\_prefix\_list\_ids](#input\_computed\_ingress\_prefix\_list\_ids) | List of prefix list IDs (for allowing access to VPC endpoints) to use on all computed ingress rules | `list(string)` | `[]` | no | | [computed\_ingress\_rules](#input\_computed\_ingress\_rules) | List of computed ingress rules to create by name | `list(string)` | `[]` | no | -| [computed\_ingress\_with\_cidr\_blocks](#input\_computed\_ingress\_with\_cidr\_blocks) | List of computed ingress rules to create where 'cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [computed\_ingress\_with\_ipv6\_cidr\_blocks](#input\_computed\_ingress\_with\_ipv6\_cidr\_blocks) | List of computed ingress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [computed\_ingress\_with\_prefix\_list\_ids](#input\_computed\_ingress\_with\_prefix\_list\_ids) | List of computed ingress rules to create where 'prefix\_list\_ids' is used | `list(map(string))` | `[]` | no | +| [computed\_ingress\_with\_cidr\_ipv4](#input\_computed\_ingress\_with\_cidr\_ipv4) | List of computed ingress rules to create where 'cidr\_ipv4' is used | `list(map(string))` | `[]` | no | +| [computed\_ingress\_with\_cidr\_ipv6](#input\_computed\_ingress\_with\_cidr\_ipv6) | List of computed ingress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | +| [computed\_ingress\_with\_prefix\_list\_id](#input\_computed\_ingress\_with\_prefix\_list\_id) | List of computed ingress rules to create where 'prefix\_list\_id' is used | `list(map(string))` | `[]` | no | +| [computed\_ingress\_with\_referenced\_security\_group\_id](#input\_computed\_ingress\_with\_referenced\_security\_group\_id) | List of computed ingress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [computed\_ingress\_with\_self](#input\_computed\_ingress\_with\_self) | List of computed ingress rules to create where 'self' is defined | `list(map(string))` | `[]` | no | -| [computed\_ingress\_with\_source\_security\_group\_id](#input\_computed\_ingress\_with\_source\_security\_group\_id) | List of computed ingress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [create](#input\_create) | Whether to create security group and all rules | `bool` | `true` | no | | [description](#input\_description) | Description of security group | `string` | `"Security Group managed by Terraform"` | no | -| [egress\_cidr\_blocks](#input\_egress\_cidr\_blocks) | List of IPv4 CIDR ranges to use on all egress rules | `list(string)` |
[
"0.0.0.0/0"
]
| no | -| [egress\_ipv6\_cidr\_blocks](#input\_egress\_ipv6\_cidr\_blocks) | List of IPv6 CIDR ranges to use on all egress rules | `list(string)` |
[
"::/0"
]
| no | +| [egress\_cidr\_ipv4](#input\_egress\_cidr\_ipv4) | List of IPv4 CIDR ranges to use on all egress rules | `list(string)` |
[
"0.0.0.0/0"
]
| no | +| [egress\_cidr\_ipv6](#input\_egress\_cidr\_ipv6) | List of IPv6 CIDR ranges to use on all egress rules | `list(string)` |
[
"::/0"
]
| no | | [egress\_prefix\_list\_ids](#input\_egress\_prefix\_list\_ids) | List of prefix list IDs (for allowing access to VPC endpoints) to use on all egress rules | `list(string)` | `[]` | no | | [egress\_rules](#input\_egress\_rules) | List of egress rules to create by name | `list(string)` | `[]` | no | -| [egress\_with\_cidr\_blocks](#input\_egress\_with\_cidr\_blocks) | List of egress rules to create where 'cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [egress\_with\_ipv6\_cidr\_blocks](#input\_egress\_with\_ipv6\_cidr\_blocks) | List of egress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [egress\_with\_prefix\_list\_ids](#input\_egress\_with\_prefix\_list\_ids) | List of egress rules to create where 'prefix\_list\_ids' is used | `list(map(string))` | `[]` | no | +| [egress\_with\_cidr\_ipv4](#input\_egress\_with\_cidr\_ipv4) | List of egress rules to create where 'cidr\_ipv4' is used | `list(map(string))` | `[]` | no | +| [egress\_with\_cidr\_ipv6](#input\_egress\_with\_cidr\_ipv6) | List of egress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | +| [egress\_with\_prefix\_list\_id](#input\_egress\_with\_prefix\_list\_id) | List of egress rules to create where 'prefix\_list\_id' is used | `list(map(string))` | `[]` | no | +| [egress\_with\_referenced\_security\_group\_id](#input\_egress\_with\_referenced\_security\_group\_id) | List of egress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [egress\_with\_self](#input\_egress\_with\_self) | List of egress rules to create where 'self' is defined | `list(map(string))` | `[]` | no | -| [egress\_with\_source\_security\_group\_id](#input\_egress\_with\_source\_security\_group\_id) | List of egress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | -| [ingress\_cidr\_blocks](#input\_ingress\_cidr\_blocks) | List of IPv4 CIDR ranges to use on all ingress rules | `list(string)` | `[]` | no | -| [ingress\_ipv6\_cidr\_blocks](#input\_ingress\_ipv6\_cidr\_blocks) | List of IPv6 CIDR ranges to use on all ingress rules | `list(string)` | `[]` | no | +| [ingress\_cidr\_ipv4](#input\_ingress\_cidr\_ipv4) | List of IPv4 CIDR ranges to use on all ingress rules | `list(string)` | `[]` | no | +| [ingress\_cidr\_ipv6](#input\_ingress\_cidr\_ipv6) | List of IPv6 CIDR ranges to use on all ingress rules | `list(string)` | `[]` | no | | [ingress\_prefix\_list\_ids](#input\_ingress\_prefix\_list\_ids) | List of prefix list IDs (for allowing access to VPC endpoints) to use on all ingress rules | `list(string)` | `[]` | no | | [ingress\_rules](#input\_ingress\_rules) | List of ingress rules to create by name | `list(string)` | `[]` | no | -| [ingress\_with\_cidr\_blocks](#input\_ingress\_with\_cidr\_blocks) | List of ingress rules to create where 'cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [ingress\_with\_ipv6\_cidr\_blocks](#input\_ingress\_with\_ipv6\_cidr\_blocks) | List of ingress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [ingress\_with\_prefix\_list\_ids](#input\_ingress\_with\_prefix\_list\_ids) | List of ingress rules to create where 'prefix\_list\_ids' is used | `list(map(string))` | `[]` | no | +| [ingress\_with\_cidr\_ipv4](#input\_ingress\_with\_cidr\_ipv4) | List of ingress rules to create where 'cidr\_ipv4' is used | `list(map(string))` | `[]` | no | +| [ingress\_with\_cidr\_ipv6](#input\_ingress\_with\_cidr\_ipv6) | List of ingress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | +| [ingress\_with\_prefix\_list\_id](#input\_ingress\_with\_prefix\_list\_id) | List of ingress rules to create where 'prefix\_list\_id' is used | `list(map(string))` | `[]` | no | +| [ingress\_with\_referenced\_security\_group\_id](#input\_ingress\_with\_referenced\_security\_group\_id) | List of ingress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [ingress\_with\_self](#input\_ingress\_with\_self) | List of ingress rules to create where 'self' is defined | `list(map(string))` | `[]` | no | -| [ingress\_with\_source\_security\_group\_id](#input\_ingress\_with\_source\_security\_group\_id) | List of ingress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [name](#input\_name) | Name of security group | `string` | n/a | yes | | [number\_of\_computed\_egress\_cidr\_blocks](#input\_number\_of\_computed\_egress\_cidr\_blocks) | Number of IPv4 CIDR ranges to use on all computed egress rules | `number` | `0` | no | | [number\_of\_computed\_egress\_ipv6\_cidr\_blocks](#input\_number\_of\_computed\_egress\_ipv6\_cidr\_blocks) | Number of IPv6 CIDR ranges to use on all computed egress rules | `number` | `0` | no | | [number\_of\_computed\_egress\_prefix\_list\_ids](#input\_number\_of\_computed\_egress\_prefix\_list\_ids) | Number of prefix list IDs (for allowing access to VPC endpoints) to use on all computed egress rules | `number` | `0` | no | | [number\_of\_computed\_egress\_rules](#input\_number\_of\_computed\_egress\_rules) | Number of computed egress rules to create by name | `number` | `0` | no | -| [number\_of\_computed\_egress\_with\_cidr\_blocks](#input\_number\_of\_computed\_egress\_with\_cidr\_blocks) | Number of computed egress rules to create where 'cidr\_blocks' is used | `number` | `0` | no | -| [number\_of\_computed\_egress\_with\_ipv6\_cidr\_blocks](#input\_number\_of\_computed\_egress\_with\_ipv6\_cidr\_blocks) | Number of computed egress rules to create where 'ipv6\_cidr\_blocks' is used | `number` | `0` | no | -| [number\_of\_computed\_egress\_with\_prefix\_list\_ids](#input\_number\_of\_computed\_egress\_with\_prefix\_list\_ids) | Number of computed egress rules to create where 'prefix\_list\_ids' is used | `number` | `0` | no | +| [number\_of\_computed\_egress\_with\_cidr\_ipv4](#input\_number\_of\_computed\_egress\_with\_cidr\_ipv4) | Number of computed egress rules to create where 'cidr\_ipv4' is used | `number` | `0` | no | +| [number\_of\_computed\_egress\_with\_cidr\_ipv6](#input\_number\_of\_computed\_egress\_with\_cidr\_ipv6) | Number of computed egress rules to create where 'ipv6\_cidr\_blocks' is used | `number` | `0` | no | +| [number\_of\_computed\_egress\_with\_prefix\_list\_id](#input\_number\_of\_computed\_egress\_with\_prefix\_list\_id) | Number of computed egress rules to create where 'prefix\_list\_id' is used | `number` | `0` | no | +| [number\_of\_computed\_egress\_with\_referenced\_security\_group\_id](#input\_number\_of\_computed\_egress\_with\_referenced\_security\_group\_id) | Number of computed egress rules to create where 'source\_security\_group\_id' is used | `number` | `0` | no | | [number\_of\_computed\_egress\_with\_self](#input\_number\_of\_computed\_egress\_with\_self) | Number of computed egress rules to create where 'self' is defined | `number` | `0` | no | -| [number\_of\_computed\_egress\_with\_source\_security\_group\_id](#input\_number\_of\_computed\_egress\_with\_source\_security\_group\_id) | Number of computed egress rules to create where 'source\_security\_group\_id' is used | `number` | `0` | no | | [number\_of\_computed\_ingress\_cidr\_blocks](#input\_number\_of\_computed\_ingress\_cidr\_blocks) | Number of IPv4 CIDR ranges to use on all computed ingress rules | `number` | `0` | no | | [number\_of\_computed\_ingress\_ipv6\_cidr\_blocks](#input\_number\_of\_computed\_ingress\_ipv6\_cidr\_blocks) | Number of IPv6 CIDR ranges to use on all computed ingress rules | `number` | `0` | no | | [number\_of\_computed\_ingress\_prefix\_list\_ids](#input\_number\_of\_computed\_ingress\_prefix\_list\_ids) | Number of prefix list IDs (for allowing access to VPC endpoints) to use on all computed ingress rules | `number` | `0` | no | | [number\_of\_computed\_ingress\_rules](#input\_number\_of\_computed\_ingress\_rules) | Number of computed ingress rules to create by name | `number` | `0` | no | -| [number\_of\_computed\_ingress\_with\_cidr\_blocks](#input\_number\_of\_computed\_ingress\_with\_cidr\_blocks) | Number of computed ingress rules to create where 'cidr\_blocks' is used | `number` | `0` | no | -| [number\_of\_computed\_ingress\_with\_ipv6\_cidr\_blocks](#input\_number\_of\_computed\_ingress\_with\_ipv6\_cidr\_blocks) | Number of computed ingress rules to create where 'ipv6\_cidr\_blocks' is used | `number` | `0` | no | -| [number\_of\_computed\_ingress\_with\_prefix\_list\_ids](#input\_number\_of\_computed\_ingress\_with\_prefix\_list\_ids) | Number of computed ingress rules to create where 'prefix\_list\_ids' is used | `number` | `0` | no | +| [number\_of\_computed\_ingress\_with\_cidr\_ipv4](#input\_number\_of\_computed\_ingress\_with\_cidr\_ipv4) | Number of computed ingress rules to create where 'cidr\_ipv4' is used | `number` | `0` | no | +| [number\_of\_computed\_ingress\_with\_cidr\_ipv6](#input\_number\_of\_computed\_ingress\_with\_cidr\_ipv6) | Number of computed ingress rules to create where 'ipv6\_cidr\_blocks' is used | `number` | `0` | no | +| [number\_of\_computed\_ingress\_with\_prefix\_list\_id](#input\_number\_of\_computed\_ingress\_with\_prefix\_list\_id) | Number of computed ingress rules to create where 'prefix\_list\_id' is used | `number` | `0` | no | +| [number\_of\_computed\_ingress\_with\_referenced\_security\_group\_id](#input\_number\_of\_computed\_ingress\_with\_referenced\_security\_group\_id) | Number of computed ingress rules to create where 'source\_security\_group\_id' is used | `number` | `0` | no | | [number\_of\_computed\_ingress\_with\_self](#input\_number\_of\_computed\_ingress\_with\_self) | Number of computed ingress rules to create where 'self' is defined | `number` | `0` | no | -| [number\_of\_computed\_ingress\_with\_source\_security\_group\_id](#input\_number\_of\_computed\_ingress\_with\_source\_security\_group\_id) | Number of computed ingress rules to create where 'source\_security\_group\_id' is used | `number` | `0` | no | | [revoke\_rules\_on\_delete](#input\_revoke\_rules\_on\_delete) | Instruct Terraform to revoke all of the Security Groups attached ingress and egress rules before deleting the rule itself. Enable for EMR. | `bool` | `false` | no | | [tags](#input\_tags) | A mapping of tags to assign to security group | `map(string)` | `{}` | no | | [use\_name\_prefix](#input\_use\_name\_prefix) | Whether to use name\_prefix or fixed name. Should be true to able to update security group name after initial creation | `bool` | `true` | no | diff --git a/modules/oracle-db/main.tf b/modules/oracle-db/main.tf index 80ea0adb..d2a1bf93 100644 --- a/modules/oracle-db/main.tf +++ b/modules/oracle-db/main.tf @@ -19,20 +19,20 @@ module "sg" { ingress_with_self = concat(var.auto_ingress_with_self, var.ingress_with_self) # Open to IPv4 cidr blocks - ingress_with_cidr_blocks = var.ingress_with_cidr_blocks + ingress_with_cidr_ipv4 = var.ingress_with_cidr_ipv4 # Open to IPv6 cidr blocks - ingress_with_ipv6_cidr_blocks = var.ingress_with_ipv6_cidr_blocks + ingress_with_cidr_ipv6 = var.ingress_with_cidr_ipv6 # Open for security group id - ingress_with_source_security_group_id = var.ingress_with_source_security_group_id + ingress_with_referenced_security_group_id = var.ingress_with_referenced_security_group_id # Open for prefix list id - ingress_with_prefix_list_ids = var.ingress_with_prefix_list_ids + ingress_with_prefix_list_id = var.ingress_with_prefix_list_id # Default ingress CIDR blocks - ingress_cidr_blocks = var.ingress_cidr_blocks - ingress_ipv6_cidr_blocks = var.ingress_ipv6_cidr_blocks + ingress_cidr_ipv4 = var.ingress_cidr_ipv4 + ingress_cidr_ipv6 = var.ingress_cidr_ipv6 # Default prefix list ids ingress_prefix_list_ids = var.ingress_prefix_list_ids @@ -47,26 +47,26 @@ module "sg" { computed_ingress_with_self = concat(var.auto_computed_ingress_with_self, var.computed_ingress_with_self) # Open to IPv4 cidr blocks - computed_ingress_with_cidr_blocks = var.computed_ingress_with_cidr_blocks + computed_ingress_with_cidr_ipv4 = var.computed_ingress_with_cidr_ipv4 # Open to IPv6 cidr blocks - computed_ingress_with_ipv6_cidr_blocks = var.computed_ingress_with_ipv6_cidr_blocks + computed_ingress_with_cidr_ipv6 = var.computed_ingress_with_cidr_ipv6 # Open for security group id - computed_ingress_with_source_security_group_id = var.computed_ingress_with_source_security_group_id + computed_ingress_with_referenced_security_group_id = var.computed_ingress_with_referenced_security_group_id # Open for prefix list id - computed_ingress_with_prefix_list_ids = var.computed_ingress_with_prefix_list_ids + computed_ingress_with_prefix_list_id = var.computed_ingress_with_prefix_list_id ############################# # Number of computed ingress ############################# - number_of_computed_ingress_rules = var.auto_number_of_computed_ingress_rules + var.number_of_computed_ingress_rules - number_of_computed_ingress_with_self = var.auto_number_of_computed_ingress_with_self + var.number_of_computed_ingress_with_self - number_of_computed_ingress_with_cidr_blocks = var.number_of_computed_ingress_with_cidr_blocks - number_of_computed_ingress_with_ipv6_cidr_blocks = var.number_of_computed_ingress_with_ipv6_cidr_blocks - number_of_computed_ingress_with_source_security_group_id = var.number_of_computed_ingress_with_source_security_group_id - number_of_computed_ingress_with_prefix_list_ids = var.number_of_computed_ingress_with_prefix_list_ids + number_of_computed_ingress_rules = var.auto_number_of_computed_ingress_rules + var.number_of_computed_ingress_rules + number_of_computed_ingress_with_self = var.auto_number_of_computed_ingress_with_self + var.number_of_computed_ingress_with_self + number_of_computed_ingress_with_cidr_ipv4 = var.number_of_computed_ingress_with_cidr_ipv4 + number_of_computed_ingress_with_cidr_ipv6 = var.number_of_computed_ingress_with_cidr_ipv6 + number_of_computed_ingress_with_referenced_security_group_id = var.number_of_computed_ingress_with_referenced_security_group_id + number_of_computed_ingress_with_prefix_list_id = var.number_of_computed_ingress_with_prefix_list_id ######### # Egress @@ -78,20 +78,20 @@ module "sg" { egress_with_self = concat(var.auto_egress_with_self, var.egress_with_self) # Open to IPv4 cidr blocks - egress_with_cidr_blocks = var.egress_with_cidr_blocks + egress_with_cidr_ipv4 = var.egress_with_cidr_ipv4 # Open to IPv6 cidr blocks - egress_with_ipv6_cidr_blocks = var.egress_with_ipv6_cidr_blocks + egress_with_cidr_ipv6 = var.egress_with_cidr_ipv6 # Open for security group id - egress_with_source_security_group_id = var.egress_with_source_security_group_id + egress_with_referenced_security_group_id = var.egress_with_referenced_security_group_id # Open for prefix list id - egress_with_prefix_list_ids = var.egress_with_prefix_list_ids + egress_with_prefix_list_id = var.egress_with_prefix_list_id # Default egress CIDR blocks - egress_cidr_blocks = var.egress_cidr_blocks - egress_ipv6_cidr_blocks = var.egress_ipv6_cidr_blocks + egress_cidr_ipv4 = var.egress_cidr_ipv4 + egress_cidr_ipv6 = var.egress_cidr_ipv6 # Default prefix list ids egress_prefix_list_ids = var.egress_prefix_list_ids @@ -106,24 +106,24 @@ module "sg" { computed_egress_with_self = concat(var.auto_computed_egress_with_self, var.computed_egress_with_self) # Open to IPv4 cidr blocks - computed_egress_with_cidr_blocks = var.computed_egress_with_cidr_blocks + computed_egress_with_cidr_ipv4 = var.computed_egress_with_cidr_ipv4 # Open to IPv6 cidr blocks - computed_egress_with_ipv6_cidr_blocks = var.computed_egress_with_ipv6_cidr_blocks + computed_egress_with_cidr_ipv6 = var.computed_egress_with_cidr_ipv6 # Open for security group id - computed_egress_with_source_security_group_id = var.computed_egress_with_source_security_group_id + computed_egress_with_referenced_security_group_id = var.computed_egress_with_referenced_security_group_id # Open for prefix list id - computed_egress_with_prefix_list_ids = var.computed_egress_with_prefix_list_ids + computed_egress_with_prefix_list_id = var.computed_egress_with_prefix_list_id ############################# # Number of computed egress ############################# - number_of_computed_egress_rules = var.auto_number_of_computed_egress_rules + var.number_of_computed_egress_rules - number_of_computed_egress_with_self = var.auto_number_of_computed_egress_with_self + var.number_of_computed_egress_with_self - number_of_computed_egress_with_cidr_blocks = var.number_of_computed_egress_with_cidr_blocks - number_of_computed_egress_with_ipv6_cidr_blocks = var.number_of_computed_egress_with_ipv6_cidr_blocks - number_of_computed_egress_with_source_security_group_id = var.number_of_computed_egress_with_source_security_group_id - number_of_computed_egress_with_prefix_list_ids = var.number_of_computed_egress_with_prefix_list_ids + number_of_computed_egress_rules = var.auto_number_of_computed_egress_rules + var.number_of_computed_egress_rules + number_of_computed_egress_with_self = var.auto_number_of_computed_egress_with_self + var.number_of_computed_egress_with_self + number_of_computed_egress_with_cidr_ipv4 = var.number_of_computed_egress_with_cidr_ipv4 + number_of_computed_egress_with_cidr_ipv6 = var.number_of_computed_egress_with_cidr_ipv6 + number_of_computed_egress_with_referenced_security_group_id = var.number_of_computed_egress_with_referenced_security_group_id + number_of_computed_egress_with_prefix_list_id = var.number_of_computed_egress_with_prefix_list_id } diff --git a/modules/oracle-db/variables.tf b/modules/oracle-db/variables.tf index 60c8c27b..6590c9e3 100644 --- a/modules/oracle-db/variables.tf +++ b/modules/oracle-db/variables.tf @@ -56,37 +56,37 @@ variable "ingress_with_self" { default = [] } -variable "ingress_with_cidr_blocks" { - description = "List of ingress rules to create where 'cidr_blocks' is used" +variable "ingress_with_cidr_ipv4" { + description = "List of ingress rules to create where 'cidr_ipv4' is used" type = list(map(string)) default = [] } -variable "ingress_with_ipv6_cidr_blocks" { +variable "ingress_with_cidr_ipv6" { description = "List of ingress rules to create where 'ipv6_cidr_blocks' is used" type = list(map(string)) default = [] } -variable "ingress_with_source_security_group_id" { +variable "ingress_with_referenced_security_group_id" { description = "List of ingress rules to create where 'source_security_group_id' is used" type = list(map(string)) default = [] } -variable "ingress_with_prefix_list_ids" { - description = "List of ingress rules to create where 'prefix_list_ids' is used" +variable "ingress_with_prefix_list_id" { + description = "List of ingress rules to create where 'prefix_list_id' is used" type = list(map(string)) default = [] } -variable "ingress_cidr_blocks" { +variable "ingress_cidr_ipv4" { description = "List of IPv4 CIDR ranges to use on all ingress rules" type = list(string) default = [] } -variable "ingress_ipv6_cidr_blocks" { +variable "ingress_cidr_ipv6" { description = "List of IPv6 CIDR ranges to use on all ingress rules" type = list(string) default = [] @@ -113,26 +113,26 @@ variable "computed_ingress_with_self" { default = [] } -variable "computed_ingress_with_cidr_blocks" { - description = "List of computed ingress rules to create where 'cidr_blocks' is used" +variable "computed_ingress_with_cidr_ipv4" { + description = "List of computed ingress rules to create where 'cidr_ipv4' is used" type = list(map(string)) default = [] } -variable "computed_ingress_with_ipv6_cidr_blocks" { +variable "computed_ingress_with_cidr_ipv6" { description = "List of computed ingress rules to create where 'ipv6_cidr_blocks' is used" type = list(map(string)) default = [] } -variable "computed_ingress_with_source_security_group_id" { +variable "computed_ingress_with_referenced_security_group_id" { description = "List of computed ingress rules to create where 'source_security_group_id' is used" type = list(map(string)) default = [] } -variable "computed_ingress_with_prefix_list_ids" { - description = "List of computed ingress rules to create where 'prefix_list_ids' is used" +variable "computed_ingress_with_prefix_list_id" { + description = "List of computed ingress rules to create where 'prefix_list_id' is used" type = list(map(string)) default = [] } @@ -170,26 +170,26 @@ variable "number_of_computed_ingress_with_self" { default = 0 } -variable "number_of_computed_ingress_with_cidr_blocks" { - description = "Number of computed ingress rules to create where 'cidr_blocks' is used" +variable "number_of_computed_ingress_with_cidr_ipv4" { + description = "Number of computed ingress rules to create where 'cidr_ipv4' is used" type = number default = 0 } -variable "number_of_computed_ingress_with_ipv6_cidr_blocks" { +variable "number_of_computed_ingress_with_cidr_ipv6" { description = "Number of computed ingress rules to create where 'ipv6_cidr_blocks' is used" type = number default = 0 } -variable "number_of_computed_ingress_with_source_security_group_id" { +variable "number_of_computed_ingress_with_referenced_security_group_id" { description = "Number of computed ingress rules to create where 'source_security_group_id' is used" type = number default = 0 } -variable "number_of_computed_ingress_with_prefix_list_ids" { - description = "Number of computed ingress rules to create where 'prefix_list_ids' is used" +variable "number_of_computed_ingress_with_prefix_list_id" { + description = "Number of computed ingress rules to create where 'prefix_list_id' is used" type = number default = 0 } @@ -227,37 +227,37 @@ variable "egress_with_self" { default = [] } -variable "egress_with_cidr_blocks" { - description = "List of egress rules to create where 'cidr_blocks' is used" +variable "egress_with_cidr_ipv4" { + description = "List of egress rules to create where 'cidr_ipv4' is used" type = list(map(string)) default = [] } -variable "egress_with_ipv6_cidr_blocks" { +variable "egress_with_cidr_ipv6" { description = "List of egress rules to create where 'ipv6_cidr_blocks' is used" type = list(map(string)) default = [] } -variable "egress_with_source_security_group_id" { +variable "egress_with_referenced_security_group_id" { description = "List of egress rules to create where 'source_security_group_id' is used" type = list(map(string)) default = [] } -variable "egress_with_prefix_list_ids" { - description = "List of egress rules to create where 'prefix_list_ids' is used" +variable "egress_with_prefix_list_id" { + description = "List of egress rules to create where 'prefix_list_id' is used" type = list(map(string)) default = [] } -variable "egress_cidr_blocks" { +variable "egress_cidr_ipv4" { description = "List of IPv4 CIDR ranges to use on all egress rules" type = list(string) default = ["0.0.0.0/0"] } -variable "egress_ipv6_cidr_blocks" { +variable "egress_cidr_ipv6" { description = "List of IPv6 CIDR ranges to use on all egress rules" type = list(string) default = ["::/0"] @@ -284,26 +284,26 @@ variable "computed_egress_with_self" { default = [] } -variable "computed_egress_with_cidr_blocks" { - description = "List of computed egress rules to create where 'cidr_blocks' is used" +variable "computed_egress_with_cidr_ipv4" { + description = "List of computed egress rules to create where 'cidr_ipv4' is used" type = list(map(string)) default = [] } -variable "computed_egress_with_ipv6_cidr_blocks" { +variable "computed_egress_with_cidr_ipv6" { description = "List of computed egress rules to create where 'ipv6_cidr_blocks' is used" type = list(map(string)) default = [] } -variable "computed_egress_with_source_security_group_id" { +variable "computed_egress_with_referenced_security_group_id" { description = "List of computed egress rules to create where 'source_security_group_id' is used" type = list(map(string)) default = [] } -variable "computed_egress_with_prefix_list_ids" { - description = "List of computed egress rules to create where 'prefix_list_ids' is used" +variable "computed_egress_with_prefix_list_id" { + description = "List of computed egress rules to create where 'prefix_list_id' is used" type = list(map(string)) default = [] } @@ -341,26 +341,26 @@ variable "number_of_computed_egress_with_self" { default = 0 } -variable "number_of_computed_egress_with_cidr_blocks" { - description = "Number of computed egress rules to create where 'cidr_blocks' is used" +variable "number_of_computed_egress_with_cidr_ipv4" { + description = "Number of computed egress rules to create where 'cidr_ipv4' is used" type = number default = 0 } -variable "number_of_computed_egress_with_ipv6_cidr_blocks" { +variable "number_of_computed_egress_with_cidr_ipv6" { description = "Number of computed egress rules to create where 'ipv6_cidr_blocks' is used" type = number default = 0 } -variable "number_of_computed_egress_with_source_security_group_id" { +variable "number_of_computed_egress_with_referenced_security_group_id" { description = "Number of computed egress rules to create where 'source_security_group_id' is used" type = number default = 0 } -variable "number_of_computed_egress_with_prefix_list_ids" { - description = "Number of computed egress rules to create where 'prefix_list_ids' is used" +variable "number_of_computed_egress_with_prefix_list_id" { + description = "Number of computed egress rules to create where 'prefix_list_id' is used" type = number default = 0 } diff --git a/modules/postgresql/README.md b/modules/postgresql/README.md index cdba2df4..bdbc7915 100644 --- a/modules/postgresql/README.md +++ b/modules/postgresql/README.md @@ -55,59 +55,59 @@ No resources. | [computed\_egress\_ipv6\_cidr\_blocks](#input\_computed\_egress\_ipv6\_cidr\_blocks) | List of IPv6 CIDR ranges to use on all computed egress rules | `list(string)` |
[
"::/0"
]
| no | | [computed\_egress\_prefix\_list\_ids](#input\_computed\_egress\_prefix\_list\_ids) | List of prefix list IDs (for allowing access to VPC endpoints) to use on all computed egress rules | `list(string)` | `[]` | no | | [computed\_egress\_rules](#input\_computed\_egress\_rules) | List of computed egress rules to create by name | `list(string)` | `[]` | no | -| [computed\_egress\_with\_cidr\_blocks](#input\_computed\_egress\_with\_cidr\_blocks) | List of computed egress rules to create where 'cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [computed\_egress\_with\_ipv6\_cidr\_blocks](#input\_computed\_egress\_with\_ipv6\_cidr\_blocks) | List of computed egress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [computed\_egress\_with\_prefix\_list\_ids](#input\_computed\_egress\_with\_prefix\_list\_ids) | List of computed egress rules to create where 'prefix\_list\_ids' is used | `list(map(string))` | `[]` | no | +| [computed\_egress\_with\_cidr\_ipv4](#input\_computed\_egress\_with\_cidr\_ipv4) | List of computed egress rules to create where 'cidr\_ipv4' is used | `list(map(string))` | `[]` | no | +| [computed\_egress\_with\_cidr\_ipv6](#input\_computed\_egress\_with\_cidr\_ipv6) | List of computed egress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | +| [computed\_egress\_with\_prefix\_list\_id](#input\_computed\_egress\_with\_prefix\_list\_id) | List of computed egress rules to create where 'prefix\_list\_id' is used | `list(map(string))` | `[]` | no | +| [computed\_egress\_with\_referenced\_security\_group\_id](#input\_computed\_egress\_with\_referenced\_security\_group\_id) | List of computed egress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [computed\_egress\_with\_self](#input\_computed\_egress\_with\_self) | List of computed egress rules to create where 'self' is defined | `list(map(string))` | `[]` | no | -| [computed\_egress\_with\_source\_security\_group\_id](#input\_computed\_egress\_with\_source\_security\_group\_id) | List of computed egress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [computed\_ingress\_cidr\_blocks](#input\_computed\_ingress\_cidr\_blocks) | List of IPv4 CIDR ranges to use on all computed ingress rules | `list(string)` | `[]` | no | | [computed\_ingress\_ipv6\_cidr\_blocks](#input\_computed\_ingress\_ipv6\_cidr\_blocks) | List of IPv6 CIDR ranges to use on all computed ingress rules | `list(string)` | `[]` | no | | [computed\_ingress\_prefix\_list\_ids](#input\_computed\_ingress\_prefix\_list\_ids) | List of prefix list IDs (for allowing access to VPC endpoints) to use on all computed ingress rules | `list(string)` | `[]` | no | | [computed\_ingress\_rules](#input\_computed\_ingress\_rules) | List of computed ingress rules to create by name | `list(string)` | `[]` | no | -| [computed\_ingress\_with\_cidr\_blocks](#input\_computed\_ingress\_with\_cidr\_blocks) | List of computed ingress rules to create where 'cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [computed\_ingress\_with\_ipv6\_cidr\_blocks](#input\_computed\_ingress\_with\_ipv6\_cidr\_blocks) | List of computed ingress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [computed\_ingress\_with\_prefix\_list\_ids](#input\_computed\_ingress\_with\_prefix\_list\_ids) | List of computed ingress rules to create where 'prefix\_list\_ids' is used | `list(map(string))` | `[]` | no | +| [computed\_ingress\_with\_cidr\_ipv4](#input\_computed\_ingress\_with\_cidr\_ipv4) | List of computed ingress rules to create where 'cidr\_ipv4' is used | `list(map(string))` | `[]` | no | +| [computed\_ingress\_with\_cidr\_ipv6](#input\_computed\_ingress\_with\_cidr\_ipv6) | List of computed ingress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | +| [computed\_ingress\_with\_prefix\_list\_id](#input\_computed\_ingress\_with\_prefix\_list\_id) | List of computed ingress rules to create where 'prefix\_list\_id' is used | `list(map(string))` | `[]` | no | +| [computed\_ingress\_with\_referenced\_security\_group\_id](#input\_computed\_ingress\_with\_referenced\_security\_group\_id) | List of computed ingress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [computed\_ingress\_with\_self](#input\_computed\_ingress\_with\_self) | List of computed ingress rules to create where 'self' is defined | `list(map(string))` | `[]` | no | -| [computed\_ingress\_with\_source\_security\_group\_id](#input\_computed\_ingress\_with\_source\_security\_group\_id) | List of computed ingress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [create](#input\_create) | Whether to create security group and all rules | `bool` | `true` | no | | [description](#input\_description) | Description of security group | `string` | `"Security Group managed by Terraform"` | no | -| [egress\_cidr\_blocks](#input\_egress\_cidr\_blocks) | List of IPv4 CIDR ranges to use on all egress rules | `list(string)` |
[
"0.0.0.0/0"
]
| no | -| [egress\_ipv6\_cidr\_blocks](#input\_egress\_ipv6\_cidr\_blocks) | List of IPv6 CIDR ranges to use on all egress rules | `list(string)` |
[
"::/0"
]
| no | +| [egress\_cidr\_ipv4](#input\_egress\_cidr\_ipv4) | List of IPv4 CIDR ranges to use on all egress rules | `list(string)` |
[
"0.0.0.0/0"
]
| no | +| [egress\_cidr\_ipv6](#input\_egress\_cidr\_ipv6) | List of IPv6 CIDR ranges to use on all egress rules | `list(string)` |
[
"::/0"
]
| no | | [egress\_prefix\_list\_ids](#input\_egress\_prefix\_list\_ids) | List of prefix list IDs (for allowing access to VPC endpoints) to use on all egress rules | `list(string)` | `[]` | no | | [egress\_rules](#input\_egress\_rules) | List of egress rules to create by name | `list(string)` | `[]` | no | -| [egress\_with\_cidr\_blocks](#input\_egress\_with\_cidr\_blocks) | List of egress rules to create where 'cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [egress\_with\_ipv6\_cidr\_blocks](#input\_egress\_with\_ipv6\_cidr\_blocks) | List of egress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [egress\_with\_prefix\_list\_ids](#input\_egress\_with\_prefix\_list\_ids) | List of egress rules to create where 'prefix\_list\_ids' is used | `list(map(string))` | `[]` | no | +| [egress\_with\_cidr\_ipv4](#input\_egress\_with\_cidr\_ipv4) | List of egress rules to create where 'cidr\_ipv4' is used | `list(map(string))` | `[]` | no | +| [egress\_with\_cidr\_ipv6](#input\_egress\_with\_cidr\_ipv6) | List of egress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | +| [egress\_with\_prefix\_list\_id](#input\_egress\_with\_prefix\_list\_id) | List of egress rules to create where 'prefix\_list\_id' is used | `list(map(string))` | `[]` | no | +| [egress\_with\_referenced\_security\_group\_id](#input\_egress\_with\_referenced\_security\_group\_id) | List of egress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [egress\_with\_self](#input\_egress\_with\_self) | List of egress rules to create where 'self' is defined | `list(map(string))` | `[]` | no | -| [egress\_with\_source\_security\_group\_id](#input\_egress\_with\_source\_security\_group\_id) | List of egress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | -| [ingress\_cidr\_blocks](#input\_ingress\_cidr\_blocks) | List of IPv4 CIDR ranges to use on all ingress rules | `list(string)` | `[]` | no | -| [ingress\_ipv6\_cidr\_blocks](#input\_ingress\_ipv6\_cidr\_blocks) | List of IPv6 CIDR ranges to use on all ingress rules | `list(string)` | `[]` | no | +| [ingress\_cidr\_ipv4](#input\_ingress\_cidr\_ipv4) | List of IPv4 CIDR ranges to use on all ingress rules | `list(string)` | `[]` | no | +| [ingress\_cidr\_ipv6](#input\_ingress\_cidr\_ipv6) | List of IPv6 CIDR ranges to use on all ingress rules | `list(string)` | `[]` | no | | [ingress\_prefix\_list\_ids](#input\_ingress\_prefix\_list\_ids) | List of prefix list IDs (for allowing access to VPC endpoints) to use on all ingress rules | `list(string)` | `[]` | no | | [ingress\_rules](#input\_ingress\_rules) | List of ingress rules to create by name | `list(string)` | `[]` | no | -| [ingress\_with\_cidr\_blocks](#input\_ingress\_with\_cidr\_blocks) | List of ingress rules to create where 'cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [ingress\_with\_ipv6\_cidr\_blocks](#input\_ingress\_with\_ipv6\_cidr\_blocks) | List of ingress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [ingress\_with\_prefix\_list\_ids](#input\_ingress\_with\_prefix\_list\_ids) | List of ingress rules to create where 'prefix\_list\_ids' is used | `list(map(string))` | `[]` | no | +| [ingress\_with\_cidr\_ipv4](#input\_ingress\_with\_cidr\_ipv4) | List of ingress rules to create where 'cidr\_ipv4' is used | `list(map(string))` | `[]` | no | +| [ingress\_with\_cidr\_ipv6](#input\_ingress\_with\_cidr\_ipv6) | List of ingress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | +| [ingress\_with\_prefix\_list\_id](#input\_ingress\_with\_prefix\_list\_id) | List of ingress rules to create where 'prefix\_list\_id' is used | `list(map(string))` | `[]` | no | +| [ingress\_with\_referenced\_security\_group\_id](#input\_ingress\_with\_referenced\_security\_group\_id) | List of ingress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [ingress\_with\_self](#input\_ingress\_with\_self) | List of ingress rules to create where 'self' is defined | `list(map(string))` | `[]` | no | -| [ingress\_with\_source\_security\_group\_id](#input\_ingress\_with\_source\_security\_group\_id) | List of ingress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [name](#input\_name) | Name of security group | `string` | n/a | yes | | [number\_of\_computed\_egress\_cidr\_blocks](#input\_number\_of\_computed\_egress\_cidr\_blocks) | Number of IPv4 CIDR ranges to use on all computed egress rules | `number` | `0` | no | | [number\_of\_computed\_egress\_ipv6\_cidr\_blocks](#input\_number\_of\_computed\_egress\_ipv6\_cidr\_blocks) | Number of IPv6 CIDR ranges to use on all computed egress rules | `number` | `0` | no | | [number\_of\_computed\_egress\_prefix\_list\_ids](#input\_number\_of\_computed\_egress\_prefix\_list\_ids) | Number of prefix list IDs (for allowing access to VPC endpoints) to use on all computed egress rules | `number` | `0` | no | | [number\_of\_computed\_egress\_rules](#input\_number\_of\_computed\_egress\_rules) | Number of computed egress rules to create by name | `number` | `0` | no | -| [number\_of\_computed\_egress\_with\_cidr\_blocks](#input\_number\_of\_computed\_egress\_with\_cidr\_blocks) | Number of computed egress rules to create where 'cidr\_blocks' is used | `number` | `0` | no | -| [number\_of\_computed\_egress\_with\_ipv6\_cidr\_blocks](#input\_number\_of\_computed\_egress\_with\_ipv6\_cidr\_blocks) | Number of computed egress rules to create where 'ipv6\_cidr\_blocks' is used | `number` | `0` | no | -| [number\_of\_computed\_egress\_with\_prefix\_list\_ids](#input\_number\_of\_computed\_egress\_with\_prefix\_list\_ids) | Number of computed egress rules to create where 'prefix\_list\_ids' is used | `number` | `0` | no | +| [number\_of\_computed\_egress\_with\_cidr\_ipv4](#input\_number\_of\_computed\_egress\_with\_cidr\_ipv4) | Number of computed egress rules to create where 'cidr\_ipv4' is used | `number` | `0` | no | +| [number\_of\_computed\_egress\_with\_cidr\_ipv6](#input\_number\_of\_computed\_egress\_with\_cidr\_ipv6) | Number of computed egress rules to create where 'ipv6\_cidr\_blocks' is used | `number` | `0` | no | +| [number\_of\_computed\_egress\_with\_prefix\_list\_id](#input\_number\_of\_computed\_egress\_with\_prefix\_list\_id) | Number of computed egress rules to create where 'prefix\_list\_id' is used | `number` | `0` | no | +| [number\_of\_computed\_egress\_with\_referenced\_security\_group\_id](#input\_number\_of\_computed\_egress\_with\_referenced\_security\_group\_id) | Number of computed egress rules to create where 'source\_security\_group\_id' is used | `number` | `0` | no | | [number\_of\_computed\_egress\_with\_self](#input\_number\_of\_computed\_egress\_with\_self) | Number of computed egress rules to create where 'self' is defined | `number` | `0` | no | -| [number\_of\_computed\_egress\_with\_source\_security\_group\_id](#input\_number\_of\_computed\_egress\_with\_source\_security\_group\_id) | Number of computed egress rules to create where 'source\_security\_group\_id' is used | `number` | `0` | no | | [number\_of\_computed\_ingress\_cidr\_blocks](#input\_number\_of\_computed\_ingress\_cidr\_blocks) | Number of IPv4 CIDR ranges to use on all computed ingress rules | `number` | `0` | no | | [number\_of\_computed\_ingress\_ipv6\_cidr\_blocks](#input\_number\_of\_computed\_ingress\_ipv6\_cidr\_blocks) | Number of IPv6 CIDR ranges to use on all computed ingress rules | `number` | `0` | no | | [number\_of\_computed\_ingress\_prefix\_list\_ids](#input\_number\_of\_computed\_ingress\_prefix\_list\_ids) | Number of prefix list IDs (for allowing access to VPC endpoints) to use on all computed ingress rules | `number` | `0` | no | | [number\_of\_computed\_ingress\_rules](#input\_number\_of\_computed\_ingress\_rules) | Number of computed ingress rules to create by name | `number` | `0` | no | -| [number\_of\_computed\_ingress\_with\_cidr\_blocks](#input\_number\_of\_computed\_ingress\_with\_cidr\_blocks) | Number of computed ingress rules to create where 'cidr\_blocks' is used | `number` | `0` | no | -| [number\_of\_computed\_ingress\_with\_ipv6\_cidr\_blocks](#input\_number\_of\_computed\_ingress\_with\_ipv6\_cidr\_blocks) | Number of computed ingress rules to create where 'ipv6\_cidr\_blocks' is used | `number` | `0` | no | -| [number\_of\_computed\_ingress\_with\_prefix\_list\_ids](#input\_number\_of\_computed\_ingress\_with\_prefix\_list\_ids) | Number of computed ingress rules to create where 'prefix\_list\_ids' is used | `number` | `0` | no | +| [number\_of\_computed\_ingress\_with\_cidr\_ipv4](#input\_number\_of\_computed\_ingress\_with\_cidr\_ipv4) | Number of computed ingress rules to create where 'cidr\_ipv4' is used | `number` | `0` | no | +| [number\_of\_computed\_ingress\_with\_cidr\_ipv6](#input\_number\_of\_computed\_ingress\_with\_cidr\_ipv6) | Number of computed ingress rules to create where 'ipv6\_cidr\_blocks' is used | `number` | `0` | no | +| [number\_of\_computed\_ingress\_with\_prefix\_list\_id](#input\_number\_of\_computed\_ingress\_with\_prefix\_list\_id) | Number of computed ingress rules to create where 'prefix\_list\_id' is used | `number` | `0` | no | +| [number\_of\_computed\_ingress\_with\_referenced\_security\_group\_id](#input\_number\_of\_computed\_ingress\_with\_referenced\_security\_group\_id) | Number of computed ingress rules to create where 'source\_security\_group\_id' is used | `number` | `0` | no | | [number\_of\_computed\_ingress\_with\_self](#input\_number\_of\_computed\_ingress\_with\_self) | Number of computed ingress rules to create where 'self' is defined | `number` | `0` | no | -| [number\_of\_computed\_ingress\_with\_source\_security\_group\_id](#input\_number\_of\_computed\_ingress\_with\_source\_security\_group\_id) | Number of computed ingress rules to create where 'source\_security\_group\_id' is used | `number` | `0` | no | | [revoke\_rules\_on\_delete](#input\_revoke\_rules\_on\_delete) | Instruct Terraform to revoke all of the Security Groups attached ingress and egress rules before deleting the rule itself. Enable for EMR. | `bool` | `false` | no | | [tags](#input\_tags) | A mapping of tags to assign to security group | `map(string)` | `{}` | no | | [use\_name\_prefix](#input\_use\_name\_prefix) | Whether to use name\_prefix or fixed name. Should be true to able to update security group name after initial creation | `bool` | `true` | no | diff --git a/modules/postgresql/main.tf b/modules/postgresql/main.tf index 80ea0adb..d2a1bf93 100644 --- a/modules/postgresql/main.tf +++ b/modules/postgresql/main.tf @@ -19,20 +19,20 @@ module "sg" { ingress_with_self = concat(var.auto_ingress_with_self, var.ingress_with_self) # Open to IPv4 cidr blocks - ingress_with_cidr_blocks = var.ingress_with_cidr_blocks + ingress_with_cidr_ipv4 = var.ingress_with_cidr_ipv4 # Open to IPv6 cidr blocks - ingress_with_ipv6_cidr_blocks = var.ingress_with_ipv6_cidr_blocks + ingress_with_cidr_ipv6 = var.ingress_with_cidr_ipv6 # Open for security group id - ingress_with_source_security_group_id = var.ingress_with_source_security_group_id + ingress_with_referenced_security_group_id = var.ingress_with_referenced_security_group_id # Open for prefix list id - ingress_with_prefix_list_ids = var.ingress_with_prefix_list_ids + ingress_with_prefix_list_id = var.ingress_with_prefix_list_id # Default ingress CIDR blocks - ingress_cidr_blocks = var.ingress_cidr_blocks - ingress_ipv6_cidr_blocks = var.ingress_ipv6_cidr_blocks + ingress_cidr_ipv4 = var.ingress_cidr_ipv4 + ingress_cidr_ipv6 = var.ingress_cidr_ipv6 # Default prefix list ids ingress_prefix_list_ids = var.ingress_prefix_list_ids @@ -47,26 +47,26 @@ module "sg" { computed_ingress_with_self = concat(var.auto_computed_ingress_with_self, var.computed_ingress_with_self) # Open to IPv4 cidr blocks - computed_ingress_with_cidr_blocks = var.computed_ingress_with_cidr_blocks + computed_ingress_with_cidr_ipv4 = var.computed_ingress_with_cidr_ipv4 # Open to IPv6 cidr blocks - computed_ingress_with_ipv6_cidr_blocks = var.computed_ingress_with_ipv6_cidr_blocks + computed_ingress_with_cidr_ipv6 = var.computed_ingress_with_cidr_ipv6 # Open for security group id - computed_ingress_with_source_security_group_id = var.computed_ingress_with_source_security_group_id + computed_ingress_with_referenced_security_group_id = var.computed_ingress_with_referenced_security_group_id # Open for prefix list id - computed_ingress_with_prefix_list_ids = var.computed_ingress_with_prefix_list_ids + computed_ingress_with_prefix_list_id = var.computed_ingress_with_prefix_list_id ############################# # Number of computed ingress ############################# - number_of_computed_ingress_rules = var.auto_number_of_computed_ingress_rules + var.number_of_computed_ingress_rules - number_of_computed_ingress_with_self = var.auto_number_of_computed_ingress_with_self + var.number_of_computed_ingress_with_self - number_of_computed_ingress_with_cidr_blocks = var.number_of_computed_ingress_with_cidr_blocks - number_of_computed_ingress_with_ipv6_cidr_blocks = var.number_of_computed_ingress_with_ipv6_cidr_blocks - number_of_computed_ingress_with_source_security_group_id = var.number_of_computed_ingress_with_source_security_group_id - number_of_computed_ingress_with_prefix_list_ids = var.number_of_computed_ingress_with_prefix_list_ids + number_of_computed_ingress_rules = var.auto_number_of_computed_ingress_rules + var.number_of_computed_ingress_rules + number_of_computed_ingress_with_self = var.auto_number_of_computed_ingress_with_self + var.number_of_computed_ingress_with_self + number_of_computed_ingress_with_cidr_ipv4 = var.number_of_computed_ingress_with_cidr_ipv4 + number_of_computed_ingress_with_cidr_ipv6 = var.number_of_computed_ingress_with_cidr_ipv6 + number_of_computed_ingress_with_referenced_security_group_id = var.number_of_computed_ingress_with_referenced_security_group_id + number_of_computed_ingress_with_prefix_list_id = var.number_of_computed_ingress_with_prefix_list_id ######### # Egress @@ -78,20 +78,20 @@ module "sg" { egress_with_self = concat(var.auto_egress_with_self, var.egress_with_self) # Open to IPv4 cidr blocks - egress_with_cidr_blocks = var.egress_with_cidr_blocks + egress_with_cidr_ipv4 = var.egress_with_cidr_ipv4 # Open to IPv6 cidr blocks - egress_with_ipv6_cidr_blocks = var.egress_with_ipv6_cidr_blocks + egress_with_cidr_ipv6 = var.egress_with_cidr_ipv6 # Open for security group id - egress_with_source_security_group_id = var.egress_with_source_security_group_id + egress_with_referenced_security_group_id = var.egress_with_referenced_security_group_id # Open for prefix list id - egress_with_prefix_list_ids = var.egress_with_prefix_list_ids + egress_with_prefix_list_id = var.egress_with_prefix_list_id # Default egress CIDR blocks - egress_cidr_blocks = var.egress_cidr_blocks - egress_ipv6_cidr_blocks = var.egress_ipv6_cidr_blocks + egress_cidr_ipv4 = var.egress_cidr_ipv4 + egress_cidr_ipv6 = var.egress_cidr_ipv6 # Default prefix list ids egress_prefix_list_ids = var.egress_prefix_list_ids @@ -106,24 +106,24 @@ module "sg" { computed_egress_with_self = concat(var.auto_computed_egress_with_self, var.computed_egress_with_self) # Open to IPv4 cidr blocks - computed_egress_with_cidr_blocks = var.computed_egress_with_cidr_blocks + computed_egress_with_cidr_ipv4 = var.computed_egress_with_cidr_ipv4 # Open to IPv6 cidr blocks - computed_egress_with_ipv6_cidr_blocks = var.computed_egress_with_ipv6_cidr_blocks + computed_egress_with_cidr_ipv6 = var.computed_egress_with_cidr_ipv6 # Open for security group id - computed_egress_with_source_security_group_id = var.computed_egress_with_source_security_group_id + computed_egress_with_referenced_security_group_id = var.computed_egress_with_referenced_security_group_id # Open for prefix list id - computed_egress_with_prefix_list_ids = var.computed_egress_with_prefix_list_ids + computed_egress_with_prefix_list_id = var.computed_egress_with_prefix_list_id ############################# # Number of computed egress ############################# - number_of_computed_egress_rules = var.auto_number_of_computed_egress_rules + var.number_of_computed_egress_rules - number_of_computed_egress_with_self = var.auto_number_of_computed_egress_with_self + var.number_of_computed_egress_with_self - number_of_computed_egress_with_cidr_blocks = var.number_of_computed_egress_with_cidr_blocks - number_of_computed_egress_with_ipv6_cidr_blocks = var.number_of_computed_egress_with_ipv6_cidr_blocks - number_of_computed_egress_with_source_security_group_id = var.number_of_computed_egress_with_source_security_group_id - number_of_computed_egress_with_prefix_list_ids = var.number_of_computed_egress_with_prefix_list_ids + number_of_computed_egress_rules = var.auto_number_of_computed_egress_rules + var.number_of_computed_egress_rules + number_of_computed_egress_with_self = var.auto_number_of_computed_egress_with_self + var.number_of_computed_egress_with_self + number_of_computed_egress_with_cidr_ipv4 = var.number_of_computed_egress_with_cidr_ipv4 + number_of_computed_egress_with_cidr_ipv6 = var.number_of_computed_egress_with_cidr_ipv6 + number_of_computed_egress_with_referenced_security_group_id = var.number_of_computed_egress_with_referenced_security_group_id + number_of_computed_egress_with_prefix_list_id = var.number_of_computed_egress_with_prefix_list_id } diff --git a/modules/postgresql/variables.tf b/modules/postgresql/variables.tf index 60c8c27b..6590c9e3 100644 --- a/modules/postgresql/variables.tf +++ b/modules/postgresql/variables.tf @@ -56,37 +56,37 @@ variable "ingress_with_self" { default = [] } -variable "ingress_with_cidr_blocks" { - description = "List of ingress rules to create where 'cidr_blocks' is used" +variable "ingress_with_cidr_ipv4" { + description = "List of ingress rules to create where 'cidr_ipv4' is used" type = list(map(string)) default = [] } -variable "ingress_with_ipv6_cidr_blocks" { +variable "ingress_with_cidr_ipv6" { description = "List of ingress rules to create where 'ipv6_cidr_blocks' is used" type = list(map(string)) default = [] } -variable "ingress_with_source_security_group_id" { +variable "ingress_with_referenced_security_group_id" { description = "List of ingress rules to create where 'source_security_group_id' is used" type = list(map(string)) default = [] } -variable "ingress_with_prefix_list_ids" { - description = "List of ingress rules to create where 'prefix_list_ids' is used" +variable "ingress_with_prefix_list_id" { + description = "List of ingress rules to create where 'prefix_list_id' is used" type = list(map(string)) default = [] } -variable "ingress_cidr_blocks" { +variable "ingress_cidr_ipv4" { description = "List of IPv4 CIDR ranges to use on all ingress rules" type = list(string) default = [] } -variable "ingress_ipv6_cidr_blocks" { +variable "ingress_cidr_ipv6" { description = "List of IPv6 CIDR ranges to use on all ingress rules" type = list(string) default = [] @@ -113,26 +113,26 @@ variable "computed_ingress_with_self" { default = [] } -variable "computed_ingress_with_cidr_blocks" { - description = "List of computed ingress rules to create where 'cidr_blocks' is used" +variable "computed_ingress_with_cidr_ipv4" { + description = "List of computed ingress rules to create where 'cidr_ipv4' is used" type = list(map(string)) default = [] } -variable "computed_ingress_with_ipv6_cidr_blocks" { +variable "computed_ingress_with_cidr_ipv6" { description = "List of computed ingress rules to create where 'ipv6_cidr_blocks' is used" type = list(map(string)) default = [] } -variable "computed_ingress_with_source_security_group_id" { +variable "computed_ingress_with_referenced_security_group_id" { description = "List of computed ingress rules to create where 'source_security_group_id' is used" type = list(map(string)) default = [] } -variable "computed_ingress_with_prefix_list_ids" { - description = "List of computed ingress rules to create where 'prefix_list_ids' is used" +variable "computed_ingress_with_prefix_list_id" { + description = "List of computed ingress rules to create where 'prefix_list_id' is used" type = list(map(string)) default = [] } @@ -170,26 +170,26 @@ variable "number_of_computed_ingress_with_self" { default = 0 } -variable "number_of_computed_ingress_with_cidr_blocks" { - description = "Number of computed ingress rules to create where 'cidr_blocks' is used" +variable "number_of_computed_ingress_with_cidr_ipv4" { + description = "Number of computed ingress rules to create where 'cidr_ipv4' is used" type = number default = 0 } -variable "number_of_computed_ingress_with_ipv6_cidr_blocks" { +variable "number_of_computed_ingress_with_cidr_ipv6" { description = "Number of computed ingress rules to create where 'ipv6_cidr_blocks' is used" type = number default = 0 } -variable "number_of_computed_ingress_with_source_security_group_id" { +variable "number_of_computed_ingress_with_referenced_security_group_id" { description = "Number of computed ingress rules to create where 'source_security_group_id' is used" type = number default = 0 } -variable "number_of_computed_ingress_with_prefix_list_ids" { - description = "Number of computed ingress rules to create where 'prefix_list_ids' is used" +variable "number_of_computed_ingress_with_prefix_list_id" { + description = "Number of computed ingress rules to create where 'prefix_list_id' is used" type = number default = 0 } @@ -227,37 +227,37 @@ variable "egress_with_self" { default = [] } -variable "egress_with_cidr_blocks" { - description = "List of egress rules to create where 'cidr_blocks' is used" +variable "egress_with_cidr_ipv4" { + description = "List of egress rules to create where 'cidr_ipv4' is used" type = list(map(string)) default = [] } -variable "egress_with_ipv6_cidr_blocks" { +variable "egress_with_cidr_ipv6" { description = "List of egress rules to create where 'ipv6_cidr_blocks' is used" type = list(map(string)) default = [] } -variable "egress_with_source_security_group_id" { +variable "egress_with_referenced_security_group_id" { description = "List of egress rules to create where 'source_security_group_id' is used" type = list(map(string)) default = [] } -variable "egress_with_prefix_list_ids" { - description = "List of egress rules to create where 'prefix_list_ids' is used" +variable "egress_with_prefix_list_id" { + description = "List of egress rules to create where 'prefix_list_id' is used" type = list(map(string)) default = [] } -variable "egress_cidr_blocks" { +variable "egress_cidr_ipv4" { description = "List of IPv4 CIDR ranges to use on all egress rules" type = list(string) default = ["0.0.0.0/0"] } -variable "egress_ipv6_cidr_blocks" { +variable "egress_cidr_ipv6" { description = "List of IPv6 CIDR ranges to use on all egress rules" type = list(string) default = ["::/0"] @@ -284,26 +284,26 @@ variable "computed_egress_with_self" { default = [] } -variable "computed_egress_with_cidr_blocks" { - description = "List of computed egress rules to create where 'cidr_blocks' is used" +variable "computed_egress_with_cidr_ipv4" { + description = "List of computed egress rules to create where 'cidr_ipv4' is used" type = list(map(string)) default = [] } -variable "computed_egress_with_ipv6_cidr_blocks" { +variable "computed_egress_with_cidr_ipv6" { description = "List of computed egress rules to create where 'ipv6_cidr_blocks' is used" type = list(map(string)) default = [] } -variable "computed_egress_with_source_security_group_id" { +variable "computed_egress_with_referenced_security_group_id" { description = "List of computed egress rules to create where 'source_security_group_id' is used" type = list(map(string)) default = [] } -variable "computed_egress_with_prefix_list_ids" { - description = "List of computed egress rules to create where 'prefix_list_ids' is used" +variable "computed_egress_with_prefix_list_id" { + description = "List of computed egress rules to create where 'prefix_list_id' is used" type = list(map(string)) default = [] } @@ -341,26 +341,26 @@ variable "number_of_computed_egress_with_self" { default = 0 } -variable "number_of_computed_egress_with_cidr_blocks" { - description = "Number of computed egress rules to create where 'cidr_blocks' is used" +variable "number_of_computed_egress_with_cidr_ipv4" { + description = "Number of computed egress rules to create where 'cidr_ipv4' is used" type = number default = 0 } -variable "number_of_computed_egress_with_ipv6_cidr_blocks" { +variable "number_of_computed_egress_with_cidr_ipv6" { description = "Number of computed egress rules to create where 'ipv6_cidr_blocks' is used" type = number default = 0 } -variable "number_of_computed_egress_with_source_security_group_id" { +variable "number_of_computed_egress_with_referenced_security_group_id" { description = "Number of computed egress rules to create where 'source_security_group_id' is used" type = number default = 0 } -variable "number_of_computed_egress_with_prefix_list_ids" { - description = "Number of computed egress rules to create where 'prefix_list_ids' is used" +variable "number_of_computed_egress_with_prefix_list_id" { + description = "Number of computed egress rules to create where 'prefix_list_id' is used" type = number default = 0 } diff --git a/modules/prometheus/README.md b/modules/prometheus/README.md index d967c99b..472a1fe3 100644 --- a/modules/prometheus/README.md +++ b/modules/prometheus/README.md @@ -55,59 +55,59 @@ No resources. | [computed\_egress\_ipv6\_cidr\_blocks](#input\_computed\_egress\_ipv6\_cidr\_blocks) | List of IPv6 CIDR ranges to use on all computed egress rules | `list(string)` |
[
"::/0"
]
| no | | [computed\_egress\_prefix\_list\_ids](#input\_computed\_egress\_prefix\_list\_ids) | List of prefix list IDs (for allowing access to VPC endpoints) to use on all computed egress rules | `list(string)` | `[]` | no | | [computed\_egress\_rules](#input\_computed\_egress\_rules) | List of computed egress rules to create by name | `list(string)` | `[]` | no | -| [computed\_egress\_with\_cidr\_blocks](#input\_computed\_egress\_with\_cidr\_blocks) | List of computed egress rules to create where 'cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [computed\_egress\_with\_ipv6\_cidr\_blocks](#input\_computed\_egress\_with\_ipv6\_cidr\_blocks) | List of computed egress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [computed\_egress\_with\_prefix\_list\_ids](#input\_computed\_egress\_with\_prefix\_list\_ids) | List of computed egress rules to create where 'prefix\_list\_ids' is used | `list(map(string))` | `[]` | no | +| [computed\_egress\_with\_cidr\_ipv4](#input\_computed\_egress\_with\_cidr\_ipv4) | List of computed egress rules to create where 'cidr\_ipv4' is used | `list(map(string))` | `[]` | no | +| [computed\_egress\_with\_cidr\_ipv6](#input\_computed\_egress\_with\_cidr\_ipv6) | List of computed egress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | +| [computed\_egress\_with\_prefix\_list\_id](#input\_computed\_egress\_with\_prefix\_list\_id) | List of computed egress rules to create where 'prefix\_list\_id' is used | `list(map(string))` | `[]` | no | +| [computed\_egress\_with\_referenced\_security\_group\_id](#input\_computed\_egress\_with\_referenced\_security\_group\_id) | List of computed egress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [computed\_egress\_with\_self](#input\_computed\_egress\_with\_self) | List of computed egress rules to create where 'self' is defined | `list(map(string))` | `[]` | no | -| [computed\_egress\_with\_source\_security\_group\_id](#input\_computed\_egress\_with\_source\_security\_group\_id) | List of computed egress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [computed\_ingress\_cidr\_blocks](#input\_computed\_ingress\_cidr\_blocks) | List of IPv4 CIDR ranges to use on all computed ingress rules | `list(string)` | `[]` | no | | [computed\_ingress\_ipv6\_cidr\_blocks](#input\_computed\_ingress\_ipv6\_cidr\_blocks) | List of IPv6 CIDR ranges to use on all computed ingress rules | `list(string)` | `[]` | no | | [computed\_ingress\_prefix\_list\_ids](#input\_computed\_ingress\_prefix\_list\_ids) | List of prefix list IDs (for allowing access to VPC endpoints) to use on all computed ingress rules | `list(string)` | `[]` | no | | [computed\_ingress\_rules](#input\_computed\_ingress\_rules) | List of computed ingress rules to create by name | `list(string)` | `[]` | no | -| [computed\_ingress\_with\_cidr\_blocks](#input\_computed\_ingress\_with\_cidr\_blocks) | List of computed ingress rules to create where 'cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [computed\_ingress\_with\_ipv6\_cidr\_blocks](#input\_computed\_ingress\_with\_ipv6\_cidr\_blocks) | List of computed ingress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [computed\_ingress\_with\_prefix\_list\_ids](#input\_computed\_ingress\_with\_prefix\_list\_ids) | List of computed ingress rules to create where 'prefix\_list\_ids' is used | `list(map(string))` | `[]` | no | +| [computed\_ingress\_with\_cidr\_ipv4](#input\_computed\_ingress\_with\_cidr\_ipv4) | List of computed ingress rules to create where 'cidr\_ipv4' is used | `list(map(string))` | `[]` | no | +| [computed\_ingress\_with\_cidr\_ipv6](#input\_computed\_ingress\_with\_cidr\_ipv6) | List of computed ingress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | +| [computed\_ingress\_with\_prefix\_list\_id](#input\_computed\_ingress\_with\_prefix\_list\_id) | List of computed ingress rules to create where 'prefix\_list\_id' is used | `list(map(string))` | `[]` | no | +| [computed\_ingress\_with\_referenced\_security\_group\_id](#input\_computed\_ingress\_with\_referenced\_security\_group\_id) | List of computed ingress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [computed\_ingress\_with\_self](#input\_computed\_ingress\_with\_self) | List of computed ingress rules to create where 'self' is defined | `list(map(string))` | `[]` | no | -| [computed\_ingress\_with\_source\_security\_group\_id](#input\_computed\_ingress\_with\_source\_security\_group\_id) | List of computed ingress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [create](#input\_create) | Whether to create security group and all rules | `bool` | `true` | no | | [description](#input\_description) | Description of security group | `string` | `"Security Group managed by Terraform"` | no | -| [egress\_cidr\_blocks](#input\_egress\_cidr\_blocks) | List of IPv4 CIDR ranges to use on all egress rules | `list(string)` |
[
"0.0.0.0/0"
]
| no | -| [egress\_ipv6\_cidr\_blocks](#input\_egress\_ipv6\_cidr\_blocks) | List of IPv6 CIDR ranges to use on all egress rules | `list(string)` |
[
"::/0"
]
| no | +| [egress\_cidr\_ipv4](#input\_egress\_cidr\_ipv4) | List of IPv4 CIDR ranges to use on all egress rules | `list(string)` |
[
"0.0.0.0/0"
]
| no | +| [egress\_cidr\_ipv6](#input\_egress\_cidr\_ipv6) | List of IPv6 CIDR ranges to use on all egress rules | `list(string)` |
[
"::/0"
]
| no | | [egress\_prefix\_list\_ids](#input\_egress\_prefix\_list\_ids) | List of prefix list IDs (for allowing access to VPC endpoints) to use on all egress rules | `list(string)` | `[]` | no | | [egress\_rules](#input\_egress\_rules) | List of egress rules to create by name | `list(string)` | `[]` | no | -| [egress\_with\_cidr\_blocks](#input\_egress\_with\_cidr\_blocks) | List of egress rules to create where 'cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [egress\_with\_ipv6\_cidr\_blocks](#input\_egress\_with\_ipv6\_cidr\_blocks) | List of egress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [egress\_with\_prefix\_list\_ids](#input\_egress\_with\_prefix\_list\_ids) | List of egress rules to create where 'prefix\_list\_ids' is used | `list(map(string))` | `[]` | no | +| [egress\_with\_cidr\_ipv4](#input\_egress\_with\_cidr\_ipv4) | List of egress rules to create where 'cidr\_ipv4' is used | `list(map(string))` | `[]` | no | +| [egress\_with\_cidr\_ipv6](#input\_egress\_with\_cidr\_ipv6) | List of egress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | +| [egress\_with\_prefix\_list\_id](#input\_egress\_with\_prefix\_list\_id) | List of egress rules to create where 'prefix\_list\_id' is used | `list(map(string))` | `[]` | no | +| [egress\_with\_referenced\_security\_group\_id](#input\_egress\_with\_referenced\_security\_group\_id) | List of egress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [egress\_with\_self](#input\_egress\_with\_self) | List of egress rules to create where 'self' is defined | `list(map(string))` | `[]` | no | -| [egress\_with\_source\_security\_group\_id](#input\_egress\_with\_source\_security\_group\_id) | List of egress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | -| [ingress\_cidr\_blocks](#input\_ingress\_cidr\_blocks) | List of IPv4 CIDR ranges to use on all ingress rules | `list(string)` | `[]` | no | -| [ingress\_ipv6\_cidr\_blocks](#input\_ingress\_ipv6\_cidr\_blocks) | List of IPv6 CIDR ranges to use on all ingress rules | `list(string)` | `[]` | no | +| [ingress\_cidr\_ipv4](#input\_ingress\_cidr\_ipv4) | List of IPv4 CIDR ranges to use on all ingress rules | `list(string)` | `[]` | no | +| [ingress\_cidr\_ipv6](#input\_ingress\_cidr\_ipv6) | List of IPv6 CIDR ranges to use on all ingress rules | `list(string)` | `[]` | no | | [ingress\_prefix\_list\_ids](#input\_ingress\_prefix\_list\_ids) | List of prefix list IDs (for allowing access to VPC endpoints) to use on all ingress rules | `list(string)` | `[]` | no | | [ingress\_rules](#input\_ingress\_rules) | List of ingress rules to create by name | `list(string)` | `[]` | no | -| [ingress\_with\_cidr\_blocks](#input\_ingress\_with\_cidr\_blocks) | List of ingress rules to create where 'cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [ingress\_with\_ipv6\_cidr\_blocks](#input\_ingress\_with\_ipv6\_cidr\_blocks) | List of ingress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [ingress\_with\_prefix\_list\_ids](#input\_ingress\_with\_prefix\_list\_ids) | List of ingress rules to create where 'prefix\_list\_ids' is used | `list(map(string))` | `[]` | no | +| [ingress\_with\_cidr\_ipv4](#input\_ingress\_with\_cidr\_ipv4) | List of ingress rules to create where 'cidr\_ipv4' is used | `list(map(string))` | `[]` | no | +| [ingress\_with\_cidr\_ipv6](#input\_ingress\_with\_cidr\_ipv6) | List of ingress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | +| [ingress\_with\_prefix\_list\_id](#input\_ingress\_with\_prefix\_list\_id) | List of ingress rules to create where 'prefix\_list\_id' is used | `list(map(string))` | `[]` | no | +| [ingress\_with\_referenced\_security\_group\_id](#input\_ingress\_with\_referenced\_security\_group\_id) | List of ingress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [ingress\_with\_self](#input\_ingress\_with\_self) | List of ingress rules to create where 'self' is defined | `list(map(string))` | `[]` | no | -| [ingress\_with\_source\_security\_group\_id](#input\_ingress\_with\_source\_security\_group\_id) | List of ingress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [name](#input\_name) | Name of security group | `string` | n/a | yes | | [number\_of\_computed\_egress\_cidr\_blocks](#input\_number\_of\_computed\_egress\_cidr\_blocks) | Number of IPv4 CIDR ranges to use on all computed egress rules | `number` | `0` | no | | [number\_of\_computed\_egress\_ipv6\_cidr\_blocks](#input\_number\_of\_computed\_egress\_ipv6\_cidr\_blocks) | Number of IPv6 CIDR ranges to use on all computed egress rules | `number` | `0` | no | | [number\_of\_computed\_egress\_prefix\_list\_ids](#input\_number\_of\_computed\_egress\_prefix\_list\_ids) | Number of prefix list IDs (for allowing access to VPC endpoints) to use on all computed egress rules | `number` | `0` | no | | [number\_of\_computed\_egress\_rules](#input\_number\_of\_computed\_egress\_rules) | Number of computed egress rules to create by name | `number` | `0` | no | -| [number\_of\_computed\_egress\_with\_cidr\_blocks](#input\_number\_of\_computed\_egress\_with\_cidr\_blocks) | Number of computed egress rules to create where 'cidr\_blocks' is used | `number` | `0` | no | -| [number\_of\_computed\_egress\_with\_ipv6\_cidr\_blocks](#input\_number\_of\_computed\_egress\_with\_ipv6\_cidr\_blocks) | Number of computed egress rules to create where 'ipv6\_cidr\_blocks' is used | `number` | `0` | no | -| [number\_of\_computed\_egress\_with\_prefix\_list\_ids](#input\_number\_of\_computed\_egress\_with\_prefix\_list\_ids) | Number of computed egress rules to create where 'prefix\_list\_ids' is used | `number` | `0` | no | +| [number\_of\_computed\_egress\_with\_cidr\_ipv4](#input\_number\_of\_computed\_egress\_with\_cidr\_ipv4) | Number of computed egress rules to create where 'cidr\_ipv4' is used | `number` | `0` | no | +| [number\_of\_computed\_egress\_with\_cidr\_ipv6](#input\_number\_of\_computed\_egress\_with\_cidr\_ipv6) | Number of computed egress rules to create where 'ipv6\_cidr\_blocks' is used | `number` | `0` | no | +| [number\_of\_computed\_egress\_with\_prefix\_list\_id](#input\_number\_of\_computed\_egress\_with\_prefix\_list\_id) | Number of computed egress rules to create where 'prefix\_list\_id' is used | `number` | `0` | no | +| [number\_of\_computed\_egress\_with\_referenced\_security\_group\_id](#input\_number\_of\_computed\_egress\_with\_referenced\_security\_group\_id) | Number of computed egress rules to create where 'source\_security\_group\_id' is used | `number` | `0` | no | | [number\_of\_computed\_egress\_with\_self](#input\_number\_of\_computed\_egress\_with\_self) | Number of computed egress rules to create where 'self' is defined | `number` | `0` | no | -| [number\_of\_computed\_egress\_with\_source\_security\_group\_id](#input\_number\_of\_computed\_egress\_with\_source\_security\_group\_id) | Number of computed egress rules to create where 'source\_security\_group\_id' is used | `number` | `0` | no | | [number\_of\_computed\_ingress\_cidr\_blocks](#input\_number\_of\_computed\_ingress\_cidr\_blocks) | Number of IPv4 CIDR ranges to use on all computed ingress rules | `number` | `0` | no | | [number\_of\_computed\_ingress\_ipv6\_cidr\_blocks](#input\_number\_of\_computed\_ingress\_ipv6\_cidr\_blocks) | Number of IPv6 CIDR ranges to use on all computed ingress rules | `number` | `0` | no | | [number\_of\_computed\_ingress\_prefix\_list\_ids](#input\_number\_of\_computed\_ingress\_prefix\_list\_ids) | Number of prefix list IDs (for allowing access to VPC endpoints) to use on all computed ingress rules | `number` | `0` | no | | [number\_of\_computed\_ingress\_rules](#input\_number\_of\_computed\_ingress\_rules) | Number of computed ingress rules to create by name | `number` | `0` | no | -| [number\_of\_computed\_ingress\_with\_cidr\_blocks](#input\_number\_of\_computed\_ingress\_with\_cidr\_blocks) | Number of computed ingress rules to create where 'cidr\_blocks' is used | `number` | `0` | no | -| [number\_of\_computed\_ingress\_with\_ipv6\_cidr\_blocks](#input\_number\_of\_computed\_ingress\_with\_ipv6\_cidr\_blocks) | Number of computed ingress rules to create where 'ipv6\_cidr\_blocks' is used | `number` | `0` | no | -| [number\_of\_computed\_ingress\_with\_prefix\_list\_ids](#input\_number\_of\_computed\_ingress\_with\_prefix\_list\_ids) | Number of computed ingress rules to create where 'prefix\_list\_ids' is used | `number` | `0` | no | +| [number\_of\_computed\_ingress\_with\_cidr\_ipv4](#input\_number\_of\_computed\_ingress\_with\_cidr\_ipv4) | Number of computed ingress rules to create where 'cidr\_ipv4' is used | `number` | `0` | no | +| [number\_of\_computed\_ingress\_with\_cidr\_ipv6](#input\_number\_of\_computed\_ingress\_with\_cidr\_ipv6) | Number of computed ingress rules to create where 'ipv6\_cidr\_blocks' is used | `number` | `0` | no | +| [number\_of\_computed\_ingress\_with\_prefix\_list\_id](#input\_number\_of\_computed\_ingress\_with\_prefix\_list\_id) | Number of computed ingress rules to create where 'prefix\_list\_id' is used | `number` | `0` | no | +| [number\_of\_computed\_ingress\_with\_referenced\_security\_group\_id](#input\_number\_of\_computed\_ingress\_with\_referenced\_security\_group\_id) | Number of computed ingress rules to create where 'source\_security\_group\_id' is used | `number` | `0` | no | | [number\_of\_computed\_ingress\_with\_self](#input\_number\_of\_computed\_ingress\_with\_self) | Number of computed ingress rules to create where 'self' is defined | `number` | `0` | no | -| [number\_of\_computed\_ingress\_with\_source\_security\_group\_id](#input\_number\_of\_computed\_ingress\_with\_source\_security\_group\_id) | Number of computed ingress rules to create where 'source\_security\_group\_id' is used | `number` | `0` | no | | [revoke\_rules\_on\_delete](#input\_revoke\_rules\_on\_delete) | Instruct Terraform to revoke all of the Security Groups attached ingress and egress rules before deleting the rule itself. Enable for EMR. | `bool` | `false` | no | | [tags](#input\_tags) | A mapping of tags to assign to security group | `map(string)` | `{}` | no | | [use\_name\_prefix](#input\_use\_name\_prefix) | Whether to use name\_prefix or fixed name. Should be true to able to update security group name after initial creation | `bool` | `true` | no | diff --git a/modules/prometheus/main.tf b/modules/prometheus/main.tf index 80ea0adb..d2a1bf93 100644 --- a/modules/prometheus/main.tf +++ b/modules/prometheus/main.tf @@ -19,20 +19,20 @@ module "sg" { ingress_with_self = concat(var.auto_ingress_with_self, var.ingress_with_self) # Open to IPv4 cidr blocks - ingress_with_cidr_blocks = var.ingress_with_cidr_blocks + ingress_with_cidr_ipv4 = var.ingress_with_cidr_ipv4 # Open to IPv6 cidr blocks - ingress_with_ipv6_cidr_blocks = var.ingress_with_ipv6_cidr_blocks + ingress_with_cidr_ipv6 = var.ingress_with_cidr_ipv6 # Open for security group id - ingress_with_source_security_group_id = var.ingress_with_source_security_group_id + ingress_with_referenced_security_group_id = var.ingress_with_referenced_security_group_id # Open for prefix list id - ingress_with_prefix_list_ids = var.ingress_with_prefix_list_ids + ingress_with_prefix_list_id = var.ingress_with_prefix_list_id # Default ingress CIDR blocks - ingress_cidr_blocks = var.ingress_cidr_blocks - ingress_ipv6_cidr_blocks = var.ingress_ipv6_cidr_blocks + ingress_cidr_ipv4 = var.ingress_cidr_ipv4 + ingress_cidr_ipv6 = var.ingress_cidr_ipv6 # Default prefix list ids ingress_prefix_list_ids = var.ingress_prefix_list_ids @@ -47,26 +47,26 @@ module "sg" { computed_ingress_with_self = concat(var.auto_computed_ingress_with_self, var.computed_ingress_with_self) # Open to IPv4 cidr blocks - computed_ingress_with_cidr_blocks = var.computed_ingress_with_cidr_blocks + computed_ingress_with_cidr_ipv4 = var.computed_ingress_with_cidr_ipv4 # Open to IPv6 cidr blocks - computed_ingress_with_ipv6_cidr_blocks = var.computed_ingress_with_ipv6_cidr_blocks + computed_ingress_with_cidr_ipv6 = var.computed_ingress_with_cidr_ipv6 # Open for security group id - computed_ingress_with_source_security_group_id = var.computed_ingress_with_source_security_group_id + computed_ingress_with_referenced_security_group_id = var.computed_ingress_with_referenced_security_group_id # Open for prefix list id - computed_ingress_with_prefix_list_ids = var.computed_ingress_with_prefix_list_ids + computed_ingress_with_prefix_list_id = var.computed_ingress_with_prefix_list_id ############################# # Number of computed ingress ############################# - number_of_computed_ingress_rules = var.auto_number_of_computed_ingress_rules + var.number_of_computed_ingress_rules - number_of_computed_ingress_with_self = var.auto_number_of_computed_ingress_with_self + var.number_of_computed_ingress_with_self - number_of_computed_ingress_with_cidr_blocks = var.number_of_computed_ingress_with_cidr_blocks - number_of_computed_ingress_with_ipv6_cidr_blocks = var.number_of_computed_ingress_with_ipv6_cidr_blocks - number_of_computed_ingress_with_source_security_group_id = var.number_of_computed_ingress_with_source_security_group_id - number_of_computed_ingress_with_prefix_list_ids = var.number_of_computed_ingress_with_prefix_list_ids + number_of_computed_ingress_rules = var.auto_number_of_computed_ingress_rules + var.number_of_computed_ingress_rules + number_of_computed_ingress_with_self = var.auto_number_of_computed_ingress_with_self + var.number_of_computed_ingress_with_self + number_of_computed_ingress_with_cidr_ipv4 = var.number_of_computed_ingress_with_cidr_ipv4 + number_of_computed_ingress_with_cidr_ipv6 = var.number_of_computed_ingress_with_cidr_ipv6 + number_of_computed_ingress_with_referenced_security_group_id = var.number_of_computed_ingress_with_referenced_security_group_id + number_of_computed_ingress_with_prefix_list_id = var.number_of_computed_ingress_with_prefix_list_id ######### # Egress @@ -78,20 +78,20 @@ module "sg" { egress_with_self = concat(var.auto_egress_with_self, var.egress_with_self) # Open to IPv4 cidr blocks - egress_with_cidr_blocks = var.egress_with_cidr_blocks + egress_with_cidr_ipv4 = var.egress_with_cidr_ipv4 # Open to IPv6 cidr blocks - egress_with_ipv6_cidr_blocks = var.egress_with_ipv6_cidr_blocks + egress_with_cidr_ipv6 = var.egress_with_cidr_ipv6 # Open for security group id - egress_with_source_security_group_id = var.egress_with_source_security_group_id + egress_with_referenced_security_group_id = var.egress_with_referenced_security_group_id # Open for prefix list id - egress_with_prefix_list_ids = var.egress_with_prefix_list_ids + egress_with_prefix_list_id = var.egress_with_prefix_list_id # Default egress CIDR blocks - egress_cidr_blocks = var.egress_cidr_blocks - egress_ipv6_cidr_blocks = var.egress_ipv6_cidr_blocks + egress_cidr_ipv4 = var.egress_cidr_ipv4 + egress_cidr_ipv6 = var.egress_cidr_ipv6 # Default prefix list ids egress_prefix_list_ids = var.egress_prefix_list_ids @@ -106,24 +106,24 @@ module "sg" { computed_egress_with_self = concat(var.auto_computed_egress_with_self, var.computed_egress_with_self) # Open to IPv4 cidr blocks - computed_egress_with_cidr_blocks = var.computed_egress_with_cidr_blocks + computed_egress_with_cidr_ipv4 = var.computed_egress_with_cidr_ipv4 # Open to IPv6 cidr blocks - computed_egress_with_ipv6_cidr_blocks = var.computed_egress_with_ipv6_cidr_blocks + computed_egress_with_cidr_ipv6 = var.computed_egress_with_cidr_ipv6 # Open for security group id - computed_egress_with_source_security_group_id = var.computed_egress_with_source_security_group_id + computed_egress_with_referenced_security_group_id = var.computed_egress_with_referenced_security_group_id # Open for prefix list id - computed_egress_with_prefix_list_ids = var.computed_egress_with_prefix_list_ids + computed_egress_with_prefix_list_id = var.computed_egress_with_prefix_list_id ############################# # Number of computed egress ############################# - number_of_computed_egress_rules = var.auto_number_of_computed_egress_rules + var.number_of_computed_egress_rules - number_of_computed_egress_with_self = var.auto_number_of_computed_egress_with_self + var.number_of_computed_egress_with_self - number_of_computed_egress_with_cidr_blocks = var.number_of_computed_egress_with_cidr_blocks - number_of_computed_egress_with_ipv6_cidr_blocks = var.number_of_computed_egress_with_ipv6_cidr_blocks - number_of_computed_egress_with_source_security_group_id = var.number_of_computed_egress_with_source_security_group_id - number_of_computed_egress_with_prefix_list_ids = var.number_of_computed_egress_with_prefix_list_ids + number_of_computed_egress_rules = var.auto_number_of_computed_egress_rules + var.number_of_computed_egress_rules + number_of_computed_egress_with_self = var.auto_number_of_computed_egress_with_self + var.number_of_computed_egress_with_self + number_of_computed_egress_with_cidr_ipv4 = var.number_of_computed_egress_with_cidr_ipv4 + number_of_computed_egress_with_cidr_ipv6 = var.number_of_computed_egress_with_cidr_ipv6 + number_of_computed_egress_with_referenced_security_group_id = var.number_of_computed_egress_with_referenced_security_group_id + number_of_computed_egress_with_prefix_list_id = var.number_of_computed_egress_with_prefix_list_id } diff --git a/modules/prometheus/variables.tf b/modules/prometheus/variables.tf index 60c8c27b..6590c9e3 100644 --- a/modules/prometheus/variables.tf +++ b/modules/prometheus/variables.tf @@ -56,37 +56,37 @@ variable "ingress_with_self" { default = [] } -variable "ingress_with_cidr_blocks" { - description = "List of ingress rules to create where 'cidr_blocks' is used" +variable "ingress_with_cidr_ipv4" { + description = "List of ingress rules to create where 'cidr_ipv4' is used" type = list(map(string)) default = [] } -variable "ingress_with_ipv6_cidr_blocks" { +variable "ingress_with_cidr_ipv6" { description = "List of ingress rules to create where 'ipv6_cidr_blocks' is used" type = list(map(string)) default = [] } -variable "ingress_with_source_security_group_id" { +variable "ingress_with_referenced_security_group_id" { description = "List of ingress rules to create where 'source_security_group_id' is used" type = list(map(string)) default = [] } -variable "ingress_with_prefix_list_ids" { - description = "List of ingress rules to create where 'prefix_list_ids' is used" +variable "ingress_with_prefix_list_id" { + description = "List of ingress rules to create where 'prefix_list_id' is used" type = list(map(string)) default = [] } -variable "ingress_cidr_blocks" { +variable "ingress_cidr_ipv4" { description = "List of IPv4 CIDR ranges to use on all ingress rules" type = list(string) default = [] } -variable "ingress_ipv6_cidr_blocks" { +variable "ingress_cidr_ipv6" { description = "List of IPv6 CIDR ranges to use on all ingress rules" type = list(string) default = [] @@ -113,26 +113,26 @@ variable "computed_ingress_with_self" { default = [] } -variable "computed_ingress_with_cidr_blocks" { - description = "List of computed ingress rules to create where 'cidr_blocks' is used" +variable "computed_ingress_with_cidr_ipv4" { + description = "List of computed ingress rules to create where 'cidr_ipv4' is used" type = list(map(string)) default = [] } -variable "computed_ingress_with_ipv6_cidr_blocks" { +variable "computed_ingress_with_cidr_ipv6" { description = "List of computed ingress rules to create where 'ipv6_cidr_blocks' is used" type = list(map(string)) default = [] } -variable "computed_ingress_with_source_security_group_id" { +variable "computed_ingress_with_referenced_security_group_id" { description = "List of computed ingress rules to create where 'source_security_group_id' is used" type = list(map(string)) default = [] } -variable "computed_ingress_with_prefix_list_ids" { - description = "List of computed ingress rules to create where 'prefix_list_ids' is used" +variable "computed_ingress_with_prefix_list_id" { + description = "List of computed ingress rules to create where 'prefix_list_id' is used" type = list(map(string)) default = [] } @@ -170,26 +170,26 @@ variable "number_of_computed_ingress_with_self" { default = 0 } -variable "number_of_computed_ingress_with_cidr_blocks" { - description = "Number of computed ingress rules to create where 'cidr_blocks' is used" +variable "number_of_computed_ingress_with_cidr_ipv4" { + description = "Number of computed ingress rules to create where 'cidr_ipv4' is used" type = number default = 0 } -variable "number_of_computed_ingress_with_ipv6_cidr_blocks" { +variable "number_of_computed_ingress_with_cidr_ipv6" { description = "Number of computed ingress rules to create where 'ipv6_cidr_blocks' is used" type = number default = 0 } -variable "number_of_computed_ingress_with_source_security_group_id" { +variable "number_of_computed_ingress_with_referenced_security_group_id" { description = "Number of computed ingress rules to create where 'source_security_group_id' is used" type = number default = 0 } -variable "number_of_computed_ingress_with_prefix_list_ids" { - description = "Number of computed ingress rules to create where 'prefix_list_ids' is used" +variable "number_of_computed_ingress_with_prefix_list_id" { + description = "Number of computed ingress rules to create where 'prefix_list_id' is used" type = number default = 0 } @@ -227,37 +227,37 @@ variable "egress_with_self" { default = [] } -variable "egress_with_cidr_blocks" { - description = "List of egress rules to create where 'cidr_blocks' is used" +variable "egress_with_cidr_ipv4" { + description = "List of egress rules to create where 'cidr_ipv4' is used" type = list(map(string)) default = [] } -variable "egress_with_ipv6_cidr_blocks" { +variable "egress_with_cidr_ipv6" { description = "List of egress rules to create where 'ipv6_cidr_blocks' is used" type = list(map(string)) default = [] } -variable "egress_with_source_security_group_id" { +variable "egress_with_referenced_security_group_id" { description = "List of egress rules to create where 'source_security_group_id' is used" type = list(map(string)) default = [] } -variable "egress_with_prefix_list_ids" { - description = "List of egress rules to create where 'prefix_list_ids' is used" +variable "egress_with_prefix_list_id" { + description = "List of egress rules to create where 'prefix_list_id' is used" type = list(map(string)) default = [] } -variable "egress_cidr_blocks" { +variable "egress_cidr_ipv4" { description = "List of IPv4 CIDR ranges to use on all egress rules" type = list(string) default = ["0.0.0.0/0"] } -variable "egress_ipv6_cidr_blocks" { +variable "egress_cidr_ipv6" { description = "List of IPv6 CIDR ranges to use on all egress rules" type = list(string) default = ["::/0"] @@ -284,26 +284,26 @@ variable "computed_egress_with_self" { default = [] } -variable "computed_egress_with_cidr_blocks" { - description = "List of computed egress rules to create where 'cidr_blocks' is used" +variable "computed_egress_with_cidr_ipv4" { + description = "List of computed egress rules to create where 'cidr_ipv4' is used" type = list(map(string)) default = [] } -variable "computed_egress_with_ipv6_cidr_blocks" { +variable "computed_egress_with_cidr_ipv6" { description = "List of computed egress rules to create where 'ipv6_cidr_blocks' is used" type = list(map(string)) default = [] } -variable "computed_egress_with_source_security_group_id" { +variable "computed_egress_with_referenced_security_group_id" { description = "List of computed egress rules to create where 'source_security_group_id' is used" type = list(map(string)) default = [] } -variable "computed_egress_with_prefix_list_ids" { - description = "List of computed egress rules to create where 'prefix_list_ids' is used" +variable "computed_egress_with_prefix_list_id" { + description = "List of computed egress rules to create where 'prefix_list_id' is used" type = list(map(string)) default = [] } @@ -341,26 +341,26 @@ variable "number_of_computed_egress_with_self" { default = 0 } -variable "number_of_computed_egress_with_cidr_blocks" { - description = "Number of computed egress rules to create where 'cidr_blocks' is used" +variable "number_of_computed_egress_with_cidr_ipv4" { + description = "Number of computed egress rules to create where 'cidr_ipv4' is used" type = number default = 0 } -variable "number_of_computed_egress_with_ipv6_cidr_blocks" { +variable "number_of_computed_egress_with_cidr_ipv6" { description = "Number of computed egress rules to create where 'ipv6_cidr_blocks' is used" type = number default = 0 } -variable "number_of_computed_egress_with_source_security_group_id" { +variable "number_of_computed_egress_with_referenced_security_group_id" { description = "Number of computed egress rules to create where 'source_security_group_id' is used" type = number default = 0 } -variable "number_of_computed_egress_with_prefix_list_ids" { - description = "Number of computed egress rules to create where 'prefix_list_ids' is used" +variable "number_of_computed_egress_with_prefix_list_id" { + description = "Number of computed egress rules to create where 'prefix_list_id' is used" type = number default = 0 } diff --git a/modules/promtail/README.md b/modules/promtail/README.md index 68f93e30..66da6443 100644 --- a/modules/promtail/README.md +++ b/modules/promtail/README.md @@ -55,59 +55,59 @@ No resources. | [computed\_egress\_ipv6\_cidr\_blocks](#input\_computed\_egress\_ipv6\_cidr\_blocks) | List of IPv6 CIDR ranges to use on all computed egress rules | `list(string)` |
[
"::/0"
]
| no | | [computed\_egress\_prefix\_list\_ids](#input\_computed\_egress\_prefix\_list\_ids) | List of prefix list IDs (for allowing access to VPC endpoints) to use on all computed egress rules | `list(string)` | `[]` | no | | [computed\_egress\_rules](#input\_computed\_egress\_rules) | List of computed egress rules to create by name | `list(string)` | `[]` | no | -| [computed\_egress\_with\_cidr\_blocks](#input\_computed\_egress\_with\_cidr\_blocks) | List of computed egress rules to create where 'cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [computed\_egress\_with\_ipv6\_cidr\_blocks](#input\_computed\_egress\_with\_ipv6\_cidr\_blocks) | List of computed egress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [computed\_egress\_with\_prefix\_list\_ids](#input\_computed\_egress\_with\_prefix\_list\_ids) | List of computed egress rules to create where 'prefix\_list\_ids' is used | `list(map(string))` | `[]` | no | +| [computed\_egress\_with\_cidr\_ipv4](#input\_computed\_egress\_with\_cidr\_ipv4) | List of computed egress rules to create where 'cidr\_ipv4' is used | `list(map(string))` | `[]` | no | +| [computed\_egress\_with\_cidr\_ipv6](#input\_computed\_egress\_with\_cidr\_ipv6) | List of computed egress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | +| [computed\_egress\_with\_prefix\_list\_id](#input\_computed\_egress\_with\_prefix\_list\_id) | List of computed egress rules to create where 'prefix\_list\_id' is used | `list(map(string))` | `[]` | no | +| [computed\_egress\_with\_referenced\_security\_group\_id](#input\_computed\_egress\_with\_referenced\_security\_group\_id) | List of computed egress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [computed\_egress\_with\_self](#input\_computed\_egress\_with\_self) | List of computed egress rules to create where 'self' is defined | `list(map(string))` | `[]` | no | -| [computed\_egress\_with\_source\_security\_group\_id](#input\_computed\_egress\_with\_source\_security\_group\_id) | List of computed egress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [computed\_ingress\_cidr\_blocks](#input\_computed\_ingress\_cidr\_blocks) | List of IPv4 CIDR ranges to use on all computed ingress rules | `list(string)` | `[]` | no | | [computed\_ingress\_ipv6\_cidr\_blocks](#input\_computed\_ingress\_ipv6\_cidr\_blocks) | List of IPv6 CIDR ranges to use on all computed ingress rules | `list(string)` | `[]` | no | | [computed\_ingress\_prefix\_list\_ids](#input\_computed\_ingress\_prefix\_list\_ids) | List of prefix list IDs (for allowing access to VPC endpoints) to use on all computed ingress rules | `list(string)` | `[]` | no | | [computed\_ingress\_rules](#input\_computed\_ingress\_rules) | List of computed ingress rules to create by name | `list(string)` | `[]` | no | -| [computed\_ingress\_with\_cidr\_blocks](#input\_computed\_ingress\_with\_cidr\_blocks) | List of computed ingress rules to create where 'cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [computed\_ingress\_with\_ipv6\_cidr\_blocks](#input\_computed\_ingress\_with\_ipv6\_cidr\_blocks) | List of computed ingress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [computed\_ingress\_with\_prefix\_list\_ids](#input\_computed\_ingress\_with\_prefix\_list\_ids) | List of computed ingress rules to create where 'prefix\_list\_ids' is used | `list(map(string))` | `[]` | no | +| [computed\_ingress\_with\_cidr\_ipv4](#input\_computed\_ingress\_with\_cidr\_ipv4) | List of computed ingress rules to create where 'cidr\_ipv4' is used | `list(map(string))` | `[]` | no | +| [computed\_ingress\_with\_cidr\_ipv6](#input\_computed\_ingress\_with\_cidr\_ipv6) | List of computed ingress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | +| [computed\_ingress\_with\_prefix\_list\_id](#input\_computed\_ingress\_with\_prefix\_list\_id) | List of computed ingress rules to create where 'prefix\_list\_id' is used | `list(map(string))` | `[]` | no | +| [computed\_ingress\_with\_referenced\_security\_group\_id](#input\_computed\_ingress\_with\_referenced\_security\_group\_id) | List of computed ingress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [computed\_ingress\_with\_self](#input\_computed\_ingress\_with\_self) | List of computed ingress rules to create where 'self' is defined | `list(map(string))` | `[]` | no | -| [computed\_ingress\_with\_source\_security\_group\_id](#input\_computed\_ingress\_with\_source\_security\_group\_id) | List of computed ingress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [create](#input\_create) | Whether to create security group and all rules | `bool` | `true` | no | | [description](#input\_description) | Description of security group | `string` | `"Security Group managed by Terraform"` | no | -| [egress\_cidr\_blocks](#input\_egress\_cidr\_blocks) | List of IPv4 CIDR ranges to use on all egress rules | `list(string)` |
[
"0.0.0.0/0"
]
| no | -| [egress\_ipv6\_cidr\_blocks](#input\_egress\_ipv6\_cidr\_blocks) | List of IPv6 CIDR ranges to use on all egress rules | `list(string)` |
[
"::/0"
]
| no | +| [egress\_cidr\_ipv4](#input\_egress\_cidr\_ipv4) | List of IPv4 CIDR ranges to use on all egress rules | `list(string)` |
[
"0.0.0.0/0"
]
| no | +| [egress\_cidr\_ipv6](#input\_egress\_cidr\_ipv6) | List of IPv6 CIDR ranges to use on all egress rules | `list(string)` |
[
"::/0"
]
| no | | [egress\_prefix\_list\_ids](#input\_egress\_prefix\_list\_ids) | List of prefix list IDs (for allowing access to VPC endpoints) to use on all egress rules | `list(string)` | `[]` | no | | [egress\_rules](#input\_egress\_rules) | List of egress rules to create by name | `list(string)` | `[]` | no | -| [egress\_with\_cidr\_blocks](#input\_egress\_with\_cidr\_blocks) | List of egress rules to create where 'cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [egress\_with\_ipv6\_cidr\_blocks](#input\_egress\_with\_ipv6\_cidr\_blocks) | List of egress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [egress\_with\_prefix\_list\_ids](#input\_egress\_with\_prefix\_list\_ids) | List of egress rules to create where 'prefix\_list\_ids' is used | `list(map(string))` | `[]` | no | +| [egress\_with\_cidr\_ipv4](#input\_egress\_with\_cidr\_ipv4) | List of egress rules to create where 'cidr\_ipv4' is used | `list(map(string))` | `[]` | no | +| [egress\_with\_cidr\_ipv6](#input\_egress\_with\_cidr\_ipv6) | List of egress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | +| [egress\_with\_prefix\_list\_id](#input\_egress\_with\_prefix\_list\_id) | List of egress rules to create where 'prefix\_list\_id' is used | `list(map(string))` | `[]` | no | +| [egress\_with\_referenced\_security\_group\_id](#input\_egress\_with\_referenced\_security\_group\_id) | List of egress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [egress\_with\_self](#input\_egress\_with\_self) | List of egress rules to create where 'self' is defined | `list(map(string))` | `[]` | no | -| [egress\_with\_source\_security\_group\_id](#input\_egress\_with\_source\_security\_group\_id) | List of egress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | -| [ingress\_cidr\_blocks](#input\_ingress\_cidr\_blocks) | List of IPv4 CIDR ranges to use on all ingress rules | `list(string)` | `[]` | no | -| [ingress\_ipv6\_cidr\_blocks](#input\_ingress\_ipv6\_cidr\_blocks) | List of IPv6 CIDR ranges to use on all ingress rules | `list(string)` | `[]` | no | +| [ingress\_cidr\_ipv4](#input\_ingress\_cidr\_ipv4) | List of IPv4 CIDR ranges to use on all ingress rules | `list(string)` | `[]` | no | +| [ingress\_cidr\_ipv6](#input\_ingress\_cidr\_ipv6) | List of IPv6 CIDR ranges to use on all ingress rules | `list(string)` | `[]` | no | | [ingress\_prefix\_list\_ids](#input\_ingress\_prefix\_list\_ids) | List of prefix list IDs (for allowing access to VPC endpoints) to use on all ingress rules | `list(string)` | `[]` | no | | [ingress\_rules](#input\_ingress\_rules) | List of ingress rules to create by name | `list(string)` | `[]` | no | -| [ingress\_with\_cidr\_blocks](#input\_ingress\_with\_cidr\_blocks) | List of ingress rules to create where 'cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [ingress\_with\_ipv6\_cidr\_blocks](#input\_ingress\_with\_ipv6\_cidr\_blocks) | List of ingress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [ingress\_with\_prefix\_list\_ids](#input\_ingress\_with\_prefix\_list\_ids) | List of ingress rules to create where 'prefix\_list\_ids' is used | `list(map(string))` | `[]` | no | +| [ingress\_with\_cidr\_ipv4](#input\_ingress\_with\_cidr\_ipv4) | List of ingress rules to create where 'cidr\_ipv4' is used | `list(map(string))` | `[]` | no | +| [ingress\_with\_cidr\_ipv6](#input\_ingress\_with\_cidr\_ipv6) | List of ingress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | +| [ingress\_with\_prefix\_list\_id](#input\_ingress\_with\_prefix\_list\_id) | List of ingress rules to create where 'prefix\_list\_id' is used | `list(map(string))` | `[]` | no | +| [ingress\_with\_referenced\_security\_group\_id](#input\_ingress\_with\_referenced\_security\_group\_id) | List of ingress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [ingress\_with\_self](#input\_ingress\_with\_self) | List of ingress rules to create where 'self' is defined | `list(map(string))` | `[]` | no | -| [ingress\_with\_source\_security\_group\_id](#input\_ingress\_with\_source\_security\_group\_id) | List of ingress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [name](#input\_name) | Name of security group | `string` | n/a | yes | | [number\_of\_computed\_egress\_cidr\_blocks](#input\_number\_of\_computed\_egress\_cidr\_blocks) | Number of IPv4 CIDR ranges to use on all computed egress rules | `number` | `0` | no | | [number\_of\_computed\_egress\_ipv6\_cidr\_blocks](#input\_number\_of\_computed\_egress\_ipv6\_cidr\_blocks) | Number of IPv6 CIDR ranges to use on all computed egress rules | `number` | `0` | no | | [number\_of\_computed\_egress\_prefix\_list\_ids](#input\_number\_of\_computed\_egress\_prefix\_list\_ids) | Number of prefix list IDs (for allowing access to VPC endpoints) to use on all computed egress rules | `number` | `0` | no | | [number\_of\_computed\_egress\_rules](#input\_number\_of\_computed\_egress\_rules) | Number of computed egress rules to create by name | `number` | `0` | no | -| [number\_of\_computed\_egress\_with\_cidr\_blocks](#input\_number\_of\_computed\_egress\_with\_cidr\_blocks) | Number of computed egress rules to create where 'cidr\_blocks' is used | `number` | `0` | no | -| [number\_of\_computed\_egress\_with\_ipv6\_cidr\_blocks](#input\_number\_of\_computed\_egress\_with\_ipv6\_cidr\_blocks) | Number of computed egress rules to create where 'ipv6\_cidr\_blocks' is used | `number` | `0` | no | -| [number\_of\_computed\_egress\_with\_prefix\_list\_ids](#input\_number\_of\_computed\_egress\_with\_prefix\_list\_ids) | Number of computed egress rules to create where 'prefix\_list\_ids' is used | `number` | `0` | no | +| [number\_of\_computed\_egress\_with\_cidr\_ipv4](#input\_number\_of\_computed\_egress\_with\_cidr\_ipv4) | Number of computed egress rules to create where 'cidr\_ipv4' is used | `number` | `0` | no | +| [number\_of\_computed\_egress\_with\_cidr\_ipv6](#input\_number\_of\_computed\_egress\_with\_cidr\_ipv6) | Number of computed egress rules to create where 'ipv6\_cidr\_blocks' is used | `number` | `0` | no | +| [number\_of\_computed\_egress\_with\_prefix\_list\_id](#input\_number\_of\_computed\_egress\_with\_prefix\_list\_id) | Number of computed egress rules to create where 'prefix\_list\_id' is used | `number` | `0` | no | +| [number\_of\_computed\_egress\_with\_referenced\_security\_group\_id](#input\_number\_of\_computed\_egress\_with\_referenced\_security\_group\_id) | Number of computed egress rules to create where 'source\_security\_group\_id' is used | `number` | `0` | no | | [number\_of\_computed\_egress\_with\_self](#input\_number\_of\_computed\_egress\_with\_self) | Number of computed egress rules to create where 'self' is defined | `number` | `0` | no | -| [number\_of\_computed\_egress\_with\_source\_security\_group\_id](#input\_number\_of\_computed\_egress\_with\_source\_security\_group\_id) | Number of computed egress rules to create where 'source\_security\_group\_id' is used | `number` | `0` | no | | [number\_of\_computed\_ingress\_cidr\_blocks](#input\_number\_of\_computed\_ingress\_cidr\_blocks) | Number of IPv4 CIDR ranges to use on all computed ingress rules | `number` | `0` | no | | [number\_of\_computed\_ingress\_ipv6\_cidr\_blocks](#input\_number\_of\_computed\_ingress\_ipv6\_cidr\_blocks) | Number of IPv6 CIDR ranges to use on all computed ingress rules | `number` | `0` | no | | [number\_of\_computed\_ingress\_prefix\_list\_ids](#input\_number\_of\_computed\_ingress\_prefix\_list\_ids) | Number of prefix list IDs (for allowing access to VPC endpoints) to use on all computed ingress rules | `number` | `0` | no | | [number\_of\_computed\_ingress\_rules](#input\_number\_of\_computed\_ingress\_rules) | Number of computed ingress rules to create by name | `number` | `0` | no | -| [number\_of\_computed\_ingress\_with\_cidr\_blocks](#input\_number\_of\_computed\_ingress\_with\_cidr\_blocks) | Number of computed ingress rules to create where 'cidr\_blocks' is used | `number` | `0` | no | -| [number\_of\_computed\_ingress\_with\_ipv6\_cidr\_blocks](#input\_number\_of\_computed\_ingress\_with\_ipv6\_cidr\_blocks) | Number of computed ingress rules to create where 'ipv6\_cidr\_blocks' is used | `number` | `0` | no | -| [number\_of\_computed\_ingress\_with\_prefix\_list\_ids](#input\_number\_of\_computed\_ingress\_with\_prefix\_list\_ids) | Number of computed ingress rules to create where 'prefix\_list\_ids' is used | `number` | `0` | no | +| [number\_of\_computed\_ingress\_with\_cidr\_ipv4](#input\_number\_of\_computed\_ingress\_with\_cidr\_ipv4) | Number of computed ingress rules to create where 'cidr\_ipv4' is used | `number` | `0` | no | +| [number\_of\_computed\_ingress\_with\_cidr\_ipv6](#input\_number\_of\_computed\_ingress\_with\_cidr\_ipv6) | Number of computed ingress rules to create where 'ipv6\_cidr\_blocks' is used | `number` | `0` | no | +| [number\_of\_computed\_ingress\_with\_prefix\_list\_id](#input\_number\_of\_computed\_ingress\_with\_prefix\_list\_id) | Number of computed ingress rules to create where 'prefix\_list\_id' is used | `number` | `0` | no | +| [number\_of\_computed\_ingress\_with\_referenced\_security\_group\_id](#input\_number\_of\_computed\_ingress\_with\_referenced\_security\_group\_id) | Number of computed ingress rules to create where 'source\_security\_group\_id' is used | `number` | `0` | no | | [number\_of\_computed\_ingress\_with\_self](#input\_number\_of\_computed\_ingress\_with\_self) | Number of computed ingress rules to create where 'self' is defined | `number` | `0` | no | -| [number\_of\_computed\_ingress\_with\_source\_security\_group\_id](#input\_number\_of\_computed\_ingress\_with\_source\_security\_group\_id) | Number of computed ingress rules to create where 'source\_security\_group\_id' is used | `number` | `0` | no | | [revoke\_rules\_on\_delete](#input\_revoke\_rules\_on\_delete) | Instruct Terraform to revoke all of the Security Groups attached ingress and egress rules before deleting the rule itself. Enable for EMR. | `bool` | `false` | no | | [tags](#input\_tags) | A mapping of tags to assign to security group | `map(string)` | `{}` | no | | [use\_name\_prefix](#input\_use\_name\_prefix) | Whether to use name\_prefix or fixed name. Should be true to able to update security group name after initial creation | `bool` | `true` | no | diff --git a/modules/promtail/main.tf b/modules/promtail/main.tf index 80ea0adb..d2a1bf93 100644 --- a/modules/promtail/main.tf +++ b/modules/promtail/main.tf @@ -19,20 +19,20 @@ module "sg" { ingress_with_self = concat(var.auto_ingress_with_self, var.ingress_with_self) # Open to IPv4 cidr blocks - ingress_with_cidr_blocks = var.ingress_with_cidr_blocks + ingress_with_cidr_ipv4 = var.ingress_with_cidr_ipv4 # Open to IPv6 cidr blocks - ingress_with_ipv6_cidr_blocks = var.ingress_with_ipv6_cidr_blocks + ingress_with_cidr_ipv6 = var.ingress_with_cidr_ipv6 # Open for security group id - ingress_with_source_security_group_id = var.ingress_with_source_security_group_id + ingress_with_referenced_security_group_id = var.ingress_with_referenced_security_group_id # Open for prefix list id - ingress_with_prefix_list_ids = var.ingress_with_prefix_list_ids + ingress_with_prefix_list_id = var.ingress_with_prefix_list_id # Default ingress CIDR blocks - ingress_cidr_blocks = var.ingress_cidr_blocks - ingress_ipv6_cidr_blocks = var.ingress_ipv6_cidr_blocks + ingress_cidr_ipv4 = var.ingress_cidr_ipv4 + ingress_cidr_ipv6 = var.ingress_cidr_ipv6 # Default prefix list ids ingress_prefix_list_ids = var.ingress_prefix_list_ids @@ -47,26 +47,26 @@ module "sg" { computed_ingress_with_self = concat(var.auto_computed_ingress_with_self, var.computed_ingress_with_self) # Open to IPv4 cidr blocks - computed_ingress_with_cidr_blocks = var.computed_ingress_with_cidr_blocks + computed_ingress_with_cidr_ipv4 = var.computed_ingress_with_cidr_ipv4 # Open to IPv6 cidr blocks - computed_ingress_with_ipv6_cidr_blocks = var.computed_ingress_with_ipv6_cidr_blocks + computed_ingress_with_cidr_ipv6 = var.computed_ingress_with_cidr_ipv6 # Open for security group id - computed_ingress_with_source_security_group_id = var.computed_ingress_with_source_security_group_id + computed_ingress_with_referenced_security_group_id = var.computed_ingress_with_referenced_security_group_id # Open for prefix list id - computed_ingress_with_prefix_list_ids = var.computed_ingress_with_prefix_list_ids + computed_ingress_with_prefix_list_id = var.computed_ingress_with_prefix_list_id ############################# # Number of computed ingress ############################# - number_of_computed_ingress_rules = var.auto_number_of_computed_ingress_rules + var.number_of_computed_ingress_rules - number_of_computed_ingress_with_self = var.auto_number_of_computed_ingress_with_self + var.number_of_computed_ingress_with_self - number_of_computed_ingress_with_cidr_blocks = var.number_of_computed_ingress_with_cidr_blocks - number_of_computed_ingress_with_ipv6_cidr_blocks = var.number_of_computed_ingress_with_ipv6_cidr_blocks - number_of_computed_ingress_with_source_security_group_id = var.number_of_computed_ingress_with_source_security_group_id - number_of_computed_ingress_with_prefix_list_ids = var.number_of_computed_ingress_with_prefix_list_ids + number_of_computed_ingress_rules = var.auto_number_of_computed_ingress_rules + var.number_of_computed_ingress_rules + number_of_computed_ingress_with_self = var.auto_number_of_computed_ingress_with_self + var.number_of_computed_ingress_with_self + number_of_computed_ingress_with_cidr_ipv4 = var.number_of_computed_ingress_with_cidr_ipv4 + number_of_computed_ingress_with_cidr_ipv6 = var.number_of_computed_ingress_with_cidr_ipv6 + number_of_computed_ingress_with_referenced_security_group_id = var.number_of_computed_ingress_with_referenced_security_group_id + number_of_computed_ingress_with_prefix_list_id = var.number_of_computed_ingress_with_prefix_list_id ######### # Egress @@ -78,20 +78,20 @@ module "sg" { egress_with_self = concat(var.auto_egress_with_self, var.egress_with_self) # Open to IPv4 cidr blocks - egress_with_cidr_blocks = var.egress_with_cidr_blocks + egress_with_cidr_ipv4 = var.egress_with_cidr_ipv4 # Open to IPv6 cidr blocks - egress_with_ipv6_cidr_blocks = var.egress_with_ipv6_cidr_blocks + egress_with_cidr_ipv6 = var.egress_with_cidr_ipv6 # Open for security group id - egress_with_source_security_group_id = var.egress_with_source_security_group_id + egress_with_referenced_security_group_id = var.egress_with_referenced_security_group_id # Open for prefix list id - egress_with_prefix_list_ids = var.egress_with_prefix_list_ids + egress_with_prefix_list_id = var.egress_with_prefix_list_id # Default egress CIDR blocks - egress_cidr_blocks = var.egress_cidr_blocks - egress_ipv6_cidr_blocks = var.egress_ipv6_cidr_blocks + egress_cidr_ipv4 = var.egress_cidr_ipv4 + egress_cidr_ipv6 = var.egress_cidr_ipv6 # Default prefix list ids egress_prefix_list_ids = var.egress_prefix_list_ids @@ -106,24 +106,24 @@ module "sg" { computed_egress_with_self = concat(var.auto_computed_egress_with_self, var.computed_egress_with_self) # Open to IPv4 cidr blocks - computed_egress_with_cidr_blocks = var.computed_egress_with_cidr_blocks + computed_egress_with_cidr_ipv4 = var.computed_egress_with_cidr_ipv4 # Open to IPv6 cidr blocks - computed_egress_with_ipv6_cidr_blocks = var.computed_egress_with_ipv6_cidr_blocks + computed_egress_with_cidr_ipv6 = var.computed_egress_with_cidr_ipv6 # Open for security group id - computed_egress_with_source_security_group_id = var.computed_egress_with_source_security_group_id + computed_egress_with_referenced_security_group_id = var.computed_egress_with_referenced_security_group_id # Open for prefix list id - computed_egress_with_prefix_list_ids = var.computed_egress_with_prefix_list_ids + computed_egress_with_prefix_list_id = var.computed_egress_with_prefix_list_id ############################# # Number of computed egress ############################# - number_of_computed_egress_rules = var.auto_number_of_computed_egress_rules + var.number_of_computed_egress_rules - number_of_computed_egress_with_self = var.auto_number_of_computed_egress_with_self + var.number_of_computed_egress_with_self - number_of_computed_egress_with_cidr_blocks = var.number_of_computed_egress_with_cidr_blocks - number_of_computed_egress_with_ipv6_cidr_blocks = var.number_of_computed_egress_with_ipv6_cidr_blocks - number_of_computed_egress_with_source_security_group_id = var.number_of_computed_egress_with_source_security_group_id - number_of_computed_egress_with_prefix_list_ids = var.number_of_computed_egress_with_prefix_list_ids + number_of_computed_egress_rules = var.auto_number_of_computed_egress_rules + var.number_of_computed_egress_rules + number_of_computed_egress_with_self = var.auto_number_of_computed_egress_with_self + var.number_of_computed_egress_with_self + number_of_computed_egress_with_cidr_ipv4 = var.number_of_computed_egress_with_cidr_ipv4 + number_of_computed_egress_with_cidr_ipv6 = var.number_of_computed_egress_with_cidr_ipv6 + number_of_computed_egress_with_referenced_security_group_id = var.number_of_computed_egress_with_referenced_security_group_id + number_of_computed_egress_with_prefix_list_id = var.number_of_computed_egress_with_prefix_list_id } diff --git a/modules/promtail/variables.tf b/modules/promtail/variables.tf index 60c8c27b..6590c9e3 100644 --- a/modules/promtail/variables.tf +++ b/modules/promtail/variables.tf @@ -56,37 +56,37 @@ variable "ingress_with_self" { default = [] } -variable "ingress_with_cidr_blocks" { - description = "List of ingress rules to create where 'cidr_blocks' is used" +variable "ingress_with_cidr_ipv4" { + description = "List of ingress rules to create where 'cidr_ipv4' is used" type = list(map(string)) default = [] } -variable "ingress_with_ipv6_cidr_blocks" { +variable "ingress_with_cidr_ipv6" { description = "List of ingress rules to create where 'ipv6_cidr_blocks' is used" type = list(map(string)) default = [] } -variable "ingress_with_source_security_group_id" { +variable "ingress_with_referenced_security_group_id" { description = "List of ingress rules to create where 'source_security_group_id' is used" type = list(map(string)) default = [] } -variable "ingress_with_prefix_list_ids" { - description = "List of ingress rules to create where 'prefix_list_ids' is used" +variable "ingress_with_prefix_list_id" { + description = "List of ingress rules to create where 'prefix_list_id' is used" type = list(map(string)) default = [] } -variable "ingress_cidr_blocks" { +variable "ingress_cidr_ipv4" { description = "List of IPv4 CIDR ranges to use on all ingress rules" type = list(string) default = [] } -variable "ingress_ipv6_cidr_blocks" { +variable "ingress_cidr_ipv6" { description = "List of IPv6 CIDR ranges to use on all ingress rules" type = list(string) default = [] @@ -113,26 +113,26 @@ variable "computed_ingress_with_self" { default = [] } -variable "computed_ingress_with_cidr_blocks" { - description = "List of computed ingress rules to create where 'cidr_blocks' is used" +variable "computed_ingress_with_cidr_ipv4" { + description = "List of computed ingress rules to create where 'cidr_ipv4' is used" type = list(map(string)) default = [] } -variable "computed_ingress_with_ipv6_cidr_blocks" { +variable "computed_ingress_with_cidr_ipv6" { description = "List of computed ingress rules to create where 'ipv6_cidr_blocks' is used" type = list(map(string)) default = [] } -variable "computed_ingress_with_source_security_group_id" { +variable "computed_ingress_with_referenced_security_group_id" { description = "List of computed ingress rules to create where 'source_security_group_id' is used" type = list(map(string)) default = [] } -variable "computed_ingress_with_prefix_list_ids" { - description = "List of computed ingress rules to create where 'prefix_list_ids' is used" +variable "computed_ingress_with_prefix_list_id" { + description = "List of computed ingress rules to create where 'prefix_list_id' is used" type = list(map(string)) default = [] } @@ -170,26 +170,26 @@ variable "number_of_computed_ingress_with_self" { default = 0 } -variable "number_of_computed_ingress_with_cidr_blocks" { - description = "Number of computed ingress rules to create where 'cidr_blocks' is used" +variable "number_of_computed_ingress_with_cidr_ipv4" { + description = "Number of computed ingress rules to create where 'cidr_ipv4' is used" type = number default = 0 } -variable "number_of_computed_ingress_with_ipv6_cidr_blocks" { +variable "number_of_computed_ingress_with_cidr_ipv6" { description = "Number of computed ingress rules to create where 'ipv6_cidr_blocks' is used" type = number default = 0 } -variable "number_of_computed_ingress_with_source_security_group_id" { +variable "number_of_computed_ingress_with_referenced_security_group_id" { description = "Number of computed ingress rules to create where 'source_security_group_id' is used" type = number default = 0 } -variable "number_of_computed_ingress_with_prefix_list_ids" { - description = "Number of computed ingress rules to create where 'prefix_list_ids' is used" +variable "number_of_computed_ingress_with_prefix_list_id" { + description = "Number of computed ingress rules to create where 'prefix_list_id' is used" type = number default = 0 } @@ -227,37 +227,37 @@ variable "egress_with_self" { default = [] } -variable "egress_with_cidr_blocks" { - description = "List of egress rules to create where 'cidr_blocks' is used" +variable "egress_with_cidr_ipv4" { + description = "List of egress rules to create where 'cidr_ipv4' is used" type = list(map(string)) default = [] } -variable "egress_with_ipv6_cidr_blocks" { +variable "egress_with_cidr_ipv6" { description = "List of egress rules to create where 'ipv6_cidr_blocks' is used" type = list(map(string)) default = [] } -variable "egress_with_source_security_group_id" { +variable "egress_with_referenced_security_group_id" { description = "List of egress rules to create where 'source_security_group_id' is used" type = list(map(string)) default = [] } -variable "egress_with_prefix_list_ids" { - description = "List of egress rules to create where 'prefix_list_ids' is used" +variable "egress_with_prefix_list_id" { + description = "List of egress rules to create where 'prefix_list_id' is used" type = list(map(string)) default = [] } -variable "egress_cidr_blocks" { +variable "egress_cidr_ipv4" { description = "List of IPv4 CIDR ranges to use on all egress rules" type = list(string) default = ["0.0.0.0/0"] } -variable "egress_ipv6_cidr_blocks" { +variable "egress_cidr_ipv6" { description = "List of IPv6 CIDR ranges to use on all egress rules" type = list(string) default = ["::/0"] @@ -284,26 +284,26 @@ variable "computed_egress_with_self" { default = [] } -variable "computed_egress_with_cidr_blocks" { - description = "List of computed egress rules to create where 'cidr_blocks' is used" +variable "computed_egress_with_cidr_ipv4" { + description = "List of computed egress rules to create where 'cidr_ipv4' is used" type = list(map(string)) default = [] } -variable "computed_egress_with_ipv6_cidr_blocks" { +variable "computed_egress_with_cidr_ipv6" { description = "List of computed egress rules to create where 'ipv6_cidr_blocks' is used" type = list(map(string)) default = [] } -variable "computed_egress_with_source_security_group_id" { +variable "computed_egress_with_referenced_security_group_id" { description = "List of computed egress rules to create where 'source_security_group_id' is used" type = list(map(string)) default = [] } -variable "computed_egress_with_prefix_list_ids" { - description = "List of computed egress rules to create where 'prefix_list_ids' is used" +variable "computed_egress_with_prefix_list_id" { + description = "List of computed egress rules to create where 'prefix_list_id' is used" type = list(map(string)) default = [] } @@ -341,26 +341,26 @@ variable "number_of_computed_egress_with_self" { default = 0 } -variable "number_of_computed_egress_with_cidr_blocks" { - description = "Number of computed egress rules to create where 'cidr_blocks' is used" +variable "number_of_computed_egress_with_cidr_ipv4" { + description = "Number of computed egress rules to create where 'cidr_ipv4' is used" type = number default = 0 } -variable "number_of_computed_egress_with_ipv6_cidr_blocks" { +variable "number_of_computed_egress_with_cidr_ipv6" { description = "Number of computed egress rules to create where 'ipv6_cidr_blocks' is used" type = number default = 0 } -variable "number_of_computed_egress_with_source_security_group_id" { +variable "number_of_computed_egress_with_referenced_security_group_id" { description = "Number of computed egress rules to create where 'source_security_group_id' is used" type = number default = 0 } -variable "number_of_computed_egress_with_prefix_list_ids" { - description = "Number of computed egress rules to create where 'prefix_list_ids' is used" +variable "number_of_computed_egress_with_prefix_list_id" { + description = "Number of computed egress rules to create where 'prefix_list_id' is used" type = number default = 0 } diff --git a/modules/puppet/README.md b/modules/puppet/README.md index 9c5c9a27..2ba6748e 100644 --- a/modules/puppet/README.md +++ b/modules/puppet/README.md @@ -55,59 +55,59 @@ No resources. | [computed\_egress\_ipv6\_cidr\_blocks](#input\_computed\_egress\_ipv6\_cidr\_blocks) | List of IPv6 CIDR ranges to use on all computed egress rules | `list(string)` |
[
"::/0"
]
| no | | [computed\_egress\_prefix\_list\_ids](#input\_computed\_egress\_prefix\_list\_ids) | List of prefix list IDs (for allowing access to VPC endpoints) to use on all computed egress rules | `list(string)` | `[]` | no | | [computed\_egress\_rules](#input\_computed\_egress\_rules) | List of computed egress rules to create by name | `list(string)` | `[]` | no | -| [computed\_egress\_with\_cidr\_blocks](#input\_computed\_egress\_with\_cidr\_blocks) | List of computed egress rules to create where 'cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [computed\_egress\_with\_ipv6\_cidr\_blocks](#input\_computed\_egress\_with\_ipv6\_cidr\_blocks) | List of computed egress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [computed\_egress\_with\_prefix\_list\_ids](#input\_computed\_egress\_with\_prefix\_list\_ids) | List of computed egress rules to create where 'prefix\_list\_ids' is used | `list(map(string))` | `[]` | no | +| [computed\_egress\_with\_cidr\_ipv4](#input\_computed\_egress\_with\_cidr\_ipv4) | List of computed egress rules to create where 'cidr\_ipv4' is used | `list(map(string))` | `[]` | no | +| [computed\_egress\_with\_cidr\_ipv6](#input\_computed\_egress\_with\_cidr\_ipv6) | List of computed egress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | +| [computed\_egress\_with\_prefix\_list\_id](#input\_computed\_egress\_with\_prefix\_list\_id) | List of computed egress rules to create where 'prefix\_list\_id' is used | `list(map(string))` | `[]` | no | +| [computed\_egress\_with\_referenced\_security\_group\_id](#input\_computed\_egress\_with\_referenced\_security\_group\_id) | List of computed egress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [computed\_egress\_with\_self](#input\_computed\_egress\_with\_self) | List of computed egress rules to create where 'self' is defined | `list(map(string))` | `[]` | no | -| [computed\_egress\_with\_source\_security\_group\_id](#input\_computed\_egress\_with\_source\_security\_group\_id) | List of computed egress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [computed\_ingress\_cidr\_blocks](#input\_computed\_ingress\_cidr\_blocks) | List of IPv4 CIDR ranges to use on all computed ingress rules | `list(string)` | `[]` | no | | [computed\_ingress\_ipv6\_cidr\_blocks](#input\_computed\_ingress\_ipv6\_cidr\_blocks) | List of IPv6 CIDR ranges to use on all computed ingress rules | `list(string)` | `[]` | no | | [computed\_ingress\_prefix\_list\_ids](#input\_computed\_ingress\_prefix\_list\_ids) | List of prefix list IDs (for allowing access to VPC endpoints) to use on all computed ingress rules | `list(string)` | `[]` | no | | [computed\_ingress\_rules](#input\_computed\_ingress\_rules) | List of computed ingress rules to create by name | `list(string)` | `[]` | no | -| [computed\_ingress\_with\_cidr\_blocks](#input\_computed\_ingress\_with\_cidr\_blocks) | List of computed ingress rules to create where 'cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [computed\_ingress\_with\_ipv6\_cidr\_blocks](#input\_computed\_ingress\_with\_ipv6\_cidr\_blocks) | List of computed ingress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [computed\_ingress\_with\_prefix\_list\_ids](#input\_computed\_ingress\_with\_prefix\_list\_ids) | List of computed ingress rules to create where 'prefix\_list\_ids' is used | `list(map(string))` | `[]` | no | +| [computed\_ingress\_with\_cidr\_ipv4](#input\_computed\_ingress\_with\_cidr\_ipv4) | List of computed ingress rules to create where 'cidr\_ipv4' is used | `list(map(string))` | `[]` | no | +| [computed\_ingress\_with\_cidr\_ipv6](#input\_computed\_ingress\_with\_cidr\_ipv6) | List of computed ingress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | +| [computed\_ingress\_with\_prefix\_list\_id](#input\_computed\_ingress\_with\_prefix\_list\_id) | List of computed ingress rules to create where 'prefix\_list\_id' is used | `list(map(string))` | `[]` | no | +| [computed\_ingress\_with\_referenced\_security\_group\_id](#input\_computed\_ingress\_with\_referenced\_security\_group\_id) | List of computed ingress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [computed\_ingress\_with\_self](#input\_computed\_ingress\_with\_self) | List of computed ingress rules to create where 'self' is defined | `list(map(string))` | `[]` | no | -| [computed\_ingress\_with\_source\_security\_group\_id](#input\_computed\_ingress\_with\_source\_security\_group\_id) | List of computed ingress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [create](#input\_create) | Whether to create security group and all rules | `bool` | `true` | no | | [description](#input\_description) | Description of security group | `string` | `"Security Group managed by Terraform"` | no | -| [egress\_cidr\_blocks](#input\_egress\_cidr\_blocks) | List of IPv4 CIDR ranges to use on all egress rules | `list(string)` |
[
"0.0.0.0/0"
]
| no | -| [egress\_ipv6\_cidr\_blocks](#input\_egress\_ipv6\_cidr\_blocks) | List of IPv6 CIDR ranges to use on all egress rules | `list(string)` |
[
"::/0"
]
| no | +| [egress\_cidr\_ipv4](#input\_egress\_cidr\_ipv4) | List of IPv4 CIDR ranges to use on all egress rules | `list(string)` |
[
"0.0.0.0/0"
]
| no | +| [egress\_cidr\_ipv6](#input\_egress\_cidr\_ipv6) | List of IPv6 CIDR ranges to use on all egress rules | `list(string)` |
[
"::/0"
]
| no | | [egress\_prefix\_list\_ids](#input\_egress\_prefix\_list\_ids) | List of prefix list IDs (for allowing access to VPC endpoints) to use on all egress rules | `list(string)` | `[]` | no | | [egress\_rules](#input\_egress\_rules) | List of egress rules to create by name | `list(string)` | `[]` | no | -| [egress\_with\_cidr\_blocks](#input\_egress\_with\_cidr\_blocks) | List of egress rules to create where 'cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [egress\_with\_ipv6\_cidr\_blocks](#input\_egress\_with\_ipv6\_cidr\_blocks) | List of egress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [egress\_with\_prefix\_list\_ids](#input\_egress\_with\_prefix\_list\_ids) | List of egress rules to create where 'prefix\_list\_ids' is used | `list(map(string))` | `[]` | no | +| [egress\_with\_cidr\_ipv4](#input\_egress\_with\_cidr\_ipv4) | List of egress rules to create where 'cidr\_ipv4' is used | `list(map(string))` | `[]` | no | +| [egress\_with\_cidr\_ipv6](#input\_egress\_with\_cidr\_ipv6) | List of egress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | +| [egress\_with\_prefix\_list\_id](#input\_egress\_with\_prefix\_list\_id) | List of egress rules to create where 'prefix\_list\_id' is used | `list(map(string))` | `[]` | no | +| [egress\_with\_referenced\_security\_group\_id](#input\_egress\_with\_referenced\_security\_group\_id) | List of egress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [egress\_with\_self](#input\_egress\_with\_self) | List of egress rules to create where 'self' is defined | `list(map(string))` | `[]` | no | -| [egress\_with\_source\_security\_group\_id](#input\_egress\_with\_source\_security\_group\_id) | List of egress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | -| [ingress\_cidr\_blocks](#input\_ingress\_cidr\_blocks) | List of IPv4 CIDR ranges to use on all ingress rules | `list(string)` | `[]` | no | -| [ingress\_ipv6\_cidr\_blocks](#input\_ingress\_ipv6\_cidr\_blocks) | List of IPv6 CIDR ranges to use on all ingress rules | `list(string)` | `[]` | no | +| [ingress\_cidr\_ipv4](#input\_ingress\_cidr\_ipv4) | List of IPv4 CIDR ranges to use on all ingress rules | `list(string)` | `[]` | no | +| [ingress\_cidr\_ipv6](#input\_ingress\_cidr\_ipv6) | List of IPv6 CIDR ranges to use on all ingress rules | `list(string)` | `[]` | no | | [ingress\_prefix\_list\_ids](#input\_ingress\_prefix\_list\_ids) | List of prefix list IDs (for allowing access to VPC endpoints) to use on all ingress rules | `list(string)` | `[]` | no | | [ingress\_rules](#input\_ingress\_rules) | List of ingress rules to create by name | `list(string)` | `[]` | no | -| [ingress\_with\_cidr\_blocks](#input\_ingress\_with\_cidr\_blocks) | List of ingress rules to create where 'cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [ingress\_with\_ipv6\_cidr\_blocks](#input\_ingress\_with\_ipv6\_cidr\_blocks) | List of ingress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [ingress\_with\_prefix\_list\_ids](#input\_ingress\_with\_prefix\_list\_ids) | List of ingress rules to create where 'prefix\_list\_ids' is used | `list(map(string))` | `[]` | no | +| [ingress\_with\_cidr\_ipv4](#input\_ingress\_with\_cidr\_ipv4) | List of ingress rules to create where 'cidr\_ipv4' is used | `list(map(string))` | `[]` | no | +| [ingress\_with\_cidr\_ipv6](#input\_ingress\_with\_cidr\_ipv6) | List of ingress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | +| [ingress\_with\_prefix\_list\_id](#input\_ingress\_with\_prefix\_list\_id) | List of ingress rules to create where 'prefix\_list\_id' is used | `list(map(string))` | `[]` | no | +| [ingress\_with\_referenced\_security\_group\_id](#input\_ingress\_with\_referenced\_security\_group\_id) | List of ingress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [ingress\_with\_self](#input\_ingress\_with\_self) | List of ingress rules to create where 'self' is defined | `list(map(string))` | `[]` | no | -| [ingress\_with\_source\_security\_group\_id](#input\_ingress\_with\_source\_security\_group\_id) | List of ingress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [name](#input\_name) | Name of security group | `string` | n/a | yes | | [number\_of\_computed\_egress\_cidr\_blocks](#input\_number\_of\_computed\_egress\_cidr\_blocks) | Number of IPv4 CIDR ranges to use on all computed egress rules | `number` | `0` | no | | [number\_of\_computed\_egress\_ipv6\_cidr\_blocks](#input\_number\_of\_computed\_egress\_ipv6\_cidr\_blocks) | Number of IPv6 CIDR ranges to use on all computed egress rules | `number` | `0` | no | | [number\_of\_computed\_egress\_prefix\_list\_ids](#input\_number\_of\_computed\_egress\_prefix\_list\_ids) | Number of prefix list IDs (for allowing access to VPC endpoints) to use on all computed egress rules | `number` | `0` | no | | [number\_of\_computed\_egress\_rules](#input\_number\_of\_computed\_egress\_rules) | Number of computed egress rules to create by name | `number` | `0` | no | -| [number\_of\_computed\_egress\_with\_cidr\_blocks](#input\_number\_of\_computed\_egress\_with\_cidr\_blocks) | Number of computed egress rules to create where 'cidr\_blocks' is used | `number` | `0` | no | -| [number\_of\_computed\_egress\_with\_ipv6\_cidr\_blocks](#input\_number\_of\_computed\_egress\_with\_ipv6\_cidr\_blocks) | Number of computed egress rules to create where 'ipv6\_cidr\_blocks' is used | `number` | `0` | no | -| [number\_of\_computed\_egress\_with\_prefix\_list\_ids](#input\_number\_of\_computed\_egress\_with\_prefix\_list\_ids) | Number of computed egress rules to create where 'prefix\_list\_ids' is used | `number` | `0` | no | +| [number\_of\_computed\_egress\_with\_cidr\_ipv4](#input\_number\_of\_computed\_egress\_with\_cidr\_ipv4) | Number of computed egress rules to create where 'cidr\_ipv4' is used | `number` | `0` | no | +| [number\_of\_computed\_egress\_with\_cidr\_ipv6](#input\_number\_of\_computed\_egress\_with\_cidr\_ipv6) | Number of computed egress rules to create where 'ipv6\_cidr\_blocks' is used | `number` | `0` | no | +| [number\_of\_computed\_egress\_with\_prefix\_list\_id](#input\_number\_of\_computed\_egress\_with\_prefix\_list\_id) | Number of computed egress rules to create where 'prefix\_list\_id' is used | `number` | `0` | no | +| [number\_of\_computed\_egress\_with\_referenced\_security\_group\_id](#input\_number\_of\_computed\_egress\_with\_referenced\_security\_group\_id) | Number of computed egress rules to create where 'source\_security\_group\_id' is used | `number` | `0` | no | | [number\_of\_computed\_egress\_with\_self](#input\_number\_of\_computed\_egress\_with\_self) | Number of computed egress rules to create where 'self' is defined | `number` | `0` | no | -| [number\_of\_computed\_egress\_with\_source\_security\_group\_id](#input\_number\_of\_computed\_egress\_with\_source\_security\_group\_id) | Number of computed egress rules to create where 'source\_security\_group\_id' is used | `number` | `0` | no | | [number\_of\_computed\_ingress\_cidr\_blocks](#input\_number\_of\_computed\_ingress\_cidr\_blocks) | Number of IPv4 CIDR ranges to use on all computed ingress rules | `number` | `0` | no | | [number\_of\_computed\_ingress\_ipv6\_cidr\_blocks](#input\_number\_of\_computed\_ingress\_ipv6\_cidr\_blocks) | Number of IPv6 CIDR ranges to use on all computed ingress rules | `number` | `0` | no | | [number\_of\_computed\_ingress\_prefix\_list\_ids](#input\_number\_of\_computed\_ingress\_prefix\_list\_ids) | Number of prefix list IDs (for allowing access to VPC endpoints) to use on all computed ingress rules | `number` | `0` | no | | [number\_of\_computed\_ingress\_rules](#input\_number\_of\_computed\_ingress\_rules) | Number of computed ingress rules to create by name | `number` | `0` | no | -| [number\_of\_computed\_ingress\_with\_cidr\_blocks](#input\_number\_of\_computed\_ingress\_with\_cidr\_blocks) | Number of computed ingress rules to create where 'cidr\_blocks' is used | `number` | `0` | no | -| [number\_of\_computed\_ingress\_with\_ipv6\_cidr\_blocks](#input\_number\_of\_computed\_ingress\_with\_ipv6\_cidr\_blocks) | Number of computed ingress rules to create where 'ipv6\_cidr\_blocks' is used | `number` | `0` | no | -| [number\_of\_computed\_ingress\_with\_prefix\_list\_ids](#input\_number\_of\_computed\_ingress\_with\_prefix\_list\_ids) | Number of computed ingress rules to create where 'prefix\_list\_ids' is used | `number` | `0` | no | +| [number\_of\_computed\_ingress\_with\_cidr\_ipv4](#input\_number\_of\_computed\_ingress\_with\_cidr\_ipv4) | Number of computed ingress rules to create where 'cidr\_ipv4' is used | `number` | `0` | no | +| [number\_of\_computed\_ingress\_with\_cidr\_ipv6](#input\_number\_of\_computed\_ingress\_with\_cidr\_ipv6) | Number of computed ingress rules to create where 'ipv6\_cidr\_blocks' is used | `number` | `0` | no | +| [number\_of\_computed\_ingress\_with\_prefix\_list\_id](#input\_number\_of\_computed\_ingress\_with\_prefix\_list\_id) | Number of computed ingress rules to create where 'prefix\_list\_id' is used | `number` | `0` | no | +| [number\_of\_computed\_ingress\_with\_referenced\_security\_group\_id](#input\_number\_of\_computed\_ingress\_with\_referenced\_security\_group\_id) | Number of computed ingress rules to create where 'source\_security\_group\_id' is used | `number` | `0` | no | | [number\_of\_computed\_ingress\_with\_self](#input\_number\_of\_computed\_ingress\_with\_self) | Number of computed ingress rules to create where 'self' is defined | `number` | `0` | no | -| [number\_of\_computed\_ingress\_with\_source\_security\_group\_id](#input\_number\_of\_computed\_ingress\_with\_source\_security\_group\_id) | Number of computed ingress rules to create where 'source\_security\_group\_id' is used | `number` | `0` | no | | [revoke\_rules\_on\_delete](#input\_revoke\_rules\_on\_delete) | Instruct Terraform to revoke all of the Security Groups attached ingress and egress rules before deleting the rule itself. Enable for EMR. | `bool` | `false` | no | | [tags](#input\_tags) | A mapping of tags to assign to security group | `map(string)` | `{}` | no | | [use\_name\_prefix](#input\_use\_name\_prefix) | Whether to use name\_prefix or fixed name. Should be true to able to update security group name after initial creation | `bool` | `true` | no | diff --git a/modules/puppet/main.tf b/modules/puppet/main.tf index 80ea0adb..d2a1bf93 100644 --- a/modules/puppet/main.tf +++ b/modules/puppet/main.tf @@ -19,20 +19,20 @@ module "sg" { ingress_with_self = concat(var.auto_ingress_with_self, var.ingress_with_self) # Open to IPv4 cidr blocks - ingress_with_cidr_blocks = var.ingress_with_cidr_blocks + ingress_with_cidr_ipv4 = var.ingress_with_cidr_ipv4 # Open to IPv6 cidr blocks - ingress_with_ipv6_cidr_blocks = var.ingress_with_ipv6_cidr_blocks + ingress_with_cidr_ipv6 = var.ingress_with_cidr_ipv6 # Open for security group id - ingress_with_source_security_group_id = var.ingress_with_source_security_group_id + ingress_with_referenced_security_group_id = var.ingress_with_referenced_security_group_id # Open for prefix list id - ingress_with_prefix_list_ids = var.ingress_with_prefix_list_ids + ingress_with_prefix_list_id = var.ingress_with_prefix_list_id # Default ingress CIDR blocks - ingress_cidr_blocks = var.ingress_cidr_blocks - ingress_ipv6_cidr_blocks = var.ingress_ipv6_cidr_blocks + ingress_cidr_ipv4 = var.ingress_cidr_ipv4 + ingress_cidr_ipv6 = var.ingress_cidr_ipv6 # Default prefix list ids ingress_prefix_list_ids = var.ingress_prefix_list_ids @@ -47,26 +47,26 @@ module "sg" { computed_ingress_with_self = concat(var.auto_computed_ingress_with_self, var.computed_ingress_with_self) # Open to IPv4 cidr blocks - computed_ingress_with_cidr_blocks = var.computed_ingress_with_cidr_blocks + computed_ingress_with_cidr_ipv4 = var.computed_ingress_with_cidr_ipv4 # Open to IPv6 cidr blocks - computed_ingress_with_ipv6_cidr_blocks = var.computed_ingress_with_ipv6_cidr_blocks + computed_ingress_with_cidr_ipv6 = var.computed_ingress_with_cidr_ipv6 # Open for security group id - computed_ingress_with_source_security_group_id = var.computed_ingress_with_source_security_group_id + computed_ingress_with_referenced_security_group_id = var.computed_ingress_with_referenced_security_group_id # Open for prefix list id - computed_ingress_with_prefix_list_ids = var.computed_ingress_with_prefix_list_ids + computed_ingress_with_prefix_list_id = var.computed_ingress_with_prefix_list_id ############################# # Number of computed ingress ############################# - number_of_computed_ingress_rules = var.auto_number_of_computed_ingress_rules + var.number_of_computed_ingress_rules - number_of_computed_ingress_with_self = var.auto_number_of_computed_ingress_with_self + var.number_of_computed_ingress_with_self - number_of_computed_ingress_with_cidr_blocks = var.number_of_computed_ingress_with_cidr_blocks - number_of_computed_ingress_with_ipv6_cidr_blocks = var.number_of_computed_ingress_with_ipv6_cidr_blocks - number_of_computed_ingress_with_source_security_group_id = var.number_of_computed_ingress_with_source_security_group_id - number_of_computed_ingress_with_prefix_list_ids = var.number_of_computed_ingress_with_prefix_list_ids + number_of_computed_ingress_rules = var.auto_number_of_computed_ingress_rules + var.number_of_computed_ingress_rules + number_of_computed_ingress_with_self = var.auto_number_of_computed_ingress_with_self + var.number_of_computed_ingress_with_self + number_of_computed_ingress_with_cidr_ipv4 = var.number_of_computed_ingress_with_cidr_ipv4 + number_of_computed_ingress_with_cidr_ipv6 = var.number_of_computed_ingress_with_cidr_ipv6 + number_of_computed_ingress_with_referenced_security_group_id = var.number_of_computed_ingress_with_referenced_security_group_id + number_of_computed_ingress_with_prefix_list_id = var.number_of_computed_ingress_with_prefix_list_id ######### # Egress @@ -78,20 +78,20 @@ module "sg" { egress_with_self = concat(var.auto_egress_with_self, var.egress_with_self) # Open to IPv4 cidr blocks - egress_with_cidr_blocks = var.egress_with_cidr_blocks + egress_with_cidr_ipv4 = var.egress_with_cidr_ipv4 # Open to IPv6 cidr blocks - egress_with_ipv6_cidr_blocks = var.egress_with_ipv6_cidr_blocks + egress_with_cidr_ipv6 = var.egress_with_cidr_ipv6 # Open for security group id - egress_with_source_security_group_id = var.egress_with_source_security_group_id + egress_with_referenced_security_group_id = var.egress_with_referenced_security_group_id # Open for prefix list id - egress_with_prefix_list_ids = var.egress_with_prefix_list_ids + egress_with_prefix_list_id = var.egress_with_prefix_list_id # Default egress CIDR blocks - egress_cidr_blocks = var.egress_cidr_blocks - egress_ipv6_cidr_blocks = var.egress_ipv6_cidr_blocks + egress_cidr_ipv4 = var.egress_cidr_ipv4 + egress_cidr_ipv6 = var.egress_cidr_ipv6 # Default prefix list ids egress_prefix_list_ids = var.egress_prefix_list_ids @@ -106,24 +106,24 @@ module "sg" { computed_egress_with_self = concat(var.auto_computed_egress_with_self, var.computed_egress_with_self) # Open to IPv4 cidr blocks - computed_egress_with_cidr_blocks = var.computed_egress_with_cidr_blocks + computed_egress_with_cidr_ipv4 = var.computed_egress_with_cidr_ipv4 # Open to IPv6 cidr blocks - computed_egress_with_ipv6_cidr_blocks = var.computed_egress_with_ipv6_cidr_blocks + computed_egress_with_cidr_ipv6 = var.computed_egress_with_cidr_ipv6 # Open for security group id - computed_egress_with_source_security_group_id = var.computed_egress_with_source_security_group_id + computed_egress_with_referenced_security_group_id = var.computed_egress_with_referenced_security_group_id # Open for prefix list id - computed_egress_with_prefix_list_ids = var.computed_egress_with_prefix_list_ids + computed_egress_with_prefix_list_id = var.computed_egress_with_prefix_list_id ############################# # Number of computed egress ############################# - number_of_computed_egress_rules = var.auto_number_of_computed_egress_rules + var.number_of_computed_egress_rules - number_of_computed_egress_with_self = var.auto_number_of_computed_egress_with_self + var.number_of_computed_egress_with_self - number_of_computed_egress_with_cidr_blocks = var.number_of_computed_egress_with_cidr_blocks - number_of_computed_egress_with_ipv6_cidr_blocks = var.number_of_computed_egress_with_ipv6_cidr_blocks - number_of_computed_egress_with_source_security_group_id = var.number_of_computed_egress_with_source_security_group_id - number_of_computed_egress_with_prefix_list_ids = var.number_of_computed_egress_with_prefix_list_ids + number_of_computed_egress_rules = var.auto_number_of_computed_egress_rules + var.number_of_computed_egress_rules + number_of_computed_egress_with_self = var.auto_number_of_computed_egress_with_self + var.number_of_computed_egress_with_self + number_of_computed_egress_with_cidr_ipv4 = var.number_of_computed_egress_with_cidr_ipv4 + number_of_computed_egress_with_cidr_ipv6 = var.number_of_computed_egress_with_cidr_ipv6 + number_of_computed_egress_with_referenced_security_group_id = var.number_of_computed_egress_with_referenced_security_group_id + number_of_computed_egress_with_prefix_list_id = var.number_of_computed_egress_with_prefix_list_id } diff --git a/modules/puppet/variables.tf b/modules/puppet/variables.tf index 60c8c27b..6590c9e3 100644 --- a/modules/puppet/variables.tf +++ b/modules/puppet/variables.tf @@ -56,37 +56,37 @@ variable "ingress_with_self" { default = [] } -variable "ingress_with_cidr_blocks" { - description = "List of ingress rules to create where 'cidr_blocks' is used" +variable "ingress_with_cidr_ipv4" { + description = "List of ingress rules to create where 'cidr_ipv4' is used" type = list(map(string)) default = [] } -variable "ingress_with_ipv6_cidr_blocks" { +variable "ingress_with_cidr_ipv6" { description = "List of ingress rules to create where 'ipv6_cidr_blocks' is used" type = list(map(string)) default = [] } -variable "ingress_with_source_security_group_id" { +variable "ingress_with_referenced_security_group_id" { description = "List of ingress rules to create where 'source_security_group_id' is used" type = list(map(string)) default = [] } -variable "ingress_with_prefix_list_ids" { - description = "List of ingress rules to create where 'prefix_list_ids' is used" +variable "ingress_with_prefix_list_id" { + description = "List of ingress rules to create where 'prefix_list_id' is used" type = list(map(string)) default = [] } -variable "ingress_cidr_blocks" { +variable "ingress_cidr_ipv4" { description = "List of IPv4 CIDR ranges to use on all ingress rules" type = list(string) default = [] } -variable "ingress_ipv6_cidr_blocks" { +variable "ingress_cidr_ipv6" { description = "List of IPv6 CIDR ranges to use on all ingress rules" type = list(string) default = [] @@ -113,26 +113,26 @@ variable "computed_ingress_with_self" { default = [] } -variable "computed_ingress_with_cidr_blocks" { - description = "List of computed ingress rules to create where 'cidr_blocks' is used" +variable "computed_ingress_with_cidr_ipv4" { + description = "List of computed ingress rules to create where 'cidr_ipv4' is used" type = list(map(string)) default = [] } -variable "computed_ingress_with_ipv6_cidr_blocks" { +variable "computed_ingress_with_cidr_ipv6" { description = "List of computed ingress rules to create where 'ipv6_cidr_blocks' is used" type = list(map(string)) default = [] } -variable "computed_ingress_with_source_security_group_id" { +variable "computed_ingress_with_referenced_security_group_id" { description = "List of computed ingress rules to create where 'source_security_group_id' is used" type = list(map(string)) default = [] } -variable "computed_ingress_with_prefix_list_ids" { - description = "List of computed ingress rules to create where 'prefix_list_ids' is used" +variable "computed_ingress_with_prefix_list_id" { + description = "List of computed ingress rules to create where 'prefix_list_id' is used" type = list(map(string)) default = [] } @@ -170,26 +170,26 @@ variable "number_of_computed_ingress_with_self" { default = 0 } -variable "number_of_computed_ingress_with_cidr_blocks" { - description = "Number of computed ingress rules to create where 'cidr_blocks' is used" +variable "number_of_computed_ingress_with_cidr_ipv4" { + description = "Number of computed ingress rules to create where 'cidr_ipv4' is used" type = number default = 0 } -variable "number_of_computed_ingress_with_ipv6_cidr_blocks" { +variable "number_of_computed_ingress_with_cidr_ipv6" { description = "Number of computed ingress rules to create where 'ipv6_cidr_blocks' is used" type = number default = 0 } -variable "number_of_computed_ingress_with_source_security_group_id" { +variable "number_of_computed_ingress_with_referenced_security_group_id" { description = "Number of computed ingress rules to create where 'source_security_group_id' is used" type = number default = 0 } -variable "number_of_computed_ingress_with_prefix_list_ids" { - description = "Number of computed ingress rules to create where 'prefix_list_ids' is used" +variable "number_of_computed_ingress_with_prefix_list_id" { + description = "Number of computed ingress rules to create where 'prefix_list_id' is used" type = number default = 0 } @@ -227,37 +227,37 @@ variable "egress_with_self" { default = [] } -variable "egress_with_cidr_blocks" { - description = "List of egress rules to create where 'cidr_blocks' is used" +variable "egress_with_cidr_ipv4" { + description = "List of egress rules to create where 'cidr_ipv4' is used" type = list(map(string)) default = [] } -variable "egress_with_ipv6_cidr_blocks" { +variable "egress_with_cidr_ipv6" { description = "List of egress rules to create where 'ipv6_cidr_blocks' is used" type = list(map(string)) default = [] } -variable "egress_with_source_security_group_id" { +variable "egress_with_referenced_security_group_id" { description = "List of egress rules to create where 'source_security_group_id' is used" type = list(map(string)) default = [] } -variable "egress_with_prefix_list_ids" { - description = "List of egress rules to create where 'prefix_list_ids' is used" +variable "egress_with_prefix_list_id" { + description = "List of egress rules to create where 'prefix_list_id' is used" type = list(map(string)) default = [] } -variable "egress_cidr_blocks" { +variable "egress_cidr_ipv4" { description = "List of IPv4 CIDR ranges to use on all egress rules" type = list(string) default = ["0.0.0.0/0"] } -variable "egress_ipv6_cidr_blocks" { +variable "egress_cidr_ipv6" { description = "List of IPv6 CIDR ranges to use on all egress rules" type = list(string) default = ["::/0"] @@ -284,26 +284,26 @@ variable "computed_egress_with_self" { default = [] } -variable "computed_egress_with_cidr_blocks" { - description = "List of computed egress rules to create where 'cidr_blocks' is used" +variable "computed_egress_with_cidr_ipv4" { + description = "List of computed egress rules to create where 'cidr_ipv4' is used" type = list(map(string)) default = [] } -variable "computed_egress_with_ipv6_cidr_blocks" { +variable "computed_egress_with_cidr_ipv6" { description = "List of computed egress rules to create where 'ipv6_cidr_blocks' is used" type = list(map(string)) default = [] } -variable "computed_egress_with_source_security_group_id" { +variable "computed_egress_with_referenced_security_group_id" { description = "List of computed egress rules to create where 'source_security_group_id' is used" type = list(map(string)) default = [] } -variable "computed_egress_with_prefix_list_ids" { - description = "List of computed egress rules to create where 'prefix_list_ids' is used" +variable "computed_egress_with_prefix_list_id" { + description = "List of computed egress rules to create where 'prefix_list_id' is used" type = list(map(string)) default = [] } @@ -341,26 +341,26 @@ variable "number_of_computed_egress_with_self" { default = 0 } -variable "number_of_computed_egress_with_cidr_blocks" { - description = "Number of computed egress rules to create where 'cidr_blocks' is used" +variable "number_of_computed_egress_with_cidr_ipv4" { + description = "Number of computed egress rules to create where 'cidr_ipv4' is used" type = number default = 0 } -variable "number_of_computed_egress_with_ipv6_cidr_blocks" { +variable "number_of_computed_egress_with_cidr_ipv6" { description = "Number of computed egress rules to create where 'ipv6_cidr_blocks' is used" type = number default = 0 } -variable "number_of_computed_egress_with_source_security_group_id" { +variable "number_of_computed_egress_with_referenced_security_group_id" { description = "Number of computed egress rules to create where 'source_security_group_id' is used" type = number default = 0 } -variable "number_of_computed_egress_with_prefix_list_ids" { - description = "Number of computed egress rules to create where 'prefix_list_ids' is used" +variable "number_of_computed_egress_with_prefix_list_id" { + description = "Number of computed egress rules to create where 'prefix_list_id' is used" type = number default = 0 } diff --git a/modules/rabbitmq/README.md b/modules/rabbitmq/README.md index 57ff2498..6ec4f426 100644 --- a/modules/rabbitmq/README.md +++ b/modules/rabbitmq/README.md @@ -55,59 +55,59 @@ No resources. | [computed\_egress\_ipv6\_cidr\_blocks](#input\_computed\_egress\_ipv6\_cidr\_blocks) | List of IPv6 CIDR ranges to use on all computed egress rules | `list(string)` |
[
"::/0"
]
| no | | [computed\_egress\_prefix\_list\_ids](#input\_computed\_egress\_prefix\_list\_ids) | List of prefix list IDs (for allowing access to VPC endpoints) to use on all computed egress rules | `list(string)` | `[]` | no | | [computed\_egress\_rules](#input\_computed\_egress\_rules) | List of computed egress rules to create by name | `list(string)` | `[]` | no | -| [computed\_egress\_with\_cidr\_blocks](#input\_computed\_egress\_with\_cidr\_blocks) | List of computed egress rules to create where 'cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [computed\_egress\_with\_ipv6\_cidr\_blocks](#input\_computed\_egress\_with\_ipv6\_cidr\_blocks) | List of computed egress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [computed\_egress\_with\_prefix\_list\_ids](#input\_computed\_egress\_with\_prefix\_list\_ids) | List of computed egress rules to create where 'prefix\_list\_ids' is used | `list(map(string))` | `[]` | no | +| [computed\_egress\_with\_cidr\_ipv4](#input\_computed\_egress\_with\_cidr\_ipv4) | List of computed egress rules to create where 'cidr\_ipv4' is used | `list(map(string))` | `[]` | no | +| [computed\_egress\_with\_cidr\_ipv6](#input\_computed\_egress\_with\_cidr\_ipv6) | List of computed egress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | +| [computed\_egress\_with\_prefix\_list\_id](#input\_computed\_egress\_with\_prefix\_list\_id) | List of computed egress rules to create where 'prefix\_list\_id' is used | `list(map(string))` | `[]` | no | +| [computed\_egress\_with\_referenced\_security\_group\_id](#input\_computed\_egress\_with\_referenced\_security\_group\_id) | List of computed egress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [computed\_egress\_with\_self](#input\_computed\_egress\_with\_self) | List of computed egress rules to create where 'self' is defined | `list(map(string))` | `[]` | no | -| [computed\_egress\_with\_source\_security\_group\_id](#input\_computed\_egress\_with\_source\_security\_group\_id) | List of computed egress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [computed\_ingress\_cidr\_blocks](#input\_computed\_ingress\_cidr\_blocks) | List of IPv4 CIDR ranges to use on all computed ingress rules | `list(string)` | `[]` | no | | [computed\_ingress\_ipv6\_cidr\_blocks](#input\_computed\_ingress\_ipv6\_cidr\_blocks) | List of IPv6 CIDR ranges to use on all computed ingress rules | `list(string)` | `[]` | no | | [computed\_ingress\_prefix\_list\_ids](#input\_computed\_ingress\_prefix\_list\_ids) | List of prefix list IDs (for allowing access to VPC endpoints) to use on all computed ingress rules | `list(string)` | `[]` | no | | [computed\_ingress\_rules](#input\_computed\_ingress\_rules) | List of computed ingress rules to create by name | `list(string)` | `[]` | no | -| [computed\_ingress\_with\_cidr\_blocks](#input\_computed\_ingress\_with\_cidr\_blocks) | List of computed ingress rules to create where 'cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [computed\_ingress\_with\_ipv6\_cidr\_blocks](#input\_computed\_ingress\_with\_ipv6\_cidr\_blocks) | List of computed ingress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [computed\_ingress\_with\_prefix\_list\_ids](#input\_computed\_ingress\_with\_prefix\_list\_ids) | List of computed ingress rules to create where 'prefix\_list\_ids' is used | `list(map(string))` | `[]` | no | +| [computed\_ingress\_with\_cidr\_ipv4](#input\_computed\_ingress\_with\_cidr\_ipv4) | List of computed ingress rules to create where 'cidr\_ipv4' is used | `list(map(string))` | `[]` | no | +| [computed\_ingress\_with\_cidr\_ipv6](#input\_computed\_ingress\_with\_cidr\_ipv6) | List of computed ingress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | +| [computed\_ingress\_with\_prefix\_list\_id](#input\_computed\_ingress\_with\_prefix\_list\_id) | List of computed ingress rules to create where 'prefix\_list\_id' is used | `list(map(string))` | `[]` | no | +| [computed\_ingress\_with\_referenced\_security\_group\_id](#input\_computed\_ingress\_with\_referenced\_security\_group\_id) | List of computed ingress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [computed\_ingress\_with\_self](#input\_computed\_ingress\_with\_self) | List of computed ingress rules to create where 'self' is defined | `list(map(string))` | `[]` | no | -| [computed\_ingress\_with\_source\_security\_group\_id](#input\_computed\_ingress\_with\_source\_security\_group\_id) | List of computed ingress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [create](#input\_create) | Whether to create security group and all rules | `bool` | `true` | no | | [description](#input\_description) | Description of security group | `string` | `"Security Group managed by Terraform"` | no | -| [egress\_cidr\_blocks](#input\_egress\_cidr\_blocks) | List of IPv4 CIDR ranges to use on all egress rules | `list(string)` |
[
"0.0.0.0/0"
]
| no | -| [egress\_ipv6\_cidr\_blocks](#input\_egress\_ipv6\_cidr\_blocks) | List of IPv6 CIDR ranges to use on all egress rules | `list(string)` |
[
"::/0"
]
| no | +| [egress\_cidr\_ipv4](#input\_egress\_cidr\_ipv4) | List of IPv4 CIDR ranges to use on all egress rules | `list(string)` |
[
"0.0.0.0/0"
]
| no | +| [egress\_cidr\_ipv6](#input\_egress\_cidr\_ipv6) | List of IPv6 CIDR ranges to use on all egress rules | `list(string)` |
[
"::/0"
]
| no | | [egress\_prefix\_list\_ids](#input\_egress\_prefix\_list\_ids) | List of prefix list IDs (for allowing access to VPC endpoints) to use on all egress rules | `list(string)` | `[]` | no | | [egress\_rules](#input\_egress\_rules) | List of egress rules to create by name | `list(string)` | `[]` | no | -| [egress\_with\_cidr\_blocks](#input\_egress\_with\_cidr\_blocks) | List of egress rules to create where 'cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [egress\_with\_ipv6\_cidr\_blocks](#input\_egress\_with\_ipv6\_cidr\_blocks) | List of egress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [egress\_with\_prefix\_list\_ids](#input\_egress\_with\_prefix\_list\_ids) | List of egress rules to create where 'prefix\_list\_ids' is used | `list(map(string))` | `[]` | no | +| [egress\_with\_cidr\_ipv4](#input\_egress\_with\_cidr\_ipv4) | List of egress rules to create where 'cidr\_ipv4' is used | `list(map(string))` | `[]` | no | +| [egress\_with\_cidr\_ipv6](#input\_egress\_with\_cidr\_ipv6) | List of egress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | +| [egress\_with\_prefix\_list\_id](#input\_egress\_with\_prefix\_list\_id) | List of egress rules to create where 'prefix\_list\_id' is used | `list(map(string))` | `[]` | no | +| [egress\_with\_referenced\_security\_group\_id](#input\_egress\_with\_referenced\_security\_group\_id) | List of egress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [egress\_with\_self](#input\_egress\_with\_self) | List of egress rules to create where 'self' is defined | `list(map(string))` | `[]` | no | -| [egress\_with\_source\_security\_group\_id](#input\_egress\_with\_source\_security\_group\_id) | List of egress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | -| [ingress\_cidr\_blocks](#input\_ingress\_cidr\_blocks) | List of IPv4 CIDR ranges to use on all ingress rules | `list(string)` | `[]` | no | -| [ingress\_ipv6\_cidr\_blocks](#input\_ingress\_ipv6\_cidr\_blocks) | List of IPv6 CIDR ranges to use on all ingress rules | `list(string)` | `[]` | no | +| [ingress\_cidr\_ipv4](#input\_ingress\_cidr\_ipv4) | List of IPv4 CIDR ranges to use on all ingress rules | `list(string)` | `[]` | no | +| [ingress\_cidr\_ipv6](#input\_ingress\_cidr\_ipv6) | List of IPv6 CIDR ranges to use on all ingress rules | `list(string)` | `[]` | no | | [ingress\_prefix\_list\_ids](#input\_ingress\_prefix\_list\_ids) | List of prefix list IDs (for allowing access to VPC endpoints) to use on all ingress rules | `list(string)` | `[]` | no | | [ingress\_rules](#input\_ingress\_rules) | List of ingress rules to create by name | `list(string)` | `[]` | no | -| [ingress\_with\_cidr\_blocks](#input\_ingress\_with\_cidr\_blocks) | List of ingress rules to create where 'cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [ingress\_with\_ipv6\_cidr\_blocks](#input\_ingress\_with\_ipv6\_cidr\_blocks) | List of ingress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [ingress\_with\_prefix\_list\_ids](#input\_ingress\_with\_prefix\_list\_ids) | List of ingress rules to create where 'prefix\_list\_ids' is used | `list(map(string))` | `[]` | no | +| [ingress\_with\_cidr\_ipv4](#input\_ingress\_with\_cidr\_ipv4) | List of ingress rules to create where 'cidr\_ipv4' is used | `list(map(string))` | `[]` | no | +| [ingress\_with\_cidr\_ipv6](#input\_ingress\_with\_cidr\_ipv6) | List of ingress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | +| [ingress\_with\_prefix\_list\_id](#input\_ingress\_with\_prefix\_list\_id) | List of ingress rules to create where 'prefix\_list\_id' is used | `list(map(string))` | `[]` | no | +| [ingress\_with\_referenced\_security\_group\_id](#input\_ingress\_with\_referenced\_security\_group\_id) | List of ingress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [ingress\_with\_self](#input\_ingress\_with\_self) | List of ingress rules to create where 'self' is defined | `list(map(string))` | `[]` | no | -| [ingress\_with\_source\_security\_group\_id](#input\_ingress\_with\_source\_security\_group\_id) | List of ingress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [name](#input\_name) | Name of security group | `string` | n/a | yes | | [number\_of\_computed\_egress\_cidr\_blocks](#input\_number\_of\_computed\_egress\_cidr\_blocks) | Number of IPv4 CIDR ranges to use on all computed egress rules | `number` | `0` | no | | [number\_of\_computed\_egress\_ipv6\_cidr\_blocks](#input\_number\_of\_computed\_egress\_ipv6\_cidr\_blocks) | Number of IPv6 CIDR ranges to use on all computed egress rules | `number` | `0` | no | | [number\_of\_computed\_egress\_prefix\_list\_ids](#input\_number\_of\_computed\_egress\_prefix\_list\_ids) | Number of prefix list IDs (for allowing access to VPC endpoints) to use on all computed egress rules | `number` | `0` | no | | [number\_of\_computed\_egress\_rules](#input\_number\_of\_computed\_egress\_rules) | Number of computed egress rules to create by name | `number` | `0` | no | -| [number\_of\_computed\_egress\_with\_cidr\_blocks](#input\_number\_of\_computed\_egress\_with\_cidr\_blocks) | Number of computed egress rules to create where 'cidr\_blocks' is used | `number` | `0` | no | -| [number\_of\_computed\_egress\_with\_ipv6\_cidr\_blocks](#input\_number\_of\_computed\_egress\_with\_ipv6\_cidr\_blocks) | Number of computed egress rules to create where 'ipv6\_cidr\_blocks' is used | `number` | `0` | no | -| [number\_of\_computed\_egress\_with\_prefix\_list\_ids](#input\_number\_of\_computed\_egress\_with\_prefix\_list\_ids) | Number of computed egress rules to create where 'prefix\_list\_ids' is used | `number` | `0` | no | +| [number\_of\_computed\_egress\_with\_cidr\_ipv4](#input\_number\_of\_computed\_egress\_with\_cidr\_ipv4) | Number of computed egress rules to create where 'cidr\_ipv4' is used | `number` | `0` | no | +| [number\_of\_computed\_egress\_with\_cidr\_ipv6](#input\_number\_of\_computed\_egress\_with\_cidr\_ipv6) | Number of computed egress rules to create where 'ipv6\_cidr\_blocks' is used | `number` | `0` | no | +| [number\_of\_computed\_egress\_with\_prefix\_list\_id](#input\_number\_of\_computed\_egress\_with\_prefix\_list\_id) | Number of computed egress rules to create where 'prefix\_list\_id' is used | `number` | `0` | no | +| [number\_of\_computed\_egress\_with\_referenced\_security\_group\_id](#input\_number\_of\_computed\_egress\_with\_referenced\_security\_group\_id) | Number of computed egress rules to create where 'source\_security\_group\_id' is used | `number` | `0` | no | | [number\_of\_computed\_egress\_with\_self](#input\_number\_of\_computed\_egress\_with\_self) | Number of computed egress rules to create where 'self' is defined | `number` | `0` | no | -| [number\_of\_computed\_egress\_with\_source\_security\_group\_id](#input\_number\_of\_computed\_egress\_with\_source\_security\_group\_id) | Number of computed egress rules to create where 'source\_security\_group\_id' is used | `number` | `0` | no | | [number\_of\_computed\_ingress\_cidr\_blocks](#input\_number\_of\_computed\_ingress\_cidr\_blocks) | Number of IPv4 CIDR ranges to use on all computed ingress rules | `number` | `0` | no | | [number\_of\_computed\_ingress\_ipv6\_cidr\_blocks](#input\_number\_of\_computed\_ingress\_ipv6\_cidr\_blocks) | Number of IPv6 CIDR ranges to use on all computed ingress rules | `number` | `0` | no | | [number\_of\_computed\_ingress\_prefix\_list\_ids](#input\_number\_of\_computed\_ingress\_prefix\_list\_ids) | Number of prefix list IDs (for allowing access to VPC endpoints) to use on all computed ingress rules | `number` | `0` | no | | [number\_of\_computed\_ingress\_rules](#input\_number\_of\_computed\_ingress\_rules) | Number of computed ingress rules to create by name | `number` | `0` | no | -| [number\_of\_computed\_ingress\_with\_cidr\_blocks](#input\_number\_of\_computed\_ingress\_with\_cidr\_blocks) | Number of computed ingress rules to create where 'cidr\_blocks' is used | `number` | `0` | no | -| [number\_of\_computed\_ingress\_with\_ipv6\_cidr\_blocks](#input\_number\_of\_computed\_ingress\_with\_ipv6\_cidr\_blocks) | Number of computed ingress rules to create where 'ipv6\_cidr\_blocks' is used | `number` | `0` | no | -| [number\_of\_computed\_ingress\_with\_prefix\_list\_ids](#input\_number\_of\_computed\_ingress\_with\_prefix\_list\_ids) | Number of computed ingress rules to create where 'prefix\_list\_ids' is used | `number` | `0` | no | +| [number\_of\_computed\_ingress\_with\_cidr\_ipv4](#input\_number\_of\_computed\_ingress\_with\_cidr\_ipv4) | Number of computed ingress rules to create where 'cidr\_ipv4' is used | `number` | `0` | no | +| [number\_of\_computed\_ingress\_with\_cidr\_ipv6](#input\_number\_of\_computed\_ingress\_with\_cidr\_ipv6) | Number of computed ingress rules to create where 'ipv6\_cidr\_blocks' is used | `number` | `0` | no | +| [number\_of\_computed\_ingress\_with\_prefix\_list\_id](#input\_number\_of\_computed\_ingress\_with\_prefix\_list\_id) | Number of computed ingress rules to create where 'prefix\_list\_id' is used | `number` | `0` | no | +| [number\_of\_computed\_ingress\_with\_referenced\_security\_group\_id](#input\_number\_of\_computed\_ingress\_with\_referenced\_security\_group\_id) | Number of computed ingress rules to create where 'source\_security\_group\_id' is used | `number` | `0` | no | | [number\_of\_computed\_ingress\_with\_self](#input\_number\_of\_computed\_ingress\_with\_self) | Number of computed ingress rules to create where 'self' is defined | `number` | `0` | no | -| [number\_of\_computed\_ingress\_with\_source\_security\_group\_id](#input\_number\_of\_computed\_ingress\_with\_source\_security\_group\_id) | Number of computed ingress rules to create where 'source\_security\_group\_id' is used | `number` | `0` | no | | [revoke\_rules\_on\_delete](#input\_revoke\_rules\_on\_delete) | Instruct Terraform to revoke all of the Security Groups attached ingress and egress rules before deleting the rule itself. Enable for EMR. | `bool` | `false` | no | | [tags](#input\_tags) | A mapping of tags to assign to security group | `map(string)` | `{}` | no | | [use\_name\_prefix](#input\_use\_name\_prefix) | Whether to use name\_prefix or fixed name. Should be true to able to update security group name after initial creation | `bool` | `true` | no | diff --git a/modules/rabbitmq/main.tf b/modules/rabbitmq/main.tf index 80ea0adb..d2a1bf93 100644 --- a/modules/rabbitmq/main.tf +++ b/modules/rabbitmq/main.tf @@ -19,20 +19,20 @@ module "sg" { ingress_with_self = concat(var.auto_ingress_with_self, var.ingress_with_self) # Open to IPv4 cidr blocks - ingress_with_cidr_blocks = var.ingress_with_cidr_blocks + ingress_with_cidr_ipv4 = var.ingress_with_cidr_ipv4 # Open to IPv6 cidr blocks - ingress_with_ipv6_cidr_blocks = var.ingress_with_ipv6_cidr_blocks + ingress_with_cidr_ipv6 = var.ingress_with_cidr_ipv6 # Open for security group id - ingress_with_source_security_group_id = var.ingress_with_source_security_group_id + ingress_with_referenced_security_group_id = var.ingress_with_referenced_security_group_id # Open for prefix list id - ingress_with_prefix_list_ids = var.ingress_with_prefix_list_ids + ingress_with_prefix_list_id = var.ingress_with_prefix_list_id # Default ingress CIDR blocks - ingress_cidr_blocks = var.ingress_cidr_blocks - ingress_ipv6_cidr_blocks = var.ingress_ipv6_cidr_blocks + ingress_cidr_ipv4 = var.ingress_cidr_ipv4 + ingress_cidr_ipv6 = var.ingress_cidr_ipv6 # Default prefix list ids ingress_prefix_list_ids = var.ingress_prefix_list_ids @@ -47,26 +47,26 @@ module "sg" { computed_ingress_with_self = concat(var.auto_computed_ingress_with_self, var.computed_ingress_with_self) # Open to IPv4 cidr blocks - computed_ingress_with_cidr_blocks = var.computed_ingress_with_cidr_blocks + computed_ingress_with_cidr_ipv4 = var.computed_ingress_with_cidr_ipv4 # Open to IPv6 cidr blocks - computed_ingress_with_ipv6_cidr_blocks = var.computed_ingress_with_ipv6_cidr_blocks + computed_ingress_with_cidr_ipv6 = var.computed_ingress_with_cidr_ipv6 # Open for security group id - computed_ingress_with_source_security_group_id = var.computed_ingress_with_source_security_group_id + computed_ingress_with_referenced_security_group_id = var.computed_ingress_with_referenced_security_group_id # Open for prefix list id - computed_ingress_with_prefix_list_ids = var.computed_ingress_with_prefix_list_ids + computed_ingress_with_prefix_list_id = var.computed_ingress_with_prefix_list_id ############################# # Number of computed ingress ############################# - number_of_computed_ingress_rules = var.auto_number_of_computed_ingress_rules + var.number_of_computed_ingress_rules - number_of_computed_ingress_with_self = var.auto_number_of_computed_ingress_with_self + var.number_of_computed_ingress_with_self - number_of_computed_ingress_with_cidr_blocks = var.number_of_computed_ingress_with_cidr_blocks - number_of_computed_ingress_with_ipv6_cidr_blocks = var.number_of_computed_ingress_with_ipv6_cidr_blocks - number_of_computed_ingress_with_source_security_group_id = var.number_of_computed_ingress_with_source_security_group_id - number_of_computed_ingress_with_prefix_list_ids = var.number_of_computed_ingress_with_prefix_list_ids + number_of_computed_ingress_rules = var.auto_number_of_computed_ingress_rules + var.number_of_computed_ingress_rules + number_of_computed_ingress_with_self = var.auto_number_of_computed_ingress_with_self + var.number_of_computed_ingress_with_self + number_of_computed_ingress_with_cidr_ipv4 = var.number_of_computed_ingress_with_cidr_ipv4 + number_of_computed_ingress_with_cidr_ipv6 = var.number_of_computed_ingress_with_cidr_ipv6 + number_of_computed_ingress_with_referenced_security_group_id = var.number_of_computed_ingress_with_referenced_security_group_id + number_of_computed_ingress_with_prefix_list_id = var.number_of_computed_ingress_with_prefix_list_id ######### # Egress @@ -78,20 +78,20 @@ module "sg" { egress_with_self = concat(var.auto_egress_with_self, var.egress_with_self) # Open to IPv4 cidr blocks - egress_with_cidr_blocks = var.egress_with_cidr_blocks + egress_with_cidr_ipv4 = var.egress_with_cidr_ipv4 # Open to IPv6 cidr blocks - egress_with_ipv6_cidr_blocks = var.egress_with_ipv6_cidr_blocks + egress_with_cidr_ipv6 = var.egress_with_cidr_ipv6 # Open for security group id - egress_with_source_security_group_id = var.egress_with_source_security_group_id + egress_with_referenced_security_group_id = var.egress_with_referenced_security_group_id # Open for prefix list id - egress_with_prefix_list_ids = var.egress_with_prefix_list_ids + egress_with_prefix_list_id = var.egress_with_prefix_list_id # Default egress CIDR blocks - egress_cidr_blocks = var.egress_cidr_blocks - egress_ipv6_cidr_blocks = var.egress_ipv6_cidr_blocks + egress_cidr_ipv4 = var.egress_cidr_ipv4 + egress_cidr_ipv6 = var.egress_cidr_ipv6 # Default prefix list ids egress_prefix_list_ids = var.egress_prefix_list_ids @@ -106,24 +106,24 @@ module "sg" { computed_egress_with_self = concat(var.auto_computed_egress_with_self, var.computed_egress_with_self) # Open to IPv4 cidr blocks - computed_egress_with_cidr_blocks = var.computed_egress_with_cidr_blocks + computed_egress_with_cidr_ipv4 = var.computed_egress_with_cidr_ipv4 # Open to IPv6 cidr blocks - computed_egress_with_ipv6_cidr_blocks = var.computed_egress_with_ipv6_cidr_blocks + computed_egress_with_cidr_ipv6 = var.computed_egress_with_cidr_ipv6 # Open for security group id - computed_egress_with_source_security_group_id = var.computed_egress_with_source_security_group_id + computed_egress_with_referenced_security_group_id = var.computed_egress_with_referenced_security_group_id # Open for prefix list id - computed_egress_with_prefix_list_ids = var.computed_egress_with_prefix_list_ids + computed_egress_with_prefix_list_id = var.computed_egress_with_prefix_list_id ############################# # Number of computed egress ############################# - number_of_computed_egress_rules = var.auto_number_of_computed_egress_rules + var.number_of_computed_egress_rules - number_of_computed_egress_with_self = var.auto_number_of_computed_egress_with_self + var.number_of_computed_egress_with_self - number_of_computed_egress_with_cidr_blocks = var.number_of_computed_egress_with_cidr_blocks - number_of_computed_egress_with_ipv6_cidr_blocks = var.number_of_computed_egress_with_ipv6_cidr_blocks - number_of_computed_egress_with_source_security_group_id = var.number_of_computed_egress_with_source_security_group_id - number_of_computed_egress_with_prefix_list_ids = var.number_of_computed_egress_with_prefix_list_ids + number_of_computed_egress_rules = var.auto_number_of_computed_egress_rules + var.number_of_computed_egress_rules + number_of_computed_egress_with_self = var.auto_number_of_computed_egress_with_self + var.number_of_computed_egress_with_self + number_of_computed_egress_with_cidr_ipv4 = var.number_of_computed_egress_with_cidr_ipv4 + number_of_computed_egress_with_cidr_ipv6 = var.number_of_computed_egress_with_cidr_ipv6 + number_of_computed_egress_with_referenced_security_group_id = var.number_of_computed_egress_with_referenced_security_group_id + number_of_computed_egress_with_prefix_list_id = var.number_of_computed_egress_with_prefix_list_id } diff --git a/modules/rabbitmq/variables.tf b/modules/rabbitmq/variables.tf index 60c8c27b..6590c9e3 100644 --- a/modules/rabbitmq/variables.tf +++ b/modules/rabbitmq/variables.tf @@ -56,37 +56,37 @@ variable "ingress_with_self" { default = [] } -variable "ingress_with_cidr_blocks" { - description = "List of ingress rules to create where 'cidr_blocks' is used" +variable "ingress_with_cidr_ipv4" { + description = "List of ingress rules to create where 'cidr_ipv4' is used" type = list(map(string)) default = [] } -variable "ingress_with_ipv6_cidr_blocks" { +variable "ingress_with_cidr_ipv6" { description = "List of ingress rules to create where 'ipv6_cidr_blocks' is used" type = list(map(string)) default = [] } -variable "ingress_with_source_security_group_id" { +variable "ingress_with_referenced_security_group_id" { description = "List of ingress rules to create where 'source_security_group_id' is used" type = list(map(string)) default = [] } -variable "ingress_with_prefix_list_ids" { - description = "List of ingress rules to create where 'prefix_list_ids' is used" +variable "ingress_with_prefix_list_id" { + description = "List of ingress rules to create where 'prefix_list_id' is used" type = list(map(string)) default = [] } -variable "ingress_cidr_blocks" { +variable "ingress_cidr_ipv4" { description = "List of IPv4 CIDR ranges to use on all ingress rules" type = list(string) default = [] } -variable "ingress_ipv6_cidr_blocks" { +variable "ingress_cidr_ipv6" { description = "List of IPv6 CIDR ranges to use on all ingress rules" type = list(string) default = [] @@ -113,26 +113,26 @@ variable "computed_ingress_with_self" { default = [] } -variable "computed_ingress_with_cidr_blocks" { - description = "List of computed ingress rules to create where 'cidr_blocks' is used" +variable "computed_ingress_with_cidr_ipv4" { + description = "List of computed ingress rules to create where 'cidr_ipv4' is used" type = list(map(string)) default = [] } -variable "computed_ingress_with_ipv6_cidr_blocks" { +variable "computed_ingress_with_cidr_ipv6" { description = "List of computed ingress rules to create where 'ipv6_cidr_blocks' is used" type = list(map(string)) default = [] } -variable "computed_ingress_with_source_security_group_id" { +variable "computed_ingress_with_referenced_security_group_id" { description = "List of computed ingress rules to create where 'source_security_group_id' is used" type = list(map(string)) default = [] } -variable "computed_ingress_with_prefix_list_ids" { - description = "List of computed ingress rules to create where 'prefix_list_ids' is used" +variable "computed_ingress_with_prefix_list_id" { + description = "List of computed ingress rules to create where 'prefix_list_id' is used" type = list(map(string)) default = [] } @@ -170,26 +170,26 @@ variable "number_of_computed_ingress_with_self" { default = 0 } -variable "number_of_computed_ingress_with_cidr_blocks" { - description = "Number of computed ingress rules to create where 'cidr_blocks' is used" +variable "number_of_computed_ingress_with_cidr_ipv4" { + description = "Number of computed ingress rules to create where 'cidr_ipv4' is used" type = number default = 0 } -variable "number_of_computed_ingress_with_ipv6_cidr_blocks" { +variable "number_of_computed_ingress_with_cidr_ipv6" { description = "Number of computed ingress rules to create where 'ipv6_cidr_blocks' is used" type = number default = 0 } -variable "number_of_computed_ingress_with_source_security_group_id" { +variable "number_of_computed_ingress_with_referenced_security_group_id" { description = "Number of computed ingress rules to create where 'source_security_group_id' is used" type = number default = 0 } -variable "number_of_computed_ingress_with_prefix_list_ids" { - description = "Number of computed ingress rules to create where 'prefix_list_ids' is used" +variable "number_of_computed_ingress_with_prefix_list_id" { + description = "Number of computed ingress rules to create where 'prefix_list_id' is used" type = number default = 0 } @@ -227,37 +227,37 @@ variable "egress_with_self" { default = [] } -variable "egress_with_cidr_blocks" { - description = "List of egress rules to create where 'cidr_blocks' is used" +variable "egress_with_cidr_ipv4" { + description = "List of egress rules to create where 'cidr_ipv4' is used" type = list(map(string)) default = [] } -variable "egress_with_ipv6_cidr_blocks" { +variable "egress_with_cidr_ipv6" { description = "List of egress rules to create where 'ipv6_cidr_blocks' is used" type = list(map(string)) default = [] } -variable "egress_with_source_security_group_id" { +variable "egress_with_referenced_security_group_id" { description = "List of egress rules to create where 'source_security_group_id' is used" type = list(map(string)) default = [] } -variable "egress_with_prefix_list_ids" { - description = "List of egress rules to create where 'prefix_list_ids' is used" +variable "egress_with_prefix_list_id" { + description = "List of egress rules to create where 'prefix_list_id' is used" type = list(map(string)) default = [] } -variable "egress_cidr_blocks" { +variable "egress_cidr_ipv4" { description = "List of IPv4 CIDR ranges to use on all egress rules" type = list(string) default = ["0.0.0.0/0"] } -variable "egress_ipv6_cidr_blocks" { +variable "egress_cidr_ipv6" { description = "List of IPv6 CIDR ranges to use on all egress rules" type = list(string) default = ["::/0"] @@ -284,26 +284,26 @@ variable "computed_egress_with_self" { default = [] } -variable "computed_egress_with_cidr_blocks" { - description = "List of computed egress rules to create where 'cidr_blocks' is used" +variable "computed_egress_with_cidr_ipv4" { + description = "List of computed egress rules to create where 'cidr_ipv4' is used" type = list(map(string)) default = [] } -variable "computed_egress_with_ipv6_cidr_blocks" { +variable "computed_egress_with_cidr_ipv6" { description = "List of computed egress rules to create where 'ipv6_cidr_blocks' is used" type = list(map(string)) default = [] } -variable "computed_egress_with_source_security_group_id" { +variable "computed_egress_with_referenced_security_group_id" { description = "List of computed egress rules to create where 'source_security_group_id' is used" type = list(map(string)) default = [] } -variable "computed_egress_with_prefix_list_ids" { - description = "List of computed egress rules to create where 'prefix_list_ids' is used" +variable "computed_egress_with_prefix_list_id" { + description = "List of computed egress rules to create where 'prefix_list_id' is used" type = list(map(string)) default = [] } @@ -341,26 +341,26 @@ variable "number_of_computed_egress_with_self" { default = 0 } -variable "number_of_computed_egress_with_cidr_blocks" { - description = "Number of computed egress rules to create where 'cidr_blocks' is used" +variable "number_of_computed_egress_with_cidr_ipv4" { + description = "Number of computed egress rules to create where 'cidr_ipv4' is used" type = number default = 0 } -variable "number_of_computed_egress_with_ipv6_cidr_blocks" { +variable "number_of_computed_egress_with_cidr_ipv6" { description = "Number of computed egress rules to create where 'ipv6_cidr_blocks' is used" type = number default = 0 } -variable "number_of_computed_egress_with_source_security_group_id" { +variable "number_of_computed_egress_with_referenced_security_group_id" { description = "Number of computed egress rules to create where 'source_security_group_id' is used" type = number default = 0 } -variable "number_of_computed_egress_with_prefix_list_ids" { - description = "Number of computed egress rules to create where 'prefix_list_ids' is used" +variable "number_of_computed_egress_with_prefix_list_id" { + description = "Number of computed egress rules to create where 'prefix_list_id' is used" type = number default = 0 } diff --git a/modules/rdp/README.md b/modules/rdp/README.md index f8aea9a4..90fde51b 100644 --- a/modules/rdp/README.md +++ b/modules/rdp/README.md @@ -55,59 +55,59 @@ No resources. | [computed\_egress\_ipv6\_cidr\_blocks](#input\_computed\_egress\_ipv6\_cidr\_blocks) | List of IPv6 CIDR ranges to use on all computed egress rules | `list(string)` |
[
"::/0"
]
| no | | [computed\_egress\_prefix\_list\_ids](#input\_computed\_egress\_prefix\_list\_ids) | List of prefix list IDs (for allowing access to VPC endpoints) to use on all computed egress rules | `list(string)` | `[]` | no | | [computed\_egress\_rules](#input\_computed\_egress\_rules) | List of computed egress rules to create by name | `list(string)` | `[]` | no | -| [computed\_egress\_with\_cidr\_blocks](#input\_computed\_egress\_with\_cidr\_blocks) | List of computed egress rules to create where 'cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [computed\_egress\_with\_ipv6\_cidr\_blocks](#input\_computed\_egress\_with\_ipv6\_cidr\_blocks) | List of computed egress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [computed\_egress\_with\_prefix\_list\_ids](#input\_computed\_egress\_with\_prefix\_list\_ids) | List of computed egress rules to create where 'prefix\_list\_ids' is used | `list(map(string))` | `[]` | no | +| [computed\_egress\_with\_cidr\_ipv4](#input\_computed\_egress\_with\_cidr\_ipv4) | List of computed egress rules to create where 'cidr\_ipv4' is used | `list(map(string))` | `[]` | no | +| [computed\_egress\_with\_cidr\_ipv6](#input\_computed\_egress\_with\_cidr\_ipv6) | List of computed egress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | +| [computed\_egress\_with\_prefix\_list\_id](#input\_computed\_egress\_with\_prefix\_list\_id) | List of computed egress rules to create where 'prefix\_list\_id' is used | `list(map(string))` | `[]` | no | +| [computed\_egress\_with\_referenced\_security\_group\_id](#input\_computed\_egress\_with\_referenced\_security\_group\_id) | List of computed egress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [computed\_egress\_with\_self](#input\_computed\_egress\_with\_self) | List of computed egress rules to create where 'self' is defined | `list(map(string))` | `[]` | no | -| [computed\_egress\_with\_source\_security\_group\_id](#input\_computed\_egress\_with\_source\_security\_group\_id) | List of computed egress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [computed\_ingress\_cidr\_blocks](#input\_computed\_ingress\_cidr\_blocks) | List of IPv4 CIDR ranges to use on all computed ingress rules | `list(string)` | `[]` | no | | [computed\_ingress\_ipv6\_cidr\_blocks](#input\_computed\_ingress\_ipv6\_cidr\_blocks) | List of IPv6 CIDR ranges to use on all computed ingress rules | `list(string)` | `[]` | no | | [computed\_ingress\_prefix\_list\_ids](#input\_computed\_ingress\_prefix\_list\_ids) | List of prefix list IDs (for allowing access to VPC endpoints) to use on all computed ingress rules | `list(string)` | `[]` | no | | [computed\_ingress\_rules](#input\_computed\_ingress\_rules) | List of computed ingress rules to create by name | `list(string)` | `[]` | no | -| [computed\_ingress\_with\_cidr\_blocks](#input\_computed\_ingress\_with\_cidr\_blocks) | List of computed ingress rules to create where 'cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [computed\_ingress\_with\_ipv6\_cidr\_blocks](#input\_computed\_ingress\_with\_ipv6\_cidr\_blocks) | List of computed ingress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [computed\_ingress\_with\_prefix\_list\_ids](#input\_computed\_ingress\_with\_prefix\_list\_ids) | List of computed ingress rules to create where 'prefix\_list\_ids' is used | `list(map(string))` | `[]` | no | +| [computed\_ingress\_with\_cidr\_ipv4](#input\_computed\_ingress\_with\_cidr\_ipv4) | List of computed ingress rules to create where 'cidr\_ipv4' is used | `list(map(string))` | `[]` | no | +| [computed\_ingress\_with\_cidr\_ipv6](#input\_computed\_ingress\_with\_cidr\_ipv6) | List of computed ingress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | +| [computed\_ingress\_with\_prefix\_list\_id](#input\_computed\_ingress\_with\_prefix\_list\_id) | List of computed ingress rules to create where 'prefix\_list\_id' is used | `list(map(string))` | `[]` | no | +| [computed\_ingress\_with\_referenced\_security\_group\_id](#input\_computed\_ingress\_with\_referenced\_security\_group\_id) | List of computed ingress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [computed\_ingress\_with\_self](#input\_computed\_ingress\_with\_self) | List of computed ingress rules to create where 'self' is defined | `list(map(string))` | `[]` | no | -| [computed\_ingress\_with\_source\_security\_group\_id](#input\_computed\_ingress\_with\_source\_security\_group\_id) | List of computed ingress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [create](#input\_create) | Whether to create security group and all rules | `bool` | `true` | no | | [description](#input\_description) | Description of security group | `string` | `"Security Group managed by Terraform"` | no | -| [egress\_cidr\_blocks](#input\_egress\_cidr\_blocks) | List of IPv4 CIDR ranges to use on all egress rules | `list(string)` |
[
"0.0.0.0/0"
]
| no | -| [egress\_ipv6\_cidr\_blocks](#input\_egress\_ipv6\_cidr\_blocks) | List of IPv6 CIDR ranges to use on all egress rules | `list(string)` |
[
"::/0"
]
| no | +| [egress\_cidr\_ipv4](#input\_egress\_cidr\_ipv4) | List of IPv4 CIDR ranges to use on all egress rules | `list(string)` |
[
"0.0.0.0/0"
]
| no | +| [egress\_cidr\_ipv6](#input\_egress\_cidr\_ipv6) | List of IPv6 CIDR ranges to use on all egress rules | `list(string)` |
[
"::/0"
]
| no | | [egress\_prefix\_list\_ids](#input\_egress\_prefix\_list\_ids) | List of prefix list IDs (for allowing access to VPC endpoints) to use on all egress rules | `list(string)` | `[]` | no | | [egress\_rules](#input\_egress\_rules) | List of egress rules to create by name | `list(string)` | `[]` | no | -| [egress\_with\_cidr\_blocks](#input\_egress\_with\_cidr\_blocks) | List of egress rules to create where 'cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [egress\_with\_ipv6\_cidr\_blocks](#input\_egress\_with\_ipv6\_cidr\_blocks) | List of egress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [egress\_with\_prefix\_list\_ids](#input\_egress\_with\_prefix\_list\_ids) | List of egress rules to create where 'prefix\_list\_ids' is used | `list(map(string))` | `[]` | no | +| [egress\_with\_cidr\_ipv4](#input\_egress\_with\_cidr\_ipv4) | List of egress rules to create where 'cidr\_ipv4' is used | `list(map(string))` | `[]` | no | +| [egress\_with\_cidr\_ipv6](#input\_egress\_with\_cidr\_ipv6) | List of egress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | +| [egress\_with\_prefix\_list\_id](#input\_egress\_with\_prefix\_list\_id) | List of egress rules to create where 'prefix\_list\_id' is used | `list(map(string))` | `[]` | no | +| [egress\_with\_referenced\_security\_group\_id](#input\_egress\_with\_referenced\_security\_group\_id) | List of egress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [egress\_with\_self](#input\_egress\_with\_self) | List of egress rules to create where 'self' is defined | `list(map(string))` | `[]` | no | -| [egress\_with\_source\_security\_group\_id](#input\_egress\_with\_source\_security\_group\_id) | List of egress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | -| [ingress\_cidr\_blocks](#input\_ingress\_cidr\_blocks) | List of IPv4 CIDR ranges to use on all ingress rules | `list(string)` | `[]` | no | -| [ingress\_ipv6\_cidr\_blocks](#input\_ingress\_ipv6\_cidr\_blocks) | List of IPv6 CIDR ranges to use on all ingress rules | `list(string)` | `[]` | no | +| [ingress\_cidr\_ipv4](#input\_ingress\_cidr\_ipv4) | List of IPv4 CIDR ranges to use on all ingress rules | `list(string)` | `[]` | no | +| [ingress\_cidr\_ipv6](#input\_ingress\_cidr\_ipv6) | List of IPv6 CIDR ranges to use on all ingress rules | `list(string)` | `[]` | no | | [ingress\_prefix\_list\_ids](#input\_ingress\_prefix\_list\_ids) | List of prefix list IDs (for allowing access to VPC endpoints) to use on all ingress rules | `list(string)` | `[]` | no | | [ingress\_rules](#input\_ingress\_rules) | List of ingress rules to create by name | `list(string)` | `[]` | no | -| [ingress\_with\_cidr\_blocks](#input\_ingress\_with\_cidr\_blocks) | List of ingress rules to create where 'cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [ingress\_with\_ipv6\_cidr\_blocks](#input\_ingress\_with\_ipv6\_cidr\_blocks) | List of ingress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [ingress\_with\_prefix\_list\_ids](#input\_ingress\_with\_prefix\_list\_ids) | List of ingress rules to create where 'prefix\_list\_ids' is used | `list(map(string))` | `[]` | no | +| [ingress\_with\_cidr\_ipv4](#input\_ingress\_with\_cidr\_ipv4) | List of ingress rules to create where 'cidr\_ipv4' is used | `list(map(string))` | `[]` | no | +| [ingress\_with\_cidr\_ipv6](#input\_ingress\_with\_cidr\_ipv6) | List of ingress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | +| [ingress\_with\_prefix\_list\_id](#input\_ingress\_with\_prefix\_list\_id) | List of ingress rules to create where 'prefix\_list\_id' is used | `list(map(string))` | `[]` | no | +| [ingress\_with\_referenced\_security\_group\_id](#input\_ingress\_with\_referenced\_security\_group\_id) | List of ingress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [ingress\_with\_self](#input\_ingress\_with\_self) | List of ingress rules to create where 'self' is defined | `list(map(string))` | `[]` | no | -| [ingress\_with\_source\_security\_group\_id](#input\_ingress\_with\_source\_security\_group\_id) | List of ingress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [name](#input\_name) | Name of security group | `string` | n/a | yes | | [number\_of\_computed\_egress\_cidr\_blocks](#input\_number\_of\_computed\_egress\_cidr\_blocks) | Number of IPv4 CIDR ranges to use on all computed egress rules | `number` | `0` | no | | [number\_of\_computed\_egress\_ipv6\_cidr\_blocks](#input\_number\_of\_computed\_egress\_ipv6\_cidr\_blocks) | Number of IPv6 CIDR ranges to use on all computed egress rules | `number` | `0` | no | | [number\_of\_computed\_egress\_prefix\_list\_ids](#input\_number\_of\_computed\_egress\_prefix\_list\_ids) | Number of prefix list IDs (for allowing access to VPC endpoints) to use on all computed egress rules | `number` | `0` | no | | [number\_of\_computed\_egress\_rules](#input\_number\_of\_computed\_egress\_rules) | Number of computed egress rules to create by name | `number` | `0` | no | -| [number\_of\_computed\_egress\_with\_cidr\_blocks](#input\_number\_of\_computed\_egress\_with\_cidr\_blocks) | Number of computed egress rules to create where 'cidr\_blocks' is used | `number` | `0` | no | -| [number\_of\_computed\_egress\_with\_ipv6\_cidr\_blocks](#input\_number\_of\_computed\_egress\_with\_ipv6\_cidr\_blocks) | Number of computed egress rules to create where 'ipv6\_cidr\_blocks' is used | `number` | `0` | no | -| [number\_of\_computed\_egress\_with\_prefix\_list\_ids](#input\_number\_of\_computed\_egress\_with\_prefix\_list\_ids) | Number of computed egress rules to create where 'prefix\_list\_ids' is used | `number` | `0` | no | +| [number\_of\_computed\_egress\_with\_cidr\_ipv4](#input\_number\_of\_computed\_egress\_with\_cidr\_ipv4) | Number of computed egress rules to create where 'cidr\_ipv4' is used | `number` | `0` | no | +| [number\_of\_computed\_egress\_with\_cidr\_ipv6](#input\_number\_of\_computed\_egress\_with\_cidr\_ipv6) | Number of computed egress rules to create where 'ipv6\_cidr\_blocks' is used | `number` | `0` | no | +| [number\_of\_computed\_egress\_with\_prefix\_list\_id](#input\_number\_of\_computed\_egress\_with\_prefix\_list\_id) | Number of computed egress rules to create where 'prefix\_list\_id' is used | `number` | `0` | no | +| [number\_of\_computed\_egress\_with\_referenced\_security\_group\_id](#input\_number\_of\_computed\_egress\_with\_referenced\_security\_group\_id) | Number of computed egress rules to create where 'source\_security\_group\_id' is used | `number` | `0` | no | | [number\_of\_computed\_egress\_with\_self](#input\_number\_of\_computed\_egress\_with\_self) | Number of computed egress rules to create where 'self' is defined | `number` | `0` | no | -| [number\_of\_computed\_egress\_with\_source\_security\_group\_id](#input\_number\_of\_computed\_egress\_with\_source\_security\_group\_id) | Number of computed egress rules to create where 'source\_security\_group\_id' is used | `number` | `0` | no | | [number\_of\_computed\_ingress\_cidr\_blocks](#input\_number\_of\_computed\_ingress\_cidr\_blocks) | Number of IPv4 CIDR ranges to use on all computed ingress rules | `number` | `0` | no | | [number\_of\_computed\_ingress\_ipv6\_cidr\_blocks](#input\_number\_of\_computed\_ingress\_ipv6\_cidr\_blocks) | Number of IPv6 CIDR ranges to use on all computed ingress rules | `number` | `0` | no | | [number\_of\_computed\_ingress\_prefix\_list\_ids](#input\_number\_of\_computed\_ingress\_prefix\_list\_ids) | Number of prefix list IDs (for allowing access to VPC endpoints) to use on all computed ingress rules | `number` | `0` | no | | [number\_of\_computed\_ingress\_rules](#input\_number\_of\_computed\_ingress\_rules) | Number of computed ingress rules to create by name | `number` | `0` | no | -| [number\_of\_computed\_ingress\_with\_cidr\_blocks](#input\_number\_of\_computed\_ingress\_with\_cidr\_blocks) | Number of computed ingress rules to create where 'cidr\_blocks' is used | `number` | `0` | no | -| [number\_of\_computed\_ingress\_with\_ipv6\_cidr\_blocks](#input\_number\_of\_computed\_ingress\_with\_ipv6\_cidr\_blocks) | Number of computed ingress rules to create where 'ipv6\_cidr\_blocks' is used | `number` | `0` | no | -| [number\_of\_computed\_ingress\_with\_prefix\_list\_ids](#input\_number\_of\_computed\_ingress\_with\_prefix\_list\_ids) | Number of computed ingress rules to create where 'prefix\_list\_ids' is used | `number` | `0` | no | +| [number\_of\_computed\_ingress\_with\_cidr\_ipv4](#input\_number\_of\_computed\_ingress\_with\_cidr\_ipv4) | Number of computed ingress rules to create where 'cidr\_ipv4' is used | `number` | `0` | no | +| [number\_of\_computed\_ingress\_with\_cidr\_ipv6](#input\_number\_of\_computed\_ingress\_with\_cidr\_ipv6) | Number of computed ingress rules to create where 'ipv6\_cidr\_blocks' is used | `number` | `0` | no | +| [number\_of\_computed\_ingress\_with\_prefix\_list\_id](#input\_number\_of\_computed\_ingress\_with\_prefix\_list\_id) | Number of computed ingress rules to create where 'prefix\_list\_id' is used | `number` | `0` | no | +| [number\_of\_computed\_ingress\_with\_referenced\_security\_group\_id](#input\_number\_of\_computed\_ingress\_with\_referenced\_security\_group\_id) | Number of computed ingress rules to create where 'source\_security\_group\_id' is used | `number` | `0` | no | | [number\_of\_computed\_ingress\_with\_self](#input\_number\_of\_computed\_ingress\_with\_self) | Number of computed ingress rules to create where 'self' is defined | `number` | `0` | no | -| [number\_of\_computed\_ingress\_with\_source\_security\_group\_id](#input\_number\_of\_computed\_ingress\_with\_source\_security\_group\_id) | Number of computed ingress rules to create where 'source\_security\_group\_id' is used | `number` | `0` | no | | [revoke\_rules\_on\_delete](#input\_revoke\_rules\_on\_delete) | Instruct Terraform to revoke all of the Security Groups attached ingress and egress rules before deleting the rule itself. Enable for EMR. | `bool` | `false` | no | | [tags](#input\_tags) | A mapping of tags to assign to security group | `map(string)` | `{}` | no | | [use\_name\_prefix](#input\_use\_name\_prefix) | Whether to use name\_prefix or fixed name. Should be true to able to update security group name after initial creation | `bool` | `true` | no | diff --git a/modules/rdp/main.tf b/modules/rdp/main.tf index 80ea0adb..d2a1bf93 100644 --- a/modules/rdp/main.tf +++ b/modules/rdp/main.tf @@ -19,20 +19,20 @@ module "sg" { ingress_with_self = concat(var.auto_ingress_with_self, var.ingress_with_self) # Open to IPv4 cidr blocks - ingress_with_cidr_blocks = var.ingress_with_cidr_blocks + ingress_with_cidr_ipv4 = var.ingress_with_cidr_ipv4 # Open to IPv6 cidr blocks - ingress_with_ipv6_cidr_blocks = var.ingress_with_ipv6_cidr_blocks + ingress_with_cidr_ipv6 = var.ingress_with_cidr_ipv6 # Open for security group id - ingress_with_source_security_group_id = var.ingress_with_source_security_group_id + ingress_with_referenced_security_group_id = var.ingress_with_referenced_security_group_id # Open for prefix list id - ingress_with_prefix_list_ids = var.ingress_with_prefix_list_ids + ingress_with_prefix_list_id = var.ingress_with_prefix_list_id # Default ingress CIDR blocks - ingress_cidr_blocks = var.ingress_cidr_blocks - ingress_ipv6_cidr_blocks = var.ingress_ipv6_cidr_blocks + ingress_cidr_ipv4 = var.ingress_cidr_ipv4 + ingress_cidr_ipv6 = var.ingress_cidr_ipv6 # Default prefix list ids ingress_prefix_list_ids = var.ingress_prefix_list_ids @@ -47,26 +47,26 @@ module "sg" { computed_ingress_with_self = concat(var.auto_computed_ingress_with_self, var.computed_ingress_with_self) # Open to IPv4 cidr blocks - computed_ingress_with_cidr_blocks = var.computed_ingress_with_cidr_blocks + computed_ingress_with_cidr_ipv4 = var.computed_ingress_with_cidr_ipv4 # Open to IPv6 cidr blocks - computed_ingress_with_ipv6_cidr_blocks = var.computed_ingress_with_ipv6_cidr_blocks + computed_ingress_with_cidr_ipv6 = var.computed_ingress_with_cidr_ipv6 # Open for security group id - computed_ingress_with_source_security_group_id = var.computed_ingress_with_source_security_group_id + computed_ingress_with_referenced_security_group_id = var.computed_ingress_with_referenced_security_group_id # Open for prefix list id - computed_ingress_with_prefix_list_ids = var.computed_ingress_with_prefix_list_ids + computed_ingress_with_prefix_list_id = var.computed_ingress_with_prefix_list_id ############################# # Number of computed ingress ############################# - number_of_computed_ingress_rules = var.auto_number_of_computed_ingress_rules + var.number_of_computed_ingress_rules - number_of_computed_ingress_with_self = var.auto_number_of_computed_ingress_with_self + var.number_of_computed_ingress_with_self - number_of_computed_ingress_with_cidr_blocks = var.number_of_computed_ingress_with_cidr_blocks - number_of_computed_ingress_with_ipv6_cidr_blocks = var.number_of_computed_ingress_with_ipv6_cidr_blocks - number_of_computed_ingress_with_source_security_group_id = var.number_of_computed_ingress_with_source_security_group_id - number_of_computed_ingress_with_prefix_list_ids = var.number_of_computed_ingress_with_prefix_list_ids + number_of_computed_ingress_rules = var.auto_number_of_computed_ingress_rules + var.number_of_computed_ingress_rules + number_of_computed_ingress_with_self = var.auto_number_of_computed_ingress_with_self + var.number_of_computed_ingress_with_self + number_of_computed_ingress_with_cidr_ipv4 = var.number_of_computed_ingress_with_cidr_ipv4 + number_of_computed_ingress_with_cidr_ipv6 = var.number_of_computed_ingress_with_cidr_ipv6 + number_of_computed_ingress_with_referenced_security_group_id = var.number_of_computed_ingress_with_referenced_security_group_id + number_of_computed_ingress_with_prefix_list_id = var.number_of_computed_ingress_with_prefix_list_id ######### # Egress @@ -78,20 +78,20 @@ module "sg" { egress_with_self = concat(var.auto_egress_with_self, var.egress_with_self) # Open to IPv4 cidr blocks - egress_with_cidr_blocks = var.egress_with_cidr_blocks + egress_with_cidr_ipv4 = var.egress_with_cidr_ipv4 # Open to IPv6 cidr blocks - egress_with_ipv6_cidr_blocks = var.egress_with_ipv6_cidr_blocks + egress_with_cidr_ipv6 = var.egress_with_cidr_ipv6 # Open for security group id - egress_with_source_security_group_id = var.egress_with_source_security_group_id + egress_with_referenced_security_group_id = var.egress_with_referenced_security_group_id # Open for prefix list id - egress_with_prefix_list_ids = var.egress_with_prefix_list_ids + egress_with_prefix_list_id = var.egress_with_prefix_list_id # Default egress CIDR blocks - egress_cidr_blocks = var.egress_cidr_blocks - egress_ipv6_cidr_blocks = var.egress_ipv6_cidr_blocks + egress_cidr_ipv4 = var.egress_cidr_ipv4 + egress_cidr_ipv6 = var.egress_cidr_ipv6 # Default prefix list ids egress_prefix_list_ids = var.egress_prefix_list_ids @@ -106,24 +106,24 @@ module "sg" { computed_egress_with_self = concat(var.auto_computed_egress_with_self, var.computed_egress_with_self) # Open to IPv4 cidr blocks - computed_egress_with_cidr_blocks = var.computed_egress_with_cidr_blocks + computed_egress_with_cidr_ipv4 = var.computed_egress_with_cidr_ipv4 # Open to IPv6 cidr blocks - computed_egress_with_ipv6_cidr_blocks = var.computed_egress_with_ipv6_cidr_blocks + computed_egress_with_cidr_ipv6 = var.computed_egress_with_cidr_ipv6 # Open for security group id - computed_egress_with_source_security_group_id = var.computed_egress_with_source_security_group_id + computed_egress_with_referenced_security_group_id = var.computed_egress_with_referenced_security_group_id # Open for prefix list id - computed_egress_with_prefix_list_ids = var.computed_egress_with_prefix_list_ids + computed_egress_with_prefix_list_id = var.computed_egress_with_prefix_list_id ############################# # Number of computed egress ############################# - number_of_computed_egress_rules = var.auto_number_of_computed_egress_rules + var.number_of_computed_egress_rules - number_of_computed_egress_with_self = var.auto_number_of_computed_egress_with_self + var.number_of_computed_egress_with_self - number_of_computed_egress_with_cidr_blocks = var.number_of_computed_egress_with_cidr_blocks - number_of_computed_egress_with_ipv6_cidr_blocks = var.number_of_computed_egress_with_ipv6_cidr_blocks - number_of_computed_egress_with_source_security_group_id = var.number_of_computed_egress_with_source_security_group_id - number_of_computed_egress_with_prefix_list_ids = var.number_of_computed_egress_with_prefix_list_ids + number_of_computed_egress_rules = var.auto_number_of_computed_egress_rules + var.number_of_computed_egress_rules + number_of_computed_egress_with_self = var.auto_number_of_computed_egress_with_self + var.number_of_computed_egress_with_self + number_of_computed_egress_with_cidr_ipv4 = var.number_of_computed_egress_with_cidr_ipv4 + number_of_computed_egress_with_cidr_ipv6 = var.number_of_computed_egress_with_cidr_ipv6 + number_of_computed_egress_with_referenced_security_group_id = var.number_of_computed_egress_with_referenced_security_group_id + number_of_computed_egress_with_prefix_list_id = var.number_of_computed_egress_with_prefix_list_id } diff --git a/modules/rdp/variables.tf b/modules/rdp/variables.tf index 60c8c27b..6590c9e3 100644 --- a/modules/rdp/variables.tf +++ b/modules/rdp/variables.tf @@ -56,37 +56,37 @@ variable "ingress_with_self" { default = [] } -variable "ingress_with_cidr_blocks" { - description = "List of ingress rules to create where 'cidr_blocks' is used" +variable "ingress_with_cidr_ipv4" { + description = "List of ingress rules to create where 'cidr_ipv4' is used" type = list(map(string)) default = [] } -variable "ingress_with_ipv6_cidr_blocks" { +variable "ingress_with_cidr_ipv6" { description = "List of ingress rules to create where 'ipv6_cidr_blocks' is used" type = list(map(string)) default = [] } -variable "ingress_with_source_security_group_id" { +variable "ingress_with_referenced_security_group_id" { description = "List of ingress rules to create where 'source_security_group_id' is used" type = list(map(string)) default = [] } -variable "ingress_with_prefix_list_ids" { - description = "List of ingress rules to create where 'prefix_list_ids' is used" +variable "ingress_with_prefix_list_id" { + description = "List of ingress rules to create where 'prefix_list_id' is used" type = list(map(string)) default = [] } -variable "ingress_cidr_blocks" { +variable "ingress_cidr_ipv4" { description = "List of IPv4 CIDR ranges to use on all ingress rules" type = list(string) default = [] } -variable "ingress_ipv6_cidr_blocks" { +variable "ingress_cidr_ipv6" { description = "List of IPv6 CIDR ranges to use on all ingress rules" type = list(string) default = [] @@ -113,26 +113,26 @@ variable "computed_ingress_with_self" { default = [] } -variable "computed_ingress_with_cidr_blocks" { - description = "List of computed ingress rules to create where 'cidr_blocks' is used" +variable "computed_ingress_with_cidr_ipv4" { + description = "List of computed ingress rules to create where 'cidr_ipv4' is used" type = list(map(string)) default = [] } -variable "computed_ingress_with_ipv6_cidr_blocks" { +variable "computed_ingress_with_cidr_ipv6" { description = "List of computed ingress rules to create where 'ipv6_cidr_blocks' is used" type = list(map(string)) default = [] } -variable "computed_ingress_with_source_security_group_id" { +variable "computed_ingress_with_referenced_security_group_id" { description = "List of computed ingress rules to create where 'source_security_group_id' is used" type = list(map(string)) default = [] } -variable "computed_ingress_with_prefix_list_ids" { - description = "List of computed ingress rules to create where 'prefix_list_ids' is used" +variable "computed_ingress_with_prefix_list_id" { + description = "List of computed ingress rules to create where 'prefix_list_id' is used" type = list(map(string)) default = [] } @@ -170,26 +170,26 @@ variable "number_of_computed_ingress_with_self" { default = 0 } -variable "number_of_computed_ingress_with_cidr_blocks" { - description = "Number of computed ingress rules to create where 'cidr_blocks' is used" +variable "number_of_computed_ingress_with_cidr_ipv4" { + description = "Number of computed ingress rules to create where 'cidr_ipv4' is used" type = number default = 0 } -variable "number_of_computed_ingress_with_ipv6_cidr_blocks" { +variable "number_of_computed_ingress_with_cidr_ipv6" { description = "Number of computed ingress rules to create where 'ipv6_cidr_blocks' is used" type = number default = 0 } -variable "number_of_computed_ingress_with_source_security_group_id" { +variable "number_of_computed_ingress_with_referenced_security_group_id" { description = "Number of computed ingress rules to create where 'source_security_group_id' is used" type = number default = 0 } -variable "number_of_computed_ingress_with_prefix_list_ids" { - description = "Number of computed ingress rules to create where 'prefix_list_ids' is used" +variable "number_of_computed_ingress_with_prefix_list_id" { + description = "Number of computed ingress rules to create where 'prefix_list_id' is used" type = number default = 0 } @@ -227,37 +227,37 @@ variable "egress_with_self" { default = [] } -variable "egress_with_cidr_blocks" { - description = "List of egress rules to create where 'cidr_blocks' is used" +variable "egress_with_cidr_ipv4" { + description = "List of egress rules to create where 'cidr_ipv4' is used" type = list(map(string)) default = [] } -variable "egress_with_ipv6_cidr_blocks" { +variable "egress_with_cidr_ipv6" { description = "List of egress rules to create where 'ipv6_cidr_blocks' is used" type = list(map(string)) default = [] } -variable "egress_with_source_security_group_id" { +variable "egress_with_referenced_security_group_id" { description = "List of egress rules to create where 'source_security_group_id' is used" type = list(map(string)) default = [] } -variable "egress_with_prefix_list_ids" { - description = "List of egress rules to create where 'prefix_list_ids' is used" +variable "egress_with_prefix_list_id" { + description = "List of egress rules to create where 'prefix_list_id' is used" type = list(map(string)) default = [] } -variable "egress_cidr_blocks" { +variable "egress_cidr_ipv4" { description = "List of IPv4 CIDR ranges to use on all egress rules" type = list(string) default = ["0.0.0.0/0"] } -variable "egress_ipv6_cidr_blocks" { +variable "egress_cidr_ipv6" { description = "List of IPv6 CIDR ranges to use on all egress rules" type = list(string) default = ["::/0"] @@ -284,26 +284,26 @@ variable "computed_egress_with_self" { default = [] } -variable "computed_egress_with_cidr_blocks" { - description = "List of computed egress rules to create where 'cidr_blocks' is used" +variable "computed_egress_with_cidr_ipv4" { + description = "List of computed egress rules to create where 'cidr_ipv4' is used" type = list(map(string)) default = [] } -variable "computed_egress_with_ipv6_cidr_blocks" { +variable "computed_egress_with_cidr_ipv6" { description = "List of computed egress rules to create where 'ipv6_cidr_blocks' is used" type = list(map(string)) default = [] } -variable "computed_egress_with_source_security_group_id" { +variable "computed_egress_with_referenced_security_group_id" { description = "List of computed egress rules to create where 'source_security_group_id' is used" type = list(map(string)) default = [] } -variable "computed_egress_with_prefix_list_ids" { - description = "List of computed egress rules to create where 'prefix_list_ids' is used" +variable "computed_egress_with_prefix_list_id" { + description = "List of computed egress rules to create where 'prefix_list_id' is used" type = list(map(string)) default = [] } @@ -341,26 +341,26 @@ variable "number_of_computed_egress_with_self" { default = 0 } -variable "number_of_computed_egress_with_cidr_blocks" { - description = "Number of computed egress rules to create where 'cidr_blocks' is used" +variable "number_of_computed_egress_with_cidr_ipv4" { + description = "Number of computed egress rules to create where 'cidr_ipv4' is used" type = number default = 0 } -variable "number_of_computed_egress_with_ipv6_cidr_blocks" { +variable "number_of_computed_egress_with_cidr_ipv6" { description = "Number of computed egress rules to create where 'ipv6_cidr_blocks' is used" type = number default = 0 } -variable "number_of_computed_egress_with_source_security_group_id" { +variable "number_of_computed_egress_with_referenced_security_group_id" { description = "Number of computed egress rules to create where 'source_security_group_id' is used" type = number default = 0 } -variable "number_of_computed_egress_with_prefix_list_ids" { - description = "Number of computed egress rules to create where 'prefix_list_ids' is used" +variable "number_of_computed_egress_with_prefix_list_id" { + description = "Number of computed egress rules to create where 'prefix_list_id' is used" type = number default = 0 } diff --git a/modules/redis/README.md b/modules/redis/README.md index 9bf1293d..a81d14cb 100644 --- a/modules/redis/README.md +++ b/modules/redis/README.md @@ -55,59 +55,59 @@ No resources. | [computed\_egress\_ipv6\_cidr\_blocks](#input\_computed\_egress\_ipv6\_cidr\_blocks) | List of IPv6 CIDR ranges to use on all computed egress rules | `list(string)` |
[
"::/0"
]
| no | | [computed\_egress\_prefix\_list\_ids](#input\_computed\_egress\_prefix\_list\_ids) | List of prefix list IDs (for allowing access to VPC endpoints) to use on all computed egress rules | `list(string)` | `[]` | no | | [computed\_egress\_rules](#input\_computed\_egress\_rules) | List of computed egress rules to create by name | `list(string)` | `[]` | no | -| [computed\_egress\_with\_cidr\_blocks](#input\_computed\_egress\_with\_cidr\_blocks) | List of computed egress rules to create where 'cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [computed\_egress\_with\_ipv6\_cidr\_blocks](#input\_computed\_egress\_with\_ipv6\_cidr\_blocks) | List of computed egress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [computed\_egress\_with\_prefix\_list\_ids](#input\_computed\_egress\_with\_prefix\_list\_ids) | List of computed egress rules to create where 'prefix\_list\_ids' is used | `list(map(string))` | `[]` | no | +| [computed\_egress\_with\_cidr\_ipv4](#input\_computed\_egress\_with\_cidr\_ipv4) | List of computed egress rules to create where 'cidr\_ipv4' is used | `list(map(string))` | `[]` | no | +| [computed\_egress\_with\_cidr\_ipv6](#input\_computed\_egress\_with\_cidr\_ipv6) | List of computed egress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | +| [computed\_egress\_with\_prefix\_list\_id](#input\_computed\_egress\_with\_prefix\_list\_id) | List of computed egress rules to create where 'prefix\_list\_id' is used | `list(map(string))` | `[]` | no | +| [computed\_egress\_with\_referenced\_security\_group\_id](#input\_computed\_egress\_with\_referenced\_security\_group\_id) | List of computed egress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [computed\_egress\_with\_self](#input\_computed\_egress\_with\_self) | List of computed egress rules to create where 'self' is defined | `list(map(string))` | `[]` | no | -| [computed\_egress\_with\_source\_security\_group\_id](#input\_computed\_egress\_with\_source\_security\_group\_id) | List of computed egress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [computed\_ingress\_cidr\_blocks](#input\_computed\_ingress\_cidr\_blocks) | List of IPv4 CIDR ranges to use on all computed ingress rules | `list(string)` | `[]` | no | | [computed\_ingress\_ipv6\_cidr\_blocks](#input\_computed\_ingress\_ipv6\_cidr\_blocks) | List of IPv6 CIDR ranges to use on all computed ingress rules | `list(string)` | `[]` | no | | [computed\_ingress\_prefix\_list\_ids](#input\_computed\_ingress\_prefix\_list\_ids) | List of prefix list IDs (for allowing access to VPC endpoints) to use on all computed ingress rules | `list(string)` | `[]` | no | | [computed\_ingress\_rules](#input\_computed\_ingress\_rules) | List of computed ingress rules to create by name | `list(string)` | `[]` | no | -| [computed\_ingress\_with\_cidr\_blocks](#input\_computed\_ingress\_with\_cidr\_blocks) | List of computed ingress rules to create where 'cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [computed\_ingress\_with\_ipv6\_cidr\_blocks](#input\_computed\_ingress\_with\_ipv6\_cidr\_blocks) | List of computed ingress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [computed\_ingress\_with\_prefix\_list\_ids](#input\_computed\_ingress\_with\_prefix\_list\_ids) | List of computed ingress rules to create where 'prefix\_list\_ids' is used | `list(map(string))` | `[]` | no | +| [computed\_ingress\_with\_cidr\_ipv4](#input\_computed\_ingress\_with\_cidr\_ipv4) | List of computed ingress rules to create where 'cidr\_ipv4' is used | `list(map(string))` | `[]` | no | +| [computed\_ingress\_with\_cidr\_ipv6](#input\_computed\_ingress\_with\_cidr\_ipv6) | List of computed ingress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | +| [computed\_ingress\_with\_prefix\_list\_id](#input\_computed\_ingress\_with\_prefix\_list\_id) | List of computed ingress rules to create where 'prefix\_list\_id' is used | `list(map(string))` | `[]` | no | +| [computed\_ingress\_with\_referenced\_security\_group\_id](#input\_computed\_ingress\_with\_referenced\_security\_group\_id) | List of computed ingress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [computed\_ingress\_with\_self](#input\_computed\_ingress\_with\_self) | List of computed ingress rules to create where 'self' is defined | `list(map(string))` | `[]` | no | -| [computed\_ingress\_with\_source\_security\_group\_id](#input\_computed\_ingress\_with\_source\_security\_group\_id) | List of computed ingress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [create](#input\_create) | Whether to create security group and all rules | `bool` | `true` | no | | [description](#input\_description) | Description of security group | `string` | `"Security Group managed by Terraform"` | no | -| [egress\_cidr\_blocks](#input\_egress\_cidr\_blocks) | List of IPv4 CIDR ranges to use on all egress rules | `list(string)` |
[
"0.0.0.0/0"
]
| no | -| [egress\_ipv6\_cidr\_blocks](#input\_egress\_ipv6\_cidr\_blocks) | List of IPv6 CIDR ranges to use on all egress rules | `list(string)` |
[
"::/0"
]
| no | +| [egress\_cidr\_ipv4](#input\_egress\_cidr\_ipv4) | List of IPv4 CIDR ranges to use on all egress rules | `list(string)` |
[
"0.0.0.0/0"
]
| no | +| [egress\_cidr\_ipv6](#input\_egress\_cidr\_ipv6) | List of IPv6 CIDR ranges to use on all egress rules | `list(string)` |
[
"::/0"
]
| no | | [egress\_prefix\_list\_ids](#input\_egress\_prefix\_list\_ids) | List of prefix list IDs (for allowing access to VPC endpoints) to use on all egress rules | `list(string)` | `[]` | no | | [egress\_rules](#input\_egress\_rules) | List of egress rules to create by name | `list(string)` | `[]` | no | -| [egress\_with\_cidr\_blocks](#input\_egress\_with\_cidr\_blocks) | List of egress rules to create where 'cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [egress\_with\_ipv6\_cidr\_blocks](#input\_egress\_with\_ipv6\_cidr\_blocks) | List of egress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [egress\_with\_prefix\_list\_ids](#input\_egress\_with\_prefix\_list\_ids) | List of egress rules to create where 'prefix\_list\_ids' is used | `list(map(string))` | `[]` | no | +| [egress\_with\_cidr\_ipv4](#input\_egress\_with\_cidr\_ipv4) | List of egress rules to create where 'cidr\_ipv4' is used | `list(map(string))` | `[]` | no | +| [egress\_with\_cidr\_ipv6](#input\_egress\_with\_cidr\_ipv6) | List of egress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | +| [egress\_with\_prefix\_list\_id](#input\_egress\_with\_prefix\_list\_id) | List of egress rules to create where 'prefix\_list\_id' is used | `list(map(string))` | `[]` | no | +| [egress\_with\_referenced\_security\_group\_id](#input\_egress\_with\_referenced\_security\_group\_id) | List of egress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [egress\_with\_self](#input\_egress\_with\_self) | List of egress rules to create where 'self' is defined | `list(map(string))` | `[]` | no | -| [egress\_with\_source\_security\_group\_id](#input\_egress\_with\_source\_security\_group\_id) | List of egress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | -| [ingress\_cidr\_blocks](#input\_ingress\_cidr\_blocks) | List of IPv4 CIDR ranges to use on all ingress rules | `list(string)` | `[]` | no | -| [ingress\_ipv6\_cidr\_blocks](#input\_ingress\_ipv6\_cidr\_blocks) | List of IPv6 CIDR ranges to use on all ingress rules | `list(string)` | `[]` | no | +| [ingress\_cidr\_ipv4](#input\_ingress\_cidr\_ipv4) | List of IPv4 CIDR ranges to use on all ingress rules | `list(string)` | `[]` | no | +| [ingress\_cidr\_ipv6](#input\_ingress\_cidr\_ipv6) | List of IPv6 CIDR ranges to use on all ingress rules | `list(string)` | `[]` | no | | [ingress\_prefix\_list\_ids](#input\_ingress\_prefix\_list\_ids) | List of prefix list IDs (for allowing access to VPC endpoints) to use on all ingress rules | `list(string)` | `[]` | no | | [ingress\_rules](#input\_ingress\_rules) | List of ingress rules to create by name | `list(string)` | `[]` | no | -| [ingress\_with\_cidr\_blocks](#input\_ingress\_with\_cidr\_blocks) | List of ingress rules to create where 'cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [ingress\_with\_ipv6\_cidr\_blocks](#input\_ingress\_with\_ipv6\_cidr\_blocks) | List of ingress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [ingress\_with\_prefix\_list\_ids](#input\_ingress\_with\_prefix\_list\_ids) | List of ingress rules to create where 'prefix\_list\_ids' is used | `list(map(string))` | `[]` | no | +| [ingress\_with\_cidr\_ipv4](#input\_ingress\_with\_cidr\_ipv4) | List of ingress rules to create where 'cidr\_ipv4' is used | `list(map(string))` | `[]` | no | +| [ingress\_with\_cidr\_ipv6](#input\_ingress\_with\_cidr\_ipv6) | List of ingress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | +| [ingress\_with\_prefix\_list\_id](#input\_ingress\_with\_prefix\_list\_id) | List of ingress rules to create where 'prefix\_list\_id' is used | `list(map(string))` | `[]` | no | +| [ingress\_with\_referenced\_security\_group\_id](#input\_ingress\_with\_referenced\_security\_group\_id) | List of ingress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [ingress\_with\_self](#input\_ingress\_with\_self) | List of ingress rules to create where 'self' is defined | `list(map(string))` | `[]` | no | -| [ingress\_with\_source\_security\_group\_id](#input\_ingress\_with\_source\_security\_group\_id) | List of ingress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [name](#input\_name) | Name of security group | `string` | n/a | yes | | [number\_of\_computed\_egress\_cidr\_blocks](#input\_number\_of\_computed\_egress\_cidr\_blocks) | Number of IPv4 CIDR ranges to use on all computed egress rules | `number` | `0` | no | | [number\_of\_computed\_egress\_ipv6\_cidr\_blocks](#input\_number\_of\_computed\_egress\_ipv6\_cidr\_blocks) | Number of IPv6 CIDR ranges to use on all computed egress rules | `number` | `0` | no | | [number\_of\_computed\_egress\_prefix\_list\_ids](#input\_number\_of\_computed\_egress\_prefix\_list\_ids) | Number of prefix list IDs (for allowing access to VPC endpoints) to use on all computed egress rules | `number` | `0` | no | | [number\_of\_computed\_egress\_rules](#input\_number\_of\_computed\_egress\_rules) | Number of computed egress rules to create by name | `number` | `0` | no | -| [number\_of\_computed\_egress\_with\_cidr\_blocks](#input\_number\_of\_computed\_egress\_with\_cidr\_blocks) | Number of computed egress rules to create where 'cidr\_blocks' is used | `number` | `0` | no | -| [number\_of\_computed\_egress\_with\_ipv6\_cidr\_blocks](#input\_number\_of\_computed\_egress\_with\_ipv6\_cidr\_blocks) | Number of computed egress rules to create where 'ipv6\_cidr\_blocks' is used | `number` | `0` | no | -| [number\_of\_computed\_egress\_with\_prefix\_list\_ids](#input\_number\_of\_computed\_egress\_with\_prefix\_list\_ids) | Number of computed egress rules to create where 'prefix\_list\_ids' is used | `number` | `0` | no | +| [number\_of\_computed\_egress\_with\_cidr\_ipv4](#input\_number\_of\_computed\_egress\_with\_cidr\_ipv4) | Number of computed egress rules to create where 'cidr\_ipv4' is used | `number` | `0` | no | +| [number\_of\_computed\_egress\_with\_cidr\_ipv6](#input\_number\_of\_computed\_egress\_with\_cidr\_ipv6) | Number of computed egress rules to create where 'ipv6\_cidr\_blocks' is used | `number` | `0` | no | +| [number\_of\_computed\_egress\_with\_prefix\_list\_id](#input\_number\_of\_computed\_egress\_with\_prefix\_list\_id) | Number of computed egress rules to create where 'prefix\_list\_id' is used | `number` | `0` | no | +| [number\_of\_computed\_egress\_with\_referenced\_security\_group\_id](#input\_number\_of\_computed\_egress\_with\_referenced\_security\_group\_id) | Number of computed egress rules to create where 'source\_security\_group\_id' is used | `number` | `0` | no | | [number\_of\_computed\_egress\_with\_self](#input\_number\_of\_computed\_egress\_with\_self) | Number of computed egress rules to create where 'self' is defined | `number` | `0` | no | -| [number\_of\_computed\_egress\_with\_source\_security\_group\_id](#input\_number\_of\_computed\_egress\_with\_source\_security\_group\_id) | Number of computed egress rules to create where 'source\_security\_group\_id' is used | `number` | `0` | no | | [number\_of\_computed\_ingress\_cidr\_blocks](#input\_number\_of\_computed\_ingress\_cidr\_blocks) | Number of IPv4 CIDR ranges to use on all computed ingress rules | `number` | `0` | no | | [number\_of\_computed\_ingress\_ipv6\_cidr\_blocks](#input\_number\_of\_computed\_ingress\_ipv6\_cidr\_blocks) | Number of IPv6 CIDR ranges to use on all computed ingress rules | `number` | `0` | no | | [number\_of\_computed\_ingress\_prefix\_list\_ids](#input\_number\_of\_computed\_ingress\_prefix\_list\_ids) | Number of prefix list IDs (for allowing access to VPC endpoints) to use on all computed ingress rules | `number` | `0` | no | | [number\_of\_computed\_ingress\_rules](#input\_number\_of\_computed\_ingress\_rules) | Number of computed ingress rules to create by name | `number` | `0` | no | -| [number\_of\_computed\_ingress\_with\_cidr\_blocks](#input\_number\_of\_computed\_ingress\_with\_cidr\_blocks) | Number of computed ingress rules to create where 'cidr\_blocks' is used | `number` | `0` | no | -| [number\_of\_computed\_ingress\_with\_ipv6\_cidr\_blocks](#input\_number\_of\_computed\_ingress\_with\_ipv6\_cidr\_blocks) | Number of computed ingress rules to create where 'ipv6\_cidr\_blocks' is used | `number` | `0` | no | -| [number\_of\_computed\_ingress\_with\_prefix\_list\_ids](#input\_number\_of\_computed\_ingress\_with\_prefix\_list\_ids) | Number of computed ingress rules to create where 'prefix\_list\_ids' is used | `number` | `0` | no | +| [number\_of\_computed\_ingress\_with\_cidr\_ipv4](#input\_number\_of\_computed\_ingress\_with\_cidr\_ipv4) | Number of computed ingress rules to create where 'cidr\_ipv4' is used | `number` | `0` | no | +| [number\_of\_computed\_ingress\_with\_cidr\_ipv6](#input\_number\_of\_computed\_ingress\_with\_cidr\_ipv6) | Number of computed ingress rules to create where 'ipv6\_cidr\_blocks' is used | `number` | `0` | no | +| [number\_of\_computed\_ingress\_with\_prefix\_list\_id](#input\_number\_of\_computed\_ingress\_with\_prefix\_list\_id) | Number of computed ingress rules to create where 'prefix\_list\_id' is used | `number` | `0` | no | +| [number\_of\_computed\_ingress\_with\_referenced\_security\_group\_id](#input\_number\_of\_computed\_ingress\_with\_referenced\_security\_group\_id) | Number of computed ingress rules to create where 'source\_security\_group\_id' is used | `number` | `0` | no | | [number\_of\_computed\_ingress\_with\_self](#input\_number\_of\_computed\_ingress\_with\_self) | Number of computed ingress rules to create where 'self' is defined | `number` | `0` | no | -| [number\_of\_computed\_ingress\_with\_source\_security\_group\_id](#input\_number\_of\_computed\_ingress\_with\_source\_security\_group\_id) | Number of computed ingress rules to create where 'source\_security\_group\_id' is used | `number` | `0` | no | | [revoke\_rules\_on\_delete](#input\_revoke\_rules\_on\_delete) | Instruct Terraform to revoke all of the Security Groups attached ingress and egress rules before deleting the rule itself. Enable for EMR. | `bool` | `false` | no | | [tags](#input\_tags) | A mapping of tags to assign to security group | `map(string)` | `{}` | no | | [use\_name\_prefix](#input\_use\_name\_prefix) | Whether to use name\_prefix or fixed name. Should be true to able to update security group name after initial creation | `bool` | `true` | no | diff --git a/modules/redis/main.tf b/modules/redis/main.tf index 80ea0adb..d2a1bf93 100644 --- a/modules/redis/main.tf +++ b/modules/redis/main.tf @@ -19,20 +19,20 @@ module "sg" { ingress_with_self = concat(var.auto_ingress_with_self, var.ingress_with_self) # Open to IPv4 cidr blocks - ingress_with_cidr_blocks = var.ingress_with_cidr_blocks + ingress_with_cidr_ipv4 = var.ingress_with_cidr_ipv4 # Open to IPv6 cidr blocks - ingress_with_ipv6_cidr_blocks = var.ingress_with_ipv6_cidr_blocks + ingress_with_cidr_ipv6 = var.ingress_with_cidr_ipv6 # Open for security group id - ingress_with_source_security_group_id = var.ingress_with_source_security_group_id + ingress_with_referenced_security_group_id = var.ingress_with_referenced_security_group_id # Open for prefix list id - ingress_with_prefix_list_ids = var.ingress_with_prefix_list_ids + ingress_with_prefix_list_id = var.ingress_with_prefix_list_id # Default ingress CIDR blocks - ingress_cidr_blocks = var.ingress_cidr_blocks - ingress_ipv6_cidr_blocks = var.ingress_ipv6_cidr_blocks + ingress_cidr_ipv4 = var.ingress_cidr_ipv4 + ingress_cidr_ipv6 = var.ingress_cidr_ipv6 # Default prefix list ids ingress_prefix_list_ids = var.ingress_prefix_list_ids @@ -47,26 +47,26 @@ module "sg" { computed_ingress_with_self = concat(var.auto_computed_ingress_with_self, var.computed_ingress_with_self) # Open to IPv4 cidr blocks - computed_ingress_with_cidr_blocks = var.computed_ingress_with_cidr_blocks + computed_ingress_with_cidr_ipv4 = var.computed_ingress_with_cidr_ipv4 # Open to IPv6 cidr blocks - computed_ingress_with_ipv6_cidr_blocks = var.computed_ingress_with_ipv6_cidr_blocks + computed_ingress_with_cidr_ipv6 = var.computed_ingress_with_cidr_ipv6 # Open for security group id - computed_ingress_with_source_security_group_id = var.computed_ingress_with_source_security_group_id + computed_ingress_with_referenced_security_group_id = var.computed_ingress_with_referenced_security_group_id # Open for prefix list id - computed_ingress_with_prefix_list_ids = var.computed_ingress_with_prefix_list_ids + computed_ingress_with_prefix_list_id = var.computed_ingress_with_prefix_list_id ############################# # Number of computed ingress ############################# - number_of_computed_ingress_rules = var.auto_number_of_computed_ingress_rules + var.number_of_computed_ingress_rules - number_of_computed_ingress_with_self = var.auto_number_of_computed_ingress_with_self + var.number_of_computed_ingress_with_self - number_of_computed_ingress_with_cidr_blocks = var.number_of_computed_ingress_with_cidr_blocks - number_of_computed_ingress_with_ipv6_cidr_blocks = var.number_of_computed_ingress_with_ipv6_cidr_blocks - number_of_computed_ingress_with_source_security_group_id = var.number_of_computed_ingress_with_source_security_group_id - number_of_computed_ingress_with_prefix_list_ids = var.number_of_computed_ingress_with_prefix_list_ids + number_of_computed_ingress_rules = var.auto_number_of_computed_ingress_rules + var.number_of_computed_ingress_rules + number_of_computed_ingress_with_self = var.auto_number_of_computed_ingress_with_self + var.number_of_computed_ingress_with_self + number_of_computed_ingress_with_cidr_ipv4 = var.number_of_computed_ingress_with_cidr_ipv4 + number_of_computed_ingress_with_cidr_ipv6 = var.number_of_computed_ingress_with_cidr_ipv6 + number_of_computed_ingress_with_referenced_security_group_id = var.number_of_computed_ingress_with_referenced_security_group_id + number_of_computed_ingress_with_prefix_list_id = var.number_of_computed_ingress_with_prefix_list_id ######### # Egress @@ -78,20 +78,20 @@ module "sg" { egress_with_self = concat(var.auto_egress_with_self, var.egress_with_self) # Open to IPv4 cidr blocks - egress_with_cidr_blocks = var.egress_with_cidr_blocks + egress_with_cidr_ipv4 = var.egress_with_cidr_ipv4 # Open to IPv6 cidr blocks - egress_with_ipv6_cidr_blocks = var.egress_with_ipv6_cidr_blocks + egress_with_cidr_ipv6 = var.egress_with_cidr_ipv6 # Open for security group id - egress_with_source_security_group_id = var.egress_with_source_security_group_id + egress_with_referenced_security_group_id = var.egress_with_referenced_security_group_id # Open for prefix list id - egress_with_prefix_list_ids = var.egress_with_prefix_list_ids + egress_with_prefix_list_id = var.egress_with_prefix_list_id # Default egress CIDR blocks - egress_cidr_blocks = var.egress_cidr_blocks - egress_ipv6_cidr_blocks = var.egress_ipv6_cidr_blocks + egress_cidr_ipv4 = var.egress_cidr_ipv4 + egress_cidr_ipv6 = var.egress_cidr_ipv6 # Default prefix list ids egress_prefix_list_ids = var.egress_prefix_list_ids @@ -106,24 +106,24 @@ module "sg" { computed_egress_with_self = concat(var.auto_computed_egress_with_self, var.computed_egress_with_self) # Open to IPv4 cidr blocks - computed_egress_with_cidr_blocks = var.computed_egress_with_cidr_blocks + computed_egress_with_cidr_ipv4 = var.computed_egress_with_cidr_ipv4 # Open to IPv6 cidr blocks - computed_egress_with_ipv6_cidr_blocks = var.computed_egress_with_ipv6_cidr_blocks + computed_egress_with_cidr_ipv6 = var.computed_egress_with_cidr_ipv6 # Open for security group id - computed_egress_with_source_security_group_id = var.computed_egress_with_source_security_group_id + computed_egress_with_referenced_security_group_id = var.computed_egress_with_referenced_security_group_id # Open for prefix list id - computed_egress_with_prefix_list_ids = var.computed_egress_with_prefix_list_ids + computed_egress_with_prefix_list_id = var.computed_egress_with_prefix_list_id ############################# # Number of computed egress ############################# - number_of_computed_egress_rules = var.auto_number_of_computed_egress_rules + var.number_of_computed_egress_rules - number_of_computed_egress_with_self = var.auto_number_of_computed_egress_with_self + var.number_of_computed_egress_with_self - number_of_computed_egress_with_cidr_blocks = var.number_of_computed_egress_with_cidr_blocks - number_of_computed_egress_with_ipv6_cidr_blocks = var.number_of_computed_egress_with_ipv6_cidr_blocks - number_of_computed_egress_with_source_security_group_id = var.number_of_computed_egress_with_source_security_group_id - number_of_computed_egress_with_prefix_list_ids = var.number_of_computed_egress_with_prefix_list_ids + number_of_computed_egress_rules = var.auto_number_of_computed_egress_rules + var.number_of_computed_egress_rules + number_of_computed_egress_with_self = var.auto_number_of_computed_egress_with_self + var.number_of_computed_egress_with_self + number_of_computed_egress_with_cidr_ipv4 = var.number_of_computed_egress_with_cidr_ipv4 + number_of_computed_egress_with_cidr_ipv6 = var.number_of_computed_egress_with_cidr_ipv6 + number_of_computed_egress_with_referenced_security_group_id = var.number_of_computed_egress_with_referenced_security_group_id + number_of_computed_egress_with_prefix_list_id = var.number_of_computed_egress_with_prefix_list_id } diff --git a/modules/redis/variables.tf b/modules/redis/variables.tf index 60c8c27b..6590c9e3 100644 --- a/modules/redis/variables.tf +++ b/modules/redis/variables.tf @@ -56,37 +56,37 @@ variable "ingress_with_self" { default = [] } -variable "ingress_with_cidr_blocks" { - description = "List of ingress rules to create where 'cidr_blocks' is used" +variable "ingress_with_cidr_ipv4" { + description = "List of ingress rules to create where 'cidr_ipv4' is used" type = list(map(string)) default = [] } -variable "ingress_with_ipv6_cidr_blocks" { +variable "ingress_with_cidr_ipv6" { description = "List of ingress rules to create where 'ipv6_cidr_blocks' is used" type = list(map(string)) default = [] } -variable "ingress_with_source_security_group_id" { +variable "ingress_with_referenced_security_group_id" { description = "List of ingress rules to create where 'source_security_group_id' is used" type = list(map(string)) default = [] } -variable "ingress_with_prefix_list_ids" { - description = "List of ingress rules to create where 'prefix_list_ids' is used" +variable "ingress_with_prefix_list_id" { + description = "List of ingress rules to create where 'prefix_list_id' is used" type = list(map(string)) default = [] } -variable "ingress_cidr_blocks" { +variable "ingress_cidr_ipv4" { description = "List of IPv4 CIDR ranges to use on all ingress rules" type = list(string) default = [] } -variable "ingress_ipv6_cidr_blocks" { +variable "ingress_cidr_ipv6" { description = "List of IPv6 CIDR ranges to use on all ingress rules" type = list(string) default = [] @@ -113,26 +113,26 @@ variable "computed_ingress_with_self" { default = [] } -variable "computed_ingress_with_cidr_blocks" { - description = "List of computed ingress rules to create where 'cidr_blocks' is used" +variable "computed_ingress_with_cidr_ipv4" { + description = "List of computed ingress rules to create where 'cidr_ipv4' is used" type = list(map(string)) default = [] } -variable "computed_ingress_with_ipv6_cidr_blocks" { +variable "computed_ingress_with_cidr_ipv6" { description = "List of computed ingress rules to create where 'ipv6_cidr_blocks' is used" type = list(map(string)) default = [] } -variable "computed_ingress_with_source_security_group_id" { +variable "computed_ingress_with_referenced_security_group_id" { description = "List of computed ingress rules to create where 'source_security_group_id' is used" type = list(map(string)) default = [] } -variable "computed_ingress_with_prefix_list_ids" { - description = "List of computed ingress rules to create where 'prefix_list_ids' is used" +variable "computed_ingress_with_prefix_list_id" { + description = "List of computed ingress rules to create where 'prefix_list_id' is used" type = list(map(string)) default = [] } @@ -170,26 +170,26 @@ variable "number_of_computed_ingress_with_self" { default = 0 } -variable "number_of_computed_ingress_with_cidr_blocks" { - description = "Number of computed ingress rules to create where 'cidr_blocks' is used" +variable "number_of_computed_ingress_with_cidr_ipv4" { + description = "Number of computed ingress rules to create where 'cidr_ipv4' is used" type = number default = 0 } -variable "number_of_computed_ingress_with_ipv6_cidr_blocks" { +variable "number_of_computed_ingress_with_cidr_ipv6" { description = "Number of computed ingress rules to create where 'ipv6_cidr_blocks' is used" type = number default = 0 } -variable "number_of_computed_ingress_with_source_security_group_id" { +variable "number_of_computed_ingress_with_referenced_security_group_id" { description = "Number of computed ingress rules to create where 'source_security_group_id' is used" type = number default = 0 } -variable "number_of_computed_ingress_with_prefix_list_ids" { - description = "Number of computed ingress rules to create where 'prefix_list_ids' is used" +variable "number_of_computed_ingress_with_prefix_list_id" { + description = "Number of computed ingress rules to create where 'prefix_list_id' is used" type = number default = 0 } @@ -227,37 +227,37 @@ variable "egress_with_self" { default = [] } -variable "egress_with_cidr_blocks" { - description = "List of egress rules to create where 'cidr_blocks' is used" +variable "egress_with_cidr_ipv4" { + description = "List of egress rules to create where 'cidr_ipv4' is used" type = list(map(string)) default = [] } -variable "egress_with_ipv6_cidr_blocks" { +variable "egress_with_cidr_ipv6" { description = "List of egress rules to create where 'ipv6_cidr_blocks' is used" type = list(map(string)) default = [] } -variable "egress_with_source_security_group_id" { +variable "egress_with_referenced_security_group_id" { description = "List of egress rules to create where 'source_security_group_id' is used" type = list(map(string)) default = [] } -variable "egress_with_prefix_list_ids" { - description = "List of egress rules to create where 'prefix_list_ids' is used" +variable "egress_with_prefix_list_id" { + description = "List of egress rules to create where 'prefix_list_id' is used" type = list(map(string)) default = [] } -variable "egress_cidr_blocks" { +variable "egress_cidr_ipv4" { description = "List of IPv4 CIDR ranges to use on all egress rules" type = list(string) default = ["0.0.0.0/0"] } -variable "egress_ipv6_cidr_blocks" { +variable "egress_cidr_ipv6" { description = "List of IPv6 CIDR ranges to use on all egress rules" type = list(string) default = ["::/0"] @@ -284,26 +284,26 @@ variable "computed_egress_with_self" { default = [] } -variable "computed_egress_with_cidr_blocks" { - description = "List of computed egress rules to create where 'cidr_blocks' is used" +variable "computed_egress_with_cidr_ipv4" { + description = "List of computed egress rules to create where 'cidr_ipv4' is used" type = list(map(string)) default = [] } -variable "computed_egress_with_ipv6_cidr_blocks" { +variable "computed_egress_with_cidr_ipv6" { description = "List of computed egress rules to create where 'ipv6_cidr_blocks' is used" type = list(map(string)) default = [] } -variable "computed_egress_with_source_security_group_id" { +variable "computed_egress_with_referenced_security_group_id" { description = "List of computed egress rules to create where 'source_security_group_id' is used" type = list(map(string)) default = [] } -variable "computed_egress_with_prefix_list_ids" { - description = "List of computed egress rules to create where 'prefix_list_ids' is used" +variable "computed_egress_with_prefix_list_id" { + description = "List of computed egress rules to create where 'prefix_list_id' is used" type = list(map(string)) default = [] } @@ -341,26 +341,26 @@ variable "number_of_computed_egress_with_self" { default = 0 } -variable "number_of_computed_egress_with_cidr_blocks" { - description = "Number of computed egress rules to create where 'cidr_blocks' is used" +variable "number_of_computed_egress_with_cidr_ipv4" { + description = "Number of computed egress rules to create where 'cidr_ipv4' is used" type = number default = 0 } -variable "number_of_computed_egress_with_ipv6_cidr_blocks" { +variable "number_of_computed_egress_with_cidr_ipv6" { description = "Number of computed egress rules to create where 'ipv6_cidr_blocks' is used" type = number default = 0 } -variable "number_of_computed_egress_with_source_security_group_id" { +variable "number_of_computed_egress_with_referenced_security_group_id" { description = "Number of computed egress rules to create where 'source_security_group_id' is used" type = number default = 0 } -variable "number_of_computed_egress_with_prefix_list_ids" { - description = "Number of computed egress rules to create where 'prefix_list_ids' is used" +variable "number_of_computed_egress_with_prefix_list_id" { + description = "Number of computed egress rules to create where 'prefix_list_id' is used" type = number default = 0 } diff --git a/modules/redshift/README.md b/modules/redshift/README.md index 1f6cdd76..1c6e2552 100644 --- a/modules/redshift/README.md +++ b/modules/redshift/README.md @@ -55,59 +55,59 @@ No resources. | [computed\_egress\_ipv6\_cidr\_blocks](#input\_computed\_egress\_ipv6\_cidr\_blocks) | List of IPv6 CIDR ranges to use on all computed egress rules | `list(string)` |
[
"::/0"
]
| no | | [computed\_egress\_prefix\_list\_ids](#input\_computed\_egress\_prefix\_list\_ids) | List of prefix list IDs (for allowing access to VPC endpoints) to use on all computed egress rules | `list(string)` | `[]` | no | | [computed\_egress\_rules](#input\_computed\_egress\_rules) | List of computed egress rules to create by name | `list(string)` | `[]` | no | -| [computed\_egress\_with\_cidr\_blocks](#input\_computed\_egress\_with\_cidr\_blocks) | List of computed egress rules to create where 'cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [computed\_egress\_with\_ipv6\_cidr\_blocks](#input\_computed\_egress\_with\_ipv6\_cidr\_blocks) | List of computed egress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [computed\_egress\_with\_prefix\_list\_ids](#input\_computed\_egress\_with\_prefix\_list\_ids) | List of computed egress rules to create where 'prefix\_list\_ids' is used | `list(map(string))` | `[]` | no | +| [computed\_egress\_with\_cidr\_ipv4](#input\_computed\_egress\_with\_cidr\_ipv4) | List of computed egress rules to create where 'cidr\_ipv4' is used | `list(map(string))` | `[]` | no | +| [computed\_egress\_with\_cidr\_ipv6](#input\_computed\_egress\_with\_cidr\_ipv6) | List of computed egress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | +| [computed\_egress\_with\_prefix\_list\_id](#input\_computed\_egress\_with\_prefix\_list\_id) | List of computed egress rules to create where 'prefix\_list\_id' is used | `list(map(string))` | `[]` | no | +| [computed\_egress\_with\_referenced\_security\_group\_id](#input\_computed\_egress\_with\_referenced\_security\_group\_id) | List of computed egress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [computed\_egress\_with\_self](#input\_computed\_egress\_with\_self) | List of computed egress rules to create where 'self' is defined | `list(map(string))` | `[]` | no | -| [computed\_egress\_with\_source\_security\_group\_id](#input\_computed\_egress\_with\_source\_security\_group\_id) | List of computed egress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [computed\_ingress\_cidr\_blocks](#input\_computed\_ingress\_cidr\_blocks) | List of IPv4 CIDR ranges to use on all computed ingress rules | `list(string)` | `[]` | no | | [computed\_ingress\_ipv6\_cidr\_blocks](#input\_computed\_ingress\_ipv6\_cidr\_blocks) | List of IPv6 CIDR ranges to use on all computed ingress rules | `list(string)` | `[]` | no | | [computed\_ingress\_prefix\_list\_ids](#input\_computed\_ingress\_prefix\_list\_ids) | List of prefix list IDs (for allowing access to VPC endpoints) to use on all computed ingress rules | `list(string)` | `[]` | no | | [computed\_ingress\_rules](#input\_computed\_ingress\_rules) | List of computed ingress rules to create by name | `list(string)` | `[]` | no | -| [computed\_ingress\_with\_cidr\_blocks](#input\_computed\_ingress\_with\_cidr\_blocks) | List of computed ingress rules to create where 'cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [computed\_ingress\_with\_ipv6\_cidr\_blocks](#input\_computed\_ingress\_with\_ipv6\_cidr\_blocks) | List of computed ingress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [computed\_ingress\_with\_prefix\_list\_ids](#input\_computed\_ingress\_with\_prefix\_list\_ids) | List of computed ingress rules to create where 'prefix\_list\_ids' is used | `list(map(string))` | `[]` | no | +| [computed\_ingress\_with\_cidr\_ipv4](#input\_computed\_ingress\_with\_cidr\_ipv4) | List of computed ingress rules to create where 'cidr\_ipv4' is used | `list(map(string))` | `[]` | no | +| [computed\_ingress\_with\_cidr\_ipv6](#input\_computed\_ingress\_with\_cidr\_ipv6) | List of computed ingress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | +| [computed\_ingress\_with\_prefix\_list\_id](#input\_computed\_ingress\_with\_prefix\_list\_id) | List of computed ingress rules to create where 'prefix\_list\_id' is used | `list(map(string))` | `[]` | no | +| [computed\_ingress\_with\_referenced\_security\_group\_id](#input\_computed\_ingress\_with\_referenced\_security\_group\_id) | List of computed ingress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [computed\_ingress\_with\_self](#input\_computed\_ingress\_with\_self) | List of computed ingress rules to create where 'self' is defined | `list(map(string))` | `[]` | no | -| [computed\_ingress\_with\_source\_security\_group\_id](#input\_computed\_ingress\_with\_source\_security\_group\_id) | List of computed ingress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [create](#input\_create) | Whether to create security group and all rules | `bool` | `true` | no | | [description](#input\_description) | Description of security group | `string` | `"Security Group managed by Terraform"` | no | -| [egress\_cidr\_blocks](#input\_egress\_cidr\_blocks) | List of IPv4 CIDR ranges to use on all egress rules | `list(string)` |
[
"0.0.0.0/0"
]
| no | -| [egress\_ipv6\_cidr\_blocks](#input\_egress\_ipv6\_cidr\_blocks) | List of IPv6 CIDR ranges to use on all egress rules | `list(string)` |
[
"::/0"
]
| no | +| [egress\_cidr\_ipv4](#input\_egress\_cidr\_ipv4) | List of IPv4 CIDR ranges to use on all egress rules | `list(string)` |
[
"0.0.0.0/0"
]
| no | +| [egress\_cidr\_ipv6](#input\_egress\_cidr\_ipv6) | List of IPv6 CIDR ranges to use on all egress rules | `list(string)` |
[
"::/0"
]
| no | | [egress\_prefix\_list\_ids](#input\_egress\_prefix\_list\_ids) | List of prefix list IDs (for allowing access to VPC endpoints) to use on all egress rules | `list(string)` | `[]` | no | | [egress\_rules](#input\_egress\_rules) | List of egress rules to create by name | `list(string)` | `[]` | no | -| [egress\_with\_cidr\_blocks](#input\_egress\_with\_cidr\_blocks) | List of egress rules to create where 'cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [egress\_with\_ipv6\_cidr\_blocks](#input\_egress\_with\_ipv6\_cidr\_blocks) | List of egress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [egress\_with\_prefix\_list\_ids](#input\_egress\_with\_prefix\_list\_ids) | List of egress rules to create where 'prefix\_list\_ids' is used | `list(map(string))` | `[]` | no | +| [egress\_with\_cidr\_ipv4](#input\_egress\_with\_cidr\_ipv4) | List of egress rules to create where 'cidr\_ipv4' is used | `list(map(string))` | `[]` | no | +| [egress\_with\_cidr\_ipv6](#input\_egress\_with\_cidr\_ipv6) | List of egress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | +| [egress\_with\_prefix\_list\_id](#input\_egress\_with\_prefix\_list\_id) | List of egress rules to create where 'prefix\_list\_id' is used | `list(map(string))` | `[]` | no | +| [egress\_with\_referenced\_security\_group\_id](#input\_egress\_with\_referenced\_security\_group\_id) | List of egress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [egress\_with\_self](#input\_egress\_with\_self) | List of egress rules to create where 'self' is defined | `list(map(string))` | `[]` | no | -| [egress\_with\_source\_security\_group\_id](#input\_egress\_with\_source\_security\_group\_id) | List of egress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | -| [ingress\_cidr\_blocks](#input\_ingress\_cidr\_blocks) | List of IPv4 CIDR ranges to use on all ingress rules | `list(string)` | `[]` | no | -| [ingress\_ipv6\_cidr\_blocks](#input\_ingress\_ipv6\_cidr\_blocks) | List of IPv6 CIDR ranges to use on all ingress rules | `list(string)` | `[]` | no | +| [ingress\_cidr\_ipv4](#input\_ingress\_cidr\_ipv4) | List of IPv4 CIDR ranges to use on all ingress rules | `list(string)` | `[]` | no | +| [ingress\_cidr\_ipv6](#input\_ingress\_cidr\_ipv6) | List of IPv6 CIDR ranges to use on all ingress rules | `list(string)` | `[]` | no | | [ingress\_prefix\_list\_ids](#input\_ingress\_prefix\_list\_ids) | List of prefix list IDs (for allowing access to VPC endpoints) to use on all ingress rules | `list(string)` | `[]` | no | | [ingress\_rules](#input\_ingress\_rules) | List of ingress rules to create by name | `list(string)` | `[]` | no | -| [ingress\_with\_cidr\_blocks](#input\_ingress\_with\_cidr\_blocks) | List of ingress rules to create where 'cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [ingress\_with\_ipv6\_cidr\_blocks](#input\_ingress\_with\_ipv6\_cidr\_blocks) | List of ingress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [ingress\_with\_prefix\_list\_ids](#input\_ingress\_with\_prefix\_list\_ids) | List of ingress rules to create where 'prefix\_list\_ids' is used | `list(map(string))` | `[]` | no | +| [ingress\_with\_cidr\_ipv4](#input\_ingress\_with\_cidr\_ipv4) | List of ingress rules to create where 'cidr\_ipv4' is used | `list(map(string))` | `[]` | no | +| [ingress\_with\_cidr\_ipv6](#input\_ingress\_with\_cidr\_ipv6) | List of ingress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | +| [ingress\_with\_prefix\_list\_id](#input\_ingress\_with\_prefix\_list\_id) | List of ingress rules to create where 'prefix\_list\_id' is used | `list(map(string))` | `[]` | no | +| [ingress\_with\_referenced\_security\_group\_id](#input\_ingress\_with\_referenced\_security\_group\_id) | List of ingress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [ingress\_with\_self](#input\_ingress\_with\_self) | List of ingress rules to create where 'self' is defined | `list(map(string))` | `[]` | no | -| [ingress\_with\_source\_security\_group\_id](#input\_ingress\_with\_source\_security\_group\_id) | List of ingress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [name](#input\_name) | Name of security group | `string` | n/a | yes | | [number\_of\_computed\_egress\_cidr\_blocks](#input\_number\_of\_computed\_egress\_cidr\_blocks) | Number of IPv4 CIDR ranges to use on all computed egress rules | `number` | `0` | no | | [number\_of\_computed\_egress\_ipv6\_cidr\_blocks](#input\_number\_of\_computed\_egress\_ipv6\_cidr\_blocks) | Number of IPv6 CIDR ranges to use on all computed egress rules | `number` | `0` | no | | [number\_of\_computed\_egress\_prefix\_list\_ids](#input\_number\_of\_computed\_egress\_prefix\_list\_ids) | Number of prefix list IDs (for allowing access to VPC endpoints) to use on all computed egress rules | `number` | `0` | no | | [number\_of\_computed\_egress\_rules](#input\_number\_of\_computed\_egress\_rules) | Number of computed egress rules to create by name | `number` | `0` | no | -| [number\_of\_computed\_egress\_with\_cidr\_blocks](#input\_number\_of\_computed\_egress\_with\_cidr\_blocks) | Number of computed egress rules to create where 'cidr\_blocks' is used | `number` | `0` | no | -| [number\_of\_computed\_egress\_with\_ipv6\_cidr\_blocks](#input\_number\_of\_computed\_egress\_with\_ipv6\_cidr\_blocks) | Number of computed egress rules to create where 'ipv6\_cidr\_blocks' is used | `number` | `0` | no | -| [number\_of\_computed\_egress\_with\_prefix\_list\_ids](#input\_number\_of\_computed\_egress\_with\_prefix\_list\_ids) | Number of computed egress rules to create where 'prefix\_list\_ids' is used | `number` | `0` | no | +| [number\_of\_computed\_egress\_with\_cidr\_ipv4](#input\_number\_of\_computed\_egress\_with\_cidr\_ipv4) | Number of computed egress rules to create where 'cidr\_ipv4' is used | `number` | `0` | no | +| [number\_of\_computed\_egress\_with\_cidr\_ipv6](#input\_number\_of\_computed\_egress\_with\_cidr\_ipv6) | Number of computed egress rules to create where 'ipv6\_cidr\_blocks' is used | `number` | `0` | no | +| [number\_of\_computed\_egress\_with\_prefix\_list\_id](#input\_number\_of\_computed\_egress\_with\_prefix\_list\_id) | Number of computed egress rules to create where 'prefix\_list\_id' is used | `number` | `0` | no | +| [number\_of\_computed\_egress\_with\_referenced\_security\_group\_id](#input\_number\_of\_computed\_egress\_with\_referenced\_security\_group\_id) | Number of computed egress rules to create where 'source\_security\_group\_id' is used | `number` | `0` | no | | [number\_of\_computed\_egress\_with\_self](#input\_number\_of\_computed\_egress\_with\_self) | Number of computed egress rules to create where 'self' is defined | `number` | `0` | no | -| [number\_of\_computed\_egress\_with\_source\_security\_group\_id](#input\_number\_of\_computed\_egress\_with\_source\_security\_group\_id) | Number of computed egress rules to create where 'source\_security\_group\_id' is used | `number` | `0` | no | | [number\_of\_computed\_ingress\_cidr\_blocks](#input\_number\_of\_computed\_ingress\_cidr\_blocks) | Number of IPv4 CIDR ranges to use on all computed ingress rules | `number` | `0` | no | | [number\_of\_computed\_ingress\_ipv6\_cidr\_blocks](#input\_number\_of\_computed\_ingress\_ipv6\_cidr\_blocks) | Number of IPv6 CIDR ranges to use on all computed ingress rules | `number` | `0` | no | | [number\_of\_computed\_ingress\_prefix\_list\_ids](#input\_number\_of\_computed\_ingress\_prefix\_list\_ids) | Number of prefix list IDs (for allowing access to VPC endpoints) to use on all computed ingress rules | `number` | `0` | no | | [number\_of\_computed\_ingress\_rules](#input\_number\_of\_computed\_ingress\_rules) | Number of computed ingress rules to create by name | `number` | `0` | no | -| [number\_of\_computed\_ingress\_with\_cidr\_blocks](#input\_number\_of\_computed\_ingress\_with\_cidr\_blocks) | Number of computed ingress rules to create where 'cidr\_blocks' is used | `number` | `0` | no | -| [number\_of\_computed\_ingress\_with\_ipv6\_cidr\_blocks](#input\_number\_of\_computed\_ingress\_with\_ipv6\_cidr\_blocks) | Number of computed ingress rules to create where 'ipv6\_cidr\_blocks' is used | `number` | `0` | no | -| [number\_of\_computed\_ingress\_with\_prefix\_list\_ids](#input\_number\_of\_computed\_ingress\_with\_prefix\_list\_ids) | Number of computed ingress rules to create where 'prefix\_list\_ids' is used | `number` | `0` | no | +| [number\_of\_computed\_ingress\_with\_cidr\_ipv4](#input\_number\_of\_computed\_ingress\_with\_cidr\_ipv4) | Number of computed ingress rules to create where 'cidr\_ipv4' is used | `number` | `0` | no | +| [number\_of\_computed\_ingress\_with\_cidr\_ipv6](#input\_number\_of\_computed\_ingress\_with\_cidr\_ipv6) | Number of computed ingress rules to create where 'ipv6\_cidr\_blocks' is used | `number` | `0` | no | +| [number\_of\_computed\_ingress\_with\_prefix\_list\_id](#input\_number\_of\_computed\_ingress\_with\_prefix\_list\_id) | Number of computed ingress rules to create where 'prefix\_list\_id' is used | `number` | `0` | no | +| [number\_of\_computed\_ingress\_with\_referenced\_security\_group\_id](#input\_number\_of\_computed\_ingress\_with\_referenced\_security\_group\_id) | Number of computed ingress rules to create where 'source\_security\_group\_id' is used | `number` | `0` | no | | [number\_of\_computed\_ingress\_with\_self](#input\_number\_of\_computed\_ingress\_with\_self) | Number of computed ingress rules to create where 'self' is defined | `number` | `0` | no | -| [number\_of\_computed\_ingress\_with\_source\_security\_group\_id](#input\_number\_of\_computed\_ingress\_with\_source\_security\_group\_id) | Number of computed ingress rules to create where 'source\_security\_group\_id' is used | `number` | `0` | no | | [revoke\_rules\_on\_delete](#input\_revoke\_rules\_on\_delete) | Instruct Terraform to revoke all of the Security Groups attached ingress and egress rules before deleting the rule itself. Enable for EMR. | `bool` | `false` | no | | [tags](#input\_tags) | A mapping of tags to assign to security group | `map(string)` | `{}` | no | | [use\_name\_prefix](#input\_use\_name\_prefix) | Whether to use name\_prefix or fixed name. Should be true to able to update security group name after initial creation | `bool` | `true` | no | diff --git a/modules/redshift/main.tf b/modules/redshift/main.tf index 80ea0adb..d2a1bf93 100644 --- a/modules/redshift/main.tf +++ b/modules/redshift/main.tf @@ -19,20 +19,20 @@ module "sg" { ingress_with_self = concat(var.auto_ingress_with_self, var.ingress_with_self) # Open to IPv4 cidr blocks - ingress_with_cidr_blocks = var.ingress_with_cidr_blocks + ingress_with_cidr_ipv4 = var.ingress_with_cidr_ipv4 # Open to IPv6 cidr blocks - ingress_with_ipv6_cidr_blocks = var.ingress_with_ipv6_cidr_blocks + ingress_with_cidr_ipv6 = var.ingress_with_cidr_ipv6 # Open for security group id - ingress_with_source_security_group_id = var.ingress_with_source_security_group_id + ingress_with_referenced_security_group_id = var.ingress_with_referenced_security_group_id # Open for prefix list id - ingress_with_prefix_list_ids = var.ingress_with_prefix_list_ids + ingress_with_prefix_list_id = var.ingress_with_prefix_list_id # Default ingress CIDR blocks - ingress_cidr_blocks = var.ingress_cidr_blocks - ingress_ipv6_cidr_blocks = var.ingress_ipv6_cidr_blocks + ingress_cidr_ipv4 = var.ingress_cidr_ipv4 + ingress_cidr_ipv6 = var.ingress_cidr_ipv6 # Default prefix list ids ingress_prefix_list_ids = var.ingress_prefix_list_ids @@ -47,26 +47,26 @@ module "sg" { computed_ingress_with_self = concat(var.auto_computed_ingress_with_self, var.computed_ingress_with_self) # Open to IPv4 cidr blocks - computed_ingress_with_cidr_blocks = var.computed_ingress_with_cidr_blocks + computed_ingress_with_cidr_ipv4 = var.computed_ingress_with_cidr_ipv4 # Open to IPv6 cidr blocks - computed_ingress_with_ipv6_cidr_blocks = var.computed_ingress_with_ipv6_cidr_blocks + computed_ingress_with_cidr_ipv6 = var.computed_ingress_with_cidr_ipv6 # Open for security group id - computed_ingress_with_source_security_group_id = var.computed_ingress_with_source_security_group_id + computed_ingress_with_referenced_security_group_id = var.computed_ingress_with_referenced_security_group_id # Open for prefix list id - computed_ingress_with_prefix_list_ids = var.computed_ingress_with_prefix_list_ids + computed_ingress_with_prefix_list_id = var.computed_ingress_with_prefix_list_id ############################# # Number of computed ingress ############################# - number_of_computed_ingress_rules = var.auto_number_of_computed_ingress_rules + var.number_of_computed_ingress_rules - number_of_computed_ingress_with_self = var.auto_number_of_computed_ingress_with_self + var.number_of_computed_ingress_with_self - number_of_computed_ingress_with_cidr_blocks = var.number_of_computed_ingress_with_cidr_blocks - number_of_computed_ingress_with_ipv6_cidr_blocks = var.number_of_computed_ingress_with_ipv6_cidr_blocks - number_of_computed_ingress_with_source_security_group_id = var.number_of_computed_ingress_with_source_security_group_id - number_of_computed_ingress_with_prefix_list_ids = var.number_of_computed_ingress_with_prefix_list_ids + number_of_computed_ingress_rules = var.auto_number_of_computed_ingress_rules + var.number_of_computed_ingress_rules + number_of_computed_ingress_with_self = var.auto_number_of_computed_ingress_with_self + var.number_of_computed_ingress_with_self + number_of_computed_ingress_with_cidr_ipv4 = var.number_of_computed_ingress_with_cidr_ipv4 + number_of_computed_ingress_with_cidr_ipv6 = var.number_of_computed_ingress_with_cidr_ipv6 + number_of_computed_ingress_with_referenced_security_group_id = var.number_of_computed_ingress_with_referenced_security_group_id + number_of_computed_ingress_with_prefix_list_id = var.number_of_computed_ingress_with_prefix_list_id ######### # Egress @@ -78,20 +78,20 @@ module "sg" { egress_with_self = concat(var.auto_egress_with_self, var.egress_with_self) # Open to IPv4 cidr blocks - egress_with_cidr_blocks = var.egress_with_cidr_blocks + egress_with_cidr_ipv4 = var.egress_with_cidr_ipv4 # Open to IPv6 cidr blocks - egress_with_ipv6_cidr_blocks = var.egress_with_ipv6_cidr_blocks + egress_with_cidr_ipv6 = var.egress_with_cidr_ipv6 # Open for security group id - egress_with_source_security_group_id = var.egress_with_source_security_group_id + egress_with_referenced_security_group_id = var.egress_with_referenced_security_group_id # Open for prefix list id - egress_with_prefix_list_ids = var.egress_with_prefix_list_ids + egress_with_prefix_list_id = var.egress_with_prefix_list_id # Default egress CIDR blocks - egress_cidr_blocks = var.egress_cidr_blocks - egress_ipv6_cidr_blocks = var.egress_ipv6_cidr_blocks + egress_cidr_ipv4 = var.egress_cidr_ipv4 + egress_cidr_ipv6 = var.egress_cidr_ipv6 # Default prefix list ids egress_prefix_list_ids = var.egress_prefix_list_ids @@ -106,24 +106,24 @@ module "sg" { computed_egress_with_self = concat(var.auto_computed_egress_with_self, var.computed_egress_with_self) # Open to IPv4 cidr blocks - computed_egress_with_cidr_blocks = var.computed_egress_with_cidr_blocks + computed_egress_with_cidr_ipv4 = var.computed_egress_with_cidr_ipv4 # Open to IPv6 cidr blocks - computed_egress_with_ipv6_cidr_blocks = var.computed_egress_with_ipv6_cidr_blocks + computed_egress_with_cidr_ipv6 = var.computed_egress_with_cidr_ipv6 # Open for security group id - computed_egress_with_source_security_group_id = var.computed_egress_with_source_security_group_id + computed_egress_with_referenced_security_group_id = var.computed_egress_with_referenced_security_group_id # Open for prefix list id - computed_egress_with_prefix_list_ids = var.computed_egress_with_prefix_list_ids + computed_egress_with_prefix_list_id = var.computed_egress_with_prefix_list_id ############################# # Number of computed egress ############################# - number_of_computed_egress_rules = var.auto_number_of_computed_egress_rules + var.number_of_computed_egress_rules - number_of_computed_egress_with_self = var.auto_number_of_computed_egress_with_self + var.number_of_computed_egress_with_self - number_of_computed_egress_with_cidr_blocks = var.number_of_computed_egress_with_cidr_blocks - number_of_computed_egress_with_ipv6_cidr_blocks = var.number_of_computed_egress_with_ipv6_cidr_blocks - number_of_computed_egress_with_source_security_group_id = var.number_of_computed_egress_with_source_security_group_id - number_of_computed_egress_with_prefix_list_ids = var.number_of_computed_egress_with_prefix_list_ids + number_of_computed_egress_rules = var.auto_number_of_computed_egress_rules + var.number_of_computed_egress_rules + number_of_computed_egress_with_self = var.auto_number_of_computed_egress_with_self + var.number_of_computed_egress_with_self + number_of_computed_egress_with_cidr_ipv4 = var.number_of_computed_egress_with_cidr_ipv4 + number_of_computed_egress_with_cidr_ipv6 = var.number_of_computed_egress_with_cidr_ipv6 + number_of_computed_egress_with_referenced_security_group_id = var.number_of_computed_egress_with_referenced_security_group_id + number_of_computed_egress_with_prefix_list_id = var.number_of_computed_egress_with_prefix_list_id } diff --git a/modules/redshift/variables.tf b/modules/redshift/variables.tf index 60c8c27b..6590c9e3 100644 --- a/modules/redshift/variables.tf +++ b/modules/redshift/variables.tf @@ -56,37 +56,37 @@ variable "ingress_with_self" { default = [] } -variable "ingress_with_cidr_blocks" { - description = "List of ingress rules to create where 'cidr_blocks' is used" +variable "ingress_with_cidr_ipv4" { + description = "List of ingress rules to create where 'cidr_ipv4' is used" type = list(map(string)) default = [] } -variable "ingress_with_ipv6_cidr_blocks" { +variable "ingress_with_cidr_ipv6" { description = "List of ingress rules to create where 'ipv6_cidr_blocks' is used" type = list(map(string)) default = [] } -variable "ingress_with_source_security_group_id" { +variable "ingress_with_referenced_security_group_id" { description = "List of ingress rules to create where 'source_security_group_id' is used" type = list(map(string)) default = [] } -variable "ingress_with_prefix_list_ids" { - description = "List of ingress rules to create where 'prefix_list_ids' is used" +variable "ingress_with_prefix_list_id" { + description = "List of ingress rules to create where 'prefix_list_id' is used" type = list(map(string)) default = [] } -variable "ingress_cidr_blocks" { +variable "ingress_cidr_ipv4" { description = "List of IPv4 CIDR ranges to use on all ingress rules" type = list(string) default = [] } -variable "ingress_ipv6_cidr_blocks" { +variable "ingress_cidr_ipv6" { description = "List of IPv6 CIDR ranges to use on all ingress rules" type = list(string) default = [] @@ -113,26 +113,26 @@ variable "computed_ingress_with_self" { default = [] } -variable "computed_ingress_with_cidr_blocks" { - description = "List of computed ingress rules to create where 'cidr_blocks' is used" +variable "computed_ingress_with_cidr_ipv4" { + description = "List of computed ingress rules to create where 'cidr_ipv4' is used" type = list(map(string)) default = [] } -variable "computed_ingress_with_ipv6_cidr_blocks" { +variable "computed_ingress_with_cidr_ipv6" { description = "List of computed ingress rules to create where 'ipv6_cidr_blocks' is used" type = list(map(string)) default = [] } -variable "computed_ingress_with_source_security_group_id" { +variable "computed_ingress_with_referenced_security_group_id" { description = "List of computed ingress rules to create where 'source_security_group_id' is used" type = list(map(string)) default = [] } -variable "computed_ingress_with_prefix_list_ids" { - description = "List of computed ingress rules to create where 'prefix_list_ids' is used" +variable "computed_ingress_with_prefix_list_id" { + description = "List of computed ingress rules to create where 'prefix_list_id' is used" type = list(map(string)) default = [] } @@ -170,26 +170,26 @@ variable "number_of_computed_ingress_with_self" { default = 0 } -variable "number_of_computed_ingress_with_cidr_blocks" { - description = "Number of computed ingress rules to create where 'cidr_blocks' is used" +variable "number_of_computed_ingress_with_cidr_ipv4" { + description = "Number of computed ingress rules to create where 'cidr_ipv4' is used" type = number default = 0 } -variable "number_of_computed_ingress_with_ipv6_cidr_blocks" { +variable "number_of_computed_ingress_with_cidr_ipv6" { description = "Number of computed ingress rules to create where 'ipv6_cidr_blocks' is used" type = number default = 0 } -variable "number_of_computed_ingress_with_source_security_group_id" { +variable "number_of_computed_ingress_with_referenced_security_group_id" { description = "Number of computed ingress rules to create where 'source_security_group_id' is used" type = number default = 0 } -variable "number_of_computed_ingress_with_prefix_list_ids" { - description = "Number of computed ingress rules to create where 'prefix_list_ids' is used" +variable "number_of_computed_ingress_with_prefix_list_id" { + description = "Number of computed ingress rules to create where 'prefix_list_id' is used" type = number default = 0 } @@ -227,37 +227,37 @@ variable "egress_with_self" { default = [] } -variable "egress_with_cidr_blocks" { - description = "List of egress rules to create where 'cidr_blocks' is used" +variable "egress_with_cidr_ipv4" { + description = "List of egress rules to create where 'cidr_ipv4' is used" type = list(map(string)) default = [] } -variable "egress_with_ipv6_cidr_blocks" { +variable "egress_with_cidr_ipv6" { description = "List of egress rules to create where 'ipv6_cidr_blocks' is used" type = list(map(string)) default = [] } -variable "egress_with_source_security_group_id" { +variable "egress_with_referenced_security_group_id" { description = "List of egress rules to create where 'source_security_group_id' is used" type = list(map(string)) default = [] } -variable "egress_with_prefix_list_ids" { - description = "List of egress rules to create where 'prefix_list_ids' is used" +variable "egress_with_prefix_list_id" { + description = "List of egress rules to create where 'prefix_list_id' is used" type = list(map(string)) default = [] } -variable "egress_cidr_blocks" { +variable "egress_cidr_ipv4" { description = "List of IPv4 CIDR ranges to use on all egress rules" type = list(string) default = ["0.0.0.0/0"] } -variable "egress_ipv6_cidr_blocks" { +variable "egress_cidr_ipv6" { description = "List of IPv6 CIDR ranges to use on all egress rules" type = list(string) default = ["::/0"] @@ -284,26 +284,26 @@ variable "computed_egress_with_self" { default = [] } -variable "computed_egress_with_cidr_blocks" { - description = "List of computed egress rules to create where 'cidr_blocks' is used" +variable "computed_egress_with_cidr_ipv4" { + description = "List of computed egress rules to create where 'cidr_ipv4' is used" type = list(map(string)) default = [] } -variable "computed_egress_with_ipv6_cidr_blocks" { +variable "computed_egress_with_cidr_ipv6" { description = "List of computed egress rules to create where 'ipv6_cidr_blocks' is used" type = list(map(string)) default = [] } -variable "computed_egress_with_source_security_group_id" { +variable "computed_egress_with_referenced_security_group_id" { description = "List of computed egress rules to create where 'source_security_group_id' is used" type = list(map(string)) default = [] } -variable "computed_egress_with_prefix_list_ids" { - description = "List of computed egress rules to create where 'prefix_list_ids' is used" +variable "computed_egress_with_prefix_list_id" { + description = "List of computed egress rules to create where 'prefix_list_id' is used" type = list(map(string)) default = [] } @@ -341,26 +341,26 @@ variable "number_of_computed_egress_with_self" { default = 0 } -variable "number_of_computed_egress_with_cidr_blocks" { - description = "Number of computed egress rules to create where 'cidr_blocks' is used" +variable "number_of_computed_egress_with_cidr_ipv4" { + description = "Number of computed egress rules to create where 'cidr_ipv4' is used" type = number default = 0 } -variable "number_of_computed_egress_with_ipv6_cidr_blocks" { +variable "number_of_computed_egress_with_cidr_ipv6" { description = "Number of computed egress rules to create where 'ipv6_cidr_blocks' is used" type = number default = 0 } -variable "number_of_computed_egress_with_source_security_group_id" { +variable "number_of_computed_egress_with_referenced_security_group_id" { description = "Number of computed egress rules to create where 'source_security_group_id' is used" type = number default = 0 } -variable "number_of_computed_egress_with_prefix_list_ids" { - description = "Number of computed egress rules to create where 'prefix_list_ids' is used" +variable "number_of_computed_egress_with_prefix_list_id" { + description = "Number of computed egress rules to create where 'prefix_list_id' is used" type = number default = 0 } diff --git a/modules/smtp-submission/README.md b/modules/smtp-submission/README.md index 477fbf51..b5ee7c9a 100644 --- a/modules/smtp-submission/README.md +++ b/modules/smtp-submission/README.md @@ -55,59 +55,59 @@ No resources. | [computed\_egress\_ipv6\_cidr\_blocks](#input\_computed\_egress\_ipv6\_cidr\_blocks) | List of IPv6 CIDR ranges to use on all computed egress rules | `list(string)` |
[
"::/0"
]
| no | | [computed\_egress\_prefix\_list\_ids](#input\_computed\_egress\_prefix\_list\_ids) | List of prefix list IDs (for allowing access to VPC endpoints) to use on all computed egress rules | `list(string)` | `[]` | no | | [computed\_egress\_rules](#input\_computed\_egress\_rules) | List of computed egress rules to create by name | `list(string)` | `[]` | no | -| [computed\_egress\_with\_cidr\_blocks](#input\_computed\_egress\_with\_cidr\_blocks) | List of computed egress rules to create where 'cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [computed\_egress\_with\_ipv6\_cidr\_blocks](#input\_computed\_egress\_with\_ipv6\_cidr\_blocks) | List of computed egress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [computed\_egress\_with\_prefix\_list\_ids](#input\_computed\_egress\_with\_prefix\_list\_ids) | List of computed egress rules to create where 'prefix\_list\_ids' is used | `list(map(string))` | `[]` | no | +| [computed\_egress\_with\_cidr\_ipv4](#input\_computed\_egress\_with\_cidr\_ipv4) | List of computed egress rules to create where 'cidr\_ipv4' is used | `list(map(string))` | `[]` | no | +| [computed\_egress\_with\_cidr\_ipv6](#input\_computed\_egress\_with\_cidr\_ipv6) | List of computed egress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | +| [computed\_egress\_with\_prefix\_list\_id](#input\_computed\_egress\_with\_prefix\_list\_id) | List of computed egress rules to create where 'prefix\_list\_id' is used | `list(map(string))` | `[]` | no | +| [computed\_egress\_with\_referenced\_security\_group\_id](#input\_computed\_egress\_with\_referenced\_security\_group\_id) | List of computed egress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [computed\_egress\_with\_self](#input\_computed\_egress\_with\_self) | List of computed egress rules to create where 'self' is defined | `list(map(string))` | `[]` | no | -| [computed\_egress\_with\_source\_security\_group\_id](#input\_computed\_egress\_with\_source\_security\_group\_id) | List of computed egress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [computed\_ingress\_cidr\_blocks](#input\_computed\_ingress\_cidr\_blocks) | List of IPv4 CIDR ranges to use on all computed ingress rules | `list(string)` | `[]` | no | | [computed\_ingress\_ipv6\_cidr\_blocks](#input\_computed\_ingress\_ipv6\_cidr\_blocks) | List of IPv6 CIDR ranges to use on all computed ingress rules | `list(string)` | `[]` | no | | [computed\_ingress\_prefix\_list\_ids](#input\_computed\_ingress\_prefix\_list\_ids) | List of prefix list IDs (for allowing access to VPC endpoints) to use on all computed ingress rules | `list(string)` | `[]` | no | | [computed\_ingress\_rules](#input\_computed\_ingress\_rules) | List of computed ingress rules to create by name | `list(string)` | `[]` | no | -| [computed\_ingress\_with\_cidr\_blocks](#input\_computed\_ingress\_with\_cidr\_blocks) | List of computed ingress rules to create where 'cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [computed\_ingress\_with\_ipv6\_cidr\_blocks](#input\_computed\_ingress\_with\_ipv6\_cidr\_blocks) | List of computed ingress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [computed\_ingress\_with\_prefix\_list\_ids](#input\_computed\_ingress\_with\_prefix\_list\_ids) | List of computed ingress rules to create where 'prefix\_list\_ids' is used | `list(map(string))` | `[]` | no | +| [computed\_ingress\_with\_cidr\_ipv4](#input\_computed\_ingress\_with\_cidr\_ipv4) | List of computed ingress rules to create where 'cidr\_ipv4' is used | `list(map(string))` | `[]` | no | +| [computed\_ingress\_with\_cidr\_ipv6](#input\_computed\_ingress\_with\_cidr\_ipv6) | List of computed ingress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | +| [computed\_ingress\_with\_prefix\_list\_id](#input\_computed\_ingress\_with\_prefix\_list\_id) | List of computed ingress rules to create where 'prefix\_list\_id' is used | `list(map(string))` | `[]` | no | +| [computed\_ingress\_with\_referenced\_security\_group\_id](#input\_computed\_ingress\_with\_referenced\_security\_group\_id) | List of computed ingress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [computed\_ingress\_with\_self](#input\_computed\_ingress\_with\_self) | List of computed ingress rules to create where 'self' is defined | `list(map(string))` | `[]` | no | -| [computed\_ingress\_with\_source\_security\_group\_id](#input\_computed\_ingress\_with\_source\_security\_group\_id) | List of computed ingress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [create](#input\_create) | Whether to create security group and all rules | `bool` | `true` | no | | [description](#input\_description) | Description of security group | `string` | `"Security Group managed by Terraform"` | no | -| [egress\_cidr\_blocks](#input\_egress\_cidr\_blocks) | List of IPv4 CIDR ranges to use on all egress rules | `list(string)` |
[
"0.0.0.0/0"
]
| no | -| [egress\_ipv6\_cidr\_blocks](#input\_egress\_ipv6\_cidr\_blocks) | List of IPv6 CIDR ranges to use on all egress rules | `list(string)` |
[
"::/0"
]
| no | +| [egress\_cidr\_ipv4](#input\_egress\_cidr\_ipv4) | List of IPv4 CIDR ranges to use on all egress rules | `list(string)` |
[
"0.0.0.0/0"
]
| no | +| [egress\_cidr\_ipv6](#input\_egress\_cidr\_ipv6) | List of IPv6 CIDR ranges to use on all egress rules | `list(string)` |
[
"::/0"
]
| no | | [egress\_prefix\_list\_ids](#input\_egress\_prefix\_list\_ids) | List of prefix list IDs (for allowing access to VPC endpoints) to use on all egress rules | `list(string)` | `[]` | no | | [egress\_rules](#input\_egress\_rules) | List of egress rules to create by name | `list(string)` | `[]` | no | -| [egress\_with\_cidr\_blocks](#input\_egress\_with\_cidr\_blocks) | List of egress rules to create where 'cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [egress\_with\_ipv6\_cidr\_blocks](#input\_egress\_with\_ipv6\_cidr\_blocks) | List of egress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [egress\_with\_prefix\_list\_ids](#input\_egress\_with\_prefix\_list\_ids) | List of egress rules to create where 'prefix\_list\_ids' is used | `list(map(string))` | `[]` | no | +| [egress\_with\_cidr\_ipv4](#input\_egress\_with\_cidr\_ipv4) | List of egress rules to create where 'cidr\_ipv4' is used | `list(map(string))` | `[]` | no | +| [egress\_with\_cidr\_ipv6](#input\_egress\_with\_cidr\_ipv6) | List of egress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | +| [egress\_with\_prefix\_list\_id](#input\_egress\_with\_prefix\_list\_id) | List of egress rules to create where 'prefix\_list\_id' is used | `list(map(string))` | `[]` | no | +| [egress\_with\_referenced\_security\_group\_id](#input\_egress\_with\_referenced\_security\_group\_id) | List of egress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [egress\_with\_self](#input\_egress\_with\_self) | List of egress rules to create where 'self' is defined | `list(map(string))` | `[]` | no | -| [egress\_with\_source\_security\_group\_id](#input\_egress\_with\_source\_security\_group\_id) | List of egress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | -| [ingress\_cidr\_blocks](#input\_ingress\_cidr\_blocks) | List of IPv4 CIDR ranges to use on all ingress rules | `list(string)` | `[]` | no | -| [ingress\_ipv6\_cidr\_blocks](#input\_ingress\_ipv6\_cidr\_blocks) | List of IPv6 CIDR ranges to use on all ingress rules | `list(string)` | `[]` | no | +| [ingress\_cidr\_ipv4](#input\_ingress\_cidr\_ipv4) | List of IPv4 CIDR ranges to use on all ingress rules | `list(string)` | `[]` | no | +| [ingress\_cidr\_ipv6](#input\_ingress\_cidr\_ipv6) | List of IPv6 CIDR ranges to use on all ingress rules | `list(string)` | `[]` | no | | [ingress\_prefix\_list\_ids](#input\_ingress\_prefix\_list\_ids) | List of prefix list IDs (for allowing access to VPC endpoints) to use on all ingress rules | `list(string)` | `[]` | no | | [ingress\_rules](#input\_ingress\_rules) | List of ingress rules to create by name | `list(string)` | `[]` | no | -| [ingress\_with\_cidr\_blocks](#input\_ingress\_with\_cidr\_blocks) | List of ingress rules to create where 'cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [ingress\_with\_ipv6\_cidr\_blocks](#input\_ingress\_with\_ipv6\_cidr\_blocks) | List of ingress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [ingress\_with\_prefix\_list\_ids](#input\_ingress\_with\_prefix\_list\_ids) | List of ingress rules to create where 'prefix\_list\_ids' is used | `list(map(string))` | `[]` | no | +| [ingress\_with\_cidr\_ipv4](#input\_ingress\_with\_cidr\_ipv4) | List of ingress rules to create where 'cidr\_ipv4' is used | `list(map(string))` | `[]` | no | +| [ingress\_with\_cidr\_ipv6](#input\_ingress\_with\_cidr\_ipv6) | List of ingress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | +| [ingress\_with\_prefix\_list\_id](#input\_ingress\_with\_prefix\_list\_id) | List of ingress rules to create where 'prefix\_list\_id' is used | `list(map(string))` | `[]` | no | +| [ingress\_with\_referenced\_security\_group\_id](#input\_ingress\_with\_referenced\_security\_group\_id) | List of ingress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [ingress\_with\_self](#input\_ingress\_with\_self) | List of ingress rules to create where 'self' is defined | `list(map(string))` | `[]` | no | -| [ingress\_with\_source\_security\_group\_id](#input\_ingress\_with\_source\_security\_group\_id) | List of ingress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [name](#input\_name) | Name of security group | `string` | n/a | yes | | [number\_of\_computed\_egress\_cidr\_blocks](#input\_number\_of\_computed\_egress\_cidr\_blocks) | Number of IPv4 CIDR ranges to use on all computed egress rules | `number` | `0` | no | | [number\_of\_computed\_egress\_ipv6\_cidr\_blocks](#input\_number\_of\_computed\_egress\_ipv6\_cidr\_blocks) | Number of IPv6 CIDR ranges to use on all computed egress rules | `number` | `0` | no | | [number\_of\_computed\_egress\_prefix\_list\_ids](#input\_number\_of\_computed\_egress\_prefix\_list\_ids) | Number of prefix list IDs (for allowing access to VPC endpoints) to use on all computed egress rules | `number` | `0` | no | | [number\_of\_computed\_egress\_rules](#input\_number\_of\_computed\_egress\_rules) | Number of computed egress rules to create by name | `number` | `0` | no | -| [number\_of\_computed\_egress\_with\_cidr\_blocks](#input\_number\_of\_computed\_egress\_with\_cidr\_blocks) | Number of computed egress rules to create where 'cidr\_blocks' is used | `number` | `0` | no | -| [number\_of\_computed\_egress\_with\_ipv6\_cidr\_blocks](#input\_number\_of\_computed\_egress\_with\_ipv6\_cidr\_blocks) | Number of computed egress rules to create where 'ipv6\_cidr\_blocks' is used | `number` | `0` | no | -| [number\_of\_computed\_egress\_with\_prefix\_list\_ids](#input\_number\_of\_computed\_egress\_with\_prefix\_list\_ids) | Number of computed egress rules to create where 'prefix\_list\_ids' is used | `number` | `0` | no | +| [number\_of\_computed\_egress\_with\_cidr\_ipv4](#input\_number\_of\_computed\_egress\_with\_cidr\_ipv4) | Number of computed egress rules to create where 'cidr\_ipv4' is used | `number` | `0` | no | +| [number\_of\_computed\_egress\_with\_cidr\_ipv6](#input\_number\_of\_computed\_egress\_with\_cidr\_ipv6) | Number of computed egress rules to create where 'ipv6\_cidr\_blocks' is used | `number` | `0` | no | +| [number\_of\_computed\_egress\_with\_prefix\_list\_id](#input\_number\_of\_computed\_egress\_with\_prefix\_list\_id) | Number of computed egress rules to create where 'prefix\_list\_id' is used | `number` | `0` | no | +| [number\_of\_computed\_egress\_with\_referenced\_security\_group\_id](#input\_number\_of\_computed\_egress\_with\_referenced\_security\_group\_id) | Number of computed egress rules to create where 'source\_security\_group\_id' is used | `number` | `0` | no | | [number\_of\_computed\_egress\_with\_self](#input\_number\_of\_computed\_egress\_with\_self) | Number of computed egress rules to create where 'self' is defined | `number` | `0` | no | -| [number\_of\_computed\_egress\_with\_source\_security\_group\_id](#input\_number\_of\_computed\_egress\_with\_source\_security\_group\_id) | Number of computed egress rules to create where 'source\_security\_group\_id' is used | `number` | `0` | no | | [number\_of\_computed\_ingress\_cidr\_blocks](#input\_number\_of\_computed\_ingress\_cidr\_blocks) | Number of IPv4 CIDR ranges to use on all computed ingress rules | `number` | `0` | no | | [number\_of\_computed\_ingress\_ipv6\_cidr\_blocks](#input\_number\_of\_computed\_ingress\_ipv6\_cidr\_blocks) | Number of IPv6 CIDR ranges to use on all computed ingress rules | `number` | `0` | no | | [number\_of\_computed\_ingress\_prefix\_list\_ids](#input\_number\_of\_computed\_ingress\_prefix\_list\_ids) | Number of prefix list IDs (for allowing access to VPC endpoints) to use on all computed ingress rules | `number` | `0` | no | | [number\_of\_computed\_ingress\_rules](#input\_number\_of\_computed\_ingress\_rules) | Number of computed ingress rules to create by name | `number` | `0` | no | -| [number\_of\_computed\_ingress\_with\_cidr\_blocks](#input\_number\_of\_computed\_ingress\_with\_cidr\_blocks) | Number of computed ingress rules to create where 'cidr\_blocks' is used | `number` | `0` | no | -| [number\_of\_computed\_ingress\_with\_ipv6\_cidr\_blocks](#input\_number\_of\_computed\_ingress\_with\_ipv6\_cidr\_blocks) | Number of computed ingress rules to create where 'ipv6\_cidr\_blocks' is used | `number` | `0` | no | -| [number\_of\_computed\_ingress\_with\_prefix\_list\_ids](#input\_number\_of\_computed\_ingress\_with\_prefix\_list\_ids) | Number of computed ingress rules to create where 'prefix\_list\_ids' is used | `number` | `0` | no | +| [number\_of\_computed\_ingress\_with\_cidr\_ipv4](#input\_number\_of\_computed\_ingress\_with\_cidr\_ipv4) | Number of computed ingress rules to create where 'cidr\_ipv4' is used | `number` | `0` | no | +| [number\_of\_computed\_ingress\_with\_cidr\_ipv6](#input\_number\_of\_computed\_ingress\_with\_cidr\_ipv6) | Number of computed ingress rules to create where 'ipv6\_cidr\_blocks' is used | `number` | `0` | no | +| [number\_of\_computed\_ingress\_with\_prefix\_list\_id](#input\_number\_of\_computed\_ingress\_with\_prefix\_list\_id) | Number of computed ingress rules to create where 'prefix\_list\_id' is used | `number` | `0` | no | +| [number\_of\_computed\_ingress\_with\_referenced\_security\_group\_id](#input\_number\_of\_computed\_ingress\_with\_referenced\_security\_group\_id) | Number of computed ingress rules to create where 'source\_security\_group\_id' is used | `number` | `0` | no | | [number\_of\_computed\_ingress\_with\_self](#input\_number\_of\_computed\_ingress\_with\_self) | Number of computed ingress rules to create where 'self' is defined | `number` | `0` | no | -| [number\_of\_computed\_ingress\_with\_source\_security\_group\_id](#input\_number\_of\_computed\_ingress\_with\_source\_security\_group\_id) | Number of computed ingress rules to create where 'source\_security\_group\_id' is used | `number` | `0` | no | | [revoke\_rules\_on\_delete](#input\_revoke\_rules\_on\_delete) | Instruct Terraform to revoke all of the Security Groups attached ingress and egress rules before deleting the rule itself. Enable for EMR. | `bool` | `false` | no | | [tags](#input\_tags) | A mapping of tags to assign to security group | `map(string)` | `{}` | no | | [use\_name\_prefix](#input\_use\_name\_prefix) | Whether to use name\_prefix or fixed name. Should be true to able to update security group name after initial creation | `bool` | `true` | no | diff --git a/modules/smtp-submission/main.tf b/modules/smtp-submission/main.tf index 80ea0adb..d2a1bf93 100644 --- a/modules/smtp-submission/main.tf +++ b/modules/smtp-submission/main.tf @@ -19,20 +19,20 @@ module "sg" { ingress_with_self = concat(var.auto_ingress_with_self, var.ingress_with_self) # Open to IPv4 cidr blocks - ingress_with_cidr_blocks = var.ingress_with_cidr_blocks + ingress_with_cidr_ipv4 = var.ingress_with_cidr_ipv4 # Open to IPv6 cidr blocks - ingress_with_ipv6_cidr_blocks = var.ingress_with_ipv6_cidr_blocks + ingress_with_cidr_ipv6 = var.ingress_with_cidr_ipv6 # Open for security group id - ingress_with_source_security_group_id = var.ingress_with_source_security_group_id + ingress_with_referenced_security_group_id = var.ingress_with_referenced_security_group_id # Open for prefix list id - ingress_with_prefix_list_ids = var.ingress_with_prefix_list_ids + ingress_with_prefix_list_id = var.ingress_with_prefix_list_id # Default ingress CIDR blocks - ingress_cidr_blocks = var.ingress_cidr_blocks - ingress_ipv6_cidr_blocks = var.ingress_ipv6_cidr_blocks + ingress_cidr_ipv4 = var.ingress_cidr_ipv4 + ingress_cidr_ipv6 = var.ingress_cidr_ipv6 # Default prefix list ids ingress_prefix_list_ids = var.ingress_prefix_list_ids @@ -47,26 +47,26 @@ module "sg" { computed_ingress_with_self = concat(var.auto_computed_ingress_with_self, var.computed_ingress_with_self) # Open to IPv4 cidr blocks - computed_ingress_with_cidr_blocks = var.computed_ingress_with_cidr_blocks + computed_ingress_with_cidr_ipv4 = var.computed_ingress_with_cidr_ipv4 # Open to IPv6 cidr blocks - computed_ingress_with_ipv6_cidr_blocks = var.computed_ingress_with_ipv6_cidr_blocks + computed_ingress_with_cidr_ipv6 = var.computed_ingress_with_cidr_ipv6 # Open for security group id - computed_ingress_with_source_security_group_id = var.computed_ingress_with_source_security_group_id + computed_ingress_with_referenced_security_group_id = var.computed_ingress_with_referenced_security_group_id # Open for prefix list id - computed_ingress_with_prefix_list_ids = var.computed_ingress_with_prefix_list_ids + computed_ingress_with_prefix_list_id = var.computed_ingress_with_prefix_list_id ############################# # Number of computed ingress ############################# - number_of_computed_ingress_rules = var.auto_number_of_computed_ingress_rules + var.number_of_computed_ingress_rules - number_of_computed_ingress_with_self = var.auto_number_of_computed_ingress_with_self + var.number_of_computed_ingress_with_self - number_of_computed_ingress_with_cidr_blocks = var.number_of_computed_ingress_with_cidr_blocks - number_of_computed_ingress_with_ipv6_cidr_blocks = var.number_of_computed_ingress_with_ipv6_cidr_blocks - number_of_computed_ingress_with_source_security_group_id = var.number_of_computed_ingress_with_source_security_group_id - number_of_computed_ingress_with_prefix_list_ids = var.number_of_computed_ingress_with_prefix_list_ids + number_of_computed_ingress_rules = var.auto_number_of_computed_ingress_rules + var.number_of_computed_ingress_rules + number_of_computed_ingress_with_self = var.auto_number_of_computed_ingress_with_self + var.number_of_computed_ingress_with_self + number_of_computed_ingress_with_cidr_ipv4 = var.number_of_computed_ingress_with_cidr_ipv4 + number_of_computed_ingress_with_cidr_ipv6 = var.number_of_computed_ingress_with_cidr_ipv6 + number_of_computed_ingress_with_referenced_security_group_id = var.number_of_computed_ingress_with_referenced_security_group_id + number_of_computed_ingress_with_prefix_list_id = var.number_of_computed_ingress_with_prefix_list_id ######### # Egress @@ -78,20 +78,20 @@ module "sg" { egress_with_self = concat(var.auto_egress_with_self, var.egress_with_self) # Open to IPv4 cidr blocks - egress_with_cidr_blocks = var.egress_with_cidr_blocks + egress_with_cidr_ipv4 = var.egress_with_cidr_ipv4 # Open to IPv6 cidr blocks - egress_with_ipv6_cidr_blocks = var.egress_with_ipv6_cidr_blocks + egress_with_cidr_ipv6 = var.egress_with_cidr_ipv6 # Open for security group id - egress_with_source_security_group_id = var.egress_with_source_security_group_id + egress_with_referenced_security_group_id = var.egress_with_referenced_security_group_id # Open for prefix list id - egress_with_prefix_list_ids = var.egress_with_prefix_list_ids + egress_with_prefix_list_id = var.egress_with_prefix_list_id # Default egress CIDR blocks - egress_cidr_blocks = var.egress_cidr_blocks - egress_ipv6_cidr_blocks = var.egress_ipv6_cidr_blocks + egress_cidr_ipv4 = var.egress_cidr_ipv4 + egress_cidr_ipv6 = var.egress_cidr_ipv6 # Default prefix list ids egress_prefix_list_ids = var.egress_prefix_list_ids @@ -106,24 +106,24 @@ module "sg" { computed_egress_with_self = concat(var.auto_computed_egress_with_self, var.computed_egress_with_self) # Open to IPv4 cidr blocks - computed_egress_with_cidr_blocks = var.computed_egress_with_cidr_blocks + computed_egress_with_cidr_ipv4 = var.computed_egress_with_cidr_ipv4 # Open to IPv6 cidr blocks - computed_egress_with_ipv6_cidr_blocks = var.computed_egress_with_ipv6_cidr_blocks + computed_egress_with_cidr_ipv6 = var.computed_egress_with_cidr_ipv6 # Open for security group id - computed_egress_with_source_security_group_id = var.computed_egress_with_source_security_group_id + computed_egress_with_referenced_security_group_id = var.computed_egress_with_referenced_security_group_id # Open for prefix list id - computed_egress_with_prefix_list_ids = var.computed_egress_with_prefix_list_ids + computed_egress_with_prefix_list_id = var.computed_egress_with_prefix_list_id ############################# # Number of computed egress ############################# - number_of_computed_egress_rules = var.auto_number_of_computed_egress_rules + var.number_of_computed_egress_rules - number_of_computed_egress_with_self = var.auto_number_of_computed_egress_with_self + var.number_of_computed_egress_with_self - number_of_computed_egress_with_cidr_blocks = var.number_of_computed_egress_with_cidr_blocks - number_of_computed_egress_with_ipv6_cidr_blocks = var.number_of_computed_egress_with_ipv6_cidr_blocks - number_of_computed_egress_with_source_security_group_id = var.number_of_computed_egress_with_source_security_group_id - number_of_computed_egress_with_prefix_list_ids = var.number_of_computed_egress_with_prefix_list_ids + number_of_computed_egress_rules = var.auto_number_of_computed_egress_rules + var.number_of_computed_egress_rules + number_of_computed_egress_with_self = var.auto_number_of_computed_egress_with_self + var.number_of_computed_egress_with_self + number_of_computed_egress_with_cidr_ipv4 = var.number_of_computed_egress_with_cidr_ipv4 + number_of_computed_egress_with_cidr_ipv6 = var.number_of_computed_egress_with_cidr_ipv6 + number_of_computed_egress_with_referenced_security_group_id = var.number_of_computed_egress_with_referenced_security_group_id + number_of_computed_egress_with_prefix_list_id = var.number_of_computed_egress_with_prefix_list_id } diff --git a/modules/smtp-submission/variables.tf b/modules/smtp-submission/variables.tf index 60c8c27b..6590c9e3 100644 --- a/modules/smtp-submission/variables.tf +++ b/modules/smtp-submission/variables.tf @@ -56,37 +56,37 @@ variable "ingress_with_self" { default = [] } -variable "ingress_with_cidr_blocks" { - description = "List of ingress rules to create where 'cidr_blocks' is used" +variable "ingress_with_cidr_ipv4" { + description = "List of ingress rules to create where 'cidr_ipv4' is used" type = list(map(string)) default = [] } -variable "ingress_with_ipv6_cidr_blocks" { +variable "ingress_with_cidr_ipv6" { description = "List of ingress rules to create where 'ipv6_cidr_blocks' is used" type = list(map(string)) default = [] } -variable "ingress_with_source_security_group_id" { +variable "ingress_with_referenced_security_group_id" { description = "List of ingress rules to create where 'source_security_group_id' is used" type = list(map(string)) default = [] } -variable "ingress_with_prefix_list_ids" { - description = "List of ingress rules to create where 'prefix_list_ids' is used" +variable "ingress_with_prefix_list_id" { + description = "List of ingress rules to create where 'prefix_list_id' is used" type = list(map(string)) default = [] } -variable "ingress_cidr_blocks" { +variable "ingress_cidr_ipv4" { description = "List of IPv4 CIDR ranges to use on all ingress rules" type = list(string) default = [] } -variable "ingress_ipv6_cidr_blocks" { +variable "ingress_cidr_ipv6" { description = "List of IPv6 CIDR ranges to use on all ingress rules" type = list(string) default = [] @@ -113,26 +113,26 @@ variable "computed_ingress_with_self" { default = [] } -variable "computed_ingress_with_cidr_blocks" { - description = "List of computed ingress rules to create where 'cidr_blocks' is used" +variable "computed_ingress_with_cidr_ipv4" { + description = "List of computed ingress rules to create where 'cidr_ipv4' is used" type = list(map(string)) default = [] } -variable "computed_ingress_with_ipv6_cidr_blocks" { +variable "computed_ingress_with_cidr_ipv6" { description = "List of computed ingress rules to create where 'ipv6_cidr_blocks' is used" type = list(map(string)) default = [] } -variable "computed_ingress_with_source_security_group_id" { +variable "computed_ingress_with_referenced_security_group_id" { description = "List of computed ingress rules to create where 'source_security_group_id' is used" type = list(map(string)) default = [] } -variable "computed_ingress_with_prefix_list_ids" { - description = "List of computed ingress rules to create where 'prefix_list_ids' is used" +variable "computed_ingress_with_prefix_list_id" { + description = "List of computed ingress rules to create where 'prefix_list_id' is used" type = list(map(string)) default = [] } @@ -170,26 +170,26 @@ variable "number_of_computed_ingress_with_self" { default = 0 } -variable "number_of_computed_ingress_with_cidr_blocks" { - description = "Number of computed ingress rules to create where 'cidr_blocks' is used" +variable "number_of_computed_ingress_with_cidr_ipv4" { + description = "Number of computed ingress rules to create where 'cidr_ipv4' is used" type = number default = 0 } -variable "number_of_computed_ingress_with_ipv6_cidr_blocks" { +variable "number_of_computed_ingress_with_cidr_ipv6" { description = "Number of computed ingress rules to create where 'ipv6_cidr_blocks' is used" type = number default = 0 } -variable "number_of_computed_ingress_with_source_security_group_id" { +variable "number_of_computed_ingress_with_referenced_security_group_id" { description = "Number of computed ingress rules to create where 'source_security_group_id' is used" type = number default = 0 } -variable "number_of_computed_ingress_with_prefix_list_ids" { - description = "Number of computed ingress rules to create where 'prefix_list_ids' is used" +variable "number_of_computed_ingress_with_prefix_list_id" { + description = "Number of computed ingress rules to create where 'prefix_list_id' is used" type = number default = 0 } @@ -227,37 +227,37 @@ variable "egress_with_self" { default = [] } -variable "egress_with_cidr_blocks" { - description = "List of egress rules to create where 'cidr_blocks' is used" +variable "egress_with_cidr_ipv4" { + description = "List of egress rules to create where 'cidr_ipv4' is used" type = list(map(string)) default = [] } -variable "egress_with_ipv6_cidr_blocks" { +variable "egress_with_cidr_ipv6" { description = "List of egress rules to create where 'ipv6_cidr_blocks' is used" type = list(map(string)) default = [] } -variable "egress_with_source_security_group_id" { +variable "egress_with_referenced_security_group_id" { description = "List of egress rules to create where 'source_security_group_id' is used" type = list(map(string)) default = [] } -variable "egress_with_prefix_list_ids" { - description = "List of egress rules to create where 'prefix_list_ids' is used" +variable "egress_with_prefix_list_id" { + description = "List of egress rules to create where 'prefix_list_id' is used" type = list(map(string)) default = [] } -variable "egress_cidr_blocks" { +variable "egress_cidr_ipv4" { description = "List of IPv4 CIDR ranges to use on all egress rules" type = list(string) default = ["0.0.0.0/0"] } -variable "egress_ipv6_cidr_blocks" { +variable "egress_cidr_ipv6" { description = "List of IPv6 CIDR ranges to use on all egress rules" type = list(string) default = ["::/0"] @@ -284,26 +284,26 @@ variable "computed_egress_with_self" { default = [] } -variable "computed_egress_with_cidr_blocks" { - description = "List of computed egress rules to create where 'cidr_blocks' is used" +variable "computed_egress_with_cidr_ipv4" { + description = "List of computed egress rules to create where 'cidr_ipv4' is used" type = list(map(string)) default = [] } -variable "computed_egress_with_ipv6_cidr_blocks" { +variable "computed_egress_with_cidr_ipv6" { description = "List of computed egress rules to create where 'ipv6_cidr_blocks' is used" type = list(map(string)) default = [] } -variable "computed_egress_with_source_security_group_id" { +variable "computed_egress_with_referenced_security_group_id" { description = "List of computed egress rules to create where 'source_security_group_id' is used" type = list(map(string)) default = [] } -variable "computed_egress_with_prefix_list_ids" { - description = "List of computed egress rules to create where 'prefix_list_ids' is used" +variable "computed_egress_with_prefix_list_id" { + description = "List of computed egress rules to create where 'prefix_list_id' is used" type = list(map(string)) default = [] } @@ -341,26 +341,26 @@ variable "number_of_computed_egress_with_self" { default = 0 } -variable "number_of_computed_egress_with_cidr_blocks" { - description = "Number of computed egress rules to create where 'cidr_blocks' is used" +variable "number_of_computed_egress_with_cidr_ipv4" { + description = "Number of computed egress rules to create where 'cidr_ipv4' is used" type = number default = 0 } -variable "number_of_computed_egress_with_ipv6_cidr_blocks" { +variable "number_of_computed_egress_with_cidr_ipv6" { description = "Number of computed egress rules to create where 'ipv6_cidr_blocks' is used" type = number default = 0 } -variable "number_of_computed_egress_with_source_security_group_id" { +variable "number_of_computed_egress_with_referenced_security_group_id" { description = "Number of computed egress rules to create where 'source_security_group_id' is used" type = number default = 0 } -variable "number_of_computed_egress_with_prefix_list_ids" { - description = "Number of computed egress rules to create where 'prefix_list_ids' is used" +variable "number_of_computed_egress_with_prefix_list_id" { + description = "Number of computed egress rules to create where 'prefix_list_id' is used" type = number default = 0 } diff --git a/modules/smtp/README.md b/modules/smtp/README.md index 7afa632f..0fc7642e 100644 --- a/modules/smtp/README.md +++ b/modules/smtp/README.md @@ -55,59 +55,59 @@ No resources. | [computed\_egress\_ipv6\_cidr\_blocks](#input\_computed\_egress\_ipv6\_cidr\_blocks) | List of IPv6 CIDR ranges to use on all computed egress rules | `list(string)` |
[
"::/0"
]
| no | | [computed\_egress\_prefix\_list\_ids](#input\_computed\_egress\_prefix\_list\_ids) | List of prefix list IDs (for allowing access to VPC endpoints) to use on all computed egress rules | `list(string)` | `[]` | no | | [computed\_egress\_rules](#input\_computed\_egress\_rules) | List of computed egress rules to create by name | `list(string)` | `[]` | no | -| [computed\_egress\_with\_cidr\_blocks](#input\_computed\_egress\_with\_cidr\_blocks) | List of computed egress rules to create where 'cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [computed\_egress\_with\_ipv6\_cidr\_blocks](#input\_computed\_egress\_with\_ipv6\_cidr\_blocks) | List of computed egress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [computed\_egress\_with\_prefix\_list\_ids](#input\_computed\_egress\_with\_prefix\_list\_ids) | List of computed egress rules to create where 'prefix\_list\_ids' is used | `list(map(string))` | `[]` | no | +| [computed\_egress\_with\_cidr\_ipv4](#input\_computed\_egress\_with\_cidr\_ipv4) | List of computed egress rules to create where 'cidr\_ipv4' is used | `list(map(string))` | `[]` | no | +| [computed\_egress\_with\_cidr\_ipv6](#input\_computed\_egress\_with\_cidr\_ipv6) | List of computed egress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | +| [computed\_egress\_with\_prefix\_list\_id](#input\_computed\_egress\_with\_prefix\_list\_id) | List of computed egress rules to create where 'prefix\_list\_id' is used | `list(map(string))` | `[]` | no | +| [computed\_egress\_with\_referenced\_security\_group\_id](#input\_computed\_egress\_with\_referenced\_security\_group\_id) | List of computed egress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [computed\_egress\_with\_self](#input\_computed\_egress\_with\_self) | List of computed egress rules to create where 'self' is defined | `list(map(string))` | `[]` | no | -| [computed\_egress\_with\_source\_security\_group\_id](#input\_computed\_egress\_with\_source\_security\_group\_id) | List of computed egress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [computed\_ingress\_cidr\_blocks](#input\_computed\_ingress\_cidr\_blocks) | List of IPv4 CIDR ranges to use on all computed ingress rules | `list(string)` | `[]` | no | | [computed\_ingress\_ipv6\_cidr\_blocks](#input\_computed\_ingress\_ipv6\_cidr\_blocks) | List of IPv6 CIDR ranges to use on all computed ingress rules | `list(string)` | `[]` | no | | [computed\_ingress\_prefix\_list\_ids](#input\_computed\_ingress\_prefix\_list\_ids) | List of prefix list IDs (for allowing access to VPC endpoints) to use on all computed ingress rules | `list(string)` | `[]` | no | | [computed\_ingress\_rules](#input\_computed\_ingress\_rules) | List of computed ingress rules to create by name | `list(string)` | `[]` | no | -| [computed\_ingress\_with\_cidr\_blocks](#input\_computed\_ingress\_with\_cidr\_blocks) | List of computed ingress rules to create where 'cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [computed\_ingress\_with\_ipv6\_cidr\_blocks](#input\_computed\_ingress\_with\_ipv6\_cidr\_blocks) | List of computed ingress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [computed\_ingress\_with\_prefix\_list\_ids](#input\_computed\_ingress\_with\_prefix\_list\_ids) | List of computed ingress rules to create where 'prefix\_list\_ids' is used | `list(map(string))` | `[]` | no | +| [computed\_ingress\_with\_cidr\_ipv4](#input\_computed\_ingress\_with\_cidr\_ipv4) | List of computed ingress rules to create where 'cidr\_ipv4' is used | `list(map(string))` | `[]` | no | +| [computed\_ingress\_with\_cidr\_ipv6](#input\_computed\_ingress\_with\_cidr\_ipv6) | List of computed ingress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | +| [computed\_ingress\_with\_prefix\_list\_id](#input\_computed\_ingress\_with\_prefix\_list\_id) | List of computed ingress rules to create where 'prefix\_list\_id' is used | `list(map(string))` | `[]` | no | +| [computed\_ingress\_with\_referenced\_security\_group\_id](#input\_computed\_ingress\_with\_referenced\_security\_group\_id) | List of computed ingress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [computed\_ingress\_with\_self](#input\_computed\_ingress\_with\_self) | List of computed ingress rules to create where 'self' is defined | `list(map(string))` | `[]` | no | -| [computed\_ingress\_with\_source\_security\_group\_id](#input\_computed\_ingress\_with\_source\_security\_group\_id) | List of computed ingress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [create](#input\_create) | Whether to create security group and all rules | `bool` | `true` | no | | [description](#input\_description) | Description of security group | `string` | `"Security Group managed by Terraform"` | no | -| [egress\_cidr\_blocks](#input\_egress\_cidr\_blocks) | List of IPv4 CIDR ranges to use on all egress rules | `list(string)` |
[
"0.0.0.0/0"
]
| no | -| [egress\_ipv6\_cidr\_blocks](#input\_egress\_ipv6\_cidr\_blocks) | List of IPv6 CIDR ranges to use on all egress rules | `list(string)` |
[
"::/0"
]
| no | +| [egress\_cidr\_ipv4](#input\_egress\_cidr\_ipv4) | List of IPv4 CIDR ranges to use on all egress rules | `list(string)` |
[
"0.0.0.0/0"
]
| no | +| [egress\_cidr\_ipv6](#input\_egress\_cidr\_ipv6) | List of IPv6 CIDR ranges to use on all egress rules | `list(string)` |
[
"::/0"
]
| no | | [egress\_prefix\_list\_ids](#input\_egress\_prefix\_list\_ids) | List of prefix list IDs (for allowing access to VPC endpoints) to use on all egress rules | `list(string)` | `[]` | no | | [egress\_rules](#input\_egress\_rules) | List of egress rules to create by name | `list(string)` | `[]` | no | -| [egress\_with\_cidr\_blocks](#input\_egress\_with\_cidr\_blocks) | List of egress rules to create where 'cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [egress\_with\_ipv6\_cidr\_blocks](#input\_egress\_with\_ipv6\_cidr\_blocks) | List of egress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [egress\_with\_prefix\_list\_ids](#input\_egress\_with\_prefix\_list\_ids) | List of egress rules to create where 'prefix\_list\_ids' is used | `list(map(string))` | `[]` | no | +| [egress\_with\_cidr\_ipv4](#input\_egress\_with\_cidr\_ipv4) | List of egress rules to create where 'cidr\_ipv4' is used | `list(map(string))` | `[]` | no | +| [egress\_with\_cidr\_ipv6](#input\_egress\_with\_cidr\_ipv6) | List of egress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | +| [egress\_with\_prefix\_list\_id](#input\_egress\_with\_prefix\_list\_id) | List of egress rules to create where 'prefix\_list\_id' is used | `list(map(string))` | `[]` | no | +| [egress\_with\_referenced\_security\_group\_id](#input\_egress\_with\_referenced\_security\_group\_id) | List of egress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [egress\_with\_self](#input\_egress\_with\_self) | List of egress rules to create where 'self' is defined | `list(map(string))` | `[]` | no | -| [egress\_with\_source\_security\_group\_id](#input\_egress\_with\_source\_security\_group\_id) | List of egress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | -| [ingress\_cidr\_blocks](#input\_ingress\_cidr\_blocks) | List of IPv4 CIDR ranges to use on all ingress rules | `list(string)` | `[]` | no | -| [ingress\_ipv6\_cidr\_blocks](#input\_ingress\_ipv6\_cidr\_blocks) | List of IPv6 CIDR ranges to use on all ingress rules | `list(string)` | `[]` | no | +| [ingress\_cidr\_ipv4](#input\_ingress\_cidr\_ipv4) | List of IPv4 CIDR ranges to use on all ingress rules | `list(string)` | `[]` | no | +| [ingress\_cidr\_ipv6](#input\_ingress\_cidr\_ipv6) | List of IPv6 CIDR ranges to use on all ingress rules | `list(string)` | `[]` | no | | [ingress\_prefix\_list\_ids](#input\_ingress\_prefix\_list\_ids) | List of prefix list IDs (for allowing access to VPC endpoints) to use on all ingress rules | `list(string)` | `[]` | no | | [ingress\_rules](#input\_ingress\_rules) | List of ingress rules to create by name | `list(string)` | `[]` | no | -| [ingress\_with\_cidr\_blocks](#input\_ingress\_with\_cidr\_blocks) | List of ingress rules to create where 'cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [ingress\_with\_ipv6\_cidr\_blocks](#input\_ingress\_with\_ipv6\_cidr\_blocks) | List of ingress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [ingress\_with\_prefix\_list\_ids](#input\_ingress\_with\_prefix\_list\_ids) | List of ingress rules to create where 'prefix\_list\_ids' is used | `list(map(string))` | `[]` | no | +| [ingress\_with\_cidr\_ipv4](#input\_ingress\_with\_cidr\_ipv4) | List of ingress rules to create where 'cidr\_ipv4' is used | `list(map(string))` | `[]` | no | +| [ingress\_with\_cidr\_ipv6](#input\_ingress\_with\_cidr\_ipv6) | List of ingress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | +| [ingress\_with\_prefix\_list\_id](#input\_ingress\_with\_prefix\_list\_id) | List of ingress rules to create where 'prefix\_list\_id' is used | `list(map(string))` | `[]` | no | +| [ingress\_with\_referenced\_security\_group\_id](#input\_ingress\_with\_referenced\_security\_group\_id) | List of ingress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [ingress\_with\_self](#input\_ingress\_with\_self) | List of ingress rules to create where 'self' is defined | `list(map(string))` | `[]` | no | -| [ingress\_with\_source\_security\_group\_id](#input\_ingress\_with\_source\_security\_group\_id) | List of ingress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [name](#input\_name) | Name of security group | `string` | n/a | yes | | [number\_of\_computed\_egress\_cidr\_blocks](#input\_number\_of\_computed\_egress\_cidr\_blocks) | Number of IPv4 CIDR ranges to use on all computed egress rules | `number` | `0` | no | | [number\_of\_computed\_egress\_ipv6\_cidr\_blocks](#input\_number\_of\_computed\_egress\_ipv6\_cidr\_blocks) | Number of IPv6 CIDR ranges to use on all computed egress rules | `number` | `0` | no | | [number\_of\_computed\_egress\_prefix\_list\_ids](#input\_number\_of\_computed\_egress\_prefix\_list\_ids) | Number of prefix list IDs (for allowing access to VPC endpoints) to use on all computed egress rules | `number` | `0` | no | | [number\_of\_computed\_egress\_rules](#input\_number\_of\_computed\_egress\_rules) | Number of computed egress rules to create by name | `number` | `0` | no | -| [number\_of\_computed\_egress\_with\_cidr\_blocks](#input\_number\_of\_computed\_egress\_with\_cidr\_blocks) | Number of computed egress rules to create where 'cidr\_blocks' is used | `number` | `0` | no | -| [number\_of\_computed\_egress\_with\_ipv6\_cidr\_blocks](#input\_number\_of\_computed\_egress\_with\_ipv6\_cidr\_blocks) | Number of computed egress rules to create where 'ipv6\_cidr\_blocks' is used | `number` | `0` | no | -| [number\_of\_computed\_egress\_with\_prefix\_list\_ids](#input\_number\_of\_computed\_egress\_with\_prefix\_list\_ids) | Number of computed egress rules to create where 'prefix\_list\_ids' is used | `number` | `0` | no | +| [number\_of\_computed\_egress\_with\_cidr\_ipv4](#input\_number\_of\_computed\_egress\_with\_cidr\_ipv4) | Number of computed egress rules to create where 'cidr\_ipv4' is used | `number` | `0` | no | +| [number\_of\_computed\_egress\_with\_cidr\_ipv6](#input\_number\_of\_computed\_egress\_with\_cidr\_ipv6) | Number of computed egress rules to create where 'ipv6\_cidr\_blocks' is used | `number` | `0` | no | +| [number\_of\_computed\_egress\_with\_prefix\_list\_id](#input\_number\_of\_computed\_egress\_with\_prefix\_list\_id) | Number of computed egress rules to create where 'prefix\_list\_id' is used | `number` | `0` | no | +| [number\_of\_computed\_egress\_with\_referenced\_security\_group\_id](#input\_number\_of\_computed\_egress\_with\_referenced\_security\_group\_id) | Number of computed egress rules to create where 'source\_security\_group\_id' is used | `number` | `0` | no | | [number\_of\_computed\_egress\_with\_self](#input\_number\_of\_computed\_egress\_with\_self) | Number of computed egress rules to create where 'self' is defined | `number` | `0` | no | -| [number\_of\_computed\_egress\_with\_source\_security\_group\_id](#input\_number\_of\_computed\_egress\_with\_source\_security\_group\_id) | Number of computed egress rules to create where 'source\_security\_group\_id' is used | `number` | `0` | no | | [number\_of\_computed\_ingress\_cidr\_blocks](#input\_number\_of\_computed\_ingress\_cidr\_blocks) | Number of IPv4 CIDR ranges to use on all computed ingress rules | `number` | `0` | no | | [number\_of\_computed\_ingress\_ipv6\_cidr\_blocks](#input\_number\_of\_computed\_ingress\_ipv6\_cidr\_blocks) | Number of IPv6 CIDR ranges to use on all computed ingress rules | `number` | `0` | no | | [number\_of\_computed\_ingress\_prefix\_list\_ids](#input\_number\_of\_computed\_ingress\_prefix\_list\_ids) | Number of prefix list IDs (for allowing access to VPC endpoints) to use on all computed ingress rules | `number` | `0` | no | | [number\_of\_computed\_ingress\_rules](#input\_number\_of\_computed\_ingress\_rules) | Number of computed ingress rules to create by name | `number` | `0` | no | -| [number\_of\_computed\_ingress\_with\_cidr\_blocks](#input\_number\_of\_computed\_ingress\_with\_cidr\_blocks) | Number of computed ingress rules to create where 'cidr\_blocks' is used | `number` | `0` | no | -| [number\_of\_computed\_ingress\_with\_ipv6\_cidr\_blocks](#input\_number\_of\_computed\_ingress\_with\_ipv6\_cidr\_blocks) | Number of computed ingress rules to create where 'ipv6\_cidr\_blocks' is used | `number` | `0` | no | -| [number\_of\_computed\_ingress\_with\_prefix\_list\_ids](#input\_number\_of\_computed\_ingress\_with\_prefix\_list\_ids) | Number of computed ingress rules to create where 'prefix\_list\_ids' is used | `number` | `0` | no | +| [number\_of\_computed\_ingress\_with\_cidr\_ipv4](#input\_number\_of\_computed\_ingress\_with\_cidr\_ipv4) | Number of computed ingress rules to create where 'cidr\_ipv4' is used | `number` | `0` | no | +| [number\_of\_computed\_ingress\_with\_cidr\_ipv6](#input\_number\_of\_computed\_ingress\_with\_cidr\_ipv6) | Number of computed ingress rules to create where 'ipv6\_cidr\_blocks' is used | `number` | `0` | no | +| [number\_of\_computed\_ingress\_with\_prefix\_list\_id](#input\_number\_of\_computed\_ingress\_with\_prefix\_list\_id) | Number of computed ingress rules to create where 'prefix\_list\_id' is used | `number` | `0` | no | +| [number\_of\_computed\_ingress\_with\_referenced\_security\_group\_id](#input\_number\_of\_computed\_ingress\_with\_referenced\_security\_group\_id) | Number of computed ingress rules to create where 'source\_security\_group\_id' is used | `number` | `0` | no | | [number\_of\_computed\_ingress\_with\_self](#input\_number\_of\_computed\_ingress\_with\_self) | Number of computed ingress rules to create where 'self' is defined | `number` | `0` | no | -| [number\_of\_computed\_ingress\_with\_source\_security\_group\_id](#input\_number\_of\_computed\_ingress\_with\_source\_security\_group\_id) | Number of computed ingress rules to create where 'source\_security\_group\_id' is used | `number` | `0` | no | | [revoke\_rules\_on\_delete](#input\_revoke\_rules\_on\_delete) | Instruct Terraform to revoke all of the Security Groups attached ingress and egress rules before deleting the rule itself. Enable for EMR. | `bool` | `false` | no | | [tags](#input\_tags) | A mapping of tags to assign to security group | `map(string)` | `{}` | no | | [use\_name\_prefix](#input\_use\_name\_prefix) | Whether to use name\_prefix or fixed name. Should be true to able to update security group name after initial creation | `bool` | `true` | no | diff --git a/modules/smtp/main.tf b/modules/smtp/main.tf index 80ea0adb..d2a1bf93 100644 --- a/modules/smtp/main.tf +++ b/modules/smtp/main.tf @@ -19,20 +19,20 @@ module "sg" { ingress_with_self = concat(var.auto_ingress_with_self, var.ingress_with_self) # Open to IPv4 cidr blocks - ingress_with_cidr_blocks = var.ingress_with_cidr_blocks + ingress_with_cidr_ipv4 = var.ingress_with_cidr_ipv4 # Open to IPv6 cidr blocks - ingress_with_ipv6_cidr_blocks = var.ingress_with_ipv6_cidr_blocks + ingress_with_cidr_ipv6 = var.ingress_with_cidr_ipv6 # Open for security group id - ingress_with_source_security_group_id = var.ingress_with_source_security_group_id + ingress_with_referenced_security_group_id = var.ingress_with_referenced_security_group_id # Open for prefix list id - ingress_with_prefix_list_ids = var.ingress_with_prefix_list_ids + ingress_with_prefix_list_id = var.ingress_with_prefix_list_id # Default ingress CIDR blocks - ingress_cidr_blocks = var.ingress_cidr_blocks - ingress_ipv6_cidr_blocks = var.ingress_ipv6_cidr_blocks + ingress_cidr_ipv4 = var.ingress_cidr_ipv4 + ingress_cidr_ipv6 = var.ingress_cidr_ipv6 # Default prefix list ids ingress_prefix_list_ids = var.ingress_prefix_list_ids @@ -47,26 +47,26 @@ module "sg" { computed_ingress_with_self = concat(var.auto_computed_ingress_with_self, var.computed_ingress_with_self) # Open to IPv4 cidr blocks - computed_ingress_with_cidr_blocks = var.computed_ingress_with_cidr_blocks + computed_ingress_with_cidr_ipv4 = var.computed_ingress_with_cidr_ipv4 # Open to IPv6 cidr blocks - computed_ingress_with_ipv6_cidr_blocks = var.computed_ingress_with_ipv6_cidr_blocks + computed_ingress_with_cidr_ipv6 = var.computed_ingress_with_cidr_ipv6 # Open for security group id - computed_ingress_with_source_security_group_id = var.computed_ingress_with_source_security_group_id + computed_ingress_with_referenced_security_group_id = var.computed_ingress_with_referenced_security_group_id # Open for prefix list id - computed_ingress_with_prefix_list_ids = var.computed_ingress_with_prefix_list_ids + computed_ingress_with_prefix_list_id = var.computed_ingress_with_prefix_list_id ############################# # Number of computed ingress ############################# - number_of_computed_ingress_rules = var.auto_number_of_computed_ingress_rules + var.number_of_computed_ingress_rules - number_of_computed_ingress_with_self = var.auto_number_of_computed_ingress_with_self + var.number_of_computed_ingress_with_self - number_of_computed_ingress_with_cidr_blocks = var.number_of_computed_ingress_with_cidr_blocks - number_of_computed_ingress_with_ipv6_cidr_blocks = var.number_of_computed_ingress_with_ipv6_cidr_blocks - number_of_computed_ingress_with_source_security_group_id = var.number_of_computed_ingress_with_source_security_group_id - number_of_computed_ingress_with_prefix_list_ids = var.number_of_computed_ingress_with_prefix_list_ids + number_of_computed_ingress_rules = var.auto_number_of_computed_ingress_rules + var.number_of_computed_ingress_rules + number_of_computed_ingress_with_self = var.auto_number_of_computed_ingress_with_self + var.number_of_computed_ingress_with_self + number_of_computed_ingress_with_cidr_ipv4 = var.number_of_computed_ingress_with_cidr_ipv4 + number_of_computed_ingress_with_cidr_ipv6 = var.number_of_computed_ingress_with_cidr_ipv6 + number_of_computed_ingress_with_referenced_security_group_id = var.number_of_computed_ingress_with_referenced_security_group_id + number_of_computed_ingress_with_prefix_list_id = var.number_of_computed_ingress_with_prefix_list_id ######### # Egress @@ -78,20 +78,20 @@ module "sg" { egress_with_self = concat(var.auto_egress_with_self, var.egress_with_self) # Open to IPv4 cidr blocks - egress_with_cidr_blocks = var.egress_with_cidr_blocks + egress_with_cidr_ipv4 = var.egress_with_cidr_ipv4 # Open to IPv6 cidr blocks - egress_with_ipv6_cidr_blocks = var.egress_with_ipv6_cidr_blocks + egress_with_cidr_ipv6 = var.egress_with_cidr_ipv6 # Open for security group id - egress_with_source_security_group_id = var.egress_with_source_security_group_id + egress_with_referenced_security_group_id = var.egress_with_referenced_security_group_id # Open for prefix list id - egress_with_prefix_list_ids = var.egress_with_prefix_list_ids + egress_with_prefix_list_id = var.egress_with_prefix_list_id # Default egress CIDR blocks - egress_cidr_blocks = var.egress_cidr_blocks - egress_ipv6_cidr_blocks = var.egress_ipv6_cidr_blocks + egress_cidr_ipv4 = var.egress_cidr_ipv4 + egress_cidr_ipv6 = var.egress_cidr_ipv6 # Default prefix list ids egress_prefix_list_ids = var.egress_prefix_list_ids @@ -106,24 +106,24 @@ module "sg" { computed_egress_with_self = concat(var.auto_computed_egress_with_self, var.computed_egress_with_self) # Open to IPv4 cidr blocks - computed_egress_with_cidr_blocks = var.computed_egress_with_cidr_blocks + computed_egress_with_cidr_ipv4 = var.computed_egress_with_cidr_ipv4 # Open to IPv6 cidr blocks - computed_egress_with_ipv6_cidr_blocks = var.computed_egress_with_ipv6_cidr_blocks + computed_egress_with_cidr_ipv6 = var.computed_egress_with_cidr_ipv6 # Open for security group id - computed_egress_with_source_security_group_id = var.computed_egress_with_source_security_group_id + computed_egress_with_referenced_security_group_id = var.computed_egress_with_referenced_security_group_id # Open for prefix list id - computed_egress_with_prefix_list_ids = var.computed_egress_with_prefix_list_ids + computed_egress_with_prefix_list_id = var.computed_egress_with_prefix_list_id ############################# # Number of computed egress ############################# - number_of_computed_egress_rules = var.auto_number_of_computed_egress_rules + var.number_of_computed_egress_rules - number_of_computed_egress_with_self = var.auto_number_of_computed_egress_with_self + var.number_of_computed_egress_with_self - number_of_computed_egress_with_cidr_blocks = var.number_of_computed_egress_with_cidr_blocks - number_of_computed_egress_with_ipv6_cidr_blocks = var.number_of_computed_egress_with_ipv6_cidr_blocks - number_of_computed_egress_with_source_security_group_id = var.number_of_computed_egress_with_source_security_group_id - number_of_computed_egress_with_prefix_list_ids = var.number_of_computed_egress_with_prefix_list_ids + number_of_computed_egress_rules = var.auto_number_of_computed_egress_rules + var.number_of_computed_egress_rules + number_of_computed_egress_with_self = var.auto_number_of_computed_egress_with_self + var.number_of_computed_egress_with_self + number_of_computed_egress_with_cidr_ipv4 = var.number_of_computed_egress_with_cidr_ipv4 + number_of_computed_egress_with_cidr_ipv6 = var.number_of_computed_egress_with_cidr_ipv6 + number_of_computed_egress_with_referenced_security_group_id = var.number_of_computed_egress_with_referenced_security_group_id + number_of_computed_egress_with_prefix_list_id = var.number_of_computed_egress_with_prefix_list_id } diff --git a/modules/smtp/variables.tf b/modules/smtp/variables.tf index 60c8c27b..6590c9e3 100644 --- a/modules/smtp/variables.tf +++ b/modules/smtp/variables.tf @@ -56,37 +56,37 @@ variable "ingress_with_self" { default = [] } -variable "ingress_with_cidr_blocks" { - description = "List of ingress rules to create where 'cidr_blocks' is used" +variable "ingress_with_cidr_ipv4" { + description = "List of ingress rules to create where 'cidr_ipv4' is used" type = list(map(string)) default = [] } -variable "ingress_with_ipv6_cidr_blocks" { +variable "ingress_with_cidr_ipv6" { description = "List of ingress rules to create where 'ipv6_cidr_blocks' is used" type = list(map(string)) default = [] } -variable "ingress_with_source_security_group_id" { +variable "ingress_with_referenced_security_group_id" { description = "List of ingress rules to create where 'source_security_group_id' is used" type = list(map(string)) default = [] } -variable "ingress_with_prefix_list_ids" { - description = "List of ingress rules to create where 'prefix_list_ids' is used" +variable "ingress_with_prefix_list_id" { + description = "List of ingress rules to create where 'prefix_list_id' is used" type = list(map(string)) default = [] } -variable "ingress_cidr_blocks" { +variable "ingress_cidr_ipv4" { description = "List of IPv4 CIDR ranges to use on all ingress rules" type = list(string) default = [] } -variable "ingress_ipv6_cidr_blocks" { +variable "ingress_cidr_ipv6" { description = "List of IPv6 CIDR ranges to use on all ingress rules" type = list(string) default = [] @@ -113,26 +113,26 @@ variable "computed_ingress_with_self" { default = [] } -variable "computed_ingress_with_cidr_blocks" { - description = "List of computed ingress rules to create where 'cidr_blocks' is used" +variable "computed_ingress_with_cidr_ipv4" { + description = "List of computed ingress rules to create where 'cidr_ipv4' is used" type = list(map(string)) default = [] } -variable "computed_ingress_with_ipv6_cidr_blocks" { +variable "computed_ingress_with_cidr_ipv6" { description = "List of computed ingress rules to create where 'ipv6_cidr_blocks' is used" type = list(map(string)) default = [] } -variable "computed_ingress_with_source_security_group_id" { +variable "computed_ingress_with_referenced_security_group_id" { description = "List of computed ingress rules to create where 'source_security_group_id' is used" type = list(map(string)) default = [] } -variable "computed_ingress_with_prefix_list_ids" { - description = "List of computed ingress rules to create where 'prefix_list_ids' is used" +variable "computed_ingress_with_prefix_list_id" { + description = "List of computed ingress rules to create where 'prefix_list_id' is used" type = list(map(string)) default = [] } @@ -170,26 +170,26 @@ variable "number_of_computed_ingress_with_self" { default = 0 } -variable "number_of_computed_ingress_with_cidr_blocks" { - description = "Number of computed ingress rules to create where 'cidr_blocks' is used" +variable "number_of_computed_ingress_with_cidr_ipv4" { + description = "Number of computed ingress rules to create where 'cidr_ipv4' is used" type = number default = 0 } -variable "number_of_computed_ingress_with_ipv6_cidr_blocks" { +variable "number_of_computed_ingress_with_cidr_ipv6" { description = "Number of computed ingress rules to create where 'ipv6_cidr_blocks' is used" type = number default = 0 } -variable "number_of_computed_ingress_with_source_security_group_id" { +variable "number_of_computed_ingress_with_referenced_security_group_id" { description = "Number of computed ingress rules to create where 'source_security_group_id' is used" type = number default = 0 } -variable "number_of_computed_ingress_with_prefix_list_ids" { - description = "Number of computed ingress rules to create where 'prefix_list_ids' is used" +variable "number_of_computed_ingress_with_prefix_list_id" { + description = "Number of computed ingress rules to create where 'prefix_list_id' is used" type = number default = 0 } @@ -227,37 +227,37 @@ variable "egress_with_self" { default = [] } -variable "egress_with_cidr_blocks" { - description = "List of egress rules to create where 'cidr_blocks' is used" +variable "egress_with_cidr_ipv4" { + description = "List of egress rules to create where 'cidr_ipv4' is used" type = list(map(string)) default = [] } -variable "egress_with_ipv6_cidr_blocks" { +variable "egress_with_cidr_ipv6" { description = "List of egress rules to create where 'ipv6_cidr_blocks' is used" type = list(map(string)) default = [] } -variable "egress_with_source_security_group_id" { +variable "egress_with_referenced_security_group_id" { description = "List of egress rules to create where 'source_security_group_id' is used" type = list(map(string)) default = [] } -variable "egress_with_prefix_list_ids" { - description = "List of egress rules to create where 'prefix_list_ids' is used" +variable "egress_with_prefix_list_id" { + description = "List of egress rules to create where 'prefix_list_id' is used" type = list(map(string)) default = [] } -variable "egress_cidr_blocks" { +variable "egress_cidr_ipv4" { description = "List of IPv4 CIDR ranges to use on all egress rules" type = list(string) default = ["0.0.0.0/0"] } -variable "egress_ipv6_cidr_blocks" { +variable "egress_cidr_ipv6" { description = "List of IPv6 CIDR ranges to use on all egress rules" type = list(string) default = ["::/0"] @@ -284,26 +284,26 @@ variable "computed_egress_with_self" { default = [] } -variable "computed_egress_with_cidr_blocks" { - description = "List of computed egress rules to create where 'cidr_blocks' is used" +variable "computed_egress_with_cidr_ipv4" { + description = "List of computed egress rules to create where 'cidr_ipv4' is used" type = list(map(string)) default = [] } -variable "computed_egress_with_ipv6_cidr_blocks" { +variable "computed_egress_with_cidr_ipv6" { description = "List of computed egress rules to create where 'ipv6_cidr_blocks' is used" type = list(map(string)) default = [] } -variable "computed_egress_with_source_security_group_id" { +variable "computed_egress_with_referenced_security_group_id" { description = "List of computed egress rules to create where 'source_security_group_id' is used" type = list(map(string)) default = [] } -variable "computed_egress_with_prefix_list_ids" { - description = "List of computed egress rules to create where 'prefix_list_ids' is used" +variable "computed_egress_with_prefix_list_id" { + description = "List of computed egress rules to create where 'prefix_list_id' is used" type = list(map(string)) default = [] } @@ -341,26 +341,26 @@ variable "number_of_computed_egress_with_self" { default = 0 } -variable "number_of_computed_egress_with_cidr_blocks" { - description = "Number of computed egress rules to create where 'cidr_blocks' is used" +variable "number_of_computed_egress_with_cidr_ipv4" { + description = "Number of computed egress rules to create where 'cidr_ipv4' is used" type = number default = 0 } -variable "number_of_computed_egress_with_ipv6_cidr_blocks" { +variable "number_of_computed_egress_with_cidr_ipv6" { description = "Number of computed egress rules to create where 'ipv6_cidr_blocks' is used" type = number default = 0 } -variable "number_of_computed_egress_with_source_security_group_id" { +variable "number_of_computed_egress_with_referenced_security_group_id" { description = "Number of computed egress rules to create where 'source_security_group_id' is used" type = number default = 0 } -variable "number_of_computed_egress_with_prefix_list_ids" { - description = "Number of computed egress rules to create where 'prefix_list_ids' is used" +variable "number_of_computed_egress_with_prefix_list_id" { + description = "Number of computed egress rules to create where 'prefix_list_id' is used" type = number default = 0 } diff --git a/modules/smtps/README.md b/modules/smtps/README.md index 316e3b9d..0631ea0a 100644 --- a/modules/smtps/README.md +++ b/modules/smtps/README.md @@ -55,59 +55,59 @@ No resources. | [computed\_egress\_ipv6\_cidr\_blocks](#input\_computed\_egress\_ipv6\_cidr\_blocks) | List of IPv6 CIDR ranges to use on all computed egress rules | `list(string)` |
[
"::/0"
]
| no | | [computed\_egress\_prefix\_list\_ids](#input\_computed\_egress\_prefix\_list\_ids) | List of prefix list IDs (for allowing access to VPC endpoints) to use on all computed egress rules | `list(string)` | `[]` | no | | [computed\_egress\_rules](#input\_computed\_egress\_rules) | List of computed egress rules to create by name | `list(string)` | `[]` | no | -| [computed\_egress\_with\_cidr\_blocks](#input\_computed\_egress\_with\_cidr\_blocks) | List of computed egress rules to create where 'cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [computed\_egress\_with\_ipv6\_cidr\_blocks](#input\_computed\_egress\_with\_ipv6\_cidr\_blocks) | List of computed egress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [computed\_egress\_with\_prefix\_list\_ids](#input\_computed\_egress\_with\_prefix\_list\_ids) | List of computed egress rules to create where 'prefix\_list\_ids' is used | `list(map(string))` | `[]` | no | +| [computed\_egress\_with\_cidr\_ipv4](#input\_computed\_egress\_with\_cidr\_ipv4) | List of computed egress rules to create where 'cidr\_ipv4' is used | `list(map(string))` | `[]` | no | +| [computed\_egress\_with\_cidr\_ipv6](#input\_computed\_egress\_with\_cidr\_ipv6) | List of computed egress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | +| [computed\_egress\_with\_prefix\_list\_id](#input\_computed\_egress\_with\_prefix\_list\_id) | List of computed egress rules to create where 'prefix\_list\_id' is used | `list(map(string))` | `[]` | no | +| [computed\_egress\_with\_referenced\_security\_group\_id](#input\_computed\_egress\_with\_referenced\_security\_group\_id) | List of computed egress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [computed\_egress\_with\_self](#input\_computed\_egress\_with\_self) | List of computed egress rules to create where 'self' is defined | `list(map(string))` | `[]` | no | -| [computed\_egress\_with\_source\_security\_group\_id](#input\_computed\_egress\_with\_source\_security\_group\_id) | List of computed egress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [computed\_ingress\_cidr\_blocks](#input\_computed\_ingress\_cidr\_blocks) | List of IPv4 CIDR ranges to use on all computed ingress rules | `list(string)` | `[]` | no | | [computed\_ingress\_ipv6\_cidr\_blocks](#input\_computed\_ingress\_ipv6\_cidr\_blocks) | List of IPv6 CIDR ranges to use on all computed ingress rules | `list(string)` | `[]` | no | | [computed\_ingress\_prefix\_list\_ids](#input\_computed\_ingress\_prefix\_list\_ids) | List of prefix list IDs (for allowing access to VPC endpoints) to use on all computed ingress rules | `list(string)` | `[]` | no | | [computed\_ingress\_rules](#input\_computed\_ingress\_rules) | List of computed ingress rules to create by name | `list(string)` | `[]` | no | -| [computed\_ingress\_with\_cidr\_blocks](#input\_computed\_ingress\_with\_cidr\_blocks) | List of computed ingress rules to create where 'cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [computed\_ingress\_with\_ipv6\_cidr\_blocks](#input\_computed\_ingress\_with\_ipv6\_cidr\_blocks) | List of computed ingress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [computed\_ingress\_with\_prefix\_list\_ids](#input\_computed\_ingress\_with\_prefix\_list\_ids) | List of computed ingress rules to create where 'prefix\_list\_ids' is used | `list(map(string))` | `[]` | no | +| [computed\_ingress\_with\_cidr\_ipv4](#input\_computed\_ingress\_with\_cidr\_ipv4) | List of computed ingress rules to create where 'cidr\_ipv4' is used | `list(map(string))` | `[]` | no | +| [computed\_ingress\_with\_cidr\_ipv6](#input\_computed\_ingress\_with\_cidr\_ipv6) | List of computed ingress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | +| [computed\_ingress\_with\_prefix\_list\_id](#input\_computed\_ingress\_with\_prefix\_list\_id) | List of computed ingress rules to create where 'prefix\_list\_id' is used | `list(map(string))` | `[]` | no | +| [computed\_ingress\_with\_referenced\_security\_group\_id](#input\_computed\_ingress\_with\_referenced\_security\_group\_id) | List of computed ingress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [computed\_ingress\_with\_self](#input\_computed\_ingress\_with\_self) | List of computed ingress rules to create where 'self' is defined | `list(map(string))` | `[]` | no | -| [computed\_ingress\_with\_source\_security\_group\_id](#input\_computed\_ingress\_with\_source\_security\_group\_id) | List of computed ingress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [create](#input\_create) | Whether to create security group and all rules | `bool` | `true` | no | | [description](#input\_description) | Description of security group | `string` | `"Security Group managed by Terraform"` | no | -| [egress\_cidr\_blocks](#input\_egress\_cidr\_blocks) | List of IPv4 CIDR ranges to use on all egress rules | `list(string)` |
[
"0.0.0.0/0"
]
| no | -| [egress\_ipv6\_cidr\_blocks](#input\_egress\_ipv6\_cidr\_blocks) | List of IPv6 CIDR ranges to use on all egress rules | `list(string)` |
[
"::/0"
]
| no | +| [egress\_cidr\_ipv4](#input\_egress\_cidr\_ipv4) | List of IPv4 CIDR ranges to use on all egress rules | `list(string)` |
[
"0.0.0.0/0"
]
| no | +| [egress\_cidr\_ipv6](#input\_egress\_cidr\_ipv6) | List of IPv6 CIDR ranges to use on all egress rules | `list(string)` |
[
"::/0"
]
| no | | [egress\_prefix\_list\_ids](#input\_egress\_prefix\_list\_ids) | List of prefix list IDs (for allowing access to VPC endpoints) to use on all egress rules | `list(string)` | `[]` | no | | [egress\_rules](#input\_egress\_rules) | List of egress rules to create by name | `list(string)` | `[]` | no | -| [egress\_with\_cidr\_blocks](#input\_egress\_with\_cidr\_blocks) | List of egress rules to create where 'cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [egress\_with\_ipv6\_cidr\_blocks](#input\_egress\_with\_ipv6\_cidr\_blocks) | List of egress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [egress\_with\_prefix\_list\_ids](#input\_egress\_with\_prefix\_list\_ids) | List of egress rules to create where 'prefix\_list\_ids' is used | `list(map(string))` | `[]` | no | +| [egress\_with\_cidr\_ipv4](#input\_egress\_with\_cidr\_ipv4) | List of egress rules to create where 'cidr\_ipv4' is used | `list(map(string))` | `[]` | no | +| [egress\_with\_cidr\_ipv6](#input\_egress\_with\_cidr\_ipv6) | List of egress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | +| [egress\_with\_prefix\_list\_id](#input\_egress\_with\_prefix\_list\_id) | List of egress rules to create where 'prefix\_list\_id' is used | `list(map(string))` | `[]` | no | +| [egress\_with\_referenced\_security\_group\_id](#input\_egress\_with\_referenced\_security\_group\_id) | List of egress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [egress\_with\_self](#input\_egress\_with\_self) | List of egress rules to create where 'self' is defined | `list(map(string))` | `[]` | no | -| [egress\_with\_source\_security\_group\_id](#input\_egress\_with\_source\_security\_group\_id) | List of egress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | -| [ingress\_cidr\_blocks](#input\_ingress\_cidr\_blocks) | List of IPv4 CIDR ranges to use on all ingress rules | `list(string)` | `[]` | no | -| [ingress\_ipv6\_cidr\_blocks](#input\_ingress\_ipv6\_cidr\_blocks) | List of IPv6 CIDR ranges to use on all ingress rules | `list(string)` | `[]` | no | +| [ingress\_cidr\_ipv4](#input\_ingress\_cidr\_ipv4) | List of IPv4 CIDR ranges to use on all ingress rules | `list(string)` | `[]` | no | +| [ingress\_cidr\_ipv6](#input\_ingress\_cidr\_ipv6) | List of IPv6 CIDR ranges to use on all ingress rules | `list(string)` | `[]` | no | | [ingress\_prefix\_list\_ids](#input\_ingress\_prefix\_list\_ids) | List of prefix list IDs (for allowing access to VPC endpoints) to use on all ingress rules | `list(string)` | `[]` | no | | [ingress\_rules](#input\_ingress\_rules) | List of ingress rules to create by name | `list(string)` | `[]` | no | -| [ingress\_with\_cidr\_blocks](#input\_ingress\_with\_cidr\_blocks) | List of ingress rules to create where 'cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [ingress\_with\_ipv6\_cidr\_blocks](#input\_ingress\_with\_ipv6\_cidr\_blocks) | List of ingress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [ingress\_with\_prefix\_list\_ids](#input\_ingress\_with\_prefix\_list\_ids) | List of ingress rules to create where 'prefix\_list\_ids' is used | `list(map(string))` | `[]` | no | +| [ingress\_with\_cidr\_ipv4](#input\_ingress\_with\_cidr\_ipv4) | List of ingress rules to create where 'cidr\_ipv4' is used | `list(map(string))` | `[]` | no | +| [ingress\_with\_cidr\_ipv6](#input\_ingress\_with\_cidr\_ipv6) | List of ingress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | +| [ingress\_with\_prefix\_list\_id](#input\_ingress\_with\_prefix\_list\_id) | List of ingress rules to create where 'prefix\_list\_id' is used | `list(map(string))` | `[]` | no | +| [ingress\_with\_referenced\_security\_group\_id](#input\_ingress\_with\_referenced\_security\_group\_id) | List of ingress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [ingress\_with\_self](#input\_ingress\_with\_self) | List of ingress rules to create where 'self' is defined | `list(map(string))` | `[]` | no | -| [ingress\_with\_source\_security\_group\_id](#input\_ingress\_with\_source\_security\_group\_id) | List of ingress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [name](#input\_name) | Name of security group | `string` | n/a | yes | | [number\_of\_computed\_egress\_cidr\_blocks](#input\_number\_of\_computed\_egress\_cidr\_blocks) | Number of IPv4 CIDR ranges to use on all computed egress rules | `number` | `0` | no | | [number\_of\_computed\_egress\_ipv6\_cidr\_blocks](#input\_number\_of\_computed\_egress\_ipv6\_cidr\_blocks) | Number of IPv6 CIDR ranges to use on all computed egress rules | `number` | `0` | no | | [number\_of\_computed\_egress\_prefix\_list\_ids](#input\_number\_of\_computed\_egress\_prefix\_list\_ids) | Number of prefix list IDs (for allowing access to VPC endpoints) to use on all computed egress rules | `number` | `0` | no | | [number\_of\_computed\_egress\_rules](#input\_number\_of\_computed\_egress\_rules) | Number of computed egress rules to create by name | `number` | `0` | no | -| [number\_of\_computed\_egress\_with\_cidr\_blocks](#input\_number\_of\_computed\_egress\_with\_cidr\_blocks) | Number of computed egress rules to create where 'cidr\_blocks' is used | `number` | `0` | no | -| [number\_of\_computed\_egress\_with\_ipv6\_cidr\_blocks](#input\_number\_of\_computed\_egress\_with\_ipv6\_cidr\_blocks) | Number of computed egress rules to create where 'ipv6\_cidr\_blocks' is used | `number` | `0` | no | -| [number\_of\_computed\_egress\_with\_prefix\_list\_ids](#input\_number\_of\_computed\_egress\_with\_prefix\_list\_ids) | Number of computed egress rules to create where 'prefix\_list\_ids' is used | `number` | `0` | no | +| [number\_of\_computed\_egress\_with\_cidr\_ipv4](#input\_number\_of\_computed\_egress\_with\_cidr\_ipv4) | Number of computed egress rules to create where 'cidr\_ipv4' is used | `number` | `0` | no | +| [number\_of\_computed\_egress\_with\_cidr\_ipv6](#input\_number\_of\_computed\_egress\_with\_cidr\_ipv6) | Number of computed egress rules to create where 'ipv6\_cidr\_blocks' is used | `number` | `0` | no | +| [number\_of\_computed\_egress\_with\_prefix\_list\_id](#input\_number\_of\_computed\_egress\_with\_prefix\_list\_id) | Number of computed egress rules to create where 'prefix\_list\_id' is used | `number` | `0` | no | +| [number\_of\_computed\_egress\_with\_referenced\_security\_group\_id](#input\_number\_of\_computed\_egress\_with\_referenced\_security\_group\_id) | Number of computed egress rules to create where 'source\_security\_group\_id' is used | `number` | `0` | no | | [number\_of\_computed\_egress\_with\_self](#input\_number\_of\_computed\_egress\_with\_self) | Number of computed egress rules to create where 'self' is defined | `number` | `0` | no | -| [number\_of\_computed\_egress\_with\_source\_security\_group\_id](#input\_number\_of\_computed\_egress\_with\_source\_security\_group\_id) | Number of computed egress rules to create where 'source\_security\_group\_id' is used | `number` | `0` | no | | [number\_of\_computed\_ingress\_cidr\_blocks](#input\_number\_of\_computed\_ingress\_cidr\_blocks) | Number of IPv4 CIDR ranges to use on all computed ingress rules | `number` | `0` | no | | [number\_of\_computed\_ingress\_ipv6\_cidr\_blocks](#input\_number\_of\_computed\_ingress\_ipv6\_cidr\_blocks) | Number of IPv6 CIDR ranges to use on all computed ingress rules | `number` | `0` | no | | [number\_of\_computed\_ingress\_prefix\_list\_ids](#input\_number\_of\_computed\_ingress\_prefix\_list\_ids) | Number of prefix list IDs (for allowing access to VPC endpoints) to use on all computed ingress rules | `number` | `0` | no | | [number\_of\_computed\_ingress\_rules](#input\_number\_of\_computed\_ingress\_rules) | Number of computed ingress rules to create by name | `number` | `0` | no | -| [number\_of\_computed\_ingress\_with\_cidr\_blocks](#input\_number\_of\_computed\_ingress\_with\_cidr\_blocks) | Number of computed ingress rules to create where 'cidr\_blocks' is used | `number` | `0` | no | -| [number\_of\_computed\_ingress\_with\_ipv6\_cidr\_blocks](#input\_number\_of\_computed\_ingress\_with\_ipv6\_cidr\_blocks) | Number of computed ingress rules to create where 'ipv6\_cidr\_blocks' is used | `number` | `0` | no | -| [number\_of\_computed\_ingress\_with\_prefix\_list\_ids](#input\_number\_of\_computed\_ingress\_with\_prefix\_list\_ids) | Number of computed ingress rules to create where 'prefix\_list\_ids' is used | `number` | `0` | no | +| [number\_of\_computed\_ingress\_with\_cidr\_ipv4](#input\_number\_of\_computed\_ingress\_with\_cidr\_ipv4) | Number of computed ingress rules to create where 'cidr\_ipv4' is used | `number` | `0` | no | +| [number\_of\_computed\_ingress\_with\_cidr\_ipv6](#input\_number\_of\_computed\_ingress\_with\_cidr\_ipv6) | Number of computed ingress rules to create where 'ipv6\_cidr\_blocks' is used | `number` | `0` | no | +| [number\_of\_computed\_ingress\_with\_prefix\_list\_id](#input\_number\_of\_computed\_ingress\_with\_prefix\_list\_id) | Number of computed ingress rules to create where 'prefix\_list\_id' is used | `number` | `0` | no | +| [number\_of\_computed\_ingress\_with\_referenced\_security\_group\_id](#input\_number\_of\_computed\_ingress\_with\_referenced\_security\_group\_id) | Number of computed ingress rules to create where 'source\_security\_group\_id' is used | `number` | `0` | no | | [number\_of\_computed\_ingress\_with\_self](#input\_number\_of\_computed\_ingress\_with\_self) | Number of computed ingress rules to create where 'self' is defined | `number` | `0` | no | -| [number\_of\_computed\_ingress\_with\_source\_security\_group\_id](#input\_number\_of\_computed\_ingress\_with\_source\_security\_group\_id) | Number of computed ingress rules to create where 'source\_security\_group\_id' is used | `number` | `0` | no | | [revoke\_rules\_on\_delete](#input\_revoke\_rules\_on\_delete) | Instruct Terraform to revoke all of the Security Groups attached ingress and egress rules before deleting the rule itself. Enable for EMR. | `bool` | `false` | no | | [tags](#input\_tags) | A mapping of tags to assign to security group | `map(string)` | `{}` | no | | [use\_name\_prefix](#input\_use\_name\_prefix) | Whether to use name\_prefix or fixed name. Should be true to able to update security group name after initial creation | `bool` | `true` | no | diff --git a/modules/smtps/main.tf b/modules/smtps/main.tf index 80ea0adb..d2a1bf93 100644 --- a/modules/smtps/main.tf +++ b/modules/smtps/main.tf @@ -19,20 +19,20 @@ module "sg" { ingress_with_self = concat(var.auto_ingress_with_self, var.ingress_with_self) # Open to IPv4 cidr blocks - ingress_with_cidr_blocks = var.ingress_with_cidr_blocks + ingress_with_cidr_ipv4 = var.ingress_with_cidr_ipv4 # Open to IPv6 cidr blocks - ingress_with_ipv6_cidr_blocks = var.ingress_with_ipv6_cidr_blocks + ingress_with_cidr_ipv6 = var.ingress_with_cidr_ipv6 # Open for security group id - ingress_with_source_security_group_id = var.ingress_with_source_security_group_id + ingress_with_referenced_security_group_id = var.ingress_with_referenced_security_group_id # Open for prefix list id - ingress_with_prefix_list_ids = var.ingress_with_prefix_list_ids + ingress_with_prefix_list_id = var.ingress_with_prefix_list_id # Default ingress CIDR blocks - ingress_cidr_blocks = var.ingress_cidr_blocks - ingress_ipv6_cidr_blocks = var.ingress_ipv6_cidr_blocks + ingress_cidr_ipv4 = var.ingress_cidr_ipv4 + ingress_cidr_ipv6 = var.ingress_cidr_ipv6 # Default prefix list ids ingress_prefix_list_ids = var.ingress_prefix_list_ids @@ -47,26 +47,26 @@ module "sg" { computed_ingress_with_self = concat(var.auto_computed_ingress_with_self, var.computed_ingress_with_self) # Open to IPv4 cidr blocks - computed_ingress_with_cidr_blocks = var.computed_ingress_with_cidr_blocks + computed_ingress_with_cidr_ipv4 = var.computed_ingress_with_cidr_ipv4 # Open to IPv6 cidr blocks - computed_ingress_with_ipv6_cidr_blocks = var.computed_ingress_with_ipv6_cidr_blocks + computed_ingress_with_cidr_ipv6 = var.computed_ingress_with_cidr_ipv6 # Open for security group id - computed_ingress_with_source_security_group_id = var.computed_ingress_with_source_security_group_id + computed_ingress_with_referenced_security_group_id = var.computed_ingress_with_referenced_security_group_id # Open for prefix list id - computed_ingress_with_prefix_list_ids = var.computed_ingress_with_prefix_list_ids + computed_ingress_with_prefix_list_id = var.computed_ingress_with_prefix_list_id ############################# # Number of computed ingress ############################# - number_of_computed_ingress_rules = var.auto_number_of_computed_ingress_rules + var.number_of_computed_ingress_rules - number_of_computed_ingress_with_self = var.auto_number_of_computed_ingress_with_self + var.number_of_computed_ingress_with_self - number_of_computed_ingress_with_cidr_blocks = var.number_of_computed_ingress_with_cidr_blocks - number_of_computed_ingress_with_ipv6_cidr_blocks = var.number_of_computed_ingress_with_ipv6_cidr_blocks - number_of_computed_ingress_with_source_security_group_id = var.number_of_computed_ingress_with_source_security_group_id - number_of_computed_ingress_with_prefix_list_ids = var.number_of_computed_ingress_with_prefix_list_ids + number_of_computed_ingress_rules = var.auto_number_of_computed_ingress_rules + var.number_of_computed_ingress_rules + number_of_computed_ingress_with_self = var.auto_number_of_computed_ingress_with_self + var.number_of_computed_ingress_with_self + number_of_computed_ingress_with_cidr_ipv4 = var.number_of_computed_ingress_with_cidr_ipv4 + number_of_computed_ingress_with_cidr_ipv6 = var.number_of_computed_ingress_with_cidr_ipv6 + number_of_computed_ingress_with_referenced_security_group_id = var.number_of_computed_ingress_with_referenced_security_group_id + number_of_computed_ingress_with_prefix_list_id = var.number_of_computed_ingress_with_prefix_list_id ######### # Egress @@ -78,20 +78,20 @@ module "sg" { egress_with_self = concat(var.auto_egress_with_self, var.egress_with_self) # Open to IPv4 cidr blocks - egress_with_cidr_blocks = var.egress_with_cidr_blocks + egress_with_cidr_ipv4 = var.egress_with_cidr_ipv4 # Open to IPv6 cidr blocks - egress_with_ipv6_cidr_blocks = var.egress_with_ipv6_cidr_blocks + egress_with_cidr_ipv6 = var.egress_with_cidr_ipv6 # Open for security group id - egress_with_source_security_group_id = var.egress_with_source_security_group_id + egress_with_referenced_security_group_id = var.egress_with_referenced_security_group_id # Open for prefix list id - egress_with_prefix_list_ids = var.egress_with_prefix_list_ids + egress_with_prefix_list_id = var.egress_with_prefix_list_id # Default egress CIDR blocks - egress_cidr_blocks = var.egress_cidr_blocks - egress_ipv6_cidr_blocks = var.egress_ipv6_cidr_blocks + egress_cidr_ipv4 = var.egress_cidr_ipv4 + egress_cidr_ipv6 = var.egress_cidr_ipv6 # Default prefix list ids egress_prefix_list_ids = var.egress_prefix_list_ids @@ -106,24 +106,24 @@ module "sg" { computed_egress_with_self = concat(var.auto_computed_egress_with_self, var.computed_egress_with_self) # Open to IPv4 cidr blocks - computed_egress_with_cidr_blocks = var.computed_egress_with_cidr_blocks + computed_egress_with_cidr_ipv4 = var.computed_egress_with_cidr_ipv4 # Open to IPv6 cidr blocks - computed_egress_with_ipv6_cidr_blocks = var.computed_egress_with_ipv6_cidr_blocks + computed_egress_with_cidr_ipv6 = var.computed_egress_with_cidr_ipv6 # Open for security group id - computed_egress_with_source_security_group_id = var.computed_egress_with_source_security_group_id + computed_egress_with_referenced_security_group_id = var.computed_egress_with_referenced_security_group_id # Open for prefix list id - computed_egress_with_prefix_list_ids = var.computed_egress_with_prefix_list_ids + computed_egress_with_prefix_list_id = var.computed_egress_with_prefix_list_id ############################# # Number of computed egress ############################# - number_of_computed_egress_rules = var.auto_number_of_computed_egress_rules + var.number_of_computed_egress_rules - number_of_computed_egress_with_self = var.auto_number_of_computed_egress_with_self + var.number_of_computed_egress_with_self - number_of_computed_egress_with_cidr_blocks = var.number_of_computed_egress_with_cidr_blocks - number_of_computed_egress_with_ipv6_cidr_blocks = var.number_of_computed_egress_with_ipv6_cidr_blocks - number_of_computed_egress_with_source_security_group_id = var.number_of_computed_egress_with_source_security_group_id - number_of_computed_egress_with_prefix_list_ids = var.number_of_computed_egress_with_prefix_list_ids + number_of_computed_egress_rules = var.auto_number_of_computed_egress_rules + var.number_of_computed_egress_rules + number_of_computed_egress_with_self = var.auto_number_of_computed_egress_with_self + var.number_of_computed_egress_with_self + number_of_computed_egress_with_cidr_ipv4 = var.number_of_computed_egress_with_cidr_ipv4 + number_of_computed_egress_with_cidr_ipv6 = var.number_of_computed_egress_with_cidr_ipv6 + number_of_computed_egress_with_referenced_security_group_id = var.number_of_computed_egress_with_referenced_security_group_id + number_of_computed_egress_with_prefix_list_id = var.number_of_computed_egress_with_prefix_list_id } diff --git a/modules/smtps/variables.tf b/modules/smtps/variables.tf index 60c8c27b..6590c9e3 100644 --- a/modules/smtps/variables.tf +++ b/modules/smtps/variables.tf @@ -56,37 +56,37 @@ variable "ingress_with_self" { default = [] } -variable "ingress_with_cidr_blocks" { - description = "List of ingress rules to create where 'cidr_blocks' is used" +variable "ingress_with_cidr_ipv4" { + description = "List of ingress rules to create where 'cidr_ipv4' is used" type = list(map(string)) default = [] } -variable "ingress_with_ipv6_cidr_blocks" { +variable "ingress_with_cidr_ipv6" { description = "List of ingress rules to create where 'ipv6_cidr_blocks' is used" type = list(map(string)) default = [] } -variable "ingress_with_source_security_group_id" { +variable "ingress_with_referenced_security_group_id" { description = "List of ingress rules to create where 'source_security_group_id' is used" type = list(map(string)) default = [] } -variable "ingress_with_prefix_list_ids" { - description = "List of ingress rules to create where 'prefix_list_ids' is used" +variable "ingress_with_prefix_list_id" { + description = "List of ingress rules to create where 'prefix_list_id' is used" type = list(map(string)) default = [] } -variable "ingress_cidr_blocks" { +variable "ingress_cidr_ipv4" { description = "List of IPv4 CIDR ranges to use on all ingress rules" type = list(string) default = [] } -variable "ingress_ipv6_cidr_blocks" { +variable "ingress_cidr_ipv6" { description = "List of IPv6 CIDR ranges to use on all ingress rules" type = list(string) default = [] @@ -113,26 +113,26 @@ variable "computed_ingress_with_self" { default = [] } -variable "computed_ingress_with_cidr_blocks" { - description = "List of computed ingress rules to create where 'cidr_blocks' is used" +variable "computed_ingress_with_cidr_ipv4" { + description = "List of computed ingress rules to create where 'cidr_ipv4' is used" type = list(map(string)) default = [] } -variable "computed_ingress_with_ipv6_cidr_blocks" { +variable "computed_ingress_with_cidr_ipv6" { description = "List of computed ingress rules to create where 'ipv6_cidr_blocks' is used" type = list(map(string)) default = [] } -variable "computed_ingress_with_source_security_group_id" { +variable "computed_ingress_with_referenced_security_group_id" { description = "List of computed ingress rules to create where 'source_security_group_id' is used" type = list(map(string)) default = [] } -variable "computed_ingress_with_prefix_list_ids" { - description = "List of computed ingress rules to create where 'prefix_list_ids' is used" +variable "computed_ingress_with_prefix_list_id" { + description = "List of computed ingress rules to create where 'prefix_list_id' is used" type = list(map(string)) default = [] } @@ -170,26 +170,26 @@ variable "number_of_computed_ingress_with_self" { default = 0 } -variable "number_of_computed_ingress_with_cidr_blocks" { - description = "Number of computed ingress rules to create where 'cidr_blocks' is used" +variable "number_of_computed_ingress_with_cidr_ipv4" { + description = "Number of computed ingress rules to create where 'cidr_ipv4' is used" type = number default = 0 } -variable "number_of_computed_ingress_with_ipv6_cidr_blocks" { +variable "number_of_computed_ingress_with_cidr_ipv6" { description = "Number of computed ingress rules to create where 'ipv6_cidr_blocks' is used" type = number default = 0 } -variable "number_of_computed_ingress_with_source_security_group_id" { +variable "number_of_computed_ingress_with_referenced_security_group_id" { description = "Number of computed ingress rules to create where 'source_security_group_id' is used" type = number default = 0 } -variable "number_of_computed_ingress_with_prefix_list_ids" { - description = "Number of computed ingress rules to create where 'prefix_list_ids' is used" +variable "number_of_computed_ingress_with_prefix_list_id" { + description = "Number of computed ingress rules to create where 'prefix_list_id' is used" type = number default = 0 } @@ -227,37 +227,37 @@ variable "egress_with_self" { default = [] } -variable "egress_with_cidr_blocks" { - description = "List of egress rules to create where 'cidr_blocks' is used" +variable "egress_with_cidr_ipv4" { + description = "List of egress rules to create where 'cidr_ipv4' is used" type = list(map(string)) default = [] } -variable "egress_with_ipv6_cidr_blocks" { +variable "egress_with_cidr_ipv6" { description = "List of egress rules to create where 'ipv6_cidr_blocks' is used" type = list(map(string)) default = [] } -variable "egress_with_source_security_group_id" { +variable "egress_with_referenced_security_group_id" { description = "List of egress rules to create where 'source_security_group_id' is used" type = list(map(string)) default = [] } -variable "egress_with_prefix_list_ids" { - description = "List of egress rules to create where 'prefix_list_ids' is used" +variable "egress_with_prefix_list_id" { + description = "List of egress rules to create where 'prefix_list_id' is used" type = list(map(string)) default = [] } -variable "egress_cidr_blocks" { +variable "egress_cidr_ipv4" { description = "List of IPv4 CIDR ranges to use on all egress rules" type = list(string) default = ["0.0.0.0/0"] } -variable "egress_ipv6_cidr_blocks" { +variable "egress_cidr_ipv6" { description = "List of IPv6 CIDR ranges to use on all egress rules" type = list(string) default = ["::/0"] @@ -284,26 +284,26 @@ variable "computed_egress_with_self" { default = [] } -variable "computed_egress_with_cidr_blocks" { - description = "List of computed egress rules to create where 'cidr_blocks' is used" +variable "computed_egress_with_cidr_ipv4" { + description = "List of computed egress rules to create where 'cidr_ipv4' is used" type = list(map(string)) default = [] } -variable "computed_egress_with_ipv6_cidr_blocks" { +variable "computed_egress_with_cidr_ipv6" { description = "List of computed egress rules to create where 'ipv6_cidr_blocks' is used" type = list(map(string)) default = [] } -variable "computed_egress_with_source_security_group_id" { +variable "computed_egress_with_referenced_security_group_id" { description = "List of computed egress rules to create where 'source_security_group_id' is used" type = list(map(string)) default = [] } -variable "computed_egress_with_prefix_list_ids" { - description = "List of computed egress rules to create where 'prefix_list_ids' is used" +variable "computed_egress_with_prefix_list_id" { + description = "List of computed egress rules to create where 'prefix_list_id' is used" type = list(map(string)) default = [] } @@ -341,26 +341,26 @@ variable "number_of_computed_egress_with_self" { default = 0 } -variable "number_of_computed_egress_with_cidr_blocks" { - description = "Number of computed egress rules to create where 'cidr_blocks' is used" +variable "number_of_computed_egress_with_cidr_ipv4" { + description = "Number of computed egress rules to create where 'cidr_ipv4' is used" type = number default = 0 } -variable "number_of_computed_egress_with_ipv6_cidr_blocks" { +variable "number_of_computed_egress_with_cidr_ipv6" { description = "Number of computed egress rules to create where 'ipv6_cidr_blocks' is used" type = number default = 0 } -variable "number_of_computed_egress_with_source_security_group_id" { +variable "number_of_computed_egress_with_referenced_security_group_id" { description = "Number of computed egress rules to create where 'source_security_group_id' is used" type = number default = 0 } -variable "number_of_computed_egress_with_prefix_list_ids" { - description = "Number of computed egress rules to create where 'prefix_list_ids' is used" +variable "number_of_computed_egress_with_prefix_list_id" { + description = "Number of computed egress rules to create where 'prefix_list_id' is used" type = number default = 0 } diff --git a/modules/solr/README.md b/modules/solr/README.md index 6365ef88..3e35392c 100644 --- a/modules/solr/README.md +++ b/modules/solr/README.md @@ -55,59 +55,59 @@ No resources. | [computed\_egress\_ipv6\_cidr\_blocks](#input\_computed\_egress\_ipv6\_cidr\_blocks) | List of IPv6 CIDR ranges to use on all computed egress rules | `list(string)` |
[
"::/0"
]
| no | | [computed\_egress\_prefix\_list\_ids](#input\_computed\_egress\_prefix\_list\_ids) | List of prefix list IDs (for allowing access to VPC endpoints) to use on all computed egress rules | `list(string)` | `[]` | no | | [computed\_egress\_rules](#input\_computed\_egress\_rules) | List of computed egress rules to create by name | `list(string)` | `[]` | no | -| [computed\_egress\_with\_cidr\_blocks](#input\_computed\_egress\_with\_cidr\_blocks) | List of computed egress rules to create where 'cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [computed\_egress\_with\_ipv6\_cidr\_blocks](#input\_computed\_egress\_with\_ipv6\_cidr\_blocks) | List of computed egress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [computed\_egress\_with\_prefix\_list\_ids](#input\_computed\_egress\_with\_prefix\_list\_ids) | List of computed egress rules to create where 'prefix\_list\_ids' is used | `list(map(string))` | `[]` | no | +| [computed\_egress\_with\_cidr\_ipv4](#input\_computed\_egress\_with\_cidr\_ipv4) | List of computed egress rules to create where 'cidr\_ipv4' is used | `list(map(string))` | `[]` | no | +| [computed\_egress\_with\_cidr\_ipv6](#input\_computed\_egress\_with\_cidr\_ipv6) | List of computed egress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | +| [computed\_egress\_with\_prefix\_list\_id](#input\_computed\_egress\_with\_prefix\_list\_id) | List of computed egress rules to create where 'prefix\_list\_id' is used | `list(map(string))` | `[]` | no | +| [computed\_egress\_with\_referenced\_security\_group\_id](#input\_computed\_egress\_with\_referenced\_security\_group\_id) | List of computed egress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [computed\_egress\_with\_self](#input\_computed\_egress\_with\_self) | List of computed egress rules to create where 'self' is defined | `list(map(string))` | `[]` | no | -| [computed\_egress\_with\_source\_security\_group\_id](#input\_computed\_egress\_with\_source\_security\_group\_id) | List of computed egress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [computed\_ingress\_cidr\_blocks](#input\_computed\_ingress\_cidr\_blocks) | List of IPv4 CIDR ranges to use on all computed ingress rules | `list(string)` | `[]` | no | | [computed\_ingress\_ipv6\_cidr\_blocks](#input\_computed\_ingress\_ipv6\_cidr\_blocks) | List of IPv6 CIDR ranges to use on all computed ingress rules | `list(string)` | `[]` | no | | [computed\_ingress\_prefix\_list\_ids](#input\_computed\_ingress\_prefix\_list\_ids) | List of prefix list IDs (for allowing access to VPC endpoints) to use on all computed ingress rules | `list(string)` | `[]` | no | | [computed\_ingress\_rules](#input\_computed\_ingress\_rules) | List of computed ingress rules to create by name | `list(string)` | `[]` | no | -| [computed\_ingress\_with\_cidr\_blocks](#input\_computed\_ingress\_with\_cidr\_blocks) | List of computed ingress rules to create where 'cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [computed\_ingress\_with\_ipv6\_cidr\_blocks](#input\_computed\_ingress\_with\_ipv6\_cidr\_blocks) | List of computed ingress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [computed\_ingress\_with\_prefix\_list\_ids](#input\_computed\_ingress\_with\_prefix\_list\_ids) | List of computed ingress rules to create where 'prefix\_list\_ids' is used | `list(map(string))` | `[]` | no | +| [computed\_ingress\_with\_cidr\_ipv4](#input\_computed\_ingress\_with\_cidr\_ipv4) | List of computed ingress rules to create where 'cidr\_ipv4' is used | `list(map(string))` | `[]` | no | +| [computed\_ingress\_with\_cidr\_ipv6](#input\_computed\_ingress\_with\_cidr\_ipv6) | List of computed ingress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | +| [computed\_ingress\_with\_prefix\_list\_id](#input\_computed\_ingress\_with\_prefix\_list\_id) | List of computed ingress rules to create where 'prefix\_list\_id' is used | `list(map(string))` | `[]` | no | +| [computed\_ingress\_with\_referenced\_security\_group\_id](#input\_computed\_ingress\_with\_referenced\_security\_group\_id) | List of computed ingress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [computed\_ingress\_with\_self](#input\_computed\_ingress\_with\_self) | List of computed ingress rules to create where 'self' is defined | `list(map(string))` | `[]` | no | -| [computed\_ingress\_with\_source\_security\_group\_id](#input\_computed\_ingress\_with\_source\_security\_group\_id) | List of computed ingress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [create](#input\_create) | Whether to create security group and all rules | `bool` | `true` | no | | [description](#input\_description) | Description of security group | `string` | `"Security Group managed by Terraform"` | no | -| [egress\_cidr\_blocks](#input\_egress\_cidr\_blocks) | List of IPv4 CIDR ranges to use on all egress rules | `list(string)` |
[
"0.0.0.0/0"
]
| no | -| [egress\_ipv6\_cidr\_blocks](#input\_egress\_ipv6\_cidr\_blocks) | List of IPv6 CIDR ranges to use on all egress rules | `list(string)` |
[
"::/0"
]
| no | +| [egress\_cidr\_ipv4](#input\_egress\_cidr\_ipv4) | List of IPv4 CIDR ranges to use on all egress rules | `list(string)` |
[
"0.0.0.0/0"
]
| no | +| [egress\_cidr\_ipv6](#input\_egress\_cidr\_ipv6) | List of IPv6 CIDR ranges to use on all egress rules | `list(string)` |
[
"::/0"
]
| no | | [egress\_prefix\_list\_ids](#input\_egress\_prefix\_list\_ids) | List of prefix list IDs (for allowing access to VPC endpoints) to use on all egress rules | `list(string)` | `[]` | no | | [egress\_rules](#input\_egress\_rules) | List of egress rules to create by name | `list(string)` | `[]` | no | -| [egress\_with\_cidr\_blocks](#input\_egress\_with\_cidr\_blocks) | List of egress rules to create where 'cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [egress\_with\_ipv6\_cidr\_blocks](#input\_egress\_with\_ipv6\_cidr\_blocks) | List of egress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [egress\_with\_prefix\_list\_ids](#input\_egress\_with\_prefix\_list\_ids) | List of egress rules to create where 'prefix\_list\_ids' is used | `list(map(string))` | `[]` | no | +| [egress\_with\_cidr\_ipv4](#input\_egress\_with\_cidr\_ipv4) | List of egress rules to create where 'cidr\_ipv4' is used | `list(map(string))` | `[]` | no | +| [egress\_with\_cidr\_ipv6](#input\_egress\_with\_cidr\_ipv6) | List of egress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | +| [egress\_with\_prefix\_list\_id](#input\_egress\_with\_prefix\_list\_id) | List of egress rules to create where 'prefix\_list\_id' is used | `list(map(string))` | `[]` | no | +| [egress\_with\_referenced\_security\_group\_id](#input\_egress\_with\_referenced\_security\_group\_id) | List of egress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [egress\_with\_self](#input\_egress\_with\_self) | List of egress rules to create where 'self' is defined | `list(map(string))` | `[]` | no | -| [egress\_with\_source\_security\_group\_id](#input\_egress\_with\_source\_security\_group\_id) | List of egress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | -| [ingress\_cidr\_blocks](#input\_ingress\_cidr\_blocks) | List of IPv4 CIDR ranges to use on all ingress rules | `list(string)` | `[]` | no | -| [ingress\_ipv6\_cidr\_blocks](#input\_ingress\_ipv6\_cidr\_blocks) | List of IPv6 CIDR ranges to use on all ingress rules | `list(string)` | `[]` | no | +| [ingress\_cidr\_ipv4](#input\_ingress\_cidr\_ipv4) | List of IPv4 CIDR ranges to use on all ingress rules | `list(string)` | `[]` | no | +| [ingress\_cidr\_ipv6](#input\_ingress\_cidr\_ipv6) | List of IPv6 CIDR ranges to use on all ingress rules | `list(string)` | `[]` | no | | [ingress\_prefix\_list\_ids](#input\_ingress\_prefix\_list\_ids) | List of prefix list IDs (for allowing access to VPC endpoints) to use on all ingress rules | `list(string)` | `[]` | no | | [ingress\_rules](#input\_ingress\_rules) | List of ingress rules to create by name | `list(string)` | `[]` | no | -| [ingress\_with\_cidr\_blocks](#input\_ingress\_with\_cidr\_blocks) | List of ingress rules to create where 'cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [ingress\_with\_ipv6\_cidr\_blocks](#input\_ingress\_with\_ipv6\_cidr\_blocks) | List of ingress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [ingress\_with\_prefix\_list\_ids](#input\_ingress\_with\_prefix\_list\_ids) | List of ingress rules to create where 'prefix\_list\_ids' is used | `list(map(string))` | `[]` | no | +| [ingress\_with\_cidr\_ipv4](#input\_ingress\_with\_cidr\_ipv4) | List of ingress rules to create where 'cidr\_ipv4' is used | `list(map(string))` | `[]` | no | +| [ingress\_with\_cidr\_ipv6](#input\_ingress\_with\_cidr\_ipv6) | List of ingress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | +| [ingress\_with\_prefix\_list\_id](#input\_ingress\_with\_prefix\_list\_id) | List of ingress rules to create where 'prefix\_list\_id' is used | `list(map(string))` | `[]` | no | +| [ingress\_with\_referenced\_security\_group\_id](#input\_ingress\_with\_referenced\_security\_group\_id) | List of ingress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [ingress\_with\_self](#input\_ingress\_with\_self) | List of ingress rules to create where 'self' is defined | `list(map(string))` | `[]` | no | -| [ingress\_with\_source\_security\_group\_id](#input\_ingress\_with\_source\_security\_group\_id) | List of ingress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [name](#input\_name) | Name of security group | `string` | n/a | yes | | [number\_of\_computed\_egress\_cidr\_blocks](#input\_number\_of\_computed\_egress\_cidr\_blocks) | Number of IPv4 CIDR ranges to use on all computed egress rules | `number` | `0` | no | | [number\_of\_computed\_egress\_ipv6\_cidr\_blocks](#input\_number\_of\_computed\_egress\_ipv6\_cidr\_blocks) | Number of IPv6 CIDR ranges to use on all computed egress rules | `number` | `0` | no | | [number\_of\_computed\_egress\_prefix\_list\_ids](#input\_number\_of\_computed\_egress\_prefix\_list\_ids) | Number of prefix list IDs (for allowing access to VPC endpoints) to use on all computed egress rules | `number` | `0` | no | | [number\_of\_computed\_egress\_rules](#input\_number\_of\_computed\_egress\_rules) | Number of computed egress rules to create by name | `number` | `0` | no | -| [number\_of\_computed\_egress\_with\_cidr\_blocks](#input\_number\_of\_computed\_egress\_with\_cidr\_blocks) | Number of computed egress rules to create where 'cidr\_blocks' is used | `number` | `0` | no | -| [number\_of\_computed\_egress\_with\_ipv6\_cidr\_blocks](#input\_number\_of\_computed\_egress\_with\_ipv6\_cidr\_blocks) | Number of computed egress rules to create where 'ipv6\_cidr\_blocks' is used | `number` | `0` | no | -| [number\_of\_computed\_egress\_with\_prefix\_list\_ids](#input\_number\_of\_computed\_egress\_with\_prefix\_list\_ids) | Number of computed egress rules to create where 'prefix\_list\_ids' is used | `number` | `0` | no | +| [number\_of\_computed\_egress\_with\_cidr\_ipv4](#input\_number\_of\_computed\_egress\_with\_cidr\_ipv4) | Number of computed egress rules to create where 'cidr\_ipv4' is used | `number` | `0` | no | +| [number\_of\_computed\_egress\_with\_cidr\_ipv6](#input\_number\_of\_computed\_egress\_with\_cidr\_ipv6) | Number of computed egress rules to create where 'ipv6\_cidr\_blocks' is used | `number` | `0` | no | +| [number\_of\_computed\_egress\_with\_prefix\_list\_id](#input\_number\_of\_computed\_egress\_with\_prefix\_list\_id) | Number of computed egress rules to create where 'prefix\_list\_id' is used | `number` | `0` | no | +| [number\_of\_computed\_egress\_with\_referenced\_security\_group\_id](#input\_number\_of\_computed\_egress\_with\_referenced\_security\_group\_id) | Number of computed egress rules to create where 'source\_security\_group\_id' is used | `number` | `0` | no | | [number\_of\_computed\_egress\_with\_self](#input\_number\_of\_computed\_egress\_with\_self) | Number of computed egress rules to create where 'self' is defined | `number` | `0` | no | -| [number\_of\_computed\_egress\_with\_source\_security\_group\_id](#input\_number\_of\_computed\_egress\_with\_source\_security\_group\_id) | Number of computed egress rules to create where 'source\_security\_group\_id' is used | `number` | `0` | no | | [number\_of\_computed\_ingress\_cidr\_blocks](#input\_number\_of\_computed\_ingress\_cidr\_blocks) | Number of IPv4 CIDR ranges to use on all computed ingress rules | `number` | `0` | no | | [number\_of\_computed\_ingress\_ipv6\_cidr\_blocks](#input\_number\_of\_computed\_ingress\_ipv6\_cidr\_blocks) | Number of IPv6 CIDR ranges to use on all computed ingress rules | `number` | `0` | no | | [number\_of\_computed\_ingress\_prefix\_list\_ids](#input\_number\_of\_computed\_ingress\_prefix\_list\_ids) | Number of prefix list IDs (for allowing access to VPC endpoints) to use on all computed ingress rules | `number` | `0` | no | | [number\_of\_computed\_ingress\_rules](#input\_number\_of\_computed\_ingress\_rules) | Number of computed ingress rules to create by name | `number` | `0` | no | -| [number\_of\_computed\_ingress\_with\_cidr\_blocks](#input\_number\_of\_computed\_ingress\_with\_cidr\_blocks) | Number of computed ingress rules to create where 'cidr\_blocks' is used | `number` | `0` | no | -| [number\_of\_computed\_ingress\_with\_ipv6\_cidr\_blocks](#input\_number\_of\_computed\_ingress\_with\_ipv6\_cidr\_blocks) | Number of computed ingress rules to create where 'ipv6\_cidr\_blocks' is used | `number` | `0` | no | -| [number\_of\_computed\_ingress\_with\_prefix\_list\_ids](#input\_number\_of\_computed\_ingress\_with\_prefix\_list\_ids) | Number of computed ingress rules to create where 'prefix\_list\_ids' is used | `number` | `0` | no | +| [number\_of\_computed\_ingress\_with\_cidr\_ipv4](#input\_number\_of\_computed\_ingress\_with\_cidr\_ipv4) | Number of computed ingress rules to create where 'cidr\_ipv4' is used | `number` | `0` | no | +| [number\_of\_computed\_ingress\_with\_cidr\_ipv6](#input\_number\_of\_computed\_ingress\_with\_cidr\_ipv6) | Number of computed ingress rules to create where 'ipv6\_cidr\_blocks' is used | `number` | `0` | no | +| [number\_of\_computed\_ingress\_with\_prefix\_list\_id](#input\_number\_of\_computed\_ingress\_with\_prefix\_list\_id) | Number of computed ingress rules to create where 'prefix\_list\_id' is used | `number` | `0` | no | +| [number\_of\_computed\_ingress\_with\_referenced\_security\_group\_id](#input\_number\_of\_computed\_ingress\_with\_referenced\_security\_group\_id) | Number of computed ingress rules to create where 'source\_security\_group\_id' is used | `number` | `0` | no | | [number\_of\_computed\_ingress\_with\_self](#input\_number\_of\_computed\_ingress\_with\_self) | Number of computed ingress rules to create where 'self' is defined | `number` | `0` | no | -| [number\_of\_computed\_ingress\_with\_source\_security\_group\_id](#input\_number\_of\_computed\_ingress\_with\_source\_security\_group\_id) | Number of computed ingress rules to create where 'source\_security\_group\_id' is used | `number` | `0` | no | | [revoke\_rules\_on\_delete](#input\_revoke\_rules\_on\_delete) | Instruct Terraform to revoke all of the Security Groups attached ingress and egress rules before deleting the rule itself. Enable for EMR. | `bool` | `false` | no | | [tags](#input\_tags) | A mapping of tags to assign to security group | `map(string)` | `{}` | no | | [use\_name\_prefix](#input\_use\_name\_prefix) | Whether to use name\_prefix or fixed name. Should be true to able to update security group name after initial creation | `bool` | `true` | no | diff --git a/modules/solr/main.tf b/modules/solr/main.tf index 80ea0adb..d2a1bf93 100644 --- a/modules/solr/main.tf +++ b/modules/solr/main.tf @@ -19,20 +19,20 @@ module "sg" { ingress_with_self = concat(var.auto_ingress_with_self, var.ingress_with_self) # Open to IPv4 cidr blocks - ingress_with_cidr_blocks = var.ingress_with_cidr_blocks + ingress_with_cidr_ipv4 = var.ingress_with_cidr_ipv4 # Open to IPv6 cidr blocks - ingress_with_ipv6_cidr_blocks = var.ingress_with_ipv6_cidr_blocks + ingress_with_cidr_ipv6 = var.ingress_with_cidr_ipv6 # Open for security group id - ingress_with_source_security_group_id = var.ingress_with_source_security_group_id + ingress_with_referenced_security_group_id = var.ingress_with_referenced_security_group_id # Open for prefix list id - ingress_with_prefix_list_ids = var.ingress_with_prefix_list_ids + ingress_with_prefix_list_id = var.ingress_with_prefix_list_id # Default ingress CIDR blocks - ingress_cidr_blocks = var.ingress_cidr_blocks - ingress_ipv6_cidr_blocks = var.ingress_ipv6_cidr_blocks + ingress_cidr_ipv4 = var.ingress_cidr_ipv4 + ingress_cidr_ipv6 = var.ingress_cidr_ipv6 # Default prefix list ids ingress_prefix_list_ids = var.ingress_prefix_list_ids @@ -47,26 +47,26 @@ module "sg" { computed_ingress_with_self = concat(var.auto_computed_ingress_with_self, var.computed_ingress_with_self) # Open to IPv4 cidr blocks - computed_ingress_with_cidr_blocks = var.computed_ingress_with_cidr_blocks + computed_ingress_with_cidr_ipv4 = var.computed_ingress_with_cidr_ipv4 # Open to IPv6 cidr blocks - computed_ingress_with_ipv6_cidr_blocks = var.computed_ingress_with_ipv6_cidr_blocks + computed_ingress_with_cidr_ipv6 = var.computed_ingress_with_cidr_ipv6 # Open for security group id - computed_ingress_with_source_security_group_id = var.computed_ingress_with_source_security_group_id + computed_ingress_with_referenced_security_group_id = var.computed_ingress_with_referenced_security_group_id # Open for prefix list id - computed_ingress_with_prefix_list_ids = var.computed_ingress_with_prefix_list_ids + computed_ingress_with_prefix_list_id = var.computed_ingress_with_prefix_list_id ############################# # Number of computed ingress ############################# - number_of_computed_ingress_rules = var.auto_number_of_computed_ingress_rules + var.number_of_computed_ingress_rules - number_of_computed_ingress_with_self = var.auto_number_of_computed_ingress_with_self + var.number_of_computed_ingress_with_self - number_of_computed_ingress_with_cidr_blocks = var.number_of_computed_ingress_with_cidr_blocks - number_of_computed_ingress_with_ipv6_cidr_blocks = var.number_of_computed_ingress_with_ipv6_cidr_blocks - number_of_computed_ingress_with_source_security_group_id = var.number_of_computed_ingress_with_source_security_group_id - number_of_computed_ingress_with_prefix_list_ids = var.number_of_computed_ingress_with_prefix_list_ids + number_of_computed_ingress_rules = var.auto_number_of_computed_ingress_rules + var.number_of_computed_ingress_rules + number_of_computed_ingress_with_self = var.auto_number_of_computed_ingress_with_self + var.number_of_computed_ingress_with_self + number_of_computed_ingress_with_cidr_ipv4 = var.number_of_computed_ingress_with_cidr_ipv4 + number_of_computed_ingress_with_cidr_ipv6 = var.number_of_computed_ingress_with_cidr_ipv6 + number_of_computed_ingress_with_referenced_security_group_id = var.number_of_computed_ingress_with_referenced_security_group_id + number_of_computed_ingress_with_prefix_list_id = var.number_of_computed_ingress_with_prefix_list_id ######### # Egress @@ -78,20 +78,20 @@ module "sg" { egress_with_self = concat(var.auto_egress_with_self, var.egress_with_self) # Open to IPv4 cidr blocks - egress_with_cidr_blocks = var.egress_with_cidr_blocks + egress_with_cidr_ipv4 = var.egress_with_cidr_ipv4 # Open to IPv6 cidr blocks - egress_with_ipv6_cidr_blocks = var.egress_with_ipv6_cidr_blocks + egress_with_cidr_ipv6 = var.egress_with_cidr_ipv6 # Open for security group id - egress_with_source_security_group_id = var.egress_with_source_security_group_id + egress_with_referenced_security_group_id = var.egress_with_referenced_security_group_id # Open for prefix list id - egress_with_prefix_list_ids = var.egress_with_prefix_list_ids + egress_with_prefix_list_id = var.egress_with_prefix_list_id # Default egress CIDR blocks - egress_cidr_blocks = var.egress_cidr_blocks - egress_ipv6_cidr_blocks = var.egress_ipv6_cidr_blocks + egress_cidr_ipv4 = var.egress_cidr_ipv4 + egress_cidr_ipv6 = var.egress_cidr_ipv6 # Default prefix list ids egress_prefix_list_ids = var.egress_prefix_list_ids @@ -106,24 +106,24 @@ module "sg" { computed_egress_with_self = concat(var.auto_computed_egress_with_self, var.computed_egress_with_self) # Open to IPv4 cidr blocks - computed_egress_with_cidr_blocks = var.computed_egress_with_cidr_blocks + computed_egress_with_cidr_ipv4 = var.computed_egress_with_cidr_ipv4 # Open to IPv6 cidr blocks - computed_egress_with_ipv6_cidr_blocks = var.computed_egress_with_ipv6_cidr_blocks + computed_egress_with_cidr_ipv6 = var.computed_egress_with_cidr_ipv6 # Open for security group id - computed_egress_with_source_security_group_id = var.computed_egress_with_source_security_group_id + computed_egress_with_referenced_security_group_id = var.computed_egress_with_referenced_security_group_id # Open for prefix list id - computed_egress_with_prefix_list_ids = var.computed_egress_with_prefix_list_ids + computed_egress_with_prefix_list_id = var.computed_egress_with_prefix_list_id ############################# # Number of computed egress ############################# - number_of_computed_egress_rules = var.auto_number_of_computed_egress_rules + var.number_of_computed_egress_rules - number_of_computed_egress_with_self = var.auto_number_of_computed_egress_with_self + var.number_of_computed_egress_with_self - number_of_computed_egress_with_cidr_blocks = var.number_of_computed_egress_with_cidr_blocks - number_of_computed_egress_with_ipv6_cidr_blocks = var.number_of_computed_egress_with_ipv6_cidr_blocks - number_of_computed_egress_with_source_security_group_id = var.number_of_computed_egress_with_source_security_group_id - number_of_computed_egress_with_prefix_list_ids = var.number_of_computed_egress_with_prefix_list_ids + number_of_computed_egress_rules = var.auto_number_of_computed_egress_rules + var.number_of_computed_egress_rules + number_of_computed_egress_with_self = var.auto_number_of_computed_egress_with_self + var.number_of_computed_egress_with_self + number_of_computed_egress_with_cidr_ipv4 = var.number_of_computed_egress_with_cidr_ipv4 + number_of_computed_egress_with_cidr_ipv6 = var.number_of_computed_egress_with_cidr_ipv6 + number_of_computed_egress_with_referenced_security_group_id = var.number_of_computed_egress_with_referenced_security_group_id + number_of_computed_egress_with_prefix_list_id = var.number_of_computed_egress_with_prefix_list_id } diff --git a/modules/solr/variables.tf b/modules/solr/variables.tf index 60c8c27b..6590c9e3 100644 --- a/modules/solr/variables.tf +++ b/modules/solr/variables.tf @@ -56,37 +56,37 @@ variable "ingress_with_self" { default = [] } -variable "ingress_with_cidr_blocks" { - description = "List of ingress rules to create where 'cidr_blocks' is used" +variable "ingress_with_cidr_ipv4" { + description = "List of ingress rules to create where 'cidr_ipv4' is used" type = list(map(string)) default = [] } -variable "ingress_with_ipv6_cidr_blocks" { +variable "ingress_with_cidr_ipv6" { description = "List of ingress rules to create where 'ipv6_cidr_blocks' is used" type = list(map(string)) default = [] } -variable "ingress_with_source_security_group_id" { +variable "ingress_with_referenced_security_group_id" { description = "List of ingress rules to create where 'source_security_group_id' is used" type = list(map(string)) default = [] } -variable "ingress_with_prefix_list_ids" { - description = "List of ingress rules to create where 'prefix_list_ids' is used" +variable "ingress_with_prefix_list_id" { + description = "List of ingress rules to create where 'prefix_list_id' is used" type = list(map(string)) default = [] } -variable "ingress_cidr_blocks" { +variable "ingress_cidr_ipv4" { description = "List of IPv4 CIDR ranges to use on all ingress rules" type = list(string) default = [] } -variable "ingress_ipv6_cidr_blocks" { +variable "ingress_cidr_ipv6" { description = "List of IPv6 CIDR ranges to use on all ingress rules" type = list(string) default = [] @@ -113,26 +113,26 @@ variable "computed_ingress_with_self" { default = [] } -variable "computed_ingress_with_cidr_blocks" { - description = "List of computed ingress rules to create where 'cidr_blocks' is used" +variable "computed_ingress_with_cidr_ipv4" { + description = "List of computed ingress rules to create where 'cidr_ipv4' is used" type = list(map(string)) default = [] } -variable "computed_ingress_with_ipv6_cidr_blocks" { +variable "computed_ingress_with_cidr_ipv6" { description = "List of computed ingress rules to create where 'ipv6_cidr_blocks' is used" type = list(map(string)) default = [] } -variable "computed_ingress_with_source_security_group_id" { +variable "computed_ingress_with_referenced_security_group_id" { description = "List of computed ingress rules to create where 'source_security_group_id' is used" type = list(map(string)) default = [] } -variable "computed_ingress_with_prefix_list_ids" { - description = "List of computed ingress rules to create where 'prefix_list_ids' is used" +variable "computed_ingress_with_prefix_list_id" { + description = "List of computed ingress rules to create where 'prefix_list_id' is used" type = list(map(string)) default = [] } @@ -170,26 +170,26 @@ variable "number_of_computed_ingress_with_self" { default = 0 } -variable "number_of_computed_ingress_with_cidr_blocks" { - description = "Number of computed ingress rules to create where 'cidr_blocks' is used" +variable "number_of_computed_ingress_with_cidr_ipv4" { + description = "Number of computed ingress rules to create where 'cidr_ipv4' is used" type = number default = 0 } -variable "number_of_computed_ingress_with_ipv6_cidr_blocks" { +variable "number_of_computed_ingress_with_cidr_ipv6" { description = "Number of computed ingress rules to create where 'ipv6_cidr_blocks' is used" type = number default = 0 } -variable "number_of_computed_ingress_with_source_security_group_id" { +variable "number_of_computed_ingress_with_referenced_security_group_id" { description = "Number of computed ingress rules to create where 'source_security_group_id' is used" type = number default = 0 } -variable "number_of_computed_ingress_with_prefix_list_ids" { - description = "Number of computed ingress rules to create where 'prefix_list_ids' is used" +variable "number_of_computed_ingress_with_prefix_list_id" { + description = "Number of computed ingress rules to create where 'prefix_list_id' is used" type = number default = 0 } @@ -227,37 +227,37 @@ variable "egress_with_self" { default = [] } -variable "egress_with_cidr_blocks" { - description = "List of egress rules to create where 'cidr_blocks' is used" +variable "egress_with_cidr_ipv4" { + description = "List of egress rules to create where 'cidr_ipv4' is used" type = list(map(string)) default = [] } -variable "egress_with_ipv6_cidr_blocks" { +variable "egress_with_cidr_ipv6" { description = "List of egress rules to create where 'ipv6_cidr_blocks' is used" type = list(map(string)) default = [] } -variable "egress_with_source_security_group_id" { +variable "egress_with_referenced_security_group_id" { description = "List of egress rules to create where 'source_security_group_id' is used" type = list(map(string)) default = [] } -variable "egress_with_prefix_list_ids" { - description = "List of egress rules to create where 'prefix_list_ids' is used" +variable "egress_with_prefix_list_id" { + description = "List of egress rules to create where 'prefix_list_id' is used" type = list(map(string)) default = [] } -variable "egress_cidr_blocks" { +variable "egress_cidr_ipv4" { description = "List of IPv4 CIDR ranges to use on all egress rules" type = list(string) default = ["0.0.0.0/0"] } -variable "egress_ipv6_cidr_blocks" { +variable "egress_cidr_ipv6" { description = "List of IPv6 CIDR ranges to use on all egress rules" type = list(string) default = ["::/0"] @@ -284,26 +284,26 @@ variable "computed_egress_with_self" { default = [] } -variable "computed_egress_with_cidr_blocks" { - description = "List of computed egress rules to create where 'cidr_blocks' is used" +variable "computed_egress_with_cidr_ipv4" { + description = "List of computed egress rules to create where 'cidr_ipv4' is used" type = list(map(string)) default = [] } -variable "computed_egress_with_ipv6_cidr_blocks" { +variable "computed_egress_with_cidr_ipv6" { description = "List of computed egress rules to create where 'ipv6_cidr_blocks' is used" type = list(map(string)) default = [] } -variable "computed_egress_with_source_security_group_id" { +variable "computed_egress_with_referenced_security_group_id" { description = "List of computed egress rules to create where 'source_security_group_id' is used" type = list(map(string)) default = [] } -variable "computed_egress_with_prefix_list_ids" { - description = "List of computed egress rules to create where 'prefix_list_ids' is used" +variable "computed_egress_with_prefix_list_id" { + description = "List of computed egress rules to create where 'prefix_list_id' is used" type = list(map(string)) default = [] } @@ -341,26 +341,26 @@ variable "number_of_computed_egress_with_self" { default = 0 } -variable "number_of_computed_egress_with_cidr_blocks" { - description = "Number of computed egress rules to create where 'cidr_blocks' is used" +variable "number_of_computed_egress_with_cidr_ipv4" { + description = "Number of computed egress rules to create where 'cidr_ipv4' is used" type = number default = 0 } -variable "number_of_computed_egress_with_ipv6_cidr_blocks" { +variable "number_of_computed_egress_with_cidr_ipv6" { description = "Number of computed egress rules to create where 'ipv6_cidr_blocks' is used" type = number default = 0 } -variable "number_of_computed_egress_with_source_security_group_id" { +variable "number_of_computed_egress_with_referenced_security_group_id" { description = "Number of computed egress rules to create where 'source_security_group_id' is used" type = number default = 0 } -variable "number_of_computed_egress_with_prefix_list_ids" { - description = "Number of computed egress rules to create where 'prefix_list_ids' is used" +variable "number_of_computed_egress_with_prefix_list_id" { + description = "Number of computed egress rules to create where 'prefix_list_id' is used" type = number default = 0 } diff --git a/modules/splunk/README.md b/modules/splunk/README.md index 87479223..d24278e3 100644 --- a/modules/splunk/README.md +++ b/modules/splunk/README.md @@ -55,59 +55,59 @@ No resources. | [computed\_egress\_ipv6\_cidr\_blocks](#input\_computed\_egress\_ipv6\_cidr\_blocks) | List of IPv6 CIDR ranges to use on all computed egress rules | `list(string)` |
[
"::/0"
]
| no | | [computed\_egress\_prefix\_list\_ids](#input\_computed\_egress\_prefix\_list\_ids) | List of prefix list IDs (for allowing access to VPC endpoints) to use on all computed egress rules | `list(string)` | `[]` | no | | [computed\_egress\_rules](#input\_computed\_egress\_rules) | List of computed egress rules to create by name | `list(string)` | `[]` | no | -| [computed\_egress\_with\_cidr\_blocks](#input\_computed\_egress\_with\_cidr\_blocks) | List of computed egress rules to create where 'cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [computed\_egress\_with\_ipv6\_cidr\_blocks](#input\_computed\_egress\_with\_ipv6\_cidr\_blocks) | List of computed egress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [computed\_egress\_with\_prefix\_list\_ids](#input\_computed\_egress\_with\_prefix\_list\_ids) | List of computed egress rules to create where 'prefix\_list\_ids' is used | `list(map(string))` | `[]` | no | +| [computed\_egress\_with\_cidr\_ipv4](#input\_computed\_egress\_with\_cidr\_ipv4) | List of computed egress rules to create where 'cidr\_ipv4' is used | `list(map(string))` | `[]` | no | +| [computed\_egress\_with\_cidr\_ipv6](#input\_computed\_egress\_with\_cidr\_ipv6) | List of computed egress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | +| [computed\_egress\_with\_prefix\_list\_id](#input\_computed\_egress\_with\_prefix\_list\_id) | List of computed egress rules to create where 'prefix\_list\_id' is used | `list(map(string))` | `[]` | no | +| [computed\_egress\_with\_referenced\_security\_group\_id](#input\_computed\_egress\_with\_referenced\_security\_group\_id) | List of computed egress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [computed\_egress\_with\_self](#input\_computed\_egress\_with\_self) | List of computed egress rules to create where 'self' is defined | `list(map(string))` | `[]` | no | -| [computed\_egress\_with\_source\_security\_group\_id](#input\_computed\_egress\_with\_source\_security\_group\_id) | List of computed egress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [computed\_ingress\_cidr\_blocks](#input\_computed\_ingress\_cidr\_blocks) | List of IPv4 CIDR ranges to use on all computed ingress rules | `list(string)` | `[]` | no | | [computed\_ingress\_ipv6\_cidr\_blocks](#input\_computed\_ingress\_ipv6\_cidr\_blocks) | List of IPv6 CIDR ranges to use on all computed ingress rules | `list(string)` | `[]` | no | | [computed\_ingress\_prefix\_list\_ids](#input\_computed\_ingress\_prefix\_list\_ids) | List of prefix list IDs (for allowing access to VPC endpoints) to use on all computed ingress rules | `list(string)` | `[]` | no | | [computed\_ingress\_rules](#input\_computed\_ingress\_rules) | List of computed ingress rules to create by name | `list(string)` | `[]` | no | -| [computed\_ingress\_with\_cidr\_blocks](#input\_computed\_ingress\_with\_cidr\_blocks) | List of computed ingress rules to create where 'cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [computed\_ingress\_with\_ipv6\_cidr\_blocks](#input\_computed\_ingress\_with\_ipv6\_cidr\_blocks) | List of computed ingress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [computed\_ingress\_with\_prefix\_list\_ids](#input\_computed\_ingress\_with\_prefix\_list\_ids) | List of computed ingress rules to create where 'prefix\_list\_ids' is used | `list(map(string))` | `[]` | no | +| [computed\_ingress\_with\_cidr\_ipv4](#input\_computed\_ingress\_with\_cidr\_ipv4) | List of computed ingress rules to create where 'cidr\_ipv4' is used | `list(map(string))` | `[]` | no | +| [computed\_ingress\_with\_cidr\_ipv6](#input\_computed\_ingress\_with\_cidr\_ipv6) | List of computed ingress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | +| [computed\_ingress\_with\_prefix\_list\_id](#input\_computed\_ingress\_with\_prefix\_list\_id) | List of computed ingress rules to create where 'prefix\_list\_id' is used | `list(map(string))` | `[]` | no | +| [computed\_ingress\_with\_referenced\_security\_group\_id](#input\_computed\_ingress\_with\_referenced\_security\_group\_id) | List of computed ingress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [computed\_ingress\_with\_self](#input\_computed\_ingress\_with\_self) | List of computed ingress rules to create where 'self' is defined | `list(map(string))` | `[]` | no | -| [computed\_ingress\_with\_source\_security\_group\_id](#input\_computed\_ingress\_with\_source\_security\_group\_id) | List of computed ingress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [create](#input\_create) | Whether to create security group and all rules | `bool` | `true` | no | | [description](#input\_description) | Description of security group | `string` | `"Security Group managed by Terraform"` | no | -| [egress\_cidr\_blocks](#input\_egress\_cidr\_blocks) | List of IPv4 CIDR ranges to use on all egress rules | `list(string)` |
[
"0.0.0.0/0"
]
| no | -| [egress\_ipv6\_cidr\_blocks](#input\_egress\_ipv6\_cidr\_blocks) | List of IPv6 CIDR ranges to use on all egress rules | `list(string)` |
[
"::/0"
]
| no | +| [egress\_cidr\_ipv4](#input\_egress\_cidr\_ipv4) | List of IPv4 CIDR ranges to use on all egress rules | `list(string)` |
[
"0.0.0.0/0"
]
| no | +| [egress\_cidr\_ipv6](#input\_egress\_cidr\_ipv6) | List of IPv6 CIDR ranges to use on all egress rules | `list(string)` |
[
"::/0"
]
| no | | [egress\_prefix\_list\_ids](#input\_egress\_prefix\_list\_ids) | List of prefix list IDs (for allowing access to VPC endpoints) to use on all egress rules | `list(string)` | `[]` | no | | [egress\_rules](#input\_egress\_rules) | List of egress rules to create by name | `list(string)` | `[]` | no | -| [egress\_with\_cidr\_blocks](#input\_egress\_with\_cidr\_blocks) | List of egress rules to create where 'cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [egress\_with\_ipv6\_cidr\_blocks](#input\_egress\_with\_ipv6\_cidr\_blocks) | List of egress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [egress\_with\_prefix\_list\_ids](#input\_egress\_with\_prefix\_list\_ids) | List of egress rules to create where 'prefix\_list\_ids' is used | `list(map(string))` | `[]` | no | +| [egress\_with\_cidr\_ipv4](#input\_egress\_with\_cidr\_ipv4) | List of egress rules to create where 'cidr\_ipv4' is used | `list(map(string))` | `[]` | no | +| [egress\_with\_cidr\_ipv6](#input\_egress\_with\_cidr\_ipv6) | List of egress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | +| [egress\_with\_prefix\_list\_id](#input\_egress\_with\_prefix\_list\_id) | List of egress rules to create where 'prefix\_list\_id' is used | `list(map(string))` | `[]` | no | +| [egress\_with\_referenced\_security\_group\_id](#input\_egress\_with\_referenced\_security\_group\_id) | List of egress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [egress\_with\_self](#input\_egress\_with\_self) | List of egress rules to create where 'self' is defined | `list(map(string))` | `[]` | no | -| [egress\_with\_source\_security\_group\_id](#input\_egress\_with\_source\_security\_group\_id) | List of egress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | -| [ingress\_cidr\_blocks](#input\_ingress\_cidr\_blocks) | List of IPv4 CIDR ranges to use on all ingress rules | `list(string)` | `[]` | no | -| [ingress\_ipv6\_cidr\_blocks](#input\_ingress\_ipv6\_cidr\_blocks) | List of IPv6 CIDR ranges to use on all ingress rules | `list(string)` | `[]` | no | +| [ingress\_cidr\_ipv4](#input\_ingress\_cidr\_ipv4) | List of IPv4 CIDR ranges to use on all ingress rules | `list(string)` | `[]` | no | +| [ingress\_cidr\_ipv6](#input\_ingress\_cidr\_ipv6) | List of IPv6 CIDR ranges to use on all ingress rules | `list(string)` | `[]` | no | | [ingress\_prefix\_list\_ids](#input\_ingress\_prefix\_list\_ids) | List of prefix list IDs (for allowing access to VPC endpoints) to use on all ingress rules | `list(string)` | `[]` | no | | [ingress\_rules](#input\_ingress\_rules) | List of ingress rules to create by name | `list(string)` | `[]` | no | -| [ingress\_with\_cidr\_blocks](#input\_ingress\_with\_cidr\_blocks) | List of ingress rules to create where 'cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [ingress\_with\_ipv6\_cidr\_blocks](#input\_ingress\_with\_ipv6\_cidr\_blocks) | List of ingress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [ingress\_with\_prefix\_list\_ids](#input\_ingress\_with\_prefix\_list\_ids) | List of ingress rules to create where 'prefix\_list\_ids' is used | `list(map(string))` | `[]` | no | +| [ingress\_with\_cidr\_ipv4](#input\_ingress\_with\_cidr\_ipv4) | List of ingress rules to create where 'cidr\_ipv4' is used | `list(map(string))` | `[]` | no | +| [ingress\_with\_cidr\_ipv6](#input\_ingress\_with\_cidr\_ipv6) | List of ingress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | +| [ingress\_with\_prefix\_list\_id](#input\_ingress\_with\_prefix\_list\_id) | List of ingress rules to create where 'prefix\_list\_id' is used | `list(map(string))` | `[]` | no | +| [ingress\_with\_referenced\_security\_group\_id](#input\_ingress\_with\_referenced\_security\_group\_id) | List of ingress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [ingress\_with\_self](#input\_ingress\_with\_self) | List of ingress rules to create where 'self' is defined | `list(map(string))` | `[]` | no | -| [ingress\_with\_source\_security\_group\_id](#input\_ingress\_with\_source\_security\_group\_id) | List of ingress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [name](#input\_name) | Name of security group | `string` | n/a | yes | | [number\_of\_computed\_egress\_cidr\_blocks](#input\_number\_of\_computed\_egress\_cidr\_blocks) | Number of IPv4 CIDR ranges to use on all computed egress rules | `number` | `0` | no | | [number\_of\_computed\_egress\_ipv6\_cidr\_blocks](#input\_number\_of\_computed\_egress\_ipv6\_cidr\_blocks) | Number of IPv6 CIDR ranges to use on all computed egress rules | `number` | `0` | no | | [number\_of\_computed\_egress\_prefix\_list\_ids](#input\_number\_of\_computed\_egress\_prefix\_list\_ids) | Number of prefix list IDs (for allowing access to VPC endpoints) to use on all computed egress rules | `number` | `0` | no | | [number\_of\_computed\_egress\_rules](#input\_number\_of\_computed\_egress\_rules) | Number of computed egress rules to create by name | `number` | `0` | no | -| [number\_of\_computed\_egress\_with\_cidr\_blocks](#input\_number\_of\_computed\_egress\_with\_cidr\_blocks) | Number of computed egress rules to create where 'cidr\_blocks' is used | `number` | `0` | no | -| [number\_of\_computed\_egress\_with\_ipv6\_cidr\_blocks](#input\_number\_of\_computed\_egress\_with\_ipv6\_cidr\_blocks) | Number of computed egress rules to create where 'ipv6\_cidr\_blocks' is used | `number` | `0` | no | -| [number\_of\_computed\_egress\_with\_prefix\_list\_ids](#input\_number\_of\_computed\_egress\_with\_prefix\_list\_ids) | Number of computed egress rules to create where 'prefix\_list\_ids' is used | `number` | `0` | no | +| [number\_of\_computed\_egress\_with\_cidr\_ipv4](#input\_number\_of\_computed\_egress\_with\_cidr\_ipv4) | Number of computed egress rules to create where 'cidr\_ipv4' is used | `number` | `0` | no | +| [number\_of\_computed\_egress\_with\_cidr\_ipv6](#input\_number\_of\_computed\_egress\_with\_cidr\_ipv6) | Number of computed egress rules to create where 'ipv6\_cidr\_blocks' is used | `number` | `0` | no | +| [number\_of\_computed\_egress\_with\_prefix\_list\_id](#input\_number\_of\_computed\_egress\_with\_prefix\_list\_id) | Number of computed egress rules to create where 'prefix\_list\_id' is used | `number` | `0` | no | +| [number\_of\_computed\_egress\_with\_referenced\_security\_group\_id](#input\_number\_of\_computed\_egress\_with\_referenced\_security\_group\_id) | Number of computed egress rules to create where 'source\_security\_group\_id' is used | `number` | `0` | no | | [number\_of\_computed\_egress\_with\_self](#input\_number\_of\_computed\_egress\_with\_self) | Number of computed egress rules to create where 'self' is defined | `number` | `0` | no | -| [number\_of\_computed\_egress\_with\_source\_security\_group\_id](#input\_number\_of\_computed\_egress\_with\_source\_security\_group\_id) | Number of computed egress rules to create where 'source\_security\_group\_id' is used | `number` | `0` | no | | [number\_of\_computed\_ingress\_cidr\_blocks](#input\_number\_of\_computed\_ingress\_cidr\_blocks) | Number of IPv4 CIDR ranges to use on all computed ingress rules | `number` | `0` | no | | [number\_of\_computed\_ingress\_ipv6\_cidr\_blocks](#input\_number\_of\_computed\_ingress\_ipv6\_cidr\_blocks) | Number of IPv6 CIDR ranges to use on all computed ingress rules | `number` | `0` | no | | [number\_of\_computed\_ingress\_prefix\_list\_ids](#input\_number\_of\_computed\_ingress\_prefix\_list\_ids) | Number of prefix list IDs (for allowing access to VPC endpoints) to use on all computed ingress rules | `number` | `0` | no | | [number\_of\_computed\_ingress\_rules](#input\_number\_of\_computed\_ingress\_rules) | Number of computed ingress rules to create by name | `number` | `0` | no | -| [number\_of\_computed\_ingress\_with\_cidr\_blocks](#input\_number\_of\_computed\_ingress\_with\_cidr\_blocks) | Number of computed ingress rules to create where 'cidr\_blocks' is used | `number` | `0` | no | -| [number\_of\_computed\_ingress\_with\_ipv6\_cidr\_blocks](#input\_number\_of\_computed\_ingress\_with\_ipv6\_cidr\_blocks) | Number of computed ingress rules to create where 'ipv6\_cidr\_blocks' is used | `number` | `0` | no | -| [number\_of\_computed\_ingress\_with\_prefix\_list\_ids](#input\_number\_of\_computed\_ingress\_with\_prefix\_list\_ids) | Number of computed ingress rules to create where 'prefix\_list\_ids' is used | `number` | `0` | no | +| [number\_of\_computed\_ingress\_with\_cidr\_ipv4](#input\_number\_of\_computed\_ingress\_with\_cidr\_ipv4) | Number of computed ingress rules to create where 'cidr\_ipv4' is used | `number` | `0` | no | +| [number\_of\_computed\_ingress\_with\_cidr\_ipv6](#input\_number\_of\_computed\_ingress\_with\_cidr\_ipv6) | Number of computed ingress rules to create where 'ipv6\_cidr\_blocks' is used | `number` | `0` | no | +| [number\_of\_computed\_ingress\_with\_prefix\_list\_id](#input\_number\_of\_computed\_ingress\_with\_prefix\_list\_id) | Number of computed ingress rules to create where 'prefix\_list\_id' is used | `number` | `0` | no | +| [number\_of\_computed\_ingress\_with\_referenced\_security\_group\_id](#input\_number\_of\_computed\_ingress\_with\_referenced\_security\_group\_id) | Number of computed ingress rules to create where 'source\_security\_group\_id' is used | `number` | `0` | no | | [number\_of\_computed\_ingress\_with\_self](#input\_number\_of\_computed\_ingress\_with\_self) | Number of computed ingress rules to create where 'self' is defined | `number` | `0` | no | -| [number\_of\_computed\_ingress\_with\_source\_security\_group\_id](#input\_number\_of\_computed\_ingress\_with\_source\_security\_group\_id) | Number of computed ingress rules to create where 'source\_security\_group\_id' is used | `number` | `0` | no | | [revoke\_rules\_on\_delete](#input\_revoke\_rules\_on\_delete) | Instruct Terraform to revoke all of the Security Groups attached ingress and egress rules before deleting the rule itself. Enable for EMR. | `bool` | `false` | no | | [tags](#input\_tags) | A mapping of tags to assign to security group | `map(string)` | `{}` | no | | [use\_name\_prefix](#input\_use\_name\_prefix) | Whether to use name\_prefix or fixed name. Should be true to able to update security group name after initial creation | `bool` | `true` | no | diff --git a/modules/splunk/main.tf b/modules/splunk/main.tf index 80ea0adb..d2a1bf93 100644 --- a/modules/splunk/main.tf +++ b/modules/splunk/main.tf @@ -19,20 +19,20 @@ module "sg" { ingress_with_self = concat(var.auto_ingress_with_self, var.ingress_with_self) # Open to IPv4 cidr blocks - ingress_with_cidr_blocks = var.ingress_with_cidr_blocks + ingress_with_cidr_ipv4 = var.ingress_with_cidr_ipv4 # Open to IPv6 cidr blocks - ingress_with_ipv6_cidr_blocks = var.ingress_with_ipv6_cidr_blocks + ingress_with_cidr_ipv6 = var.ingress_with_cidr_ipv6 # Open for security group id - ingress_with_source_security_group_id = var.ingress_with_source_security_group_id + ingress_with_referenced_security_group_id = var.ingress_with_referenced_security_group_id # Open for prefix list id - ingress_with_prefix_list_ids = var.ingress_with_prefix_list_ids + ingress_with_prefix_list_id = var.ingress_with_prefix_list_id # Default ingress CIDR blocks - ingress_cidr_blocks = var.ingress_cidr_blocks - ingress_ipv6_cidr_blocks = var.ingress_ipv6_cidr_blocks + ingress_cidr_ipv4 = var.ingress_cidr_ipv4 + ingress_cidr_ipv6 = var.ingress_cidr_ipv6 # Default prefix list ids ingress_prefix_list_ids = var.ingress_prefix_list_ids @@ -47,26 +47,26 @@ module "sg" { computed_ingress_with_self = concat(var.auto_computed_ingress_with_self, var.computed_ingress_with_self) # Open to IPv4 cidr blocks - computed_ingress_with_cidr_blocks = var.computed_ingress_with_cidr_blocks + computed_ingress_with_cidr_ipv4 = var.computed_ingress_with_cidr_ipv4 # Open to IPv6 cidr blocks - computed_ingress_with_ipv6_cidr_blocks = var.computed_ingress_with_ipv6_cidr_blocks + computed_ingress_with_cidr_ipv6 = var.computed_ingress_with_cidr_ipv6 # Open for security group id - computed_ingress_with_source_security_group_id = var.computed_ingress_with_source_security_group_id + computed_ingress_with_referenced_security_group_id = var.computed_ingress_with_referenced_security_group_id # Open for prefix list id - computed_ingress_with_prefix_list_ids = var.computed_ingress_with_prefix_list_ids + computed_ingress_with_prefix_list_id = var.computed_ingress_with_prefix_list_id ############################# # Number of computed ingress ############################# - number_of_computed_ingress_rules = var.auto_number_of_computed_ingress_rules + var.number_of_computed_ingress_rules - number_of_computed_ingress_with_self = var.auto_number_of_computed_ingress_with_self + var.number_of_computed_ingress_with_self - number_of_computed_ingress_with_cidr_blocks = var.number_of_computed_ingress_with_cidr_blocks - number_of_computed_ingress_with_ipv6_cidr_blocks = var.number_of_computed_ingress_with_ipv6_cidr_blocks - number_of_computed_ingress_with_source_security_group_id = var.number_of_computed_ingress_with_source_security_group_id - number_of_computed_ingress_with_prefix_list_ids = var.number_of_computed_ingress_with_prefix_list_ids + number_of_computed_ingress_rules = var.auto_number_of_computed_ingress_rules + var.number_of_computed_ingress_rules + number_of_computed_ingress_with_self = var.auto_number_of_computed_ingress_with_self + var.number_of_computed_ingress_with_self + number_of_computed_ingress_with_cidr_ipv4 = var.number_of_computed_ingress_with_cidr_ipv4 + number_of_computed_ingress_with_cidr_ipv6 = var.number_of_computed_ingress_with_cidr_ipv6 + number_of_computed_ingress_with_referenced_security_group_id = var.number_of_computed_ingress_with_referenced_security_group_id + number_of_computed_ingress_with_prefix_list_id = var.number_of_computed_ingress_with_prefix_list_id ######### # Egress @@ -78,20 +78,20 @@ module "sg" { egress_with_self = concat(var.auto_egress_with_self, var.egress_with_self) # Open to IPv4 cidr blocks - egress_with_cidr_blocks = var.egress_with_cidr_blocks + egress_with_cidr_ipv4 = var.egress_with_cidr_ipv4 # Open to IPv6 cidr blocks - egress_with_ipv6_cidr_blocks = var.egress_with_ipv6_cidr_blocks + egress_with_cidr_ipv6 = var.egress_with_cidr_ipv6 # Open for security group id - egress_with_source_security_group_id = var.egress_with_source_security_group_id + egress_with_referenced_security_group_id = var.egress_with_referenced_security_group_id # Open for prefix list id - egress_with_prefix_list_ids = var.egress_with_prefix_list_ids + egress_with_prefix_list_id = var.egress_with_prefix_list_id # Default egress CIDR blocks - egress_cidr_blocks = var.egress_cidr_blocks - egress_ipv6_cidr_blocks = var.egress_ipv6_cidr_blocks + egress_cidr_ipv4 = var.egress_cidr_ipv4 + egress_cidr_ipv6 = var.egress_cidr_ipv6 # Default prefix list ids egress_prefix_list_ids = var.egress_prefix_list_ids @@ -106,24 +106,24 @@ module "sg" { computed_egress_with_self = concat(var.auto_computed_egress_with_self, var.computed_egress_with_self) # Open to IPv4 cidr blocks - computed_egress_with_cidr_blocks = var.computed_egress_with_cidr_blocks + computed_egress_with_cidr_ipv4 = var.computed_egress_with_cidr_ipv4 # Open to IPv6 cidr blocks - computed_egress_with_ipv6_cidr_blocks = var.computed_egress_with_ipv6_cidr_blocks + computed_egress_with_cidr_ipv6 = var.computed_egress_with_cidr_ipv6 # Open for security group id - computed_egress_with_source_security_group_id = var.computed_egress_with_source_security_group_id + computed_egress_with_referenced_security_group_id = var.computed_egress_with_referenced_security_group_id # Open for prefix list id - computed_egress_with_prefix_list_ids = var.computed_egress_with_prefix_list_ids + computed_egress_with_prefix_list_id = var.computed_egress_with_prefix_list_id ############################# # Number of computed egress ############################# - number_of_computed_egress_rules = var.auto_number_of_computed_egress_rules + var.number_of_computed_egress_rules - number_of_computed_egress_with_self = var.auto_number_of_computed_egress_with_self + var.number_of_computed_egress_with_self - number_of_computed_egress_with_cidr_blocks = var.number_of_computed_egress_with_cidr_blocks - number_of_computed_egress_with_ipv6_cidr_blocks = var.number_of_computed_egress_with_ipv6_cidr_blocks - number_of_computed_egress_with_source_security_group_id = var.number_of_computed_egress_with_source_security_group_id - number_of_computed_egress_with_prefix_list_ids = var.number_of_computed_egress_with_prefix_list_ids + number_of_computed_egress_rules = var.auto_number_of_computed_egress_rules + var.number_of_computed_egress_rules + number_of_computed_egress_with_self = var.auto_number_of_computed_egress_with_self + var.number_of_computed_egress_with_self + number_of_computed_egress_with_cidr_ipv4 = var.number_of_computed_egress_with_cidr_ipv4 + number_of_computed_egress_with_cidr_ipv6 = var.number_of_computed_egress_with_cidr_ipv6 + number_of_computed_egress_with_referenced_security_group_id = var.number_of_computed_egress_with_referenced_security_group_id + number_of_computed_egress_with_prefix_list_id = var.number_of_computed_egress_with_prefix_list_id } diff --git a/modules/splunk/variables.tf b/modules/splunk/variables.tf index 60c8c27b..6590c9e3 100644 --- a/modules/splunk/variables.tf +++ b/modules/splunk/variables.tf @@ -56,37 +56,37 @@ variable "ingress_with_self" { default = [] } -variable "ingress_with_cidr_blocks" { - description = "List of ingress rules to create where 'cidr_blocks' is used" +variable "ingress_with_cidr_ipv4" { + description = "List of ingress rules to create where 'cidr_ipv4' is used" type = list(map(string)) default = [] } -variable "ingress_with_ipv6_cidr_blocks" { +variable "ingress_with_cidr_ipv6" { description = "List of ingress rules to create where 'ipv6_cidr_blocks' is used" type = list(map(string)) default = [] } -variable "ingress_with_source_security_group_id" { +variable "ingress_with_referenced_security_group_id" { description = "List of ingress rules to create where 'source_security_group_id' is used" type = list(map(string)) default = [] } -variable "ingress_with_prefix_list_ids" { - description = "List of ingress rules to create where 'prefix_list_ids' is used" +variable "ingress_with_prefix_list_id" { + description = "List of ingress rules to create where 'prefix_list_id' is used" type = list(map(string)) default = [] } -variable "ingress_cidr_blocks" { +variable "ingress_cidr_ipv4" { description = "List of IPv4 CIDR ranges to use on all ingress rules" type = list(string) default = [] } -variable "ingress_ipv6_cidr_blocks" { +variable "ingress_cidr_ipv6" { description = "List of IPv6 CIDR ranges to use on all ingress rules" type = list(string) default = [] @@ -113,26 +113,26 @@ variable "computed_ingress_with_self" { default = [] } -variable "computed_ingress_with_cidr_blocks" { - description = "List of computed ingress rules to create where 'cidr_blocks' is used" +variable "computed_ingress_with_cidr_ipv4" { + description = "List of computed ingress rules to create where 'cidr_ipv4' is used" type = list(map(string)) default = [] } -variable "computed_ingress_with_ipv6_cidr_blocks" { +variable "computed_ingress_with_cidr_ipv6" { description = "List of computed ingress rules to create where 'ipv6_cidr_blocks' is used" type = list(map(string)) default = [] } -variable "computed_ingress_with_source_security_group_id" { +variable "computed_ingress_with_referenced_security_group_id" { description = "List of computed ingress rules to create where 'source_security_group_id' is used" type = list(map(string)) default = [] } -variable "computed_ingress_with_prefix_list_ids" { - description = "List of computed ingress rules to create where 'prefix_list_ids' is used" +variable "computed_ingress_with_prefix_list_id" { + description = "List of computed ingress rules to create where 'prefix_list_id' is used" type = list(map(string)) default = [] } @@ -170,26 +170,26 @@ variable "number_of_computed_ingress_with_self" { default = 0 } -variable "number_of_computed_ingress_with_cidr_blocks" { - description = "Number of computed ingress rules to create where 'cidr_blocks' is used" +variable "number_of_computed_ingress_with_cidr_ipv4" { + description = "Number of computed ingress rules to create where 'cidr_ipv4' is used" type = number default = 0 } -variable "number_of_computed_ingress_with_ipv6_cidr_blocks" { +variable "number_of_computed_ingress_with_cidr_ipv6" { description = "Number of computed ingress rules to create where 'ipv6_cidr_blocks' is used" type = number default = 0 } -variable "number_of_computed_ingress_with_source_security_group_id" { +variable "number_of_computed_ingress_with_referenced_security_group_id" { description = "Number of computed ingress rules to create where 'source_security_group_id' is used" type = number default = 0 } -variable "number_of_computed_ingress_with_prefix_list_ids" { - description = "Number of computed ingress rules to create where 'prefix_list_ids' is used" +variable "number_of_computed_ingress_with_prefix_list_id" { + description = "Number of computed ingress rules to create where 'prefix_list_id' is used" type = number default = 0 } @@ -227,37 +227,37 @@ variable "egress_with_self" { default = [] } -variable "egress_with_cidr_blocks" { - description = "List of egress rules to create where 'cidr_blocks' is used" +variable "egress_with_cidr_ipv4" { + description = "List of egress rules to create where 'cidr_ipv4' is used" type = list(map(string)) default = [] } -variable "egress_with_ipv6_cidr_blocks" { +variable "egress_with_cidr_ipv6" { description = "List of egress rules to create where 'ipv6_cidr_blocks' is used" type = list(map(string)) default = [] } -variable "egress_with_source_security_group_id" { +variable "egress_with_referenced_security_group_id" { description = "List of egress rules to create where 'source_security_group_id' is used" type = list(map(string)) default = [] } -variable "egress_with_prefix_list_ids" { - description = "List of egress rules to create where 'prefix_list_ids' is used" +variable "egress_with_prefix_list_id" { + description = "List of egress rules to create where 'prefix_list_id' is used" type = list(map(string)) default = [] } -variable "egress_cidr_blocks" { +variable "egress_cidr_ipv4" { description = "List of IPv4 CIDR ranges to use on all egress rules" type = list(string) default = ["0.0.0.0/0"] } -variable "egress_ipv6_cidr_blocks" { +variable "egress_cidr_ipv6" { description = "List of IPv6 CIDR ranges to use on all egress rules" type = list(string) default = ["::/0"] @@ -284,26 +284,26 @@ variable "computed_egress_with_self" { default = [] } -variable "computed_egress_with_cidr_blocks" { - description = "List of computed egress rules to create where 'cidr_blocks' is used" +variable "computed_egress_with_cidr_ipv4" { + description = "List of computed egress rules to create where 'cidr_ipv4' is used" type = list(map(string)) default = [] } -variable "computed_egress_with_ipv6_cidr_blocks" { +variable "computed_egress_with_cidr_ipv6" { description = "List of computed egress rules to create where 'ipv6_cidr_blocks' is used" type = list(map(string)) default = [] } -variable "computed_egress_with_source_security_group_id" { +variable "computed_egress_with_referenced_security_group_id" { description = "List of computed egress rules to create where 'source_security_group_id' is used" type = list(map(string)) default = [] } -variable "computed_egress_with_prefix_list_ids" { - description = "List of computed egress rules to create where 'prefix_list_ids' is used" +variable "computed_egress_with_prefix_list_id" { + description = "List of computed egress rules to create where 'prefix_list_id' is used" type = list(map(string)) default = [] } @@ -341,26 +341,26 @@ variable "number_of_computed_egress_with_self" { default = 0 } -variable "number_of_computed_egress_with_cidr_blocks" { - description = "Number of computed egress rules to create where 'cidr_blocks' is used" +variable "number_of_computed_egress_with_cidr_ipv4" { + description = "Number of computed egress rules to create where 'cidr_ipv4' is used" type = number default = 0 } -variable "number_of_computed_egress_with_ipv6_cidr_blocks" { +variable "number_of_computed_egress_with_cidr_ipv6" { description = "Number of computed egress rules to create where 'ipv6_cidr_blocks' is used" type = number default = 0 } -variable "number_of_computed_egress_with_source_security_group_id" { +variable "number_of_computed_egress_with_referenced_security_group_id" { description = "Number of computed egress rules to create where 'source_security_group_id' is used" type = number default = 0 } -variable "number_of_computed_egress_with_prefix_list_ids" { - description = "Number of computed egress rules to create where 'prefix_list_ids' is used" +variable "number_of_computed_egress_with_prefix_list_id" { + description = "Number of computed egress rules to create where 'prefix_list_id' is used" type = number default = 0 } diff --git a/modules/squid/README.md b/modules/squid/README.md index fe6d7f1e..e8bdd3ef 100644 --- a/modules/squid/README.md +++ b/modules/squid/README.md @@ -55,59 +55,59 @@ No resources. | [computed\_egress\_ipv6\_cidr\_blocks](#input\_computed\_egress\_ipv6\_cidr\_blocks) | List of IPv6 CIDR ranges to use on all computed egress rules | `list(string)` |
[
"::/0"
]
| no | | [computed\_egress\_prefix\_list\_ids](#input\_computed\_egress\_prefix\_list\_ids) | List of prefix list IDs (for allowing access to VPC endpoints) to use on all computed egress rules | `list(string)` | `[]` | no | | [computed\_egress\_rules](#input\_computed\_egress\_rules) | List of computed egress rules to create by name | `list(string)` | `[]` | no | -| [computed\_egress\_with\_cidr\_blocks](#input\_computed\_egress\_with\_cidr\_blocks) | List of computed egress rules to create where 'cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [computed\_egress\_with\_ipv6\_cidr\_blocks](#input\_computed\_egress\_with\_ipv6\_cidr\_blocks) | List of computed egress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [computed\_egress\_with\_prefix\_list\_ids](#input\_computed\_egress\_with\_prefix\_list\_ids) | List of computed egress rules to create where 'prefix\_list\_ids' is used | `list(map(string))` | `[]` | no | +| [computed\_egress\_with\_cidr\_ipv4](#input\_computed\_egress\_with\_cidr\_ipv4) | List of computed egress rules to create where 'cidr\_ipv4' is used | `list(map(string))` | `[]` | no | +| [computed\_egress\_with\_cidr\_ipv6](#input\_computed\_egress\_with\_cidr\_ipv6) | List of computed egress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | +| [computed\_egress\_with\_prefix\_list\_id](#input\_computed\_egress\_with\_prefix\_list\_id) | List of computed egress rules to create where 'prefix\_list\_id' is used | `list(map(string))` | `[]` | no | +| [computed\_egress\_with\_referenced\_security\_group\_id](#input\_computed\_egress\_with\_referenced\_security\_group\_id) | List of computed egress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [computed\_egress\_with\_self](#input\_computed\_egress\_with\_self) | List of computed egress rules to create where 'self' is defined | `list(map(string))` | `[]` | no | -| [computed\_egress\_with\_source\_security\_group\_id](#input\_computed\_egress\_with\_source\_security\_group\_id) | List of computed egress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [computed\_ingress\_cidr\_blocks](#input\_computed\_ingress\_cidr\_blocks) | List of IPv4 CIDR ranges to use on all computed ingress rules | `list(string)` | `[]` | no | | [computed\_ingress\_ipv6\_cidr\_blocks](#input\_computed\_ingress\_ipv6\_cidr\_blocks) | List of IPv6 CIDR ranges to use on all computed ingress rules | `list(string)` | `[]` | no | | [computed\_ingress\_prefix\_list\_ids](#input\_computed\_ingress\_prefix\_list\_ids) | List of prefix list IDs (for allowing access to VPC endpoints) to use on all computed ingress rules | `list(string)` | `[]` | no | | [computed\_ingress\_rules](#input\_computed\_ingress\_rules) | List of computed ingress rules to create by name | `list(string)` | `[]` | no | -| [computed\_ingress\_with\_cidr\_blocks](#input\_computed\_ingress\_with\_cidr\_blocks) | List of computed ingress rules to create where 'cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [computed\_ingress\_with\_ipv6\_cidr\_blocks](#input\_computed\_ingress\_with\_ipv6\_cidr\_blocks) | List of computed ingress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [computed\_ingress\_with\_prefix\_list\_ids](#input\_computed\_ingress\_with\_prefix\_list\_ids) | List of computed ingress rules to create where 'prefix\_list\_ids' is used | `list(map(string))` | `[]` | no | +| [computed\_ingress\_with\_cidr\_ipv4](#input\_computed\_ingress\_with\_cidr\_ipv4) | List of computed ingress rules to create where 'cidr\_ipv4' is used | `list(map(string))` | `[]` | no | +| [computed\_ingress\_with\_cidr\_ipv6](#input\_computed\_ingress\_with\_cidr\_ipv6) | List of computed ingress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | +| [computed\_ingress\_with\_prefix\_list\_id](#input\_computed\_ingress\_with\_prefix\_list\_id) | List of computed ingress rules to create where 'prefix\_list\_id' is used | `list(map(string))` | `[]` | no | +| [computed\_ingress\_with\_referenced\_security\_group\_id](#input\_computed\_ingress\_with\_referenced\_security\_group\_id) | List of computed ingress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [computed\_ingress\_with\_self](#input\_computed\_ingress\_with\_self) | List of computed ingress rules to create where 'self' is defined | `list(map(string))` | `[]` | no | -| [computed\_ingress\_with\_source\_security\_group\_id](#input\_computed\_ingress\_with\_source\_security\_group\_id) | List of computed ingress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [create](#input\_create) | Whether to create security group and all rules | `bool` | `true` | no | | [description](#input\_description) | Description of security group | `string` | `"Security Group managed by Terraform"` | no | -| [egress\_cidr\_blocks](#input\_egress\_cidr\_blocks) | List of IPv4 CIDR ranges to use on all egress rules | `list(string)` |
[
"0.0.0.0/0"
]
| no | -| [egress\_ipv6\_cidr\_blocks](#input\_egress\_ipv6\_cidr\_blocks) | List of IPv6 CIDR ranges to use on all egress rules | `list(string)` |
[
"::/0"
]
| no | +| [egress\_cidr\_ipv4](#input\_egress\_cidr\_ipv4) | List of IPv4 CIDR ranges to use on all egress rules | `list(string)` |
[
"0.0.0.0/0"
]
| no | +| [egress\_cidr\_ipv6](#input\_egress\_cidr\_ipv6) | List of IPv6 CIDR ranges to use on all egress rules | `list(string)` |
[
"::/0"
]
| no | | [egress\_prefix\_list\_ids](#input\_egress\_prefix\_list\_ids) | List of prefix list IDs (for allowing access to VPC endpoints) to use on all egress rules | `list(string)` | `[]` | no | | [egress\_rules](#input\_egress\_rules) | List of egress rules to create by name | `list(string)` | `[]` | no | -| [egress\_with\_cidr\_blocks](#input\_egress\_with\_cidr\_blocks) | List of egress rules to create where 'cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [egress\_with\_ipv6\_cidr\_blocks](#input\_egress\_with\_ipv6\_cidr\_blocks) | List of egress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [egress\_with\_prefix\_list\_ids](#input\_egress\_with\_prefix\_list\_ids) | List of egress rules to create where 'prefix\_list\_ids' is used | `list(map(string))` | `[]` | no | +| [egress\_with\_cidr\_ipv4](#input\_egress\_with\_cidr\_ipv4) | List of egress rules to create where 'cidr\_ipv4' is used | `list(map(string))` | `[]` | no | +| [egress\_with\_cidr\_ipv6](#input\_egress\_with\_cidr\_ipv6) | List of egress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | +| [egress\_with\_prefix\_list\_id](#input\_egress\_with\_prefix\_list\_id) | List of egress rules to create where 'prefix\_list\_id' is used | `list(map(string))` | `[]` | no | +| [egress\_with\_referenced\_security\_group\_id](#input\_egress\_with\_referenced\_security\_group\_id) | List of egress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [egress\_with\_self](#input\_egress\_with\_self) | List of egress rules to create where 'self' is defined | `list(map(string))` | `[]` | no | -| [egress\_with\_source\_security\_group\_id](#input\_egress\_with\_source\_security\_group\_id) | List of egress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | -| [ingress\_cidr\_blocks](#input\_ingress\_cidr\_blocks) | List of IPv4 CIDR ranges to use on all ingress rules | `list(string)` | `[]` | no | -| [ingress\_ipv6\_cidr\_blocks](#input\_ingress\_ipv6\_cidr\_blocks) | List of IPv6 CIDR ranges to use on all ingress rules | `list(string)` | `[]` | no | +| [ingress\_cidr\_ipv4](#input\_ingress\_cidr\_ipv4) | List of IPv4 CIDR ranges to use on all ingress rules | `list(string)` | `[]` | no | +| [ingress\_cidr\_ipv6](#input\_ingress\_cidr\_ipv6) | List of IPv6 CIDR ranges to use on all ingress rules | `list(string)` | `[]` | no | | [ingress\_prefix\_list\_ids](#input\_ingress\_prefix\_list\_ids) | List of prefix list IDs (for allowing access to VPC endpoints) to use on all ingress rules | `list(string)` | `[]` | no | | [ingress\_rules](#input\_ingress\_rules) | List of ingress rules to create by name | `list(string)` | `[]` | no | -| [ingress\_with\_cidr\_blocks](#input\_ingress\_with\_cidr\_blocks) | List of ingress rules to create where 'cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [ingress\_with\_ipv6\_cidr\_blocks](#input\_ingress\_with\_ipv6\_cidr\_blocks) | List of ingress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [ingress\_with\_prefix\_list\_ids](#input\_ingress\_with\_prefix\_list\_ids) | List of ingress rules to create where 'prefix\_list\_ids' is used | `list(map(string))` | `[]` | no | +| [ingress\_with\_cidr\_ipv4](#input\_ingress\_with\_cidr\_ipv4) | List of ingress rules to create where 'cidr\_ipv4' is used | `list(map(string))` | `[]` | no | +| [ingress\_with\_cidr\_ipv6](#input\_ingress\_with\_cidr\_ipv6) | List of ingress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | +| [ingress\_with\_prefix\_list\_id](#input\_ingress\_with\_prefix\_list\_id) | List of ingress rules to create where 'prefix\_list\_id' is used | `list(map(string))` | `[]` | no | +| [ingress\_with\_referenced\_security\_group\_id](#input\_ingress\_with\_referenced\_security\_group\_id) | List of ingress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [ingress\_with\_self](#input\_ingress\_with\_self) | List of ingress rules to create where 'self' is defined | `list(map(string))` | `[]` | no | -| [ingress\_with\_source\_security\_group\_id](#input\_ingress\_with\_source\_security\_group\_id) | List of ingress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [name](#input\_name) | Name of security group | `string` | n/a | yes | | [number\_of\_computed\_egress\_cidr\_blocks](#input\_number\_of\_computed\_egress\_cidr\_blocks) | Number of IPv4 CIDR ranges to use on all computed egress rules | `number` | `0` | no | | [number\_of\_computed\_egress\_ipv6\_cidr\_blocks](#input\_number\_of\_computed\_egress\_ipv6\_cidr\_blocks) | Number of IPv6 CIDR ranges to use on all computed egress rules | `number` | `0` | no | | [number\_of\_computed\_egress\_prefix\_list\_ids](#input\_number\_of\_computed\_egress\_prefix\_list\_ids) | Number of prefix list IDs (for allowing access to VPC endpoints) to use on all computed egress rules | `number` | `0` | no | | [number\_of\_computed\_egress\_rules](#input\_number\_of\_computed\_egress\_rules) | Number of computed egress rules to create by name | `number` | `0` | no | -| [number\_of\_computed\_egress\_with\_cidr\_blocks](#input\_number\_of\_computed\_egress\_with\_cidr\_blocks) | Number of computed egress rules to create where 'cidr\_blocks' is used | `number` | `0` | no | -| [number\_of\_computed\_egress\_with\_ipv6\_cidr\_blocks](#input\_number\_of\_computed\_egress\_with\_ipv6\_cidr\_blocks) | Number of computed egress rules to create where 'ipv6\_cidr\_blocks' is used | `number` | `0` | no | -| [number\_of\_computed\_egress\_with\_prefix\_list\_ids](#input\_number\_of\_computed\_egress\_with\_prefix\_list\_ids) | Number of computed egress rules to create where 'prefix\_list\_ids' is used | `number` | `0` | no | +| [number\_of\_computed\_egress\_with\_cidr\_ipv4](#input\_number\_of\_computed\_egress\_with\_cidr\_ipv4) | Number of computed egress rules to create where 'cidr\_ipv4' is used | `number` | `0` | no | +| [number\_of\_computed\_egress\_with\_cidr\_ipv6](#input\_number\_of\_computed\_egress\_with\_cidr\_ipv6) | Number of computed egress rules to create where 'ipv6\_cidr\_blocks' is used | `number` | `0` | no | +| [number\_of\_computed\_egress\_with\_prefix\_list\_id](#input\_number\_of\_computed\_egress\_with\_prefix\_list\_id) | Number of computed egress rules to create where 'prefix\_list\_id' is used | `number` | `0` | no | +| [number\_of\_computed\_egress\_with\_referenced\_security\_group\_id](#input\_number\_of\_computed\_egress\_with\_referenced\_security\_group\_id) | Number of computed egress rules to create where 'source\_security\_group\_id' is used | `number` | `0` | no | | [number\_of\_computed\_egress\_with\_self](#input\_number\_of\_computed\_egress\_with\_self) | Number of computed egress rules to create where 'self' is defined | `number` | `0` | no | -| [number\_of\_computed\_egress\_with\_source\_security\_group\_id](#input\_number\_of\_computed\_egress\_with\_source\_security\_group\_id) | Number of computed egress rules to create where 'source\_security\_group\_id' is used | `number` | `0` | no | | [number\_of\_computed\_ingress\_cidr\_blocks](#input\_number\_of\_computed\_ingress\_cidr\_blocks) | Number of IPv4 CIDR ranges to use on all computed ingress rules | `number` | `0` | no | | [number\_of\_computed\_ingress\_ipv6\_cidr\_blocks](#input\_number\_of\_computed\_ingress\_ipv6\_cidr\_blocks) | Number of IPv6 CIDR ranges to use on all computed ingress rules | `number` | `0` | no | | [number\_of\_computed\_ingress\_prefix\_list\_ids](#input\_number\_of\_computed\_ingress\_prefix\_list\_ids) | Number of prefix list IDs (for allowing access to VPC endpoints) to use on all computed ingress rules | `number` | `0` | no | | [number\_of\_computed\_ingress\_rules](#input\_number\_of\_computed\_ingress\_rules) | Number of computed ingress rules to create by name | `number` | `0` | no | -| [number\_of\_computed\_ingress\_with\_cidr\_blocks](#input\_number\_of\_computed\_ingress\_with\_cidr\_blocks) | Number of computed ingress rules to create where 'cidr\_blocks' is used | `number` | `0` | no | -| [number\_of\_computed\_ingress\_with\_ipv6\_cidr\_blocks](#input\_number\_of\_computed\_ingress\_with\_ipv6\_cidr\_blocks) | Number of computed ingress rules to create where 'ipv6\_cidr\_blocks' is used | `number` | `0` | no | -| [number\_of\_computed\_ingress\_with\_prefix\_list\_ids](#input\_number\_of\_computed\_ingress\_with\_prefix\_list\_ids) | Number of computed ingress rules to create where 'prefix\_list\_ids' is used | `number` | `0` | no | +| [number\_of\_computed\_ingress\_with\_cidr\_ipv4](#input\_number\_of\_computed\_ingress\_with\_cidr\_ipv4) | Number of computed ingress rules to create where 'cidr\_ipv4' is used | `number` | `0` | no | +| [number\_of\_computed\_ingress\_with\_cidr\_ipv6](#input\_number\_of\_computed\_ingress\_with\_cidr\_ipv6) | Number of computed ingress rules to create where 'ipv6\_cidr\_blocks' is used | `number` | `0` | no | +| [number\_of\_computed\_ingress\_with\_prefix\_list\_id](#input\_number\_of\_computed\_ingress\_with\_prefix\_list\_id) | Number of computed ingress rules to create where 'prefix\_list\_id' is used | `number` | `0` | no | +| [number\_of\_computed\_ingress\_with\_referenced\_security\_group\_id](#input\_number\_of\_computed\_ingress\_with\_referenced\_security\_group\_id) | Number of computed ingress rules to create where 'source\_security\_group\_id' is used | `number` | `0` | no | | [number\_of\_computed\_ingress\_with\_self](#input\_number\_of\_computed\_ingress\_with\_self) | Number of computed ingress rules to create where 'self' is defined | `number` | `0` | no | -| [number\_of\_computed\_ingress\_with\_source\_security\_group\_id](#input\_number\_of\_computed\_ingress\_with\_source\_security\_group\_id) | Number of computed ingress rules to create where 'source\_security\_group\_id' is used | `number` | `0` | no | | [revoke\_rules\_on\_delete](#input\_revoke\_rules\_on\_delete) | Instruct Terraform to revoke all of the Security Groups attached ingress and egress rules before deleting the rule itself. Enable for EMR. | `bool` | `false` | no | | [tags](#input\_tags) | A mapping of tags to assign to security group | `map(string)` | `{}` | no | | [use\_name\_prefix](#input\_use\_name\_prefix) | Whether to use name\_prefix or fixed name. Should be true to able to update security group name after initial creation | `bool` | `true` | no | diff --git a/modules/squid/main.tf b/modules/squid/main.tf index 80ea0adb..d2a1bf93 100644 --- a/modules/squid/main.tf +++ b/modules/squid/main.tf @@ -19,20 +19,20 @@ module "sg" { ingress_with_self = concat(var.auto_ingress_with_self, var.ingress_with_self) # Open to IPv4 cidr blocks - ingress_with_cidr_blocks = var.ingress_with_cidr_blocks + ingress_with_cidr_ipv4 = var.ingress_with_cidr_ipv4 # Open to IPv6 cidr blocks - ingress_with_ipv6_cidr_blocks = var.ingress_with_ipv6_cidr_blocks + ingress_with_cidr_ipv6 = var.ingress_with_cidr_ipv6 # Open for security group id - ingress_with_source_security_group_id = var.ingress_with_source_security_group_id + ingress_with_referenced_security_group_id = var.ingress_with_referenced_security_group_id # Open for prefix list id - ingress_with_prefix_list_ids = var.ingress_with_prefix_list_ids + ingress_with_prefix_list_id = var.ingress_with_prefix_list_id # Default ingress CIDR blocks - ingress_cidr_blocks = var.ingress_cidr_blocks - ingress_ipv6_cidr_blocks = var.ingress_ipv6_cidr_blocks + ingress_cidr_ipv4 = var.ingress_cidr_ipv4 + ingress_cidr_ipv6 = var.ingress_cidr_ipv6 # Default prefix list ids ingress_prefix_list_ids = var.ingress_prefix_list_ids @@ -47,26 +47,26 @@ module "sg" { computed_ingress_with_self = concat(var.auto_computed_ingress_with_self, var.computed_ingress_with_self) # Open to IPv4 cidr blocks - computed_ingress_with_cidr_blocks = var.computed_ingress_with_cidr_blocks + computed_ingress_with_cidr_ipv4 = var.computed_ingress_with_cidr_ipv4 # Open to IPv6 cidr blocks - computed_ingress_with_ipv6_cidr_blocks = var.computed_ingress_with_ipv6_cidr_blocks + computed_ingress_with_cidr_ipv6 = var.computed_ingress_with_cidr_ipv6 # Open for security group id - computed_ingress_with_source_security_group_id = var.computed_ingress_with_source_security_group_id + computed_ingress_with_referenced_security_group_id = var.computed_ingress_with_referenced_security_group_id # Open for prefix list id - computed_ingress_with_prefix_list_ids = var.computed_ingress_with_prefix_list_ids + computed_ingress_with_prefix_list_id = var.computed_ingress_with_prefix_list_id ############################# # Number of computed ingress ############################# - number_of_computed_ingress_rules = var.auto_number_of_computed_ingress_rules + var.number_of_computed_ingress_rules - number_of_computed_ingress_with_self = var.auto_number_of_computed_ingress_with_self + var.number_of_computed_ingress_with_self - number_of_computed_ingress_with_cidr_blocks = var.number_of_computed_ingress_with_cidr_blocks - number_of_computed_ingress_with_ipv6_cidr_blocks = var.number_of_computed_ingress_with_ipv6_cidr_blocks - number_of_computed_ingress_with_source_security_group_id = var.number_of_computed_ingress_with_source_security_group_id - number_of_computed_ingress_with_prefix_list_ids = var.number_of_computed_ingress_with_prefix_list_ids + number_of_computed_ingress_rules = var.auto_number_of_computed_ingress_rules + var.number_of_computed_ingress_rules + number_of_computed_ingress_with_self = var.auto_number_of_computed_ingress_with_self + var.number_of_computed_ingress_with_self + number_of_computed_ingress_with_cidr_ipv4 = var.number_of_computed_ingress_with_cidr_ipv4 + number_of_computed_ingress_with_cidr_ipv6 = var.number_of_computed_ingress_with_cidr_ipv6 + number_of_computed_ingress_with_referenced_security_group_id = var.number_of_computed_ingress_with_referenced_security_group_id + number_of_computed_ingress_with_prefix_list_id = var.number_of_computed_ingress_with_prefix_list_id ######### # Egress @@ -78,20 +78,20 @@ module "sg" { egress_with_self = concat(var.auto_egress_with_self, var.egress_with_self) # Open to IPv4 cidr blocks - egress_with_cidr_blocks = var.egress_with_cidr_blocks + egress_with_cidr_ipv4 = var.egress_with_cidr_ipv4 # Open to IPv6 cidr blocks - egress_with_ipv6_cidr_blocks = var.egress_with_ipv6_cidr_blocks + egress_with_cidr_ipv6 = var.egress_with_cidr_ipv6 # Open for security group id - egress_with_source_security_group_id = var.egress_with_source_security_group_id + egress_with_referenced_security_group_id = var.egress_with_referenced_security_group_id # Open for prefix list id - egress_with_prefix_list_ids = var.egress_with_prefix_list_ids + egress_with_prefix_list_id = var.egress_with_prefix_list_id # Default egress CIDR blocks - egress_cidr_blocks = var.egress_cidr_blocks - egress_ipv6_cidr_blocks = var.egress_ipv6_cidr_blocks + egress_cidr_ipv4 = var.egress_cidr_ipv4 + egress_cidr_ipv6 = var.egress_cidr_ipv6 # Default prefix list ids egress_prefix_list_ids = var.egress_prefix_list_ids @@ -106,24 +106,24 @@ module "sg" { computed_egress_with_self = concat(var.auto_computed_egress_with_self, var.computed_egress_with_self) # Open to IPv4 cidr blocks - computed_egress_with_cidr_blocks = var.computed_egress_with_cidr_blocks + computed_egress_with_cidr_ipv4 = var.computed_egress_with_cidr_ipv4 # Open to IPv6 cidr blocks - computed_egress_with_ipv6_cidr_blocks = var.computed_egress_with_ipv6_cidr_blocks + computed_egress_with_cidr_ipv6 = var.computed_egress_with_cidr_ipv6 # Open for security group id - computed_egress_with_source_security_group_id = var.computed_egress_with_source_security_group_id + computed_egress_with_referenced_security_group_id = var.computed_egress_with_referenced_security_group_id # Open for prefix list id - computed_egress_with_prefix_list_ids = var.computed_egress_with_prefix_list_ids + computed_egress_with_prefix_list_id = var.computed_egress_with_prefix_list_id ############################# # Number of computed egress ############################# - number_of_computed_egress_rules = var.auto_number_of_computed_egress_rules + var.number_of_computed_egress_rules - number_of_computed_egress_with_self = var.auto_number_of_computed_egress_with_self + var.number_of_computed_egress_with_self - number_of_computed_egress_with_cidr_blocks = var.number_of_computed_egress_with_cidr_blocks - number_of_computed_egress_with_ipv6_cidr_blocks = var.number_of_computed_egress_with_ipv6_cidr_blocks - number_of_computed_egress_with_source_security_group_id = var.number_of_computed_egress_with_source_security_group_id - number_of_computed_egress_with_prefix_list_ids = var.number_of_computed_egress_with_prefix_list_ids + number_of_computed_egress_rules = var.auto_number_of_computed_egress_rules + var.number_of_computed_egress_rules + number_of_computed_egress_with_self = var.auto_number_of_computed_egress_with_self + var.number_of_computed_egress_with_self + number_of_computed_egress_with_cidr_ipv4 = var.number_of_computed_egress_with_cidr_ipv4 + number_of_computed_egress_with_cidr_ipv6 = var.number_of_computed_egress_with_cidr_ipv6 + number_of_computed_egress_with_referenced_security_group_id = var.number_of_computed_egress_with_referenced_security_group_id + number_of_computed_egress_with_prefix_list_id = var.number_of_computed_egress_with_prefix_list_id } diff --git a/modules/squid/variables.tf b/modules/squid/variables.tf index 60c8c27b..6590c9e3 100644 --- a/modules/squid/variables.tf +++ b/modules/squid/variables.tf @@ -56,37 +56,37 @@ variable "ingress_with_self" { default = [] } -variable "ingress_with_cidr_blocks" { - description = "List of ingress rules to create where 'cidr_blocks' is used" +variable "ingress_with_cidr_ipv4" { + description = "List of ingress rules to create where 'cidr_ipv4' is used" type = list(map(string)) default = [] } -variable "ingress_with_ipv6_cidr_blocks" { +variable "ingress_with_cidr_ipv6" { description = "List of ingress rules to create where 'ipv6_cidr_blocks' is used" type = list(map(string)) default = [] } -variable "ingress_with_source_security_group_id" { +variable "ingress_with_referenced_security_group_id" { description = "List of ingress rules to create where 'source_security_group_id' is used" type = list(map(string)) default = [] } -variable "ingress_with_prefix_list_ids" { - description = "List of ingress rules to create where 'prefix_list_ids' is used" +variable "ingress_with_prefix_list_id" { + description = "List of ingress rules to create where 'prefix_list_id' is used" type = list(map(string)) default = [] } -variable "ingress_cidr_blocks" { +variable "ingress_cidr_ipv4" { description = "List of IPv4 CIDR ranges to use on all ingress rules" type = list(string) default = [] } -variable "ingress_ipv6_cidr_blocks" { +variable "ingress_cidr_ipv6" { description = "List of IPv6 CIDR ranges to use on all ingress rules" type = list(string) default = [] @@ -113,26 +113,26 @@ variable "computed_ingress_with_self" { default = [] } -variable "computed_ingress_with_cidr_blocks" { - description = "List of computed ingress rules to create where 'cidr_blocks' is used" +variable "computed_ingress_with_cidr_ipv4" { + description = "List of computed ingress rules to create where 'cidr_ipv4' is used" type = list(map(string)) default = [] } -variable "computed_ingress_with_ipv6_cidr_blocks" { +variable "computed_ingress_with_cidr_ipv6" { description = "List of computed ingress rules to create where 'ipv6_cidr_blocks' is used" type = list(map(string)) default = [] } -variable "computed_ingress_with_source_security_group_id" { +variable "computed_ingress_with_referenced_security_group_id" { description = "List of computed ingress rules to create where 'source_security_group_id' is used" type = list(map(string)) default = [] } -variable "computed_ingress_with_prefix_list_ids" { - description = "List of computed ingress rules to create where 'prefix_list_ids' is used" +variable "computed_ingress_with_prefix_list_id" { + description = "List of computed ingress rules to create where 'prefix_list_id' is used" type = list(map(string)) default = [] } @@ -170,26 +170,26 @@ variable "number_of_computed_ingress_with_self" { default = 0 } -variable "number_of_computed_ingress_with_cidr_blocks" { - description = "Number of computed ingress rules to create where 'cidr_blocks' is used" +variable "number_of_computed_ingress_with_cidr_ipv4" { + description = "Number of computed ingress rules to create where 'cidr_ipv4' is used" type = number default = 0 } -variable "number_of_computed_ingress_with_ipv6_cidr_blocks" { +variable "number_of_computed_ingress_with_cidr_ipv6" { description = "Number of computed ingress rules to create where 'ipv6_cidr_blocks' is used" type = number default = 0 } -variable "number_of_computed_ingress_with_source_security_group_id" { +variable "number_of_computed_ingress_with_referenced_security_group_id" { description = "Number of computed ingress rules to create where 'source_security_group_id' is used" type = number default = 0 } -variable "number_of_computed_ingress_with_prefix_list_ids" { - description = "Number of computed ingress rules to create where 'prefix_list_ids' is used" +variable "number_of_computed_ingress_with_prefix_list_id" { + description = "Number of computed ingress rules to create where 'prefix_list_id' is used" type = number default = 0 } @@ -227,37 +227,37 @@ variable "egress_with_self" { default = [] } -variable "egress_with_cidr_blocks" { - description = "List of egress rules to create where 'cidr_blocks' is used" +variable "egress_with_cidr_ipv4" { + description = "List of egress rules to create where 'cidr_ipv4' is used" type = list(map(string)) default = [] } -variable "egress_with_ipv6_cidr_blocks" { +variable "egress_with_cidr_ipv6" { description = "List of egress rules to create where 'ipv6_cidr_blocks' is used" type = list(map(string)) default = [] } -variable "egress_with_source_security_group_id" { +variable "egress_with_referenced_security_group_id" { description = "List of egress rules to create where 'source_security_group_id' is used" type = list(map(string)) default = [] } -variable "egress_with_prefix_list_ids" { - description = "List of egress rules to create where 'prefix_list_ids' is used" +variable "egress_with_prefix_list_id" { + description = "List of egress rules to create where 'prefix_list_id' is used" type = list(map(string)) default = [] } -variable "egress_cidr_blocks" { +variable "egress_cidr_ipv4" { description = "List of IPv4 CIDR ranges to use on all egress rules" type = list(string) default = ["0.0.0.0/0"] } -variable "egress_ipv6_cidr_blocks" { +variable "egress_cidr_ipv6" { description = "List of IPv6 CIDR ranges to use on all egress rules" type = list(string) default = ["::/0"] @@ -284,26 +284,26 @@ variable "computed_egress_with_self" { default = [] } -variable "computed_egress_with_cidr_blocks" { - description = "List of computed egress rules to create where 'cidr_blocks' is used" +variable "computed_egress_with_cidr_ipv4" { + description = "List of computed egress rules to create where 'cidr_ipv4' is used" type = list(map(string)) default = [] } -variable "computed_egress_with_ipv6_cidr_blocks" { +variable "computed_egress_with_cidr_ipv6" { description = "List of computed egress rules to create where 'ipv6_cidr_blocks' is used" type = list(map(string)) default = [] } -variable "computed_egress_with_source_security_group_id" { +variable "computed_egress_with_referenced_security_group_id" { description = "List of computed egress rules to create where 'source_security_group_id' is used" type = list(map(string)) default = [] } -variable "computed_egress_with_prefix_list_ids" { - description = "List of computed egress rules to create where 'prefix_list_ids' is used" +variable "computed_egress_with_prefix_list_id" { + description = "List of computed egress rules to create where 'prefix_list_id' is used" type = list(map(string)) default = [] } @@ -341,26 +341,26 @@ variable "number_of_computed_egress_with_self" { default = 0 } -variable "number_of_computed_egress_with_cidr_blocks" { - description = "Number of computed egress rules to create where 'cidr_blocks' is used" +variable "number_of_computed_egress_with_cidr_ipv4" { + description = "Number of computed egress rules to create where 'cidr_ipv4' is used" type = number default = 0 } -variable "number_of_computed_egress_with_ipv6_cidr_blocks" { +variable "number_of_computed_egress_with_cidr_ipv6" { description = "Number of computed egress rules to create where 'ipv6_cidr_blocks' is used" type = number default = 0 } -variable "number_of_computed_egress_with_source_security_group_id" { +variable "number_of_computed_egress_with_referenced_security_group_id" { description = "Number of computed egress rules to create where 'source_security_group_id' is used" type = number default = 0 } -variable "number_of_computed_egress_with_prefix_list_ids" { - description = "Number of computed egress rules to create where 'prefix_list_ids' is used" +variable "number_of_computed_egress_with_prefix_list_id" { + description = "Number of computed egress rules to create where 'prefix_list_id' is used" type = number default = 0 } diff --git a/modules/ssh/README.md b/modules/ssh/README.md index 27031304..ebab35ee 100644 --- a/modules/ssh/README.md +++ b/modules/ssh/README.md @@ -55,59 +55,59 @@ No resources. | [computed\_egress\_ipv6\_cidr\_blocks](#input\_computed\_egress\_ipv6\_cidr\_blocks) | List of IPv6 CIDR ranges to use on all computed egress rules | `list(string)` |
[
"::/0"
]
| no | | [computed\_egress\_prefix\_list\_ids](#input\_computed\_egress\_prefix\_list\_ids) | List of prefix list IDs (for allowing access to VPC endpoints) to use on all computed egress rules | `list(string)` | `[]` | no | | [computed\_egress\_rules](#input\_computed\_egress\_rules) | List of computed egress rules to create by name | `list(string)` | `[]` | no | -| [computed\_egress\_with\_cidr\_blocks](#input\_computed\_egress\_with\_cidr\_blocks) | List of computed egress rules to create where 'cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [computed\_egress\_with\_ipv6\_cidr\_blocks](#input\_computed\_egress\_with\_ipv6\_cidr\_blocks) | List of computed egress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [computed\_egress\_with\_prefix\_list\_ids](#input\_computed\_egress\_with\_prefix\_list\_ids) | List of computed egress rules to create where 'prefix\_list\_ids' is used | `list(map(string))` | `[]` | no | +| [computed\_egress\_with\_cidr\_ipv4](#input\_computed\_egress\_with\_cidr\_ipv4) | List of computed egress rules to create where 'cidr\_ipv4' is used | `list(map(string))` | `[]` | no | +| [computed\_egress\_with\_cidr\_ipv6](#input\_computed\_egress\_with\_cidr\_ipv6) | List of computed egress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | +| [computed\_egress\_with\_prefix\_list\_id](#input\_computed\_egress\_with\_prefix\_list\_id) | List of computed egress rules to create where 'prefix\_list\_id' is used | `list(map(string))` | `[]` | no | +| [computed\_egress\_with\_referenced\_security\_group\_id](#input\_computed\_egress\_with\_referenced\_security\_group\_id) | List of computed egress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [computed\_egress\_with\_self](#input\_computed\_egress\_with\_self) | List of computed egress rules to create where 'self' is defined | `list(map(string))` | `[]` | no | -| [computed\_egress\_with\_source\_security\_group\_id](#input\_computed\_egress\_with\_source\_security\_group\_id) | List of computed egress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [computed\_ingress\_cidr\_blocks](#input\_computed\_ingress\_cidr\_blocks) | List of IPv4 CIDR ranges to use on all computed ingress rules | `list(string)` | `[]` | no | | [computed\_ingress\_ipv6\_cidr\_blocks](#input\_computed\_ingress\_ipv6\_cidr\_blocks) | List of IPv6 CIDR ranges to use on all computed ingress rules | `list(string)` | `[]` | no | | [computed\_ingress\_prefix\_list\_ids](#input\_computed\_ingress\_prefix\_list\_ids) | List of prefix list IDs (for allowing access to VPC endpoints) to use on all computed ingress rules | `list(string)` | `[]` | no | | [computed\_ingress\_rules](#input\_computed\_ingress\_rules) | List of computed ingress rules to create by name | `list(string)` | `[]` | no | -| [computed\_ingress\_with\_cidr\_blocks](#input\_computed\_ingress\_with\_cidr\_blocks) | List of computed ingress rules to create where 'cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [computed\_ingress\_with\_ipv6\_cidr\_blocks](#input\_computed\_ingress\_with\_ipv6\_cidr\_blocks) | List of computed ingress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [computed\_ingress\_with\_prefix\_list\_ids](#input\_computed\_ingress\_with\_prefix\_list\_ids) | List of computed ingress rules to create where 'prefix\_list\_ids' is used | `list(map(string))` | `[]` | no | +| [computed\_ingress\_with\_cidr\_ipv4](#input\_computed\_ingress\_with\_cidr\_ipv4) | List of computed ingress rules to create where 'cidr\_ipv4' is used | `list(map(string))` | `[]` | no | +| [computed\_ingress\_with\_cidr\_ipv6](#input\_computed\_ingress\_with\_cidr\_ipv6) | List of computed ingress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | +| [computed\_ingress\_with\_prefix\_list\_id](#input\_computed\_ingress\_with\_prefix\_list\_id) | List of computed ingress rules to create where 'prefix\_list\_id' is used | `list(map(string))` | `[]` | no | +| [computed\_ingress\_with\_referenced\_security\_group\_id](#input\_computed\_ingress\_with\_referenced\_security\_group\_id) | List of computed ingress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [computed\_ingress\_with\_self](#input\_computed\_ingress\_with\_self) | List of computed ingress rules to create where 'self' is defined | `list(map(string))` | `[]` | no | -| [computed\_ingress\_with\_source\_security\_group\_id](#input\_computed\_ingress\_with\_source\_security\_group\_id) | List of computed ingress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [create](#input\_create) | Whether to create security group and all rules | `bool` | `true` | no | | [description](#input\_description) | Description of security group | `string` | `"Security Group managed by Terraform"` | no | -| [egress\_cidr\_blocks](#input\_egress\_cidr\_blocks) | List of IPv4 CIDR ranges to use on all egress rules | `list(string)` |
[
"0.0.0.0/0"
]
| no | -| [egress\_ipv6\_cidr\_blocks](#input\_egress\_ipv6\_cidr\_blocks) | List of IPv6 CIDR ranges to use on all egress rules | `list(string)` |
[
"::/0"
]
| no | +| [egress\_cidr\_ipv4](#input\_egress\_cidr\_ipv4) | List of IPv4 CIDR ranges to use on all egress rules | `list(string)` |
[
"0.0.0.0/0"
]
| no | +| [egress\_cidr\_ipv6](#input\_egress\_cidr\_ipv6) | List of IPv6 CIDR ranges to use on all egress rules | `list(string)` |
[
"::/0"
]
| no | | [egress\_prefix\_list\_ids](#input\_egress\_prefix\_list\_ids) | List of prefix list IDs (for allowing access to VPC endpoints) to use on all egress rules | `list(string)` | `[]` | no | | [egress\_rules](#input\_egress\_rules) | List of egress rules to create by name | `list(string)` | `[]` | no | -| [egress\_with\_cidr\_blocks](#input\_egress\_with\_cidr\_blocks) | List of egress rules to create where 'cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [egress\_with\_ipv6\_cidr\_blocks](#input\_egress\_with\_ipv6\_cidr\_blocks) | List of egress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [egress\_with\_prefix\_list\_ids](#input\_egress\_with\_prefix\_list\_ids) | List of egress rules to create where 'prefix\_list\_ids' is used | `list(map(string))` | `[]` | no | +| [egress\_with\_cidr\_ipv4](#input\_egress\_with\_cidr\_ipv4) | List of egress rules to create where 'cidr\_ipv4' is used | `list(map(string))` | `[]` | no | +| [egress\_with\_cidr\_ipv6](#input\_egress\_with\_cidr\_ipv6) | List of egress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | +| [egress\_with\_prefix\_list\_id](#input\_egress\_with\_prefix\_list\_id) | List of egress rules to create where 'prefix\_list\_id' is used | `list(map(string))` | `[]` | no | +| [egress\_with\_referenced\_security\_group\_id](#input\_egress\_with\_referenced\_security\_group\_id) | List of egress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [egress\_with\_self](#input\_egress\_with\_self) | List of egress rules to create where 'self' is defined | `list(map(string))` | `[]` | no | -| [egress\_with\_source\_security\_group\_id](#input\_egress\_with\_source\_security\_group\_id) | List of egress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | -| [ingress\_cidr\_blocks](#input\_ingress\_cidr\_blocks) | List of IPv4 CIDR ranges to use on all ingress rules | `list(string)` | `[]` | no | -| [ingress\_ipv6\_cidr\_blocks](#input\_ingress\_ipv6\_cidr\_blocks) | List of IPv6 CIDR ranges to use on all ingress rules | `list(string)` | `[]` | no | +| [ingress\_cidr\_ipv4](#input\_ingress\_cidr\_ipv4) | List of IPv4 CIDR ranges to use on all ingress rules | `list(string)` | `[]` | no | +| [ingress\_cidr\_ipv6](#input\_ingress\_cidr\_ipv6) | List of IPv6 CIDR ranges to use on all ingress rules | `list(string)` | `[]` | no | | [ingress\_prefix\_list\_ids](#input\_ingress\_prefix\_list\_ids) | List of prefix list IDs (for allowing access to VPC endpoints) to use on all ingress rules | `list(string)` | `[]` | no | | [ingress\_rules](#input\_ingress\_rules) | List of ingress rules to create by name | `list(string)` | `[]` | no | -| [ingress\_with\_cidr\_blocks](#input\_ingress\_with\_cidr\_blocks) | List of ingress rules to create where 'cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [ingress\_with\_ipv6\_cidr\_blocks](#input\_ingress\_with\_ipv6\_cidr\_blocks) | List of ingress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [ingress\_with\_prefix\_list\_ids](#input\_ingress\_with\_prefix\_list\_ids) | List of ingress rules to create where 'prefix\_list\_ids' is used | `list(map(string))` | `[]` | no | +| [ingress\_with\_cidr\_ipv4](#input\_ingress\_with\_cidr\_ipv4) | List of ingress rules to create where 'cidr\_ipv4' is used | `list(map(string))` | `[]` | no | +| [ingress\_with\_cidr\_ipv6](#input\_ingress\_with\_cidr\_ipv6) | List of ingress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | +| [ingress\_with\_prefix\_list\_id](#input\_ingress\_with\_prefix\_list\_id) | List of ingress rules to create where 'prefix\_list\_id' is used | `list(map(string))` | `[]` | no | +| [ingress\_with\_referenced\_security\_group\_id](#input\_ingress\_with\_referenced\_security\_group\_id) | List of ingress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [ingress\_with\_self](#input\_ingress\_with\_self) | List of ingress rules to create where 'self' is defined | `list(map(string))` | `[]` | no | -| [ingress\_with\_source\_security\_group\_id](#input\_ingress\_with\_source\_security\_group\_id) | List of ingress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [name](#input\_name) | Name of security group | `string` | n/a | yes | | [number\_of\_computed\_egress\_cidr\_blocks](#input\_number\_of\_computed\_egress\_cidr\_blocks) | Number of IPv4 CIDR ranges to use on all computed egress rules | `number` | `0` | no | | [number\_of\_computed\_egress\_ipv6\_cidr\_blocks](#input\_number\_of\_computed\_egress\_ipv6\_cidr\_blocks) | Number of IPv6 CIDR ranges to use on all computed egress rules | `number` | `0` | no | | [number\_of\_computed\_egress\_prefix\_list\_ids](#input\_number\_of\_computed\_egress\_prefix\_list\_ids) | Number of prefix list IDs (for allowing access to VPC endpoints) to use on all computed egress rules | `number` | `0` | no | | [number\_of\_computed\_egress\_rules](#input\_number\_of\_computed\_egress\_rules) | Number of computed egress rules to create by name | `number` | `0` | no | -| [number\_of\_computed\_egress\_with\_cidr\_blocks](#input\_number\_of\_computed\_egress\_with\_cidr\_blocks) | Number of computed egress rules to create where 'cidr\_blocks' is used | `number` | `0` | no | -| [number\_of\_computed\_egress\_with\_ipv6\_cidr\_blocks](#input\_number\_of\_computed\_egress\_with\_ipv6\_cidr\_blocks) | Number of computed egress rules to create where 'ipv6\_cidr\_blocks' is used | `number` | `0` | no | -| [number\_of\_computed\_egress\_with\_prefix\_list\_ids](#input\_number\_of\_computed\_egress\_with\_prefix\_list\_ids) | Number of computed egress rules to create where 'prefix\_list\_ids' is used | `number` | `0` | no | +| [number\_of\_computed\_egress\_with\_cidr\_ipv4](#input\_number\_of\_computed\_egress\_with\_cidr\_ipv4) | Number of computed egress rules to create where 'cidr\_ipv4' is used | `number` | `0` | no | +| [number\_of\_computed\_egress\_with\_cidr\_ipv6](#input\_number\_of\_computed\_egress\_with\_cidr\_ipv6) | Number of computed egress rules to create where 'ipv6\_cidr\_blocks' is used | `number` | `0` | no | +| [number\_of\_computed\_egress\_with\_prefix\_list\_id](#input\_number\_of\_computed\_egress\_with\_prefix\_list\_id) | Number of computed egress rules to create where 'prefix\_list\_id' is used | `number` | `0` | no | +| [number\_of\_computed\_egress\_with\_referenced\_security\_group\_id](#input\_number\_of\_computed\_egress\_with\_referenced\_security\_group\_id) | Number of computed egress rules to create where 'source\_security\_group\_id' is used | `number` | `0` | no | | [number\_of\_computed\_egress\_with\_self](#input\_number\_of\_computed\_egress\_with\_self) | Number of computed egress rules to create where 'self' is defined | `number` | `0` | no | -| [number\_of\_computed\_egress\_with\_source\_security\_group\_id](#input\_number\_of\_computed\_egress\_with\_source\_security\_group\_id) | Number of computed egress rules to create where 'source\_security\_group\_id' is used | `number` | `0` | no | | [number\_of\_computed\_ingress\_cidr\_blocks](#input\_number\_of\_computed\_ingress\_cidr\_blocks) | Number of IPv4 CIDR ranges to use on all computed ingress rules | `number` | `0` | no | | [number\_of\_computed\_ingress\_ipv6\_cidr\_blocks](#input\_number\_of\_computed\_ingress\_ipv6\_cidr\_blocks) | Number of IPv6 CIDR ranges to use on all computed ingress rules | `number` | `0` | no | | [number\_of\_computed\_ingress\_prefix\_list\_ids](#input\_number\_of\_computed\_ingress\_prefix\_list\_ids) | Number of prefix list IDs (for allowing access to VPC endpoints) to use on all computed ingress rules | `number` | `0` | no | | [number\_of\_computed\_ingress\_rules](#input\_number\_of\_computed\_ingress\_rules) | Number of computed ingress rules to create by name | `number` | `0` | no | -| [number\_of\_computed\_ingress\_with\_cidr\_blocks](#input\_number\_of\_computed\_ingress\_with\_cidr\_blocks) | Number of computed ingress rules to create where 'cidr\_blocks' is used | `number` | `0` | no | -| [number\_of\_computed\_ingress\_with\_ipv6\_cidr\_blocks](#input\_number\_of\_computed\_ingress\_with\_ipv6\_cidr\_blocks) | Number of computed ingress rules to create where 'ipv6\_cidr\_blocks' is used | `number` | `0` | no | -| [number\_of\_computed\_ingress\_with\_prefix\_list\_ids](#input\_number\_of\_computed\_ingress\_with\_prefix\_list\_ids) | Number of computed ingress rules to create where 'prefix\_list\_ids' is used | `number` | `0` | no | +| [number\_of\_computed\_ingress\_with\_cidr\_ipv4](#input\_number\_of\_computed\_ingress\_with\_cidr\_ipv4) | Number of computed ingress rules to create where 'cidr\_ipv4' is used | `number` | `0` | no | +| [number\_of\_computed\_ingress\_with\_cidr\_ipv6](#input\_number\_of\_computed\_ingress\_with\_cidr\_ipv6) | Number of computed ingress rules to create where 'ipv6\_cidr\_blocks' is used | `number` | `0` | no | +| [number\_of\_computed\_ingress\_with\_prefix\_list\_id](#input\_number\_of\_computed\_ingress\_with\_prefix\_list\_id) | Number of computed ingress rules to create where 'prefix\_list\_id' is used | `number` | `0` | no | +| [number\_of\_computed\_ingress\_with\_referenced\_security\_group\_id](#input\_number\_of\_computed\_ingress\_with\_referenced\_security\_group\_id) | Number of computed ingress rules to create where 'source\_security\_group\_id' is used | `number` | `0` | no | | [number\_of\_computed\_ingress\_with\_self](#input\_number\_of\_computed\_ingress\_with\_self) | Number of computed ingress rules to create where 'self' is defined | `number` | `0` | no | -| [number\_of\_computed\_ingress\_with\_source\_security\_group\_id](#input\_number\_of\_computed\_ingress\_with\_source\_security\_group\_id) | Number of computed ingress rules to create where 'source\_security\_group\_id' is used | `number` | `0` | no | | [revoke\_rules\_on\_delete](#input\_revoke\_rules\_on\_delete) | Instruct Terraform to revoke all of the Security Groups attached ingress and egress rules before deleting the rule itself. Enable for EMR. | `bool` | `false` | no | | [tags](#input\_tags) | A mapping of tags to assign to security group | `map(string)` | `{}` | no | | [use\_name\_prefix](#input\_use\_name\_prefix) | Whether to use name\_prefix or fixed name. Should be true to able to update security group name after initial creation | `bool` | `true` | no | diff --git a/modules/ssh/main.tf b/modules/ssh/main.tf index 80ea0adb..d2a1bf93 100644 --- a/modules/ssh/main.tf +++ b/modules/ssh/main.tf @@ -19,20 +19,20 @@ module "sg" { ingress_with_self = concat(var.auto_ingress_with_self, var.ingress_with_self) # Open to IPv4 cidr blocks - ingress_with_cidr_blocks = var.ingress_with_cidr_blocks + ingress_with_cidr_ipv4 = var.ingress_with_cidr_ipv4 # Open to IPv6 cidr blocks - ingress_with_ipv6_cidr_blocks = var.ingress_with_ipv6_cidr_blocks + ingress_with_cidr_ipv6 = var.ingress_with_cidr_ipv6 # Open for security group id - ingress_with_source_security_group_id = var.ingress_with_source_security_group_id + ingress_with_referenced_security_group_id = var.ingress_with_referenced_security_group_id # Open for prefix list id - ingress_with_prefix_list_ids = var.ingress_with_prefix_list_ids + ingress_with_prefix_list_id = var.ingress_with_prefix_list_id # Default ingress CIDR blocks - ingress_cidr_blocks = var.ingress_cidr_blocks - ingress_ipv6_cidr_blocks = var.ingress_ipv6_cidr_blocks + ingress_cidr_ipv4 = var.ingress_cidr_ipv4 + ingress_cidr_ipv6 = var.ingress_cidr_ipv6 # Default prefix list ids ingress_prefix_list_ids = var.ingress_prefix_list_ids @@ -47,26 +47,26 @@ module "sg" { computed_ingress_with_self = concat(var.auto_computed_ingress_with_self, var.computed_ingress_with_self) # Open to IPv4 cidr blocks - computed_ingress_with_cidr_blocks = var.computed_ingress_with_cidr_blocks + computed_ingress_with_cidr_ipv4 = var.computed_ingress_with_cidr_ipv4 # Open to IPv6 cidr blocks - computed_ingress_with_ipv6_cidr_blocks = var.computed_ingress_with_ipv6_cidr_blocks + computed_ingress_with_cidr_ipv6 = var.computed_ingress_with_cidr_ipv6 # Open for security group id - computed_ingress_with_source_security_group_id = var.computed_ingress_with_source_security_group_id + computed_ingress_with_referenced_security_group_id = var.computed_ingress_with_referenced_security_group_id # Open for prefix list id - computed_ingress_with_prefix_list_ids = var.computed_ingress_with_prefix_list_ids + computed_ingress_with_prefix_list_id = var.computed_ingress_with_prefix_list_id ############################# # Number of computed ingress ############################# - number_of_computed_ingress_rules = var.auto_number_of_computed_ingress_rules + var.number_of_computed_ingress_rules - number_of_computed_ingress_with_self = var.auto_number_of_computed_ingress_with_self + var.number_of_computed_ingress_with_self - number_of_computed_ingress_with_cidr_blocks = var.number_of_computed_ingress_with_cidr_blocks - number_of_computed_ingress_with_ipv6_cidr_blocks = var.number_of_computed_ingress_with_ipv6_cidr_blocks - number_of_computed_ingress_with_source_security_group_id = var.number_of_computed_ingress_with_source_security_group_id - number_of_computed_ingress_with_prefix_list_ids = var.number_of_computed_ingress_with_prefix_list_ids + number_of_computed_ingress_rules = var.auto_number_of_computed_ingress_rules + var.number_of_computed_ingress_rules + number_of_computed_ingress_with_self = var.auto_number_of_computed_ingress_with_self + var.number_of_computed_ingress_with_self + number_of_computed_ingress_with_cidr_ipv4 = var.number_of_computed_ingress_with_cidr_ipv4 + number_of_computed_ingress_with_cidr_ipv6 = var.number_of_computed_ingress_with_cidr_ipv6 + number_of_computed_ingress_with_referenced_security_group_id = var.number_of_computed_ingress_with_referenced_security_group_id + number_of_computed_ingress_with_prefix_list_id = var.number_of_computed_ingress_with_prefix_list_id ######### # Egress @@ -78,20 +78,20 @@ module "sg" { egress_with_self = concat(var.auto_egress_with_self, var.egress_with_self) # Open to IPv4 cidr blocks - egress_with_cidr_blocks = var.egress_with_cidr_blocks + egress_with_cidr_ipv4 = var.egress_with_cidr_ipv4 # Open to IPv6 cidr blocks - egress_with_ipv6_cidr_blocks = var.egress_with_ipv6_cidr_blocks + egress_with_cidr_ipv6 = var.egress_with_cidr_ipv6 # Open for security group id - egress_with_source_security_group_id = var.egress_with_source_security_group_id + egress_with_referenced_security_group_id = var.egress_with_referenced_security_group_id # Open for prefix list id - egress_with_prefix_list_ids = var.egress_with_prefix_list_ids + egress_with_prefix_list_id = var.egress_with_prefix_list_id # Default egress CIDR blocks - egress_cidr_blocks = var.egress_cidr_blocks - egress_ipv6_cidr_blocks = var.egress_ipv6_cidr_blocks + egress_cidr_ipv4 = var.egress_cidr_ipv4 + egress_cidr_ipv6 = var.egress_cidr_ipv6 # Default prefix list ids egress_prefix_list_ids = var.egress_prefix_list_ids @@ -106,24 +106,24 @@ module "sg" { computed_egress_with_self = concat(var.auto_computed_egress_with_self, var.computed_egress_with_self) # Open to IPv4 cidr blocks - computed_egress_with_cidr_blocks = var.computed_egress_with_cidr_blocks + computed_egress_with_cidr_ipv4 = var.computed_egress_with_cidr_ipv4 # Open to IPv6 cidr blocks - computed_egress_with_ipv6_cidr_blocks = var.computed_egress_with_ipv6_cidr_blocks + computed_egress_with_cidr_ipv6 = var.computed_egress_with_cidr_ipv6 # Open for security group id - computed_egress_with_source_security_group_id = var.computed_egress_with_source_security_group_id + computed_egress_with_referenced_security_group_id = var.computed_egress_with_referenced_security_group_id # Open for prefix list id - computed_egress_with_prefix_list_ids = var.computed_egress_with_prefix_list_ids + computed_egress_with_prefix_list_id = var.computed_egress_with_prefix_list_id ############################# # Number of computed egress ############################# - number_of_computed_egress_rules = var.auto_number_of_computed_egress_rules + var.number_of_computed_egress_rules - number_of_computed_egress_with_self = var.auto_number_of_computed_egress_with_self + var.number_of_computed_egress_with_self - number_of_computed_egress_with_cidr_blocks = var.number_of_computed_egress_with_cidr_blocks - number_of_computed_egress_with_ipv6_cidr_blocks = var.number_of_computed_egress_with_ipv6_cidr_blocks - number_of_computed_egress_with_source_security_group_id = var.number_of_computed_egress_with_source_security_group_id - number_of_computed_egress_with_prefix_list_ids = var.number_of_computed_egress_with_prefix_list_ids + number_of_computed_egress_rules = var.auto_number_of_computed_egress_rules + var.number_of_computed_egress_rules + number_of_computed_egress_with_self = var.auto_number_of_computed_egress_with_self + var.number_of_computed_egress_with_self + number_of_computed_egress_with_cidr_ipv4 = var.number_of_computed_egress_with_cidr_ipv4 + number_of_computed_egress_with_cidr_ipv6 = var.number_of_computed_egress_with_cidr_ipv6 + number_of_computed_egress_with_referenced_security_group_id = var.number_of_computed_egress_with_referenced_security_group_id + number_of_computed_egress_with_prefix_list_id = var.number_of_computed_egress_with_prefix_list_id } diff --git a/modules/ssh/variables.tf b/modules/ssh/variables.tf index 60c8c27b..6590c9e3 100644 --- a/modules/ssh/variables.tf +++ b/modules/ssh/variables.tf @@ -56,37 +56,37 @@ variable "ingress_with_self" { default = [] } -variable "ingress_with_cidr_blocks" { - description = "List of ingress rules to create where 'cidr_blocks' is used" +variable "ingress_with_cidr_ipv4" { + description = "List of ingress rules to create where 'cidr_ipv4' is used" type = list(map(string)) default = [] } -variable "ingress_with_ipv6_cidr_blocks" { +variable "ingress_with_cidr_ipv6" { description = "List of ingress rules to create where 'ipv6_cidr_blocks' is used" type = list(map(string)) default = [] } -variable "ingress_with_source_security_group_id" { +variable "ingress_with_referenced_security_group_id" { description = "List of ingress rules to create where 'source_security_group_id' is used" type = list(map(string)) default = [] } -variable "ingress_with_prefix_list_ids" { - description = "List of ingress rules to create where 'prefix_list_ids' is used" +variable "ingress_with_prefix_list_id" { + description = "List of ingress rules to create where 'prefix_list_id' is used" type = list(map(string)) default = [] } -variable "ingress_cidr_blocks" { +variable "ingress_cidr_ipv4" { description = "List of IPv4 CIDR ranges to use on all ingress rules" type = list(string) default = [] } -variable "ingress_ipv6_cidr_blocks" { +variable "ingress_cidr_ipv6" { description = "List of IPv6 CIDR ranges to use on all ingress rules" type = list(string) default = [] @@ -113,26 +113,26 @@ variable "computed_ingress_with_self" { default = [] } -variable "computed_ingress_with_cidr_blocks" { - description = "List of computed ingress rules to create where 'cidr_blocks' is used" +variable "computed_ingress_with_cidr_ipv4" { + description = "List of computed ingress rules to create where 'cidr_ipv4' is used" type = list(map(string)) default = [] } -variable "computed_ingress_with_ipv6_cidr_blocks" { +variable "computed_ingress_with_cidr_ipv6" { description = "List of computed ingress rules to create where 'ipv6_cidr_blocks' is used" type = list(map(string)) default = [] } -variable "computed_ingress_with_source_security_group_id" { +variable "computed_ingress_with_referenced_security_group_id" { description = "List of computed ingress rules to create where 'source_security_group_id' is used" type = list(map(string)) default = [] } -variable "computed_ingress_with_prefix_list_ids" { - description = "List of computed ingress rules to create where 'prefix_list_ids' is used" +variable "computed_ingress_with_prefix_list_id" { + description = "List of computed ingress rules to create where 'prefix_list_id' is used" type = list(map(string)) default = [] } @@ -170,26 +170,26 @@ variable "number_of_computed_ingress_with_self" { default = 0 } -variable "number_of_computed_ingress_with_cidr_blocks" { - description = "Number of computed ingress rules to create where 'cidr_blocks' is used" +variable "number_of_computed_ingress_with_cidr_ipv4" { + description = "Number of computed ingress rules to create where 'cidr_ipv4' is used" type = number default = 0 } -variable "number_of_computed_ingress_with_ipv6_cidr_blocks" { +variable "number_of_computed_ingress_with_cidr_ipv6" { description = "Number of computed ingress rules to create where 'ipv6_cidr_blocks' is used" type = number default = 0 } -variable "number_of_computed_ingress_with_source_security_group_id" { +variable "number_of_computed_ingress_with_referenced_security_group_id" { description = "Number of computed ingress rules to create where 'source_security_group_id' is used" type = number default = 0 } -variable "number_of_computed_ingress_with_prefix_list_ids" { - description = "Number of computed ingress rules to create where 'prefix_list_ids' is used" +variable "number_of_computed_ingress_with_prefix_list_id" { + description = "Number of computed ingress rules to create where 'prefix_list_id' is used" type = number default = 0 } @@ -227,37 +227,37 @@ variable "egress_with_self" { default = [] } -variable "egress_with_cidr_blocks" { - description = "List of egress rules to create where 'cidr_blocks' is used" +variable "egress_with_cidr_ipv4" { + description = "List of egress rules to create where 'cidr_ipv4' is used" type = list(map(string)) default = [] } -variable "egress_with_ipv6_cidr_blocks" { +variable "egress_with_cidr_ipv6" { description = "List of egress rules to create where 'ipv6_cidr_blocks' is used" type = list(map(string)) default = [] } -variable "egress_with_source_security_group_id" { +variable "egress_with_referenced_security_group_id" { description = "List of egress rules to create where 'source_security_group_id' is used" type = list(map(string)) default = [] } -variable "egress_with_prefix_list_ids" { - description = "List of egress rules to create where 'prefix_list_ids' is used" +variable "egress_with_prefix_list_id" { + description = "List of egress rules to create where 'prefix_list_id' is used" type = list(map(string)) default = [] } -variable "egress_cidr_blocks" { +variable "egress_cidr_ipv4" { description = "List of IPv4 CIDR ranges to use on all egress rules" type = list(string) default = ["0.0.0.0/0"] } -variable "egress_ipv6_cidr_blocks" { +variable "egress_cidr_ipv6" { description = "List of IPv6 CIDR ranges to use on all egress rules" type = list(string) default = ["::/0"] @@ -284,26 +284,26 @@ variable "computed_egress_with_self" { default = [] } -variable "computed_egress_with_cidr_blocks" { - description = "List of computed egress rules to create where 'cidr_blocks' is used" +variable "computed_egress_with_cidr_ipv4" { + description = "List of computed egress rules to create where 'cidr_ipv4' is used" type = list(map(string)) default = [] } -variable "computed_egress_with_ipv6_cidr_blocks" { +variable "computed_egress_with_cidr_ipv6" { description = "List of computed egress rules to create where 'ipv6_cidr_blocks' is used" type = list(map(string)) default = [] } -variable "computed_egress_with_source_security_group_id" { +variable "computed_egress_with_referenced_security_group_id" { description = "List of computed egress rules to create where 'source_security_group_id' is used" type = list(map(string)) default = [] } -variable "computed_egress_with_prefix_list_ids" { - description = "List of computed egress rules to create where 'prefix_list_ids' is used" +variable "computed_egress_with_prefix_list_id" { + description = "List of computed egress rules to create where 'prefix_list_id' is used" type = list(map(string)) default = [] } @@ -341,26 +341,26 @@ variable "number_of_computed_egress_with_self" { default = 0 } -variable "number_of_computed_egress_with_cidr_blocks" { - description = "Number of computed egress rules to create where 'cidr_blocks' is used" +variable "number_of_computed_egress_with_cidr_ipv4" { + description = "Number of computed egress rules to create where 'cidr_ipv4' is used" type = number default = 0 } -variable "number_of_computed_egress_with_ipv6_cidr_blocks" { +variable "number_of_computed_egress_with_cidr_ipv6" { description = "Number of computed egress rules to create where 'ipv6_cidr_blocks' is used" type = number default = 0 } -variable "number_of_computed_egress_with_source_security_group_id" { +variable "number_of_computed_egress_with_referenced_security_group_id" { description = "Number of computed egress rules to create where 'source_security_group_id' is used" type = number default = 0 } -variable "number_of_computed_egress_with_prefix_list_ids" { - description = "Number of computed egress rules to create where 'prefix_list_ids' is used" +variable "number_of_computed_egress_with_prefix_list_id" { + description = "Number of computed egress rules to create where 'prefix_list_id' is used" type = number default = 0 } diff --git a/modules/storm/README.md b/modules/storm/README.md index 0baae3b7..45299690 100644 --- a/modules/storm/README.md +++ b/modules/storm/README.md @@ -55,59 +55,59 @@ No resources. | [computed\_egress\_ipv6\_cidr\_blocks](#input\_computed\_egress\_ipv6\_cidr\_blocks) | List of IPv6 CIDR ranges to use on all computed egress rules | `list(string)` |
[
"::/0"
]
| no | | [computed\_egress\_prefix\_list\_ids](#input\_computed\_egress\_prefix\_list\_ids) | List of prefix list IDs (for allowing access to VPC endpoints) to use on all computed egress rules | `list(string)` | `[]` | no | | [computed\_egress\_rules](#input\_computed\_egress\_rules) | List of computed egress rules to create by name | `list(string)` | `[]` | no | -| [computed\_egress\_with\_cidr\_blocks](#input\_computed\_egress\_with\_cidr\_blocks) | List of computed egress rules to create where 'cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [computed\_egress\_with\_ipv6\_cidr\_blocks](#input\_computed\_egress\_with\_ipv6\_cidr\_blocks) | List of computed egress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [computed\_egress\_with\_prefix\_list\_ids](#input\_computed\_egress\_with\_prefix\_list\_ids) | List of computed egress rules to create where 'prefix\_list\_ids' is used | `list(map(string))` | `[]` | no | +| [computed\_egress\_with\_cidr\_ipv4](#input\_computed\_egress\_with\_cidr\_ipv4) | List of computed egress rules to create where 'cidr\_ipv4' is used | `list(map(string))` | `[]` | no | +| [computed\_egress\_with\_cidr\_ipv6](#input\_computed\_egress\_with\_cidr\_ipv6) | List of computed egress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | +| [computed\_egress\_with\_prefix\_list\_id](#input\_computed\_egress\_with\_prefix\_list\_id) | List of computed egress rules to create where 'prefix\_list\_id' is used | `list(map(string))` | `[]` | no | +| [computed\_egress\_with\_referenced\_security\_group\_id](#input\_computed\_egress\_with\_referenced\_security\_group\_id) | List of computed egress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [computed\_egress\_with\_self](#input\_computed\_egress\_with\_self) | List of computed egress rules to create where 'self' is defined | `list(map(string))` | `[]` | no | -| [computed\_egress\_with\_source\_security\_group\_id](#input\_computed\_egress\_with\_source\_security\_group\_id) | List of computed egress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [computed\_ingress\_cidr\_blocks](#input\_computed\_ingress\_cidr\_blocks) | List of IPv4 CIDR ranges to use on all computed ingress rules | `list(string)` | `[]` | no | | [computed\_ingress\_ipv6\_cidr\_blocks](#input\_computed\_ingress\_ipv6\_cidr\_blocks) | List of IPv6 CIDR ranges to use on all computed ingress rules | `list(string)` | `[]` | no | | [computed\_ingress\_prefix\_list\_ids](#input\_computed\_ingress\_prefix\_list\_ids) | List of prefix list IDs (for allowing access to VPC endpoints) to use on all computed ingress rules | `list(string)` | `[]` | no | | [computed\_ingress\_rules](#input\_computed\_ingress\_rules) | List of computed ingress rules to create by name | `list(string)` | `[]` | no | -| [computed\_ingress\_with\_cidr\_blocks](#input\_computed\_ingress\_with\_cidr\_blocks) | List of computed ingress rules to create where 'cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [computed\_ingress\_with\_ipv6\_cidr\_blocks](#input\_computed\_ingress\_with\_ipv6\_cidr\_blocks) | List of computed ingress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [computed\_ingress\_with\_prefix\_list\_ids](#input\_computed\_ingress\_with\_prefix\_list\_ids) | List of computed ingress rules to create where 'prefix\_list\_ids' is used | `list(map(string))` | `[]` | no | +| [computed\_ingress\_with\_cidr\_ipv4](#input\_computed\_ingress\_with\_cidr\_ipv4) | List of computed ingress rules to create where 'cidr\_ipv4' is used | `list(map(string))` | `[]` | no | +| [computed\_ingress\_with\_cidr\_ipv6](#input\_computed\_ingress\_with\_cidr\_ipv6) | List of computed ingress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | +| [computed\_ingress\_with\_prefix\_list\_id](#input\_computed\_ingress\_with\_prefix\_list\_id) | List of computed ingress rules to create where 'prefix\_list\_id' is used | `list(map(string))` | `[]` | no | +| [computed\_ingress\_with\_referenced\_security\_group\_id](#input\_computed\_ingress\_with\_referenced\_security\_group\_id) | List of computed ingress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [computed\_ingress\_with\_self](#input\_computed\_ingress\_with\_self) | List of computed ingress rules to create where 'self' is defined | `list(map(string))` | `[]` | no | -| [computed\_ingress\_with\_source\_security\_group\_id](#input\_computed\_ingress\_with\_source\_security\_group\_id) | List of computed ingress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [create](#input\_create) | Whether to create security group and all rules | `bool` | `true` | no | | [description](#input\_description) | Description of security group | `string` | `"Security Group managed by Terraform"` | no | -| [egress\_cidr\_blocks](#input\_egress\_cidr\_blocks) | List of IPv4 CIDR ranges to use on all egress rules | `list(string)` |
[
"0.0.0.0/0"
]
| no | -| [egress\_ipv6\_cidr\_blocks](#input\_egress\_ipv6\_cidr\_blocks) | List of IPv6 CIDR ranges to use on all egress rules | `list(string)` |
[
"::/0"
]
| no | +| [egress\_cidr\_ipv4](#input\_egress\_cidr\_ipv4) | List of IPv4 CIDR ranges to use on all egress rules | `list(string)` |
[
"0.0.0.0/0"
]
| no | +| [egress\_cidr\_ipv6](#input\_egress\_cidr\_ipv6) | List of IPv6 CIDR ranges to use on all egress rules | `list(string)` |
[
"::/0"
]
| no | | [egress\_prefix\_list\_ids](#input\_egress\_prefix\_list\_ids) | List of prefix list IDs (for allowing access to VPC endpoints) to use on all egress rules | `list(string)` | `[]` | no | | [egress\_rules](#input\_egress\_rules) | List of egress rules to create by name | `list(string)` | `[]` | no | -| [egress\_with\_cidr\_blocks](#input\_egress\_with\_cidr\_blocks) | List of egress rules to create where 'cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [egress\_with\_ipv6\_cidr\_blocks](#input\_egress\_with\_ipv6\_cidr\_blocks) | List of egress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [egress\_with\_prefix\_list\_ids](#input\_egress\_with\_prefix\_list\_ids) | List of egress rules to create where 'prefix\_list\_ids' is used | `list(map(string))` | `[]` | no | +| [egress\_with\_cidr\_ipv4](#input\_egress\_with\_cidr\_ipv4) | List of egress rules to create where 'cidr\_ipv4' is used | `list(map(string))` | `[]` | no | +| [egress\_with\_cidr\_ipv6](#input\_egress\_with\_cidr\_ipv6) | List of egress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | +| [egress\_with\_prefix\_list\_id](#input\_egress\_with\_prefix\_list\_id) | List of egress rules to create where 'prefix\_list\_id' is used | `list(map(string))` | `[]` | no | +| [egress\_with\_referenced\_security\_group\_id](#input\_egress\_with\_referenced\_security\_group\_id) | List of egress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [egress\_with\_self](#input\_egress\_with\_self) | List of egress rules to create where 'self' is defined | `list(map(string))` | `[]` | no | -| [egress\_with\_source\_security\_group\_id](#input\_egress\_with\_source\_security\_group\_id) | List of egress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | -| [ingress\_cidr\_blocks](#input\_ingress\_cidr\_blocks) | List of IPv4 CIDR ranges to use on all ingress rules | `list(string)` | `[]` | no | -| [ingress\_ipv6\_cidr\_blocks](#input\_ingress\_ipv6\_cidr\_blocks) | List of IPv6 CIDR ranges to use on all ingress rules | `list(string)` | `[]` | no | +| [ingress\_cidr\_ipv4](#input\_ingress\_cidr\_ipv4) | List of IPv4 CIDR ranges to use on all ingress rules | `list(string)` | `[]` | no | +| [ingress\_cidr\_ipv6](#input\_ingress\_cidr\_ipv6) | List of IPv6 CIDR ranges to use on all ingress rules | `list(string)` | `[]` | no | | [ingress\_prefix\_list\_ids](#input\_ingress\_prefix\_list\_ids) | List of prefix list IDs (for allowing access to VPC endpoints) to use on all ingress rules | `list(string)` | `[]` | no | | [ingress\_rules](#input\_ingress\_rules) | List of ingress rules to create by name | `list(string)` | `[]` | no | -| [ingress\_with\_cidr\_blocks](#input\_ingress\_with\_cidr\_blocks) | List of ingress rules to create where 'cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [ingress\_with\_ipv6\_cidr\_blocks](#input\_ingress\_with\_ipv6\_cidr\_blocks) | List of ingress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [ingress\_with\_prefix\_list\_ids](#input\_ingress\_with\_prefix\_list\_ids) | List of ingress rules to create where 'prefix\_list\_ids' is used | `list(map(string))` | `[]` | no | +| [ingress\_with\_cidr\_ipv4](#input\_ingress\_with\_cidr\_ipv4) | List of ingress rules to create where 'cidr\_ipv4' is used | `list(map(string))` | `[]` | no | +| [ingress\_with\_cidr\_ipv6](#input\_ingress\_with\_cidr\_ipv6) | List of ingress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | +| [ingress\_with\_prefix\_list\_id](#input\_ingress\_with\_prefix\_list\_id) | List of ingress rules to create where 'prefix\_list\_id' is used | `list(map(string))` | `[]` | no | +| [ingress\_with\_referenced\_security\_group\_id](#input\_ingress\_with\_referenced\_security\_group\_id) | List of ingress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [ingress\_with\_self](#input\_ingress\_with\_self) | List of ingress rules to create where 'self' is defined | `list(map(string))` | `[]` | no | -| [ingress\_with\_source\_security\_group\_id](#input\_ingress\_with\_source\_security\_group\_id) | List of ingress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [name](#input\_name) | Name of security group | `string` | n/a | yes | | [number\_of\_computed\_egress\_cidr\_blocks](#input\_number\_of\_computed\_egress\_cidr\_blocks) | Number of IPv4 CIDR ranges to use on all computed egress rules | `number` | `0` | no | | [number\_of\_computed\_egress\_ipv6\_cidr\_blocks](#input\_number\_of\_computed\_egress\_ipv6\_cidr\_blocks) | Number of IPv6 CIDR ranges to use on all computed egress rules | `number` | `0` | no | | [number\_of\_computed\_egress\_prefix\_list\_ids](#input\_number\_of\_computed\_egress\_prefix\_list\_ids) | Number of prefix list IDs (for allowing access to VPC endpoints) to use on all computed egress rules | `number` | `0` | no | | [number\_of\_computed\_egress\_rules](#input\_number\_of\_computed\_egress\_rules) | Number of computed egress rules to create by name | `number` | `0` | no | -| [number\_of\_computed\_egress\_with\_cidr\_blocks](#input\_number\_of\_computed\_egress\_with\_cidr\_blocks) | Number of computed egress rules to create where 'cidr\_blocks' is used | `number` | `0` | no | -| [number\_of\_computed\_egress\_with\_ipv6\_cidr\_blocks](#input\_number\_of\_computed\_egress\_with\_ipv6\_cidr\_blocks) | Number of computed egress rules to create where 'ipv6\_cidr\_blocks' is used | `number` | `0` | no | -| [number\_of\_computed\_egress\_with\_prefix\_list\_ids](#input\_number\_of\_computed\_egress\_with\_prefix\_list\_ids) | Number of computed egress rules to create where 'prefix\_list\_ids' is used | `number` | `0` | no | +| [number\_of\_computed\_egress\_with\_cidr\_ipv4](#input\_number\_of\_computed\_egress\_with\_cidr\_ipv4) | Number of computed egress rules to create where 'cidr\_ipv4' is used | `number` | `0` | no | +| [number\_of\_computed\_egress\_with\_cidr\_ipv6](#input\_number\_of\_computed\_egress\_with\_cidr\_ipv6) | Number of computed egress rules to create where 'ipv6\_cidr\_blocks' is used | `number` | `0` | no | +| [number\_of\_computed\_egress\_with\_prefix\_list\_id](#input\_number\_of\_computed\_egress\_with\_prefix\_list\_id) | Number of computed egress rules to create where 'prefix\_list\_id' is used | `number` | `0` | no | +| [number\_of\_computed\_egress\_with\_referenced\_security\_group\_id](#input\_number\_of\_computed\_egress\_with\_referenced\_security\_group\_id) | Number of computed egress rules to create where 'source\_security\_group\_id' is used | `number` | `0` | no | | [number\_of\_computed\_egress\_with\_self](#input\_number\_of\_computed\_egress\_with\_self) | Number of computed egress rules to create where 'self' is defined | `number` | `0` | no | -| [number\_of\_computed\_egress\_with\_source\_security\_group\_id](#input\_number\_of\_computed\_egress\_with\_source\_security\_group\_id) | Number of computed egress rules to create where 'source\_security\_group\_id' is used | `number` | `0` | no | | [number\_of\_computed\_ingress\_cidr\_blocks](#input\_number\_of\_computed\_ingress\_cidr\_blocks) | Number of IPv4 CIDR ranges to use on all computed ingress rules | `number` | `0` | no | | [number\_of\_computed\_ingress\_ipv6\_cidr\_blocks](#input\_number\_of\_computed\_ingress\_ipv6\_cidr\_blocks) | Number of IPv6 CIDR ranges to use on all computed ingress rules | `number` | `0` | no | | [number\_of\_computed\_ingress\_prefix\_list\_ids](#input\_number\_of\_computed\_ingress\_prefix\_list\_ids) | Number of prefix list IDs (for allowing access to VPC endpoints) to use on all computed ingress rules | `number` | `0` | no | | [number\_of\_computed\_ingress\_rules](#input\_number\_of\_computed\_ingress\_rules) | Number of computed ingress rules to create by name | `number` | `0` | no | -| [number\_of\_computed\_ingress\_with\_cidr\_blocks](#input\_number\_of\_computed\_ingress\_with\_cidr\_blocks) | Number of computed ingress rules to create where 'cidr\_blocks' is used | `number` | `0` | no | -| [number\_of\_computed\_ingress\_with\_ipv6\_cidr\_blocks](#input\_number\_of\_computed\_ingress\_with\_ipv6\_cidr\_blocks) | Number of computed ingress rules to create where 'ipv6\_cidr\_blocks' is used | `number` | `0` | no | -| [number\_of\_computed\_ingress\_with\_prefix\_list\_ids](#input\_number\_of\_computed\_ingress\_with\_prefix\_list\_ids) | Number of computed ingress rules to create where 'prefix\_list\_ids' is used | `number` | `0` | no | +| [number\_of\_computed\_ingress\_with\_cidr\_ipv4](#input\_number\_of\_computed\_ingress\_with\_cidr\_ipv4) | Number of computed ingress rules to create where 'cidr\_ipv4' is used | `number` | `0` | no | +| [number\_of\_computed\_ingress\_with\_cidr\_ipv6](#input\_number\_of\_computed\_ingress\_with\_cidr\_ipv6) | Number of computed ingress rules to create where 'ipv6\_cidr\_blocks' is used | `number` | `0` | no | +| [number\_of\_computed\_ingress\_with\_prefix\_list\_id](#input\_number\_of\_computed\_ingress\_with\_prefix\_list\_id) | Number of computed ingress rules to create where 'prefix\_list\_id' is used | `number` | `0` | no | +| [number\_of\_computed\_ingress\_with\_referenced\_security\_group\_id](#input\_number\_of\_computed\_ingress\_with\_referenced\_security\_group\_id) | Number of computed ingress rules to create where 'source\_security\_group\_id' is used | `number` | `0` | no | | [number\_of\_computed\_ingress\_with\_self](#input\_number\_of\_computed\_ingress\_with\_self) | Number of computed ingress rules to create where 'self' is defined | `number` | `0` | no | -| [number\_of\_computed\_ingress\_with\_source\_security\_group\_id](#input\_number\_of\_computed\_ingress\_with\_source\_security\_group\_id) | Number of computed ingress rules to create where 'source\_security\_group\_id' is used | `number` | `0` | no | | [revoke\_rules\_on\_delete](#input\_revoke\_rules\_on\_delete) | Instruct Terraform to revoke all of the Security Groups attached ingress and egress rules before deleting the rule itself. Enable for EMR. | `bool` | `false` | no | | [tags](#input\_tags) | A mapping of tags to assign to security group | `map(string)` | `{}` | no | | [use\_name\_prefix](#input\_use\_name\_prefix) | Whether to use name\_prefix or fixed name. Should be true to able to update security group name after initial creation | `bool` | `true` | no | diff --git a/modules/storm/main.tf b/modules/storm/main.tf index 80ea0adb..d2a1bf93 100644 --- a/modules/storm/main.tf +++ b/modules/storm/main.tf @@ -19,20 +19,20 @@ module "sg" { ingress_with_self = concat(var.auto_ingress_with_self, var.ingress_with_self) # Open to IPv4 cidr blocks - ingress_with_cidr_blocks = var.ingress_with_cidr_blocks + ingress_with_cidr_ipv4 = var.ingress_with_cidr_ipv4 # Open to IPv6 cidr blocks - ingress_with_ipv6_cidr_blocks = var.ingress_with_ipv6_cidr_blocks + ingress_with_cidr_ipv6 = var.ingress_with_cidr_ipv6 # Open for security group id - ingress_with_source_security_group_id = var.ingress_with_source_security_group_id + ingress_with_referenced_security_group_id = var.ingress_with_referenced_security_group_id # Open for prefix list id - ingress_with_prefix_list_ids = var.ingress_with_prefix_list_ids + ingress_with_prefix_list_id = var.ingress_with_prefix_list_id # Default ingress CIDR blocks - ingress_cidr_blocks = var.ingress_cidr_blocks - ingress_ipv6_cidr_blocks = var.ingress_ipv6_cidr_blocks + ingress_cidr_ipv4 = var.ingress_cidr_ipv4 + ingress_cidr_ipv6 = var.ingress_cidr_ipv6 # Default prefix list ids ingress_prefix_list_ids = var.ingress_prefix_list_ids @@ -47,26 +47,26 @@ module "sg" { computed_ingress_with_self = concat(var.auto_computed_ingress_with_self, var.computed_ingress_with_self) # Open to IPv4 cidr blocks - computed_ingress_with_cidr_blocks = var.computed_ingress_with_cidr_blocks + computed_ingress_with_cidr_ipv4 = var.computed_ingress_with_cidr_ipv4 # Open to IPv6 cidr blocks - computed_ingress_with_ipv6_cidr_blocks = var.computed_ingress_with_ipv6_cidr_blocks + computed_ingress_with_cidr_ipv6 = var.computed_ingress_with_cidr_ipv6 # Open for security group id - computed_ingress_with_source_security_group_id = var.computed_ingress_with_source_security_group_id + computed_ingress_with_referenced_security_group_id = var.computed_ingress_with_referenced_security_group_id # Open for prefix list id - computed_ingress_with_prefix_list_ids = var.computed_ingress_with_prefix_list_ids + computed_ingress_with_prefix_list_id = var.computed_ingress_with_prefix_list_id ############################# # Number of computed ingress ############################# - number_of_computed_ingress_rules = var.auto_number_of_computed_ingress_rules + var.number_of_computed_ingress_rules - number_of_computed_ingress_with_self = var.auto_number_of_computed_ingress_with_self + var.number_of_computed_ingress_with_self - number_of_computed_ingress_with_cidr_blocks = var.number_of_computed_ingress_with_cidr_blocks - number_of_computed_ingress_with_ipv6_cidr_blocks = var.number_of_computed_ingress_with_ipv6_cidr_blocks - number_of_computed_ingress_with_source_security_group_id = var.number_of_computed_ingress_with_source_security_group_id - number_of_computed_ingress_with_prefix_list_ids = var.number_of_computed_ingress_with_prefix_list_ids + number_of_computed_ingress_rules = var.auto_number_of_computed_ingress_rules + var.number_of_computed_ingress_rules + number_of_computed_ingress_with_self = var.auto_number_of_computed_ingress_with_self + var.number_of_computed_ingress_with_self + number_of_computed_ingress_with_cidr_ipv4 = var.number_of_computed_ingress_with_cidr_ipv4 + number_of_computed_ingress_with_cidr_ipv6 = var.number_of_computed_ingress_with_cidr_ipv6 + number_of_computed_ingress_with_referenced_security_group_id = var.number_of_computed_ingress_with_referenced_security_group_id + number_of_computed_ingress_with_prefix_list_id = var.number_of_computed_ingress_with_prefix_list_id ######### # Egress @@ -78,20 +78,20 @@ module "sg" { egress_with_self = concat(var.auto_egress_with_self, var.egress_with_self) # Open to IPv4 cidr blocks - egress_with_cidr_blocks = var.egress_with_cidr_blocks + egress_with_cidr_ipv4 = var.egress_with_cidr_ipv4 # Open to IPv6 cidr blocks - egress_with_ipv6_cidr_blocks = var.egress_with_ipv6_cidr_blocks + egress_with_cidr_ipv6 = var.egress_with_cidr_ipv6 # Open for security group id - egress_with_source_security_group_id = var.egress_with_source_security_group_id + egress_with_referenced_security_group_id = var.egress_with_referenced_security_group_id # Open for prefix list id - egress_with_prefix_list_ids = var.egress_with_prefix_list_ids + egress_with_prefix_list_id = var.egress_with_prefix_list_id # Default egress CIDR blocks - egress_cidr_blocks = var.egress_cidr_blocks - egress_ipv6_cidr_blocks = var.egress_ipv6_cidr_blocks + egress_cidr_ipv4 = var.egress_cidr_ipv4 + egress_cidr_ipv6 = var.egress_cidr_ipv6 # Default prefix list ids egress_prefix_list_ids = var.egress_prefix_list_ids @@ -106,24 +106,24 @@ module "sg" { computed_egress_with_self = concat(var.auto_computed_egress_with_self, var.computed_egress_with_self) # Open to IPv4 cidr blocks - computed_egress_with_cidr_blocks = var.computed_egress_with_cidr_blocks + computed_egress_with_cidr_ipv4 = var.computed_egress_with_cidr_ipv4 # Open to IPv6 cidr blocks - computed_egress_with_ipv6_cidr_blocks = var.computed_egress_with_ipv6_cidr_blocks + computed_egress_with_cidr_ipv6 = var.computed_egress_with_cidr_ipv6 # Open for security group id - computed_egress_with_source_security_group_id = var.computed_egress_with_source_security_group_id + computed_egress_with_referenced_security_group_id = var.computed_egress_with_referenced_security_group_id # Open for prefix list id - computed_egress_with_prefix_list_ids = var.computed_egress_with_prefix_list_ids + computed_egress_with_prefix_list_id = var.computed_egress_with_prefix_list_id ############################# # Number of computed egress ############################# - number_of_computed_egress_rules = var.auto_number_of_computed_egress_rules + var.number_of_computed_egress_rules - number_of_computed_egress_with_self = var.auto_number_of_computed_egress_with_self + var.number_of_computed_egress_with_self - number_of_computed_egress_with_cidr_blocks = var.number_of_computed_egress_with_cidr_blocks - number_of_computed_egress_with_ipv6_cidr_blocks = var.number_of_computed_egress_with_ipv6_cidr_blocks - number_of_computed_egress_with_source_security_group_id = var.number_of_computed_egress_with_source_security_group_id - number_of_computed_egress_with_prefix_list_ids = var.number_of_computed_egress_with_prefix_list_ids + number_of_computed_egress_rules = var.auto_number_of_computed_egress_rules + var.number_of_computed_egress_rules + number_of_computed_egress_with_self = var.auto_number_of_computed_egress_with_self + var.number_of_computed_egress_with_self + number_of_computed_egress_with_cidr_ipv4 = var.number_of_computed_egress_with_cidr_ipv4 + number_of_computed_egress_with_cidr_ipv6 = var.number_of_computed_egress_with_cidr_ipv6 + number_of_computed_egress_with_referenced_security_group_id = var.number_of_computed_egress_with_referenced_security_group_id + number_of_computed_egress_with_prefix_list_id = var.number_of_computed_egress_with_prefix_list_id } diff --git a/modules/storm/variables.tf b/modules/storm/variables.tf index 60c8c27b..6590c9e3 100644 --- a/modules/storm/variables.tf +++ b/modules/storm/variables.tf @@ -56,37 +56,37 @@ variable "ingress_with_self" { default = [] } -variable "ingress_with_cidr_blocks" { - description = "List of ingress rules to create where 'cidr_blocks' is used" +variable "ingress_with_cidr_ipv4" { + description = "List of ingress rules to create where 'cidr_ipv4' is used" type = list(map(string)) default = [] } -variable "ingress_with_ipv6_cidr_blocks" { +variable "ingress_with_cidr_ipv6" { description = "List of ingress rules to create where 'ipv6_cidr_blocks' is used" type = list(map(string)) default = [] } -variable "ingress_with_source_security_group_id" { +variable "ingress_with_referenced_security_group_id" { description = "List of ingress rules to create where 'source_security_group_id' is used" type = list(map(string)) default = [] } -variable "ingress_with_prefix_list_ids" { - description = "List of ingress rules to create where 'prefix_list_ids' is used" +variable "ingress_with_prefix_list_id" { + description = "List of ingress rules to create where 'prefix_list_id' is used" type = list(map(string)) default = [] } -variable "ingress_cidr_blocks" { +variable "ingress_cidr_ipv4" { description = "List of IPv4 CIDR ranges to use on all ingress rules" type = list(string) default = [] } -variable "ingress_ipv6_cidr_blocks" { +variable "ingress_cidr_ipv6" { description = "List of IPv6 CIDR ranges to use on all ingress rules" type = list(string) default = [] @@ -113,26 +113,26 @@ variable "computed_ingress_with_self" { default = [] } -variable "computed_ingress_with_cidr_blocks" { - description = "List of computed ingress rules to create where 'cidr_blocks' is used" +variable "computed_ingress_with_cidr_ipv4" { + description = "List of computed ingress rules to create where 'cidr_ipv4' is used" type = list(map(string)) default = [] } -variable "computed_ingress_with_ipv6_cidr_blocks" { +variable "computed_ingress_with_cidr_ipv6" { description = "List of computed ingress rules to create where 'ipv6_cidr_blocks' is used" type = list(map(string)) default = [] } -variable "computed_ingress_with_source_security_group_id" { +variable "computed_ingress_with_referenced_security_group_id" { description = "List of computed ingress rules to create where 'source_security_group_id' is used" type = list(map(string)) default = [] } -variable "computed_ingress_with_prefix_list_ids" { - description = "List of computed ingress rules to create where 'prefix_list_ids' is used" +variable "computed_ingress_with_prefix_list_id" { + description = "List of computed ingress rules to create where 'prefix_list_id' is used" type = list(map(string)) default = [] } @@ -170,26 +170,26 @@ variable "number_of_computed_ingress_with_self" { default = 0 } -variable "number_of_computed_ingress_with_cidr_blocks" { - description = "Number of computed ingress rules to create where 'cidr_blocks' is used" +variable "number_of_computed_ingress_with_cidr_ipv4" { + description = "Number of computed ingress rules to create where 'cidr_ipv4' is used" type = number default = 0 } -variable "number_of_computed_ingress_with_ipv6_cidr_blocks" { +variable "number_of_computed_ingress_with_cidr_ipv6" { description = "Number of computed ingress rules to create where 'ipv6_cidr_blocks' is used" type = number default = 0 } -variable "number_of_computed_ingress_with_source_security_group_id" { +variable "number_of_computed_ingress_with_referenced_security_group_id" { description = "Number of computed ingress rules to create where 'source_security_group_id' is used" type = number default = 0 } -variable "number_of_computed_ingress_with_prefix_list_ids" { - description = "Number of computed ingress rules to create where 'prefix_list_ids' is used" +variable "number_of_computed_ingress_with_prefix_list_id" { + description = "Number of computed ingress rules to create where 'prefix_list_id' is used" type = number default = 0 } @@ -227,37 +227,37 @@ variable "egress_with_self" { default = [] } -variable "egress_with_cidr_blocks" { - description = "List of egress rules to create where 'cidr_blocks' is used" +variable "egress_with_cidr_ipv4" { + description = "List of egress rules to create where 'cidr_ipv4' is used" type = list(map(string)) default = [] } -variable "egress_with_ipv6_cidr_blocks" { +variable "egress_with_cidr_ipv6" { description = "List of egress rules to create where 'ipv6_cidr_blocks' is used" type = list(map(string)) default = [] } -variable "egress_with_source_security_group_id" { +variable "egress_with_referenced_security_group_id" { description = "List of egress rules to create where 'source_security_group_id' is used" type = list(map(string)) default = [] } -variable "egress_with_prefix_list_ids" { - description = "List of egress rules to create where 'prefix_list_ids' is used" +variable "egress_with_prefix_list_id" { + description = "List of egress rules to create where 'prefix_list_id' is used" type = list(map(string)) default = [] } -variable "egress_cidr_blocks" { +variable "egress_cidr_ipv4" { description = "List of IPv4 CIDR ranges to use on all egress rules" type = list(string) default = ["0.0.0.0/0"] } -variable "egress_ipv6_cidr_blocks" { +variable "egress_cidr_ipv6" { description = "List of IPv6 CIDR ranges to use on all egress rules" type = list(string) default = ["::/0"] @@ -284,26 +284,26 @@ variable "computed_egress_with_self" { default = [] } -variable "computed_egress_with_cidr_blocks" { - description = "List of computed egress rules to create where 'cidr_blocks' is used" +variable "computed_egress_with_cidr_ipv4" { + description = "List of computed egress rules to create where 'cidr_ipv4' is used" type = list(map(string)) default = [] } -variable "computed_egress_with_ipv6_cidr_blocks" { +variable "computed_egress_with_cidr_ipv6" { description = "List of computed egress rules to create where 'ipv6_cidr_blocks' is used" type = list(map(string)) default = [] } -variable "computed_egress_with_source_security_group_id" { +variable "computed_egress_with_referenced_security_group_id" { description = "List of computed egress rules to create where 'source_security_group_id' is used" type = list(map(string)) default = [] } -variable "computed_egress_with_prefix_list_ids" { - description = "List of computed egress rules to create where 'prefix_list_ids' is used" +variable "computed_egress_with_prefix_list_id" { + description = "List of computed egress rules to create where 'prefix_list_id' is used" type = list(map(string)) default = [] } @@ -341,26 +341,26 @@ variable "number_of_computed_egress_with_self" { default = 0 } -variable "number_of_computed_egress_with_cidr_blocks" { - description = "Number of computed egress rules to create where 'cidr_blocks' is used" +variable "number_of_computed_egress_with_cidr_ipv4" { + description = "Number of computed egress rules to create where 'cidr_ipv4' is used" type = number default = 0 } -variable "number_of_computed_egress_with_ipv6_cidr_blocks" { +variable "number_of_computed_egress_with_cidr_ipv6" { description = "Number of computed egress rules to create where 'ipv6_cidr_blocks' is used" type = number default = 0 } -variable "number_of_computed_egress_with_source_security_group_id" { +variable "number_of_computed_egress_with_referenced_security_group_id" { description = "Number of computed egress rules to create where 'source_security_group_id' is used" type = number default = 0 } -variable "number_of_computed_egress_with_prefix_list_ids" { - description = "Number of computed egress rules to create where 'prefix_list_ids' is used" +variable "number_of_computed_egress_with_prefix_list_id" { + description = "Number of computed egress rules to create where 'prefix_list_id' is used" type = number default = 0 } diff --git a/modules/vault/README.md b/modules/vault/README.md index 02eb8bc8..620780e2 100644 --- a/modules/vault/README.md +++ b/modules/vault/README.md @@ -55,59 +55,59 @@ No resources. | [computed\_egress\_ipv6\_cidr\_blocks](#input\_computed\_egress\_ipv6\_cidr\_blocks) | List of IPv6 CIDR ranges to use on all computed egress rules | `list(string)` |
[
"::/0"
]
| no | | [computed\_egress\_prefix\_list\_ids](#input\_computed\_egress\_prefix\_list\_ids) | List of prefix list IDs (for allowing access to VPC endpoints) to use on all computed egress rules | `list(string)` | `[]` | no | | [computed\_egress\_rules](#input\_computed\_egress\_rules) | List of computed egress rules to create by name | `list(string)` | `[]` | no | -| [computed\_egress\_with\_cidr\_blocks](#input\_computed\_egress\_with\_cidr\_blocks) | List of computed egress rules to create where 'cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [computed\_egress\_with\_ipv6\_cidr\_blocks](#input\_computed\_egress\_with\_ipv6\_cidr\_blocks) | List of computed egress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [computed\_egress\_with\_prefix\_list\_ids](#input\_computed\_egress\_with\_prefix\_list\_ids) | List of computed egress rules to create where 'prefix\_list\_ids' is used | `list(map(string))` | `[]` | no | +| [computed\_egress\_with\_cidr\_ipv4](#input\_computed\_egress\_with\_cidr\_ipv4) | List of computed egress rules to create where 'cidr\_ipv4' is used | `list(map(string))` | `[]` | no | +| [computed\_egress\_with\_cidr\_ipv6](#input\_computed\_egress\_with\_cidr\_ipv6) | List of computed egress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | +| [computed\_egress\_with\_prefix\_list\_id](#input\_computed\_egress\_with\_prefix\_list\_id) | List of computed egress rules to create where 'prefix\_list\_id' is used | `list(map(string))` | `[]` | no | +| [computed\_egress\_with\_referenced\_security\_group\_id](#input\_computed\_egress\_with\_referenced\_security\_group\_id) | List of computed egress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [computed\_egress\_with\_self](#input\_computed\_egress\_with\_self) | List of computed egress rules to create where 'self' is defined | `list(map(string))` | `[]` | no | -| [computed\_egress\_with\_source\_security\_group\_id](#input\_computed\_egress\_with\_source\_security\_group\_id) | List of computed egress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [computed\_ingress\_cidr\_blocks](#input\_computed\_ingress\_cidr\_blocks) | List of IPv4 CIDR ranges to use on all computed ingress rules | `list(string)` | `[]` | no | | [computed\_ingress\_ipv6\_cidr\_blocks](#input\_computed\_ingress\_ipv6\_cidr\_blocks) | List of IPv6 CIDR ranges to use on all computed ingress rules | `list(string)` | `[]` | no | | [computed\_ingress\_prefix\_list\_ids](#input\_computed\_ingress\_prefix\_list\_ids) | List of prefix list IDs (for allowing access to VPC endpoints) to use on all computed ingress rules | `list(string)` | `[]` | no | | [computed\_ingress\_rules](#input\_computed\_ingress\_rules) | List of computed ingress rules to create by name | `list(string)` | `[]` | no | -| [computed\_ingress\_with\_cidr\_blocks](#input\_computed\_ingress\_with\_cidr\_blocks) | List of computed ingress rules to create where 'cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [computed\_ingress\_with\_ipv6\_cidr\_blocks](#input\_computed\_ingress\_with\_ipv6\_cidr\_blocks) | List of computed ingress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [computed\_ingress\_with\_prefix\_list\_ids](#input\_computed\_ingress\_with\_prefix\_list\_ids) | List of computed ingress rules to create where 'prefix\_list\_ids' is used | `list(map(string))` | `[]` | no | +| [computed\_ingress\_with\_cidr\_ipv4](#input\_computed\_ingress\_with\_cidr\_ipv4) | List of computed ingress rules to create where 'cidr\_ipv4' is used | `list(map(string))` | `[]` | no | +| [computed\_ingress\_with\_cidr\_ipv6](#input\_computed\_ingress\_with\_cidr\_ipv6) | List of computed ingress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | +| [computed\_ingress\_with\_prefix\_list\_id](#input\_computed\_ingress\_with\_prefix\_list\_id) | List of computed ingress rules to create where 'prefix\_list\_id' is used | `list(map(string))` | `[]` | no | +| [computed\_ingress\_with\_referenced\_security\_group\_id](#input\_computed\_ingress\_with\_referenced\_security\_group\_id) | List of computed ingress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [computed\_ingress\_with\_self](#input\_computed\_ingress\_with\_self) | List of computed ingress rules to create where 'self' is defined | `list(map(string))` | `[]` | no | -| [computed\_ingress\_with\_source\_security\_group\_id](#input\_computed\_ingress\_with\_source\_security\_group\_id) | List of computed ingress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [create](#input\_create) | Whether to create security group and all rules | `bool` | `true` | no | | [description](#input\_description) | Description of security group | `string` | `"Security Group managed by Terraform"` | no | -| [egress\_cidr\_blocks](#input\_egress\_cidr\_blocks) | List of IPv4 CIDR ranges to use on all egress rules | `list(string)` |
[
"0.0.0.0/0"
]
| no | -| [egress\_ipv6\_cidr\_blocks](#input\_egress\_ipv6\_cidr\_blocks) | List of IPv6 CIDR ranges to use on all egress rules | `list(string)` |
[
"::/0"
]
| no | +| [egress\_cidr\_ipv4](#input\_egress\_cidr\_ipv4) | List of IPv4 CIDR ranges to use on all egress rules | `list(string)` |
[
"0.0.0.0/0"
]
| no | +| [egress\_cidr\_ipv6](#input\_egress\_cidr\_ipv6) | List of IPv6 CIDR ranges to use on all egress rules | `list(string)` |
[
"::/0"
]
| no | | [egress\_prefix\_list\_ids](#input\_egress\_prefix\_list\_ids) | List of prefix list IDs (for allowing access to VPC endpoints) to use on all egress rules | `list(string)` | `[]` | no | | [egress\_rules](#input\_egress\_rules) | List of egress rules to create by name | `list(string)` | `[]` | no | -| [egress\_with\_cidr\_blocks](#input\_egress\_with\_cidr\_blocks) | List of egress rules to create where 'cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [egress\_with\_ipv6\_cidr\_blocks](#input\_egress\_with\_ipv6\_cidr\_blocks) | List of egress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [egress\_with\_prefix\_list\_ids](#input\_egress\_with\_prefix\_list\_ids) | List of egress rules to create where 'prefix\_list\_ids' is used | `list(map(string))` | `[]` | no | +| [egress\_with\_cidr\_ipv4](#input\_egress\_with\_cidr\_ipv4) | List of egress rules to create where 'cidr\_ipv4' is used | `list(map(string))` | `[]` | no | +| [egress\_with\_cidr\_ipv6](#input\_egress\_with\_cidr\_ipv6) | List of egress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | +| [egress\_with\_prefix\_list\_id](#input\_egress\_with\_prefix\_list\_id) | List of egress rules to create where 'prefix\_list\_id' is used | `list(map(string))` | `[]` | no | +| [egress\_with\_referenced\_security\_group\_id](#input\_egress\_with\_referenced\_security\_group\_id) | List of egress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [egress\_with\_self](#input\_egress\_with\_self) | List of egress rules to create where 'self' is defined | `list(map(string))` | `[]` | no | -| [egress\_with\_source\_security\_group\_id](#input\_egress\_with\_source\_security\_group\_id) | List of egress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | -| [ingress\_cidr\_blocks](#input\_ingress\_cidr\_blocks) | List of IPv4 CIDR ranges to use on all ingress rules | `list(string)` | `[]` | no | -| [ingress\_ipv6\_cidr\_blocks](#input\_ingress\_ipv6\_cidr\_blocks) | List of IPv6 CIDR ranges to use on all ingress rules | `list(string)` | `[]` | no | +| [ingress\_cidr\_ipv4](#input\_ingress\_cidr\_ipv4) | List of IPv4 CIDR ranges to use on all ingress rules | `list(string)` | `[]` | no | +| [ingress\_cidr\_ipv6](#input\_ingress\_cidr\_ipv6) | List of IPv6 CIDR ranges to use on all ingress rules | `list(string)` | `[]` | no | | [ingress\_prefix\_list\_ids](#input\_ingress\_prefix\_list\_ids) | List of prefix list IDs (for allowing access to VPC endpoints) to use on all ingress rules | `list(string)` | `[]` | no | | [ingress\_rules](#input\_ingress\_rules) | List of ingress rules to create by name | `list(string)` | `[]` | no | -| [ingress\_with\_cidr\_blocks](#input\_ingress\_with\_cidr\_blocks) | List of ingress rules to create where 'cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [ingress\_with\_ipv6\_cidr\_blocks](#input\_ingress\_with\_ipv6\_cidr\_blocks) | List of ingress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [ingress\_with\_prefix\_list\_ids](#input\_ingress\_with\_prefix\_list\_ids) | List of ingress rules to create where 'prefix\_list\_ids' is used | `list(map(string))` | `[]` | no | +| [ingress\_with\_cidr\_ipv4](#input\_ingress\_with\_cidr\_ipv4) | List of ingress rules to create where 'cidr\_ipv4' is used | `list(map(string))` | `[]` | no | +| [ingress\_with\_cidr\_ipv6](#input\_ingress\_with\_cidr\_ipv6) | List of ingress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | +| [ingress\_with\_prefix\_list\_id](#input\_ingress\_with\_prefix\_list\_id) | List of ingress rules to create where 'prefix\_list\_id' is used | `list(map(string))` | `[]` | no | +| [ingress\_with\_referenced\_security\_group\_id](#input\_ingress\_with\_referenced\_security\_group\_id) | List of ingress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [ingress\_with\_self](#input\_ingress\_with\_self) | List of ingress rules to create where 'self' is defined | `list(map(string))` | `[]` | no | -| [ingress\_with\_source\_security\_group\_id](#input\_ingress\_with\_source\_security\_group\_id) | List of ingress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [name](#input\_name) | Name of security group | `string` | n/a | yes | | [number\_of\_computed\_egress\_cidr\_blocks](#input\_number\_of\_computed\_egress\_cidr\_blocks) | Number of IPv4 CIDR ranges to use on all computed egress rules | `number` | `0` | no | | [number\_of\_computed\_egress\_ipv6\_cidr\_blocks](#input\_number\_of\_computed\_egress\_ipv6\_cidr\_blocks) | Number of IPv6 CIDR ranges to use on all computed egress rules | `number` | `0` | no | | [number\_of\_computed\_egress\_prefix\_list\_ids](#input\_number\_of\_computed\_egress\_prefix\_list\_ids) | Number of prefix list IDs (for allowing access to VPC endpoints) to use on all computed egress rules | `number` | `0` | no | | [number\_of\_computed\_egress\_rules](#input\_number\_of\_computed\_egress\_rules) | Number of computed egress rules to create by name | `number` | `0` | no | -| [number\_of\_computed\_egress\_with\_cidr\_blocks](#input\_number\_of\_computed\_egress\_with\_cidr\_blocks) | Number of computed egress rules to create where 'cidr\_blocks' is used | `number` | `0` | no | -| [number\_of\_computed\_egress\_with\_ipv6\_cidr\_blocks](#input\_number\_of\_computed\_egress\_with\_ipv6\_cidr\_blocks) | Number of computed egress rules to create where 'ipv6\_cidr\_blocks' is used | `number` | `0` | no | -| [number\_of\_computed\_egress\_with\_prefix\_list\_ids](#input\_number\_of\_computed\_egress\_with\_prefix\_list\_ids) | Number of computed egress rules to create where 'prefix\_list\_ids' is used | `number` | `0` | no | +| [number\_of\_computed\_egress\_with\_cidr\_ipv4](#input\_number\_of\_computed\_egress\_with\_cidr\_ipv4) | Number of computed egress rules to create where 'cidr\_ipv4' is used | `number` | `0` | no | +| [number\_of\_computed\_egress\_with\_cidr\_ipv6](#input\_number\_of\_computed\_egress\_with\_cidr\_ipv6) | Number of computed egress rules to create where 'ipv6\_cidr\_blocks' is used | `number` | `0` | no | +| [number\_of\_computed\_egress\_with\_prefix\_list\_id](#input\_number\_of\_computed\_egress\_with\_prefix\_list\_id) | Number of computed egress rules to create where 'prefix\_list\_id' is used | `number` | `0` | no | +| [number\_of\_computed\_egress\_with\_referenced\_security\_group\_id](#input\_number\_of\_computed\_egress\_with\_referenced\_security\_group\_id) | Number of computed egress rules to create where 'source\_security\_group\_id' is used | `number` | `0` | no | | [number\_of\_computed\_egress\_with\_self](#input\_number\_of\_computed\_egress\_with\_self) | Number of computed egress rules to create where 'self' is defined | `number` | `0` | no | -| [number\_of\_computed\_egress\_with\_source\_security\_group\_id](#input\_number\_of\_computed\_egress\_with\_source\_security\_group\_id) | Number of computed egress rules to create where 'source\_security\_group\_id' is used | `number` | `0` | no | | [number\_of\_computed\_ingress\_cidr\_blocks](#input\_number\_of\_computed\_ingress\_cidr\_blocks) | Number of IPv4 CIDR ranges to use on all computed ingress rules | `number` | `0` | no | | [number\_of\_computed\_ingress\_ipv6\_cidr\_blocks](#input\_number\_of\_computed\_ingress\_ipv6\_cidr\_blocks) | Number of IPv6 CIDR ranges to use on all computed ingress rules | `number` | `0` | no | | [number\_of\_computed\_ingress\_prefix\_list\_ids](#input\_number\_of\_computed\_ingress\_prefix\_list\_ids) | Number of prefix list IDs (for allowing access to VPC endpoints) to use on all computed ingress rules | `number` | `0` | no | | [number\_of\_computed\_ingress\_rules](#input\_number\_of\_computed\_ingress\_rules) | Number of computed ingress rules to create by name | `number` | `0` | no | -| [number\_of\_computed\_ingress\_with\_cidr\_blocks](#input\_number\_of\_computed\_ingress\_with\_cidr\_blocks) | Number of computed ingress rules to create where 'cidr\_blocks' is used | `number` | `0` | no | -| [number\_of\_computed\_ingress\_with\_ipv6\_cidr\_blocks](#input\_number\_of\_computed\_ingress\_with\_ipv6\_cidr\_blocks) | Number of computed ingress rules to create where 'ipv6\_cidr\_blocks' is used | `number` | `0` | no | -| [number\_of\_computed\_ingress\_with\_prefix\_list\_ids](#input\_number\_of\_computed\_ingress\_with\_prefix\_list\_ids) | Number of computed ingress rules to create where 'prefix\_list\_ids' is used | `number` | `0` | no | +| [number\_of\_computed\_ingress\_with\_cidr\_ipv4](#input\_number\_of\_computed\_ingress\_with\_cidr\_ipv4) | Number of computed ingress rules to create where 'cidr\_ipv4' is used | `number` | `0` | no | +| [number\_of\_computed\_ingress\_with\_cidr\_ipv6](#input\_number\_of\_computed\_ingress\_with\_cidr\_ipv6) | Number of computed ingress rules to create where 'ipv6\_cidr\_blocks' is used | `number` | `0` | no | +| [number\_of\_computed\_ingress\_with\_prefix\_list\_id](#input\_number\_of\_computed\_ingress\_with\_prefix\_list\_id) | Number of computed ingress rules to create where 'prefix\_list\_id' is used | `number` | `0` | no | +| [number\_of\_computed\_ingress\_with\_referenced\_security\_group\_id](#input\_number\_of\_computed\_ingress\_with\_referenced\_security\_group\_id) | Number of computed ingress rules to create where 'source\_security\_group\_id' is used | `number` | `0` | no | | [number\_of\_computed\_ingress\_with\_self](#input\_number\_of\_computed\_ingress\_with\_self) | Number of computed ingress rules to create where 'self' is defined | `number` | `0` | no | -| [number\_of\_computed\_ingress\_with\_source\_security\_group\_id](#input\_number\_of\_computed\_ingress\_with\_source\_security\_group\_id) | Number of computed ingress rules to create where 'source\_security\_group\_id' is used | `number` | `0` | no | | [revoke\_rules\_on\_delete](#input\_revoke\_rules\_on\_delete) | Instruct Terraform to revoke all of the Security Groups attached ingress and egress rules before deleting the rule itself. Enable for EMR. | `bool` | `false` | no | | [tags](#input\_tags) | A mapping of tags to assign to security group | `map(string)` | `{}` | no | | [use\_name\_prefix](#input\_use\_name\_prefix) | Whether to use name\_prefix or fixed name. Should be true to able to update security group name after initial creation | `bool` | `true` | no | diff --git a/modules/vault/main.tf b/modules/vault/main.tf index 80ea0adb..d2a1bf93 100644 --- a/modules/vault/main.tf +++ b/modules/vault/main.tf @@ -19,20 +19,20 @@ module "sg" { ingress_with_self = concat(var.auto_ingress_with_self, var.ingress_with_self) # Open to IPv4 cidr blocks - ingress_with_cidr_blocks = var.ingress_with_cidr_blocks + ingress_with_cidr_ipv4 = var.ingress_with_cidr_ipv4 # Open to IPv6 cidr blocks - ingress_with_ipv6_cidr_blocks = var.ingress_with_ipv6_cidr_blocks + ingress_with_cidr_ipv6 = var.ingress_with_cidr_ipv6 # Open for security group id - ingress_with_source_security_group_id = var.ingress_with_source_security_group_id + ingress_with_referenced_security_group_id = var.ingress_with_referenced_security_group_id # Open for prefix list id - ingress_with_prefix_list_ids = var.ingress_with_prefix_list_ids + ingress_with_prefix_list_id = var.ingress_with_prefix_list_id # Default ingress CIDR blocks - ingress_cidr_blocks = var.ingress_cidr_blocks - ingress_ipv6_cidr_blocks = var.ingress_ipv6_cidr_blocks + ingress_cidr_ipv4 = var.ingress_cidr_ipv4 + ingress_cidr_ipv6 = var.ingress_cidr_ipv6 # Default prefix list ids ingress_prefix_list_ids = var.ingress_prefix_list_ids @@ -47,26 +47,26 @@ module "sg" { computed_ingress_with_self = concat(var.auto_computed_ingress_with_self, var.computed_ingress_with_self) # Open to IPv4 cidr blocks - computed_ingress_with_cidr_blocks = var.computed_ingress_with_cidr_blocks + computed_ingress_with_cidr_ipv4 = var.computed_ingress_with_cidr_ipv4 # Open to IPv6 cidr blocks - computed_ingress_with_ipv6_cidr_blocks = var.computed_ingress_with_ipv6_cidr_blocks + computed_ingress_with_cidr_ipv6 = var.computed_ingress_with_cidr_ipv6 # Open for security group id - computed_ingress_with_source_security_group_id = var.computed_ingress_with_source_security_group_id + computed_ingress_with_referenced_security_group_id = var.computed_ingress_with_referenced_security_group_id # Open for prefix list id - computed_ingress_with_prefix_list_ids = var.computed_ingress_with_prefix_list_ids + computed_ingress_with_prefix_list_id = var.computed_ingress_with_prefix_list_id ############################# # Number of computed ingress ############################# - number_of_computed_ingress_rules = var.auto_number_of_computed_ingress_rules + var.number_of_computed_ingress_rules - number_of_computed_ingress_with_self = var.auto_number_of_computed_ingress_with_self + var.number_of_computed_ingress_with_self - number_of_computed_ingress_with_cidr_blocks = var.number_of_computed_ingress_with_cidr_blocks - number_of_computed_ingress_with_ipv6_cidr_blocks = var.number_of_computed_ingress_with_ipv6_cidr_blocks - number_of_computed_ingress_with_source_security_group_id = var.number_of_computed_ingress_with_source_security_group_id - number_of_computed_ingress_with_prefix_list_ids = var.number_of_computed_ingress_with_prefix_list_ids + number_of_computed_ingress_rules = var.auto_number_of_computed_ingress_rules + var.number_of_computed_ingress_rules + number_of_computed_ingress_with_self = var.auto_number_of_computed_ingress_with_self + var.number_of_computed_ingress_with_self + number_of_computed_ingress_with_cidr_ipv4 = var.number_of_computed_ingress_with_cidr_ipv4 + number_of_computed_ingress_with_cidr_ipv6 = var.number_of_computed_ingress_with_cidr_ipv6 + number_of_computed_ingress_with_referenced_security_group_id = var.number_of_computed_ingress_with_referenced_security_group_id + number_of_computed_ingress_with_prefix_list_id = var.number_of_computed_ingress_with_prefix_list_id ######### # Egress @@ -78,20 +78,20 @@ module "sg" { egress_with_self = concat(var.auto_egress_with_self, var.egress_with_self) # Open to IPv4 cidr blocks - egress_with_cidr_blocks = var.egress_with_cidr_blocks + egress_with_cidr_ipv4 = var.egress_with_cidr_ipv4 # Open to IPv6 cidr blocks - egress_with_ipv6_cidr_blocks = var.egress_with_ipv6_cidr_blocks + egress_with_cidr_ipv6 = var.egress_with_cidr_ipv6 # Open for security group id - egress_with_source_security_group_id = var.egress_with_source_security_group_id + egress_with_referenced_security_group_id = var.egress_with_referenced_security_group_id # Open for prefix list id - egress_with_prefix_list_ids = var.egress_with_prefix_list_ids + egress_with_prefix_list_id = var.egress_with_prefix_list_id # Default egress CIDR blocks - egress_cidr_blocks = var.egress_cidr_blocks - egress_ipv6_cidr_blocks = var.egress_ipv6_cidr_blocks + egress_cidr_ipv4 = var.egress_cidr_ipv4 + egress_cidr_ipv6 = var.egress_cidr_ipv6 # Default prefix list ids egress_prefix_list_ids = var.egress_prefix_list_ids @@ -106,24 +106,24 @@ module "sg" { computed_egress_with_self = concat(var.auto_computed_egress_with_self, var.computed_egress_with_self) # Open to IPv4 cidr blocks - computed_egress_with_cidr_blocks = var.computed_egress_with_cidr_blocks + computed_egress_with_cidr_ipv4 = var.computed_egress_with_cidr_ipv4 # Open to IPv6 cidr blocks - computed_egress_with_ipv6_cidr_blocks = var.computed_egress_with_ipv6_cidr_blocks + computed_egress_with_cidr_ipv6 = var.computed_egress_with_cidr_ipv6 # Open for security group id - computed_egress_with_source_security_group_id = var.computed_egress_with_source_security_group_id + computed_egress_with_referenced_security_group_id = var.computed_egress_with_referenced_security_group_id # Open for prefix list id - computed_egress_with_prefix_list_ids = var.computed_egress_with_prefix_list_ids + computed_egress_with_prefix_list_id = var.computed_egress_with_prefix_list_id ############################# # Number of computed egress ############################# - number_of_computed_egress_rules = var.auto_number_of_computed_egress_rules + var.number_of_computed_egress_rules - number_of_computed_egress_with_self = var.auto_number_of_computed_egress_with_self + var.number_of_computed_egress_with_self - number_of_computed_egress_with_cidr_blocks = var.number_of_computed_egress_with_cidr_blocks - number_of_computed_egress_with_ipv6_cidr_blocks = var.number_of_computed_egress_with_ipv6_cidr_blocks - number_of_computed_egress_with_source_security_group_id = var.number_of_computed_egress_with_source_security_group_id - number_of_computed_egress_with_prefix_list_ids = var.number_of_computed_egress_with_prefix_list_ids + number_of_computed_egress_rules = var.auto_number_of_computed_egress_rules + var.number_of_computed_egress_rules + number_of_computed_egress_with_self = var.auto_number_of_computed_egress_with_self + var.number_of_computed_egress_with_self + number_of_computed_egress_with_cidr_ipv4 = var.number_of_computed_egress_with_cidr_ipv4 + number_of_computed_egress_with_cidr_ipv6 = var.number_of_computed_egress_with_cidr_ipv6 + number_of_computed_egress_with_referenced_security_group_id = var.number_of_computed_egress_with_referenced_security_group_id + number_of_computed_egress_with_prefix_list_id = var.number_of_computed_egress_with_prefix_list_id } diff --git a/modules/vault/variables.tf b/modules/vault/variables.tf index 60c8c27b..6590c9e3 100644 --- a/modules/vault/variables.tf +++ b/modules/vault/variables.tf @@ -56,37 +56,37 @@ variable "ingress_with_self" { default = [] } -variable "ingress_with_cidr_blocks" { - description = "List of ingress rules to create where 'cidr_blocks' is used" +variable "ingress_with_cidr_ipv4" { + description = "List of ingress rules to create where 'cidr_ipv4' is used" type = list(map(string)) default = [] } -variable "ingress_with_ipv6_cidr_blocks" { +variable "ingress_with_cidr_ipv6" { description = "List of ingress rules to create where 'ipv6_cidr_blocks' is used" type = list(map(string)) default = [] } -variable "ingress_with_source_security_group_id" { +variable "ingress_with_referenced_security_group_id" { description = "List of ingress rules to create where 'source_security_group_id' is used" type = list(map(string)) default = [] } -variable "ingress_with_prefix_list_ids" { - description = "List of ingress rules to create where 'prefix_list_ids' is used" +variable "ingress_with_prefix_list_id" { + description = "List of ingress rules to create where 'prefix_list_id' is used" type = list(map(string)) default = [] } -variable "ingress_cidr_blocks" { +variable "ingress_cidr_ipv4" { description = "List of IPv4 CIDR ranges to use on all ingress rules" type = list(string) default = [] } -variable "ingress_ipv6_cidr_blocks" { +variable "ingress_cidr_ipv6" { description = "List of IPv6 CIDR ranges to use on all ingress rules" type = list(string) default = [] @@ -113,26 +113,26 @@ variable "computed_ingress_with_self" { default = [] } -variable "computed_ingress_with_cidr_blocks" { - description = "List of computed ingress rules to create where 'cidr_blocks' is used" +variable "computed_ingress_with_cidr_ipv4" { + description = "List of computed ingress rules to create where 'cidr_ipv4' is used" type = list(map(string)) default = [] } -variable "computed_ingress_with_ipv6_cidr_blocks" { +variable "computed_ingress_with_cidr_ipv6" { description = "List of computed ingress rules to create where 'ipv6_cidr_blocks' is used" type = list(map(string)) default = [] } -variable "computed_ingress_with_source_security_group_id" { +variable "computed_ingress_with_referenced_security_group_id" { description = "List of computed ingress rules to create where 'source_security_group_id' is used" type = list(map(string)) default = [] } -variable "computed_ingress_with_prefix_list_ids" { - description = "List of computed ingress rules to create where 'prefix_list_ids' is used" +variable "computed_ingress_with_prefix_list_id" { + description = "List of computed ingress rules to create where 'prefix_list_id' is used" type = list(map(string)) default = [] } @@ -170,26 +170,26 @@ variable "number_of_computed_ingress_with_self" { default = 0 } -variable "number_of_computed_ingress_with_cidr_blocks" { - description = "Number of computed ingress rules to create where 'cidr_blocks' is used" +variable "number_of_computed_ingress_with_cidr_ipv4" { + description = "Number of computed ingress rules to create where 'cidr_ipv4' is used" type = number default = 0 } -variable "number_of_computed_ingress_with_ipv6_cidr_blocks" { +variable "number_of_computed_ingress_with_cidr_ipv6" { description = "Number of computed ingress rules to create where 'ipv6_cidr_blocks' is used" type = number default = 0 } -variable "number_of_computed_ingress_with_source_security_group_id" { +variable "number_of_computed_ingress_with_referenced_security_group_id" { description = "Number of computed ingress rules to create where 'source_security_group_id' is used" type = number default = 0 } -variable "number_of_computed_ingress_with_prefix_list_ids" { - description = "Number of computed ingress rules to create where 'prefix_list_ids' is used" +variable "number_of_computed_ingress_with_prefix_list_id" { + description = "Number of computed ingress rules to create where 'prefix_list_id' is used" type = number default = 0 } @@ -227,37 +227,37 @@ variable "egress_with_self" { default = [] } -variable "egress_with_cidr_blocks" { - description = "List of egress rules to create where 'cidr_blocks' is used" +variable "egress_with_cidr_ipv4" { + description = "List of egress rules to create where 'cidr_ipv4' is used" type = list(map(string)) default = [] } -variable "egress_with_ipv6_cidr_blocks" { +variable "egress_with_cidr_ipv6" { description = "List of egress rules to create where 'ipv6_cidr_blocks' is used" type = list(map(string)) default = [] } -variable "egress_with_source_security_group_id" { +variable "egress_with_referenced_security_group_id" { description = "List of egress rules to create where 'source_security_group_id' is used" type = list(map(string)) default = [] } -variable "egress_with_prefix_list_ids" { - description = "List of egress rules to create where 'prefix_list_ids' is used" +variable "egress_with_prefix_list_id" { + description = "List of egress rules to create where 'prefix_list_id' is used" type = list(map(string)) default = [] } -variable "egress_cidr_blocks" { +variable "egress_cidr_ipv4" { description = "List of IPv4 CIDR ranges to use on all egress rules" type = list(string) default = ["0.0.0.0/0"] } -variable "egress_ipv6_cidr_blocks" { +variable "egress_cidr_ipv6" { description = "List of IPv6 CIDR ranges to use on all egress rules" type = list(string) default = ["::/0"] @@ -284,26 +284,26 @@ variable "computed_egress_with_self" { default = [] } -variable "computed_egress_with_cidr_blocks" { - description = "List of computed egress rules to create where 'cidr_blocks' is used" +variable "computed_egress_with_cidr_ipv4" { + description = "List of computed egress rules to create where 'cidr_ipv4' is used" type = list(map(string)) default = [] } -variable "computed_egress_with_ipv6_cidr_blocks" { +variable "computed_egress_with_cidr_ipv6" { description = "List of computed egress rules to create where 'ipv6_cidr_blocks' is used" type = list(map(string)) default = [] } -variable "computed_egress_with_source_security_group_id" { +variable "computed_egress_with_referenced_security_group_id" { description = "List of computed egress rules to create where 'source_security_group_id' is used" type = list(map(string)) default = [] } -variable "computed_egress_with_prefix_list_ids" { - description = "List of computed egress rules to create where 'prefix_list_ids' is used" +variable "computed_egress_with_prefix_list_id" { + description = "List of computed egress rules to create where 'prefix_list_id' is used" type = list(map(string)) default = [] } @@ -341,26 +341,26 @@ variable "number_of_computed_egress_with_self" { default = 0 } -variable "number_of_computed_egress_with_cidr_blocks" { - description = "Number of computed egress rules to create where 'cidr_blocks' is used" +variable "number_of_computed_egress_with_cidr_ipv4" { + description = "Number of computed egress rules to create where 'cidr_ipv4' is used" type = number default = 0 } -variable "number_of_computed_egress_with_ipv6_cidr_blocks" { +variable "number_of_computed_egress_with_cidr_ipv6" { description = "Number of computed egress rules to create where 'ipv6_cidr_blocks' is used" type = number default = 0 } -variable "number_of_computed_egress_with_source_security_group_id" { +variable "number_of_computed_egress_with_referenced_security_group_id" { description = "Number of computed egress rules to create where 'source_security_group_id' is used" type = number default = 0 } -variable "number_of_computed_egress_with_prefix_list_ids" { - description = "Number of computed egress rules to create where 'prefix_list_ids' is used" +variable "number_of_computed_egress_with_prefix_list_id" { + description = "Number of computed egress rules to create where 'prefix_list_id' is used" type = number default = 0 } diff --git a/modules/wazuh/README.md b/modules/wazuh/README.md index 26ce4bb5..3bbd94b8 100644 --- a/modules/wazuh/README.md +++ b/modules/wazuh/README.md @@ -55,59 +55,59 @@ No resources. | [computed\_egress\_ipv6\_cidr\_blocks](#input\_computed\_egress\_ipv6\_cidr\_blocks) | List of IPv6 CIDR ranges to use on all computed egress rules | `list(string)` |
[
"::/0"
]
| no | | [computed\_egress\_prefix\_list\_ids](#input\_computed\_egress\_prefix\_list\_ids) | List of prefix list IDs (for allowing access to VPC endpoints) to use on all computed egress rules | `list(string)` | `[]` | no | | [computed\_egress\_rules](#input\_computed\_egress\_rules) | List of computed egress rules to create by name | `list(string)` | `[]` | no | -| [computed\_egress\_with\_cidr\_blocks](#input\_computed\_egress\_with\_cidr\_blocks) | List of computed egress rules to create where 'cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [computed\_egress\_with\_ipv6\_cidr\_blocks](#input\_computed\_egress\_with\_ipv6\_cidr\_blocks) | List of computed egress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [computed\_egress\_with\_prefix\_list\_ids](#input\_computed\_egress\_with\_prefix\_list\_ids) | List of computed egress rules to create where 'prefix\_list\_ids' is used | `list(map(string))` | `[]` | no | +| [computed\_egress\_with\_cidr\_ipv4](#input\_computed\_egress\_with\_cidr\_ipv4) | List of computed egress rules to create where 'cidr\_ipv4' is used | `list(map(string))` | `[]` | no | +| [computed\_egress\_with\_cidr\_ipv6](#input\_computed\_egress\_with\_cidr\_ipv6) | List of computed egress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | +| [computed\_egress\_with\_prefix\_list\_id](#input\_computed\_egress\_with\_prefix\_list\_id) | List of computed egress rules to create where 'prefix\_list\_id' is used | `list(map(string))` | `[]` | no | +| [computed\_egress\_with\_referenced\_security\_group\_id](#input\_computed\_egress\_with\_referenced\_security\_group\_id) | List of computed egress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [computed\_egress\_with\_self](#input\_computed\_egress\_with\_self) | List of computed egress rules to create where 'self' is defined | `list(map(string))` | `[]` | no | -| [computed\_egress\_with\_source\_security\_group\_id](#input\_computed\_egress\_with\_source\_security\_group\_id) | List of computed egress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [computed\_ingress\_cidr\_blocks](#input\_computed\_ingress\_cidr\_blocks) | List of IPv4 CIDR ranges to use on all computed ingress rules | `list(string)` | `[]` | no | | [computed\_ingress\_ipv6\_cidr\_blocks](#input\_computed\_ingress\_ipv6\_cidr\_blocks) | List of IPv6 CIDR ranges to use on all computed ingress rules | `list(string)` | `[]` | no | | [computed\_ingress\_prefix\_list\_ids](#input\_computed\_ingress\_prefix\_list\_ids) | List of prefix list IDs (for allowing access to VPC endpoints) to use on all computed ingress rules | `list(string)` | `[]` | no | | [computed\_ingress\_rules](#input\_computed\_ingress\_rules) | List of computed ingress rules to create by name | `list(string)` | `[]` | no | -| [computed\_ingress\_with\_cidr\_blocks](#input\_computed\_ingress\_with\_cidr\_blocks) | List of computed ingress rules to create where 'cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [computed\_ingress\_with\_ipv6\_cidr\_blocks](#input\_computed\_ingress\_with\_ipv6\_cidr\_blocks) | List of computed ingress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [computed\_ingress\_with\_prefix\_list\_ids](#input\_computed\_ingress\_with\_prefix\_list\_ids) | List of computed ingress rules to create where 'prefix\_list\_ids' is used | `list(map(string))` | `[]` | no | +| [computed\_ingress\_with\_cidr\_ipv4](#input\_computed\_ingress\_with\_cidr\_ipv4) | List of computed ingress rules to create where 'cidr\_ipv4' is used | `list(map(string))` | `[]` | no | +| [computed\_ingress\_with\_cidr\_ipv6](#input\_computed\_ingress\_with\_cidr\_ipv6) | List of computed ingress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | +| [computed\_ingress\_with\_prefix\_list\_id](#input\_computed\_ingress\_with\_prefix\_list\_id) | List of computed ingress rules to create where 'prefix\_list\_id' is used | `list(map(string))` | `[]` | no | +| [computed\_ingress\_with\_referenced\_security\_group\_id](#input\_computed\_ingress\_with\_referenced\_security\_group\_id) | List of computed ingress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [computed\_ingress\_with\_self](#input\_computed\_ingress\_with\_self) | List of computed ingress rules to create where 'self' is defined | `list(map(string))` | `[]` | no | -| [computed\_ingress\_with\_source\_security\_group\_id](#input\_computed\_ingress\_with\_source\_security\_group\_id) | List of computed ingress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [create](#input\_create) | Whether to create security group and all rules | `bool` | `true` | no | | [description](#input\_description) | Description of security group | `string` | `"Security Group managed by Terraform"` | no | -| [egress\_cidr\_blocks](#input\_egress\_cidr\_blocks) | List of IPv4 CIDR ranges to use on all egress rules | `list(string)` |
[
"0.0.0.0/0"
]
| no | -| [egress\_ipv6\_cidr\_blocks](#input\_egress\_ipv6\_cidr\_blocks) | List of IPv6 CIDR ranges to use on all egress rules | `list(string)` |
[
"::/0"
]
| no | +| [egress\_cidr\_ipv4](#input\_egress\_cidr\_ipv4) | List of IPv4 CIDR ranges to use on all egress rules | `list(string)` |
[
"0.0.0.0/0"
]
| no | +| [egress\_cidr\_ipv6](#input\_egress\_cidr\_ipv6) | List of IPv6 CIDR ranges to use on all egress rules | `list(string)` |
[
"::/0"
]
| no | | [egress\_prefix\_list\_ids](#input\_egress\_prefix\_list\_ids) | List of prefix list IDs (for allowing access to VPC endpoints) to use on all egress rules | `list(string)` | `[]` | no | | [egress\_rules](#input\_egress\_rules) | List of egress rules to create by name | `list(string)` | `[]` | no | -| [egress\_with\_cidr\_blocks](#input\_egress\_with\_cidr\_blocks) | List of egress rules to create where 'cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [egress\_with\_ipv6\_cidr\_blocks](#input\_egress\_with\_ipv6\_cidr\_blocks) | List of egress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [egress\_with\_prefix\_list\_ids](#input\_egress\_with\_prefix\_list\_ids) | List of egress rules to create where 'prefix\_list\_ids' is used | `list(map(string))` | `[]` | no | +| [egress\_with\_cidr\_ipv4](#input\_egress\_with\_cidr\_ipv4) | List of egress rules to create where 'cidr\_ipv4' is used | `list(map(string))` | `[]` | no | +| [egress\_with\_cidr\_ipv6](#input\_egress\_with\_cidr\_ipv6) | List of egress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | +| [egress\_with\_prefix\_list\_id](#input\_egress\_with\_prefix\_list\_id) | List of egress rules to create where 'prefix\_list\_id' is used | `list(map(string))` | `[]` | no | +| [egress\_with\_referenced\_security\_group\_id](#input\_egress\_with\_referenced\_security\_group\_id) | List of egress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [egress\_with\_self](#input\_egress\_with\_self) | List of egress rules to create where 'self' is defined | `list(map(string))` | `[]` | no | -| [egress\_with\_source\_security\_group\_id](#input\_egress\_with\_source\_security\_group\_id) | List of egress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | -| [ingress\_cidr\_blocks](#input\_ingress\_cidr\_blocks) | List of IPv4 CIDR ranges to use on all ingress rules | `list(string)` | `[]` | no | -| [ingress\_ipv6\_cidr\_blocks](#input\_ingress\_ipv6\_cidr\_blocks) | List of IPv6 CIDR ranges to use on all ingress rules | `list(string)` | `[]` | no | +| [ingress\_cidr\_ipv4](#input\_ingress\_cidr\_ipv4) | List of IPv4 CIDR ranges to use on all ingress rules | `list(string)` | `[]` | no | +| [ingress\_cidr\_ipv6](#input\_ingress\_cidr\_ipv6) | List of IPv6 CIDR ranges to use on all ingress rules | `list(string)` | `[]` | no | | [ingress\_prefix\_list\_ids](#input\_ingress\_prefix\_list\_ids) | List of prefix list IDs (for allowing access to VPC endpoints) to use on all ingress rules | `list(string)` | `[]` | no | | [ingress\_rules](#input\_ingress\_rules) | List of ingress rules to create by name | `list(string)` | `[]` | no | -| [ingress\_with\_cidr\_blocks](#input\_ingress\_with\_cidr\_blocks) | List of ingress rules to create where 'cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [ingress\_with\_ipv6\_cidr\_blocks](#input\_ingress\_with\_ipv6\_cidr\_blocks) | List of ingress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [ingress\_with\_prefix\_list\_ids](#input\_ingress\_with\_prefix\_list\_ids) | List of ingress rules to create where 'prefix\_list\_ids' is used | `list(map(string))` | `[]` | no | +| [ingress\_with\_cidr\_ipv4](#input\_ingress\_with\_cidr\_ipv4) | List of ingress rules to create where 'cidr\_ipv4' is used | `list(map(string))` | `[]` | no | +| [ingress\_with\_cidr\_ipv6](#input\_ingress\_with\_cidr\_ipv6) | List of ingress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | +| [ingress\_with\_prefix\_list\_id](#input\_ingress\_with\_prefix\_list\_id) | List of ingress rules to create where 'prefix\_list\_id' is used | `list(map(string))` | `[]` | no | +| [ingress\_with\_referenced\_security\_group\_id](#input\_ingress\_with\_referenced\_security\_group\_id) | List of ingress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [ingress\_with\_self](#input\_ingress\_with\_self) | List of ingress rules to create where 'self' is defined | `list(map(string))` | `[]` | no | -| [ingress\_with\_source\_security\_group\_id](#input\_ingress\_with\_source\_security\_group\_id) | List of ingress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [name](#input\_name) | Name of security group | `string` | n/a | yes | | [number\_of\_computed\_egress\_cidr\_blocks](#input\_number\_of\_computed\_egress\_cidr\_blocks) | Number of IPv4 CIDR ranges to use on all computed egress rules | `number` | `0` | no | | [number\_of\_computed\_egress\_ipv6\_cidr\_blocks](#input\_number\_of\_computed\_egress\_ipv6\_cidr\_blocks) | Number of IPv6 CIDR ranges to use on all computed egress rules | `number` | `0` | no | | [number\_of\_computed\_egress\_prefix\_list\_ids](#input\_number\_of\_computed\_egress\_prefix\_list\_ids) | Number of prefix list IDs (for allowing access to VPC endpoints) to use on all computed egress rules | `number` | `0` | no | | [number\_of\_computed\_egress\_rules](#input\_number\_of\_computed\_egress\_rules) | Number of computed egress rules to create by name | `number` | `0` | no | -| [number\_of\_computed\_egress\_with\_cidr\_blocks](#input\_number\_of\_computed\_egress\_with\_cidr\_blocks) | Number of computed egress rules to create where 'cidr\_blocks' is used | `number` | `0` | no | -| [number\_of\_computed\_egress\_with\_ipv6\_cidr\_blocks](#input\_number\_of\_computed\_egress\_with\_ipv6\_cidr\_blocks) | Number of computed egress rules to create where 'ipv6\_cidr\_blocks' is used | `number` | `0` | no | -| [number\_of\_computed\_egress\_with\_prefix\_list\_ids](#input\_number\_of\_computed\_egress\_with\_prefix\_list\_ids) | Number of computed egress rules to create where 'prefix\_list\_ids' is used | `number` | `0` | no | +| [number\_of\_computed\_egress\_with\_cidr\_ipv4](#input\_number\_of\_computed\_egress\_with\_cidr\_ipv4) | Number of computed egress rules to create where 'cidr\_ipv4' is used | `number` | `0` | no | +| [number\_of\_computed\_egress\_with\_cidr\_ipv6](#input\_number\_of\_computed\_egress\_with\_cidr\_ipv6) | Number of computed egress rules to create where 'ipv6\_cidr\_blocks' is used | `number` | `0` | no | +| [number\_of\_computed\_egress\_with\_prefix\_list\_id](#input\_number\_of\_computed\_egress\_with\_prefix\_list\_id) | Number of computed egress rules to create where 'prefix\_list\_id' is used | `number` | `0` | no | +| [number\_of\_computed\_egress\_with\_referenced\_security\_group\_id](#input\_number\_of\_computed\_egress\_with\_referenced\_security\_group\_id) | Number of computed egress rules to create where 'source\_security\_group\_id' is used | `number` | `0` | no | | [number\_of\_computed\_egress\_with\_self](#input\_number\_of\_computed\_egress\_with\_self) | Number of computed egress rules to create where 'self' is defined | `number` | `0` | no | -| [number\_of\_computed\_egress\_with\_source\_security\_group\_id](#input\_number\_of\_computed\_egress\_with\_source\_security\_group\_id) | Number of computed egress rules to create where 'source\_security\_group\_id' is used | `number` | `0` | no | | [number\_of\_computed\_ingress\_cidr\_blocks](#input\_number\_of\_computed\_ingress\_cidr\_blocks) | Number of IPv4 CIDR ranges to use on all computed ingress rules | `number` | `0` | no | | [number\_of\_computed\_ingress\_ipv6\_cidr\_blocks](#input\_number\_of\_computed\_ingress\_ipv6\_cidr\_blocks) | Number of IPv6 CIDR ranges to use on all computed ingress rules | `number` | `0` | no | | [number\_of\_computed\_ingress\_prefix\_list\_ids](#input\_number\_of\_computed\_ingress\_prefix\_list\_ids) | Number of prefix list IDs (for allowing access to VPC endpoints) to use on all computed ingress rules | `number` | `0` | no | | [number\_of\_computed\_ingress\_rules](#input\_number\_of\_computed\_ingress\_rules) | Number of computed ingress rules to create by name | `number` | `0` | no | -| [number\_of\_computed\_ingress\_with\_cidr\_blocks](#input\_number\_of\_computed\_ingress\_with\_cidr\_blocks) | Number of computed ingress rules to create where 'cidr\_blocks' is used | `number` | `0` | no | -| [number\_of\_computed\_ingress\_with\_ipv6\_cidr\_blocks](#input\_number\_of\_computed\_ingress\_with\_ipv6\_cidr\_blocks) | Number of computed ingress rules to create where 'ipv6\_cidr\_blocks' is used | `number` | `0` | no | -| [number\_of\_computed\_ingress\_with\_prefix\_list\_ids](#input\_number\_of\_computed\_ingress\_with\_prefix\_list\_ids) | Number of computed ingress rules to create where 'prefix\_list\_ids' is used | `number` | `0` | no | +| [number\_of\_computed\_ingress\_with\_cidr\_ipv4](#input\_number\_of\_computed\_ingress\_with\_cidr\_ipv4) | Number of computed ingress rules to create where 'cidr\_ipv4' is used | `number` | `0` | no | +| [number\_of\_computed\_ingress\_with\_cidr\_ipv6](#input\_number\_of\_computed\_ingress\_with\_cidr\_ipv6) | Number of computed ingress rules to create where 'ipv6\_cidr\_blocks' is used | `number` | `0` | no | +| [number\_of\_computed\_ingress\_with\_prefix\_list\_id](#input\_number\_of\_computed\_ingress\_with\_prefix\_list\_id) | Number of computed ingress rules to create where 'prefix\_list\_id' is used | `number` | `0` | no | +| [number\_of\_computed\_ingress\_with\_referenced\_security\_group\_id](#input\_number\_of\_computed\_ingress\_with\_referenced\_security\_group\_id) | Number of computed ingress rules to create where 'source\_security\_group\_id' is used | `number` | `0` | no | | [number\_of\_computed\_ingress\_with\_self](#input\_number\_of\_computed\_ingress\_with\_self) | Number of computed ingress rules to create where 'self' is defined | `number` | `0` | no | -| [number\_of\_computed\_ingress\_with\_source\_security\_group\_id](#input\_number\_of\_computed\_ingress\_with\_source\_security\_group\_id) | Number of computed ingress rules to create where 'source\_security\_group\_id' is used | `number` | `0` | no | | [revoke\_rules\_on\_delete](#input\_revoke\_rules\_on\_delete) | Instruct Terraform to revoke all of the Security Groups attached ingress and egress rules before deleting the rule itself. Enable for EMR. | `bool` | `false` | no | | [tags](#input\_tags) | A mapping of tags to assign to security group | `map(string)` | `{}` | no | | [use\_name\_prefix](#input\_use\_name\_prefix) | Whether to use name\_prefix or fixed name. Should be true to able to update security group name after initial creation | `bool` | `true` | no | diff --git a/modules/wazuh/main.tf b/modules/wazuh/main.tf index 80ea0adb..d2a1bf93 100644 --- a/modules/wazuh/main.tf +++ b/modules/wazuh/main.tf @@ -19,20 +19,20 @@ module "sg" { ingress_with_self = concat(var.auto_ingress_with_self, var.ingress_with_self) # Open to IPv4 cidr blocks - ingress_with_cidr_blocks = var.ingress_with_cidr_blocks + ingress_with_cidr_ipv4 = var.ingress_with_cidr_ipv4 # Open to IPv6 cidr blocks - ingress_with_ipv6_cidr_blocks = var.ingress_with_ipv6_cidr_blocks + ingress_with_cidr_ipv6 = var.ingress_with_cidr_ipv6 # Open for security group id - ingress_with_source_security_group_id = var.ingress_with_source_security_group_id + ingress_with_referenced_security_group_id = var.ingress_with_referenced_security_group_id # Open for prefix list id - ingress_with_prefix_list_ids = var.ingress_with_prefix_list_ids + ingress_with_prefix_list_id = var.ingress_with_prefix_list_id # Default ingress CIDR blocks - ingress_cidr_blocks = var.ingress_cidr_blocks - ingress_ipv6_cidr_blocks = var.ingress_ipv6_cidr_blocks + ingress_cidr_ipv4 = var.ingress_cidr_ipv4 + ingress_cidr_ipv6 = var.ingress_cidr_ipv6 # Default prefix list ids ingress_prefix_list_ids = var.ingress_prefix_list_ids @@ -47,26 +47,26 @@ module "sg" { computed_ingress_with_self = concat(var.auto_computed_ingress_with_self, var.computed_ingress_with_self) # Open to IPv4 cidr blocks - computed_ingress_with_cidr_blocks = var.computed_ingress_with_cidr_blocks + computed_ingress_with_cidr_ipv4 = var.computed_ingress_with_cidr_ipv4 # Open to IPv6 cidr blocks - computed_ingress_with_ipv6_cidr_blocks = var.computed_ingress_with_ipv6_cidr_blocks + computed_ingress_with_cidr_ipv6 = var.computed_ingress_with_cidr_ipv6 # Open for security group id - computed_ingress_with_source_security_group_id = var.computed_ingress_with_source_security_group_id + computed_ingress_with_referenced_security_group_id = var.computed_ingress_with_referenced_security_group_id # Open for prefix list id - computed_ingress_with_prefix_list_ids = var.computed_ingress_with_prefix_list_ids + computed_ingress_with_prefix_list_id = var.computed_ingress_with_prefix_list_id ############################# # Number of computed ingress ############################# - number_of_computed_ingress_rules = var.auto_number_of_computed_ingress_rules + var.number_of_computed_ingress_rules - number_of_computed_ingress_with_self = var.auto_number_of_computed_ingress_with_self + var.number_of_computed_ingress_with_self - number_of_computed_ingress_with_cidr_blocks = var.number_of_computed_ingress_with_cidr_blocks - number_of_computed_ingress_with_ipv6_cidr_blocks = var.number_of_computed_ingress_with_ipv6_cidr_blocks - number_of_computed_ingress_with_source_security_group_id = var.number_of_computed_ingress_with_source_security_group_id - number_of_computed_ingress_with_prefix_list_ids = var.number_of_computed_ingress_with_prefix_list_ids + number_of_computed_ingress_rules = var.auto_number_of_computed_ingress_rules + var.number_of_computed_ingress_rules + number_of_computed_ingress_with_self = var.auto_number_of_computed_ingress_with_self + var.number_of_computed_ingress_with_self + number_of_computed_ingress_with_cidr_ipv4 = var.number_of_computed_ingress_with_cidr_ipv4 + number_of_computed_ingress_with_cidr_ipv6 = var.number_of_computed_ingress_with_cidr_ipv6 + number_of_computed_ingress_with_referenced_security_group_id = var.number_of_computed_ingress_with_referenced_security_group_id + number_of_computed_ingress_with_prefix_list_id = var.number_of_computed_ingress_with_prefix_list_id ######### # Egress @@ -78,20 +78,20 @@ module "sg" { egress_with_self = concat(var.auto_egress_with_self, var.egress_with_self) # Open to IPv4 cidr blocks - egress_with_cidr_blocks = var.egress_with_cidr_blocks + egress_with_cidr_ipv4 = var.egress_with_cidr_ipv4 # Open to IPv6 cidr blocks - egress_with_ipv6_cidr_blocks = var.egress_with_ipv6_cidr_blocks + egress_with_cidr_ipv6 = var.egress_with_cidr_ipv6 # Open for security group id - egress_with_source_security_group_id = var.egress_with_source_security_group_id + egress_with_referenced_security_group_id = var.egress_with_referenced_security_group_id # Open for prefix list id - egress_with_prefix_list_ids = var.egress_with_prefix_list_ids + egress_with_prefix_list_id = var.egress_with_prefix_list_id # Default egress CIDR blocks - egress_cidr_blocks = var.egress_cidr_blocks - egress_ipv6_cidr_blocks = var.egress_ipv6_cidr_blocks + egress_cidr_ipv4 = var.egress_cidr_ipv4 + egress_cidr_ipv6 = var.egress_cidr_ipv6 # Default prefix list ids egress_prefix_list_ids = var.egress_prefix_list_ids @@ -106,24 +106,24 @@ module "sg" { computed_egress_with_self = concat(var.auto_computed_egress_with_self, var.computed_egress_with_self) # Open to IPv4 cidr blocks - computed_egress_with_cidr_blocks = var.computed_egress_with_cidr_blocks + computed_egress_with_cidr_ipv4 = var.computed_egress_with_cidr_ipv4 # Open to IPv6 cidr blocks - computed_egress_with_ipv6_cidr_blocks = var.computed_egress_with_ipv6_cidr_blocks + computed_egress_with_cidr_ipv6 = var.computed_egress_with_cidr_ipv6 # Open for security group id - computed_egress_with_source_security_group_id = var.computed_egress_with_source_security_group_id + computed_egress_with_referenced_security_group_id = var.computed_egress_with_referenced_security_group_id # Open for prefix list id - computed_egress_with_prefix_list_ids = var.computed_egress_with_prefix_list_ids + computed_egress_with_prefix_list_id = var.computed_egress_with_prefix_list_id ############################# # Number of computed egress ############################# - number_of_computed_egress_rules = var.auto_number_of_computed_egress_rules + var.number_of_computed_egress_rules - number_of_computed_egress_with_self = var.auto_number_of_computed_egress_with_self + var.number_of_computed_egress_with_self - number_of_computed_egress_with_cidr_blocks = var.number_of_computed_egress_with_cidr_blocks - number_of_computed_egress_with_ipv6_cidr_blocks = var.number_of_computed_egress_with_ipv6_cidr_blocks - number_of_computed_egress_with_source_security_group_id = var.number_of_computed_egress_with_source_security_group_id - number_of_computed_egress_with_prefix_list_ids = var.number_of_computed_egress_with_prefix_list_ids + number_of_computed_egress_rules = var.auto_number_of_computed_egress_rules + var.number_of_computed_egress_rules + number_of_computed_egress_with_self = var.auto_number_of_computed_egress_with_self + var.number_of_computed_egress_with_self + number_of_computed_egress_with_cidr_ipv4 = var.number_of_computed_egress_with_cidr_ipv4 + number_of_computed_egress_with_cidr_ipv6 = var.number_of_computed_egress_with_cidr_ipv6 + number_of_computed_egress_with_referenced_security_group_id = var.number_of_computed_egress_with_referenced_security_group_id + number_of_computed_egress_with_prefix_list_id = var.number_of_computed_egress_with_prefix_list_id } diff --git a/modules/wazuh/variables.tf b/modules/wazuh/variables.tf index 60c8c27b..6590c9e3 100644 --- a/modules/wazuh/variables.tf +++ b/modules/wazuh/variables.tf @@ -56,37 +56,37 @@ variable "ingress_with_self" { default = [] } -variable "ingress_with_cidr_blocks" { - description = "List of ingress rules to create where 'cidr_blocks' is used" +variable "ingress_with_cidr_ipv4" { + description = "List of ingress rules to create where 'cidr_ipv4' is used" type = list(map(string)) default = [] } -variable "ingress_with_ipv6_cidr_blocks" { +variable "ingress_with_cidr_ipv6" { description = "List of ingress rules to create where 'ipv6_cidr_blocks' is used" type = list(map(string)) default = [] } -variable "ingress_with_source_security_group_id" { +variable "ingress_with_referenced_security_group_id" { description = "List of ingress rules to create where 'source_security_group_id' is used" type = list(map(string)) default = [] } -variable "ingress_with_prefix_list_ids" { - description = "List of ingress rules to create where 'prefix_list_ids' is used" +variable "ingress_with_prefix_list_id" { + description = "List of ingress rules to create where 'prefix_list_id' is used" type = list(map(string)) default = [] } -variable "ingress_cidr_blocks" { +variable "ingress_cidr_ipv4" { description = "List of IPv4 CIDR ranges to use on all ingress rules" type = list(string) default = [] } -variable "ingress_ipv6_cidr_blocks" { +variable "ingress_cidr_ipv6" { description = "List of IPv6 CIDR ranges to use on all ingress rules" type = list(string) default = [] @@ -113,26 +113,26 @@ variable "computed_ingress_with_self" { default = [] } -variable "computed_ingress_with_cidr_blocks" { - description = "List of computed ingress rules to create where 'cidr_blocks' is used" +variable "computed_ingress_with_cidr_ipv4" { + description = "List of computed ingress rules to create where 'cidr_ipv4' is used" type = list(map(string)) default = [] } -variable "computed_ingress_with_ipv6_cidr_blocks" { +variable "computed_ingress_with_cidr_ipv6" { description = "List of computed ingress rules to create where 'ipv6_cidr_blocks' is used" type = list(map(string)) default = [] } -variable "computed_ingress_with_source_security_group_id" { +variable "computed_ingress_with_referenced_security_group_id" { description = "List of computed ingress rules to create where 'source_security_group_id' is used" type = list(map(string)) default = [] } -variable "computed_ingress_with_prefix_list_ids" { - description = "List of computed ingress rules to create where 'prefix_list_ids' is used" +variable "computed_ingress_with_prefix_list_id" { + description = "List of computed ingress rules to create where 'prefix_list_id' is used" type = list(map(string)) default = [] } @@ -170,26 +170,26 @@ variable "number_of_computed_ingress_with_self" { default = 0 } -variable "number_of_computed_ingress_with_cidr_blocks" { - description = "Number of computed ingress rules to create where 'cidr_blocks' is used" +variable "number_of_computed_ingress_with_cidr_ipv4" { + description = "Number of computed ingress rules to create where 'cidr_ipv4' is used" type = number default = 0 } -variable "number_of_computed_ingress_with_ipv6_cidr_blocks" { +variable "number_of_computed_ingress_with_cidr_ipv6" { description = "Number of computed ingress rules to create where 'ipv6_cidr_blocks' is used" type = number default = 0 } -variable "number_of_computed_ingress_with_source_security_group_id" { +variable "number_of_computed_ingress_with_referenced_security_group_id" { description = "Number of computed ingress rules to create where 'source_security_group_id' is used" type = number default = 0 } -variable "number_of_computed_ingress_with_prefix_list_ids" { - description = "Number of computed ingress rules to create where 'prefix_list_ids' is used" +variable "number_of_computed_ingress_with_prefix_list_id" { + description = "Number of computed ingress rules to create where 'prefix_list_id' is used" type = number default = 0 } @@ -227,37 +227,37 @@ variable "egress_with_self" { default = [] } -variable "egress_with_cidr_blocks" { - description = "List of egress rules to create where 'cidr_blocks' is used" +variable "egress_with_cidr_ipv4" { + description = "List of egress rules to create where 'cidr_ipv4' is used" type = list(map(string)) default = [] } -variable "egress_with_ipv6_cidr_blocks" { +variable "egress_with_cidr_ipv6" { description = "List of egress rules to create where 'ipv6_cidr_blocks' is used" type = list(map(string)) default = [] } -variable "egress_with_source_security_group_id" { +variable "egress_with_referenced_security_group_id" { description = "List of egress rules to create where 'source_security_group_id' is used" type = list(map(string)) default = [] } -variable "egress_with_prefix_list_ids" { - description = "List of egress rules to create where 'prefix_list_ids' is used" +variable "egress_with_prefix_list_id" { + description = "List of egress rules to create where 'prefix_list_id' is used" type = list(map(string)) default = [] } -variable "egress_cidr_blocks" { +variable "egress_cidr_ipv4" { description = "List of IPv4 CIDR ranges to use on all egress rules" type = list(string) default = ["0.0.0.0/0"] } -variable "egress_ipv6_cidr_blocks" { +variable "egress_cidr_ipv6" { description = "List of IPv6 CIDR ranges to use on all egress rules" type = list(string) default = ["::/0"] @@ -284,26 +284,26 @@ variable "computed_egress_with_self" { default = [] } -variable "computed_egress_with_cidr_blocks" { - description = "List of computed egress rules to create where 'cidr_blocks' is used" +variable "computed_egress_with_cidr_ipv4" { + description = "List of computed egress rules to create where 'cidr_ipv4' is used" type = list(map(string)) default = [] } -variable "computed_egress_with_ipv6_cidr_blocks" { +variable "computed_egress_with_cidr_ipv6" { description = "List of computed egress rules to create where 'ipv6_cidr_blocks' is used" type = list(map(string)) default = [] } -variable "computed_egress_with_source_security_group_id" { +variable "computed_egress_with_referenced_security_group_id" { description = "List of computed egress rules to create where 'source_security_group_id' is used" type = list(map(string)) default = [] } -variable "computed_egress_with_prefix_list_ids" { - description = "List of computed egress rules to create where 'prefix_list_ids' is used" +variable "computed_egress_with_prefix_list_id" { + description = "List of computed egress rules to create where 'prefix_list_id' is used" type = list(map(string)) default = [] } @@ -341,26 +341,26 @@ variable "number_of_computed_egress_with_self" { default = 0 } -variable "number_of_computed_egress_with_cidr_blocks" { - description = "Number of computed egress rules to create where 'cidr_blocks' is used" +variable "number_of_computed_egress_with_cidr_ipv4" { + description = "Number of computed egress rules to create where 'cidr_ipv4' is used" type = number default = 0 } -variable "number_of_computed_egress_with_ipv6_cidr_blocks" { +variable "number_of_computed_egress_with_cidr_ipv6" { description = "Number of computed egress rules to create where 'ipv6_cidr_blocks' is used" type = number default = 0 } -variable "number_of_computed_egress_with_source_security_group_id" { +variable "number_of_computed_egress_with_referenced_security_group_id" { description = "Number of computed egress rules to create where 'source_security_group_id' is used" type = number default = 0 } -variable "number_of_computed_egress_with_prefix_list_ids" { - description = "Number of computed egress rules to create where 'prefix_list_ids' is used" +variable "number_of_computed_egress_with_prefix_list_id" { + description = "Number of computed egress rules to create where 'prefix_list_id' is used" type = number default = 0 } diff --git a/modules/web/README.md b/modules/web/README.md index 82cdaf03..d5d564e2 100644 --- a/modules/web/README.md +++ b/modules/web/README.md @@ -55,59 +55,59 @@ No resources. | [computed\_egress\_ipv6\_cidr\_blocks](#input\_computed\_egress\_ipv6\_cidr\_blocks) | List of IPv6 CIDR ranges to use on all computed egress rules | `list(string)` |
[
"::/0"
]
| no | | [computed\_egress\_prefix\_list\_ids](#input\_computed\_egress\_prefix\_list\_ids) | List of prefix list IDs (for allowing access to VPC endpoints) to use on all computed egress rules | `list(string)` | `[]` | no | | [computed\_egress\_rules](#input\_computed\_egress\_rules) | List of computed egress rules to create by name | `list(string)` | `[]` | no | -| [computed\_egress\_with\_cidr\_blocks](#input\_computed\_egress\_with\_cidr\_blocks) | List of computed egress rules to create where 'cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [computed\_egress\_with\_ipv6\_cidr\_blocks](#input\_computed\_egress\_with\_ipv6\_cidr\_blocks) | List of computed egress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [computed\_egress\_with\_prefix\_list\_ids](#input\_computed\_egress\_with\_prefix\_list\_ids) | List of computed egress rules to create where 'prefix\_list\_ids' is used | `list(map(string))` | `[]` | no | +| [computed\_egress\_with\_cidr\_ipv4](#input\_computed\_egress\_with\_cidr\_ipv4) | List of computed egress rules to create where 'cidr\_ipv4' is used | `list(map(string))` | `[]` | no | +| [computed\_egress\_with\_cidr\_ipv6](#input\_computed\_egress\_with\_cidr\_ipv6) | List of computed egress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | +| [computed\_egress\_with\_prefix\_list\_id](#input\_computed\_egress\_with\_prefix\_list\_id) | List of computed egress rules to create where 'prefix\_list\_id' is used | `list(map(string))` | `[]` | no | +| [computed\_egress\_with\_referenced\_security\_group\_id](#input\_computed\_egress\_with\_referenced\_security\_group\_id) | List of computed egress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [computed\_egress\_with\_self](#input\_computed\_egress\_with\_self) | List of computed egress rules to create where 'self' is defined | `list(map(string))` | `[]` | no | -| [computed\_egress\_with\_source\_security\_group\_id](#input\_computed\_egress\_with\_source\_security\_group\_id) | List of computed egress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [computed\_ingress\_cidr\_blocks](#input\_computed\_ingress\_cidr\_blocks) | List of IPv4 CIDR ranges to use on all computed ingress rules | `list(string)` | `[]` | no | | [computed\_ingress\_ipv6\_cidr\_blocks](#input\_computed\_ingress\_ipv6\_cidr\_blocks) | List of IPv6 CIDR ranges to use on all computed ingress rules | `list(string)` | `[]` | no | | [computed\_ingress\_prefix\_list\_ids](#input\_computed\_ingress\_prefix\_list\_ids) | List of prefix list IDs (for allowing access to VPC endpoints) to use on all computed ingress rules | `list(string)` | `[]` | no | | [computed\_ingress\_rules](#input\_computed\_ingress\_rules) | List of computed ingress rules to create by name | `list(string)` | `[]` | no | -| [computed\_ingress\_with\_cidr\_blocks](#input\_computed\_ingress\_with\_cidr\_blocks) | List of computed ingress rules to create where 'cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [computed\_ingress\_with\_ipv6\_cidr\_blocks](#input\_computed\_ingress\_with\_ipv6\_cidr\_blocks) | List of computed ingress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [computed\_ingress\_with\_prefix\_list\_ids](#input\_computed\_ingress\_with\_prefix\_list\_ids) | List of computed ingress rules to create where 'prefix\_list\_ids' is used | `list(map(string))` | `[]` | no | +| [computed\_ingress\_with\_cidr\_ipv4](#input\_computed\_ingress\_with\_cidr\_ipv4) | List of computed ingress rules to create where 'cidr\_ipv4' is used | `list(map(string))` | `[]` | no | +| [computed\_ingress\_with\_cidr\_ipv6](#input\_computed\_ingress\_with\_cidr\_ipv6) | List of computed ingress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | +| [computed\_ingress\_with\_prefix\_list\_id](#input\_computed\_ingress\_with\_prefix\_list\_id) | List of computed ingress rules to create where 'prefix\_list\_id' is used | `list(map(string))` | `[]` | no | +| [computed\_ingress\_with\_referenced\_security\_group\_id](#input\_computed\_ingress\_with\_referenced\_security\_group\_id) | List of computed ingress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [computed\_ingress\_with\_self](#input\_computed\_ingress\_with\_self) | List of computed ingress rules to create where 'self' is defined | `list(map(string))` | `[]` | no | -| [computed\_ingress\_with\_source\_security\_group\_id](#input\_computed\_ingress\_with\_source\_security\_group\_id) | List of computed ingress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [create](#input\_create) | Whether to create security group and all rules | `bool` | `true` | no | | [description](#input\_description) | Description of security group | `string` | `"Security Group managed by Terraform"` | no | -| [egress\_cidr\_blocks](#input\_egress\_cidr\_blocks) | List of IPv4 CIDR ranges to use on all egress rules | `list(string)` |
[
"0.0.0.0/0"
]
| no | -| [egress\_ipv6\_cidr\_blocks](#input\_egress\_ipv6\_cidr\_blocks) | List of IPv6 CIDR ranges to use on all egress rules | `list(string)` |
[
"::/0"
]
| no | +| [egress\_cidr\_ipv4](#input\_egress\_cidr\_ipv4) | List of IPv4 CIDR ranges to use on all egress rules | `list(string)` |
[
"0.0.0.0/0"
]
| no | +| [egress\_cidr\_ipv6](#input\_egress\_cidr\_ipv6) | List of IPv6 CIDR ranges to use on all egress rules | `list(string)` |
[
"::/0"
]
| no | | [egress\_prefix\_list\_ids](#input\_egress\_prefix\_list\_ids) | List of prefix list IDs (for allowing access to VPC endpoints) to use on all egress rules | `list(string)` | `[]` | no | | [egress\_rules](#input\_egress\_rules) | List of egress rules to create by name | `list(string)` | `[]` | no | -| [egress\_with\_cidr\_blocks](#input\_egress\_with\_cidr\_blocks) | List of egress rules to create where 'cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [egress\_with\_ipv6\_cidr\_blocks](#input\_egress\_with\_ipv6\_cidr\_blocks) | List of egress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [egress\_with\_prefix\_list\_ids](#input\_egress\_with\_prefix\_list\_ids) | List of egress rules to create where 'prefix\_list\_ids' is used | `list(map(string))` | `[]` | no | +| [egress\_with\_cidr\_ipv4](#input\_egress\_with\_cidr\_ipv4) | List of egress rules to create where 'cidr\_ipv4' is used | `list(map(string))` | `[]` | no | +| [egress\_with\_cidr\_ipv6](#input\_egress\_with\_cidr\_ipv6) | List of egress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | +| [egress\_with\_prefix\_list\_id](#input\_egress\_with\_prefix\_list\_id) | List of egress rules to create where 'prefix\_list\_id' is used | `list(map(string))` | `[]` | no | +| [egress\_with\_referenced\_security\_group\_id](#input\_egress\_with\_referenced\_security\_group\_id) | List of egress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [egress\_with\_self](#input\_egress\_with\_self) | List of egress rules to create where 'self' is defined | `list(map(string))` | `[]` | no | -| [egress\_with\_source\_security\_group\_id](#input\_egress\_with\_source\_security\_group\_id) | List of egress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | -| [ingress\_cidr\_blocks](#input\_ingress\_cidr\_blocks) | List of IPv4 CIDR ranges to use on all ingress rules | `list(string)` | `[]` | no | -| [ingress\_ipv6\_cidr\_blocks](#input\_ingress\_ipv6\_cidr\_blocks) | List of IPv6 CIDR ranges to use on all ingress rules | `list(string)` | `[]` | no | +| [ingress\_cidr\_ipv4](#input\_ingress\_cidr\_ipv4) | List of IPv4 CIDR ranges to use on all ingress rules | `list(string)` | `[]` | no | +| [ingress\_cidr\_ipv6](#input\_ingress\_cidr\_ipv6) | List of IPv6 CIDR ranges to use on all ingress rules | `list(string)` | `[]` | no | | [ingress\_prefix\_list\_ids](#input\_ingress\_prefix\_list\_ids) | List of prefix list IDs (for allowing access to VPC endpoints) to use on all ingress rules | `list(string)` | `[]` | no | | [ingress\_rules](#input\_ingress\_rules) | List of ingress rules to create by name | `list(string)` | `[]` | no | -| [ingress\_with\_cidr\_blocks](#input\_ingress\_with\_cidr\_blocks) | List of ingress rules to create where 'cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [ingress\_with\_ipv6\_cidr\_blocks](#input\_ingress\_with\_ipv6\_cidr\_blocks) | List of ingress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [ingress\_with\_prefix\_list\_ids](#input\_ingress\_with\_prefix\_list\_ids) | List of ingress rules to create where 'prefix\_list\_ids' is used | `list(map(string))` | `[]` | no | +| [ingress\_with\_cidr\_ipv4](#input\_ingress\_with\_cidr\_ipv4) | List of ingress rules to create where 'cidr\_ipv4' is used | `list(map(string))` | `[]` | no | +| [ingress\_with\_cidr\_ipv6](#input\_ingress\_with\_cidr\_ipv6) | List of ingress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | +| [ingress\_with\_prefix\_list\_id](#input\_ingress\_with\_prefix\_list\_id) | List of ingress rules to create where 'prefix\_list\_id' is used | `list(map(string))` | `[]` | no | +| [ingress\_with\_referenced\_security\_group\_id](#input\_ingress\_with\_referenced\_security\_group\_id) | List of ingress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [ingress\_with\_self](#input\_ingress\_with\_self) | List of ingress rules to create where 'self' is defined | `list(map(string))` | `[]` | no | -| [ingress\_with\_source\_security\_group\_id](#input\_ingress\_with\_source\_security\_group\_id) | List of ingress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [name](#input\_name) | Name of security group | `string` | n/a | yes | | [number\_of\_computed\_egress\_cidr\_blocks](#input\_number\_of\_computed\_egress\_cidr\_blocks) | Number of IPv4 CIDR ranges to use on all computed egress rules | `number` | `0` | no | | [number\_of\_computed\_egress\_ipv6\_cidr\_blocks](#input\_number\_of\_computed\_egress\_ipv6\_cidr\_blocks) | Number of IPv6 CIDR ranges to use on all computed egress rules | `number` | `0` | no | | [number\_of\_computed\_egress\_prefix\_list\_ids](#input\_number\_of\_computed\_egress\_prefix\_list\_ids) | Number of prefix list IDs (for allowing access to VPC endpoints) to use on all computed egress rules | `number` | `0` | no | | [number\_of\_computed\_egress\_rules](#input\_number\_of\_computed\_egress\_rules) | Number of computed egress rules to create by name | `number` | `0` | no | -| [number\_of\_computed\_egress\_with\_cidr\_blocks](#input\_number\_of\_computed\_egress\_with\_cidr\_blocks) | Number of computed egress rules to create where 'cidr\_blocks' is used | `number` | `0` | no | -| [number\_of\_computed\_egress\_with\_ipv6\_cidr\_blocks](#input\_number\_of\_computed\_egress\_with\_ipv6\_cidr\_blocks) | Number of computed egress rules to create where 'ipv6\_cidr\_blocks' is used | `number` | `0` | no | -| [number\_of\_computed\_egress\_with\_prefix\_list\_ids](#input\_number\_of\_computed\_egress\_with\_prefix\_list\_ids) | Number of computed egress rules to create where 'prefix\_list\_ids' is used | `number` | `0` | no | +| [number\_of\_computed\_egress\_with\_cidr\_ipv4](#input\_number\_of\_computed\_egress\_with\_cidr\_ipv4) | Number of computed egress rules to create where 'cidr\_ipv4' is used | `number` | `0` | no | +| [number\_of\_computed\_egress\_with\_cidr\_ipv6](#input\_number\_of\_computed\_egress\_with\_cidr\_ipv6) | Number of computed egress rules to create where 'ipv6\_cidr\_blocks' is used | `number` | `0` | no | +| [number\_of\_computed\_egress\_with\_prefix\_list\_id](#input\_number\_of\_computed\_egress\_with\_prefix\_list\_id) | Number of computed egress rules to create where 'prefix\_list\_id' is used | `number` | `0` | no | +| [number\_of\_computed\_egress\_with\_referenced\_security\_group\_id](#input\_number\_of\_computed\_egress\_with\_referenced\_security\_group\_id) | Number of computed egress rules to create where 'source\_security\_group\_id' is used | `number` | `0` | no | | [number\_of\_computed\_egress\_with\_self](#input\_number\_of\_computed\_egress\_with\_self) | Number of computed egress rules to create where 'self' is defined | `number` | `0` | no | -| [number\_of\_computed\_egress\_with\_source\_security\_group\_id](#input\_number\_of\_computed\_egress\_with\_source\_security\_group\_id) | Number of computed egress rules to create where 'source\_security\_group\_id' is used | `number` | `0` | no | | [number\_of\_computed\_ingress\_cidr\_blocks](#input\_number\_of\_computed\_ingress\_cidr\_blocks) | Number of IPv4 CIDR ranges to use on all computed ingress rules | `number` | `0` | no | | [number\_of\_computed\_ingress\_ipv6\_cidr\_blocks](#input\_number\_of\_computed\_ingress\_ipv6\_cidr\_blocks) | Number of IPv6 CIDR ranges to use on all computed ingress rules | `number` | `0` | no | | [number\_of\_computed\_ingress\_prefix\_list\_ids](#input\_number\_of\_computed\_ingress\_prefix\_list\_ids) | Number of prefix list IDs (for allowing access to VPC endpoints) to use on all computed ingress rules | `number` | `0` | no | | [number\_of\_computed\_ingress\_rules](#input\_number\_of\_computed\_ingress\_rules) | Number of computed ingress rules to create by name | `number` | `0` | no | -| [number\_of\_computed\_ingress\_with\_cidr\_blocks](#input\_number\_of\_computed\_ingress\_with\_cidr\_blocks) | Number of computed ingress rules to create where 'cidr\_blocks' is used | `number` | `0` | no | -| [number\_of\_computed\_ingress\_with\_ipv6\_cidr\_blocks](#input\_number\_of\_computed\_ingress\_with\_ipv6\_cidr\_blocks) | Number of computed ingress rules to create where 'ipv6\_cidr\_blocks' is used | `number` | `0` | no | -| [number\_of\_computed\_ingress\_with\_prefix\_list\_ids](#input\_number\_of\_computed\_ingress\_with\_prefix\_list\_ids) | Number of computed ingress rules to create where 'prefix\_list\_ids' is used | `number` | `0` | no | +| [number\_of\_computed\_ingress\_with\_cidr\_ipv4](#input\_number\_of\_computed\_ingress\_with\_cidr\_ipv4) | Number of computed ingress rules to create where 'cidr\_ipv4' is used | `number` | `0` | no | +| [number\_of\_computed\_ingress\_with\_cidr\_ipv6](#input\_number\_of\_computed\_ingress\_with\_cidr\_ipv6) | Number of computed ingress rules to create where 'ipv6\_cidr\_blocks' is used | `number` | `0` | no | +| [number\_of\_computed\_ingress\_with\_prefix\_list\_id](#input\_number\_of\_computed\_ingress\_with\_prefix\_list\_id) | Number of computed ingress rules to create where 'prefix\_list\_id' is used | `number` | `0` | no | +| [number\_of\_computed\_ingress\_with\_referenced\_security\_group\_id](#input\_number\_of\_computed\_ingress\_with\_referenced\_security\_group\_id) | Number of computed ingress rules to create where 'source\_security\_group\_id' is used | `number` | `0` | no | | [number\_of\_computed\_ingress\_with\_self](#input\_number\_of\_computed\_ingress\_with\_self) | Number of computed ingress rules to create where 'self' is defined | `number` | `0` | no | -| [number\_of\_computed\_ingress\_with\_source\_security\_group\_id](#input\_number\_of\_computed\_ingress\_with\_source\_security\_group\_id) | Number of computed ingress rules to create where 'source\_security\_group\_id' is used | `number` | `0` | no | | [revoke\_rules\_on\_delete](#input\_revoke\_rules\_on\_delete) | Instruct Terraform to revoke all of the Security Groups attached ingress and egress rules before deleting the rule itself. Enable for EMR. | `bool` | `false` | no | | [tags](#input\_tags) | A mapping of tags to assign to security group | `map(string)` | `{}` | no | | [use\_name\_prefix](#input\_use\_name\_prefix) | Whether to use name\_prefix or fixed name. Should be true to able to update security group name after initial creation | `bool` | `true` | no | diff --git a/modules/web/main.tf b/modules/web/main.tf index 80ea0adb..d2a1bf93 100644 --- a/modules/web/main.tf +++ b/modules/web/main.tf @@ -19,20 +19,20 @@ module "sg" { ingress_with_self = concat(var.auto_ingress_with_self, var.ingress_with_self) # Open to IPv4 cidr blocks - ingress_with_cidr_blocks = var.ingress_with_cidr_blocks + ingress_with_cidr_ipv4 = var.ingress_with_cidr_ipv4 # Open to IPv6 cidr blocks - ingress_with_ipv6_cidr_blocks = var.ingress_with_ipv6_cidr_blocks + ingress_with_cidr_ipv6 = var.ingress_with_cidr_ipv6 # Open for security group id - ingress_with_source_security_group_id = var.ingress_with_source_security_group_id + ingress_with_referenced_security_group_id = var.ingress_with_referenced_security_group_id # Open for prefix list id - ingress_with_prefix_list_ids = var.ingress_with_prefix_list_ids + ingress_with_prefix_list_id = var.ingress_with_prefix_list_id # Default ingress CIDR blocks - ingress_cidr_blocks = var.ingress_cidr_blocks - ingress_ipv6_cidr_blocks = var.ingress_ipv6_cidr_blocks + ingress_cidr_ipv4 = var.ingress_cidr_ipv4 + ingress_cidr_ipv6 = var.ingress_cidr_ipv6 # Default prefix list ids ingress_prefix_list_ids = var.ingress_prefix_list_ids @@ -47,26 +47,26 @@ module "sg" { computed_ingress_with_self = concat(var.auto_computed_ingress_with_self, var.computed_ingress_with_self) # Open to IPv4 cidr blocks - computed_ingress_with_cidr_blocks = var.computed_ingress_with_cidr_blocks + computed_ingress_with_cidr_ipv4 = var.computed_ingress_with_cidr_ipv4 # Open to IPv6 cidr blocks - computed_ingress_with_ipv6_cidr_blocks = var.computed_ingress_with_ipv6_cidr_blocks + computed_ingress_with_cidr_ipv6 = var.computed_ingress_with_cidr_ipv6 # Open for security group id - computed_ingress_with_source_security_group_id = var.computed_ingress_with_source_security_group_id + computed_ingress_with_referenced_security_group_id = var.computed_ingress_with_referenced_security_group_id # Open for prefix list id - computed_ingress_with_prefix_list_ids = var.computed_ingress_with_prefix_list_ids + computed_ingress_with_prefix_list_id = var.computed_ingress_with_prefix_list_id ############################# # Number of computed ingress ############################# - number_of_computed_ingress_rules = var.auto_number_of_computed_ingress_rules + var.number_of_computed_ingress_rules - number_of_computed_ingress_with_self = var.auto_number_of_computed_ingress_with_self + var.number_of_computed_ingress_with_self - number_of_computed_ingress_with_cidr_blocks = var.number_of_computed_ingress_with_cidr_blocks - number_of_computed_ingress_with_ipv6_cidr_blocks = var.number_of_computed_ingress_with_ipv6_cidr_blocks - number_of_computed_ingress_with_source_security_group_id = var.number_of_computed_ingress_with_source_security_group_id - number_of_computed_ingress_with_prefix_list_ids = var.number_of_computed_ingress_with_prefix_list_ids + number_of_computed_ingress_rules = var.auto_number_of_computed_ingress_rules + var.number_of_computed_ingress_rules + number_of_computed_ingress_with_self = var.auto_number_of_computed_ingress_with_self + var.number_of_computed_ingress_with_self + number_of_computed_ingress_with_cidr_ipv4 = var.number_of_computed_ingress_with_cidr_ipv4 + number_of_computed_ingress_with_cidr_ipv6 = var.number_of_computed_ingress_with_cidr_ipv6 + number_of_computed_ingress_with_referenced_security_group_id = var.number_of_computed_ingress_with_referenced_security_group_id + number_of_computed_ingress_with_prefix_list_id = var.number_of_computed_ingress_with_prefix_list_id ######### # Egress @@ -78,20 +78,20 @@ module "sg" { egress_with_self = concat(var.auto_egress_with_self, var.egress_with_self) # Open to IPv4 cidr blocks - egress_with_cidr_blocks = var.egress_with_cidr_blocks + egress_with_cidr_ipv4 = var.egress_with_cidr_ipv4 # Open to IPv6 cidr blocks - egress_with_ipv6_cidr_blocks = var.egress_with_ipv6_cidr_blocks + egress_with_cidr_ipv6 = var.egress_with_cidr_ipv6 # Open for security group id - egress_with_source_security_group_id = var.egress_with_source_security_group_id + egress_with_referenced_security_group_id = var.egress_with_referenced_security_group_id # Open for prefix list id - egress_with_prefix_list_ids = var.egress_with_prefix_list_ids + egress_with_prefix_list_id = var.egress_with_prefix_list_id # Default egress CIDR blocks - egress_cidr_blocks = var.egress_cidr_blocks - egress_ipv6_cidr_blocks = var.egress_ipv6_cidr_blocks + egress_cidr_ipv4 = var.egress_cidr_ipv4 + egress_cidr_ipv6 = var.egress_cidr_ipv6 # Default prefix list ids egress_prefix_list_ids = var.egress_prefix_list_ids @@ -106,24 +106,24 @@ module "sg" { computed_egress_with_self = concat(var.auto_computed_egress_with_self, var.computed_egress_with_self) # Open to IPv4 cidr blocks - computed_egress_with_cidr_blocks = var.computed_egress_with_cidr_blocks + computed_egress_with_cidr_ipv4 = var.computed_egress_with_cidr_ipv4 # Open to IPv6 cidr blocks - computed_egress_with_ipv6_cidr_blocks = var.computed_egress_with_ipv6_cidr_blocks + computed_egress_with_cidr_ipv6 = var.computed_egress_with_cidr_ipv6 # Open for security group id - computed_egress_with_source_security_group_id = var.computed_egress_with_source_security_group_id + computed_egress_with_referenced_security_group_id = var.computed_egress_with_referenced_security_group_id # Open for prefix list id - computed_egress_with_prefix_list_ids = var.computed_egress_with_prefix_list_ids + computed_egress_with_prefix_list_id = var.computed_egress_with_prefix_list_id ############################# # Number of computed egress ############################# - number_of_computed_egress_rules = var.auto_number_of_computed_egress_rules + var.number_of_computed_egress_rules - number_of_computed_egress_with_self = var.auto_number_of_computed_egress_with_self + var.number_of_computed_egress_with_self - number_of_computed_egress_with_cidr_blocks = var.number_of_computed_egress_with_cidr_blocks - number_of_computed_egress_with_ipv6_cidr_blocks = var.number_of_computed_egress_with_ipv6_cidr_blocks - number_of_computed_egress_with_source_security_group_id = var.number_of_computed_egress_with_source_security_group_id - number_of_computed_egress_with_prefix_list_ids = var.number_of_computed_egress_with_prefix_list_ids + number_of_computed_egress_rules = var.auto_number_of_computed_egress_rules + var.number_of_computed_egress_rules + number_of_computed_egress_with_self = var.auto_number_of_computed_egress_with_self + var.number_of_computed_egress_with_self + number_of_computed_egress_with_cidr_ipv4 = var.number_of_computed_egress_with_cidr_ipv4 + number_of_computed_egress_with_cidr_ipv6 = var.number_of_computed_egress_with_cidr_ipv6 + number_of_computed_egress_with_referenced_security_group_id = var.number_of_computed_egress_with_referenced_security_group_id + number_of_computed_egress_with_prefix_list_id = var.number_of_computed_egress_with_prefix_list_id } diff --git a/modules/web/variables.tf b/modules/web/variables.tf index 60c8c27b..6590c9e3 100644 --- a/modules/web/variables.tf +++ b/modules/web/variables.tf @@ -56,37 +56,37 @@ variable "ingress_with_self" { default = [] } -variable "ingress_with_cidr_blocks" { - description = "List of ingress rules to create where 'cidr_blocks' is used" +variable "ingress_with_cidr_ipv4" { + description = "List of ingress rules to create where 'cidr_ipv4' is used" type = list(map(string)) default = [] } -variable "ingress_with_ipv6_cidr_blocks" { +variable "ingress_with_cidr_ipv6" { description = "List of ingress rules to create where 'ipv6_cidr_blocks' is used" type = list(map(string)) default = [] } -variable "ingress_with_source_security_group_id" { +variable "ingress_with_referenced_security_group_id" { description = "List of ingress rules to create where 'source_security_group_id' is used" type = list(map(string)) default = [] } -variable "ingress_with_prefix_list_ids" { - description = "List of ingress rules to create where 'prefix_list_ids' is used" +variable "ingress_with_prefix_list_id" { + description = "List of ingress rules to create where 'prefix_list_id' is used" type = list(map(string)) default = [] } -variable "ingress_cidr_blocks" { +variable "ingress_cidr_ipv4" { description = "List of IPv4 CIDR ranges to use on all ingress rules" type = list(string) default = [] } -variable "ingress_ipv6_cidr_blocks" { +variable "ingress_cidr_ipv6" { description = "List of IPv6 CIDR ranges to use on all ingress rules" type = list(string) default = [] @@ -113,26 +113,26 @@ variable "computed_ingress_with_self" { default = [] } -variable "computed_ingress_with_cidr_blocks" { - description = "List of computed ingress rules to create where 'cidr_blocks' is used" +variable "computed_ingress_with_cidr_ipv4" { + description = "List of computed ingress rules to create where 'cidr_ipv4' is used" type = list(map(string)) default = [] } -variable "computed_ingress_with_ipv6_cidr_blocks" { +variable "computed_ingress_with_cidr_ipv6" { description = "List of computed ingress rules to create where 'ipv6_cidr_blocks' is used" type = list(map(string)) default = [] } -variable "computed_ingress_with_source_security_group_id" { +variable "computed_ingress_with_referenced_security_group_id" { description = "List of computed ingress rules to create where 'source_security_group_id' is used" type = list(map(string)) default = [] } -variable "computed_ingress_with_prefix_list_ids" { - description = "List of computed ingress rules to create where 'prefix_list_ids' is used" +variable "computed_ingress_with_prefix_list_id" { + description = "List of computed ingress rules to create where 'prefix_list_id' is used" type = list(map(string)) default = [] } @@ -170,26 +170,26 @@ variable "number_of_computed_ingress_with_self" { default = 0 } -variable "number_of_computed_ingress_with_cidr_blocks" { - description = "Number of computed ingress rules to create where 'cidr_blocks' is used" +variable "number_of_computed_ingress_with_cidr_ipv4" { + description = "Number of computed ingress rules to create where 'cidr_ipv4' is used" type = number default = 0 } -variable "number_of_computed_ingress_with_ipv6_cidr_blocks" { +variable "number_of_computed_ingress_with_cidr_ipv6" { description = "Number of computed ingress rules to create where 'ipv6_cidr_blocks' is used" type = number default = 0 } -variable "number_of_computed_ingress_with_source_security_group_id" { +variable "number_of_computed_ingress_with_referenced_security_group_id" { description = "Number of computed ingress rules to create where 'source_security_group_id' is used" type = number default = 0 } -variable "number_of_computed_ingress_with_prefix_list_ids" { - description = "Number of computed ingress rules to create where 'prefix_list_ids' is used" +variable "number_of_computed_ingress_with_prefix_list_id" { + description = "Number of computed ingress rules to create where 'prefix_list_id' is used" type = number default = 0 } @@ -227,37 +227,37 @@ variable "egress_with_self" { default = [] } -variable "egress_with_cidr_blocks" { - description = "List of egress rules to create where 'cidr_blocks' is used" +variable "egress_with_cidr_ipv4" { + description = "List of egress rules to create where 'cidr_ipv4' is used" type = list(map(string)) default = [] } -variable "egress_with_ipv6_cidr_blocks" { +variable "egress_with_cidr_ipv6" { description = "List of egress rules to create where 'ipv6_cidr_blocks' is used" type = list(map(string)) default = [] } -variable "egress_with_source_security_group_id" { +variable "egress_with_referenced_security_group_id" { description = "List of egress rules to create where 'source_security_group_id' is used" type = list(map(string)) default = [] } -variable "egress_with_prefix_list_ids" { - description = "List of egress rules to create where 'prefix_list_ids' is used" +variable "egress_with_prefix_list_id" { + description = "List of egress rules to create where 'prefix_list_id' is used" type = list(map(string)) default = [] } -variable "egress_cidr_blocks" { +variable "egress_cidr_ipv4" { description = "List of IPv4 CIDR ranges to use on all egress rules" type = list(string) default = ["0.0.0.0/0"] } -variable "egress_ipv6_cidr_blocks" { +variable "egress_cidr_ipv6" { description = "List of IPv6 CIDR ranges to use on all egress rules" type = list(string) default = ["::/0"] @@ -284,26 +284,26 @@ variable "computed_egress_with_self" { default = [] } -variable "computed_egress_with_cidr_blocks" { - description = "List of computed egress rules to create where 'cidr_blocks' is used" +variable "computed_egress_with_cidr_ipv4" { + description = "List of computed egress rules to create where 'cidr_ipv4' is used" type = list(map(string)) default = [] } -variable "computed_egress_with_ipv6_cidr_blocks" { +variable "computed_egress_with_cidr_ipv6" { description = "List of computed egress rules to create where 'ipv6_cidr_blocks' is used" type = list(map(string)) default = [] } -variable "computed_egress_with_source_security_group_id" { +variable "computed_egress_with_referenced_security_group_id" { description = "List of computed egress rules to create where 'source_security_group_id' is used" type = list(map(string)) default = [] } -variable "computed_egress_with_prefix_list_ids" { - description = "List of computed egress rules to create where 'prefix_list_ids' is used" +variable "computed_egress_with_prefix_list_id" { + description = "List of computed egress rules to create where 'prefix_list_id' is used" type = list(map(string)) default = [] } @@ -341,26 +341,26 @@ variable "number_of_computed_egress_with_self" { default = 0 } -variable "number_of_computed_egress_with_cidr_blocks" { - description = "Number of computed egress rules to create where 'cidr_blocks' is used" +variable "number_of_computed_egress_with_cidr_ipv4" { + description = "Number of computed egress rules to create where 'cidr_ipv4' is used" type = number default = 0 } -variable "number_of_computed_egress_with_ipv6_cidr_blocks" { +variable "number_of_computed_egress_with_cidr_ipv6" { description = "Number of computed egress rules to create where 'ipv6_cidr_blocks' is used" type = number default = 0 } -variable "number_of_computed_egress_with_source_security_group_id" { +variable "number_of_computed_egress_with_referenced_security_group_id" { description = "Number of computed egress rules to create where 'source_security_group_id' is used" type = number default = 0 } -variable "number_of_computed_egress_with_prefix_list_ids" { - description = "Number of computed egress rules to create where 'prefix_list_ids' is used" +variable "number_of_computed_egress_with_prefix_list_id" { + description = "Number of computed egress rules to create where 'prefix_list_id' is used" type = number default = 0 } diff --git a/modules/winrm/README.md b/modules/winrm/README.md index 05e8a5ad..a2d0667d 100644 --- a/modules/winrm/README.md +++ b/modules/winrm/README.md @@ -55,59 +55,59 @@ No resources. | [computed\_egress\_ipv6\_cidr\_blocks](#input\_computed\_egress\_ipv6\_cidr\_blocks) | List of IPv6 CIDR ranges to use on all computed egress rules | `list(string)` |
[
"::/0"
]
| no | | [computed\_egress\_prefix\_list\_ids](#input\_computed\_egress\_prefix\_list\_ids) | List of prefix list IDs (for allowing access to VPC endpoints) to use on all computed egress rules | `list(string)` | `[]` | no | | [computed\_egress\_rules](#input\_computed\_egress\_rules) | List of computed egress rules to create by name | `list(string)` | `[]` | no | -| [computed\_egress\_with\_cidr\_blocks](#input\_computed\_egress\_with\_cidr\_blocks) | List of computed egress rules to create where 'cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [computed\_egress\_with\_ipv6\_cidr\_blocks](#input\_computed\_egress\_with\_ipv6\_cidr\_blocks) | List of computed egress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [computed\_egress\_with\_prefix\_list\_ids](#input\_computed\_egress\_with\_prefix\_list\_ids) | List of computed egress rules to create where 'prefix\_list\_ids' is used | `list(map(string))` | `[]` | no | +| [computed\_egress\_with\_cidr\_ipv4](#input\_computed\_egress\_with\_cidr\_ipv4) | List of computed egress rules to create where 'cidr\_ipv4' is used | `list(map(string))` | `[]` | no | +| [computed\_egress\_with\_cidr\_ipv6](#input\_computed\_egress\_with\_cidr\_ipv6) | List of computed egress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | +| [computed\_egress\_with\_prefix\_list\_id](#input\_computed\_egress\_with\_prefix\_list\_id) | List of computed egress rules to create where 'prefix\_list\_id' is used | `list(map(string))` | `[]` | no | +| [computed\_egress\_with\_referenced\_security\_group\_id](#input\_computed\_egress\_with\_referenced\_security\_group\_id) | List of computed egress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [computed\_egress\_with\_self](#input\_computed\_egress\_with\_self) | List of computed egress rules to create where 'self' is defined | `list(map(string))` | `[]` | no | -| [computed\_egress\_with\_source\_security\_group\_id](#input\_computed\_egress\_with\_source\_security\_group\_id) | List of computed egress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [computed\_ingress\_cidr\_blocks](#input\_computed\_ingress\_cidr\_blocks) | List of IPv4 CIDR ranges to use on all computed ingress rules | `list(string)` | `[]` | no | | [computed\_ingress\_ipv6\_cidr\_blocks](#input\_computed\_ingress\_ipv6\_cidr\_blocks) | List of IPv6 CIDR ranges to use on all computed ingress rules | `list(string)` | `[]` | no | | [computed\_ingress\_prefix\_list\_ids](#input\_computed\_ingress\_prefix\_list\_ids) | List of prefix list IDs (for allowing access to VPC endpoints) to use on all computed ingress rules | `list(string)` | `[]` | no | | [computed\_ingress\_rules](#input\_computed\_ingress\_rules) | List of computed ingress rules to create by name | `list(string)` | `[]` | no | -| [computed\_ingress\_with\_cidr\_blocks](#input\_computed\_ingress\_with\_cidr\_blocks) | List of computed ingress rules to create where 'cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [computed\_ingress\_with\_ipv6\_cidr\_blocks](#input\_computed\_ingress\_with\_ipv6\_cidr\_blocks) | List of computed ingress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [computed\_ingress\_with\_prefix\_list\_ids](#input\_computed\_ingress\_with\_prefix\_list\_ids) | List of computed ingress rules to create where 'prefix\_list\_ids' is used | `list(map(string))` | `[]` | no | +| [computed\_ingress\_with\_cidr\_ipv4](#input\_computed\_ingress\_with\_cidr\_ipv4) | List of computed ingress rules to create where 'cidr\_ipv4' is used | `list(map(string))` | `[]` | no | +| [computed\_ingress\_with\_cidr\_ipv6](#input\_computed\_ingress\_with\_cidr\_ipv6) | List of computed ingress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | +| [computed\_ingress\_with\_prefix\_list\_id](#input\_computed\_ingress\_with\_prefix\_list\_id) | List of computed ingress rules to create where 'prefix\_list\_id' is used | `list(map(string))` | `[]` | no | +| [computed\_ingress\_with\_referenced\_security\_group\_id](#input\_computed\_ingress\_with\_referenced\_security\_group\_id) | List of computed ingress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [computed\_ingress\_with\_self](#input\_computed\_ingress\_with\_self) | List of computed ingress rules to create where 'self' is defined | `list(map(string))` | `[]` | no | -| [computed\_ingress\_with\_source\_security\_group\_id](#input\_computed\_ingress\_with\_source\_security\_group\_id) | List of computed ingress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [create](#input\_create) | Whether to create security group and all rules | `bool` | `true` | no | | [description](#input\_description) | Description of security group | `string` | `"Security Group managed by Terraform"` | no | -| [egress\_cidr\_blocks](#input\_egress\_cidr\_blocks) | List of IPv4 CIDR ranges to use on all egress rules | `list(string)` |
[
"0.0.0.0/0"
]
| no | -| [egress\_ipv6\_cidr\_blocks](#input\_egress\_ipv6\_cidr\_blocks) | List of IPv6 CIDR ranges to use on all egress rules | `list(string)` |
[
"::/0"
]
| no | +| [egress\_cidr\_ipv4](#input\_egress\_cidr\_ipv4) | List of IPv4 CIDR ranges to use on all egress rules | `list(string)` |
[
"0.0.0.0/0"
]
| no | +| [egress\_cidr\_ipv6](#input\_egress\_cidr\_ipv6) | List of IPv6 CIDR ranges to use on all egress rules | `list(string)` |
[
"::/0"
]
| no | | [egress\_prefix\_list\_ids](#input\_egress\_prefix\_list\_ids) | List of prefix list IDs (for allowing access to VPC endpoints) to use on all egress rules | `list(string)` | `[]` | no | | [egress\_rules](#input\_egress\_rules) | List of egress rules to create by name | `list(string)` | `[]` | no | -| [egress\_with\_cidr\_blocks](#input\_egress\_with\_cidr\_blocks) | List of egress rules to create where 'cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [egress\_with\_ipv6\_cidr\_blocks](#input\_egress\_with\_ipv6\_cidr\_blocks) | List of egress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [egress\_with\_prefix\_list\_ids](#input\_egress\_with\_prefix\_list\_ids) | List of egress rules to create where 'prefix\_list\_ids' is used | `list(map(string))` | `[]` | no | +| [egress\_with\_cidr\_ipv4](#input\_egress\_with\_cidr\_ipv4) | List of egress rules to create where 'cidr\_ipv4' is used | `list(map(string))` | `[]` | no | +| [egress\_with\_cidr\_ipv6](#input\_egress\_with\_cidr\_ipv6) | List of egress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | +| [egress\_with\_prefix\_list\_id](#input\_egress\_with\_prefix\_list\_id) | List of egress rules to create where 'prefix\_list\_id' is used | `list(map(string))` | `[]` | no | +| [egress\_with\_referenced\_security\_group\_id](#input\_egress\_with\_referenced\_security\_group\_id) | List of egress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [egress\_with\_self](#input\_egress\_with\_self) | List of egress rules to create where 'self' is defined | `list(map(string))` | `[]` | no | -| [egress\_with\_source\_security\_group\_id](#input\_egress\_with\_source\_security\_group\_id) | List of egress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | -| [ingress\_cidr\_blocks](#input\_ingress\_cidr\_blocks) | List of IPv4 CIDR ranges to use on all ingress rules | `list(string)` | `[]` | no | -| [ingress\_ipv6\_cidr\_blocks](#input\_ingress\_ipv6\_cidr\_blocks) | List of IPv6 CIDR ranges to use on all ingress rules | `list(string)` | `[]` | no | +| [ingress\_cidr\_ipv4](#input\_ingress\_cidr\_ipv4) | List of IPv4 CIDR ranges to use on all ingress rules | `list(string)` | `[]` | no | +| [ingress\_cidr\_ipv6](#input\_ingress\_cidr\_ipv6) | List of IPv6 CIDR ranges to use on all ingress rules | `list(string)` | `[]` | no | | [ingress\_prefix\_list\_ids](#input\_ingress\_prefix\_list\_ids) | List of prefix list IDs (for allowing access to VPC endpoints) to use on all ingress rules | `list(string)` | `[]` | no | | [ingress\_rules](#input\_ingress\_rules) | List of ingress rules to create by name | `list(string)` | `[]` | no | -| [ingress\_with\_cidr\_blocks](#input\_ingress\_with\_cidr\_blocks) | List of ingress rules to create where 'cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [ingress\_with\_ipv6\_cidr\_blocks](#input\_ingress\_with\_ipv6\_cidr\_blocks) | List of ingress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [ingress\_with\_prefix\_list\_ids](#input\_ingress\_with\_prefix\_list\_ids) | List of ingress rules to create where 'prefix\_list\_ids' is used | `list(map(string))` | `[]` | no | +| [ingress\_with\_cidr\_ipv4](#input\_ingress\_with\_cidr\_ipv4) | List of ingress rules to create where 'cidr\_ipv4' is used | `list(map(string))` | `[]` | no | +| [ingress\_with\_cidr\_ipv6](#input\_ingress\_with\_cidr\_ipv6) | List of ingress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | +| [ingress\_with\_prefix\_list\_id](#input\_ingress\_with\_prefix\_list\_id) | List of ingress rules to create where 'prefix\_list\_id' is used | `list(map(string))` | `[]` | no | +| [ingress\_with\_referenced\_security\_group\_id](#input\_ingress\_with\_referenced\_security\_group\_id) | List of ingress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [ingress\_with\_self](#input\_ingress\_with\_self) | List of ingress rules to create where 'self' is defined | `list(map(string))` | `[]` | no | -| [ingress\_with\_source\_security\_group\_id](#input\_ingress\_with\_source\_security\_group\_id) | List of ingress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [name](#input\_name) | Name of security group | `string` | n/a | yes | | [number\_of\_computed\_egress\_cidr\_blocks](#input\_number\_of\_computed\_egress\_cidr\_blocks) | Number of IPv4 CIDR ranges to use on all computed egress rules | `number` | `0` | no | | [number\_of\_computed\_egress\_ipv6\_cidr\_blocks](#input\_number\_of\_computed\_egress\_ipv6\_cidr\_blocks) | Number of IPv6 CIDR ranges to use on all computed egress rules | `number` | `0` | no | | [number\_of\_computed\_egress\_prefix\_list\_ids](#input\_number\_of\_computed\_egress\_prefix\_list\_ids) | Number of prefix list IDs (for allowing access to VPC endpoints) to use on all computed egress rules | `number` | `0` | no | | [number\_of\_computed\_egress\_rules](#input\_number\_of\_computed\_egress\_rules) | Number of computed egress rules to create by name | `number` | `0` | no | -| [number\_of\_computed\_egress\_with\_cidr\_blocks](#input\_number\_of\_computed\_egress\_with\_cidr\_blocks) | Number of computed egress rules to create where 'cidr\_blocks' is used | `number` | `0` | no | -| [number\_of\_computed\_egress\_with\_ipv6\_cidr\_blocks](#input\_number\_of\_computed\_egress\_with\_ipv6\_cidr\_blocks) | Number of computed egress rules to create where 'ipv6\_cidr\_blocks' is used | `number` | `0` | no | -| [number\_of\_computed\_egress\_with\_prefix\_list\_ids](#input\_number\_of\_computed\_egress\_with\_prefix\_list\_ids) | Number of computed egress rules to create where 'prefix\_list\_ids' is used | `number` | `0` | no | +| [number\_of\_computed\_egress\_with\_cidr\_ipv4](#input\_number\_of\_computed\_egress\_with\_cidr\_ipv4) | Number of computed egress rules to create where 'cidr\_ipv4' is used | `number` | `0` | no | +| [number\_of\_computed\_egress\_with\_cidr\_ipv6](#input\_number\_of\_computed\_egress\_with\_cidr\_ipv6) | Number of computed egress rules to create where 'ipv6\_cidr\_blocks' is used | `number` | `0` | no | +| [number\_of\_computed\_egress\_with\_prefix\_list\_id](#input\_number\_of\_computed\_egress\_with\_prefix\_list\_id) | Number of computed egress rules to create where 'prefix\_list\_id' is used | `number` | `0` | no | +| [number\_of\_computed\_egress\_with\_referenced\_security\_group\_id](#input\_number\_of\_computed\_egress\_with\_referenced\_security\_group\_id) | Number of computed egress rules to create where 'source\_security\_group\_id' is used | `number` | `0` | no | | [number\_of\_computed\_egress\_with\_self](#input\_number\_of\_computed\_egress\_with\_self) | Number of computed egress rules to create where 'self' is defined | `number` | `0` | no | -| [number\_of\_computed\_egress\_with\_source\_security\_group\_id](#input\_number\_of\_computed\_egress\_with\_source\_security\_group\_id) | Number of computed egress rules to create where 'source\_security\_group\_id' is used | `number` | `0` | no | | [number\_of\_computed\_ingress\_cidr\_blocks](#input\_number\_of\_computed\_ingress\_cidr\_blocks) | Number of IPv4 CIDR ranges to use on all computed ingress rules | `number` | `0` | no | | [number\_of\_computed\_ingress\_ipv6\_cidr\_blocks](#input\_number\_of\_computed\_ingress\_ipv6\_cidr\_blocks) | Number of IPv6 CIDR ranges to use on all computed ingress rules | `number` | `0` | no | | [number\_of\_computed\_ingress\_prefix\_list\_ids](#input\_number\_of\_computed\_ingress\_prefix\_list\_ids) | Number of prefix list IDs (for allowing access to VPC endpoints) to use on all computed ingress rules | `number` | `0` | no | | [number\_of\_computed\_ingress\_rules](#input\_number\_of\_computed\_ingress\_rules) | Number of computed ingress rules to create by name | `number` | `0` | no | -| [number\_of\_computed\_ingress\_with\_cidr\_blocks](#input\_number\_of\_computed\_ingress\_with\_cidr\_blocks) | Number of computed ingress rules to create where 'cidr\_blocks' is used | `number` | `0` | no | -| [number\_of\_computed\_ingress\_with\_ipv6\_cidr\_blocks](#input\_number\_of\_computed\_ingress\_with\_ipv6\_cidr\_blocks) | Number of computed ingress rules to create where 'ipv6\_cidr\_blocks' is used | `number` | `0` | no | -| [number\_of\_computed\_ingress\_with\_prefix\_list\_ids](#input\_number\_of\_computed\_ingress\_with\_prefix\_list\_ids) | Number of computed ingress rules to create where 'prefix\_list\_ids' is used | `number` | `0` | no | +| [number\_of\_computed\_ingress\_with\_cidr\_ipv4](#input\_number\_of\_computed\_ingress\_with\_cidr\_ipv4) | Number of computed ingress rules to create where 'cidr\_ipv4' is used | `number` | `0` | no | +| [number\_of\_computed\_ingress\_with\_cidr\_ipv6](#input\_number\_of\_computed\_ingress\_with\_cidr\_ipv6) | Number of computed ingress rules to create where 'ipv6\_cidr\_blocks' is used | `number` | `0` | no | +| [number\_of\_computed\_ingress\_with\_prefix\_list\_id](#input\_number\_of\_computed\_ingress\_with\_prefix\_list\_id) | Number of computed ingress rules to create where 'prefix\_list\_id' is used | `number` | `0` | no | +| [number\_of\_computed\_ingress\_with\_referenced\_security\_group\_id](#input\_number\_of\_computed\_ingress\_with\_referenced\_security\_group\_id) | Number of computed ingress rules to create where 'source\_security\_group\_id' is used | `number` | `0` | no | | [number\_of\_computed\_ingress\_with\_self](#input\_number\_of\_computed\_ingress\_with\_self) | Number of computed ingress rules to create where 'self' is defined | `number` | `0` | no | -| [number\_of\_computed\_ingress\_with\_source\_security\_group\_id](#input\_number\_of\_computed\_ingress\_with\_source\_security\_group\_id) | Number of computed ingress rules to create where 'source\_security\_group\_id' is used | `number` | `0` | no | | [revoke\_rules\_on\_delete](#input\_revoke\_rules\_on\_delete) | Instruct Terraform to revoke all of the Security Groups attached ingress and egress rules before deleting the rule itself. Enable for EMR. | `bool` | `false` | no | | [tags](#input\_tags) | A mapping of tags to assign to security group | `map(string)` | `{}` | no | | [use\_name\_prefix](#input\_use\_name\_prefix) | Whether to use name\_prefix or fixed name. Should be true to able to update security group name after initial creation | `bool` | `true` | no | diff --git a/modules/winrm/main.tf b/modules/winrm/main.tf index 80ea0adb..d2a1bf93 100644 --- a/modules/winrm/main.tf +++ b/modules/winrm/main.tf @@ -19,20 +19,20 @@ module "sg" { ingress_with_self = concat(var.auto_ingress_with_self, var.ingress_with_self) # Open to IPv4 cidr blocks - ingress_with_cidr_blocks = var.ingress_with_cidr_blocks + ingress_with_cidr_ipv4 = var.ingress_with_cidr_ipv4 # Open to IPv6 cidr blocks - ingress_with_ipv6_cidr_blocks = var.ingress_with_ipv6_cidr_blocks + ingress_with_cidr_ipv6 = var.ingress_with_cidr_ipv6 # Open for security group id - ingress_with_source_security_group_id = var.ingress_with_source_security_group_id + ingress_with_referenced_security_group_id = var.ingress_with_referenced_security_group_id # Open for prefix list id - ingress_with_prefix_list_ids = var.ingress_with_prefix_list_ids + ingress_with_prefix_list_id = var.ingress_with_prefix_list_id # Default ingress CIDR blocks - ingress_cidr_blocks = var.ingress_cidr_blocks - ingress_ipv6_cidr_blocks = var.ingress_ipv6_cidr_blocks + ingress_cidr_ipv4 = var.ingress_cidr_ipv4 + ingress_cidr_ipv6 = var.ingress_cidr_ipv6 # Default prefix list ids ingress_prefix_list_ids = var.ingress_prefix_list_ids @@ -47,26 +47,26 @@ module "sg" { computed_ingress_with_self = concat(var.auto_computed_ingress_with_self, var.computed_ingress_with_self) # Open to IPv4 cidr blocks - computed_ingress_with_cidr_blocks = var.computed_ingress_with_cidr_blocks + computed_ingress_with_cidr_ipv4 = var.computed_ingress_with_cidr_ipv4 # Open to IPv6 cidr blocks - computed_ingress_with_ipv6_cidr_blocks = var.computed_ingress_with_ipv6_cidr_blocks + computed_ingress_with_cidr_ipv6 = var.computed_ingress_with_cidr_ipv6 # Open for security group id - computed_ingress_with_source_security_group_id = var.computed_ingress_with_source_security_group_id + computed_ingress_with_referenced_security_group_id = var.computed_ingress_with_referenced_security_group_id # Open for prefix list id - computed_ingress_with_prefix_list_ids = var.computed_ingress_with_prefix_list_ids + computed_ingress_with_prefix_list_id = var.computed_ingress_with_prefix_list_id ############################# # Number of computed ingress ############################# - number_of_computed_ingress_rules = var.auto_number_of_computed_ingress_rules + var.number_of_computed_ingress_rules - number_of_computed_ingress_with_self = var.auto_number_of_computed_ingress_with_self + var.number_of_computed_ingress_with_self - number_of_computed_ingress_with_cidr_blocks = var.number_of_computed_ingress_with_cidr_blocks - number_of_computed_ingress_with_ipv6_cidr_blocks = var.number_of_computed_ingress_with_ipv6_cidr_blocks - number_of_computed_ingress_with_source_security_group_id = var.number_of_computed_ingress_with_source_security_group_id - number_of_computed_ingress_with_prefix_list_ids = var.number_of_computed_ingress_with_prefix_list_ids + number_of_computed_ingress_rules = var.auto_number_of_computed_ingress_rules + var.number_of_computed_ingress_rules + number_of_computed_ingress_with_self = var.auto_number_of_computed_ingress_with_self + var.number_of_computed_ingress_with_self + number_of_computed_ingress_with_cidr_ipv4 = var.number_of_computed_ingress_with_cidr_ipv4 + number_of_computed_ingress_with_cidr_ipv6 = var.number_of_computed_ingress_with_cidr_ipv6 + number_of_computed_ingress_with_referenced_security_group_id = var.number_of_computed_ingress_with_referenced_security_group_id + number_of_computed_ingress_with_prefix_list_id = var.number_of_computed_ingress_with_prefix_list_id ######### # Egress @@ -78,20 +78,20 @@ module "sg" { egress_with_self = concat(var.auto_egress_with_self, var.egress_with_self) # Open to IPv4 cidr blocks - egress_with_cidr_blocks = var.egress_with_cidr_blocks + egress_with_cidr_ipv4 = var.egress_with_cidr_ipv4 # Open to IPv6 cidr blocks - egress_with_ipv6_cidr_blocks = var.egress_with_ipv6_cidr_blocks + egress_with_cidr_ipv6 = var.egress_with_cidr_ipv6 # Open for security group id - egress_with_source_security_group_id = var.egress_with_source_security_group_id + egress_with_referenced_security_group_id = var.egress_with_referenced_security_group_id # Open for prefix list id - egress_with_prefix_list_ids = var.egress_with_prefix_list_ids + egress_with_prefix_list_id = var.egress_with_prefix_list_id # Default egress CIDR blocks - egress_cidr_blocks = var.egress_cidr_blocks - egress_ipv6_cidr_blocks = var.egress_ipv6_cidr_blocks + egress_cidr_ipv4 = var.egress_cidr_ipv4 + egress_cidr_ipv6 = var.egress_cidr_ipv6 # Default prefix list ids egress_prefix_list_ids = var.egress_prefix_list_ids @@ -106,24 +106,24 @@ module "sg" { computed_egress_with_self = concat(var.auto_computed_egress_with_self, var.computed_egress_with_self) # Open to IPv4 cidr blocks - computed_egress_with_cidr_blocks = var.computed_egress_with_cidr_blocks + computed_egress_with_cidr_ipv4 = var.computed_egress_with_cidr_ipv4 # Open to IPv6 cidr blocks - computed_egress_with_ipv6_cidr_blocks = var.computed_egress_with_ipv6_cidr_blocks + computed_egress_with_cidr_ipv6 = var.computed_egress_with_cidr_ipv6 # Open for security group id - computed_egress_with_source_security_group_id = var.computed_egress_with_source_security_group_id + computed_egress_with_referenced_security_group_id = var.computed_egress_with_referenced_security_group_id # Open for prefix list id - computed_egress_with_prefix_list_ids = var.computed_egress_with_prefix_list_ids + computed_egress_with_prefix_list_id = var.computed_egress_with_prefix_list_id ############################# # Number of computed egress ############################# - number_of_computed_egress_rules = var.auto_number_of_computed_egress_rules + var.number_of_computed_egress_rules - number_of_computed_egress_with_self = var.auto_number_of_computed_egress_with_self + var.number_of_computed_egress_with_self - number_of_computed_egress_with_cidr_blocks = var.number_of_computed_egress_with_cidr_blocks - number_of_computed_egress_with_ipv6_cidr_blocks = var.number_of_computed_egress_with_ipv6_cidr_blocks - number_of_computed_egress_with_source_security_group_id = var.number_of_computed_egress_with_source_security_group_id - number_of_computed_egress_with_prefix_list_ids = var.number_of_computed_egress_with_prefix_list_ids + number_of_computed_egress_rules = var.auto_number_of_computed_egress_rules + var.number_of_computed_egress_rules + number_of_computed_egress_with_self = var.auto_number_of_computed_egress_with_self + var.number_of_computed_egress_with_self + number_of_computed_egress_with_cidr_ipv4 = var.number_of_computed_egress_with_cidr_ipv4 + number_of_computed_egress_with_cidr_ipv6 = var.number_of_computed_egress_with_cidr_ipv6 + number_of_computed_egress_with_referenced_security_group_id = var.number_of_computed_egress_with_referenced_security_group_id + number_of_computed_egress_with_prefix_list_id = var.number_of_computed_egress_with_prefix_list_id } diff --git a/modules/winrm/variables.tf b/modules/winrm/variables.tf index 60c8c27b..6590c9e3 100644 --- a/modules/winrm/variables.tf +++ b/modules/winrm/variables.tf @@ -56,37 +56,37 @@ variable "ingress_with_self" { default = [] } -variable "ingress_with_cidr_blocks" { - description = "List of ingress rules to create where 'cidr_blocks' is used" +variable "ingress_with_cidr_ipv4" { + description = "List of ingress rules to create where 'cidr_ipv4' is used" type = list(map(string)) default = [] } -variable "ingress_with_ipv6_cidr_blocks" { +variable "ingress_with_cidr_ipv6" { description = "List of ingress rules to create where 'ipv6_cidr_blocks' is used" type = list(map(string)) default = [] } -variable "ingress_with_source_security_group_id" { +variable "ingress_with_referenced_security_group_id" { description = "List of ingress rules to create where 'source_security_group_id' is used" type = list(map(string)) default = [] } -variable "ingress_with_prefix_list_ids" { - description = "List of ingress rules to create where 'prefix_list_ids' is used" +variable "ingress_with_prefix_list_id" { + description = "List of ingress rules to create where 'prefix_list_id' is used" type = list(map(string)) default = [] } -variable "ingress_cidr_blocks" { +variable "ingress_cidr_ipv4" { description = "List of IPv4 CIDR ranges to use on all ingress rules" type = list(string) default = [] } -variable "ingress_ipv6_cidr_blocks" { +variable "ingress_cidr_ipv6" { description = "List of IPv6 CIDR ranges to use on all ingress rules" type = list(string) default = [] @@ -113,26 +113,26 @@ variable "computed_ingress_with_self" { default = [] } -variable "computed_ingress_with_cidr_blocks" { - description = "List of computed ingress rules to create where 'cidr_blocks' is used" +variable "computed_ingress_with_cidr_ipv4" { + description = "List of computed ingress rules to create where 'cidr_ipv4' is used" type = list(map(string)) default = [] } -variable "computed_ingress_with_ipv6_cidr_blocks" { +variable "computed_ingress_with_cidr_ipv6" { description = "List of computed ingress rules to create where 'ipv6_cidr_blocks' is used" type = list(map(string)) default = [] } -variable "computed_ingress_with_source_security_group_id" { +variable "computed_ingress_with_referenced_security_group_id" { description = "List of computed ingress rules to create where 'source_security_group_id' is used" type = list(map(string)) default = [] } -variable "computed_ingress_with_prefix_list_ids" { - description = "List of computed ingress rules to create where 'prefix_list_ids' is used" +variable "computed_ingress_with_prefix_list_id" { + description = "List of computed ingress rules to create where 'prefix_list_id' is used" type = list(map(string)) default = [] } @@ -170,26 +170,26 @@ variable "number_of_computed_ingress_with_self" { default = 0 } -variable "number_of_computed_ingress_with_cidr_blocks" { - description = "Number of computed ingress rules to create where 'cidr_blocks' is used" +variable "number_of_computed_ingress_with_cidr_ipv4" { + description = "Number of computed ingress rules to create where 'cidr_ipv4' is used" type = number default = 0 } -variable "number_of_computed_ingress_with_ipv6_cidr_blocks" { +variable "number_of_computed_ingress_with_cidr_ipv6" { description = "Number of computed ingress rules to create where 'ipv6_cidr_blocks' is used" type = number default = 0 } -variable "number_of_computed_ingress_with_source_security_group_id" { +variable "number_of_computed_ingress_with_referenced_security_group_id" { description = "Number of computed ingress rules to create where 'source_security_group_id' is used" type = number default = 0 } -variable "number_of_computed_ingress_with_prefix_list_ids" { - description = "Number of computed ingress rules to create where 'prefix_list_ids' is used" +variable "number_of_computed_ingress_with_prefix_list_id" { + description = "Number of computed ingress rules to create where 'prefix_list_id' is used" type = number default = 0 } @@ -227,37 +227,37 @@ variable "egress_with_self" { default = [] } -variable "egress_with_cidr_blocks" { - description = "List of egress rules to create where 'cidr_blocks' is used" +variable "egress_with_cidr_ipv4" { + description = "List of egress rules to create where 'cidr_ipv4' is used" type = list(map(string)) default = [] } -variable "egress_with_ipv6_cidr_blocks" { +variable "egress_with_cidr_ipv6" { description = "List of egress rules to create where 'ipv6_cidr_blocks' is used" type = list(map(string)) default = [] } -variable "egress_with_source_security_group_id" { +variable "egress_with_referenced_security_group_id" { description = "List of egress rules to create where 'source_security_group_id' is used" type = list(map(string)) default = [] } -variable "egress_with_prefix_list_ids" { - description = "List of egress rules to create where 'prefix_list_ids' is used" +variable "egress_with_prefix_list_id" { + description = "List of egress rules to create where 'prefix_list_id' is used" type = list(map(string)) default = [] } -variable "egress_cidr_blocks" { +variable "egress_cidr_ipv4" { description = "List of IPv4 CIDR ranges to use on all egress rules" type = list(string) default = ["0.0.0.0/0"] } -variable "egress_ipv6_cidr_blocks" { +variable "egress_cidr_ipv6" { description = "List of IPv6 CIDR ranges to use on all egress rules" type = list(string) default = ["::/0"] @@ -284,26 +284,26 @@ variable "computed_egress_with_self" { default = [] } -variable "computed_egress_with_cidr_blocks" { - description = "List of computed egress rules to create where 'cidr_blocks' is used" +variable "computed_egress_with_cidr_ipv4" { + description = "List of computed egress rules to create where 'cidr_ipv4' is used" type = list(map(string)) default = [] } -variable "computed_egress_with_ipv6_cidr_blocks" { +variable "computed_egress_with_cidr_ipv6" { description = "List of computed egress rules to create where 'ipv6_cidr_blocks' is used" type = list(map(string)) default = [] } -variable "computed_egress_with_source_security_group_id" { +variable "computed_egress_with_referenced_security_group_id" { description = "List of computed egress rules to create where 'source_security_group_id' is used" type = list(map(string)) default = [] } -variable "computed_egress_with_prefix_list_ids" { - description = "List of computed egress rules to create where 'prefix_list_ids' is used" +variable "computed_egress_with_prefix_list_id" { + description = "List of computed egress rules to create where 'prefix_list_id' is used" type = list(map(string)) default = [] } @@ -341,26 +341,26 @@ variable "number_of_computed_egress_with_self" { default = 0 } -variable "number_of_computed_egress_with_cidr_blocks" { - description = "Number of computed egress rules to create where 'cidr_blocks' is used" +variable "number_of_computed_egress_with_cidr_ipv4" { + description = "Number of computed egress rules to create where 'cidr_ipv4' is used" type = number default = 0 } -variable "number_of_computed_egress_with_ipv6_cidr_blocks" { +variable "number_of_computed_egress_with_cidr_ipv6" { description = "Number of computed egress rules to create where 'ipv6_cidr_blocks' is used" type = number default = 0 } -variable "number_of_computed_egress_with_source_security_group_id" { +variable "number_of_computed_egress_with_referenced_security_group_id" { description = "Number of computed egress rules to create where 'source_security_group_id' is used" type = number default = 0 } -variable "number_of_computed_egress_with_prefix_list_ids" { - description = "Number of computed egress rules to create where 'prefix_list_ids' is used" +variable "number_of_computed_egress_with_prefix_list_id" { + description = "Number of computed egress rules to create where 'prefix_list_id' is used" type = number default = 0 } diff --git a/modules/zabbix/README.md b/modules/zabbix/README.md index 305f5319..bad25bfa 100644 --- a/modules/zabbix/README.md +++ b/modules/zabbix/README.md @@ -55,59 +55,59 @@ No resources. | [computed\_egress\_ipv6\_cidr\_blocks](#input\_computed\_egress\_ipv6\_cidr\_blocks) | List of IPv6 CIDR ranges to use on all computed egress rules | `list(string)` |
[
"::/0"
]
| no | | [computed\_egress\_prefix\_list\_ids](#input\_computed\_egress\_prefix\_list\_ids) | List of prefix list IDs (for allowing access to VPC endpoints) to use on all computed egress rules | `list(string)` | `[]` | no | | [computed\_egress\_rules](#input\_computed\_egress\_rules) | List of computed egress rules to create by name | `list(string)` | `[]` | no | -| [computed\_egress\_with\_cidr\_blocks](#input\_computed\_egress\_with\_cidr\_blocks) | List of computed egress rules to create where 'cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [computed\_egress\_with\_ipv6\_cidr\_blocks](#input\_computed\_egress\_with\_ipv6\_cidr\_blocks) | List of computed egress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [computed\_egress\_with\_prefix\_list\_ids](#input\_computed\_egress\_with\_prefix\_list\_ids) | List of computed egress rules to create where 'prefix\_list\_ids' is used | `list(map(string))` | `[]` | no | +| [computed\_egress\_with\_cidr\_ipv4](#input\_computed\_egress\_with\_cidr\_ipv4) | List of computed egress rules to create where 'cidr\_ipv4' is used | `list(map(string))` | `[]` | no | +| [computed\_egress\_with\_cidr\_ipv6](#input\_computed\_egress\_with\_cidr\_ipv6) | List of computed egress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | +| [computed\_egress\_with\_prefix\_list\_id](#input\_computed\_egress\_with\_prefix\_list\_id) | List of computed egress rules to create where 'prefix\_list\_id' is used | `list(map(string))` | `[]` | no | +| [computed\_egress\_with\_referenced\_security\_group\_id](#input\_computed\_egress\_with\_referenced\_security\_group\_id) | List of computed egress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [computed\_egress\_with\_self](#input\_computed\_egress\_with\_self) | List of computed egress rules to create where 'self' is defined | `list(map(string))` | `[]` | no | -| [computed\_egress\_with\_source\_security\_group\_id](#input\_computed\_egress\_with\_source\_security\_group\_id) | List of computed egress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [computed\_ingress\_cidr\_blocks](#input\_computed\_ingress\_cidr\_blocks) | List of IPv4 CIDR ranges to use on all computed ingress rules | `list(string)` | `[]` | no | | [computed\_ingress\_ipv6\_cidr\_blocks](#input\_computed\_ingress\_ipv6\_cidr\_blocks) | List of IPv6 CIDR ranges to use on all computed ingress rules | `list(string)` | `[]` | no | | [computed\_ingress\_prefix\_list\_ids](#input\_computed\_ingress\_prefix\_list\_ids) | List of prefix list IDs (for allowing access to VPC endpoints) to use on all computed ingress rules | `list(string)` | `[]` | no | | [computed\_ingress\_rules](#input\_computed\_ingress\_rules) | List of computed ingress rules to create by name | `list(string)` | `[]` | no | -| [computed\_ingress\_with\_cidr\_blocks](#input\_computed\_ingress\_with\_cidr\_blocks) | List of computed ingress rules to create where 'cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [computed\_ingress\_with\_ipv6\_cidr\_blocks](#input\_computed\_ingress\_with\_ipv6\_cidr\_blocks) | List of computed ingress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [computed\_ingress\_with\_prefix\_list\_ids](#input\_computed\_ingress\_with\_prefix\_list\_ids) | List of computed ingress rules to create where 'prefix\_list\_ids' is used | `list(map(string))` | `[]` | no | +| [computed\_ingress\_with\_cidr\_ipv4](#input\_computed\_ingress\_with\_cidr\_ipv4) | List of computed ingress rules to create where 'cidr\_ipv4' is used | `list(map(string))` | `[]` | no | +| [computed\_ingress\_with\_cidr\_ipv6](#input\_computed\_ingress\_with\_cidr\_ipv6) | List of computed ingress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | +| [computed\_ingress\_with\_prefix\_list\_id](#input\_computed\_ingress\_with\_prefix\_list\_id) | List of computed ingress rules to create where 'prefix\_list\_id' is used | `list(map(string))` | `[]` | no | +| [computed\_ingress\_with\_referenced\_security\_group\_id](#input\_computed\_ingress\_with\_referenced\_security\_group\_id) | List of computed ingress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [computed\_ingress\_with\_self](#input\_computed\_ingress\_with\_self) | List of computed ingress rules to create where 'self' is defined | `list(map(string))` | `[]` | no | -| [computed\_ingress\_with\_source\_security\_group\_id](#input\_computed\_ingress\_with\_source\_security\_group\_id) | List of computed ingress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [create](#input\_create) | Whether to create security group and all rules | `bool` | `true` | no | | [description](#input\_description) | Description of security group | `string` | `"Security Group managed by Terraform"` | no | -| [egress\_cidr\_blocks](#input\_egress\_cidr\_blocks) | List of IPv4 CIDR ranges to use on all egress rules | `list(string)` |
[
"0.0.0.0/0"
]
| no | -| [egress\_ipv6\_cidr\_blocks](#input\_egress\_ipv6\_cidr\_blocks) | List of IPv6 CIDR ranges to use on all egress rules | `list(string)` |
[
"::/0"
]
| no | +| [egress\_cidr\_ipv4](#input\_egress\_cidr\_ipv4) | List of IPv4 CIDR ranges to use on all egress rules | `list(string)` |
[
"0.0.0.0/0"
]
| no | +| [egress\_cidr\_ipv6](#input\_egress\_cidr\_ipv6) | List of IPv6 CIDR ranges to use on all egress rules | `list(string)` |
[
"::/0"
]
| no | | [egress\_prefix\_list\_ids](#input\_egress\_prefix\_list\_ids) | List of prefix list IDs (for allowing access to VPC endpoints) to use on all egress rules | `list(string)` | `[]` | no | | [egress\_rules](#input\_egress\_rules) | List of egress rules to create by name | `list(string)` | `[]` | no | -| [egress\_with\_cidr\_blocks](#input\_egress\_with\_cidr\_blocks) | List of egress rules to create where 'cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [egress\_with\_ipv6\_cidr\_blocks](#input\_egress\_with\_ipv6\_cidr\_blocks) | List of egress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [egress\_with\_prefix\_list\_ids](#input\_egress\_with\_prefix\_list\_ids) | List of egress rules to create where 'prefix\_list\_ids' is used | `list(map(string))` | `[]` | no | +| [egress\_with\_cidr\_ipv4](#input\_egress\_with\_cidr\_ipv4) | List of egress rules to create where 'cidr\_ipv4' is used | `list(map(string))` | `[]` | no | +| [egress\_with\_cidr\_ipv6](#input\_egress\_with\_cidr\_ipv6) | List of egress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | +| [egress\_with\_prefix\_list\_id](#input\_egress\_with\_prefix\_list\_id) | List of egress rules to create where 'prefix\_list\_id' is used | `list(map(string))` | `[]` | no | +| [egress\_with\_referenced\_security\_group\_id](#input\_egress\_with\_referenced\_security\_group\_id) | List of egress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [egress\_with\_self](#input\_egress\_with\_self) | List of egress rules to create where 'self' is defined | `list(map(string))` | `[]` | no | -| [egress\_with\_source\_security\_group\_id](#input\_egress\_with\_source\_security\_group\_id) | List of egress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | -| [ingress\_cidr\_blocks](#input\_ingress\_cidr\_blocks) | List of IPv4 CIDR ranges to use on all ingress rules | `list(string)` | `[]` | no | -| [ingress\_ipv6\_cidr\_blocks](#input\_ingress\_ipv6\_cidr\_blocks) | List of IPv6 CIDR ranges to use on all ingress rules | `list(string)` | `[]` | no | +| [ingress\_cidr\_ipv4](#input\_ingress\_cidr\_ipv4) | List of IPv4 CIDR ranges to use on all ingress rules | `list(string)` | `[]` | no | +| [ingress\_cidr\_ipv6](#input\_ingress\_cidr\_ipv6) | List of IPv6 CIDR ranges to use on all ingress rules | `list(string)` | `[]` | no | | [ingress\_prefix\_list\_ids](#input\_ingress\_prefix\_list\_ids) | List of prefix list IDs (for allowing access to VPC endpoints) to use on all ingress rules | `list(string)` | `[]` | no | | [ingress\_rules](#input\_ingress\_rules) | List of ingress rules to create by name | `list(string)` | `[]` | no | -| [ingress\_with\_cidr\_blocks](#input\_ingress\_with\_cidr\_blocks) | List of ingress rules to create where 'cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [ingress\_with\_ipv6\_cidr\_blocks](#input\_ingress\_with\_ipv6\_cidr\_blocks) | List of ingress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [ingress\_with\_prefix\_list\_ids](#input\_ingress\_with\_prefix\_list\_ids) | List of ingress rules to create where 'prefix\_list\_ids' is used | `list(map(string))` | `[]` | no | +| [ingress\_with\_cidr\_ipv4](#input\_ingress\_with\_cidr\_ipv4) | List of ingress rules to create where 'cidr\_ipv4' is used | `list(map(string))` | `[]` | no | +| [ingress\_with\_cidr\_ipv6](#input\_ingress\_with\_cidr\_ipv6) | List of ingress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | +| [ingress\_with\_prefix\_list\_id](#input\_ingress\_with\_prefix\_list\_id) | List of ingress rules to create where 'prefix\_list\_id' is used | `list(map(string))` | `[]` | no | +| [ingress\_with\_referenced\_security\_group\_id](#input\_ingress\_with\_referenced\_security\_group\_id) | List of ingress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [ingress\_with\_self](#input\_ingress\_with\_self) | List of ingress rules to create where 'self' is defined | `list(map(string))` | `[]` | no | -| [ingress\_with\_source\_security\_group\_id](#input\_ingress\_with\_source\_security\_group\_id) | List of ingress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [name](#input\_name) | Name of security group | `string` | n/a | yes | | [number\_of\_computed\_egress\_cidr\_blocks](#input\_number\_of\_computed\_egress\_cidr\_blocks) | Number of IPv4 CIDR ranges to use on all computed egress rules | `number` | `0` | no | | [number\_of\_computed\_egress\_ipv6\_cidr\_blocks](#input\_number\_of\_computed\_egress\_ipv6\_cidr\_blocks) | Number of IPv6 CIDR ranges to use on all computed egress rules | `number` | `0` | no | | [number\_of\_computed\_egress\_prefix\_list\_ids](#input\_number\_of\_computed\_egress\_prefix\_list\_ids) | Number of prefix list IDs (for allowing access to VPC endpoints) to use on all computed egress rules | `number` | `0` | no | | [number\_of\_computed\_egress\_rules](#input\_number\_of\_computed\_egress\_rules) | Number of computed egress rules to create by name | `number` | `0` | no | -| [number\_of\_computed\_egress\_with\_cidr\_blocks](#input\_number\_of\_computed\_egress\_with\_cidr\_blocks) | Number of computed egress rules to create where 'cidr\_blocks' is used | `number` | `0` | no | -| [number\_of\_computed\_egress\_with\_ipv6\_cidr\_blocks](#input\_number\_of\_computed\_egress\_with\_ipv6\_cidr\_blocks) | Number of computed egress rules to create where 'ipv6\_cidr\_blocks' is used | `number` | `0` | no | -| [number\_of\_computed\_egress\_with\_prefix\_list\_ids](#input\_number\_of\_computed\_egress\_with\_prefix\_list\_ids) | Number of computed egress rules to create where 'prefix\_list\_ids' is used | `number` | `0` | no | +| [number\_of\_computed\_egress\_with\_cidr\_ipv4](#input\_number\_of\_computed\_egress\_with\_cidr\_ipv4) | Number of computed egress rules to create where 'cidr\_ipv4' is used | `number` | `0` | no | +| [number\_of\_computed\_egress\_with\_cidr\_ipv6](#input\_number\_of\_computed\_egress\_with\_cidr\_ipv6) | Number of computed egress rules to create where 'ipv6\_cidr\_blocks' is used | `number` | `0` | no | +| [number\_of\_computed\_egress\_with\_prefix\_list\_id](#input\_number\_of\_computed\_egress\_with\_prefix\_list\_id) | Number of computed egress rules to create where 'prefix\_list\_id' is used | `number` | `0` | no | +| [number\_of\_computed\_egress\_with\_referenced\_security\_group\_id](#input\_number\_of\_computed\_egress\_with\_referenced\_security\_group\_id) | Number of computed egress rules to create where 'source\_security\_group\_id' is used | `number` | `0` | no | | [number\_of\_computed\_egress\_with\_self](#input\_number\_of\_computed\_egress\_with\_self) | Number of computed egress rules to create where 'self' is defined | `number` | `0` | no | -| [number\_of\_computed\_egress\_with\_source\_security\_group\_id](#input\_number\_of\_computed\_egress\_with\_source\_security\_group\_id) | Number of computed egress rules to create where 'source\_security\_group\_id' is used | `number` | `0` | no | | [number\_of\_computed\_ingress\_cidr\_blocks](#input\_number\_of\_computed\_ingress\_cidr\_blocks) | Number of IPv4 CIDR ranges to use on all computed ingress rules | `number` | `0` | no | | [number\_of\_computed\_ingress\_ipv6\_cidr\_blocks](#input\_number\_of\_computed\_ingress\_ipv6\_cidr\_blocks) | Number of IPv6 CIDR ranges to use on all computed ingress rules | `number` | `0` | no | | [number\_of\_computed\_ingress\_prefix\_list\_ids](#input\_number\_of\_computed\_ingress\_prefix\_list\_ids) | Number of prefix list IDs (for allowing access to VPC endpoints) to use on all computed ingress rules | `number` | `0` | no | | [number\_of\_computed\_ingress\_rules](#input\_number\_of\_computed\_ingress\_rules) | Number of computed ingress rules to create by name | `number` | `0` | no | -| [number\_of\_computed\_ingress\_with\_cidr\_blocks](#input\_number\_of\_computed\_ingress\_with\_cidr\_blocks) | Number of computed ingress rules to create where 'cidr\_blocks' is used | `number` | `0` | no | -| [number\_of\_computed\_ingress\_with\_ipv6\_cidr\_blocks](#input\_number\_of\_computed\_ingress\_with\_ipv6\_cidr\_blocks) | Number of computed ingress rules to create where 'ipv6\_cidr\_blocks' is used | `number` | `0` | no | -| [number\_of\_computed\_ingress\_with\_prefix\_list\_ids](#input\_number\_of\_computed\_ingress\_with\_prefix\_list\_ids) | Number of computed ingress rules to create where 'prefix\_list\_ids' is used | `number` | `0` | no | +| [number\_of\_computed\_ingress\_with\_cidr\_ipv4](#input\_number\_of\_computed\_ingress\_with\_cidr\_ipv4) | Number of computed ingress rules to create where 'cidr\_ipv4' is used | `number` | `0` | no | +| [number\_of\_computed\_ingress\_with\_cidr\_ipv6](#input\_number\_of\_computed\_ingress\_with\_cidr\_ipv6) | Number of computed ingress rules to create where 'ipv6\_cidr\_blocks' is used | `number` | `0` | no | +| [number\_of\_computed\_ingress\_with\_prefix\_list\_id](#input\_number\_of\_computed\_ingress\_with\_prefix\_list\_id) | Number of computed ingress rules to create where 'prefix\_list\_id' is used | `number` | `0` | no | +| [number\_of\_computed\_ingress\_with\_referenced\_security\_group\_id](#input\_number\_of\_computed\_ingress\_with\_referenced\_security\_group\_id) | Number of computed ingress rules to create where 'source\_security\_group\_id' is used | `number` | `0` | no | | [number\_of\_computed\_ingress\_with\_self](#input\_number\_of\_computed\_ingress\_with\_self) | Number of computed ingress rules to create where 'self' is defined | `number` | `0` | no | -| [number\_of\_computed\_ingress\_with\_source\_security\_group\_id](#input\_number\_of\_computed\_ingress\_with\_source\_security\_group\_id) | Number of computed ingress rules to create where 'source\_security\_group\_id' is used | `number` | `0` | no | | [revoke\_rules\_on\_delete](#input\_revoke\_rules\_on\_delete) | Instruct Terraform to revoke all of the Security Groups attached ingress and egress rules before deleting the rule itself. Enable for EMR. | `bool` | `false` | no | | [tags](#input\_tags) | A mapping of tags to assign to security group | `map(string)` | `{}` | no | | [use\_name\_prefix](#input\_use\_name\_prefix) | Whether to use name\_prefix or fixed name. Should be true to able to update security group name after initial creation | `bool` | `true` | no | diff --git a/modules/zabbix/main.tf b/modules/zabbix/main.tf index 80ea0adb..d2a1bf93 100644 --- a/modules/zabbix/main.tf +++ b/modules/zabbix/main.tf @@ -19,20 +19,20 @@ module "sg" { ingress_with_self = concat(var.auto_ingress_with_self, var.ingress_with_self) # Open to IPv4 cidr blocks - ingress_with_cidr_blocks = var.ingress_with_cidr_blocks + ingress_with_cidr_ipv4 = var.ingress_with_cidr_ipv4 # Open to IPv6 cidr blocks - ingress_with_ipv6_cidr_blocks = var.ingress_with_ipv6_cidr_blocks + ingress_with_cidr_ipv6 = var.ingress_with_cidr_ipv6 # Open for security group id - ingress_with_source_security_group_id = var.ingress_with_source_security_group_id + ingress_with_referenced_security_group_id = var.ingress_with_referenced_security_group_id # Open for prefix list id - ingress_with_prefix_list_ids = var.ingress_with_prefix_list_ids + ingress_with_prefix_list_id = var.ingress_with_prefix_list_id # Default ingress CIDR blocks - ingress_cidr_blocks = var.ingress_cidr_blocks - ingress_ipv6_cidr_blocks = var.ingress_ipv6_cidr_blocks + ingress_cidr_ipv4 = var.ingress_cidr_ipv4 + ingress_cidr_ipv6 = var.ingress_cidr_ipv6 # Default prefix list ids ingress_prefix_list_ids = var.ingress_prefix_list_ids @@ -47,26 +47,26 @@ module "sg" { computed_ingress_with_self = concat(var.auto_computed_ingress_with_self, var.computed_ingress_with_self) # Open to IPv4 cidr blocks - computed_ingress_with_cidr_blocks = var.computed_ingress_with_cidr_blocks + computed_ingress_with_cidr_ipv4 = var.computed_ingress_with_cidr_ipv4 # Open to IPv6 cidr blocks - computed_ingress_with_ipv6_cidr_blocks = var.computed_ingress_with_ipv6_cidr_blocks + computed_ingress_with_cidr_ipv6 = var.computed_ingress_with_cidr_ipv6 # Open for security group id - computed_ingress_with_source_security_group_id = var.computed_ingress_with_source_security_group_id + computed_ingress_with_referenced_security_group_id = var.computed_ingress_with_referenced_security_group_id # Open for prefix list id - computed_ingress_with_prefix_list_ids = var.computed_ingress_with_prefix_list_ids + computed_ingress_with_prefix_list_id = var.computed_ingress_with_prefix_list_id ############################# # Number of computed ingress ############################# - number_of_computed_ingress_rules = var.auto_number_of_computed_ingress_rules + var.number_of_computed_ingress_rules - number_of_computed_ingress_with_self = var.auto_number_of_computed_ingress_with_self + var.number_of_computed_ingress_with_self - number_of_computed_ingress_with_cidr_blocks = var.number_of_computed_ingress_with_cidr_blocks - number_of_computed_ingress_with_ipv6_cidr_blocks = var.number_of_computed_ingress_with_ipv6_cidr_blocks - number_of_computed_ingress_with_source_security_group_id = var.number_of_computed_ingress_with_source_security_group_id - number_of_computed_ingress_with_prefix_list_ids = var.number_of_computed_ingress_with_prefix_list_ids + number_of_computed_ingress_rules = var.auto_number_of_computed_ingress_rules + var.number_of_computed_ingress_rules + number_of_computed_ingress_with_self = var.auto_number_of_computed_ingress_with_self + var.number_of_computed_ingress_with_self + number_of_computed_ingress_with_cidr_ipv4 = var.number_of_computed_ingress_with_cidr_ipv4 + number_of_computed_ingress_with_cidr_ipv6 = var.number_of_computed_ingress_with_cidr_ipv6 + number_of_computed_ingress_with_referenced_security_group_id = var.number_of_computed_ingress_with_referenced_security_group_id + number_of_computed_ingress_with_prefix_list_id = var.number_of_computed_ingress_with_prefix_list_id ######### # Egress @@ -78,20 +78,20 @@ module "sg" { egress_with_self = concat(var.auto_egress_with_self, var.egress_with_self) # Open to IPv4 cidr blocks - egress_with_cidr_blocks = var.egress_with_cidr_blocks + egress_with_cidr_ipv4 = var.egress_with_cidr_ipv4 # Open to IPv6 cidr blocks - egress_with_ipv6_cidr_blocks = var.egress_with_ipv6_cidr_blocks + egress_with_cidr_ipv6 = var.egress_with_cidr_ipv6 # Open for security group id - egress_with_source_security_group_id = var.egress_with_source_security_group_id + egress_with_referenced_security_group_id = var.egress_with_referenced_security_group_id # Open for prefix list id - egress_with_prefix_list_ids = var.egress_with_prefix_list_ids + egress_with_prefix_list_id = var.egress_with_prefix_list_id # Default egress CIDR blocks - egress_cidr_blocks = var.egress_cidr_blocks - egress_ipv6_cidr_blocks = var.egress_ipv6_cidr_blocks + egress_cidr_ipv4 = var.egress_cidr_ipv4 + egress_cidr_ipv6 = var.egress_cidr_ipv6 # Default prefix list ids egress_prefix_list_ids = var.egress_prefix_list_ids @@ -106,24 +106,24 @@ module "sg" { computed_egress_with_self = concat(var.auto_computed_egress_with_self, var.computed_egress_with_self) # Open to IPv4 cidr blocks - computed_egress_with_cidr_blocks = var.computed_egress_with_cidr_blocks + computed_egress_with_cidr_ipv4 = var.computed_egress_with_cidr_ipv4 # Open to IPv6 cidr blocks - computed_egress_with_ipv6_cidr_blocks = var.computed_egress_with_ipv6_cidr_blocks + computed_egress_with_cidr_ipv6 = var.computed_egress_with_cidr_ipv6 # Open for security group id - computed_egress_with_source_security_group_id = var.computed_egress_with_source_security_group_id + computed_egress_with_referenced_security_group_id = var.computed_egress_with_referenced_security_group_id # Open for prefix list id - computed_egress_with_prefix_list_ids = var.computed_egress_with_prefix_list_ids + computed_egress_with_prefix_list_id = var.computed_egress_with_prefix_list_id ############################# # Number of computed egress ############################# - number_of_computed_egress_rules = var.auto_number_of_computed_egress_rules + var.number_of_computed_egress_rules - number_of_computed_egress_with_self = var.auto_number_of_computed_egress_with_self + var.number_of_computed_egress_with_self - number_of_computed_egress_with_cidr_blocks = var.number_of_computed_egress_with_cidr_blocks - number_of_computed_egress_with_ipv6_cidr_blocks = var.number_of_computed_egress_with_ipv6_cidr_blocks - number_of_computed_egress_with_source_security_group_id = var.number_of_computed_egress_with_source_security_group_id - number_of_computed_egress_with_prefix_list_ids = var.number_of_computed_egress_with_prefix_list_ids + number_of_computed_egress_rules = var.auto_number_of_computed_egress_rules + var.number_of_computed_egress_rules + number_of_computed_egress_with_self = var.auto_number_of_computed_egress_with_self + var.number_of_computed_egress_with_self + number_of_computed_egress_with_cidr_ipv4 = var.number_of_computed_egress_with_cidr_ipv4 + number_of_computed_egress_with_cidr_ipv6 = var.number_of_computed_egress_with_cidr_ipv6 + number_of_computed_egress_with_referenced_security_group_id = var.number_of_computed_egress_with_referenced_security_group_id + number_of_computed_egress_with_prefix_list_id = var.number_of_computed_egress_with_prefix_list_id } diff --git a/modules/zabbix/variables.tf b/modules/zabbix/variables.tf index 60c8c27b..6590c9e3 100644 --- a/modules/zabbix/variables.tf +++ b/modules/zabbix/variables.tf @@ -56,37 +56,37 @@ variable "ingress_with_self" { default = [] } -variable "ingress_with_cidr_blocks" { - description = "List of ingress rules to create where 'cidr_blocks' is used" +variable "ingress_with_cidr_ipv4" { + description = "List of ingress rules to create where 'cidr_ipv4' is used" type = list(map(string)) default = [] } -variable "ingress_with_ipv6_cidr_blocks" { +variable "ingress_with_cidr_ipv6" { description = "List of ingress rules to create where 'ipv6_cidr_blocks' is used" type = list(map(string)) default = [] } -variable "ingress_with_source_security_group_id" { +variable "ingress_with_referenced_security_group_id" { description = "List of ingress rules to create where 'source_security_group_id' is used" type = list(map(string)) default = [] } -variable "ingress_with_prefix_list_ids" { - description = "List of ingress rules to create where 'prefix_list_ids' is used" +variable "ingress_with_prefix_list_id" { + description = "List of ingress rules to create where 'prefix_list_id' is used" type = list(map(string)) default = [] } -variable "ingress_cidr_blocks" { +variable "ingress_cidr_ipv4" { description = "List of IPv4 CIDR ranges to use on all ingress rules" type = list(string) default = [] } -variable "ingress_ipv6_cidr_blocks" { +variable "ingress_cidr_ipv6" { description = "List of IPv6 CIDR ranges to use on all ingress rules" type = list(string) default = [] @@ -113,26 +113,26 @@ variable "computed_ingress_with_self" { default = [] } -variable "computed_ingress_with_cidr_blocks" { - description = "List of computed ingress rules to create where 'cidr_blocks' is used" +variable "computed_ingress_with_cidr_ipv4" { + description = "List of computed ingress rules to create where 'cidr_ipv4' is used" type = list(map(string)) default = [] } -variable "computed_ingress_with_ipv6_cidr_blocks" { +variable "computed_ingress_with_cidr_ipv6" { description = "List of computed ingress rules to create where 'ipv6_cidr_blocks' is used" type = list(map(string)) default = [] } -variable "computed_ingress_with_source_security_group_id" { +variable "computed_ingress_with_referenced_security_group_id" { description = "List of computed ingress rules to create where 'source_security_group_id' is used" type = list(map(string)) default = [] } -variable "computed_ingress_with_prefix_list_ids" { - description = "List of computed ingress rules to create where 'prefix_list_ids' is used" +variable "computed_ingress_with_prefix_list_id" { + description = "List of computed ingress rules to create where 'prefix_list_id' is used" type = list(map(string)) default = [] } @@ -170,26 +170,26 @@ variable "number_of_computed_ingress_with_self" { default = 0 } -variable "number_of_computed_ingress_with_cidr_blocks" { - description = "Number of computed ingress rules to create where 'cidr_blocks' is used" +variable "number_of_computed_ingress_with_cidr_ipv4" { + description = "Number of computed ingress rules to create where 'cidr_ipv4' is used" type = number default = 0 } -variable "number_of_computed_ingress_with_ipv6_cidr_blocks" { +variable "number_of_computed_ingress_with_cidr_ipv6" { description = "Number of computed ingress rules to create where 'ipv6_cidr_blocks' is used" type = number default = 0 } -variable "number_of_computed_ingress_with_source_security_group_id" { +variable "number_of_computed_ingress_with_referenced_security_group_id" { description = "Number of computed ingress rules to create where 'source_security_group_id' is used" type = number default = 0 } -variable "number_of_computed_ingress_with_prefix_list_ids" { - description = "Number of computed ingress rules to create where 'prefix_list_ids' is used" +variable "number_of_computed_ingress_with_prefix_list_id" { + description = "Number of computed ingress rules to create where 'prefix_list_id' is used" type = number default = 0 } @@ -227,37 +227,37 @@ variable "egress_with_self" { default = [] } -variable "egress_with_cidr_blocks" { - description = "List of egress rules to create where 'cidr_blocks' is used" +variable "egress_with_cidr_ipv4" { + description = "List of egress rules to create where 'cidr_ipv4' is used" type = list(map(string)) default = [] } -variable "egress_with_ipv6_cidr_blocks" { +variable "egress_with_cidr_ipv6" { description = "List of egress rules to create where 'ipv6_cidr_blocks' is used" type = list(map(string)) default = [] } -variable "egress_with_source_security_group_id" { +variable "egress_with_referenced_security_group_id" { description = "List of egress rules to create where 'source_security_group_id' is used" type = list(map(string)) default = [] } -variable "egress_with_prefix_list_ids" { - description = "List of egress rules to create where 'prefix_list_ids' is used" +variable "egress_with_prefix_list_id" { + description = "List of egress rules to create where 'prefix_list_id' is used" type = list(map(string)) default = [] } -variable "egress_cidr_blocks" { +variable "egress_cidr_ipv4" { description = "List of IPv4 CIDR ranges to use on all egress rules" type = list(string) default = ["0.0.0.0/0"] } -variable "egress_ipv6_cidr_blocks" { +variable "egress_cidr_ipv6" { description = "List of IPv6 CIDR ranges to use on all egress rules" type = list(string) default = ["::/0"] @@ -284,26 +284,26 @@ variable "computed_egress_with_self" { default = [] } -variable "computed_egress_with_cidr_blocks" { - description = "List of computed egress rules to create where 'cidr_blocks' is used" +variable "computed_egress_with_cidr_ipv4" { + description = "List of computed egress rules to create where 'cidr_ipv4' is used" type = list(map(string)) default = [] } -variable "computed_egress_with_ipv6_cidr_blocks" { +variable "computed_egress_with_cidr_ipv6" { description = "List of computed egress rules to create where 'ipv6_cidr_blocks' is used" type = list(map(string)) default = [] } -variable "computed_egress_with_source_security_group_id" { +variable "computed_egress_with_referenced_security_group_id" { description = "List of computed egress rules to create where 'source_security_group_id' is used" type = list(map(string)) default = [] } -variable "computed_egress_with_prefix_list_ids" { - description = "List of computed egress rules to create where 'prefix_list_ids' is used" +variable "computed_egress_with_prefix_list_id" { + description = "List of computed egress rules to create where 'prefix_list_id' is used" type = list(map(string)) default = [] } @@ -341,26 +341,26 @@ variable "number_of_computed_egress_with_self" { default = 0 } -variable "number_of_computed_egress_with_cidr_blocks" { - description = "Number of computed egress rules to create where 'cidr_blocks' is used" +variable "number_of_computed_egress_with_cidr_ipv4" { + description = "Number of computed egress rules to create where 'cidr_ipv4' is used" type = number default = 0 } -variable "number_of_computed_egress_with_ipv6_cidr_blocks" { +variable "number_of_computed_egress_with_cidr_ipv6" { description = "Number of computed egress rules to create where 'ipv6_cidr_blocks' is used" type = number default = 0 } -variable "number_of_computed_egress_with_source_security_group_id" { +variable "number_of_computed_egress_with_referenced_security_group_id" { description = "Number of computed egress rules to create where 'source_security_group_id' is used" type = number default = 0 } -variable "number_of_computed_egress_with_prefix_list_ids" { - description = "Number of computed egress rules to create where 'prefix_list_ids' is used" +variable "number_of_computed_egress_with_prefix_list_id" { + description = "Number of computed egress rules to create where 'prefix_list_id' is used" type = number default = 0 } diff --git a/modules/zipkin/README.md b/modules/zipkin/README.md index 1d9dc489..812d6bd8 100644 --- a/modules/zipkin/README.md +++ b/modules/zipkin/README.md @@ -55,59 +55,59 @@ No resources. | [computed\_egress\_ipv6\_cidr\_blocks](#input\_computed\_egress\_ipv6\_cidr\_blocks) | List of IPv6 CIDR ranges to use on all computed egress rules | `list(string)` |
[
"::/0"
]
| no | | [computed\_egress\_prefix\_list\_ids](#input\_computed\_egress\_prefix\_list\_ids) | List of prefix list IDs (for allowing access to VPC endpoints) to use on all computed egress rules | `list(string)` | `[]` | no | | [computed\_egress\_rules](#input\_computed\_egress\_rules) | List of computed egress rules to create by name | `list(string)` | `[]` | no | -| [computed\_egress\_with\_cidr\_blocks](#input\_computed\_egress\_with\_cidr\_blocks) | List of computed egress rules to create where 'cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [computed\_egress\_with\_ipv6\_cidr\_blocks](#input\_computed\_egress\_with\_ipv6\_cidr\_blocks) | List of computed egress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [computed\_egress\_with\_prefix\_list\_ids](#input\_computed\_egress\_with\_prefix\_list\_ids) | List of computed egress rules to create where 'prefix\_list\_ids' is used | `list(map(string))` | `[]` | no | +| [computed\_egress\_with\_cidr\_ipv4](#input\_computed\_egress\_with\_cidr\_ipv4) | List of computed egress rules to create where 'cidr\_ipv4' is used | `list(map(string))` | `[]` | no | +| [computed\_egress\_with\_cidr\_ipv6](#input\_computed\_egress\_with\_cidr\_ipv6) | List of computed egress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | +| [computed\_egress\_with\_prefix\_list\_id](#input\_computed\_egress\_with\_prefix\_list\_id) | List of computed egress rules to create where 'prefix\_list\_id' is used | `list(map(string))` | `[]` | no | +| [computed\_egress\_with\_referenced\_security\_group\_id](#input\_computed\_egress\_with\_referenced\_security\_group\_id) | List of computed egress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [computed\_egress\_with\_self](#input\_computed\_egress\_with\_self) | List of computed egress rules to create where 'self' is defined | `list(map(string))` | `[]` | no | -| [computed\_egress\_with\_source\_security\_group\_id](#input\_computed\_egress\_with\_source\_security\_group\_id) | List of computed egress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [computed\_ingress\_cidr\_blocks](#input\_computed\_ingress\_cidr\_blocks) | List of IPv4 CIDR ranges to use on all computed ingress rules | `list(string)` | `[]` | no | | [computed\_ingress\_ipv6\_cidr\_blocks](#input\_computed\_ingress\_ipv6\_cidr\_blocks) | List of IPv6 CIDR ranges to use on all computed ingress rules | `list(string)` | `[]` | no | | [computed\_ingress\_prefix\_list\_ids](#input\_computed\_ingress\_prefix\_list\_ids) | List of prefix list IDs (for allowing access to VPC endpoints) to use on all computed ingress rules | `list(string)` | `[]` | no | | [computed\_ingress\_rules](#input\_computed\_ingress\_rules) | List of computed ingress rules to create by name | `list(string)` | `[]` | no | -| [computed\_ingress\_with\_cidr\_blocks](#input\_computed\_ingress\_with\_cidr\_blocks) | List of computed ingress rules to create where 'cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [computed\_ingress\_with\_ipv6\_cidr\_blocks](#input\_computed\_ingress\_with\_ipv6\_cidr\_blocks) | List of computed ingress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [computed\_ingress\_with\_prefix\_list\_ids](#input\_computed\_ingress\_with\_prefix\_list\_ids) | List of computed ingress rules to create where 'prefix\_list\_ids' is used | `list(map(string))` | `[]` | no | +| [computed\_ingress\_with\_cidr\_ipv4](#input\_computed\_ingress\_with\_cidr\_ipv4) | List of computed ingress rules to create where 'cidr\_ipv4' is used | `list(map(string))` | `[]` | no | +| [computed\_ingress\_with\_cidr\_ipv6](#input\_computed\_ingress\_with\_cidr\_ipv6) | List of computed ingress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | +| [computed\_ingress\_with\_prefix\_list\_id](#input\_computed\_ingress\_with\_prefix\_list\_id) | List of computed ingress rules to create where 'prefix\_list\_id' is used | `list(map(string))` | `[]` | no | +| [computed\_ingress\_with\_referenced\_security\_group\_id](#input\_computed\_ingress\_with\_referenced\_security\_group\_id) | List of computed ingress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [computed\_ingress\_with\_self](#input\_computed\_ingress\_with\_self) | List of computed ingress rules to create where 'self' is defined | `list(map(string))` | `[]` | no | -| [computed\_ingress\_with\_source\_security\_group\_id](#input\_computed\_ingress\_with\_source\_security\_group\_id) | List of computed ingress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [create](#input\_create) | Whether to create security group and all rules | `bool` | `true` | no | | [description](#input\_description) | Description of security group | `string` | `"Security Group managed by Terraform"` | no | -| [egress\_cidr\_blocks](#input\_egress\_cidr\_blocks) | List of IPv4 CIDR ranges to use on all egress rules | `list(string)` |
[
"0.0.0.0/0"
]
| no | -| [egress\_ipv6\_cidr\_blocks](#input\_egress\_ipv6\_cidr\_blocks) | List of IPv6 CIDR ranges to use on all egress rules | `list(string)` |
[
"::/0"
]
| no | +| [egress\_cidr\_ipv4](#input\_egress\_cidr\_ipv4) | List of IPv4 CIDR ranges to use on all egress rules | `list(string)` |
[
"0.0.0.0/0"
]
| no | +| [egress\_cidr\_ipv6](#input\_egress\_cidr\_ipv6) | List of IPv6 CIDR ranges to use on all egress rules | `list(string)` |
[
"::/0"
]
| no | | [egress\_prefix\_list\_ids](#input\_egress\_prefix\_list\_ids) | List of prefix list IDs (for allowing access to VPC endpoints) to use on all egress rules | `list(string)` | `[]` | no | | [egress\_rules](#input\_egress\_rules) | List of egress rules to create by name | `list(string)` | `[]` | no | -| [egress\_with\_cidr\_blocks](#input\_egress\_with\_cidr\_blocks) | List of egress rules to create where 'cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [egress\_with\_ipv6\_cidr\_blocks](#input\_egress\_with\_ipv6\_cidr\_blocks) | List of egress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [egress\_with\_prefix\_list\_ids](#input\_egress\_with\_prefix\_list\_ids) | List of egress rules to create where 'prefix\_list\_ids' is used | `list(map(string))` | `[]` | no | +| [egress\_with\_cidr\_ipv4](#input\_egress\_with\_cidr\_ipv4) | List of egress rules to create where 'cidr\_ipv4' is used | `list(map(string))` | `[]` | no | +| [egress\_with\_cidr\_ipv6](#input\_egress\_with\_cidr\_ipv6) | List of egress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | +| [egress\_with\_prefix\_list\_id](#input\_egress\_with\_prefix\_list\_id) | List of egress rules to create where 'prefix\_list\_id' is used | `list(map(string))` | `[]` | no | +| [egress\_with\_referenced\_security\_group\_id](#input\_egress\_with\_referenced\_security\_group\_id) | List of egress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [egress\_with\_self](#input\_egress\_with\_self) | List of egress rules to create where 'self' is defined | `list(map(string))` | `[]` | no | -| [egress\_with\_source\_security\_group\_id](#input\_egress\_with\_source\_security\_group\_id) | List of egress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | -| [ingress\_cidr\_blocks](#input\_ingress\_cidr\_blocks) | List of IPv4 CIDR ranges to use on all ingress rules | `list(string)` | `[]` | no | -| [ingress\_ipv6\_cidr\_blocks](#input\_ingress\_ipv6\_cidr\_blocks) | List of IPv6 CIDR ranges to use on all ingress rules | `list(string)` | `[]` | no | +| [ingress\_cidr\_ipv4](#input\_ingress\_cidr\_ipv4) | List of IPv4 CIDR ranges to use on all ingress rules | `list(string)` | `[]` | no | +| [ingress\_cidr\_ipv6](#input\_ingress\_cidr\_ipv6) | List of IPv6 CIDR ranges to use on all ingress rules | `list(string)` | `[]` | no | | [ingress\_prefix\_list\_ids](#input\_ingress\_prefix\_list\_ids) | List of prefix list IDs (for allowing access to VPC endpoints) to use on all ingress rules | `list(string)` | `[]` | no | | [ingress\_rules](#input\_ingress\_rules) | List of ingress rules to create by name | `list(string)` | `[]` | no | -| [ingress\_with\_cidr\_blocks](#input\_ingress\_with\_cidr\_blocks) | List of ingress rules to create where 'cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [ingress\_with\_ipv6\_cidr\_blocks](#input\_ingress\_with\_ipv6\_cidr\_blocks) | List of ingress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [ingress\_with\_prefix\_list\_ids](#input\_ingress\_with\_prefix\_list\_ids) | List of ingress rules to create where 'prefix\_list\_ids' is used | `list(map(string))` | `[]` | no | +| [ingress\_with\_cidr\_ipv4](#input\_ingress\_with\_cidr\_ipv4) | List of ingress rules to create where 'cidr\_ipv4' is used | `list(map(string))` | `[]` | no | +| [ingress\_with\_cidr\_ipv6](#input\_ingress\_with\_cidr\_ipv6) | List of ingress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | +| [ingress\_with\_prefix\_list\_id](#input\_ingress\_with\_prefix\_list\_id) | List of ingress rules to create where 'prefix\_list\_id' is used | `list(map(string))` | `[]` | no | +| [ingress\_with\_referenced\_security\_group\_id](#input\_ingress\_with\_referenced\_security\_group\_id) | List of ingress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [ingress\_with\_self](#input\_ingress\_with\_self) | List of ingress rules to create where 'self' is defined | `list(map(string))` | `[]` | no | -| [ingress\_with\_source\_security\_group\_id](#input\_ingress\_with\_source\_security\_group\_id) | List of ingress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [name](#input\_name) | Name of security group | `string` | n/a | yes | | [number\_of\_computed\_egress\_cidr\_blocks](#input\_number\_of\_computed\_egress\_cidr\_blocks) | Number of IPv4 CIDR ranges to use on all computed egress rules | `number` | `0` | no | | [number\_of\_computed\_egress\_ipv6\_cidr\_blocks](#input\_number\_of\_computed\_egress\_ipv6\_cidr\_blocks) | Number of IPv6 CIDR ranges to use on all computed egress rules | `number` | `0` | no | | [number\_of\_computed\_egress\_prefix\_list\_ids](#input\_number\_of\_computed\_egress\_prefix\_list\_ids) | Number of prefix list IDs (for allowing access to VPC endpoints) to use on all computed egress rules | `number` | `0` | no | | [number\_of\_computed\_egress\_rules](#input\_number\_of\_computed\_egress\_rules) | Number of computed egress rules to create by name | `number` | `0` | no | -| [number\_of\_computed\_egress\_with\_cidr\_blocks](#input\_number\_of\_computed\_egress\_with\_cidr\_blocks) | Number of computed egress rules to create where 'cidr\_blocks' is used | `number` | `0` | no | -| [number\_of\_computed\_egress\_with\_ipv6\_cidr\_blocks](#input\_number\_of\_computed\_egress\_with\_ipv6\_cidr\_blocks) | Number of computed egress rules to create where 'ipv6\_cidr\_blocks' is used | `number` | `0` | no | -| [number\_of\_computed\_egress\_with\_prefix\_list\_ids](#input\_number\_of\_computed\_egress\_with\_prefix\_list\_ids) | Number of computed egress rules to create where 'prefix\_list\_ids' is used | `number` | `0` | no | +| [number\_of\_computed\_egress\_with\_cidr\_ipv4](#input\_number\_of\_computed\_egress\_with\_cidr\_ipv4) | Number of computed egress rules to create where 'cidr\_ipv4' is used | `number` | `0` | no | +| [number\_of\_computed\_egress\_with\_cidr\_ipv6](#input\_number\_of\_computed\_egress\_with\_cidr\_ipv6) | Number of computed egress rules to create where 'ipv6\_cidr\_blocks' is used | `number` | `0` | no | +| [number\_of\_computed\_egress\_with\_prefix\_list\_id](#input\_number\_of\_computed\_egress\_with\_prefix\_list\_id) | Number of computed egress rules to create where 'prefix\_list\_id' is used | `number` | `0` | no | +| [number\_of\_computed\_egress\_with\_referenced\_security\_group\_id](#input\_number\_of\_computed\_egress\_with\_referenced\_security\_group\_id) | Number of computed egress rules to create where 'source\_security\_group\_id' is used | `number` | `0` | no | | [number\_of\_computed\_egress\_with\_self](#input\_number\_of\_computed\_egress\_with\_self) | Number of computed egress rules to create where 'self' is defined | `number` | `0` | no | -| [number\_of\_computed\_egress\_with\_source\_security\_group\_id](#input\_number\_of\_computed\_egress\_with\_source\_security\_group\_id) | Number of computed egress rules to create where 'source\_security\_group\_id' is used | `number` | `0` | no | | [number\_of\_computed\_ingress\_cidr\_blocks](#input\_number\_of\_computed\_ingress\_cidr\_blocks) | Number of IPv4 CIDR ranges to use on all computed ingress rules | `number` | `0` | no | | [number\_of\_computed\_ingress\_ipv6\_cidr\_blocks](#input\_number\_of\_computed\_ingress\_ipv6\_cidr\_blocks) | Number of IPv6 CIDR ranges to use on all computed ingress rules | `number` | `0` | no | | [number\_of\_computed\_ingress\_prefix\_list\_ids](#input\_number\_of\_computed\_ingress\_prefix\_list\_ids) | Number of prefix list IDs (for allowing access to VPC endpoints) to use on all computed ingress rules | `number` | `0` | no | | [number\_of\_computed\_ingress\_rules](#input\_number\_of\_computed\_ingress\_rules) | Number of computed ingress rules to create by name | `number` | `0` | no | -| [number\_of\_computed\_ingress\_with\_cidr\_blocks](#input\_number\_of\_computed\_ingress\_with\_cidr\_blocks) | Number of computed ingress rules to create where 'cidr\_blocks' is used | `number` | `0` | no | -| [number\_of\_computed\_ingress\_with\_ipv6\_cidr\_blocks](#input\_number\_of\_computed\_ingress\_with\_ipv6\_cidr\_blocks) | Number of computed ingress rules to create where 'ipv6\_cidr\_blocks' is used | `number` | `0` | no | -| [number\_of\_computed\_ingress\_with\_prefix\_list\_ids](#input\_number\_of\_computed\_ingress\_with\_prefix\_list\_ids) | Number of computed ingress rules to create where 'prefix\_list\_ids' is used | `number` | `0` | no | +| [number\_of\_computed\_ingress\_with\_cidr\_ipv4](#input\_number\_of\_computed\_ingress\_with\_cidr\_ipv4) | Number of computed ingress rules to create where 'cidr\_ipv4' is used | `number` | `0` | no | +| [number\_of\_computed\_ingress\_with\_cidr\_ipv6](#input\_number\_of\_computed\_ingress\_with\_cidr\_ipv6) | Number of computed ingress rules to create where 'ipv6\_cidr\_blocks' is used | `number` | `0` | no | +| [number\_of\_computed\_ingress\_with\_prefix\_list\_id](#input\_number\_of\_computed\_ingress\_with\_prefix\_list\_id) | Number of computed ingress rules to create where 'prefix\_list\_id' is used | `number` | `0` | no | +| [number\_of\_computed\_ingress\_with\_referenced\_security\_group\_id](#input\_number\_of\_computed\_ingress\_with\_referenced\_security\_group\_id) | Number of computed ingress rules to create where 'source\_security\_group\_id' is used | `number` | `0` | no | | [number\_of\_computed\_ingress\_with\_self](#input\_number\_of\_computed\_ingress\_with\_self) | Number of computed ingress rules to create where 'self' is defined | `number` | `0` | no | -| [number\_of\_computed\_ingress\_with\_source\_security\_group\_id](#input\_number\_of\_computed\_ingress\_with\_source\_security\_group\_id) | Number of computed ingress rules to create where 'source\_security\_group\_id' is used | `number` | `0` | no | | [revoke\_rules\_on\_delete](#input\_revoke\_rules\_on\_delete) | Instruct Terraform to revoke all of the Security Groups attached ingress and egress rules before deleting the rule itself. Enable for EMR. | `bool` | `false` | no | | [tags](#input\_tags) | A mapping of tags to assign to security group | `map(string)` | `{}` | no | | [use\_name\_prefix](#input\_use\_name\_prefix) | Whether to use name\_prefix or fixed name. Should be true to able to update security group name after initial creation | `bool` | `true` | no | diff --git a/modules/zipkin/main.tf b/modules/zipkin/main.tf index 80ea0adb..d2a1bf93 100644 --- a/modules/zipkin/main.tf +++ b/modules/zipkin/main.tf @@ -19,20 +19,20 @@ module "sg" { ingress_with_self = concat(var.auto_ingress_with_self, var.ingress_with_self) # Open to IPv4 cidr blocks - ingress_with_cidr_blocks = var.ingress_with_cidr_blocks + ingress_with_cidr_ipv4 = var.ingress_with_cidr_ipv4 # Open to IPv6 cidr blocks - ingress_with_ipv6_cidr_blocks = var.ingress_with_ipv6_cidr_blocks + ingress_with_cidr_ipv6 = var.ingress_with_cidr_ipv6 # Open for security group id - ingress_with_source_security_group_id = var.ingress_with_source_security_group_id + ingress_with_referenced_security_group_id = var.ingress_with_referenced_security_group_id # Open for prefix list id - ingress_with_prefix_list_ids = var.ingress_with_prefix_list_ids + ingress_with_prefix_list_id = var.ingress_with_prefix_list_id # Default ingress CIDR blocks - ingress_cidr_blocks = var.ingress_cidr_blocks - ingress_ipv6_cidr_blocks = var.ingress_ipv6_cidr_blocks + ingress_cidr_ipv4 = var.ingress_cidr_ipv4 + ingress_cidr_ipv6 = var.ingress_cidr_ipv6 # Default prefix list ids ingress_prefix_list_ids = var.ingress_prefix_list_ids @@ -47,26 +47,26 @@ module "sg" { computed_ingress_with_self = concat(var.auto_computed_ingress_with_self, var.computed_ingress_with_self) # Open to IPv4 cidr blocks - computed_ingress_with_cidr_blocks = var.computed_ingress_with_cidr_blocks + computed_ingress_with_cidr_ipv4 = var.computed_ingress_with_cidr_ipv4 # Open to IPv6 cidr blocks - computed_ingress_with_ipv6_cidr_blocks = var.computed_ingress_with_ipv6_cidr_blocks + computed_ingress_with_cidr_ipv6 = var.computed_ingress_with_cidr_ipv6 # Open for security group id - computed_ingress_with_source_security_group_id = var.computed_ingress_with_source_security_group_id + computed_ingress_with_referenced_security_group_id = var.computed_ingress_with_referenced_security_group_id # Open for prefix list id - computed_ingress_with_prefix_list_ids = var.computed_ingress_with_prefix_list_ids + computed_ingress_with_prefix_list_id = var.computed_ingress_with_prefix_list_id ############################# # Number of computed ingress ############################# - number_of_computed_ingress_rules = var.auto_number_of_computed_ingress_rules + var.number_of_computed_ingress_rules - number_of_computed_ingress_with_self = var.auto_number_of_computed_ingress_with_self + var.number_of_computed_ingress_with_self - number_of_computed_ingress_with_cidr_blocks = var.number_of_computed_ingress_with_cidr_blocks - number_of_computed_ingress_with_ipv6_cidr_blocks = var.number_of_computed_ingress_with_ipv6_cidr_blocks - number_of_computed_ingress_with_source_security_group_id = var.number_of_computed_ingress_with_source_security_group_id - number_of_computed_ingress_with_prefix_list_ids = var.number_of_computed_ingress_with_prefix_list_ids + number_of_computed_ingress_rules = var.auto_number_of_computed_ingress_rules + var.number_of_computed_ingress_rules + number_of_computed_ingress_with_self = var.auto_number_of_computed_ingress_with_self + var.number_of_computed_ingress_with_self + number_of_computed_ingress_with_cidr_ipv4 = var.number_of_computed_ingress_with_cidr_ipv4 + number_of_computed_ingress_with_cidr_ipv6 = var.number_of_computed_ingress_with_cidr_ipv6 + number_of_computed_ingress_with_referenced_security_group_id = var.number_of_computed_ingress_with_referenced_security_group_id + number_of_computed_ingress_with_prefix_list_id = var.number_of_computed_ingress_with_prefix_list_id ######### # Egress @@ -78,20 +78,20 @@ module "sg" { egress_with_self = concat(var.auto_egress_with_self, var.egress_with_self) # Open to IPv4 cidr blocks - egress_with_cidr_blocks = var.egress_with_cidr_blocks + egress_with_cidr_ipv4 = var.egress_with_cidr_ipv4 # Open to IPv6 cidr blocks - egress_with_ipv6_cidr_blocks = var.egress_with_ipv6_cidr_blocks + egress_with_cidr_ipv6 = var.egress_with_cidr_ipv6 # Open for security group id - egress_with_source_security_group_id = var.egress_with_source_security_group_id + egress_with_referenced_security_group_id = var.egress_with_referenced_security_group_id # Open for prefix list id - egress_with_prefix_list_ids = var.egress_with_prefix_list_ids + egress_with_prefix_list_id = var.egress_with_prefix_list_id # Default egress CIDR blocks - egress_cidr_blocks = var.egress_cidr_blocks - egress_ipv6_cidr_blocks = var.egress_ipv6_cidr_blocks + egress_cidr_ipv4 = var.egress_cidr_ipv4 + egress_cidr_ipv6 = var.egress_cidr_ipv6 # Default prefix list ids egress_prefix_list_ids = var.egress_prefix_list_ids @@ -106,24 +106,24 @@ module "sg" { computed_egress_with_self = concat(var.auto_computed_egress_with_self, var.computed_egress_with_self) # Open to IPv4 cidr blocks - computed_egress_with_cidr_blocks = var.computed_egress_with_cidr_blocks + computed_egress_with_cidr_ipv4 = var.computed_egress_with_cidr_ipv4 # Open to IPv6 cidr blocks - computed_egress_with_ipv6_cidr_blocks = var.computed_egress_with_ipv6_cidr_blocks + computed_egress_with_cidr_ipv6 = var.computed_egress_with_cidr_ipv6 # Open for security group id - computed_egress_with_source_security_group_id = var.computed_egress_with_source_security_group_id + computed_egress_with_referenced_security_group_id = var.computed_egress_with_referenced_security_group_id # Open for prefix list id - computed_egress_with_prefix_list_ids = var.computed_egress_with_prefix_list_ids + computed_egress_with_prefix_list_id = var.computed_egress_with_prefix_list_id ############################# # Number of computed egress ############################# - number_of_computed_egress_rules = var.auto_number_of_computed_egress_rules + var.number_of_computed_egress_rules - number_of_computed_egress_with_self = var.auto_number_of_computed_egress_with_self + var.number_of_computed_egress_with_self - number_of_computed_egress_with_cidr_blocks = var.number_of_computed_egress_with_cidr_blocks - number_of_computed_egress_with_ipv6_cidr_blocks = var.number_of_computed_egress_with_ipv6_cidr_blocks - number_of_computed_egress_with_source_security_group_id = var.number_of_computed_egress_with_source_security_group_id - number_of_computed_egress_with_prefix_list_ids = var.number_of_computed_egress_with_prefix_list_ids + number_of_computed_egress_rules = var.auto_number_of_computed_egress_rules + var.number_of_computed_egress_rules + number_of_computed_egress_with_self = var.auto_number_of_computed_egress_with_self + var.number_of_computed_egress_with_self + number_of_computed_egress_with_cidr_ipv4 = var.number_of_computed_egress_with_cidr_ipv4 + number_of_computed_egress_with_cidr_ipv6 = var.number_of_computed_egress_with_cidr_ipv6 + number_of_computed_egress_with_referenced_security_group_id = var.number_of_computed_egress_with_referenced_security_group_id + number_of_computed_egress_with_prefix_list_id = var.number_of_computed_egress_with_prefix_list_id } diff --git a/modules/zipkin/variables.tf b/modules/zipkin/variables.tf index 60c8c27b..6590c9e3 100644 --- a/modules/zipkin/variables.tf +++ b/modules/zipkin/variables.tf @@ -56,37 +56,37 @@ variable "ingress_with_self" { default = [] } -variable "ingress_with_cidr_blocks" { - description = "List of ingress rules to create where 'cidr_blocks' is used" +variable "ingress_with_cidr_ipv4" { + description = "List of ingress rules to create where 'cidr_ipv4' is used" type = list(map(string)) default = [] } -variable "ingress_with_ipv6_cidr_blocks" { +variable "ingress_with_cidr_ipv6" { description = "List of ingress rules to create where 'ipv6_cidr_blocks' is used" type = list(map(string)) default = [] } -variable "ingress_with_source_security_group_id" { +variable "ingress_with_referenced_security_group_id" { description = "List of ingress rules to create where 'source_security_group_id' is used" type = list(map(string)) default = [] } -variable "ingress_with_prefix_list_ids" { - description = "List of ingress rules to create where 'prefix_list_ids' is used" +variable "ingress_with_prefix_list_id" { + description = "List of ingress rules to create where 'prefix_list_id' is used" type = list(map(string)) default = [] } -variable "ingress_cidr_blocks" { +variable "ingress_cidr_ipv4" { description = "List of IPv4 CIDR ranges to use on all ingress rules" type = list(string) default = [] } -variable "ingress_ipv6_cidr_blocks" { +variable "ingress_cidr_ipv6" { description = "List of IPv6 CIDR ranges to use on all ingress rules" type = list(string) default = [] @@ -113,26 +113,26 @@ variable "computed_ingress_with_self" { default = [] } -variable "computed_ingress_with_cidr_blocks" { - description = "List of computed ingress rules to create where 'cidr_blocks' is used" +variable "computed_ingress_with_cidr_ipv4" { + description = "List of computed ingress rules to create where 'cidr_ipv4' is used" type = list(map(string)) default = [] } -variable "computed_ingress_with_ipv6_cidr_blocks" { +variable "computed_ingress_with_cidr_ipv6" { description = "List of computed ingress rules to create where 'ipv6_cidr_blocks' is used" type = list(map(string)) default = [] } -variable "computed_ingress_with_source_security_group_id" { +variable "computed_ingress_with_referenced_security_group_id" { description = "List of computed ingress rules to create where 'source_security_group_id' is used" type = list(map(string)) default = [] } -variable "computed_ingress_with_prefix_list_ids" { - description = "List of computed ingress rules to create where 'prefix_list_ids' is used" +variable "computed_ingress_with_prefix_list_id" { + description = "List of computed ingress rules to create where 'prefix_list_id' is used" type = list(map(string)) default = [] } @@ -170,26 +170,26 @@ variable "number_of_computed_ingress_with_self" { default = 0 } -variable "number_of_computed_ingress_with_cidr_blocks" { - description = "Number of computed ingress rules to create where 'cidr_blocks' is used" +variable "number_of_computed_ingress_with_cidr_ipv4" { + description = "Number of computed ingress rules to create where 'cidr_ipv4' is used" type = number default = 0 } -variable "number_of_computed_ingress_with_ipv6_cidr_blocks" { +variable "number_of_computed_ingress_with_cidr_ipv6" { description = "Number of computed ingress rules to create where 'ipv6_cidr_blocks' is used" type = number default = 0 } -variable "number_of_computed_ingress_with_source_security_group_id" { +variable "number_of_computed_ingress_with_referenced_security_group_id" { description = "Number of computed ingress rules to create where 'source_security_group_id' is used" type = number default = 0 } -variable "number_of_computed_ingress_with_prefix_list_ids" { - description = "Number of computed ingress rules to create where 'prefix_list_ids' is used" +variable "number_of_computed_ingress_with_prefix_list_id" { + description = "Number of computed ingress rules to create where 'prefix_list_id' is used" type = number default = 0 } @@ -227,37 +227,37 @@ variable "egress_with_self" { default = [] } -variable "egress_with_cidr_blocks" { - description = "List of egress rules to create where 'cidr_blocks' is used" +variable "egress_with_cidr_ipv4" { + description = "List of egress rules to create where 'cidr_ipv4' is used" type = list(map(string)) default = [] } -variable "egress_with_ipv6_cidr_blocks" { +variable "egress_with_cidr_ipv6" { description = "List of egress rules to create where 'ipv6_cidr_blocks' is used" type = list(map(string)) default = [] } -variable "egress_with_source_security_group_id" { +variable "egress_with_referenced_security_group_id" { description = "List of egress rules to create where 'source_security_group_id' is used" type = list(map(string)) default = [] } -variable "egress_with_prefix_list_ids" { - description = "List of egress rules to create where 'prefix_list_ids' is used" +variable "egress_with_prefix_list_id" { + description = "List of egress rules to create where 'prefix_list_id' is used" type = list(map(string)) default = [] } -variable "egress_cidr_blocks" { +variable "egress_cidr_ipv4" { description = "List of IPv4 CIDR ranges to use on all egress rules" type = list(string) default = ["0.0.0.0/0"] } -variable "egress_ipv6_cidr_blocks" { +variable "egress_cidr_ipv6" { description = "List of IPv6 CIDR ranges to use on all egress rules" type = list(string) default = ["::/0"] @@ -284,26 +284,26 @@ variable "computed_egress_with_self" { default = [] } -variable "computed_egress_with_cidr_blocks" { - description = "List of computed egress rules to create where 'cidr_blocks' is used" +variable "computed_egress_with_cidr_ipv4" { + description = "List of computed egress rules to create where 'cidr_ipv4' is used" type = list(map(string)) default = [] } -variable "computed_egress_with_ipv6_cidr_blocks" { +variable "computed_egress_with_cidr_ipv6" { description = "List of computed egress rules to create where 'ipv6_cidr_blocks' is used" type = list(map(string)) default = [] } -variable "computed_egress_with_source_security_group_id" { +variable "computed_egress_with_referenced_security_group_id" { description = "List of computed egress rules to create where 'source_security_group_id' is used" type = list(map(string)) default = [] } -variable "computed_egress_with_prefix_list_ids" { - description = "List of computed egress rules to create where 'prefix_list_ids' is used" +variable "computed_egress_with_prefix_list_id" { + description = "List of computed egress rules to create where 'prefix_list_id' is used" type = list(map(string)) default = [] } @@ -341,26 +341,26 @@ variable "number_of_computed_egress_with_self" { default = 0 } -variable "number_of_computed_egress_with_cidr_blocks" { - description = "Number of computed egress rules to create where 'cidr_blocks' is used" +variable "number_of_computed_egress_with_cidr_ipv4" { + description = "Number of computed egress rules to create where 'cidr_ipv4' is used" type = number default = 0 } -variable "number_of_computed_egress_with_ipv6_cidr_blocks" { +variable "number_of_computed_egress_with_cidr_ipv6" { description = "Number of computed egress rules to create where 'ipv6_cidr_blocks' is used" type = number default = 0 } -variable "number_of_computed_egress_with_source_security_group_id" { +variable "number_of_computed_egress_with_referenced_security_group_id" { description = "Number of computed egress rules to create where 'source_security_group_id' is used" type = number default = 0 } -variable "number_of_computed_egress_with_prefix_list_ids" { - description = "Number of computed egress rules to create where 'prefix_list_ids' is used" +variable "number_of_computed_egress_with_prefix_list_id" { + description = "Number of computed egress rules to create where 'prefix_list_id' is used" type = number default = 0 } diff --git a/modules/zookeeper/README.md b/modules/zookeeper/README.md index b45e67c2..8fef4602 100644 --- a/modules/zookeeper/README.md +++ b/modules/zookeeper/README.md @@ -55,59 +55,59 @@ No resources. | [computed\_egress\_ipv6\_cidr\_blocks](#input\_computed\_egress\_ipv6\_cidr\_blocks) | List of IPv6 CIDR ranges to use on all computed egress rules | `list(string)` |
[
"::/0"
]
| no | | [computed\_egress\_prefix\_list\_ids](#input\_computed\_egress\_prefix\_list\_ids) | List of prefix list IDs (for allowing access to VPC endpoints) to use on all computed egress rules | `list(string)` | `[]` | no | | [computed\_egress\_rules](#input\_computed\_egress\_rules) | List of computed egress rules to create by name | `list(string)` | `[]` | no | -| [computed\_egress\_with\_cidr\_blocks](#input\_computed\_egress\_with\_cidr\_blocks) | List of computed egress rules to create where 'cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [computed\_egress\_with\_ipv6\_cidr\_blocks](#input\_computed\_egress\_with\_ipv6\_cidr\_blocks) | List of computed egress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [computed\_egress\_with\_prefix\_list\_ids](#input\_computed\_egress\_with\_prefix\_list\_ids) | List of computed egress rules to create where 'prefix\_list\_ids' is used | `list(map(string))` | `[]` | no | +| [computed\_egress\_with\_cidr\_ipv4](#input\_computed\_egress\_with\_cidr\_ipv4) | List of computed egress rules to create where 'cidr\_ipv4' is used | `list(map(string))` | `[]` | no | +| [computed\_egress\_with\_cidr\_ipv6](#input\_computed\_egress\_with\_cidr\_ipv6) | List of computed egress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | +| [computed\_egress\_with\_prefix\_list\_id](#input\_computed\_egress\_with\_prefix\_list\_id) | List of computed egress rules to create where 'prefix\_list\_id' is used | `list(map(string))` | `[]` | no | +| [computed\_egress\_with\_referenced\_security\_group\_id](#input\_computed\_egress\_with\_referenced\_security\_group\_id) | List of computed egress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [computed\_egress\_with\_self](#input\_computed\_egress\_with\_self) | List of computed egress rules to create where 'self' is defined | `list(map(string))` | `[]` | no | -| [computed\_egress\_with\_source\_security\_group\_id](#input\_computed\_egress\_with\_source\_security\_group\_id) | List of computed egress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [computed\_ingress\_cidr\_blocks](#input\_computed\_ingress\_cidr\_blocks) | List of IPv4 CIDR ranges to use on all computed ingress rules | `list(string)` | `[]` | no | | [computed\_ingress\_ipv6\_cidr\_blocks](#input\_computed\_ingress\_ipv6\_cidr\_blocks) | List of IPv6 CIDR ranges to use on all computed ingress rules | `list(string)` | `[]` | no | | [computed\_ingress\_prefix\_list\_ids](#input\_computed\_ingress\_prefix\_list\_ids) | List of prefix list IDs (for allowing access to VPC endpoints) to use on all computed ingress rules | `list(string)` | `[]` | no | | [computed\_ingress\_rules](#input\_computed\_ingress\_rules) | List of computed ingress rules to create by name | `list(string)` | `[]` | no | -| [computed\_ingress\_with\_cidr\_blocks](#input\_computed\_ingress\_with\_cidr\_blocks) | List of computed ingress rules to create where 'cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [computed\_ingress\_with\_ipv6\_cidr\_blocks](#input\_computed\_ingress\_with\_ipv6\_cidr\_blocks) | List of computed ingress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [computed\_ingress\_with\_prefix\_list\_ids](#input\_computed\_ingress\_with\_prefix\_list\_ids) | List of computed ingress rules to create where 'prefix\_list\_ids' is used | `list(map(string))` | `[]` | no | +| [computed\_ingress\_with\_cidr\_ipv4](#input\_computed\_ingress\_with\_cidr\_ipv4) | List of computed ingress rules to create where 'cidr\_ipv4' is used | `list(map(string))` | `[]` | no | +| [computed\_ingress\_with\_cidr\_ipv6](#input\_computed\_ingress\_with\_cidr\_ipv6) | List of computed ingress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | +| [computed\_ingress\_with\_prefix\_list\_id](#input\_computed\_ingress\_with\_prefix\_list\_id) | List of computed ingress rules to create where 'prefix\_list\_id' is used | `list(map(string))` | `[]` | no | +| [computed\_ingress\_with\_referenced\_security\_group\_id](#input\_computed\_ingress\_with\_referenced\_security\_group\_id) | List of computed ingress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [computed\_ingress\_with\_self](#input\_computed\_ingress\_with\_self) | List of computed ingress rules to create where 'self' is defined | `list(map(string))` | `[]` | no | -| [computed\_ingress\_with\_source\_security\_group\_id](#input\_computed\_ingress\_with\_source\_security\_group\_id) | List of computed ingress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [create](#input\_create) | Whether to create security group and all rules | `bool` | `true` | no | | [description](#input\_description) | Description of security group | `string` | `"Security Group managed by Terraform"` | no | -| [egress\_cidr\_blocks](#input\_egress\_cidr\_blocks) | List of IPv4 CIDR ranges to use on all egress rules | `list(string)` |
[
"0.0.0.0/0"
]
| no | -| [egress\_ipv6\_cidr\_blocks](#input\_egress\_ipv6\_cidr\_blocks) | List of IPv6 CIDR ranges to use on all egress rules | `list(string)` |
[
"::/0"
]
| no | +| [egress\_cidr\_ipv4](#input\_egress\_cidr\_ipv4) | List of IPv4 CIDR ranges to use on all egress rules | `list(string)` |
[
"0.0.0.0/0"
]
| no | +| [egress\_cidr\_ipv6](#input\_egress\_cidr\_ipv6) | List of IPv6 CIDR ranges to use on all egress rules | `list(string)` |
[
"::/0"
]
| no | | [egress\_prefix\_list\_ids](#input\_egress\_prefix\_list\_ids) | List of prefix list IDs (for allowing access to VPC endpoints) to use on all egress rules | `list(string)` | `[]` | no | | [egress\_rules](#input\_egress\_rules) | List of egress rules to create by name | `list(string)` | `[]` | no | -| [egress\_with\_cidr\_blocks](#input\_egress\_with\_cidr\_blocks) | List of egress rules to create where 'cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [egress\_with\_ipv6\_cidr\_blocks](#input\_egress\_with\_ipv6\_cidr\_blocks) | List of egress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [egress\_with\_prefix\_list\_ids](#input\_egress\_with\_prefix\_list\_ids) | List of egress rules to create where 'prefix\_list\_ids' is used | `list(map(string))` | `[]` | no | +| [egress\_with\_cidr\_ipv4](#input\_egress\_with\_cidr\_ipv4) | List of egress rules to create where 'cidr\_ipv4' is used | `list(map(string))` | `[]` | no | +| [egress\_with\_cidr\_ipv6](#input\_egress\_with\_cidr\_ipv6) | List of egress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | +| [egress\_with\_prefix\_list\_id](#input\_egress\_with\_prefix\_list\_id) | List of egress rules to create where 'prefix\_list\_id' is used | `list(map(string))` | `[]` | no | +| [egress\_with\_referenced\_security\_group\_id](#input\_egress\_with\_referenced\_security\_group\_id) | List of egress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [egress\_with\_self](#input\_egress\_with\_self) | List of egress rules to create where 'self' is defined | `list(map(string))` | `[]` | no | -| [egress\_with\_source\_security\_group\_id](#input\_egress\_with\_source\_security\_group\_id) | List of egress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | -| [ingress\_cidr\_blocks](#input\_ingress\_cidr\_blocks) | List of IPv4 CIDR ranges to use on all ingress rules | `list(string)` | `[]` | no | -| [ingress\_ipv6\_cidr\_blocks](#input\_ingress\_ipv6\_cidr\_blocks) | List of IPv6 CIDR ranges to use on all ingress rules | `list(string)` | `[]` | no | +| [ingress\_cidr\_ipv4](#input\_ingress\_cidr\_ipv4) | List of IPv4 CIDR ranges to use on all ingress rules | `list(string)` | `[]` | no | +| [ingress\_cidr\_ipv6](#input\_ingress\_cidr\_ipv6) | List of IPv6 CIDR ranges to use on all ingress rules | `list(string)` | `[]` | no | | [ingress\_prefix\_list\_ids](#input\_ingress\_prefix\_list\_ids) | List of prefix list IDs (for allowing access to VPC endpoints) to use on all ingress rules | `list(string)` | `[]` | no | | [ingress\_rules](#input\_ingress\_rules) | List of ingress rules to create by name | `list(string)` | `[]` | no | -| [ingress\_with\_cidr\_blocks](#input\_ingress\_with\_cidr\_blocks) | List of ingress rules to create where 'cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [ingress\_with\_ipv6\_cidr\_blocks](#input\_ingress\_with\_ipv6\_cidr\_blocks) | List of ingress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | -| [ingress\_with\_prefix\_list\_ids](#input\_ingress\_with\_prefix\_list\_ids) | List of ingress rules to create where 'prefix\_list\_ids' is used | `list(map(string))` | `[]` | no | +| [ingress\_with\_cidr\_ipv4](#input\_ingress\_with\_cidr\_ipv4) | List of ingress rules to create where 'cidr\_ipv4' is used | `list(map(string))` | `[]` | no | +| [ingress\_with\_cidr\_ipv6](#input\_ingress\_with\_cidr\_ipv6) | List of ingress rules to create where 'ipv6\_cidr\_blocks' is used | `list(map(string))` | `[]` | no | +| [ingress\_with\_prefix\_list\_id](#input\_ingress\_with\_prefix\_list\_id) | List of ingress rules to create where 'prefix\_list\_id' is used | `list(map(string))` | `[]` | no | +| [ingress\_with\_referenced\_security\_group\_id](#input\_ingress\_with\_referenced\_security\_group\_id) | List of ingress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [ingress\_with\_self](#input\_ingress\_with\_self) | List of ingress rules to create where 'self' is defined | `list(map(string))` | `[]` | no | -| [ingress\_with\_source\_security\_group\_id](#input\_ingress\_with\_source\_security\_group\_id) | List of ingress rules to create where 'source\_security\_group\_id' is used | `list(map(string))` | `[]` | no | | [name](#input\_name) | Name of security group | `string` | n/a | yes | | [number\_of\_computed\_egress\_cidr\_blocks](#input\_number\_of\_computed\_egress\_cidr\_blocks) | Number of IPv4 CIDR ranges to use on all computed egress rules | `number` | `0` | no | | [number\_of\_computed\_egress\_ipv6\_cidr\_blocks](#input\_number\_of\_computed\_egress\_ipv6\_cidr\_blocks) | Number of IPv6 CIDR ranges to use on all computed egress rules | `number` | `0` | no | | [number\_of\_computed\_egress\_prefix\_list\_ids](#input\_number\_of\_computed\_egress\_prefix\_list\_ids) | Number of prefix list IDs (for allowing access to VPC endpoints) to use on all computed egress rules | `number` | `0` | no | | [number\_of\_computed\_egress\_rules](#input\_number\_of\_computed\_egress\_rules) | Number of computed egress rules to create by name | `number` | `0` | no | -| [number\_of\_computed\_egress\_with\_cidr\_blocks](#input\_number\_of\_computed\_egress\_with\_cidr\_blocks) | Number of computed egress rules to create where 'cidr\_blocks' is used | `number` | `0` | no | -| [number\_of\_computed\_egress\_with\_ipv6\_cidr\_blocks](#input\_number\_of\_computed\_egress\_with\_ipv6\_cidr\_blocks) | Number of computed egress rules to create where 'ipv6\_cidr\_blocks' is used | `number` | `0` | no | -| [number\_of\_computed\_egress\_with\_prefix\_list\_ids](#input\_number\_of\_computed\_egress\_with\_prefix\_list\_ids) | Number of computed egress rules to create where 'prefix\_list\_ids' is used | `number` | `0` | no | +| [number\_of\_computed\_egress\_with\_cidr\_ipv4](#input\_number\_of\_computed\_egress\_with\_cidr\_ipv4) | Number of computed egress rules to create where 'cidr\_ipv4' is used | `number` | `0` | no | +| [number\_of\_computed\_egress\_with\_cidr\_ipv6](#input\_number\_of\_computed\_egress\_with\_cidr\_ipv6) | Number of computed egress rules to create where 'ipv6\_cidr\_blocks' is used | `number` | `0` | no | +| [number\_of\_computed\_egress\_with\_prefix\_list\_id](#input\_number\_of\_computed\_egress\_with\_prefix\_list\_id) | Number of computed egress rules to create where 'prefix\_list\_id' is used | `number` | `0` | no | +| [number\_of\_computed\_egress\_with\_referenced\_security\_group\_id](#input\_number\_of\_computed\_egress\_with\_referenced\_security\_group\_id) | Number of computed egress rules to create where 'source\_security\_group\_id' is used | `number` | `0` | no | | [number\_of\_computed\_egress\_with\_self](#input\_number\_of\_computed\_egress\_with\_self) | Number of computed egress rules to create where 'self' is defined | `number` | `0` | no | -| [number\_of\_computed\_egress\_with\_source\_security\_group\_id](#input\_number\_of\_computed\_egress\_with\_source\_security\_group\_id) | Number of computed egress rules to create where 'source\_security\_group\_id' is used | `number` | `0` | no | | [number\_of\_computed\_ingress\_cidr\_blocks](#input\_number\_of\_computed\_ingress\_cidr\_blocks) | Number of IPv4 CIDR ranges to use on all computed ingress rules | `number` | `0` | no | | [number\_of\_computed\_ingress\_ipv6\_cidr\_blocks](#input\_number\_of\_computed\_ingress\_ipv6\_cidr\_blocks) | Number of IPv6 CIDR ranges to use on all computed ingress rules | `number` | `0` | no | | [number\_of\_computed\_ingress\_prefix\_list\_ids](#input\_number\_of\_computed\_ingress\_prefix\_list\_ids) | Number of prefix list IDs (for allowing access to VPC endpoints) to use on all computed ingress rules | `number` | `0` | no | | [number\_of\_computed\_ingress\_rules](#input\_number\_of\_computed\_ingress\_rules) | Number of computed ingress rules to create by name | `number` | `0` | no | -| [number\_of\_computed\_ingress\_with\_cidr\_blocks](#input\_number\_of\_computed\_ingress\_with\_cidr\_blocks) | Number of computed ingress rules to create where 'cidr\_blocks' is used | `number` | `0` | no | -| [number\_of\_computed\_ingress\_with\_ipv6\_cidr\_blocks](#input\_number\_of\_computed\_ingress\_with\_ipv6\_cidr\_blocks) | Number of computed ingress rules to create where 'ipv6\_cidr\_blocks' is used | `number` | `0` | no | -| [number\_of\_computed\_ingress\_with\_prefix\_list\_ids](#input\_number\_of\_computed\_ingress\_with\_prefix\_list\_ids) | Number of computed ingress rules to create where 'prefix\_list\_ids' is used | `number` | `0` | no | +| [number\_of\_computed\_ingress\_with\_cidr\_ipv4](#input\_number\_of\_computed\_ingress\_with\_cidr\_ipv4) | Number of computed ingress rules to create where 'cidr\_ipv4' is used | `number` | `0` | no | +| [number\_of\_computed\_ingress\_with\_cidr\_ipv6](#input\_number\_of\_computed\_ingress\_with\_cidr\_ipv6) | Number of computed ingress rules to create where 'ipv6\_cidr\_blocks' is used | `number` | `0` | no | +| [number\_of\_computed\_ingress\_with\_prefix\_list\_id](#input\_number\_of\_computed\_ingress\_with\_prefix\_list\_id) | Number of computed ingress rules to create where 'prefix\_list\_id' is used | `number` | `0` | no | +| [number\_of\_computed\_ingress\_with\_referenced\_security\_group\_id](#input\_number\_of\_computed\_ingress\_with\_referenced\_security\_group\_id) | Number of computed ingress rules to create where 'source\_security\_group\_id' is used | `number` | `0` | no | | [number\_of\_computed\_ingress\_with\_self](#input\_number\_of\_computed\_ingress\_with\_self) | Number of computed ingress rules to create where 'self' is defined | `number` | `0` | no | -| [number\_of\_computed\_ingress\_with\_source\_security\_group\_id](#input\_number\_of\_computed\_ingress\_with\_source\_security\_group\_id) | Number of computed ingress rules to create where 'source\_security\_group\_id' is used | `number` | `0` | no | | [revoke\_rules\_on\_delete](#input\_revoke\_rules\_on\_delete) | Instruct Terraform to revoke all of the Security Groups attached ingress and egress rules before deleting the rule itself. Enable for EMR. | `bool` | `false` | no | | [tags](#input\_tags) | A mapping of tags to assign to security group | `map(string)` | `{}` | no | | [use\_name\_prefix](#input\_use\_name\_prefix) | Whether to use name\_prefix or fixed name. Should be true to able to update security group name after initial creation | `bool` | `true` | no | diff --git a/modules/zookeeper/main.tf b/modules/zookeeper/main.tf index 80ea0adb..d2a1bf93 100644 --- a/modules/zookeeper/main.tf +++ b/modules/zookeeper/main.tf @@ -19,20 +19,20 @@ module "sg" { ingress_with_self = concat(var.auto_ingress_with_self, var.ingress_with_self) # Open to IPv4 cidr blocks - ingress_with_cidr_blocks = var.ingress_with_cidr_blocks + ingress_with_cidr_ipv4 = var.ingress_with_cidr_ipv4 # Open to IPv6 cidr blocks - ingress_with_ipv6_cidr_blocks = var.ingress_with_ipv6_cidr_blocks + ingress_with_cidr_ipv6 = var.ingress_with_cidr_ipv6 # Open for security group id - ingress_with_source_security_group_id = var.ingress_with_source_security_group_id + ingress_with_referenced_security_group_id = var.ingress_with_referenced_security_group_id # Open for prefix list id - ingress_with_prefix_list_ids = var.ingress_with_prefix_list_ids + ingress_with_prefix_list_id = var.ingress_with_prefix_list_id # Default ingress CIDR blocks - ingress_cidr_blocks = var.ingress_cidr_blocks - ingress_ipv6_cidr_blocks = var.ingress_ipv6_cidr_blocks + ingress_cidr_ipv4 = var.ingress_cidr_ipv4 + ingress_cidr_ipv6 = var.ingress_cidr_ipv6 # Default prefix list ids ingress_prefix_list_ids = var.ingress_prefix_list_ids @@ -47,26 +47,26 @@ module "sg" { computed_ingress_with_self = concat(var.auto_computed_ingress_with_self, var.computed_ingress_with_self) # Open to IPv4 cidr blocks - computed_ingress_with_cidr_blocks = var.computed_ingress_with_cidr_blocks + computed_ingress_with_cidr_ipv4 = var.computed_ingress_with_cidr_ipv4 # Open to IPv6 cidr blocks - computed_ingress_with_ipv6_cidr_blocks = var.computed_ingress_with_ipv6_cidr_blocks + computed_ingress_with_cidr_ipv6 = var.computed_ingress_with_cidr_ipv6 # Open for security group id - computed_ingress_with_source_security_group_id = var.computed_ingress_with_source_security_group_id + computed_ingress_with_referenced_security_group_id = var.computed_ingress_with_referenced_security_group_id # Open for prefix list id - computed_ingress_with_prefix_list_ids = var.computed_ingress_with_prefix_list_ids + computed_ingress_with_prefix_list_id = var.computed_ingress_with_prefix_list_id ############################# # Number of computed ingress ############################# - number_of_computed_ingress_rules = var.auto_number_of_computed_ingress_rules + var.number_of_computed_ingress_rules - number_of_computed_ingress_with_self = var.auto_number_of_computed_ingress_with_self + var.number_of_computed_ingress_with_self - number_of_computed_ingress_with_cidr_blocks = var.number_of_computed_ingress_with_cidr_blocks - number_of_computed_ingress_with_ipv6_cidr_blocks = var.number_of_computed_ingress_with_ipv6_cidr_blocks - number_of_computed_ingress_with_source_security_group_id = var.number_of_computed_ingress_with_source_security_group_id - number_of_computed_ingress_with_prefix_list_ids = var.number_of_computed_ingress_with_prefix_list_ids + number_of_computed_ingress_rules = var.auto_number_of_computed_ingress_rules + var.number_of_computed_ingress_rules + number_of_computed_ingress_with_self = var.auto_number_of_computed_ingress_with_self + var.number_of_computed_ingress_with_self + number_of_computed_ingress_with_cidr_ipv4 = var.number_of_computed_ingress_with_cidr_ipv4 + number_of_computed_ingress_with_cidr_ipv6 = var.number_of_computed_ingress_with_cidr_ipv6 + number_of_computed_ingress_with_referenced_security_group_id = var.number_of_computed_ingress_with_referenced_security_group_id + number_of_computed_ingress_with_prefix_list_id = var.number_of_computed_ingress_with_prefix_list_id ######### # Egress @@ -78,20 +78,20 @@ module "sg" { egress_with_self = concat(var.auto_egress_with_self, var.egress_with_self) # Open to IPv4 cidr blocks - egress_with_cidr_blocks = var.egress_with_cidr_blocks + egress_with_cidr_ipv4 = var.egress_with_cidr_ipv4 # Open to IPv6 cidr blocks - egress_with_ipv6_cidr_blocks = var.egress_with_ipv6_cidr_blocks + egress_with_cidr_ipv6 = var.egress_with_cidr_ipv6 # Open for security group id - egress_with_source_security_group_id = var.egress_with_source_security_group_id + egress_with_referenced_security_group_id = var.egress_with_referenced_security_group_id # Open for prefix list id - egress_with_prefix_list_ids = var.egress_with_prefix_list_ids + egress_with_prefix_list_id = var.egress_with_prefix_list_id # Default egress CIDR blocks - egress_cidr_blocks = var.egress_cidr_blocks - egress_ipv6_cidr_blocks = var.egress_ipv6_cidr_blocks + egress_cidr_ipv4 = var.egress_cidr_ipv4 + egress_cidr_ipv6 = var.egress_cidr_ipv6 # Default prefix list ids egress_prefix_list_ids = var.egress_prefix_list_ids @@ -106,24 +106,24 @@ module "sg" { computed_egress_with_self = concat(var.auto_computed_egress_with_self, var.computed_egress_with_self) # Open to IPv4 cidr blocks - computed_egress_with_cidr_blocks = var.computed_egress_with_cidr_blocks + computed_egress_with_cidr_ipv4 = var.computed_egress_with_cidr_ipv4 # Open to IPv6 cidr blocks - computed_egress_with_ipv6_cidr_blocks = var.computed_egress_with_ipv6_cidr_blocks + computed_egress_with_cidr_ipv6 = var.computed_egress_with_cidr_ipv6 # Open for security group id - computed_egress_with_source_security_group_id = var.computed_egress_with_source_security_group_id + computed_egress_with_referenced_security_group_id = var.computed_egress_with_referenced_security_group_id # Open for prefix list id - computed_egress_with_prefix_list_ids = var.computed_egress_with_prefix_list_ids + computed_egress_with_prefix_list_id = var.computed_egress_with_prefix_list_id ############################# # Number of computed egress ############################# - number_of_computed_egress_rules = var.auto_number_of_computed_egress_rules + var.number_of_computed_egress_rules - number_of_computed_egress_with_self = var.auto_number_of_computed_egress_with_self + var.number_of_computed_egress_with_self - number_of_computed_egress_with_cidr_blocks = var.number_of_computed_egress_with_cidr_blocks - number_of_computed_egress_with_ipv6_cidr_blocks = var.number_of_computed_egress_with_ipv6_cidr_blocks - number_of_computed_egress_with_source_security_group_id = var.number_of_computed_egress_with_source_security_group_id - number_of_computed_egress_with_prefix_list_ids = var.number_of_computed_egress_with_prefix_list_ids + number_of_computed_egress_rules = var.auto_number_of_computed_egress_rules + var.number_of_computed_egress_rules + number_of_computed_egress_with_self = var.auto_number_of_computed_egress_with_self + var.number_of_computed_egress_with_self + number_of_computed_egress_with_cidr_ipv4 = var.number_of_computed_egress_with_cidr_ipv4 + number_of_computed_egress_with_cidr_ipv6 = var.number_of_computed_egress_with_cidr_ipv6 + number_of_computed_egress_with_referenced_security_group_id = var.number_of_computed_egress_with_referenced_security_group_id + number_of_computed_egress_with_prefix_list_id = var.number_of_computed_egress_with_prefix_list_id } diff --git a/modules/zookeeper/variables.tf b/modules/zookeeper/variables.tf index 60c8c27b..6590c9e3 100644 --- a/modules/zookeeper/variables.tf +++ b/modules/zookeeper/variables.tf @@ -56,37 +56,37 @@ variable "ingress_with_self" { default = [] } -variable "ingress_with_cidr_blocks" { - description = "List of ingress rules to create where 'cidr_blocks' is used" +variable "ingress_with_cidr_ipv4" { + description = "List of ingress rules to create where 'cidr_ipv4' is used" type = list(map(string)) default = [] } -variable "ingress_with_ipv6_cidr_blocks" { +variable "ingress_with_cidr_ipv6" { description = "List of ingress rules to create where 'ipv6_cidr_blocks' is used" type = list(map(string)) default = [] } -variable "ingress_with_source_security_group_id" { +variable "ingress_with_referenced_security_group_id" { description = "List of ingress rules to create where 'source_security_group_id' is used" type = list(map(string)) default = [] } -variable "ingress_with_prefix_list_ids" { - description = "List of ingress rules to create where 'prefix_list_ids' is used" +variable "ingress_with_prefix_list_id" { + description = "List of ingress rules to create where 'prefix_list_id' is used" type = list(map(string)) default = [] } -variable "ingress_cidr_blocks" { +variable "ingress_cidr_ipv4" { description = "List of IPv4 CIDR ranges to use on all ingress rules" type = list(string) default = [] } -variable "ingress_ipv6_cidr_blocks" { +variable "ingress_cidr_ipv6" { description = "List of IPv6 CIDR ranges to use on all ingress rules" type = list(string) default = [] @@ -113,26 +113,26 @@ variable "computed_ingress_with_self" { default = [] } -variable "computed_ingress_with_cidr_blocks" { - description = "List of computed ingress rules to create where 'cidr_blocks' is used" +variable "computed_ingress_with_cidr_ipv4" { + description = "List of computed ingress rules to create where 'cidr_ipv4' is used" type = list(map(string)) default = [] } -variable "computed_ingress_with_ipv6_cidr_blocks" { +variable "computed_ingress_with_cidr_ipv6" { description = "List of computed ingress rules to create where 'ipv6_cidr_blocks' is used" type = list(map(string)) default = [] } -variable "computed_ingress_with_source_security_group_id" { +variable "computed_ingress_with_referenced_security_group_id" { description = "List of computed ingress rules to create where 'source_security_group_id' is used" type = list(map(string)) default = [] } -variable "computed_ingress_with_prefix_list_ids" { - description = "List of computed ingress rules to create where 'prefix_list_ids' is used" +variable "computed_ingress_with_prefix_list_id" { + description = "List of computed ingress rules to create where 'prefix_list_id' is used" type = list(map(string)) default = [] } @@ -170,26 +170,26 @@ variable "number_of_computed_ingress_with_self" { default = 0 } -variable "number_of_computed_ingress_with_cidr_blocks" { - description = "Number of computed ingress rules to create where 'cidr_blocks' is used" +variable "number_of_computed_ingress_with_cidr_ipv4" { + description = "Number of computed ingress rules to create where 'cidr_ipv4' is used" type = number default = 0 } -variable "number_of_computed_ingress_with_ipv6_cidr_blocks" { +variable "number_of_computed_ingress_with_cidr_ipv6" { description = "Number of computed ingress rules to create where 'ipv6_cidr_blocks' is used" type = number default = 0 } -variable "number_of_computed_ingress_with_source_security_group_id" { +variable "number_of_computed_ingress_with_referenced_security_group_id" { description = "Number of computed ingress rules to create where 'source_security_group_id' is used" type = number default = 0 } -variable "number_of_computed_ingress_with_prefix_list_ids" { - description = "Number of computed ingress rules to create where 'prefix_list_ids' is used" +variable "number_of_computed_ingress_with_prefix_list_id" { + description = "Number of computed ingress rules to create where 'prefix_list_id' is used" type = number default = 0 } @@ -227,37 +227,37 @@ variable "egress_with_self" { default = [] } -variable "egress_with_cidr_blocks" { - description = "List of egress rules to create where 'cidr_blocks' is used" +variable "egress_with_cidr_ipv4" { + description = "List of egress rules to create where 'cidr_ipv4' is used" type = list(map(string)) default = [] } -variable "egress_with_ipv6_cidr_blocks" { +variable "egress_with_cidr_ipv6" { description = "List of egress rules to create where 'ipv6_cidr_blocks' is used" type = list(map(string)) default = [] } -variable "egress_with_source_security_group_id" { +variable "egress_with_referenced_security_group_id" { description = "List of egress rules to create where 'source_security_group_id' is used" type = list(map(string)) default = [] } -variable "egress_with_prefix_list_ids" { - description = "List of egress rules to create where 'prefix_list_ids' is used" +variable "egress_with_prefix_list_id" { + description = "List of egress rules to create where 'prefix_list_id' is used" type = list(map(string)) default = [] } -variable "egress_cidr_blocks" { +variable "egress_cidr_ipv4" { description = "List of IPv4 CIDR ranges to use on all egress rules" type = list(string) default = ["0.0.0.0/0"] } -variable "egress_ipv6_cidr_blocks" { +variable "egress_cidr_ipv6" { description = "List of IPv6 CIDR ranges to use on all egress rules" type = list(string) default = ["::/0"] @@ -284,26 +284,26 @@ variable "computed_egress_with_self" { default = [] } -variable "computed_egress_with_cidr_blocks" { - description = "List of computed egress rules to create where 'cidr_blocks' is used" +variable "computed_egress_with_cidr_ipv4" { + description = "List of computed egress rules to create where 'cidr_ipv4' is used" type = list(map(string)) default = [] } -variable "computed_egress_with_ipv6_cidr_blocks" { +variable "computed_egress_with_cidr_ipv6" { description = "List of computed egress rules to create where 'ipv6_cidr_blocks' is used" type = list(map(string)) default = [] } -variable "computed_egress_with_source_security_group_id" { +variable "computed_egress_with_referenced_security_group_id" { description = "List of computed egress rules to create where 'source_security_group_id' is used" type = list(map(string)) default = [] } -variable "computed_egress_with_prefix_list_ids" { - description = "List of computed egress rules to create where 'prefix_list_ids' is used" +variable "computed_egress_with_prefix_list_id" { + description = "List of computed egress rules to create where 'prefix_list_id' is used" type = list(map(string)) default = [] } @@ -341,26 +341,26 @@ variable "number_of_computed_egress_with_self" { default = 0 } -variable "number_of_computed_egress_with_cidr_blocks" { - description = "Number of computed egress rules to create where 'cidr_blocks' is used" +variable "number_of_computed_egress_with_cidr_ipv4" { + description = "Number of computed egress rules to create where 'cidr_ipv4' is used" type = number default = 0 } -variable "number_of_computed_egress_with_ipv6_cidr_blocks" { +variable "number_of_computed_egress_with_cidr_ipv6" { description = "Number of computed egress rules to create where 'ipv6_cidr_blocks' is used" type = number default = 0 } -variable "number_of_computed_egress_with_source_security_group_id" { +variable "number_of_computed_egress_with_referenced_security_group_id" { description = "Number of computed egress rules to create where 'source_security_group_id' is used" type = number default = 0 } -variable "number_of_computed_egress_with_prefix_list_ids" { - description = "Number of computed egress rules to create where 'prefix_list_ids' is used" +variable "number_of_computed_egress_with_prefix_list_id" { + description = "Number of computed egress rules to create where 'prefix_list_id' is used" type = number default = 0 } diff --git a/rules.tf b/rules.tf index 7dae593a..4768c378 100644 --- a/rules.tf +++ b/rules.tf @@ -1,5 +1,5 @@ variable "rules" { - description = "Map of known security group rules (define as 'name' = ['from port', 'to port', 'protocol', 'description'])" + description = "Map of known security group rules (define as 'name' = ['from port', 'to port', 'ip_protocol', 'description'])" type = map(list(any)) # Protocols (tcp, udp, icmp, all - are allowed keywords) or numbers (from https://www.iana.org/assignments/protocol-numbers/protocol-numbers.xhtml): diff --git a/variables.tf b/variables.tf index 9fa499d4..b1061f40 100644 --- a/variables.tf +++ b/variables.tf @@ -82,31 +82,31 @@ variable "ingress_with_self" { default = [] } -variable "ingress_with_cidr_blocks" { - description = "List of ingress rules to create where 'cidr_blocks' is used" +variable "ingress_with_cidr_ipv4" { + description = "List of ingress rules to create where 'cidr_ipv4' is used" type = list(map(string)) default = [] } -variable "ingress_with_ipv6_cidr_blocks" { - description = "List of ingress rules to create where 'ipv6_cidr_blocks' is used" +variable "ingress_with_cidr_ipv6" { + description = "List of ingress rules to create where 'cidr_ipv6' is used" type = list(map(string)) default = [] } -variable "ingress_with_source_security_group_id" { - description = "List of ingress rules to create where 'source_security_group_id' is used" +variable "ingress_with_referenced_security_group_id" { + description = "List of ingress rules to create where 'referenced_security_group_id' is used" type = list(map(string)) default = [] } -variable "ingress_cidr_blocks" { +variable "ingress_cidr_ipv4" { description = "List of IPv4 CIDR ranges to use on all ingress rules" type = list(string) default = [] } -variable "ingress_ipv6_cidr_blocks" { +variable "ingress_cidr_ipv6" { description = "List of IPv6 CIDR ranges to use on all ingress rules" type = list(string) default = [] @@ -118,8 +118,8 @@ variable "ingress_prefix_list_ids" { default = [] } -variable "ingress_with_prefix_list_ids" { - description = "List of ingress rules to create where 'prefix_list_ids' is used only" +variable "ingress_with_prefix_list_id" { + description = "List of ingress rules to create where 'prefix_list_id' is used only" type = list(map(string)) default = [] } @@ -139,26 +139,26 @@ variable "computed_ingress_with_self" { default = [] } -variable "computed_ingress_with_cidr_blocks" { - description = "List of computed ingress rules to create where 'cidr_blocks' is used" +variable "computed_ingress_with_cidr_ipv4" { + description = "List of computed ingress rules to create where 'cidr_ipv4' is used" type = list(map(string)) default = [] } -variable "computed_ingress_with_ipv6_cidr_blocks" { - description = "List of computed ingress rules to create where 'ipv6_cidr_blocks' is used" +variable "computed_ingress_with_cidr_ipv6" { + description = "List of computed ingress rules to create where 'cidr_ipv6' is used" type = list(map(string)) default = [] } -variable "computed_ingress_with_source_security_group_id" { - description = "List of computed ingress rules to create where 'source_security_group_id' is used" +variable "computed_ingress_with_referenced_security_group_id" { + description = "List of computed ingress rules to create where 'referenced_security_group_id' is used" type = list(map(string)) default = [] } -variable "computed_ingress_with_prefix_list_ids" { - description = "List of computed ingress rules to create where 'prefix_list_ids' is used" +variable "computed_ingress_with_prefix_list_id" { + description = "List of computed ingress rules to create where 'prefix_list_id' is used" type = list(map(string)) default = [] } @@ -178,26 +178,26 @@ variable "number_of_computed_ingress_with_self" { default = 0 } -variable "number_of_computed_ingress_with_cidr_blocks" { - description = "Number of computed ingress rules to create where 'cidr_blocks' is used" +variable "number_of_computed_ingress_with_cidr_ipv4" { + description = "Number of computed ingress rules to create where 'cidr_ipv4' is used" type = number default = 0 } -variable "number_of_computed_ingress_with_ipv6_cidr_blocks" { - description = "Number of computed ingress rules to create where 'ipv6_cidr_blocks' is used" +variable "number_of_computed_ingress_with_cidr_ipv6" { + description = "Number of computed ingress rules to create where 'cidr_ipv6' is used" type = number default = 0 } -variable "number_of_computed_ingress_with_source_security_group_id" { - description = "Number of computed ingress rules to create where 'source_security_group_id' is used" +variable "number_of_computed_ingress_with_referenced_security_group_id" { + description = "Number of computed ingress rules to create where 'referenced_security_group_id' is used" type = number default = 0 } -variable "number_of_computed_ingress_with_prefix_list_ids" { - description = "Number of computed ingress rules to create where 'prefix_list_ids' is used" +variable "number_of_computed_ingress_with_prefix_list_id" { + description = "Number of computed ingress rules to create where 'prefix_list_id' is used" type = number default = 0 } @@ -217,37 +217,37 @@ variable "egress_with_self" { default = [] } -variable "egress_with_cidr_blocks" { - description = "List of egress rules to create where 'cidr_blocks' is used" +variable "egress_with_cidr_ipv4" { + description = "List of egress rules to create where 'cidr_ipv4' is used" type = list(map(string)) default = [] } -variable "egress_with_ipv6_cidr_blocks" { - description = "List of egress rules to create where 'ipv6_cidr_blocks' is used" +variable "egress_with_cidr_ipv6" { + description = "List of egress rules to create where 'cidr_ipv6' is used" type = list(map(string)) default = [] } -variable "egress_with_source_security_group_id" { - description = "List of egress rules to create where 'source_security_group_id' is used" +variable "egress_with_referenced_security_group_id" { + description = "List of egress rules to create where 'referenced_security_group_id' is used" type = list(map(string)) default = [] } -variable "egress_with_prefix_list_ids" { - description = "List of egress rules to create where 'prefix_list_ids' is used only" +variable "egress_with_prefix_list_id" { + description = "List of egress rules to create where 'prefix_list_id' is used only" type = list(map(string)) default = [] } -variable "egress_cidr_blocks" { +variable "egress_cidr_ipv4" { description = "List of IPv4 CIDR ranges to use on all egress rules" type = list(string) default = ["0.0.0.0/0"] } -variable "egress_ipv6_cidr_blocks" { +variable "egress_cidr_ipv6" { description = "List of IPv6 CIDR ranges to use on all egress rules" type = list(string) default = ["::/0"] @@ -274,26 +274,26 @@ variable "computed_egress_with_self" { default = [] } -variable "computed_egress_with_cidr_blocks" { - description = "List of computed egress rules to create where 'cidr_blocks' is used" +variable "computed_egress_with_cidr_ipv4" { + description = "List of computed egress rules to create where 'cidr_ipv4' is used" type = list(map(string)) default = [] } -variable "computed_egress_with_ipv6_cidr_blocks" { - description = "List of computed egress rules to create where 'ipv6_cidr_blocks' is used" +variable "computed_egress_with_cidr_ipv6" { + description = "List of computed egress rules to create where 'cidr_ipv6' is used" type = list(map(string)) default = [] } -variable "computed_egress_with_source_security_group_id" { - description = "List of computed egress rules to create where 'source_security_group_id' is used" +variable "computed_egress_with_referenced_security_group_id" { + description = "List of computed egress rules to create where 'referenced_security_group_id' is used" type = list(map(string)) default = [] } -variable "computed_egress_with_prefix_list_ids" { - description = "List of computed egress rules to create where 'prefix_list_ids' is used only" +variable "computed_egress_with_prefix_list_id" { + description = "List of computed egress rules to create where 'prefix_list_id' is used only" type = list(map(string)) default = [] } @@ -313,26 +313,26 @@ variable "number_of_computed_egress_with_self" { default = 0 } -variable "number_of_computed_egress_with_cidr_blocks" { - description = "Number of computed egress rules to create where 'cidr_blocks' is used" +variable "number_of_computed_egress_with_cidr_ipv4" { + description = "Number of computed egress rules to create where 'cidr_ipv4' is used" type = number default = 0 } -variable "number_of_computed_egress_with_ipv6_cidr_blocks" { - description = "Number of computed egress rules to create where 'ipv6_cidr_blocks' is used" +variable "number_of_computed_egress_with_cidr_ipv6" { + description = "Number of computed egress rules to create where 'cidr_ipv6' is used" type = number default = 0 } -variable "number_of_computed_egress_with_source_security_group_id" { +variable "number_of_computed_egress_with_referenced_security_group_id" { description = "Number of computed egress rules to create where 'source_security_group_id' is used" type = number default = 0 } -variable "number_of_computed_egress_with_prefix_list_ids" { - description = "Number of computed egress rules to create where 'prefix_list_ids' is used only" +variable "number_of_computed_egress_with_prefix_list_id" { + description = "Number of computed egress rules to create where 'prefix_list_id' is used only" type = number default = 0 } diff --git a/wrappers/_templates/main.tf b/wrappers/_templates/main.tf index a63ed9f1..76fb158f 100644 --- a/wrappers/_templates/main.tf +++ b/wrappers/_templates/main.tf @@ -3,65 +3,65 @@ module "wrapper" { for_each = var.items - computed_egress_cidr_blocks = try(each.value.computed_egress_cidr_blocks, var.defaults.computed_egress_cidr_blocks, ["0.0.0.0/0"]) - computed_egress_ipv6_cidr_blocks = try(each.value.computed_egress_ipv6_cidr_blocks, var.defaults.computed_egress_ipv6_cidr_blocks, ["::/0"]) - computed_egress_prefix_list_ids = try(each.value.computed_egress_prefix_list_ids, var.defaults.computed_egress_prefix_list_ids, []) - computed_egress_rules = try(each.value.computed_egress_rules, var.defaults.computed_egress_rules, []) - computed_egress_with_cidr_blocks = try(each.value.computed_egress_with_cidr_blocks, var.defaults.computed_egress_with_cidr_blocks, []) - computed_egress_with_ipv6_cidr_blocks = try(each.value.computed_egress_with_ipv6_cidr_blocks, var.defaults.computed_egress_with_ipv6_cidr_blocks, []) - computed_egress_with_prefix_list_ids = try(each.value.computed_egress_with_prefix_list_ids, var.defaults.computed_egress_with_prefix_list_ids, []) - computed_egress_with_self = try(each.value.computed_egress_with_self, var.defaults.computed_egress_with_self, []) - computed_egress_with_source_security_group_id = try(each.value.computed_egress_with_source_security_group_id, var.defaults.computed_egress_with_source_security_group_id, []) - computed_ingress_cidr_blocks = try(each.value.computed_ingress_cidr_blocks, var.defaults.computed_ingress_cidr_blocks, []) - computed_ingress_ipv6_cidr_blocks = try(each.value.computed_ingress_ipv6_cidr_blocks, var.defaults.computed_ingress_ipv6_cidr_blocks, []) - computed_ingress_prefix_list_ids = try(each.value.computed_ingress_prefix_list_ids, var.defaults.computed_ingress_prefix_list_ids, []) - computed_ingress_rules = try(each.value.computed_ingress_rules, var.defaults.computed_ingress_rules, []) - computed_ingress_with_cidr_blocks = try(each.value.computed_ingress_with_cidr_blocks, var.defaults.computed_ingress_with_cidr_blocks, []) - computed_ingress_with_ipv6_cidr_blocks = try(each.value.computed_ingress_with_ipv6_cidr_blocks, var.defaults.computed_ingress_with_ipv6_cidr_blocks, []) - computed_ingress_with_prefix_list_ids = try(each.value.computed_ingress_with_prefix_list_ids, var.defaults.computed_ingress_with_prefix_list_ids, []) - computed_ingress_with_self = try(each.value.computed_ingress_with_self, var.defaults.computed_ingress_with_self, []) - computed_ingress_with_source_security_group_id = try(each.value.computed_ingress_with_source_security_group_id, var.defaults.computed_ingress_with_source_security_group_id, []) - create = try(each.value.create, var.defaults.create, true) - description = try(each.value.description, var.defaults.description, "Security Group managed by Terraform") - egress_cidr_blocks = try(each.value.egress_cidr_blocks, var.defaults.egress_cidr_blocks, ["0.0.0.0/0"]) - egress_ipv6_cidr_blocks = try(each.value.egress_ipv6_cidr_blocks, var.defaults.egress_ipv6_cidr_blocks, ["::/0"]) - egress_prefix_list_ids = try(each.value.egress_prefix_list_ids, var.defaults.egress_prefix_list_ids, []) - egress_rules = try(each.value.egress_rules, var.defaults.egress_rules, []) - egress_with_cidr_blocks = try(each.value.egress_with_cidr_blocks, var.defaults.egress_with_cidr_blocks, []) - egress_with_ipv6_cidr_blocks = try(each.value.egress_with_ipv6_cidr_blocks, var.defaults.egress_with_ipv6_cidr_blocks, []) - egress_with_prefix_list_ids = try(each.value.egress_with_prefix_list_ids, var.defaults.egress_with_prefix_list_ids, []) - egress_with_self = try(each.value.egress_with_self, var.defaults.egress_with_self, []) - egress_with_source_security_group_id = try(each.value.egress_with_source_security_group_id, var.defaults.egress_with_source_security_group_id, []) - ingress_cidr_blocks = try(each.value.ingress_cidr_blocks, var.defaults.ingress_cidr_blocks, []) - ingress_ipv6_cidr_blocks = try(each.value.ingress_ipv6_cidr_blocks, var.defaults.ingress_ipv6_cidr_blocks, []) - ingress_prefix_list_ids = try(each.value.ingress_prefix_list_ids, var.defaults.ingress_prefix_list_ids, []) - ingress_rules = try(each.value.ingress_rules, var.defaults.ingress_rules, []) - ingress_with_cidr_blocks = try(each.value.ingress_with_cidr_blocks, var.defaults.ingress_with_cidr_blocks, []) - ingress_with_ipv6_cidr_blocks = try(each.value.ingress_with_ipv6_cidr_blocks, var.defaults.ingress_with_ipv6_cidr_blocks, []) - ingress_with_prefix_list_ids = try(each.value.ingress_with_prefix_list_ids, var.defaults.ingress_with_prefix_list_ids, []) - ingress_with_self = try(each.value.ingress_with_self, var.defaults.ingress_with_self, []) - ingress_with_source_security_group_id = try(each.value.ingress_with_source_security_group_id, var.defaults.ingress_with_source_security_group_id, []) - name = try(each.value.name, var.defaults.name) - number_of_computed_egress_cidr_blocks = try(each.value.number_of_computed_egress_cidr_blocks, var.defaults.number_of_computed_egress_cidr_blocks, 0) - number_of_computed_egress_ipv6_cidr_blocks = try(each.value.number_of_computed_egress_ipv6_cidr_blocks, var.defaults.number_of_computed_egress_ipv6_cidr_blocks, 0) - number_of_computed_egress_prefix_list_ids = try(each.value.number_of_computed_egress_prefix_list_ids, var.defaults.number_of_computed_egress_prefix_list_ids, 0) - number_of_computed_egress_rules = try(each.value.number_of_computed_egress_rules, var.defaults.number_of_computed_egress_rules, 0) - number_of_computed_egress_with_cidr_blocks = try(each.value.number_of_computed_egress_with_cidr_blocks, var.defaults.number_of_computed_egress_with_cidr_blocks, 0) - number_of_computed_egress_with_ipv6_cidr_blocks = try(each.value.number_of_computed_egress_with_ipv6_cidr_blocks, var.defaults.number_of_computed_egress_with_ipv6_cidr_blocks, 0) - number_of_computed_egress_with_prefix_list_ids = try(each.value.number_of_computed_egress_with_prefix_list_ids, var.defaults.number_of_computed_egress_with_prefix_list_ids, 0) - number_of_computed_egress_with_self = try(each.value.number_of_computed_egress_with_self, var.defaults.number_of_computed_egress_with_self, 0) - number_of_computed_egress_with_source_security_group_id = try(each.value.number_of_computed_egress_with_source_security_group_id, var.defaults.number_of_computed_egress_with_source_security_group_id, 0) - number_of_computed_ingress_cidr_blocks = try(each.value.number_of_computed_ingress_cidr_blocks, var.defaults.number_of_computed_ingress_cidr_blocks, 0) - number_of_computed_ingress_ipv6_cidr_blocks = try(each.value.number_of_computed_ingress_ipv6_cidr_blocks, var.defaults.number_of_computed_ingress_ipv6_cidr_blocks, 0) - number_of_computed_ingress_prefix_list_ids = try(each.value.number_of_computed_ingress_prefix_list_ids, var.defaults.number_of_computed_ingress_prefix_list_ids, 0) - number_of_computed_ingress_rules = try(each.value.number_of_computed_ingress_rules, var.defaults.number_of_computed_ingress_rules, 0) - number_of_computed_ingress_with_cidr_blocks = try(each.value.number_of_computed_ingress_with_cidr_blocks, var.defaults.number_of_computed_ingress_with_cidr_blocks, 0) - number_of_computed_ingress_with_ipv6_cidr_blocks = try(each.value.number_of_computed_ingress_with_ipv6_cidr_blocks, var.defaults.number_of_computed_ingress_with_ipv6_cidr_blocks, 0) - number_of_computed_ingress_with_prefix_list_ids = try(each.value.number_of_computed_ingress_with_prefix_list_ids, var.defaults.number_of_computed_ingress_with_prefix_list_ids, 0) - number_of_computed_ingress_with_self = try(each.value.number_of_computed_ingress_with_self, var.defaults.number_of_computed_ingress_with_self, 0) - number_of_computed_ingress_with_source_security_group_id = try(each.value.number_of_computed_ingress_with_source_security_group_id, var.defaults.number_of_computed_ingress_with_source_security_group_id, 0) - revoke_rules_on_delete = try(each.value.revoke_rules_on_delete, var.defaults.revoke_rules_on_delete, false) - tags = try(each.value.tags, var.defaults.tags, {}) - use_name_prefix = try(each.value.use_name_prefix, var.defaults.use_name_prefix, true) - vpc_id = try(each.value.vpc_id, var.defaults.vpc_id) + computed_egress_cidr_blocks = try(each.value.computed_egress_cidr_blocks, var.defaults.computed_egress_cidr_blocks, ["0.0.0.0/0"]) + computed_egress_ipv6_cidr_blocks = try(each.value.computed_egress_ipv6_cidr_blocks, var.defaults.computed_egress_ipv6_cidr_blocks, ["::/0"]) + computed_egress_prefix_list_ids = try(each.value.computed_egress_prefix_list_ids, var.defaults.computed_egress_prefix_list_ids, []) + computed_egress_rules = try(each.value.computed_egress_rules, var.defaults.computed_egress_rules, []) + computed_egress_with_cidr_ipv4 = try(each.value.computed_egress_with_cidr_ipv4, var.defaults.computed_egress_with_cidr_ipv4, []) + computed_egress_with_cidr_ipv6 = try(each.value.computed_egress_with_cidr_ipv6, var.defaults.computed_egress_with_cidr_ipv6, []) + computed_egress_with_prefix_list_id = try(each.value.computed_egress_with_prefix_list_id, var.defaults.computed_egress_with_prefix_list_id, []) + computed_egress_with_referenced_security_group_id = try(each.value.computed_egress_with_referenced_security_group_id, var.defaults.computed_egress_with_referenced_security_group_id, []) + computed_egress_with_self = try(each.value.computed_egress_with_self, var.defaults.computed_egress_with_self, []) + computed_ingress_cidr_blocks = try(each.value.computed_ingress_cidr_blocks, var.defaults.computed_ingress_cidr_blocks, []) + computed_ingress_ipv6_cidr_blocks = try(each.value.computed_ingress_ipv6_cidr_blocks, var.defaults.computed_ingress_ipv6_cidr_blocks, []) + computed_ingress_prefix_list_ids = try(each.value.computed_ingress_prefix_list_ids, var.defaults.computed_ingress_prefix_list_ids, []) + computed_ingress_rules = try(each.value.computed_ingress_rules, var.defaults.computed_ingress_rules, []) + computed_ingress_with_cidr_ipv4 = try(each.value.computed_ingress_with_cidr_ipv4, var.defaults.computed_ingress_with_cidr_ipv4, []) + computed_ingress_with_cidr_ipv6 = try(each.value.computed_ingress_with_cidr_ipv6, var.defaults.computed_ingress_with_cidr_ipv6, []) + computed_ingress_with_prefix_list_id = try(each.value.computed_ingress_with_prefix_list_id, var.defaults.computed_ingress_with_prefix_list_id, []) + computed_ingress_with_referenced_security_group_id = try(each.value.computed_ingress_with_referenced_security_group_id, var.defaults.computed_ingress_with_referenced_security_group_id, []) + computed_ingress_with_self = try(each.value.computed_ingress_with_self, var.defaults.computed_ingress_with_self, []) + create = try(each.value.create, var.defaults.create, true) + description = try(each.value.description, var.defaults.description, "Security Group managed by Terraform") + egress_cidr_ipv4 = try(each.value.egress_cidr_ipv4, var.defaults.egress_cidr_ipv4, ["0.0.0.0/0"]) + egress_cidr_ipv6 = try(each.value.egress_cidr_ipv6, var.defaults.egress_cidr_ipv6, ["::/0"]) + egress_prefix_list_ids = try(each.value.egress_prefix_list_ids, var.defaults.egress_prefix_list_ids, []) + egress_rules = try(each.value.egress_rules, var.defaults.egress_rules, []) + egress_with_cidr_ipv4 = try(each.value.egress_with_cidr_ipv4, var.defaults.egress_with_cidr_ipv4, []) + egress_with_cidr_ipv6 = try(each.value.egress_with_cidr_ipv6, var.defaults.egress_with_cidr_ipv6, []) + egress_with_prefix_list_id = try(each.value.egress_with_prefix_list_id, var.defaults.egress_with_prefix_list_id, []) + egress_with_referenced_security_group_id = try(each.value.egress_with_referenced_security_group_id, var.defaults.egress_with_referenced_security_group_id, []) + egress_with_self = try(each.value.egress_with_self, var.defaults.egress_with_self, []) + ingress_cidr_ipv4 = try(each.value.ingress_cidr_ipv4, var.defaults.ingress_cidr_ipv4, []) + ingress_cidr_ipv6 = try(each.value.ingress_cidr_ipv6, var.defaults.ingress_cidr_ipv6, []) + ingress_prefix_list_ids = try(each.value.ingress_prefix_list_ids, var.defaults.ingress_prefix_list_ids, []) + ingress_rules = try(each.value.ingress_rules, var.defaults.ingress_rules, []) + ingress_with_cidr_ipv4 = try(each.value.ingress_with_cidr_ipv4, var.defaults.ingress_with_cidr_ipv4, []) + ingress_with_cidr_ipv6 = try(each.value.ingress_with_cidr_ipv6, var.defaults.ingress_with_cidr_ipv6, []) + ingress_with_prefix_list_id = try(each.value.ingress_with_prefix_list_id, var.defaults.ingress_with_prefix_list_id, []) + ingress_with_referenced_security_group_id = try(each.value.ingress_with_referenced_security_group_id, var.defaults.ingress_with_referenced_security_group_id, []) + ingress_with_self = try(each.value.ingress_with_self, var.defaults.ingress_with_self, []) + name = try(each.value.name, var.defaults.name) + number_of_computed_egress_cidr_blocks = try(each.value.number_of_computed_egress_cidr_blocks, var.defaults.number_of_computed_egress_cidr_blocks, 0) + number_of_computed_egress_ipv6_cidr_blocks = try(each.value.number_of_computed_egress_ipv6_cidr_blocks, var.defaults.number_of_computed_egress_ipv6_cidr_blocks, 0) + number_of_computed_egress_prefix_list_ids = try(each.value.number_of_computed_egress_prefix_list_ids, var.defaults.number_of_computed_egress_prefix_list_ids, 0) + number_of_computed_egress_rules = try(each.value.number_of_computed_egress_rules, var.defaults.number_of_computed_egress_rules, 0) + number_of_computed_egress_with_cidr_ipv4 = try(each.value.number_of_computed_egress_with_cidr_ipv4, var.defaults.number_of_computed_egress_with_cidr_ipv4, 0) + number_of_computed_egress_with_cidr_ipv6 = try(each.value.number_of_computed_egress_with_cidr_ipv6, var.defaults.number_of_computed_egress_with_cidr_ipv6, 0) + number_of_computed_egress_with_prefix_list_id = try(each.value.number_of_computed_egress_with_prefix_list_id, var.defaults.number_of_computed_egress_with_prefix_list_id, 0) + number_of_computed_egress_with_referenced_security_group_id = try(each.value.number_of_computed_egress_with_referenced_security_group_id, var.defaults.number_of_computed_egress_with_referenced_security_group_id, 0) + number_of_computed_egress_with_self = try(each.value.number_of_computed_egress_with_self, var.defaults.number_of_computed_egress_with_self, 0) + number_of_computed_ingress_cidr_blocks = try(each.value.number_of_computed_ingress_cidr_blocks, var.defaults.number_of_computed_ingress_cidr_blocks, 0) + number_of_computed_ingress_ipv6_cidr_blocks = try(each.value.number_of_computed_ingress_ipv6_cidr_blocks, var.defaults.number_of_computed_ingress_ipv6_cidr_blocks, 0) + number_of_computed_ingress_prefix_list_ids = try(each.value.number_of_computed_ingress_prefix_list_ids, var.defaults.number_of_computed_ingress_prefix_list_ids, 0) + number_of_computed_ingress_rules = try(each.value.number_of_computed_ingress_rules, var.defaults.number_of_computed_ingress_rules, 0) + number_of_computed_ingress_with_cidr_ipv4 = try(each.value.number_of_computed_ingress_with_cidr_ipv4, var.defaults.number_of_computed_ingress_with_cidr_ipv4, 0) + number_of_computed_ingress_with_cidr_ipv6 = try(each.value.number_of_computed_ingress_with_cidr_ipv6, var.defaults.number_of_computed_ingress_with_cidr_ipv6, 0) + number_of_computed_ingress_with_prefix_list_id = try(each.value.number_of_computed_ingress_with_prefix_list_id, var.defaults.number_of_computed_ingress_with_prefix_list_id, 0) + number_of_computed_ingress_with_referenced_security_group_id = try(each.value.number_of_computed_ingress_with_referenced_security_group_id, var.defaults.number_of_computed_ingress_with_referenced_security_group_id, 0) + number_of_computed_ingress_with_self = try(each.value.number_of_computed_ingress_with_self, var.defaults.number_of_computed_ingress_with_self, 0) + revoke_rules_on_delete = try(each.value.revoke_rules_on_delete, var.defaults.revoke_rules_on_delete, false) + tags = try(each.value.tags, var.defaults.tags, {}) + use_name_prefix = try(each.value.use_name_prefix, var.defaults.use_name_prefix, true) + vpc_id = try(each.value.vpc_id, var.defaults.vpc_id) } diff --git a/wrappers/activemq/main.tf b/wrappers/activemq/main.tf index a8e048ba..bcdff53a 100644 --- a/wrappers/activemq/main.tf +++ b/wrappers/activemq/main.tf @@ -3,77 +3,77 @@ module "wrapper" { for_each = var.items - auto_computed_egress_rules = try(each.value.auto_computed_egress_rules, var.defaults.auto_computed_egress_rules, []) - auto_computed_egress_with_self = try(each.value.auto_computed_egress_with_self, var.defaults.auto_computed_egress_with_self, []) - auto_computed_ingress_rules = try(each.value.auto_computed_ingress_rules, var.defaults.auto_computed_ingress_rules, []) - auto_computed_ingress_with_self = try(each.value.auto_computed_ingress_with_self, var.defaults.auto_computed_ingress_with_self, []) - auto_egress_rules = try(each.value.auto_egress_rules, var.defaults.auto_egress_rules, ["all-all"]) - auto_egress_with_self = try(each.value.auto_egress_with_self, var.defaults.auto_egress_with_self, []) - auto_ingress_rules = try(each.value.auto_ingress_rules, var.defaults.auto_ingress_rules, ["activemq-5671-tcp", "activemq-8883-tcp", "activemq-61614-tcp", "activemq-61617-tcp", "activemq-61619-tcp"]) - auto_ingress_with_self = try(each.value.auto_ingress_with_self, var.defaults.auto_ingress_with_self, [{ "rule" = "all-all" }]) - auto_number_of_computed_egress_rules = try(each.value.auto_number_of_computed_egress_rules, var.defaults.auto_number_of_computed_egress_rules, 0) - auto_number_of_computed_egress_with_self = try(each.value.auto_number_of_computed_egress_with_self, var.defaults.auto_number_of_computed_egress_with_self, 0) - auto_number_of_computed_ingress_rules = try(each.value.auto_number_of_computed_ingress_rules, var.defaults.auto_number_of_computed_ingress_rules, 0) - auto_number_of_computed_ingress_with_self = try(each.value.auto_number_of_computed_ingress_with_self, var.defaults.auto_number_of_computed_ingress_with_self, 0) - computed_egress_cidr_blocks = try(each.value.computed_egress_cidr_blocks, var.defaults.computed_egress_cidr_blocks, ["0.0.0.0/0"]) - computed_egress_ipv6_cidr_blocks = try(each.value.computed_egress_ipv6_cidr_blocks, var.defaults.computed_egress_ipv6_cidr_blocks, ["::/0"]) - computed_egress_prefix_list_ids = try(each.value.computed_egress_prefix_list_ids, var.defaults.computed_egress_prefix_list_ids, []) - computed_egress_rules = try(each.value.computed_egress_rules, var.defaults.computed_egress_rules, []) - computed_egress_with_cidr_blocks = try(each.value.computed_egress_with_cidr_blocks, var.defaults.computed_egress_with_cidr_blocks, []) - computed_egress_with_ipv6_cidr_blocks = try(each.value.computed_egress_with_ipv6_cidr_blocks, var.defaults.computed_egress_with_ipv6_cidr_blocks, []) - computed_egress_with_prefix_list_ids = try(each.value.computed_egress_with_prefix_list_ids, var.defaults.computed_egress_with_prefix_list_ids, []) - computed_egress_with_self = try(each.value.computed_egress_with_self, var.defaults.computed_egress_with_self, []) - computed_egress_with_source_security_group_id = try(each.value.computed_egress_with_source_security_group_id, var.defaults.computed_egress_with_source_security_group_id, []) - computed_ingress_cidr_blocks = try(each.value.computed_ingress_cidr_blocks, var.defaults.computed_ingress_cidr_blocks, []) - computed_ingress_ipv6_cidr_blocks = try(each.value.computed_ingress_ipv6_cidr_blocks, var.defaults.computed_ingress_ipv6_cidr_blocks, []) - computed_ingress_prefix_list_ids = try(each.value.computed_ingress_prefix_list_ids, var.defaults.computed_ingress_prefix_list_ids, []) - computed_ingress_rules = try(each.value.computed_ingress_rules, var.defaults.computed_ingress_rules, []) - computed_ingress_with_cidr_blocks = try(each.value.computed_ingress_with_cidr_blocks, var.defaults.computed_ingress_with_cidr_blocks, []) - computed_ingress_with_ipv6_cidr_blocks = try(each.value.computed_ingress_with_ipv6_cidr_blocks, var.defaults.computed_ingress_with_ipv6_cidr_blocks, []) - computed_ingress_with_prefix_list_ids = try(each.value.computed_ingress_with_prefix_list_ids, var.defaults.computed_ingress_with_prefix_list_ids, []) - computed_ingress_with_self = try(each.value.computed_ingress_with_self, var.defaults.computed_ingress_with_self, []) - computed_ingress_with_source_security_group_id = try(each.value.computed_ingress_with_source_security_group_id, var.defaults.computed_ingress_with_source_security_group_id, []) - create = try(each.value.create, var.defaults.create, true) - description = try(each.value.description, var.defaults.description, "Security Group managed by Terraform") - egress_cidr_blocks = try(each.value.egress_cidr_blocks, var.defaults.egress_cidr_blocks, ["0.0.0.0/0"]) - egress_ipv6_cidr_blocks = try(each.value.egress_ipv6_cidr_blocks, var.defaults.egress_ipv6_cidr_blocks, ["::/0"]) - egress_prefix_list_ids = try(each.value.egress_prefix_list_ids, var.defaults.egress_prefix_list_ids, []) - egress_rules = try(each.value.egress_rules, var.defaults.egress_rules, []) - egress_with_cidr_blocks = try(each.value.egress_with_cidr_blocks, var.defaults.egress_with_cidr_blocks, []) - egress_with_ipv6_cidr_blocks = try(each.value.egress_with_ipv6_cidr_blocks, var.defaults.egress_with_ipv6_cidr_blocks, []) - egress_with_prefix_list_ids = try(each.value.egress_with_prefix_list_ids, var.defaults.egress_with_prefix_list_ids, []) - egress_with_self = try(each.value.egress_with_self, var.defaults.egress_with_self, []) - egress_with_source_security_group_id = try(each.value.egress_with_source_security_group_id, var.defaults.egress_with_source_security_group_id, []) - ingress_cidr_blocks = try(each.value.ingress_cidr_blocks, var.defaults.ingress_cidr_blocks, []) - ingress_ipv6_cidr_blocks = try(each.value.ingress_ipv6_cidr_blocks, var.defaults.ingress_ipv6_cidr_blocks, []) - ingress_prefix_list_ids = try(each.value.ingress_prefix_list_ids, var.defaults.ingress_prefix_list_ids, []) - ingress_rules = try(each.value.ingress_rules, var.defaults.ingress_rules, []) - ingress_with_cidr_blocks = try(each.value.ingress_with_cidr_blocks, var.defaults.ingress_with_cidr_blocks, []) - ingress_with_ipv6_cidr_blocks = try(each.value.ingress_with_ipv6_cidr_blocks, var.defaults.ingress_with_ipv6_cidr_blocks, []) - ingress_with_prefix_list_ids = try(each.value.ingress_with_prefix_list_ids, var.defaults.ingress_with_prefix_list_ids, []) - ingress_with_self = try(each.value.ingress_with_self, var.defaults.ingress_with_self, []) - ingress_with_source_security_group_id = try(each.value.ingress_with_source_security_group_id, var.defaults.ingress_with_source_security_group_id, []) - name = try(each.value.name, var.defaults.name) - number_of_computed_egress_cidr_blocks = try(each.value.number_of_computed_egress_cidr_blocks, var.defaults.number_of_computed_egress_cidr_blocks, 0) - number_of_computed_egress_ipv6_cidr_blocks = try(each.value.number_of_computed_egress_ipv6_cidr_blocks, var.defaults.number_of_computed_egress_ipv6_cidr_blocks, 0) - number_of_computed_egress_prefix_list_ids = try(each.value.number_of_computed_egress_prefix_list_ids, var.defaults.number_of_computed_egress_prefix_list_ids, 0) - number_of_computed_egress_rules = try(each.value.number_of_computed_egress_rules, var.defaults.number_of_computed_egress_rules, 0) - number_of_computed_egress_with_cidr_blocks = try(each.value.number_of_computed_egress_with_cidr_blocks, var.defaults.number_of_computed_egress_with_cidr_blocks, 0) - number_of_computed_egress_with_ipv6_cidr_blocks = try(each.value.number_of_computed_egress_with_ipv6_cidr_blocks, var.defaults.number_of_computed_egress_with_ipv6_cidr_blocks, 0) - number_of_computed_egress_with_prefix_list_ids = try(each.value.number_of_computed_egress_with_prefix_list_ids, var.defaults.number_of_computed_egress_with_prefix_list_ids, 0) - number_of_computed_egress_with_self = try(each.value.number_of_computed_egress_with_self, var.defaults.number_of_computed_egress_with_self, 0) - number_of_computed_egress_with_source_security_group_id = try(each.value.number_of_computed_egress_with_source_security_group_id, var.defaults.number_of_computed_egress_with_source_security_group_id, 0) - number_of_computed_ingress_cidr_blocks = try(each.value.number_of_computed_ingress_cidr_blocks, var.defaults.number_of_computed_ingress_cidr_blocks, 0) - number_of_computed_ingress_ipv6_cidr_blocks = try(each.value.number_of_computed_ingress_ipv6_cidr_blocks, var.defaults.number_of_computed_ingress_ipv6_cidr_blocks, 0) - number_of_computed_ingress_prefix_list_ids = try(each.value.number_of_computed_ingress_prefix_list_ids, var.defaults.number_of_computed_ingress_prefix_list_ids, 0) - number_of_computed_ingress_rules = try(each.value.number_of_computed_ingress_rules, var.defaults.number_of_computed_ingress_rules, 0) - number_of_computed_ingress_with_cidr_blocks = try(each.value.number_of_computed_ingress_with_cidr_blocks, var.defaults.number_of_computed_ingress_with_cidr_blocks, 0) - number_of_computed_ingress_with_ipv6_cidr_blocks = try(each.value.number_of_computed_ingress_with_ipv6_cidr_blocks, var.defaults.number_of_computed_ingress_with_ipv6_cidr_blocks, 0) - number_of_computed_ingress_with_prefix_list_ids = try(each.value.number_of_computed_ingress_with_prefix_list_ids, var.defaults.number_of_computed_ingress_with_prefix_list_ids, 0) - number_of_computed_ingress_with_self = try(each.value.number_of_computed_ingress_with_self, var.defaults.number_of_computed_ingress_with_self, 0) - number_of_computed_ingress_with_source_security_group_id = try(each.value.number_of_computed_ingress_with_source_security_group_id, var.defaults.number_of_computed_ingress_with_source_security_group_id, 0) - revoke_rules_on_delete = try(each.value.revoke_rules_on_delete, var.defaults.revoke_rules_on_delete, false) - tags = try(each.value.tags, var.defaults.tags, {}) - use_name_prefix = try(each.value.use_name_prefix, var.defaults.use_name_prefix, true) - vpc_id = try(each.value.vpc_id, var.defaults.vpc_id) + auto_computed_egress_rules = try(each.value.auto_computed_egress_rules, var.defaults.auto_computed_egress_rules, []) + auto_computed_egress_with_self = try(each.value.auto_computed_egress_with_self, var.defaults.auto_computed_egress_with_self, []) + auto_computed_ingress_rules = try(each.value.auto_computed_ingress_rules, var.defaults.auto_computed_ingress_rules, []) + auto_computed_ingress_with_self = try(each.value.auto_computed_ingress_with_self, var.defaults.auto_computed_ingress_with_self, []) + auto_egress_rules = try(each.value.auto_egress_rules, var.defaults.auto_egress_rules, ["all-all"]) + auto_egress_with_self = try(each.value.auto_egress_with_self, var.defaults.auto_egress_with_self, []) + auto_ingress_rules = try(each.value.auto_ingress_rules, var.defaults.auto_ingress_rules, ["activemq-5671-tcp", "activemq-8883-tcp", "activemq-61614-tcp", "activemq-61617-tcp", "activemq-61619-tcp"]) + auto_ingress_with_self = try(each.value.auto_ingress_with_self, var.defaults.auto_ingress_with_self, [{ "rule" = "all-all" }]) + auto_number_of_computed_egress_rules = try(each.value.auto_number_of_computed_egress_rules, var.defaults.auto_number_of_computed_egress_rules, 0) + auto_number_of_computed_egress_with_self = try(each.value.auto_number_of_computed_egress_with_self, var.defaults.auto_number_of_computed_egress_with_self, 0) + auto_number_of_computed_ingress_rules = try(each.value.auto_number_of_computed_ingress_rules, var.defaults.auto_number_of_computed_ingress_rules, 0) + auto_number_of_computed_ingress_with_self = try(each.value.auto_number_of_computed_ingress_with_self, var.defaults.auto_number_of_computed_ingress_with_self, 0) + computed_egress_cidr_blocks = try(each.value.computed_egress_cidr_blocks, var.defaults.computed_egress_cidr_blocks, ["0.0.0.0/0"]) + computed_egress_ipv6_cidr_blocks = try(each.value.computed_egress_ipv6_cidr_blocks, var.defaults.computed_egress_ipv6_cidr_blocks, ["::/0"]) + computed_egress_prefix_list_ids = try(each.value.computed_egress_prefix_list_ids, var.defaults.computed_egress_prefix_list_ids, []) + computed_egress_rules = try(each.value.computed_egress_rules, var.defaults.computed_egress_rules, []) + computed_egress_with_cidr_ipv4 = try(each.value.computed_egress_with_cidr_ipv4, var.defaults.computed_egress_with_cidr_ipv4, []) + computed_egress_with_cidr_ipv6 = try(each.value.computed_egress_with_cidr_ipv6, var.defaults.computed_egress_with_cidr_ipv6, []) + computed_egress_with_prefix_list_id = try(each.value.computed_egress_with_prefix_list_id, var.defaults.computed_egress_with_prefix_list_id, []) + computed_egress_with_referenced_security_group_id = try(each.value.computed_egress_with_referenced_security_group_id, var.defaults.computed_egress_with_referenced_security_group_id, []) + computed_egress_with_self = try(each.value.computed_egress_with_self, var.defaults.computed_egress_with_self, []) + computed_ingress_cidr_blocks = try(each.value.computed_ingress_cidr_blocks, var.defaults.computed_ingress_cidr_blocks, []) + computed_ingress_ipv6_cidr_blocks = try(each.value.computed_ingress_ipv6_cidr_blocks, var.defaults.computed_ingress_ipv6_cidr_blocks, []) + computed_ingress_prefix_list_ids = try(each.value.computed_ingress_prefix_list_ids, var.defaults.computed_ingress_prefix_list_ids, []) + computed_ingress_rules = try(each.value.computed_ingress_rules, var.defaults.computed_ingress_rules, []) + computed_ingress_with_cidr_ipv4 = try(each.value.computed_ingress_with_cidr_ipv4, var.defaults.computed_ingress_with_cidr_ipv4, []) + computed_ingress_with_cidr_ipv6 = try(each.value.computed_ingress_with_cidr_ipv6, var.defaults.computed_ingress_with_cidr_ipv6, []) + computed_ingress_with_prefix_list_id = try(each.value.computed_ingress_with_prefix_list_id, var.defaults.computed_ingress_with_prefix_list_id, []) + computed_ingress_with_referenced_security_group_id = try(each.value.computed_ingress_with_referenced_security_group_id, var.defaults.computed_ingress_with_referenced_security_group_id, []) + computed_ingress_with_self = try(each.value.computed_ingress_with_self, var.defaults.computed_ingress_with_self, []) + create = try(each.value.create, var.defaults.create, true) + description = try(each.value.description, var.defaults.description, "Security Group managed by Terraform") + egress_cidr_ipv4 = try(each.value.egress_cidr_ipv4, var.defaults.egress_cidr_ipv4, ["0.0.0.0/0"]) + egress_cidr_ipv6 = try(each.value.egress_cidr_ipv6, var.defaults.egress_cidr_ipv6, ["::/0"]) + egress_prefix_list_ids = try(each.value.egress_prefix_list_ids, var.defaults.egress_prefix_list_ids, []) + egress_rules = try(each.value.egress_rules, var.defaults.egress_rules, []) + egress_with_cidr_ipv4 = try(each.value.egress_with_cidr_ipv4, var.defaults.egress_with_cidr_ipv4, []) + egress_with_cidr_ipv6 = try(each.value.egress_with_cidr_ipv6, var.defaults.egress_with_cidr_ipv6, []) + egress_with_prefix_list_id = try(each.value.egress_with_prefix_list_id, var.defaults.egress_with_prefix_list_id, []) + egress_with_referenced_security_group_id = try(each.value.egress_with_referenced_security_group_id, var.defaults.egress_with_referenced_security_group_id, []) + egress_with_self = try(each.value.egress_with_self, var.defaults.egress_with_self, []) + ingress_cidr_ipv4 = try(each.value.ingress_cidr_ipv4, var.defaults.ingress_cidr_ipv4, []) + ingress_cidr_ipv6 = try(each.value.ingress_cidr_ipv6, var.defaults.ingress_cidr_ipv6, []) + ingress_prefix_list_ids = try(each.value.ingress_prefix_list_ids, var.defaults.ingress_prefix_list_ids, []) + ingress_rules = try(each.value.ingress_rules, var.defaults.ingress_rules, []) + ingress_with_cidr_ipv4 = try(each.value.ingress_with_cidr_ipv4, var.defaults.ingress_with_cidr_ipv4, []) + ingress_with_cidr_ipv6 = try(each.value.ingress_with_cidr_ipv6, var.defaults.ingress_with_cidr_ipv6, []) + ingress_with_prefix_list_id = try(each.value.ingress_with_prefix_list_id, var.defaults.ingress_with_prefix_list_id, []) + ingress_with_referenced_security_group_id = try(each.value.ingress_with_referenced_security_group_id, var.defaults.ingress_with_referenced_security_group_id, []) + ingress_with_self = try(each.value.ingress_with_self, var.defaults.ingress_with_self, []) + name = try(each.value.name, var.defaults.name) + number_of_computed_egress_cidr_blocks = try(each.value.number_of_computed_egress_cidr_blocks, var.defaults.number_of_computed_egress_cidr_blocks, 0) + number_of_computed_egress_ipv6_cidr_blocks = try(each.value.number_of_computed_egress_ipv6_cidr_blocks, var.defaults.number_of_computed_egress_ipv6_cidr_blocks, 0) + number_of_computed_egress_prefix_list_ids = try(each.value.number_of_computed_egress_prefix_list_ids, var.defaults.number_of_computed_egress_prefix_list_ids, 0) + number_of_computed_egress_rules = try(each.value.number_of_computed_egress_rules, var.defaults.number_of_computed_egress_rules, 0) + number_of_computed_egress_with_cidr_ipv4 = try(each.value.number_of_computed_egress_with_cidr_ipv4, var.defaults.number_of_computed_egress_with_cidr_ipv4, 0) + number_of_computed_egress_with_cidr_ipv6 = try(each.value.number_of_computed_egress_with_cidr_ipv6, var.defaults.number_of_computed_egress_with_cidr_ipv6, 0) + number_of_computed_egress_with_prefix_list_id = try(each.value.number_of_computed_egress_with_prefix_list_id, var.defaults.number_of_computed_egress_with_prefix_list_id, 0) + number_of_computed_egress_with_referenced_security_group_id = try(each.value.number_of_computed_egress_with_referenced_security_group_id, var.defaults.number_of_computed_egress_with_referenced_security_group_id, 0) + number_of_computed_egress_with_self = try(each.value.number_of_computed_egress_with_self, var.defaults.number_of_computed_egress_with_self, 0) + number_of_computed_ingress_cidr_blocks = try(each.value.number_of_computed_ingress_cidr_blocks, var.defaults.number_of_computed_ingress_cidr_blocks, 0) + number_of_computed_ingress_ipv6_cidr_blocks = try(each.value.number_of_computed_ingress_ipv6_cidr_blocks, var.defaults.number_of_computed_ingress_ipv6_cidr_blocks, 0) + number_of_computed_ingress_prefix_list_ids = try(each.value.number_of_computed_ingress_prefix_list_ids, var.defaults.number_of_computed_ingress_prefix_list_ids, 0) + number_of_computed_ingress_rules = try(each.value.number_of_computed_ingress_rules, var.defaults.number_of_computed_ingress_rules, 0) + number_of_computed_ingress_with_cidr_ipv4 = try(each.value.number_of_computed_ingress_with_cidr_ipv4, var.defaults.number_of_computed_ingress_with_cidr_ipv4, 0) + number_of_computed_ingress_with_cidr_ipv6 = try(each.value.number_of_computed_ingress_with_cidr_ipv6, var.defaults.number_of_computed_ingress_with_cidr_ipv6, 0) + number_of_computed_ingress_with_prefix_list_id = try(each.value.number_of_computed_ingress_with_prefix_list_id, var.defaults.number_of_computed_ingress_with_prefix_list_id, 0) + number_of_computed_ingress_with_referenced_security_group_id = try(each.value.number_of_computed_ingress_with_referenced_security_group_id, var.defaults.number_of_computed_ingress_with_referenced_security_group_id, 0) + number_of_computed_ingress_with_self = try(each.value.number_of_computed_ingress_with_self, var.defaults.number_of_computed_ingress_with_self, 0) + revoke_rules_on_delete = try(each.value.revoke_rules_on_delete, var.defaults.revoke_rules_on_delete, false) + tags = try(each.value.tags, var.defaults.tags, {}) + use_name_prefix = try(each.value.use_name_prefix, var.defaults.use_name_prefix, true) + vpc_id = try(each.value.vpc_id, var.defaults.vpc_id) } diff --git a/wrappers/alertmanager/main.tf b/wrappers/alertmanager/main.tf index 93e495cf..284755b2 100644 --- a/wrappers/alertmanager/main.tf +++ b/wrappers/alertmanager/main.tf @@ -3,77 +3,77 @@ module "wrapper" { for_each = var.items - auto_computed_egress_rules = try(each.value.auto_computed_egress_rules, var.defaults.auto_computed_egress_rules, []) - auto_computed_egress_with_self = try(each.value.auto_computed_egress_with_self, var.defaults.auto_computed_egress_with_self, []) - auto_computed_ingress_rules = try(each.value.auto_computed_ingress_rules, var.defaults.auto_computed_ingress_rules, []) - auto_computed_ingress_with_self = try(each.value.auto_computed_ingress_with_self, var.defaults.auto_computed_ingress_with_self, []) - auto_egress_rules = try(each.value.auto_egress_rules, var.defaults.auto_egress_rules, ["all-all"]) - auto_egress_with_self = try(each.value.auto_egress_with_self, var.defaults.auto_egress_with_self, []) - auto_ingress_rules = try(each.value.auto_ingress_rules, var.defaults.auto_ingress_rules, ["alertmanager-9093-tcp", "alertmanager-9094-tcp"]) - auto_ingress_with_self = try(each.value.auto_ingress_with_self, var.defaults.auto_ingress_with_self, [{ "rule" = "all-all" }]) - auto_number_of_computed_egress_rules = try(each.value.auto_number_of_computed_egress_rules, var.defaults.auto_number_of_computed_egress_rules, 0) - auto_number_of_computed_egress_with_self = try(each.value.auto_number_of_computed_egress_with_self, var.defaults.auto_number_of_computed_egress_with_self, 0) - auto_number_of_computed_ingress_rules = try(each.value.auto_number_of_computed_ingress_rules, var.defaults.auto_number_of_computed_ingress_rules, 0) - auto_number_of_computed_ingress_with_self = try(each.value.auto_number_of_computed_ingress_with_self, var.defaults.auto_number_of_computed_ingress_with_self, 0) - computed_egress_cidr_blocks = try(each.value.computed_egress_cidr_blocks, var.defaults.computed_egress_cidr_blocks, ["0.0.0.0/0"]) - computed_egress_ipv6_cidr_blocks = try(each.value.computed_egress_ipv6_cidr_blocks, var.defaults.computed_egress_ipv6_cidr_blocks, ["::/0"]) - computed_egress_prefix_list_ids = try(each.value.computed_egress_prefix_list_ids, var.defaults.computed_egress_prefix_list_ids, []) - computed_egress_rules = try(each.value.computed_egress_rules, var.defaults.computed_egress_rules, []) - computed_egress_with_cidr_blocks = try(each.value.computed_egress_with_cidr_blocks, var.defaults.computed_egress_with_cidr_blocks, []) - computed_egress_with_ipv6_cidr_blocks = try(each.value.computed_egress_with_ipv6_cidr_blocks, var.defaults.computed_egress_with_ipv6_cidr_blocks, []) - computed_egress_with_prefix_list_ids = try(each.value.computed_egress_with_prefix_list_ids, var.defaults.computed_egress_with_prefix_list_ids, []) - computed_egress_with_self = try(each.value.computed_egress_with_self, var.defaults.computed_egress_with_self, []) - computed_egress_with_source_security_group_id = try(each.value.computed_egress_with_source_security_group_id, var.defaults.computed_egress_with_source_security_group_id, []) - computed_ingress_cidr_blocks = try(each.value.computed_ingress_cidr_blocks, var.defaults.computed_ingress_cidr_blocks, []) - computed_ingress_ipv6_cidr_blocks = try(each.value.computed_ingress_ipv6_cidr_blocks, var.defaults.computed_ingress_ipv6_cidr_blocks, []) - computed_ingress_prefix_list_ids = try(each.value.computed_ingress_prefix_list_ids, var.defaults.computed_ingress_prefix_list_ids, []) - computed_ingress_rules = try(each.value.computed_ingress_rules, var.defaults.computed_ingress_rules, []) - computed_ingress_with_cidr_blocks = try(each.value.computed_ingress_with_cidr_blocks, var.defaults.computed_ingress_with_cidr_blocks, []) - computed_ingress_with_ipv6_cidr_blocks = try(each.value.computed_ingress_with_ipv6_cidr_blocks, var.defaults.computed_ingress_with_ipv6_cidr_blocks, []) - computed_ingress_with_prefix_list_ids = try(each.value.computed_ingress_with_prefix_list_ids, var.defaults.computed_ingress_with_prefix_list_ids, []) - computed_ingress_with_self = try(each.value.computed_ingress_with_self, var.defaults.computed_ingress_with_self, []) - computed_ingress_with_source_security_group_id = try(each.value.computed_ingress_with_source_security_group_id, var.defaults.computed_ingress_with_source_security_group_id, []) - create = try(each.value.create, var.defaults.create, true) - description = try(each.value.description, var.defaults.description, "Security Group managed by Terraform") - egress_cidr_blocks = try(each.value.egress_cidr_blocks, var.defaults.egress_cidr_blocks, ["0.0.0.0/0"]) - egress_ipv6_cidr_blocks = try(each.value.egress_ipv6_cidr_blocks, var.defaults.egress_ipv6_cidr_blocks, ["::/0"]) - egress_prefix_list_ids = try(each.value.egress_prefix_list_ids, var.defaults.egress_prefix_list_ids, []) - egress_rules = try(each.value.egress_rules, var.defaults.egress_rules, []) - egress_with_cidr_blocks = try(each.value.egress_with_cidr_blocks, var.defaults.egress_with_cidr_blocks, []) - egress_with_ipv6_cidr_blocks = try(each.value.egress_with_ipv6_cidr_blocks, var.defaults.egress_with_ipv6_cidr_blocks, []) - egress_with_prefix_list_ids = try(each.value.egress_with_prefix_list_ids, var.defaults.egress_with_prefix_list_ids, []) - egress_with_self = try(each.value.egress_with_self, var.defaults.egress_with_self, []) - egress_with_source_security_group_id = try(each.value.egress_with_source_security_group_id, var.defaults.egress_with_source_security_group_id, []) - ingress_cidr_blocks = try(each.value.ingress_cidr_blocks, var.defaults.ingress_cidr_blocks, []) - ingress_ipv6_cidr_blocks = try(each.value.ingress_ipv6_cidr_blocks, var.defaults.ingress_ipv6_cidr_blocks, []) - ingress_prefix_list_ids = try(each.value.ingress_prefix_list_ids, var.defaults.ingress_prefix_list_ids, []) - ingress_rules = try(each.value.ingress_rules, var.defaults.ingress_rules, []) - ingress_with_cidr_blocks = try(each.value.ingress_with_cidr_blocks, var.defaults.ingress_with_cidr_blocks, []) - ingress_with_ipv6_cidr_blocks = try(each.value.ingress_with_ipv6_cidr_blocks, var.defaults.ingress_with_ipv6_cidr_blocks, []) - ingress_with_prefix_list_ids = try(each.value.ingress_with_prefix_list_ids, var.defaults.ingress_with_prefix_list_ids, []) - ingress_with_self = try(each.value.ingress_with_self, var.defaults.ingress_with_self, []) - ingress_with_source_security_group_id = try(each.value.ingress_with_source_security_group_id, var.defaults.ingress_with_source_security_group_id, []) - name = try(each.value.name, var.defaults.name) - number_of_computed_egress_cidr_blocks = try(each.value.number_of_computed_egress_cidr_blocks, var.defaults.number_of_computed_egress_cidr_blocks, 0) - number_of_computed_egress_ipv6_cidr_blocks = try(each.value.number_of_computed_egress_ipv6_cidr_blocks, var.defaults.number_of_computed_egress_ipv6_cidr_blocks, 0) - number_of_computed_egress_prefix_list_ids = try(each.value.number_of_computed_egress_prefix_list_ids, var.defaults.number_of_computed_egress_prefix_list_ids, 0) - number_of_computed_egress_rules = try(each.value.number_of_computed_egress_rules, var.defaults.number_of_computed_egress_rules, 0) - number_of_computed_egress_with_cidr_blocks = try(each.value.number_of_computed_egress_with_cidr_blocks, var.defaults.number_of_computed_egress_with_cidr_blocks, 0) - number_of_computed_egress_with_ipv6_cidr_blocks = try(each.value.number_of_computed_egress_with_ipv6_cidr_blocks, var.defaults.number_of_computed_egress_with_ipv6_cidr_blocks, 0) - number_of_computed_egress_with_prefix_list_ids = try(each.value.number_of_computed_egress_with_prefix_list_ids, var.defaults.number_of_computed_egress_with_prefix_list_ids, 0) - number_of_computed_egress_with_self = try(each.value.number_of_computed_egress_with_self, var.defaults.number_of_computed_egress_with_self, 0) - number_of_computed_egress_with_source_security_group_id = try(each.value.number_of_computed_egress_with_source_security_group_id, var.defaults.number_of_computed_egress_with_source_security_group_id, 0) - number_of_computed_ingress_cidr_blocks = try(each.value.number_of_computed_ingress_cidr_blocks, var.defaults.number_of_computed_ingress_cidr_blocks, 0) - number_of_computed_ingress_ipv6_cidr_blocks = try(each.value.number_of_computed_ingress_ipv6_cidr_blocks, var.defaults.number_of_computed_ingress_ipv6_cidr_blocks, 0) - number_of_computed_ingress_prefix_list_ids = try(each.value.number_of_computed_ingress_prefix_list_ids, var.defaults.number_of_computed_ingress_prefix_list_ids, 0) - number_of_computed_ingress_rules = try(each.value.number_of_computed_ingress_rules, var.defaults.number_of_computed_ingress_rules, 0) - number_of_computed_ingress_with_cidr_blocks = try(each.value.number_of_computed_ingress_with_cidr_blocks, var.defaults.number_of_computed_ingress_with_cidr_blocks, 0) - number_of_computed_ingress_with_ipv6_cidr_blocks = try(each.value.number_of_computed_ingress_with_ipv6_cidr_blocks, var.defaults.number_of_computed_ingress_with_ipv6_cidr_blocks, 0) - number_of_computed_ingress_with_prefix_list_ids = try(each.value.number_of_computed_ingress_with_prefix_list_ids, var.defaults.number_of_computed_ingress_with_prefix_list_ids, 0) - number_of_computed_ingress_with_self = try(each.value.number_of_computed_ingress_with_self, var.defaults.number_of_computed_ingress_with_self, 0) - number_of_computed_ingress_with_source_security_group_id = try(each.value.number_of_computed_ingress_with_source_security_group_id, var.defaults.number_of_computed_ingress_with_source_security_group_id, 0) - revoke_rules_on_delete = try(each.value.revoke_rules_on_delete, var.defaults.revoke_rules_on_delete, false) - tags = try(each.value.tags, var.defaults.tags, {}) - use_name_prefix = try(each.value.use_name_prefix, var.defaults.use_name_prefix, true) - vpc_id = try(each.value.vpc_id, var.defaults.vpc_id) + auto_computed_egress_rules = try(each.value.auto_computed_egress_rules, var.defaults.auto_computed_egress_rules, []) + auto_computed_egress_with_self = try(each.value.auto_computed_egress_with_self, var.defaults.auto_computed_egress_with_self, []) + auto_computed_ingress_rules = try(each.value.auto_computed_ingress_rules, var.defaults.auto_computed_ingress_rules, []) + auto_computed_ingress_with_self = try(each.value.auto_computed_ingress_with_self, var.defaults.auto_computed_ingress_with_self, []) + auto_egress_rules = try(each.value.auto_egress_rules, var.defaults.auto_egress_rules, ["all-all"]) + auto_egress_with_self = try(each.value.auto_egress_with_self, var.defaults.auto_egress_with_self, []) + auto_ingress_rules = try(each.value.auto_ingress_rules, var.defaults.auto_ingress_rules, ["alertmanager-9093-tcp", "alertmanager-9094-tcp"]) + auto_ingress_with_self = try(each.value.auto_ingress_with_self, var.defaults.auto_ingress_with_self, [{ "rule" = "all-all" }]) + auto_number_of_computed_egress_rules = try(each.value.auto_number_of_computed_egress_rules, var.defaults.auto_number_of_computed_egress_rules, 0) + auto_number_of_computed_egress_with_self = try(each.value.auto_number_of_computed_egress_with_self, var.defaults.auto_number_of_computed_egress_with_self, 0) + auto_number_of_computed_ingress_rules = try(each.value.auto_number_of_computed_ingress_rules, var.defaults.auto_number_of_computed_ingress_rules, 0) + auto_number_of_computed_ingress_with_self = try(each.value.auto_number_of_computed_ingress_with_self, var.defaults.auto_number_of_computed_ingress_with_self, 0) + computed_egress_cidr_blocks = try(each.value.computed_egress_cidr_blocks, var.defaults.computed_egress_cidr_blocks, ["0.0.0.0/0"]) + computed_egress_ipv6_cidr_blocks = try(each.value.computed_egress_ipv6_cidr_blocks, var.defaults.computed_egress_ipv6_cidr_blocks, ["::/0"]) + computed_egress_prefix_list_ids = try(each.value.computed_egress_prefix_list_ids, var.defaults.computed_egress_prefix_list_ids, []) + computed_egress_rules = try(each.value.computed_egress_rules, var.defaults.computed_egress_rules, []) + computed_egress_with_cidr_ipv4 = try(each.value.computed_egress_with_cidr_ipv4, var.defaults.computed_egress_with_cidr_ipv4, []) + computed_egress_with_cidr_ipv6 = try(each.value.computed_egress_with_cidr_ipv6, var.defaults.computed_egress_with_cidr_ipv6, []) + computed_egress_with_prefix_list_id = try(each.value.computed_egress_with_prefix_list_id, var.defaults.computed_egress_with_prefix_list_id, []) + computed_egress_with_referenced_security_group_id = try(each.value.computed_egress_with_referenced_security_group_id, var.defaults.computed_egress_with_referenced_security_group_id, []) + computed_egress_with_self = try(each.value.computed_egress_with_self, var.defaults.computed_egress_with_self, []) + computed_ingress_cidr_blocks = try(each.value.computed_ingress_cidr_blocks, var.defaults.computed_ingress_cidr_blocks, []) + computed_ingress_ipv6_cidr_blocks = try(each.value.computed_ingress_ipv6_cidr_blocks, var.defaults.computed_ingress_ipv6_cidr_blocks, []) + computed_ingress_prefix_list_ids = try(each.value.computed_ingress_prefix_list_ids, var.defaults.computed_ingress_prefix_list_ids, []) + computed_ingress_rules = try(each.value.computed_ingress_rules, var.defaults.computed_ingress_rules, []) + computed_ingress_with_cidr_ipv4 = try(each.value.computed_ingress_with_cidr_ipv4, var.defaults.computed_ingress_with_cidr_ipv4, []) + computed_ingress_with_cidr_ipv6 = try(each.value.computed_ingress_with_cidr_ipv6, var.defaults.computed_ingress_with_cidr_ipv6, []) + computed_ingress_with_prefix_list_id = try(each.value.computed_ingress_with_prefix_list_id, var.defaults.computed_ingress_with_prefix_list_id, []) + computed_ingress_with_referenced_security_group_id = try(each.value.computed_ingress_with_referenced_security_group_id, var.defaults.computed_ingress_with_referenced_security_group_id, []) + computed_ingress_with_self = try(each.value.computed_ingress_with_self, var.defaults.computed_ingress_with_self, []) + create = try(each.value.create, var.defaults.create, true) + description = try(each.value.description, var.defaults.description, "Security Group managed by Terraform") + egress_cidr_ipv4 = try(each.value.egress_cidr_ipv4, var.defaults.egress_cidr_ipv4, ["0.0.0.0/0"]) + egress_cidr_ipv6 = try(each.value.egress_cidr_ipv6, var.defaults.egress_cidr_ipv6, ["::/0"]) + egress_prefix_list_ids = try(each.value.egress_prefix_list_ids, var.defaults.egress_prefix_list_ids, []) + egress_rules = try(each.value.egress_rules, var.defaults.egress_rules, []) + egress_with_cidr_ipv4 = try(each.value.egress_with_cidr_ipv4, var.defaults.egress_with_cidr_ipv4, []) + egress_with_cidr_ipv6 = try(each.value.egress_with_cidr_ipv6, var.defaults.egress_with_cidr_ipv6, []) + egress_with_prefix_list_id = try(each.value.egress_with_prefix_list_id, var.defaults.egress_with_prefix_list_id, []) + egress_with_referenced_security_group_id = try(each.value.egress_with_referenced_security_group_id, var.defaults.egress_with_referenced_security_group_id, []) + egress_with_self = try(each.value.egress_with_self, var.defaults.egress_with_self, []) + ingress_cidr_ipv4 = try(each.value.ingress_cidr_ipv4, var.defaults.ingress_cidr_ipv4, []) + ingress_cidr_ipv6 = try(each.value.ingress_cidr_ipv6, var.defaults.ingress_cidr_ipv6, []) + ingress_prefix_list_ids = try(each.value.ingress_prefix_list_ids, var.defaults.ingress_prefix_list_ids, []) + ingress_rules = try(each.value.ingress_rules, var.defaults.ingress_rules, []) + ingress_with_cidr_ipv4 = try(each.value.ingress_with_cidr_ipv4, var.defaults.ingress_with_cidr_ipv4, []) + ingress_with_cidr_ipv6 = try(each.value.ingress_with_cidr_ipv6, var.defaults.ingress_with_cidr_ipv6, []) + ingress_with_prefix_list_id = try(each.value.ingress_with_prefix_list_id, var.defaults.ingress_with_prefix_list_id, []) + ingress_with_referenced_security_group_id = try(each.value.ingress_with_referenced_security_group_id, var.defaults.ingress_with_referenced_security_group_id, []) + ingress_with_self = try(each.value.ingress_with_self, var.defaults.ingress_with_self, []) + name = try(each.value.name, var.defaults.name) + number_of_computed_egress_cidr_blocks = try(each.value.number_of_computed_egress_cidr_blocks, var.defaults.number_of_computed_egress_cidr_blocks, 0) + number_of_computed_egress_ipv6_cidr_blocks = try(each.value.number_of_computed_egress_ipv6_cidr_blocks, var.defaults.number_of_computed_egress_ipv6_cidr_blocks, 0) + number_of_computed_egress_prefix_list_ids = try(each.value.number_of_computed_egress_prefix_list_ids, var.defaults.number_of_computed_egress_prefix_list_ids, 0) + number_of_computed_egress_rules = try(each.value.number_of_computed_egress_rules, var.defaults.number_of_computed_egress_rules, 0) + number_of_computed_egress_with_cidr_ipv4 = try(each.value.number_of_computed_egress_with_cidr_ipv4, var.defaults.number_of_computed_egress_with_cidr_ipv4, 0) + number_of_computed_egress_with_cidr_ipv6 = try(each.value.number_of_computed_egress_with_cidr_ipv6, var.defaults.number_of_computed_egress_with_cidr_ipv6, 0) + number_of_computed_egress_with_prefix_list_id = try(each.value.number_of_computed_egress_with_prefix_list_id, var.defaults.number_of_computed_egress_with_prefix_list_id, 0) + number_of_computed_egress_with_referenced_security_group_id = try(each.value.number_of_computed_egress_with_referenced_security_group_id, var.defaults.number_of_computed_egress_with_referenced_security_group_id, 0) + number_of_computed_egress_with_self = try(each.value.number_of_computed_egress_with_self, var.defaults.number_of_computed_egress_with_self, 0) + number_of_computed_ingress_cidr_blocks = try(each.value.number_of_computed_ingress_cidr_blocks, var.defaults.number_of_computed_ingress_cidr_blocks, 0) + number_of_computed_ingress_ipv6_cidr_blocks = try(each.value.number_of_computed_ingress_ipv6_cidr_blocks, var.defaults.number_of_computed_ingress_ipv6_cidr_blocks, 0) + number_of_computed_ingress_prefix_list_ids = try(each.value.number_of_computed_ingress_prefix_list_ids, var.defaults.number_of_computed_ingress_prefix_list_ids, 0) + number_of_computed_ingress_rules = try(each.value.number_of_computed_ingress_rules, var.defaults.number_of_computed_ingress_rules, 0) + number_of_computed_ingress_with_cidr_ipv4 = try(each.value.number_of_computed_ingress_with_cidr_ipv4, var.defaults.number_of_computed_ingress_with_cidr_ipv4, 0) + number_of_computed_ingress_with_cidr_ipv6 = try(each.value.number_of_computed_ingress_with_cidr_ipv6, var.defaults.number_of_computed_ingress_with_cidr_ipv6, 0) + number_of_computed_ingress_with_prefix_list_id = try(each.value.number_of_computed_ingress_with_prefix_list_id, var.defaults.number_of_computed_ingress_with_prefix_list_id, 0) + number_of_computed_ingress_with_referenced_security_group_id = try(each.value.number_of_computed_ingress_with_referenced_security_group_id, var.defaults.number_of_computed_ingress_with_referenced_security_group_id, 0) + number_of_computed_ingress_with_self = try(each.value.number_of_computed_ingress_with_self, var.defaults.number_of_computed_ingress_with_self, 0) + revoke_rules_on_delete = try(each.value.revoke_rules_on_delete, var.defaults.revoke_rules_on_delete, false) + tags = try(each.value.tags, var.defaults.tags, {}) + use_name_prefix = try(each.value.use_name_prefix, var.defaults.use_name_prefix, true) + vpc_id = try(each.value.vpc_id, var.defaults.vpc_id) } diff --git a/wrappers/carbon-relay-ng/main.tf b/wrappers/carbon-relay-ng/main.tf index a54d5b8f..c6995be7 100644 --- a/wrappers/carbon-relay-ng/main.tf +++ b/wrappers/carbon-relay-ng/main.tf @@ -3,77 +3,77 @@ module "wrapper" { for_each = var.items - auto_computed_egress_rules = try(each.value.auto_computed_egress_rules, var.defaults.auto_computed_egress_rules, []) - auto_computed_egress_with_self = try(each.value.auto_computed_egress_with_self, var.defaults.auto_computed_egress_with_self, []) - auto_computed_ingress_rules = try(each.value.auto_computed_ingress_rules, var.defaults.auto_computed_ingress_rules, []) - auto_computed_ingress_with_self = try(each.value.auto_computed_ingress_with_self, var.defaults.auto_computed_ingress_with_self, []) - auto_egress_rules = try(each.value.auto_egress_rules, var.defaults.auto_egress_rules, ["all-all"]) - auto_egress_with_self = try(each.value.auto_egress_with_self, var.defaults.auto_egress_with_self, []) - auto_ingress_rules = try(each.value.auto_ingress_rules, var.defaults.auto_ingress_rules, ["carbon-line-in-tcp", "carbon-line-in-udp", "carbon-pickle-tcp", "carbon-pickle-udp", "carbon-gui-udp"]) - auto_ingress_with_self = try(each.value.auto_ingress_with_self, var.defaults.auto_ingress_with_self, [{ "rule" = "all-all" }]) - auto_number_of_computed_egress_rules = try(each.value.auto_number_of_computed_egress_rules, var.defaults.auto_number_of_computed_egress_rules, 0) - auto_number_of_computed_egress_with_self = try(each.value.auto_number_of_computed_egress_with_self, var.defaults.auto_number_of_computed_egress_with_self, 0) - auto_number_of_computed_ingress_rules = try(each.value.auto_number_of_computed_ingress_rules, var.defaults.auto_number_of_computed_ingress_rules, 0) - auto_number_of_computed_ingress_with_self = try(each.value.auto_number_of_computed_ingress_with_self, var.defaults.auto_number_of_computed_ingress_with_self, 0) - computed_egress_cidr_blocks = try(each.value.computed_egress_cidr_blocks, var.defaults.computed_egress_cidr_blocks, ["0.0.0.0/0"]) - computed_egress_ipv6_cidr_blocks = try(each.value.computed_egress_ipv6_cidr_blocks, var.defaults.computed_egress_ipv6_cidr_blocks, ["::/0"]) - computed_egress_prefix_list_ids = try(each.value.computed_egress_prefix_list_ids, var.defaults.computed_egress_prefix_list_ids, []) - computed_egress_rules = try(each.value.computed_egress_rules, var.defaults.computed_egress_rules, []) - computed_egress_with_cidr_blocks = try(each.value.computed_egress_with_cidr_blocks, var.defaults.computed_egress_with_cidr_blocks, []) - computed_egress_with_ipv6_cidr_blocks = try(each.value.computed_egress_with_ipv6_cidr_blocks, var.defaults.computed_egress_with_ipv6_cidr_blocks, []) - computed_egress_with_prefix_list_ids = try(each.value.computed_egress_with_prefix_list_ids, var.defaults.computed_egress_with_prefix_list_ids, []) - computed_egress_with_self = try(each.value.computed_egress_with_self, var.defaults.computed_egress_with_self, []) - computed_egress_with_source_security_group_id = try(each.value.computed_egress_with_source_security_group_id, var.defaults.computed_egress_with_source_security_group_id, []) - computed_ingress_cidr_blocks = try(each.value.computed_ingress_cidr_blocks, var.defaults.computed_ingress_cidr_blocks, []) - computed_ingress_ipv6_cidr_blocks = try(each.value.computed_ingress_ipv6_cidr_blocks, var.defaults.computed_ingress_ipv6_cidr_blocks, []) - computed_ingress_prefix_list_ids = try(each.value.computed_ingress_prefix_list_ids, var.defaults.computed_ingress_prefix_list_ids, []) - computed_ingress_rules = try(each.value.computed_ingress_rules, var.defaults.computed_ingress_rules, []) - computed_ingress_with_cidr_blocks = try(each.value.computed_ingress_with_cidr_blocks, var.defaults.computed_ingress_with_cidr_blocks, []) - computed_ingress_with_ipv6_cidr_blocks = try(each.value.computed_ingress_with_ipv6_cidr_blocks, var.defaults.computed_ingress_with_ipv6_cidr_blocks, []) - computed_ingress_with_prefix_list_ids = try(each.value.computed_ingress_with_prefix_list_ids, var.defaults.computed_ingress_with_prefix_list_ids, []) - computed_ingress_with_self = try(each.value.computed_ingress_with_self, var.defaults.computed_ingress_with_self, []) - computed_ingress_with_source_security_group_id = try(each.value.computed_ingress_with_source_security_group_id, var.defaults.computed_ingress_with_source_security_group_id, []) - create = try(each.value.create, var.defaults.create, true) - description = try(each.value.description, var.defaults.description, "Security Group managed by Terraform") - egress_cidr_blocks = try(each.value.egress_cidr_blocks, var.defaults.egress_cidr_blocks, ["0.0.0.0/0"]) - egress_ipv6_cidr_blocks = try(each.value.egress_ipv6_cidr_blocks, var.defaults.egress_ipv6_cidr_blocks, ["::/0"]) - egress_prefix_list_ids = try(each.value.egress_prefix_list_ids, var.defaults.egress_prefix_list_ids, []) - egress_rules = try(each.value.egress_rules, var.defaults.egress_rules, []) - egress_with_cidr_blocks = try(each.value.egress_with_cidr_blocks, var.defaults.egress_with_cidr_blocks, []) - egress_with_ipv6_cidr_blocks = try(each.value.egress_with_ipv6_cidr_blocks, var.defaults.egress_with_ipv6_cidr_blocks, []) - egress_with_prefix_list_ids = try(each.value.egress_with_prefix_list_ids, var.defaults.egress_with_prefix_list_ids, []) - egress_with_self = try(each.value.egress_with_self, var.defaults.egress_with_self, []) - egress_with_source_security_group_id = try(each.value.egress_with_source_security_group_id, var.defaults.egress_with_source_security_group_id, []) - ingress_cidr_blocks = try(each.value.ingress_cidr_blocks, var.defaults.ingress_cidr_blocks, []) - ingress_ipv6_cidr_blocks = try(each.value.ingress_ipv6_cidr_blocks, var.defaults.ingress_ipv6_cidr_blocks, []) - ingress_prefix_list_ids = try(each.value.ingress_prefix_list_ids, var.defaults.ingress_prefix_list_ids, []) - ingress_rules = try(each.value.ingress_rules, var.defaults.ingress_rules, []) - ingress_with_cidr_blocks = try(each.value.ingress_with_cidr_blocks, var.defaults.ingress_with_cidr_blocks, []) - ingress_with_ipv6_cidr_blocks = try(each.value.ingress_with_ipv6_cidr_blocks, var.defaults.ingress_with_ipv6_cidr_blocks, []) - ingress_with_prefix_list_ids = try(each.value.ingress_with_prefix_list_ids, var.defaults.ingress_with_prefix_list_ids, []) - ingress_with_self = try(each.value.ingress_with_self, var.defaults.ingress_with_self, []) - ingress_with_source_security_group_id = try(each.value.ingress_with_source_security_group_id, var.defaults.ingress_with_source_security_group_id, []) - name = try(each.value.name, var.defaults.name) - number_of_computed_egress_cidr_blocks = try(each.value.number_of_computed_egress_cidr_blocks, var.defaults.number_of_computed_egress_cidr_blocks, 0) - number_of_computed_egress_ipv6_cidr_blocks = try(each.value.number_of_computed_egress_ipv6_cidr_blocks, var.defaults.number_of_computed_egress_ipv6_cidr_blocks, 0) - number_of_computed_egress_prefix_list_ids = try(each.value.number_of_computed_egress_prefix_list_ids, var.defaults.number_of_computed_egress_prefix_list_ids, 0) - number_of_computed_egress_rules = try(each.value.number_of_computed_egress_rules, var.defaults.number_of_computed_egress_rules, 0) - number_of_computed_egress_with_cidr_blocks = try(each.value.number_of_computed_egress_with_cidr_blocks, var.defaults.number_of_computed_egress_with_cidr_blocks, 0) - number_of_computed_egress_with_ipv6_cidr_blocks = try(each.value.number_of_computed_egress_with_ipv6_cidr_blocks, var.defaults.number_of_computed_egress_with_ipv6_cidr_blocks, 0) - number_of_computed_egress_with_prefix_list_ids = try(each.value.number_of_computed_egress_with_prefix_list_ids, var.defaults.number_of_computed_egress_with_prefix_list_ids, 0) - number_of_computed_egress_with_self = try(each.value.number_of_computed_egress_with_self, var.defaults.number_of_computed_egress_with_self, 0) - number_of_computed_egress_with_source_security_group_id = try(each.value.number_of_computed_egress_with_source_security_group_id, var.defaults.number_of_computed_egress_with_source_security_group_id, 0) - number_of_computed_ingress_cidr_blocks = try(each.value.number_of_computed_ingress_cidr_blocks, var.defaults.number_of_computed_ingress_cidr_blocks, 0) - number_of_computed_ingress_ipv6_cidr_blocks = try(each.value.number_of_computed_ingress_ipv6_cidr_blocks, var.defaults.number_of_computed_ingress_ipv6_cidr_blocks, 0) - number_of_computed_ingress_prefix_list_ids = try(each.value.number_of_computed_ingress_prefix_list_ids, var.defaults.number_of_computed_ingress_prefix_list_ids, 0) - number_of_computed_ingress_rules = try(each.value.number_of_computed_ingress_rules, var.defaults.number_of_computed_ingress_rules, 0) - number_of_computed_ingress_with_cidr_blocks = try(each.value.number_of_computed_ingress_with_cidr_blocks, var.defaults.number_of_computed_ingress_with_cidr_blocks, 0) - number_of_computed_ingress_with_ipv6_cidr_blocks = try(each.value.number_of_computed_ingress_with_ipv6_cidr_blocks, var.defaults.number_of_computed_ingress_with_ipv6_cidr_blocks, 0) - number_of_computed_ingress_with_prefix_list_ids = try(each.value.number_of_computed_ingress_with_prefix_list_ids, var.defaults.number_of_computed_ingress_with_prefix_list_ids, 0) - number_of_computed_ingress_with_self = try(each.value.number_of_computed_ingress_with_self, var.defaults.number_of_computed_ingress_with_self, 0) - number_of_computed_ingress_with_source_security_group_id = try(each.value.number_of_computed_ingress_with_source_security_group_id, var.defaults.number_of_computed_ingress_with_source_security_group_id, 0) - revoke_rules_on_delete = try(each.value.revoke_rules_on_delete, var.defaults.revoke_rules_on_delete, false) - tags = try(each.value.tags, var.defaults.tags, {}) - use_name_prefix = try(each.value.use_name_prefix, var.defaults.use_name_prefix, true) - vpc_id = try(each.value.vpc_id, var.defaults.vpc_id) + auto_computed_egress_rules = try(each.value.auto_computed_egress_rules, var.defaults.auto_computed_egress_rules, []) + auto_computed_egress_with_self = try(each.value.auto_computed_egress_with_self, var.defaults.auto_computed_egress_with_self, []) + auto_computed_ingress_rules = try(each.value.auto_computed_ingress_rules, var.defaults.auto_computed_ingress_rules, []) + auto_computed_ingress_with_self = try(each.value.auto_computed_ingress_with_self, var.defaults.auto_computed_ingress_with_self, []) + auto_egress_rules = try(each.value.auto_egress_rules, var.defaults.auto_egress_rules, ["all-all"]) + auto_egress_with_self = try(each.value.auto_egress_with_self, var.defaults.auto_egress_with_self, []) + auto_ingress_rules = try(each.value.auto_ingress_rules, var.defaults.auto_ingress_rules, ["carbon-line-in-tcp", "carbon-line-in-udp", "carbon-pickle-tcp", "carbon-pickle-udp", "carbon-gui-udp"]) + auto_ingress_with_self = try(each.value.auto_ingress_with_self, var.defaults.auto_ingress_with_self, [{ "rule" = "all-all" }]) + auto_number_of_computed_egress_rules = try(each.value.auto_number_of_computed_egress_rules, var.defaults.auto_number_of_computed_egress_rules, 0) + auto_number_of_computed_egress_with_self = try(each.value.auto_number_of_computed_egress_with_self, var.defaults.auto_number_of_computed_egress_with_self, 0) + auto_number_of_computed_ingress_rules = try(each.value.auto_number_of_computed_ingress_rules, var.defaults.auto_number_of_computed_ingress_rules, 0) + auto_number_of_computed_ingress_with_self = try(each.value.auto_number_of_computed_ingress_with_self, var.defaults.auto_number_of_computed_ingress_with_self, 0) + computed_egress_cidr_blocks = try(each.value.computed_egress_cidr_blocks, var.defaults.computed_egress_cidr_blocks, ["0.0.0.0/0"]) + computed_egress_ipv6_cidr_blocks = try(each.value.computed_egress_ipv6_cidr_blocks, var.defaults.computed_egress_ipv6_cidr_blocks, ["::/0"]) + computed_egress_prefix_list_ids = try(each.value.computed_egress_prefix_list_ids, var.defaults.computed_egress_prefix_list_ids, []) + computed_egress_rules = try(each.value.computed_egress_rules, var.defaults.computed_egress_rules, []) + computed_egress_with_cidr_ipv4 = try(each.value.computed_egress_with_cidr_ipv4, var.defaults.computed_egress_with_cidr_ipv4, []) + computed_egress_with_cidr_ipv6 = try(each.value.computed_egress_with_cidr_ipv6, var.defaults.computed_egress_with_cidr_ipv6, []) + computed_egress_with_prefix_list_id = try(each.value.computed_egress_with_prefix_list_id, var.defaults.computed_egress_with_prefix_list_id, []) + computed_egress_with_referenced_security_group_id = try(each.value.computed_egress_with_referenced_security_group_id, var.defaults.computed_egress_with_referenced_security_group_id, []) + computed_egress_with_self = try(each.value.computed_egress_with_self, var.defaults.computed_egress_with_self, []) + computed_ingress_cidr_blocks = try(each.value.computed_ingress_cidr_blocks, var.defaults.computed_ingress_cidr_blocks, []) + computed_ingress_ipv6_cidr_blocks = try(each.value.computed_ingress_ipv6_cidr_blocks, var.defaults.computed_ingress_ipv6_cidr_blocks, []) + computed_ingress_prefix_list_ids = try(each.value.computed_ingress_prefix_list_ids, var.defaults.computed_ingress_prefix_list_ids, []) + computed_ingress_rules = try(each.value.computed_ingress_rules, var.defaults.computed_ingress_rules, []) + computed_ingress_with_cidr_ipv4 = try(each.value.computed_ingress_with_cidr_ipv4, var.defaults.computed_ingress_with_cidr_ipv4, []) + computed_ingress_with_cidr_ipv6 = try(each.value.computed_ingress_with_cidr_ipv6, var.defaults.computed_ingress_with_cidr_ipv6, []) + computed_ingress_with_prefix_list_id = try(each.value.computed_ingress_with_prefix_list_id, var.defaults.computed_ingress_with_prefix_list_id, []) + computed_ingress_with_referenced_security_group_id = try(each.value.computed_ingress_with_referenced_security_group_id, var.defaults.computed_ingress_with_referenced_security_group_id, []) + computed_ingress_with_self = try(each.value.computed_ingress_with_self, var.defaults.computed_ingress_with_self, []) + create = try(each.value.create, var.defaults.create, true) + description = try(each.value.description, var.defaults.description, "Security Group managed by Terraform") + egress_cidr_ipv4 = try(each.value.egress_cidr_ipv4, var.defaults.egress_cidr_ipv4, ["0.0.0.0/0"]) + egress_cidr_ipv6 = try(each.value.egress_cidr_ipv6, var.defaults.egress_cidr_ipv6, ["::/0"]) + egress_prefix_list_ids = try(each.value.egress_prefix_list_ids, var.defaults.egress_prefix_list_ids, []) + egress_rules = try(each.value.egress_rules, var.defaults.egress_rules, []) + egress_with_cidr_ipv4 = try(each.value.egress_with_cidr_ipv4, var.defaults.egress_with_cidr_ipv4, []) + egress_with_cidr_ipv6 = try(each.value.egress_with_cidr_ipv6, var.defaults.egress_with_cidr_ipv6, []) + egress_with_prefix_list_id = try(each.value.egress_with_prefix_list_id, var.defaults.egress_with_prefix_list_id, []) + egress_with_referenced_security_group_id = try(each.value.egress_with_referenced_security_group_id, var.defaults.egress_with_referenced_security_group_id, []) + egress_with_self = try(each.value.egress_with_self, var.defaults.egress_with_self, []) + ingress_cidr_ipv4 = try(each.value.ingress_cidr_ipv4, var.defaults.ingress_cidr_ipv4, []) + ingress_cidr_ipv6 = try(each.value.ingress_cidr_ipv6, var.defaults.ingress_cidr_ipv6, []) + ingress_prefix_list_ids = try(each.value.ingress_prefix_list_ids, var.defaults.ingress_prefix_list_ids, []) + ingress_rules = try(each.value.ingress_rules, var.defaults.ingress_rules, []) + ingress_with_cidr_ipv4 = try(each.value.ingress_with_cidr_ipv4, var.defaults.ingress_with_cidr_ipv4, []) + ingress_with_cidr_ipv6 = try(each.value.ingress_with_cidr_ipv6, var.defaults.ingress_with_cidr_ipv6, []) + ingress_with_prefix_list_id = try(each.value.ingress_with_prefix_list_id, var.defaults.ingress_with_prefix_list_id, []) + ingress_with_referenced_security_group_id = try(each.value.ingress_with_referenced_security_group_id, var.defaults.ingress_with_referenced_security_group_id, []) + ingress_with_self = try(each.value.ingress_with_self, var.defaults.ingress_with_self, []) + name = try(each.value.name, var.defaults.name) + number_of_computed_egress_cidr_blocks = try(each.value.number_of_computed_egress_cidr_blocks, var.defaults.number_of_computed_egress_cidr_blocks, 0) + number_of_computed_egress_ipv6_cidr_blocks = try(each.value.number_of_computed_egress_ipv6_cidr_blocks, var.defaults.number_of_computed_egress_ipv6_cidr_blocks, 0) + number_of_computed_egress_prefix_list_ids = try(each.value.number_of_computed_egress_prefix_list_ids, var.defaults.number_of_computed_egress_prefix_list_ids, 0) + number_of_computed_egress_rules = try(each.value.number_of_computed_egress_rules, var.defaults.number_of_computed_egress_rules, 0) + number_of_computed_egress_with_cidr_ipv4 = try(each.value.number_of_computed_egress_with_cidr_ipv4, var.defaults.number_of_computed_egress_with_cidr_ipv4, 0) + number_of_computed_egress_with_cidr_ipv6 = try(each.value.number_of_computed_egress_with_cidr_ipv6, var.defaults.number_of_computed_egress_with_cidr_ipv6, 0) + number_of_computed_egress_with_prefix_list_id = try(each.value.number_of_computed_egress_with_prefix_list_id, var.defaults.number_of_computed_egress_with_prefix_list_id, 0) + number_of_computed_egress_with_referenced_security_group_id = try(each.value.number_of_computed_egress_with_referenced_security_group_id, var.defaults.number_of_computed_egress_with_referenced_security_group_id, 0) + number_of_computed_egress_with_self = try(each.value.number_of_computed_egress_with_self, var.defaults.number_of_computed_egress_with_self, 0) + number_of_computed_ingress_cidr_blocks = try(each.value.number_of_computed_ingress_cidr_blocks, var.defaults.number_of_computed_ingress_cidr_blocks, 0) + number_of_computed_ingress_ipv6_cidr_blocks = try(each.value.number_of_computed_ingress_ipv6_cidr_blocks, var.defaults.number_of_computed_ingress_ipv6_cidr_blocks, 0) + number_of_computed_ingress_prefix_list_ids = try(each.value.number_of_computed_ingress_prefix_list_ids, var.defaults.number_of_computed_ingress_prefix_list_ids, 0) + number_of_computed_ingress_rules = try(each.value.number_of_computed_ingress_rules, var.defaults.number_of_computed_ingress_rules, 0) + number_of_computed_ingress_with_cidr_ipv4 = try(each.value.number_of_computed_ingress_with_cidr_ipv4, var.defaults.number_of_computed_ingress_with_cidr_ipv4, 0) + number_of_computed_ingress_with_cidr_ipv6 = try(each.value.number_of_computed_ingress_with_cidr_ipv6, var.defaults.number_of_computed_ingress_with_cidr_ipv6, 0) + number_of_computed_ingress_with_prefix_list_id = try(each.value.number_of_computed_ingress_with_prefix_list_id, var.defaults.number_of_computed_ingress_with_prefix_list_id, 0) + number_of_computed_ingress_with_referenced_security_group_id = try(each.value.number_of_computed_ingress_with_referenced_security_group_id, var.defaults.number_of_computed_ingress_with_referenced_security_group_id, 0) + number_of_computed_ingress_with_self = try(each.value.number_of_computed_ingress_with_self, var.defaults.number_of_computed_ingress_with_self, 0) + revoke_rules_on_delete = try(each.value.revoke_rules_on_delete, var.defaults.revoke_rules_on_delete, false) + tags = try(each.value.tags, var.defaults.tags, {}) + use_name_prefix = try(each.value.use_name_prefix, var.defaults.use_name_prefix, true) + vpc_id = try(each.value.vpc_id, var.defaults.vpc_id) } diff --git a/wrappers/cassandra/main.tf b/wrappers/cassandra/main.tf index c7c2854d..a443deba 100644 --- a/wrappers/cassandra/main.tf +++ b/wrappers/cassandra/main.tf @@ -3,77 +3,77 @@ module "wrapper" { for_each = var.items - auto_computed_egress_rules = try(each.value.auto_computed_egress_rules, var.defaults.auto_computed_egress_rules, []) - auto_computed_egress_with_self = try(each.value.auto_computed_egress_with_self, var.defaults.auto_computed_egress_with_self, []) - auto_computed_ingress_rules = try(each.value.auto_computed_ingress_rules, var.defaults.auto_computed_ingress_rules, []) - auto_computed_ingress_with_self = try(each.value.auto_computed_ingress_with_self, var.defaults.auto_computed_ingress_with_self, []) - auto_egress_rules = try(each.value.auto_egress_rules, var.defaults.auto_egress_rules, ["all-all"]) - auto_egress_with_self = try(each.value.auto_egress_with_self, var.defaults.auto_egress_with_self, []) - auto_ingress_rules = try(each.value.auto_ingress_rules, var.defaults.auto_ingress_rules, ["cassandra-clients-tcp", "cassandra-thrift-clients-tcp", "cassandra-jmx-tcp"]) - auto_ingress_with_self = try(each.value.auto_ingress_with_self, var.defaults.auto_ingress_with_self, [{ "rule" = "all-all" }]) - auto_number_of_computed_egress_rules = try(each.value.auto_number_of_computed_egress_rules, var.defaults.auto_number_of_computed_egress_rules, 0) - auto_number_of_computed_egress_with_self = try(each.value.auto_number_of_computed_egress_with_self, var.defaults.auto_number_of_computed_egress_with_self, 0) - auto_number_of_computed_ingress_rules = try(each.value.auto_number_of_computed_ingress_rules, var.defaults.auto_number_of_computed_ingress_rules, 0) - auto_number_of_computed_ingress_with_self = try(each.value.auto_number_of_computed_ingress_with_self, var.defaults.auto_number_of_computed_ingress_with_self, 0) - computed_egress_cidr_blocks = try(each.value.computed_egress_cidr_blocks, var.defaults.computed_egress_cidr_blocks, ["0.0.0.0/0"]) - computed_egress_ipv6_cidr_blocks = try(each.value.computed_egress_ipv6_cidr_blocks, var.defaults.computed_egress_ipv6_cidr_blocks, ["::/0"]) - computed_egress_prefix_list_ids = try(each.value.computed_egress_prefix_list_ids, var.defaults.computed_egress_prefix_list_ids, []) - computed_egress_rules = try(each.value.computed_egress_rules, var.defaults.computed_egress_rules, []) - computed_egress_with_cidr_blocks = try(each.value.computed_egress_with_cidr_blocks, var.defaults.computed_egress_with_cidr_blocks, []) - computed_egress_with_ipv6_cidr_blocks = try(each.value.computed_egress_with_ipv6_cidr_blocks, var.defaults.computed_egress_with_ipv6_cidr_blocks, []) - computed_egress_with_prefix_list_ids = try(each.value.computed_egress_with_prefix_list_ids, var.defaults.computed_egress_with_prefix_list_ids, []) - computed_egress_with_self = try(each.value.computed_egress_with_self, var.defaults.computed_egress_with_self, []) - computed_egress_with_source_security_group_id = try(each.value.computed_egress_with_source_security_group_id, var.defaults.computed_egress_with_source_security_group_id, []) - computed_ingress_cidr_blocks = try(each.value.computed_ingress_cidr_blocks, var.defaults.computed_ingress_cidr_blocks, []) - computed_ingress_ipv6_cidr_blocks = try(each.value.computed_ingress_ipv6_cidr_blocks, var.defaults.computed_ingress_ipv6_cidr_blocks, []) - computed_ingress_prefix_list_ids = try(each.value.computed_ingress_prefix_list_ids, var.defaults.computed_ingress_prefix_list_ids, []) - computed_ingress_rules = try(each.value.computed_ingress_rules, var.defaults.computed_ingress_rules, []) - computed_ingress_with_cidr_blocks = try(each.value.computed_ingress_with_cidr_blocks, var.defaults.computed_ingress_with_cidr_blocks, []) - computed_ingress_with_ipv6_cidr_blocks = try(each.value.computed_ingress_with_ipv6_cidr_blocks, var.defaults.computed_ingress_with_ipv6_cidr_blocks, []) - computed_ingress_with_prefix_list_ids = try(each.value.computed_ingress_with_prefix_list_ids, var.defaults.computed_ingress_with_prefix_list_ids, []) - computed_ingress_with_self = try(each.value.computed_ingress_with_self, var.defaults.computed_ingress_with_self, []) - computed_ingress_with_source_security_group_id = try(each.value.computed_ingress_with_source_security_group_id, var.defaults.computed_ingress_with_source_security_group_id, []) - create = try(each.value.create, var.defaults.create, true) - description = try(each.value.description, var.defaults.description, "Security Group managed by Terraform") - egress_cidr_blocks = try(each.value.egress_cidr_blocks, var.defaults.egress_cidr_blocks, ["0.0.0.0/0"]) - egress_ipv6_cidr_blocks = try(each.value.egress_ipv6_cidr_blocks, var.defaults.egress_ipv6_cidr_blocks, ["::/0"]) - egress_prefix_list_ids = try(each.value.egress_prefix_list_ids, var.defaults.egress_prefix_list_ids, []) - egress_rules = try(each.value.egress_rules, var.defaults.egress_rules, []) - egress_with_cidr_blocks = try(each.value.egress_with_cidr_blocks, var.defaults.egress_with_cidr_blocks, []) - egress_with_ipv6_cidr_blocks = try(each.value.egress_with_ipv6_cidr_blocks, var.defaults.egress_with_ipv6_cidr_blocks, []) - egress_with_prefix_list_ids = try(each.value.egress_with_prefix_list_ids, var.defaults.egress_with_prefix_list_ids, []) - egress_with_self = try(each.value.egress_with_self, var.defaults.egress_with_self, []) - egress_with_source_security_group_id = try(each.value.egress_with_source_security_group_id, var.defaults.egress_with_source_security_group_id, []) - ingress_cidr_blocks = try(each.value.ingress_cidr_blocks, var.defaults.ingress_cidr_blocks, []) - ingress_ipv6_cidr_blocks = try(each.value.ingress_ipv6_cidr_blocks, var.defaults.ingress_ipv6_cidr_blocks, []) - ingress_prefix_list_ids = try(each.value.ingress_prefix_list_ids, var.defaults.ingress_prefix_list_ids, []) - ingress_rules = try(each.value.ingress_rules, var.defaults.ingress_rules, []) - ingress_with_cidr_blocks = try(each.value.ingress_with_cidr_blocks, var.defaults.ingress_with_cidr_blocks, []) - ingress_with_ipv6_cidr_blocks = try(each.value.ingress_with_ipv6_cidr_blocks, var.defaults.ingress_with_ipv6_cidr_blocks, []) - ingress_with_prefix_list_ids = try(each.value.ingress_with_prefix_list_ids, var.defaults.ingress_with_prefix_list_ids, []) - ingress_with_self = try(each.value.ingress_with_self, var.defaults.ingress_with_self, []) - ingress_with_source_security_group_id = try(each.value.ingress_with_source_security_group_id, var.defaults.ingress_with_source_security_group_id, []) - name = try(each.value.name, var.defaults.name) - number_of_computed_egress_cidr_blocks = try(each.value.number_of_computed_egress_cidr_blocks, var.defaults.number_of_computed_egress_cidr_blocks, 0) - number_of_computed_egress_ipv6_cidr_blocks = try(each.value.number_of_computed_egress_ipv6_cidr_blocks, var.defaults.number_of_computed_egress_ipv6_cidr_blocks, 0) - number_of_computed_egress_prefix_list_ids = try(each.value.number_of_computed_egress_prefix_list_ids, var.defaults.number_of_computed_egress_prefix_list_ids, 0) - number_of_computed_egress_rules = try(each.value.number_of_computed_egress_rules, var.defaults.number_of_computed_egress_rules, 0) - number_of_computed_egress_with_cidr_blocks = try(each.value.number_of_computed_egress_with_cidr_blocks, var.defaults.number_of_computed_egress_with_cidr_blocks, 0) - number_of_computed_egress_with_ipv6_cidr_blocks = try(each.value.number_of_computed_egress_with_ipv6_cidr_blocks, var.defaults.number_of_computed_egress_with_ipv6_cidr_blocks, 0) - number_of_computed_egress_with_prefix_list_ids = try(each.value.number_of_computed_egress_with_prefix_list_ids, var.defaults.number_of_computed_egress_with_prefix_list_ids, 0) - number_of_computed_egress_with_self = try(each.value.number_of_computed_egress_with_self, var.defaults.number_of_computed_egress_with_self, 0) - number_of_computed_egress_with_source_security_group_id = try(each.value.number_of_computed_egress_with_source_security_group_id, var.defaults.number_of_computed_egress_with_source_security_group_id, 0) - number_of_computed_ingress_cidr_blocks = try(each.value.number_of_computed_ingress_cidr_blocks, var.defaults.number_of_computed_ingress_cidr_blocks, 0) - number_of_computed_ingress_ipv6_cidr_blocks = try(each.value.number_of_computed_ingress_ipv6_cidr_blocks, var.defaults.number_of_computed_ingress_ipv6_cidr_blocks, 0) - number_of_computed_ingress_prefix_list_ids = try(each.value.number_of_computed_ingress_prefix_list_ids, var.defaults.number_of_computed_ingress_prefix_list_ids, 0) - number_of_computed_ingress_rules = try(each.value.number_of_computed_ingress_rules, var.defaults.number_of_computed_ingress_rules, 0) - number_of_computed_ingress_with_cidr_blocks = try(each.value.number_of_computed_ingress_with_cidr_blocks, var.defaults.number_of_computed_ingress_with_cidr_blocks, 0) - number_of_computed_ingress_with_ipv6_cidr_blocks = try(each.value.number_of_computed_ingress_with_ipv6_cidr_blocks, var.defaults.number_of_computed_ingress_with_ipv6_cidr_blocks, 0) - number_of_computed_ingress_with_prefix_list_ids = try(each.value.number_of_computed_ingress_with_prefix_list_ids, var.defaults.number_of_computed_ingress_with_prefix_list_ids, 0) - number_of_computed_ingress_with_self = try(each.value.number_of_computed_ingress_with_self, var.defaults.number_of_computed_ingress_with_self, 0) - number_of_computed_ingress_with_source_security_group_id = try(each.value.number_of_computed_ingress_with_source_security_group_id, var.defaults.number_of_computed_ingress_with_source_security_group_id, 0) - revoke_rules_on_delete = try(each.value.revoke_rules_on_delete, var.defaults.revoke_rules_on_delete, false) - tags = try(each.value.tags, var.defaults.tags, {}) - use_name_prefix = try(each.value.use_name_prefix, var.defaults.use_name_prefix, true) - vpc_id = try(each.value.vpc_id, var.defaults.vpc_id) + auto_computed_egress_rules = try(each.value.auto_computed_egress_rules, var.defaults.auto_computed_egress_rules, []) + auto_computed_egress_with_self = try(each.value.auto_computed_egress_with_self, var.defaults.auto_computed_egress_with_self, []) + auto_computed_ingress_rules = try(each.value.auto_computed_ingress_rules, var.defaults.auto_computed_ingress_rules, []) + auto_computed_ingress_with_self = try(each.value.auto_computed_ingress_with_self, var.defaults.auto_computed_ingress_with_self, []) + auto_egress_rules = try(each.value.auto_egress_rules, var.defaults.auto_egress_rules, ["all-all"]) + auto_egress_with_self = try(each.value.auto_egress_with_self, var.defaults.auto_egress_with_self, []) + auto_ingress_rules = try(each.value.auto_ingress_rules, var.defaults.auto_ingress_rules, ["cassandra-clients-tcp", "cassandra-thrift-clients-tcp", "cassandra-jmx-tcp"]) + auto_ingress_with_self = try(each.value.auto_ingress_with_self, var.defaults.auto_ingress_with_self, [{ "rule" = "all-all" }]) + auto_number_of_computed_egress_rules = try(each.value.auto_number_of_computed_egress_rules, var.defaults.auto_number_of_computed_egress_rules, 0) + auto_number_of_computed_egress_with_self = try(each.value.auto_number_of_computed_egress_with_self, var.defaults.auto_number_of_computed_egress_with_self, 0) + auto_number_of_computed_ingress_rules = try(each.value.auto_number_of_computed_ingress_rules, var.defaults.auto_number_of_computed_ingress_rules, 0) + auto_number_of_computed_ingress_with_self = try(each.value.auto_number_of_computed_ingress_with_self, var.defaults.auto_number_of_computed_ingress_with_self, 0) + computed_egress_cidr_blocks = try(each.value.computed_egress_cidr_blocks, var.defaults.computed_egress_cidr_blocks, ["0.0.0.0/0"]) + computed_egress_ipv6_cidr_blocks = try(each.value.computed_egress_ipv6_cidr_blocks, var.defaults.computed_egress_ipv6_cidr_blocks, ["::/0"]) + computed_egress_prefix_list_ids = try(each.value.computed_egress_prefix_list_ids, var.defaults.computed_egress_prefix_list_ids, []) + computed_egress_rules = try(each.value.computed_egress_rules, var.defaults.computed_egress_rules, []) + computed_egress_with_cidr_ipv4 = try(each.value.computed_egress_with_cidr_ipv4, var.defaults.computed_egress_with_cidr_ipv4, []) + computed_egress_with_cidr_ipv6 = try(each.value.computed_egress_with_cidr_ipv6, var.defaults.computed_egress_with_cidr_ipv6, []) + computed_egress_with_prefix_list_id = try(each.value.computed_egress_with_prefix_list_id, var.defaults.computed_egress_with_prefix_list_id, []) + computed_egress_with_referenced_security_group_id = try(each.value.computed_egress_with_referenced_security_group_id, var.defaults.computed_egress_with_referenced_security_group_id, []) + computed_egress_with_self = try(each.value.computed_egress_with_self, var.defaults.computed_egress_with_self, []) + computed_ingress_cidr_blocks = try(each.value.computed_ingress_cidr_blocks, var.defaults.computed_ingress_cidr_blocks, []) + computed_ingress_ipv6_cidr_blocks = try(each.value.computed_ingress_ipv6_cidr_blocks, var.defaults.computed_ingress_ipv6_cidr_blocks, []) + computed_ingress_prefix_list_ids = try(each.value.computed_ingress_prefix_list_ids, var.defaults.computed_ingress_prefix_list_ids, []) + computed_ingress_rules = try(each.value.computed_ingress_rules, var.defaults.computed_ingress_rules, []) + computed_ingress_with_cidr_ipv4 = try(each.value.computed_ingress_with_cidr_ipv4, var.defaults.computed_ingress_with_cidr_ipv4, []) + computed_ingress_with_cidr_ipv6 = try(each.value.computed_ingress_with_cidr_ipv6, var.defaults.computed_ingress_with_cidr_ipv6, []) + computed_ingress_with_prefix_list_id = try(each.value.computed_ingress_with_prefix_list_id, var.defaults.computed_ingress_with_prefix_list_id, []) + computed_ingress_with_referenced_security_group_id = try(each.value.computed_ingress_with_referenced_security_group_id, var.defaults.computed_ingress_with_referenced_security_group_id, []) + computed_ingress_with_self = try(each.value.computed_ingress_with_self, var.defaults.computed_ingress_with_self, []) + create = try(each.value.create, var.defaults.create, true) + description = try(each.value.description, var.defaults.description, "Security Group managed by Terraform") + egress_cidr_ipv4 = try(each.value.egress_cidr_ipv4, var.defaults.egress_cidr_ipv4, ["0.0.0.0/0"]) + egress_cidr_ipv6 = try(each.value.egress_cidr_ipv6, var.defaults.egress_cidr_ipv6, ["::/0"]) + egress_prefix_list_ids = try(each.value.egress_prefix_list_ids, var.defaults.egress_prefix_list_ids, []) + egress_rules = try(each.value.egress_rules, var.defaults.egress_rules, []) + egress_with_cidr_ipv4 = try(each.value.egress_with_cidr_ipv4, var.defaults.egress_with_cidr_ipv4, []) + egress_with_cidr_ipv6 = try(each.value.egress_with_cidr_ipv6, var.defaults.egress_with_cidr_ipv6, []) + egress_with_prefix_list_id = try(each.value.egress_with_prefix_list_id, var.defaults.egress_with_prefix_list_id, []) + egress_with_referenced_security_group_id = try(each.value.egress_with_referenced_security_group_id, var.defaults.egress_with_referenced_security_group_id, []) + egress_with_self = try(each.value.egress_with_self, var.defaults.egress_with_self, []) + ingress_cidr_ipv4 = try(each.value.ingress_cidr_ipv4, var.defaults.ingress_cidr_ipv4, []) + ingress_cidr_ipv6 = try(each.value.ingress_cidr_ipv6, var.defaults.ingress_cidr_ipv6, []) + ingress_prefix_list_ids = try(each.value.ingress_prefix_list_ids, var.defaults.ingress_prefix_list_ids, []) + ingress_rules = try(each.value.ingress_rules, var.defaults.ingress_rules, []) + ingress_with_cidr_ipv4 = try(each.value.ingress_with_cidr_ipv4, var.defaults.ingress_with_cidr_ipv4, []) + ingress_with_cidr_ipv6 = try(each.value.ingress_with_cidr_ipv6, var.defaults.ingress_with_cidr_ipv6, []) + ingress_with_prefix_list_id = try(each.value.ingress_with_prefix_list_id, var.defaults.ingress_with_prefix_list_id, []) + ingress_with_referenced_security_group_id = try(each.value.ingress_with_referenced_security_group_id, var.defaults.ingress_with_referenced_security_group_id, []) + ingress_with_self = try(each.value.ingress_with_self, var.defaults.ingress_with_self, []) + name = try(each.value.name, var.defaults.name) + number_of_computed_egress_cidr_blocks = try(each.value.number_of_computed_egress_cidr_blocks, var.defaults.number_of_computed_egress_cidr_blocks, 0) + number_of_computed_egress_ipv6_cidr_blocks = try(each.value.number_of_computed_egress_ipv6_cidr_blocks, var.defaults.number_of_computed_egress_ipv6_cidr_blocks, 0) + number_of_computed_egress_prefix_list_ids = try(each.value.number_of_computed_egress_prefix_list_ids, var.defaults.number_of_computed_egress_prefix_list_ids, 0) + number_of_computed_egress_rules = try(each.value.number_of_computed_egress_rules, var.defaults.number_of_computed_egress_rules, 0) + number_of_computed_egress_with_cidr_ipv4 = try(each.value.number_of_computed_egress_with_cidr_ipv4, var.defaults.number_of_computed_egress_with_cidr_ipv4, 0) + number_of_computed_egress_with_cidr_ipv6 = try(each.value.number_of_computed_egress_with_cidr_ipv6, var.defaults.number_of_computed_egress_with_cidr_ipv6, 0) + number_of_computed_egress_with_prefix_list_id = try(each.value.number_of_computed_egress_with_prefix_list_id, var.defaults.number_of_computed_egress_with_prefix_list_id, 0) + number_of_computed_egress_with_referenced_security_group_id = try(each.value.number_of_computed_egress_with_referenced_security_group_id, var.defaults.number_of_computed_egress_with_referenced_security_group_id, 0) + number_of_computed_egress_with_self = try(each.value.number_of_computed_egress_with_self, var.defaults.number_of_computed_egress_with_self, 0) + number_of_computed_ingress_cidr_blocks = try(each.value.number_of_computed_ingress_cidr_blocks, var.defaults.number_of_computed_ingress_cidr_blocks, 0) + number_of_computed_ingress_ipv6_cidr_blocks = try(each.value.number_of_computed_ingress_ipv6_cidr_blocks, var.defaults.number_of_computed_ingress_ipv6_cidr_blocks, 0) + number_of_computed_ingress_prefix_list_ids = try(each.value.number_of_computed_ingress_prefix_list_ids, var.defaults.number_of_computed_ingress_prefix_list_ids, 0) + number_of_computed_ingress_rules = try(each.value.number_of_computed_ingress_rules, var.defaults.number_of_computed_ingress_rules, 0) + number_of_computed_ingress_with_cidr_ipv4 = try(each.value.number_of_computed_ingress_with_cidr_ipv4, var.defaults.number_of_computed_ingress_with_cidr_ipv4, 0) + number_of_computed_ingress_with_cidr_ipv6 = try(each.value.number_of_computed_ingress_with_cidr_ipv6, var.defaults.number_of_computed_ingress_with_cidr_ipv6, 0) + number_of_computed_ingress_with_prefix_list_id = try(each.value.number_of_computed_ingress_with_prefix_list_id, var.defaults.number_of_computed_ingress_with_prefix_list_id, 0) + number_of_computed_ingress_with_referenced_security_group_id = try(each.value.number_of_computed_ingress_with_referenced_security_group_id, var.defaults.number_of_computed_ingress_with_referenced_security_group_id, 0) + number_of_computed_ingress_with_self = try(each.value.number_of_computed_ingress_with_self, var.defaults.number_of_computed_ingress_with_self, 0) + revoke_rules_on_delete = try(each.value.revoke_rules_on_delete, var.defaults.revoke_rules_on_delete, false) + tags = try(each.value.tags, var.defaults.tags, {}) + use_name_prefix = try(each.value.use_name_prefix, var.defaults.use_name_prefix, true) + vpc_id = try(each.value.vpc_id, var.defaults.vpc_id) } diff --git a/wrappers/consul/main.tf b/wrappers/consul/main.tf index f094982f..1a1c35ef 100644 --- a/wrappers/consul/main.tf +++ b/wrappers/consul/main.tf @@ -3,77 +3,77 @@ module "wrapper" { for_each = var.items - auto_computed_egress_rules = try(each.value.auto_computed_egress_rules, var.defaults.auto_computed_egress_rules, []) - auto_computed_egress_with_self = try(each.value.auto_computed_egress_with_self, var.defaults.auto_computed_egress_with_self, []) - auto_computed_ingress_rules = try(each.value.auto_computed_ingress_rules, var.defaults.auto_computed_ingress_rules, []) - auto_computed_ingress_with_self = try(each.value.auto_computed_ingress_with_self, var.defaults.auto_computed_ingress_with_self, []) - auto_egress_rules = try(each.value.auto_egress_rules, var.defaults.auto_egress_rules, ["all-all"]) - auto_egress_with_self = try(each.value.auto_egress_with_self, var.defaults.auto_egress_with_self, []) - auto_ingress_rules = try(each.value.auto_ingress_rules, var.defaults.auto_ingress_rules, ["consul-tcp", "consul-grpc-tcp", "consul-grpc-tcp-tls", "consul-webui-http-tcp", "consul-webui-https-tcp", "consul-dns-tcp", "consul-dns-udp", "consul-serf-lan-tcp", "consul-serf-lan-udp", "consul-serf-wan-tcp", "consul-serf-wan-udp"]) - auto_ingress_with_self = try(each.value.auto_ingress_with_self, var.defaults.auto_ingress_with_self, [{ "rule" = "all-all" }]) - auto_number_of_computed_egress_rules = try(each.value.auto_number_of_computed_egress_rules, var.defaults.auto_number_of_computed_egress_rules, 0) - auto_number_of_computed_egress_with_self = try(each.value.auto_number_of_computed_egress_with_self, var.defaults.auto_number_of_computed_egress_with_self, 0) - auto_number_of_computed_ingress_rules = try(each.value.auto_number_of_computed_ingress_rules, var.defaults.auto_number_of_computed_ingress_rules, 0) - auto_number_of_computed_ingress_with_self = try(each.value.auto_number_of_computed_ingress_with_self, var.defaults.auto_number_of_computed_ingress_with_self, 0) - computed_egress_cidr_blocks = try(each.value.computed_egress_cidr_blocks, var.defaults.computed_egress_cidr_blocks, ["0.0.0.0/0"]) - computed_egress_ipv6_cidr_blocks = try(each.value.computed_egress_ipv6_cidr_blocks, var.defaults.computed_egress_ipv6_cidr_blocks, ["::/0"]) - computed_egress_prefix_list_ids = try(each.value.computed_egress_prefix_list_ids, var.defaults.computed_egress_prefix_list_ids, []) - computed_egress_rules = try(each.value.computed_egress_rules, var.defaults.computed_egress_rules, []) - computed_egress_with_cidr_blocks = try(each.value.computed_egress_with_cidr_blocks, var.defaults.computed_egress_with_cidr_blocks, []) - computed_egress_with_ipv6_cidr_blocks = try(each.value.computed_egress_with_ipv6_cidr_blocks, var.defaults.computed_egress_with_ipv6_cidr_blocks, []) - computed_egress_with_prefix_list_ids = try(each.value.computed_egress_with_prefix_list_ids, var.defaults.computed_egress_with_prefix_list_ids, []) - computed_egress_with_self = try(each.value.computed_egress_with_self, var.defaults.computed_egress_with_self, []) - computed_egress_with_source_security_group_id = try(each.value.computed_egress_with_source_security_group_id, var.defaults.computed_egress_with_source_security_group_id, []) - computed_ingress_cidr_blocks = try(each.value.computed_ingress_cidr_blocks, var.defaults.computed_ingress_cidr_blocks, []) - computed_ingress_ipv6_cidr_blocks = try(each.value.computed_ingress_ipv6_cidr_blocks, var.defaults.computed_ingress_ipv6_cidr_blocks, []) - computed_ingress_prefix_list_ids = try(each.value.computed_ingress_prefix_list_ids, var.defaults.computed_ingress_prefix_list_ids, []) - computed_ingress_rules = try(each.value.computed_ingress_rules, var.defaults.computed_ingress_rules, []) - computed_ingress_with_cidr_blocks = try(each.value.computed_ingress_with_cidr_blocks, var.defaults.computed_ingress_with_cidr_blocks, []) - computed_ingress_with_ipv6_cidr_blocks = try(each.value.computed_ingress_with_ipv6_cidr_blocks, var.defaults.computed_ingress_with_ipv6_cidr_blocks, []) - computed_ingress_with_prefix_list_ids = try(each.value.computed_ingress_with_prefix_list_ids, var.defaults.computed_ingress_with_prefix_list_ids, []) - computed_ingress_with_self = try(each.value.computed_ingress_with_self, var.defaults.computed_ingress_with_self, []) - computed_ingress_with_source_security_group_id = try(each.value.computed_ingress_with_source_security_group_id, var.defaults.computed_ingress_with_source_security_group_id, []) - create = try(each.value.create, var.defaults.create, true) - description = try(each.value.description, var.defaults.description, "Security Group managed by Terraform") - egress_cidr_blocks = try(each.value.egress_cidr_blocks, var.defaults.egress_cidr_blocks, ["0.0.0.0/0"]) - egress_ipv6_cidr_blocks = try(each.value.egress_ipv6_cidr_blocks, var.defaults.egress_ipv6_cidr_blocks, ["::/0"]) - egress_prefix_list_ids = try(each.value.egress_prefix_list_ids, var.defaults.egress_prefix_list_ids, []) - egress_rules = try(each.value.egress_rules, var.defaults.egress_rules, []) - egress_with_cidr_blocks = try(each.value.egress_with_cidr_blocks, var.defaults.egress_with_cidr_blocks, []) - egress_with_ipv6_cidr_blocks = try(each.value.egress_with_ipv6_cidr_blocks, var.defaults.egress_with_ipv6_cidr_blocks, []) - egress_with_prefix_list_ids = try(each.value.egress_with_prefix_list_ids, var.defaults.egress_with_prefix_list_ids, []) - egress_with_self = try(each.value.egress_with_self, var.defaults.egress_with_self, []) - egress_with_source_security_group_id = try(each.value.egress_with_source_security_group_id, var.defaults.egress_with_source_security_group_id, []) - ingress_cidr_blocks = try(each.value.ingress_cidr_blocks, var.defaults.ingress_cidr_blocks, []) - ingress_ipv6_cidr_blocks = try(each.value.ingress_ipv6_cidr_blocks, var.defaults.ingress_ipv6_cidr_blocks, []) - ingress_prefix_list_ids = try(each.value.ingress_prefix_list_ids, var.defaults.ingress_prefix_list_ids, []) - ingress_rules = try(each.value.ingress_rules, var.defaults.ingress_rules, []) - ingress_with_cidr_blocks = try(each.value.ingress_with_cidr_blocks, var.defaults.ingress_with_cidr_blocks, []) - ingress_with_ipv6_cidr_blocks = try(each.value.ingress_with_ipv6_cidr_blocks, var.defaults.ingress_with_ipv6_cidr_blocks, []) - ingress_with_prefix_list_ids = try(each.value.ingress_with_prefix_list_ids, var.defaults.ingress_with_prefix_list_ids, []) - ingress_with_self = try(each.value.ingress_with_self, var.defaults.ingress_with_self, []) - ingress_with_source_security_group_id = try(each.value.ingress_with_source_security_group_id, var.defaults.ingress_with_source_security_group_id, []) - name = try(each.value.name, var.defaults.name) - number_of_computed_egress_cidr_blocks = try(each.value.number_of_computed_egress_cidr_blocks, var.defaults.number_of_computed_egress_cidr_blocks, 0) - number_of_computed_egress_ipv6_cidr_blocks = try(each.value.number_of_computed_egress_ipv6_cidr_blocks, var.defaults.number_of_computed_egress_ipv6_cidr_blocks, 0) - number_of_computed_egress_prefix_list_ids = try(each.value.number_of_computed_egress_prefix_list_ids, var.defaults.number_of_computed_egress_prefix_list_ids, 0) - number_of_computed_egress_rules = try(each.value.number_of_computed_egress_rules, var.defaults.number_of_computed_egress_rules, 0) - number_of_computed_egress_with_cidr_blocks = try(each.value.number_of_computed_egress_with_cidr_blocks, var.defaults.number_of_computed_egress_with_cidr_blocks, 0) - number_of_computed_egress_with_ipv6_cidr_blocks = try(each.value.number_of_computed_egress_with_ipv6_cidr_blocks, var.defaults.number_of_computed_egress_with_ipv6_cidr_blocks, 0) - number_of_computed_egress_with_prefix_list_ids = try(each.value.number_of_computed_egress_with_prefix_list_ids, var.defaults.number_of_computed_egress_with_prefix_list_ids, 0) - number_of_computed_egress_with_self = try(each.value.number_of_computed_egress_with_self, var.defaults.number_of_computed_egress_with_self, 0) - number_of_computed_egress_with_source_security_group_id = try(each.value.number_of_computed_egress_with_source_security_group_id, var.defaults.number_of_computed_egress_with_source_security_group_id, 0) - number_of_computed_ingress_cidr_blocks = try(each.value.number_of_computed_ingress_cidr_blocks, var.defaults.number_of_computed_ingress_cidr_blocks, 0) - number_of_computed_ingress_ipv6_cidr_blocks = try(each.value.number_of_computed_ingress_ipv6_cidr_blocks, var.defaults.number_of_computed_ingress_ipv6_cidr_blocks, 0) - number_of_computed_ingress_prefix_list_ids = try(each.value.number_of_computed_ingress_prefix_list_ids, var.defaults.number_of_computed_ingress_prefix_list_ids, 0) - number_of_computed_ingress_rules = try(each.value.number_of_computed_ingress_rules, var.defaults.number_of_computed_ingress_rules, 0) - number_of_computed_ingress_with_cidr_blocks = try(each.value.number_of_computed_ingress_with_cidr_blocks, var.defaults.number_of_computed_ingress_with_cidr_blocks, 0) - number_of_computed_ingress_with_ipv6_cidr_blocks = try(each.value.number_of_computed_ingress_with_ipv6_cidr_blocks, var.defaults.number_of_computed_ingress_with_ipv6_cidr_blocks, 0) - number_of_computed_ingress_with_prefix_list_ids = try(each.value.number_of_computed_ingress_with_prefix_list_ids, var.defaults.number_of_computed_ingress_with_prefix_list_ids, 0) - number_of_computed_ingress_with_self = try(each.value.number_of_computed_ingress_with_self, var.defaults.number_of_computed_ingress_with_self, 0) - number_of_computed_ingress_with_source_security_group_id = try(each.value.number_of_computed_ingress_with_source_security_group_id, var.defaults.number_of_computed_ingress_with_source_security_group_id, 0) - revoke_rules_on_delete = try(each.value.revoke_rules_on_delete, var.defaults.revoke_rules_on_delete, false) - tags = try(each.value.tags, var.defaults.tags, {}) - use_name_prefix = try(each.value.use_name_prefix, var.defaults.use_name_prefix, true) - vpc_id = try(each.value.vpc_id, var.defaults.vpc_id) + auto_computed_egress_rules = try(each.value.auto_computed_egress_rules, var.defaults.auto_computed_egress_rules, []) + auto_computed_egress_with_self = try(each.value.auto_computed_egress_with_self, var.defaults.auto_computed_egress_with_self, []) + auto_computed_ingress_rules = try(each.value.auto_computed_ingress_rules, var.defaults.auto_computed_ingress_rules, []) + auto_computed_ingress_with_self = try(each.value.auto_computed_ingress_with_self, var.defaults.auto_computed_ingress_with_self, []) + auto_egress_rules = try(each.value.auto_egress_rules, var.defaults.auto_egress_rules, ["all-all"]) + auto_egress_with_self = try(each.value.auto_egress_with_self, var.defaults.auto_egress_with_self, []) + auto_ingress_rules = try(each.value.auto_ingress_rules, var.defaults.auto_ingress_rules, ["consul-tcp", "consul-grpc-tcp", "consul-grpc-tcp-tls", "consul-webui-http-tcp", "consul-webui-https-tcp", "consul-dns-tcp", "consul-dns-udp", "consul-serf-lan-tcp", "consul-serf-lan-udp", "consul-serf-wan-tcp", "consul-serf-wan-udp"]) + auto_ingress_with_self = try(each.value.auto_ingress_with_self, var.defaults.auto_ingress_with_self, [{ "rule" = "all-all" }]) + auto_number_of_computed_egress_rules = try(each.value.auto_number_of_computed_egress_rules, var.defaults.auto_number_of_computed_egress_rules, 0) + auto_number_of_computed_egress_with_self = try(each.value.auto_number_of_computed_egress_with_self, var.defaults.auto_number_of_computed_egress_with_self, 0) + auto_number_of_computed_ingress_rules = try(each.value.auto_number_of_computed_ingress_rules, var.defaults.auto_number_of_computed_ingress_rules, 0) + auto_number_of_computed_ingress_with_self = try(each.value.auto_number_of_computed_ingress_with_self, var.defaults.auto_number_of_computed_ingress_with_self, 0) + computed_egress_cidr_blocks = try(each.value.computed_egress_cidr_blocks, var.defaults.computed_egress_cidr_blocks, ["0.0.0.0/0"]) + computed_egress_ipv6_cidr_blocks = try(each.value.computed_egress_ipv6_cidr_blocks, var.defaults.computed_egress_ipv6_cidr_blocks, ["::/0"]) + computed_egress_prefix_list_ids = try(each.value.computed_egress_prefix_list_ids, var.defaults.computed_egress_prefix_list_ids, []) + computed_egress_rules = try(each.value.computed_egress_rules, var.defaults.computed_egress_rules, []) + computed_egress_with_cidr_ipv4 = try(each.value.computed_egress_with_cidr_ipv4, var.defaults.computed_egress_with_cidr_ipv4, []) + computed_egress_with_cidr_ipv6 = try(each.value.computed_egress_with_cidr_ipv6, var.defaults.computed_egress_with_cidr_ipv6, []) + computed_egress_with_prefix_list_id = try(each.value.computed_egress_with_prefix_list_id, var.defaults.computed_egress_with_prefix_list_id, []) + computed_egress_with_referenced_security_group_id = try(each.value.computed_egress_with_referenced_security_group_id, var.defaults.computed_egress_with_referenced_security_group_id, []) + computed_egress_with_self = try(each.value.computed_egress_with_self, var.defaults.computed_egress_with_self, []) + computed_ingress_cidr_blocks = try(each.value.computed_ingress_cidr_blocks, var.defaults.computed_ingress_cidr_blocks, []) + computed_ingress_ipv6_cidr_blocks = try(each.value.computed_ingress_ipv6_cidr_blocks, var.defaults.computed_ingress_ipv6_cidr_blocks, []) + computed_ingress_prefix_list_ids = try(each.value.computed_ingress_prefix_list_ids, var.defaults.computed_ingress_prefix_list_ids, []) + computed_ingress_rules = try(each.value.computed_ingress_rules, var.defaults.computed_ingress_rules, []) + computed_ingress_with_cidr_ipv4 = try(each.value.computed_ingress_with_cidr_ipv4, var.defaults.computed_ingress_with_cidr_ipv4, []) + computed_ingress_with_cidr_ipv6 = try(each.value.computed_ingress_with_cidr_ipv6, var.defaults.computed_ingress_with_cidr_ipv6, []) + computed_ingress_with_prefix_list_id = try(each.value.computed_ingress_with_prefix_list_id, var.defaults.computed_ingress_with_prefix_list_id, []) + computed_ingress_with_referenced_security_group_id = try(each.value.computed_ingress_with_referenced_security_group_id, var.defaults.computed_ingress_with_referenced_security_group_id, []) + computed_ingress_with_self = try(each.value.computed_ingress_with_self, var.defaults.computed_ingress_with_self, []) + create = try(each.value.create, var.defaults.create, true) + description = try(each.value.description, var.defaults.description, "Security Group managed by Terraform") + egress_cidr_ipv4 = try(each.value.egress_cidr_ipv4, var.defaults.egress_cidr_ipv4, ["0.0.0.0/0"]) + egress_cidr_ipv6 = try(each.value.egress_cidr_ipv6, var.defaults.egress_cidr_ipv6, ["::/0"]) + egress_prefix_list_ids = try(each.value.egress_prefix_list_ids, var.defaults.egress_prefix_list_ids, []) + egress_rules = try(each.value.egress_rules, var.defaults.egress_rules, []) + egress_with_cidr_ipv4 = try(each.value.egress_with_cidr_ipv4, var.defaults.egress_with_cidr_ipv4, []) + egress_with_cidr_ipv6 = try(each.value.egress_with_cidr_ipv6, var.defaults.egress_with_cidr_ipv6, []) + egress_with_prefix_list_id = try(each.value.egress_with_prefix_list_id, var.defaults.egress_with_prefix_list_id, []) + egress_with_referenced_security_group_id = try(each.value.egress_with_referenced_security_group_id, var.defaults.egress_with_referenced_security_group_id, []) + egress_with_self = try(each.value.egress_with_self, var.defaults.egress_with_self, []) + ingress_cidr_ipv4 = try(each.value.ingress_cidr_ipv4, var.defaults.ingress_cidr_ipv4, []) + ingress_cidr_ipv6 = try(each.value.ingress_cidr_ipv6, var.defaults.ingress_cidr_ipv6, []) + ingress_prefix_list_ids = try(each.value.ingress_prefix_list_ids, var.defaults.ingress_prefix_list_ids, []) + ingress_rules = try(each.value.ingress_rules, var.defaults.ingress_rules, []) + ingress_with_cidr_ipv4 = try(each.value.ingress_with_cidr_ipv4, var.defaults.ingress_with_cidr_ipv4, []) + ingress_with_cidr_ipv6 = try(each.value.ingress_with_cidr_ipv6, var.defaults.ingress_with_cidr_ipv6, []) + ingress_with_prefix_list_id = try(each.value.ingress_with_prefix_list_id, var.defaults.ingress_with_prefix_list_id, []) + ingress_with_referenced_security_group_id = try(each.value.ingress_with_referenced_security_group_id, var.defaults.ingress_with_referenced_security_group_id, []) + ingress_with_self = try(each.value.ingress_with_self, var.defaults.ingress_with_self, []) + name = try(each.value.name, var.defaults.name) + number_of_computed_egress_cidr_blocks = try(each.value.number_of_computed_egress_cidr_blocks, var.defaults.number_of_computed_egress_cidr_blocks, 0) + number_of_computed_egress_ipv6_cidr_blocks = try(each.value.number_of_computed_egress_ipv6_cidr_blocks, var.defaults.number_of_computed_egress_ipv6_cidr_blocks, 0) + number_of_computed_egress_prefix_list_ids = try(each.value.number_of_computed_egress_prefix_list_ids, var.defaults.number_of_computed_egress_prefix_list_ids, 0) + number_of_computed_egress_rules = try(each.value.number_of_computed_egress_rules, var.defaults.number_of_computed_egress_rules, 0) + number_of_computed_egress_with_cidr_ipv4 = try(each.value.number_of_computed_egress_with_cidr_ipv4, var.defaults.number_of_computed_egress_with_cidr_ipv4, 0) + number_of_computed_egress_with_cidr_ipv6 = try(each.value.number_of_computed_egress_with_cidr_ipv6, var.defaults.number_of_computed_egress_with_cidr_ipv6, 0) + number_of_computed_egress_with_prefix_list_id = try(each.value.number_of_computed_egress_with_prefix_list_id, var.defaults.number_of_computed_egress_with_prefix_list_id, 0) + number_of_computed_egress_with_referenced_security_group_id = try(each.value.number_of_computed_egress_with_referenced_security_group_id, var.defaults.number_of_computed_egress_with_referenced_security_group_id, 0) + number_of_computed_egress_with_self = try(each.value.number_of_computed_egress_with_self, var.defaults.number_of_computed_egress_with_self, 0) + number_of_computed_ingress_cidr_blocks = try(each.value.number_of_computed_ingress_cidr_blocks, var.defaults.number_of_computed_ingress_cidr_blocks, 0) + number_of_computed_ingress_ipv6_cidr_blocks = try(each.value.number_of_computed_ingress_ipv6_cidr_blocks, var.defaults.number_of_computed_ingress_ipv6_cidr_blocks, 0) + number_of_computed_ingress_prefix_list_ids = try(each.value.number_of_computed_ingress_prefix_list_ids, var.defaults.number_of_computed_ingress_prefix_list_ids, 0) + number_of_computed_ingress_rules = try(each.value.number_of_computed_ingress_rules, var.defaults.number_of_computed_ingress_rules, 0) + number_of_computed_ingress_with_cidr_ipv4 = try(each.value.number_of_computed_ingress_with_cidr_ipv4, var.defaults.number_of_computed_ingress_with_cidr_ipv4, 0) + number_of_computed_ingress_with_cidr_ipv6 = try(each.value.number_of_computed_ingress_with_cidr_ipv6, var.defaults.number_of_computed_ingress_with_cidr_ipv6, 0) + number_of_computed_ingress_with_prefix_list_id = try(each.value.number_of_computed_ingress_with_prefix_list_id, var.defaults.number_of_computed_ingress_with_prefix_list_id, 0) + number_of_computed_ingress_with_referenced_security_group_id = try(each.value.number_of_computed_ingress_with_referenced_security_group_id, var.defaults.number_of_computed_ingress_with_referenced_security_group_id, 0) + number_of_computed_ingress_with_self = try(each.value.number_of_computed_ingress_with_self, var.defaults.number_of_computed_ingress_with_self, 0) + revoke_rules_on_delete = try(each.value.revoke_rules_on_delete, var.defaults.revoke_rules_on_delete, false) + tags = try(each.value.tags, var.defaults.tags, {}) + use_name_prefix = try(each.value.use_name_prefix, var.defaults.use_name_prefix, true) + vpc_id = try(each.value.vpc_id, var.defaults.vpc_id) } diff --git a/wrappers/dax-cluster/main.tf b/wrappers/dax-cluster/main.tf index 9bec23c7..81ce8a09 100644 --- a/wrappers/dax-cluster/main.tf +++ b/wrappers/dax-cluster/main.tf @@ -3,77 +3,77 @@ module "wrapper" { for_each = var.items - auto_computed_egress_rules = try(each.value.auto_computed_egress_rules, var.defaults.auto_computed_egress_rules, []) - auto_computed_egress_with_self = try(each.value.auto_computed_egress_with_self, var.defaults.auto_computed_egress_with_self, []) - auto_computed_ingress_rules = try(each.value.auto_computed_ingress_rules, var.defaults.auto_computed_ingress_rules, []) - auto_computed_ingress_with_self = try(each.value.auto_computed_ingress_with_self, var.defaults.auto_computed_ingress_with_self, []) - auto_egress_rules = try(each.value.auto_egress_rules, var.defaults.auto_egress_rules, ["all-all"]) - auto_egress_with_self = try(each.value.auto_egress_with_self, var.defaults.auto_egress_with_self, []) - auto_ingress_rules = try(each.value.auto_ingress_rules, var.defaults.auto_ingress_rules, ["dax-cluster-unencrypted-tcp", "dax-cluster-encrypted-tcp"]) - auto_ingress_with_self = try(each.value.auto_ingress_with_self, var.defaults.auto_ingress_with_self, [{ "rule" = "all-all" }]) - auto_number_of_computed_egress_rules = try(each.value.auto_number_of_computed_egress_rules, var.defaults.auto_number_of_computed_egress_rules, 0) - auto_number_of_computed_egress_with_self = try(each.value.auto_number_of_computed_egress_with_self, var.defaults.auto_number_of_computed_egress_with_self, 0) - auto_number_of_computed_ingress_rules = try(each.value.auto_number_of_computed_ingress_rules, var.defaults.auto_number_of_computed_ingress_rules, 0) - auto_number_of_computed_ingress_with_self = try(each.value.auto_number_of_computed_ingress_with_self, var.defaults.auto_number_of_computed_ingress_with_self, 0) - computed_egress_cidr_blocks = try(each.value.computed_egress_cidr_blocks, var.defaults.computed_egress_cidr_blocks, ["0.0.0.0/0"]) - computed_egress_ipv6_cidr_blocks = try(each.value.computed_egress_ipv6_cidr_blocks, var.defaults.computed_egress_ipv6_cidr_blocks, ["::/0"]) - computed_egress_prefix_list_ids = try(each.value.computed_egress_prefix_list_ids, var.defaults.computed_egress_prefix_list_ids, []) - computed_egress_rules = try(each.value.computed_egress_rules, var.defaults.computed_egress_rules, []) - computed_egress_with_cidr_blocks = try(each.value.computed_egress_with_cidr_blocks, var.defaults.computed_egress_with_cidr_blocks, []) - computed_egress_with_ipv6_cidr_blocks = try(each.value.computed_egress_with_ipv6_cidr_blocks, var.defaults.computed_egress_with_ipv6_cidr_blocks, []) - computed_egress_with_prefix_list_ids = try(each.value.computed_egress_with_prefix_list_ids, var.defaults.computed_egress_with_prefix_list_ids, []) - computed_egress_with_self = try(each.value.computed_egress_with_self, var.defaults.computed_egress_with_self, []) - computed_egress_with_source_security_group_id = try(each.value.computed_egress_with_source_security_group_id, var.defaults.computed_egress_with_source_security_group_id, []) - computed_ingress_cidr_blocks = try(each.value.computed_ingress_cidr_blocks, var.defaults.computed_ingress_cidr_blocks, []) - computed_ingress_ipv6_cidr_blocks = try(each.value.computed_ingress_ipv6_cidr_blocks, var.defaults.computed_ingress_ipv6_cidr_blocks, []) - computed_ingress_prefix_list_ids = try(each.value.computed_ingress_prefix_list_ids, var.defaults.computed_ingress_prefix_list_ids, []) - computed_ingress_rules = try(each.value.computed_ingress_rules, var.defaults.computed_ingress_rules, []) - computed_ingress_with_cidr_blocks = try(each.value.computed_ingress_with_cidr_blocks, var.defaults.computed_ingress_with_cidr_blocks, []) - computed_ingress_with_ipv6_cidr_blocks = try(each.value.computed_ingress_with_ipv6_cidr_blocks, var.defaults.computed_ingress_with_ipv6_cidr_blocks, []) - computed_ingress_with_prefix_list_ids = try(each.value.computed_ingress_with_prefix_list_ids, var.defaults.computed_ingress_with_prefix_list_ids, []) - computed_ingress_with_self = try(each.value.computed_ingress_with_self, var.defaults.computed_ingress_with_self, []) - computed_ingress_with_source_security_group_id = try(each.value.computed_ingress_with_source_security_group_id, var.defaults.computed_ingress_with_source_security_group_id, []) - create = try(each.value.create, var.defaults.create, true) - description = try(each.value.description, var.defaults.description, "Security Group managed by Terraform") - egress_cidr_blocks = try(each.value.egress_cidr_blocks, var.defaults.egress_cidr_blocks, ["0.0.0.0/0"]) - egress_ipv6_cidr_blocks = try(each.value.egress_ipv6_cidr_blocks, var.defaults.egress_ipv6_cidr_blocks, ["::/0"]) - egress_prefix_list_ids = try(each.value.egress_prefix_list_ids, var.defaults.egress_prefix_list_ids, []) - egress_rules = try(each.value.egress_rules, var.defaults.egress_rules, []) - egress_with_cidr_blocks = try(each.value.egress_with_cidr_blocks, var.defaults.egress_with_cidr_blocks, []) - egress_with_ipv6_cidr_blocks = try(each.value.egress_with_ipv6_cidr_blocks, var.defaults.egress_with_ipv6_cidr_blocks, []) - egress_with_prefix_list_ids = try(each.value.egress_with_prefix_list_ids, var.defaults.egress_with_prefix_list_ids, []) - egress_with_self = try(each.value.egress_with_self, var.defaults.egress_with_self, []) - egress_with_source_security_group_id = try(each.value.egress_with_source_security_group_id, var.defaults.egress_with_source_security_group_id, []) - ingress_cidr_blocks = try(each.value.ingress_cidr_blocks, var.defaults.ingress_cidr_blocks, []) - ingress_ipv6_cidr_blocks = try(each.value.ingress_ipv6_cidr_blocks, var.defaults.ingress_ipv6_cidr_blocks, []) - ingress_prefix_list_ids = try(each.value.ingress_prefix_list_ids, var.defaults.ingress_prefix_list_ids, []) - ingress_rules = try(each.value.ingress_rules, var.defaults.ingress_rules, []) - ingress_with_cidr_blocks = try(each.value.ingress_with_cidr_blocks, var.defaults.ingress_with_cidr_blocks, []) - ingress_with_ipv6_cidr_blocks = try(each.value.ingress_with_ipv6_cidr_blocks, var.defaults.ingress_with_ipv6_cidr_blocks, []) - ingress_with_prefix_list_ids = try(each.value.ingress_with_prefix_list_ids, var.defaults.ingress_with_prefix_list_ids, []) - ingress_with_self = try(each.value.ingress_with_self, var.defaults.ingress_with_self, []) - ingress_with_source_security_group_id = try(each.value.ingress_with_source_security_group_id, var.defaults.ingress_with_source_security_group_id, []) - name = try(each.value.name, var.defaults.name) - number_of_computed_egress_cidr_blocks = try(each.value.number_of_computed_egress_cidr_blocks, var.defaults.number_of_computed_egress_cidr_blocks, 0) - number_of_computed_egress_ipv6_cidr_blocks = try(each.value.number_of_computed_egress_ipv6_cidr_blocks, var.defaults.number_of_computed_egress_ipv6_cidr_blocks, 0) - number_of_computed_egress_prefix_list_ids = try(each.value.number_of_computed_egress_prefix_list_ids, var.defaults.number_of_computed_egress_prefix_list_ids, 0) - number_of_computed_egress_rules = try(each.value.number_of_computed_egress_rules, var.defaults.number_of_computed_egress_rules, 0) - number_of_computed_egress_with_cidr_blocks = try(each.value.number_of_computed_egress_with_cidr_blocks, var.defaults.number_of_computed_egress_with_cidr_blocks, 0) - number_of_computed_egress_with_ipv6_cidr_blocks = try(each.value.number_of_computed_egress_with_ipv6_cidr_blocks, var.defaults.number_of_computed_egress_with_ipv6_cidr_blocks, 0) - number_of_computed_egress_with_prefix_list_ids = try(each.value.number_of_computed_egress_with_prefix_list_ids, var.defaults.number_of_computed_egress_with_prefix_list_ids, 0) - number_of_computed_egress_with_self = try(each.value.number_of_computed_egress_with_self, var.defaults.number_of_computed_egress_with_self, 0) - number_of_computed_egress_with_source_security_group_id = try(each.value.number_of_computed_egress_with_source_security_group_id, var.defaults.number_of_computed_egress_with_source_security_group_id, 0) - number_of_computed_ingress_cidr_blocks = try(each.value.number_of_computed_ingress_cidr_blocks, var.defaults.number_of_computed_ingress_cidr_blocks, 0) - number_of_computed_ingress_ipv6_cidr_blocks = try(each.value.number_of_computed_ingress_ipv6_cidr_blocks, var.defaults.number_of_computed_ingress_ipv6_cidr_blocks, 0) - number_of_computed_ingress_prefix_list_ids = try(each.value.number_of_computed_ingress_prefix_list_ids, var.defaults.number_of_computed_ingress_prefix_list_ids, 0) - number_of_computed_ingress_rules = try(each.value.number_of_computed_ingress_rules, var.defaults.number_of_computed_ingress_rules, 0) - number_of_computed_ingress_with_cidr_blocks = try(each.value.number_of_computed_ingress_with_cidr_blocks, var.defaults.number_of_computed_ingress_with_cidr_blocks, 0) - number_of_computed_ingress_with_ipv6_cidr_blocks = try(each.value.number_of_computed_ingress_with_ipv6_cidr_blocks, var.defaults.number_of_computed_ingress_with_ipv6_cidr_blocks, 0) - number_of_computed_ingress_with_prefix_list_ids = try(each.value.number_of_computed_ingress_with_prefix_list_ids, var.defaults.number_of_computed_ingress_with_prefix_list_ids, 0) - number_of_computed_ingress_with_self = try(each.value.number_of_computed_ingress_with_self, var.defaults.number_of_computed_ingress_with_self, 0) - number_of_computed_ingress_with_source_security_group_id = try(each.value.number_of_computed_ingress_with_source_security_group_id, var.defaults.number_of_computed_ingress_with_source_security_group_id, 0) - revoke_rules_on_delete = try(each.value.revoke_rules_on_delete, var.defaults.revoke_rules_on_delete, false) - tags = try(each.value.tags, var.defaults.tags, {}) - use_name_prefix = try(each.value.use_name_prefix, var.defaults.use_name_prefix, true) - vpc_id = try(each.value.vpc_id, var.defaults.vpc_id) + auto_computed_egress_rules = try(each.value.auto_computed_egress_rules, var.defaults.auto_computed_egress_rules, []) + auto_computed_egress_with_self = try(each.value.auto_computed_egress_with_self, var.defaults.auto_computed_egress_with_self, []) + auto_computed_ingress_rules = try(each.value.auto_computed_ingress_rules, var.defaults.auto_computed_ingress_rules, []) + auto_computed_ingress_with_self = try(each.value.auto_computed_ingress_with_self, var.defaults.auto_computed_ingress_with_self, []) + auto_egress_rules = try(each.value.auto_egress_rules, var.defaults.auto_egress_rules, ["all-all"]) + auto_egress_with_self = try(each.value.auto_egress_with_self, var.defaults.auto_egress_with_self, []) + auto_ingress_rules = try(each.value.auto_ingress_rules, var.defaults.auto_ingress_rules, ["dax-cluster-unencrypted-tcp", "dax-cluster-encrypted-tcp"]) + auto_ingress_with_self = try(each.value.auto_ingress_with_self, var.defaults.auto_ingress_with_self, [{ "rule" = "all-all" }]) + auto_number_of_computed_egress_rules = try(each.value.auto_number_of_computed_egress_rules, var.defaults.auto_number_of_computed_egress_rules, 0) + auto_number_of_computed_egress_with_self = try(each.value.auto_number_of_computed_egress_with_self, var.defaults.auto_number_of_computed_egress_with_self, 0) + auto_number_of_computed_ingress_rules = try(each.value.auto_number_of_computed_ingress_rules, var.defaults.auto_number_of_computed_ingress_rules, 0) + auto_number_of_computed_ingress_with_self = try(each.value.auto_number_of_computed_ingress_with_self, var.defaults.auto_number_of_computed_ingress_with_self, 0) + computed_egress_cidr_blocks = try(each.value.computed_egress_cidr_blocks, var.defaults.computed_egress_cidr_blocks, ["0.0.0.0/0"]) + computed_egress_ipv6_cidr_blocks = try(each.value.computed_egress_ipv6_cidr_blocks, var.defaults.computed_egress_ipv6_cidr_blocks, ["::/0"]) + computed_egress_prefix_list_ids = try(each.value.computed_egress_prefix_list_ids, var.defaults.computed_egress_prefix_list_ids, []) + computed_egress_rules = try(each.value.computed_egress_rules, var.defaults.computed_egress_rules, []) + computed_egress_with_cidr_ipv4 = try(each.value.computed_egress_with_cidr_ipv4, var.defaults.computed_egress_with_cidr_ipv4, []) + computed_egress_with_cidr_ipv6 = try(each.value.computed_egress_with_cidr_ipv6, var.defaults.computed_egress_with_cidr_ipv6, []) + computed_egress_with_prefix_list_id = try(each.value.computed_egress_with_prefix_list_id, var.defaults.computed_egress_with_prefix_list_id, []) + computed_egress_with_referenced_security_group_id = try(each.value.computed_egress_with_referenced_security_group_id, var.defaults.computed_egress_with_referenced_security_group_id, []) + computed_egress_with_self = try(each.value.computed_egress_with_self, var.defaults.computed_egress_with_self, []) + computed_ingress_cidr_blocks = try(each.value.computed_ingress_cidr_blocks, var.defaults.computed_ingress_cidr_blocks, []) + computed_ingress_ipv6_cidr_blocks = try(each.value.computed_ingress_ipv6_cidr_blocks, var.defaults.computed_ingress_ipv6_cidr_blocks, []) + computed_ingress_prefix_list_ids = try(each.value.computed_ingress_prefix_list_ids, var.defaults.computed_ingress_prefix_list_ids, []) + computed_ingress_rules = try(each.value.computed_ingress_rules, var.defaults.computed_ingress_rules, []) + computed_ingress_with_cidr_ipv4 = try(each.value.computed_ingress_with_cidr_ipv4, var.defaults.computed_ingress_with_cidr_ipv4, []) + computed_ingress_with_cidr_ipv6 = try(each.value.computed_ingress_with_cidr_ipv6, var.defaults.computed_ingress_with_cidr_ipv6, []) + computed_ingress_with_prefix_list_id = try(each.value.computed_ingress_with_prefix_list_id, var.defaults.computed_ingress_with_prefix_list_id, []) + computed_ingress_with_referenced_security_group_id = try(each.value.computed_ingress_with_referenced_security_group_id, var.defaults.computed_ingress_with_referenced_security_group_id, []) + computed_ingress_with_self = try(each.value.computed_ingress_with_self, var.defaults.computed_ingress_with_self, []) + create = try(each.value.create, var.defaults.create, true) + description = try(each.value.description, var.defaults.description, "Security Group managed by Terraform") + egress_cidr_ipv4 = try(each.value.egress_cidr_ipv4, var.defaults.egress_cidr_ipv4, ["0.0.0.0/0"]) + egress_cidr_ipv6 = try(each.value.egress_cidr_ipv6, var.defaults.egress_cidr_ipv6, ["::/0"]) + egress_prefix_list_ids = try(each.value.egress_prefix_list_ids, var.defaults.egress_prefix_list_ids, []) + egress_rules = try(each.value.egress_rules, var.defaults.egress_rules, []) + egress_with_cidr_ipv4 = try(each.value.egress_with_cidr_ipv4, var.defaults.egress_with_cidr_ipv4, []) + egress_with_cidr_ipv6 = try(each.value.egress_with_cidr_ipv6, var.defaults.egress_with_cidr_ipv6, []) + egress_with_prefix_list_id = try(each.value.egress_with_prefix_list_id, var.defaults.egress_with_prefix_list_id, []) + egress_with_referenced_security_group_id = try(each.value.egress_with_referenced_security_group_id, var.defaults.egress_with_referenced_security_group_id, []) + egress_with_self = try(each.value.egress_with_self, var.defaults.egress_with_self, []) + ingress_cidr_ipv4 = try(each.value.ingress_cidr_ipv4, var.defaults.ingress_cidr_ipv4, []) + ingress_cidr_ipv6 = try(each.value.ingress_cidr_ipv6, var.defaults.ingress_cidr_ipv6, []) + ingress_prefix_list_ids = try(each.value.ingress_prefix_list_ids, var.defaults.ingress_prefix_list_ids, []) + ingress_rules = try(each.value.ingress_rules, var.defaults.ingress_rules, []) + ingress_with_cidr_ipv4 = try(each.value.ingress_with_cidr_ipv4, var.defaults.ingress_with_cidr_ipv4, []) + ingress_with_cidr_ipv6 = try(each.value.ingress_with_cidr_ipv6, var.defaults.ingress_with_cidr_ipv6, []) + ingress_with_prefix_list_id = try(each.value.ingress_with_prefix_list_id, var.defaults.ingress_with_prefix_list_id, []) + ingress_with_referenced_security_group_id = try(each.value.ingress_with_referenced_security_group_id, var.defaults.ingress_with_referenced_security_group_id, []) + ingress_with_self = try(each.value.ingress_with_self, var.defaults.ingress_with_self, []) + name = try(each.value.name, var.defaults.name) + number_of_computed_egress_cidr_blocks = try(each.value.number_of_computed_egress_cidr_blocks, var.defaults.number_of_computed_egress_cidr_blocks, 0) + number_of_computed_egress_ipv6_cidr_blocks = try(each.value.number_of_computed_egress_ipv6_cidr_blocks, var.defaults.number_of_computed_egress_ipv6_cidr_blocks, 0) + number_of_computed_egress_prefix_list_ids = try(each.value.number_of_computed_egress_prefix_list_ids, var.defaults.number_of_computed_egress_prefix_list_ids, 0) + number_of_computed_egress_rules = try(each.value.number_of_computed_egress_rules, var.defaults.number_of_computed_egress_rules, 0) + number_of_computed_egress_with_cidr_ipv4 = try(each.value.number_of_computed_egress_with_cidr_ipv4, var.defaults.number_of_computed_egress_with_cidr_ipv4, 0) + number_of_computed_egress_with_cidr_ipv6 = try(each.value.number_of_computed_egress_with_cidr_ipv6, var.defaults.number_of_computed_egress_with_cidr_ipv6, 0) + number_of_computed_egress_with_prefix_list_id = try(each.value.number_of_computed_egress_with_prefix_list_id, var.defaults.number_of_computed_egress_with_prefix_list_id, 0) + number_of_computed_egress_with_referenced_security_group_id = try(each.value.number_of_computed_egress_with_referenced_security_group_id, var.defaults.number_of_computed_egress_with_referenced_security_group_id, 0) + number_of_computed_egress_with_self = try(each.value.number_of_computed_egress_with_self, var.defaults.number_of_computed_egress_with_self, 0) + number_of_computed_ingress_cidr_blocks = try(each.value.number_of_computed_ingress_cidr_blocks, var.defaults.number_of_computed_ingress_cidr_blocks, 0) + number_of_computed_ingress_ipv6_cidr_blocks = try(each.value.number_of_computed_ingress_ipv6_cidr_blocks, var.defaults.number_of_computed_ingress_ipv6_cidr_blocks, 0) + number_of_computed_ingress_prefix_list_ids = try(each.value.number_of_computed_ingress_prefix_list_ids, var.defaults.number_of_computed_ingress_prefix_list_ids, 0) + number_of_computed_ingress_rules = try(each.value.number_of_computed_ingress_rules, var.defaults.number_of_computed_ingress_rules, 0) + number_of_computed_ingress_with_cidr_ipv4 = try(each.value.number_of_computed_ingress_with_cidr_ipv4, var.defaults.number_of_computed_ingress_with_cidr_ipv4, 0) + number_of_computed_ingress_with_cidr_ipv6 = try(each.value.number_of_computed_ingress_with_cidr_ipv6, var.defaults.number_of_computed_ingress_with_cidr_ipv6, 0) + number_of_computed_ingress_with_prefix_list_id = try(each.value.number_of_computed_ingress_with_prefix_list_id, var.defaults.number_of_computed_ingress_with_prefix_list_id, 0) + number_of_computed_ingress_with_referenced_security_group_id = try(each.value.number_of_computed_ingress_with_referenced_security_group_id, var.defaults.number_of_computed_ingress_with_referenced_security_group_id, 0) + number_of_computed_ingress_with_self = try(each.value.number_of_computed_ingress_with_self, var.defaults.number_of_computed_ingress_with_self, 0) + revoke_rules_on_delete = try(each.value.revoke_rules_on_delete, var.defaults.revoke_rules_on_delete, false) + tags = try(each.value.tags, var.defaults.tags, {}) + use_name_prefix = try(each.value.use_name_prefix, var.defaults.use_name_prefix, true) + vpc_id = try(each.value.vpc_id, var.defaults.vpc_id) } diff --git a/wrappers/docker-swarm/main.tf b/wrappers/docker-swarm/main.tf index 0f867d10..04ccbd9c 100644 --- a/wrappers/docker-swarm/main.tf +++ b/wrappers/docker-swarm/main.tf @@ -3,77 +3,77 @@ module "wrapper" { for_each = var.items - auto_computed_egress_rules = try(each.value.auto_computed_egress_rules, var.defaults.auto_computed_egress_rules, []) - auto_computed_egress_with_self = try(each.value.auto_computed_egress_with_self, var.defaults.auto_computed_egress_with_self, []) - auto_computed_ingress_rules = try(each.value.auto_computed_ingress_rules, var.defaults.auto_computed_ingress_rules, []) - auto_computed_ingress_with_self = try(each.value.auto_computed_ingress_with_self, var.defaults.auto_computed_ingress_with_self, []) - auto_egress_rules = try(each.value.auto_egress_rules, var.defaults.auto_egress_rules, ["all-all"]) - auto_egress_with_self = try(each.value.auto_egress_with_self, var.defaults.auto_egress_with_self, []) - auto_ingress_rules = try(each.value.auto_ingress_rules, var.defaults.auto_ingress_rules, ["docker-swarm-mngmt-tcp", "docker-swarm-node-tcp", "docker-swarm-node-udp", "docker-swarm-overlay-udp"]) - auto_ingress_with_self = try(each.value.auto_ingress_with_self, var.defaults.auto_ingress_with_self, [{ "rule" = "all-all" }]) - auto_number_of_computed_egress_rules = try(each.value.auto_number_of_computed_egress_rules, var.defaults.auto_number_of_computed_egress_rules, 0) - auto_number_of_computed_egress_with_self = try(each.value.auto_number_of_computed_egress_with_self, var.defaults.auto_number_of_computed_egress_with_self, 0) - auto_number_of_computed_ingress_rules = try(each.value.auto_number_of_computed_ingress_rules, var.defaults.auto_number_of_computed_ingress_rules, 0) - auto_number_of_computed_ingress_with_self = try(each.value.auto_number_of_computed_ingress_with_self, var.defaults.auto_number_of_computed_ingress_with_self, 0) - computed_egress_cidr_blocks = try(each.value.computed_egress_cidr_blocks, var.defaults.computed_egress_cidr_blocks, ["0.0.0.0/0"]) - computed_egress_ipv6_cidr_blocks = try(each.value.computed_egress_ipv6_cidr_blocks, var.defaults.computed_egress_ipv6_cidr_blocks, ["::/0"]) - computed_egress_prefix_list_ids = try(each.value.computed_egress_prefix_list_ids, var.defaults.computed_egress_prefix_list_ids, []) - computed_egress_rules = try(each.value.computed_egress_rules, var.defaults.computed_egress_rules, []) - computed_egress_with_cidr_blocks = try(each.value.computed_egress_with_cidr_blocks, var.defaults.computed_egress_with_cidr_blocks, []) - computed_egress_with_ipv6_cidr_blocks = try(each.value.computed_egress_with_ipv6_cidr_blocks, var.defaults.computed_egress_with_ipv6_cidr_blocks, []) - computed_egress_with_prefix_list_ids = try(each.value.computed_egress_with_prefix_list_ids, var.defaults.computed_egress_with_prefix_list_ids, []) - computed_egress_with_self = try(each.value.computed_egress_with_self, var.defaults.computed_egress_with_self, []) - computed_egress_with_source_security_group_id = try(each.value.computed_egress_with_source_security_group_id, var.defaults.computed_egress_with_source_security_group_id, []) - computed_ingress_cidr_blocks = try(each.value.computed_ingress_cidr_blocks, var.defaults.computed_ingress_cidr_blocks, []) - computed_ingress_ipv6_cidr_blocks = try(each.value.computed_ingress_ipv6_cidr_blocks, var.defaults.computed_ingress_ipv6_cidr_blocks, []) - computed_ingress_prefix_list_ids = try(each.value.computed_ingress_prefix_list_ids, var.defaults.computed_ingress_prefix_list_ids, []) - computed_ingress_rules = try(each.value.computed_ingress_rules, var.defaults.computed_ingress_rules, []) - computed_ingress_with_cidr_blocks = try(each.value.computed_ingress_with_cidr_blocks, var.defaults.computed_ingress_with_cidr_blocks, []) - computed_ingress_with_ipv6_cidr_blocks = try(each.value.computed_ingress_with_ipv6_cidr_blocks, var.defaults.computed_ingress_with_ipv6_cidr_blocks, []) - computed_ingress_with_prefix_list_ids = try(each.value.computed_ingress_with_prefix_list_ids, var.defaults.computed_ingress_with_prefix_list_ids, []) - computed_ingress_with_self = try(each.value.computed_ingress_with_self, var.defaults.computed_ingress_with_self, []) - computed_ingress_with_source_security_group_id = try(each.value.computed_ingress_with_source_security_group_id, var.defaults.computed_ingress_with_source_security_group_id, []) - create = try(each.value.create, var.defaults.create, true) - description = try(each.value.description, var.defaults.description, "Security Group managed by Terraform") - egress_cidr_blocks = try(each.value.egress_cidr_blocks, var.defaults.egress_cidr_blocks, ["0.0.0.0/0"]) - egress_ipv6_cidr_blocks = try(each.value.egress_ipv6_cidr_blocks, var.defaults.egress_ipv6_cidr_blocks, ["::/0"]) - egress_prefix_list_ids = try(each.value.egress_prefix_list_ids, var.defaults.egress_prefix_list_ids, []) - egress_rules = try(each.value.egress_rules, var.defaults.egress_rules, []) - egress_with_cidr_blocks = try(each.value.egress_with_cidr_blocks, var.defaults.egress_with_cidr_blocks, []) - egress_with_ipv6_cidr_blocks = try(each.value.egress_with_ipv6_cidr_blocks, var.defaults.egress_with_ipv6_cidr_blocks, []) - egress_with_prefix_list_ids = try(each.value.egress_with_prefix_list_ids, var.defaults.egress_with_prefix_list_ids, []) - egress_with_self = try(each.value.egress_with_self, var.defaults.egress_with_self, []) - egress_with_source_security_group_id = try(each.value.egress_with_source_security_group_id, var.defaults.egress_with_source_security_group_id, []) - ingress_cidr_blocks = try(each.value.ingress_cidr_blocks, var.defaults.ingress_cidr_blocks, []) - ingress_ipv6_cidr_blocks = try(each.value.ingress_ipv6_cidr_blocks, var.defaults.ingress_ipv6_cidr_blocks, []) - ingress_prefix_list_ids = try(each.value.ingress_prefix_list_ids, var.defaults.ingress_prefix_list_ids, []) - ingress_rules = try(each.value.ingress_rules, var.defaults.ingress_rules, []) - ingress_with_cidr_blocks = try(each.value.ingress_with_cidr_blocks, var.defaults.ingress_with_cidr_blocks, []) - ingress_with_ipv6_cidr_blocks = try(each.value.ingress_with_ipv6_cidr_blocks, var.defaults.ingress_with_ipv6_cidr_blocks, []) - ingress_with_prefix_list_ids = try(each.value.ingress_with_prefix_list_ids, var.defaults.ingress_with_prefix_list_ids, []) - ingress_with_self = try(each.value.ingress_with_self, var.defaults.ingress_with_self, []) - ingress_with_source_security_group_id = try(each.value.ingress_with_source_security_group_id, var.defaults.ingress_with_source_security_group_id, []) - name = try(each.value.name, var.defaults.name) - number_of_computed_egress_cidr_blocks = try(each.value.number_of_computed_egress_cidr_blocks, var.defaults.number_of_computed_egress_cidr_blocks, 0) - number_of_computed_egress_ipv6_cidr_blocks = try(each.value.number_of_computed_egress_ipv6_cidr_blocks, var.defaults.number_of_computed_egress_ipv6_cidr_blocks, 0) - number_of_computed_egress_prefix_list_ids = try(each.value.number_of_computed_egress_prefix_list_ids, var.defaults.number_of_computed_egress_prefix_list_ids, 0) - number_of_computed_egress_rules = try(each.value.number_of_computed_egress_rules, var.defaults.number_of_computed_egress_rules, 0) - number_of_computed_egress_with_cidr_blocks = try(each.value.number_of_computed_egress_with_cidr_blocks, var.defaults.number_of_computed_egress_with_cidr_blocks, 0) - number_of_computed_egress_with_ipv6_cidr_blocks = try(each.value.number_of_computed_egress_with_ipv6_cidr_blocks, var.defaults.number_of_computed_egress_with_ipv6_cidr_blocks, 0) - number_of_computed_egress_with_prefix_list_ids = try(each.value.number_of_computed_egress_with_prefix_list_ids, var.defaults.number_of_computed_egress_with_prefix_list_ids, 0) - number_of_computed_egress_with_self = try(each.value.number_of_computed_egress_with_self, var.defaults.number_of_computed_egress_with_self, 0) - number_of_computed_egress_with_source_security_group_id = try(each.value.number_of_computed_egress_with_source_security_group_id, var.defaults.number_of_computed_egress_with_source_security_group_id, 0) - number_of_computed_ingress_cidr_blocks = try(each.value.number_of_computed_ingress_cidr_blocks, var.defaults.number_of_computed_ingress_cidr_blocks, 0) - number_of_computed_ingress_ipv6_cidr_blocks = try(each.value.number_of_computed_ingress_ipv6_cidr_blocks, var.defaults.number_of_computed_ingress_ipv6_cidr_blocks, 0) - number_of_computed_ingress_prefix_list_ids = try(each.value.number_of_computed_ingress_prefix_list_ids, var.defaults.number_of_computed_ingress_prefix_list_ids, 0) - number_of_computed_ingress_rules = try(each.value.number_of_computed_ingress_rules, var.defaults.number_of_computed_ingress_rules, 0) - number_of_computed_ingress_with_cidr_blocks = try(each.value.number_of_computed_ingress_with_cidr_blocks, var.defaults.number_of_computed_ingress_with_cidr_blocks, 0) - number_of_computed_ingress_with_ipv6_cidr_blocks = try(each.value.number_of_computed_ingress_with_ipv6_cidr_blocks, var.defaults.number_of_computed_ingress_with_ipv6_cidr_blocks, 0) - number_of_computed_ingress_with_prefix_list_ids = try(each.value.number_of_computed_ingress_with_prefix_list_ids, var.defaults.number_of_computed_ingress_with_prefix_list_ids, 0) - number_of_computed_ingress_with_self = try(each.value.number_of_computed_ingress_with_self, var.defaults.number_of_computed_ingress_with_self, 0) - number_of_computed_ingress_with_source_security_group_id = try(each.value.number_of_computed_ingress_with_source_security_group_id, var.defaults.number_of_computed_ingress_with_source_security_group_id, 0) - revoke_rules_on_delete = try(each.value.revoke_rules_on_delete, var.defaults.revoke_rules_on_delete, false) - tags = try(each.value.tags, var.defaults.tags, {}) - use_name_prefix = try(each.value.use_name_prefix, var.defaults.use_name_prefix, true) - vpc_id = try(each.value.vpc_id, var.defaults.vpc_id) + auto_computed_egress_rules = try(each.value.auto_computed_egress_rules, var.defaults.auto_computed_egress_rules, []) + auto_computed_egress_with_self = try(each.value.auto_computed_egress_with_self, var.defaults.auto_computed_egress_with_self, []) + auto_computed_ingress_rules = try(each.value.auto_computed_ingress_rules, var.defaults.auto_computed_ingress_rules, []) + auto_computed_ingress_with_self = try(each.value.auto_computed_ingress_with_self, var.defaults.auto_computed_ingress_with_self, []) + auto_egress_rules = try(each.value.auto_egress_rules, var.defaults.auto_egress_rules, ["all-all"]) + auto_egress_with_self = try(each.value.auto_egress_with_self, var.defaults.auto_egress_with_self, []) + auto_ingress_rules = try(each.value.auto_ingress_rules, var.defaults.auto_ingress_rules, ["docker-swarm-mngmt-tcp", "docker-swarm-node-tcp", "docker-swarm-node-udp", "docker-swarm-overlay-udp"]) + auto_ingress_with_self = try(each.value.auto_ingress_with_self, var.defaults.auto_ingress_with_self, [{ "rule" = "all-all" }]) + auto_number_of_computed_egress_rules = try(each.value.auto_number_of_computed_egress_rules, var.defaults.auto_number_of_computed_egress_rules, 0) + auto_number_of_computed_egress_with_self = try(each.value.auto_number_of_computed_egress_with_self, var.defaults.auto_number_of_computed_egress_with_self, 0) + auto_number_of_computed_ingress_rules = try(each.value.auto_number_of_computed_ingress_rules, var.defaults.auto_number_of_computed_ingress_rules, 0) + auto_number_of_computed_ingress_with_self = try(each.value.auto_number_of_computed_ingress_with_self, var.defaults.auto_number_of_computed_ingress_with_self, 0) + computed_egress_cidr_blocks = try(each.value.computed_egress_cidr_blocks, var.defaults.computed_egress_cidr_blocks, ["0.0.0.0/0"]) + computed_egress_ipv6_cidr_blocks = try(each.value.computed_egress_ipv6_cidr_blocks, var.defaults.computed_egress_ipv6_cidr_blocks, ["::/0"]) + computed_egress_prefix_list_ids = try(each.value.computed_egress_prefix_list_ids, var.defaults.computed_egress_prefix_list_ids, []) + computed_egress_rules = try(each.value.computed_egress_rules, var.defaults.computed_egress_rules, []) + computed_egress_with_cidr_ipv4 = try(each.value.computed_egress_with_cidr_ipv4, var.defaults.computed_egress_with_cidr_ipv4, []) + computed_egress_with_cidr_ipv6 = try(each.value.computed_egress_with_cidr_ipv6, var.defaults.computed_egress_with_cidr_ipv6, []) + computed_egress_with_prefix_list_id = try(each.value.computed_egress_with_prefix_list_id, var.defaults.computed_egress_with_prefix_list_id, []) + computed_egress_with_referenced_security_group_id = try(each.value.computed_egress_with_referenced_security_group_id, var.defaults.computed_egress_with_referenced_security_group_id, []) + computed_egress_with_self = try(each.value.computed_egress_with_self, var.defaults.computed_egress_with_self, []) + computed_ingress_cidr_blocks = try(each.value.computed_ingress_cidr_blocks, var.defaults.computed_ingress_cidr_blocks, []) + computed_ingress_ipv6_cidr_blocks = try(each.value.computed_ingress_ipv6_cidr_blocks, var.defaults.computed_ingress_ipv6_cidr_blocks, []) + computed_ingress_prefix_list_ids = try(each.value.computed_ingress_prefix_list_ids, var.defaults.computed_ingress_prefix_list_ids, []) + computed_ingress_rules = try(each.value.computed_ingress_rules, var.defaults.computed_ingress_rules, []) + computed_ingress_with_cidr_ipv4 = try(each.value.computed_ingress_with_cidr_ipv4, var.defaults.computed_ingress_with_cidr_ipv4, []) + computed_ingress_with_cidr_ipv6 = try(each.value.computed_ingress_with_cidr_ipv6, var.defaults.computed_ingress_with_cidr_ipv6, []) + computed_ingress_with_prefix_list_id = try(each.value.computed_ingress_with_prefix_list_id, var.defaults.computed_ingress_with_prefix_list_id, []) + computed_ingress_with_referenced_security_group_id = try(each.value.computed_ingress_with_referenced_security_group_id, var.defaults.computed_ingress_with_referenced_security_group_id, []) + computed_ingress_with_self = try(each.value.computed_ingress_with_self, var.defaults.computed_ingress_with_self, []) + create = try(each.value.create, var.defaults.create, true) + description = try(each.value.description, var.defaults.description, "Security Group managed by Terraform") + egress_cidr_ipv4 = try(each.value.egress_cidr_ipv4, var.defaults.egress_cidr_ipv4, ["0.0.0.0/0"]) + egress_cidr_ipv6 = try(each.value.egress_cidr_ipv6, var.defaults.egress_cidr_ipv6, ["::/0"]) + egress_prefix_list_ids = try(each.value.egress_prefix_list_ids, var.defaults.egress_prefix_list_ids, []) + egress_rules = try(each.value.egress_rules, var.defaults.egress_rules, []) + egress_with_cidr_ipv4 = try(each.value.egress_with_cidr_ipv4, var.defaults.egress_with_cidr_ipv4, []) + egress_with_cidr_ipv6 = try(each.value.egress_with_cidr_ipv6, var.defaults.egress_with_cidr_ipv6, []) + egress_with_prefix_list_id = try(each.value.egress_with_prefix_list_id, var.defaults.egress_with_prefix_list_id, []) + egress_with_referenced_security_group_id = try(each.value.egress_with_referenced_security_group_id, var.defaults.egress_with_referenced_security_group_id, []) + egress_with_self = try(each.value.egress_with_self, var.defaults.egress_with_self, []) + ingress_cidr_ipv4 = try(each.value.ingress_cidr_ipv4, var.defaults.ingress_cidr_ipv4, []) + ingress_cidr_ipv6 = try(each.value.ingress_cidr_ipv6, var.defaults.ingress_cidr_ipv6, []) + ingress_prefix_list_ids = try(each.value.ingress_prefix_list_ids, var.defaults.ingress_prefix_list_ids, []) + ingress_rules = try(each.value.ingress_rules, var.defaults.ingress_rules, []) + ingress_with_cidr_ipv4 = try(each.value.ingress_with_cidr_ipv4, var.defaults.ingress_with_cidr_ipv4, []) + ingress_with_cidr_ipv6 = try(each.value.ingress_with_cidr_ipv6, var.defaults.ingress_with_cidr_ipv6, []) + ingress_with_prefix_list_id = try(each.value.ingress_with_prefix_list_id, var.defaults.ingress_with_prefix_list_id, []) + ingress_with_referenced_security_group_id = try(each.value.ingress_with_referenced_security_group_id, var.defaults.ingress_with_referenced_security_group_id, []) + ingress_with_self = try(each.value.ingress_with_self, var.defaults.ingress_with_self, []) + name = try(each.value.name, var.defaults.name) + number_of_computed_egress_cidr_blocks = try(each.value.number_of_computed_egress_cidr_blocks, var.defaults.number_of_computed_egress_cidr_blocks, 0) + number_of_computed_egress_ipv6_cidr_blocks = try(each.value.number_of_computed_egress_ipv6_cidr_blocks, var.defaults.number_of_computed_egress_ipv6_cidr_blocks, 0) + number_of_computed_egress_prefix_list_ids = try(each.value.number_of_computed_egress_prefix_list_ids, var.defaults.number_of_computed_egress_prefix_list_ids, 0) + number_of_computed_egress_rules = try(each.value.number_of_computed_egress_rules, var.defaults.number_of_computed_egress_rules, 0) + number_of_computed_egress_with_cidr_ipv4 = try(each.value.number_of_computed_egress_with_cidr_ipv4, var.defaults.number_of_computed_egress_with_cidr_ipv4, 0) + number_of_computed_egress_with_cidr_ipv6 = try(each.value.number_of_computed_egress_with_cidr_ipv6, var.defaults.number_of_computed_egress_with_cidr_ipv6, 0) + number_of_computed_egress_with_prefix_list_id = try(each.value.number_of_computed_egress_with_prefix_list_id, var.defaults.number_of_computed_egress_with_prefix_list_id, 0) + number_of_computed_egress_with_referenced_security_group_id = try(each.value.number_of_computed_egress_with_referenced_security_group_id, var.defaults.number_of_computed_egress_with_referenced_security_group_id, 0) + number_of_computed_egress_with_self = try(each.value.number_of_computed_egress_with_self, var.defaults.number_of_computed_egress_with_self, 0) + number_of_computed_ingress_cidr_blocks = try(each.value.number_of_computed_ingress_cidr_blocks, var.defaults.number_of_computed_ingress_cidr_blocks, 0) + number_of_computed_ingress_ipv6_cidr_blocks = try(each.value.number_of_computed_ingress_ipv6_cidr_blocks, var.defaults.number_of_computed_ingress_ipv6_cidr_blocks, 0) + number_of_computed_ingress_prefix_list_ids = try(each.value.number_of_computed_ingress_prefix_list_ids, var.defaults.number_of_computed_ingress_prefix_list_ids, 0) + number_of_computed_ingress_rules = try(each.value.number_of_computed_ingress_rules, var.defaults.number_of_computed_ingress_rules, 0) + number_of_computed_ingress_with_cidr_ipv4 = try(each.value.number_of_computed_ingress_with_cidr_ipv4, var.defaults.number_of_computed_ingress_with_cidr_ipv4, 0) + number_of_computed_ingress_with_cidr_ipv6 = try(each.value.number_of_computed_ingress_with_cidr_ipv6, var.defaults.number_of_computed_ingress_with_cidr_ipv6, 0) + number_of_computed_ingress_with_prefix_list_id = try(each.value.number_of_computed_ingress_with_prefix_list_id, var.defaults.number_of_computed_ingress_with_prefix_list_id, 0) + number_of_computed_ingress_with_referenced_security_group_id = try(each.value.number_of_computed_ingress_with_referenced_security_group_id, var.defaults.number_of_computed_ingress_with_referenced_security_group_id, 0) + number_of_computed_ingress_with_self = try(each.value.number_of_computed_ingress_with_self, var.defaults.number_of_computed_ingress_with_self, 0) + revoke_rules_on_delete = try(each.value.revoke_rules_on_delete, var.defaults.revoke_rules_on_delete, false) + tags = try(each.value.tags, var.defaults.tags, {}) + use_name_prefix = try(each.value.use_name_prefix, var.defaults.use_name_prefix, true) + vpc_id = try(each.value.vpc_id, var.defaults.vpc_id) } diff --git a/wrappers/elasticsearch/main.tf b/wrappers/elasticsearch/main.tf index 324df290..d66dc696 100644 --- a/wrappers/elasticsearch/main.tf +++ b/wrappers/elasticsearch/main.tf @@ -3,77 +3,77 @@ module "wrapper" { for_each = var.items - auto_computed_egress_rules = try(each.value.auto_computed_egress_rules, var.defaults.auto_computed_egress_rules, []) - auto_computed_egress_with_self = try(each.value.auto_computed_egress_with_self, var.defaults.auto_computed_egress_with_self, []) - auto_computed_ingress_rules = try(each.value.auto_computed_ingress_rules, var.defaults.auto_computed_ingress_rules, []) - auto_computed_ingress_with_self = try(each.value.auto_computed_ingress_with_self, var.defaults.auto_computed_ingress_with_self, []) - auto_egress_rules = try(each.value.auto_egress_rules, var.defaults.auto_egress_rules, ["all-all"]) - auto_egress_with_self = try(each.value.auto_egress_with_self, var.defaults.auto_egress_with_self, []) - auto_ingress_rules = try(each.value.auto_ingress_rules, var.defaults.auto_ingress_rules, ["elasticsearch-rest-tcp", "elasticsearch-java-tcp"]) - auto_ingress_with_self = try(each.value.auto_ingress_with_self, var.defaults.auto_ingress_with_self, [{ "rule" = "all-all" }]) - auto_number_of_computed_egress_rules = try(each.value.auto_number_of_computed_egress_rules, var.defaults.auto_number_of_computed_egress_rules, 0) - auto_number_of_computed_egress_with_self = try(each.value.auto_number_of_computed_egress_with_self, var.defaults.auto_number_of_computed_egress_with_self, 0) - auto_number_of_computed_ingress_rules = try(each.value.auto_number_of_computed_ingress_rules, var.defaults.auto_number_of_computed_ingress_rules, 0) - auto_number_of_computed_ingress_with_self = try(each.value.auto_number_of_computed_ingress_with_self, var.defaults.auto_number_of_computed_ingress_with_self, 0) - computed_egress_cidr_blocks = try(each.value.computed_egress_cidr_blocks, var.defaults.computed_egress_cidr_blocks, ["0.0.0.0/0"]) - computed_egress_ipv6_cidr_blocks = try(each.value.computed_egress_ipv6_cidr_blocks, var.defaults.computed_egress_ipv6_cidr_blocks, ["::/0"]) - computed_egress_prefix_list_ids = try(each.value.computed_egress_prefix_list_ids, var.defaults.computed_egress_prefix_list_ids, []) - computed_egress_rules = try(each.value.computed_egress_rules, var.defaults.computed_egress_rules, []) - computed_egress_with_cidr_blocks = try(each.value.computed_egress_with_cidr_blocks, var.defaults.computed_egress_with_cidr_blocks, []) - computed_egress_with_ipv6_cidr_blocks = try(each.value.computed_egress_with_ipv6_cidr_blocks, var.defaults.computed_egress_with_ipv6_cidr_blocks, []) - computed_egress_with_prefix_list_ids = try(each.value.computed_egress_with_prefix_list_ids, var.defaults.computed_egress_with_prefix_list_ids, []) - computed_egress_with_self = try(each.value.computed_egress_with_self, var.defaults.computed_egress_with_self, []) - computed_egress_with_source_security_group_id = try(each.value.computed_egress_with_source_security_group_id, var.defaults.computed_egress_with_source_security_group_id, []) - computed_ingress_cidr_blocks = try(each.value.computed_ingress_cidr_blocks, var.defaults.computed_ingress_cidr_blocks, []) - computed_ingress_ipv6_cidr_blocks = try(each.value.computed_ingress_ipv6_cidr_blocks, var.defaults.computed_ingress_ipv6_cidr_blocks, []) - computed_ingress_prefix_list_ids = try(each.value.computed_ingress_prefix_list_ids, var.defaults.computed_ingress_prefix_list_ids, []) - computed_ingress_rules = try(each.value.computed_ingress_rules, var.defaults.computed_ingress_rules, []) - computed_ingress_with_cidr_blocks = try(each.value.computed_ingress_with_cidr_blocks, var.defaults.computed_ingress_with_cidr_blocks, []) - computed_ingress_with_ipv6_cidr_blocks = try(each.value.computed_ingress_with_ipv6_cidr_blocks, var.defaults.computed_ingress_with_ipv6_cidr_blocks, []) - computed_ingress_with_prefix_list_ids = try(each.value.computed_ingress_with_prefix_list_ids, var.defaults.computed_ingress_with_prefix_list_ids, []) - computed_ingress_with_self = try(each.value.computed_ingress_with_self, var.defaults.computed_ingress_with_self, []) - computed_ingress_with_source_security_group_id = try(each.value.computed_ingress_with_source_security_group_id, var.defaults.computed_ingress_with_source_security_group_id, []) - create = try(each.value.create, var.defaults.create, true) - description = try(each.value.description, var.defaults.description, "Security Group managed by Terraform") - egress_cidr_blocks = try(each.value.egress_cidr_blocks, var.defaults.egress_cidr_blocks, ["0.0.0.0/0"]) - egress_ipv6_cidr_blocks = try(each.value.egress_ipv6_cidr_blocks, var.defaults.egress_ipv6_cidr_blocks, ["::/0"]) - egress_prefix_list_ids = try(each.value.egress_prefix_list_ids, var.defaults.egress_prefix_list_ids, []) - egress_rules = try(each.value.egress_rules, var.defaults.egress_rules, []) - egress_with_cidr_blocks = try(each.value.egress_with_cidr_blocks, var.defaults.egress_with_cidr_blocks, []) - egress_with_ipv6_cidr_blocks = try(each.value.egress_with_ipv6_cidr_blocks, var.defaults.egress_with_ipv6_cidr_blocks, []) - egress_with_prefix_list_ids = try(each.value.egress_with_prefix_list_ids, var.defaults.egress_with_prefix_list_ids, []) - egress_with_self = try(each.value.egress_with_self, var.defaults.egress_with_self, []) - egress_with_source_security_group_id = try(each.value.egress_with_source_security_group_id, var.defaults.egress_with_source_security_group_id, []) - ingress_cidr_blocks = try(each.value.ingress_cidr_blocks, var.defaults.ingress_cidr_blocks, []) - ingress_ipv6_cidr_blocks = try(each.value.ingress_ipv6_cidr_blocks, var.defaults.ingress_ipv6_cidr_blocks, []) - ingress_prefix_list_ids = try(each.value.ingress_prefix_list_ids, var.defaults.ingress_prefix_list_ids, []) - ingress_rules = try(each.value.ingress_rules, var.defaults.ingress_rules, []) - ingress_with_cidr_blocks = try(each.value.ingress_with_cidr_blocks, var.defaults.ingress_with_cidr_blocks, []) - ingress_with_ipv6_cidr_blocks = try(each.value.ingress_with_ipv6_cidr_blocks, var.defaults.ingress_with_ipv6_cidr_blocks, []) - ingress_with_prefix_list_ids = try(each.value.ingress_with_prefix_list_ids, var.defaults.ingress_with_prefix_list_ids, []) - ingress_with_self = try(each.value.ingress_with_self, var.defaults.ingress_with_self, []) - ingress_with_source_security_group_id = try(each.value.ingress_with_source_security_group_id, var.defaults.ingress_with_source_security_group_id, []) - name = try(each.value.name, var.defaults.name) - number_of_computed_egress_cidr_blocks = try(each.value.number_of_computed_egress_cidr_blocks, var.defaults.number_of_computed_egress_cidr_blocks, 0) - number_of_computed_egress_ipv6_cidr_blocks = try(each.value.number_of_computed_egress_ipv6_cidr_blocks, var.defaults.number_of_computed_egress_ipv6_cidr_blocks, 0) - number_of_computed_egress_prefix_list_ids = try(each.value.number_of_computed_egress_prefix_list_ids, var.defaults.number_of_computed_egress_prefix_list_ids, 0) - number_of_computed_egress_rules = try(each.value.number_of_computed_egress_rules, var.defaults.number_of_computed_egress_rules, 0) - number_of_computed_egress_with_cidr_blocks = try(each.value.number_of_computed_egress_with_cidr_blocks, var.defaults.number_of_computed_egress_with_cidr_blocks, 0) - number_of_computed_egress_with_ipv6_cidr_blocks = try(each.value.number_of_computed_egress_with_ipv6_cidr_blocks, var.defaults.number_of_computed_egress_with_ipv6_cidr_blocks, 0) - number_of_computed_egress_with_prefix_list_ids = try(each.value.number_of_computed_egress_with_prefix_list_ids, var.defaults.number_of_computed_egress_with_prefix_list_ids, 0) - number_of_computed_egress_with_self = try(each.value.number_of_computed_egress_with_self, var.defaults.number_of_computed_egress_with_self, 0) - number_of_computed_egress_with_source_security_group_id = try(each.value.number_of_computed_egress_with_source_security_group_id, var.defaults.number_of_computed_egress_with_source_security_group_id, 0) - number_of_computed_ingress_cidr_blocks = try(each.value.number_of_computed_ingress_cidr_blocks, var.defaults.number_of_computed_ingress_cidr_blocks, 0) - number_of_computed_ingress_ipv6_cidr_blocks = try(each.value.number_of_computed_ingress_ipv6_cidr_blocks, var.defaults.number_of_computed_ingress_ipv6_cidr_blocks, 0) - number_of_computed_ingress_prefix_list_ids = try(each.value.number_of_computed_ingress_prefix_list_ids, var.defaults.number_of_computed_ingress_prefix_list_ids, 0) - number_of_computed_ingress_rules = try(each.value.number_of_computed_ingress_rules, var.defaults.number_of_computed_ingress_rules, 0) - number_of_computed_ingress_with_cidr_blocks = try(each.value.number_of_computed_ingress_with_cidr_blocks, var.defaults.number_of_computed_ingress_with_cidr_blocks, 0) - number_of_computed_ingress_with_ipv6_cidr_blocks = try(each.value.number_of_computed_ingress_with_ipv6_cidr_blocks, var.defaults.number_of_computed_ingress_with_ipv6_cidr_blocks, 0) - number_of_computed_ingress_with_prefix_list_ids = try(each.value.number_of_computed_ingress_with_prefix_list_ids, var.defaults.number_of_computed_ingress_with_prefix_list_ids, 0) - number_of_computed_ingress_with_self = try(each.value.number_of_computed_ingress_with_self, var.defaults.number_of_computed_ingress_with_self, 0) - number_of_computed_ingress_with_source_security_group_id = try(each.value.number_of_computed_ingress_with_source_security_group_id, var.defaults.number_of_computed_ingress_with_source_security_group_id, 0) - revoke_rules_on_delete = try(each.value.revoke_rules_on_delete, var.defaults.revoke_rules_on_delete, false) - tags = try(each.value.tags, var.defaults.tags, {}) - use_name_prefix = try(each.value.use_name_prefix, var.defaults.use_name_prefix, true) - vpc_id = try(each.value.vpc_id, var.defaults.vpc_id) + auto_computed_egress_rules = try(each.value.auto_computed_egress_rules, var.defaults.auto_computed_egress_rules, []) + auto_computed_egress_with_self = try(each.value.auto_computed_egress_with_self, var.defaults.auto_computed_egress_with_self, []) + auto_computed_ingress_rules = try(each.value.auto_computed_ingress_rules, var.defaults.auto_computed_ingress_rules, []) + auto_computed_ingress_with_self = try(each.value.auto_computed_ingress_with_self, var.defaults.auto_computed_ingress_with_self, []) + auto_egress_rules = try(each.value.auto_egress_rules, var.defaults.auto_egress_rules, ["all-all"]) + auto_egress_with_self = try(each.value.auto_egress_with_self, var.defaults.auto_egress_with_self, []) + auto_ingress_rules = try(each.value.auto_ingress_rules, var.defaults.auto_ingress_rules, ["elasticsearch-rest-tcp", "elasticsearch-java-tcp"]) + auto_ingress_with_self = try(each.value.auto_ingress_with_self, var.defaults.auto_ingress_with_self, [{ "rule" = "all-all" }]) + auto_number_of_computed_egress_rules = try(each.value.auto_number_of_computed_egress_rules, var.defaults.auto_number_of_computed_egress_rules, 0) + auto_number_of_computed_egress_with_self = try(each.value.auto_number_of_computed_egress_with_self, var.defaults.auto_number_of_computed_egress_with_self, 0) + auto_number_of_computed_ingress_rules = try(each.value.auto_number_of_computed_ingress_rules, var.defaults.auto_number_of_computed_ingress_rules, 0) + auto_number_of_computed_ingress_with_self = try(each.value.auto_number_of_computed_ingress_with_self, var.defaults.auto_number_of_computed_ingress_with_self, 0) + computed_egress_cidr_blocks = try(each.value.computed_egress_cidr_blocks, var.defaults.computed_egress_cidr_blocks, ["0.0.0.0/0"]) + computed_egress_ipv6_cidr_blocks = try(each.value.computed_egress_ipv6_cidr_blocks, var.defaults.computed_egress_ipv6_cidr_blocks, ["::/0"]) + computed_egress_prefix_list_ids = try(each.value.computed_egress_prefix_list_ids, var.defaults.computed_egress_prefix_list_ids, []) + computed_egress_rules = try(each.value.computed_egress_rules, var.defaults.computed_egress_rules, []) + computed_egress_with_cidr_ipv4 = try(each.value.computed_egress_with_cidr_ipv4, var.defaults.computed_egress_with_cidr_ipv4, []) + computed_egress_with_cidr_ipv6 = try(each.value.computed_egress_with_cidr_ipv6, var.defaults.computed_egress_with_cidr_ipv6, []) + computed_egress_with_prefix_list_id = try(each.value.computed_egress_with_prefix_list_id, var.defaults.computed_egress_with_prefix_list_id, []) + computed_egress_with_referenced_security_group_id = try(each.value.computed_egress_with_referenced_security_group_id, var.defaults.computed_egress_with_referenced_security_group_id, []) + computed_egress_with_self = try(each.value.computed_egress_with_self, var.defaults.computed_egress_with_self, []) + computed_ingress_cidr_blocks = try(each.value.computed_ingress_cidr_blocks, var.defaults.computed_ingress_cidr_blocks, []) + computed_ingress_ipv6_cidr_blocks = try(each.value.computed_ingress_ipv6_cidr_blocks, var.defaults.computed_ingress_ipv6_cidr_blocks, []) + computed_ingress_prefix_list_ids = try(each.value.computed_ingress_prefix_list_ids, var.defaults.computed_ingress_prefix_list_ids, []) + computed_ingress_rules = try(each.value.computed_ingress_rules, var.defaults.computed_ingress_rules, []) + computed_ingress_with_cidr_ipv4 = try(each.value.computed_ingress_with_cidr_ipv4, var.defaults.computed_ingress_with_cidr_ipv4, []) + computed_ingress_with_cidr_ipv6 = try(each.value.computed_ingress_with_cidr_ipv6, var.defaults.computed_ingress_with_cidr_ipv6, []) + computed_ingress_with_prefix_list_id = try(each.value.computed_ingress_with_prefix_list_id, var.defaults.computed_ingress_with_prefix_list_id, []) + computed_ingress_with_referenced_security_group_id = try(each.value.computed_ingress_with_referenced_security_group_id, var.defaults.computed_ingress_with_referenced_security_group_id, []) + computed_ingress_with_self = try(each.value.computed_ingress_with_self, var.defaults.computed_ingress_with_self, []) + create = try(each.value.create, var.defaults.create, true) + description = try(each.value.description, var.defaults.description, "Security Group managed by Terraform") + egress_cidr_ipv4 = try(each.value.egress_cidr_ipv4, var.defaults.egress_cidr_ipv4, ["0.0.0.0/0"]) + egress_cidr_ipv6 = try(each.value.egress_cidr_ipv6, var.defaults.egress_cidr_ipv6, ["::/0"]) + egress_prefix_list_ids = try(each.value.egress_prefix_list_ids, var.defaults.egress_prefix_list_ids, []) + egress_rules = try(each.value.egress_rules, var.defaults.egress_rules, []) + egress_with_cidr_ipv4 = try(each.value.egress_with_cidr_ipv4, var.defaults.egress_with_cidr_ipv4, []) + egress_with_cidr_ipv6 = try(each.value.egress_with_cidr_ipv6, var.defaults.egress_with_cidr_ipv6, []) + egress_with_prefix_list_id = try(each.value.egress_with_prefix_list_id, var.defaults.egress_with_prefix_list_id, []) + egress_with_referenced_security_group_id = try(each.value.egress_with_referenced_security_group_id, var.defaults.egress_with_referenced_security_group_id, []) + egress_with_self = try(each.value.egress_with_self, var.defaults.egress_with_self, []) + ingress_cidr_ipv4 = try(each.value.ingress_cidr_ipv4, var.defaults.ingress_cidr_ipv4, []) + ingress_cidr_ipv6 = try(each.value.ingress_cidr_ipv6, var.defaults.ingress_cidr_ipv6, []) + ingress_prefix_list_ids = try(each.value.ingress_prefix_list_ids, var.defaults.ingress_prefix_list_ids, []) + ingress_rules = try(each.value.ingress_rules, var.defaults.ingress_rules, []) + ingress_with_cidr_ipv4 = try(each.value.ingress_with_cidr_ipv4, var.defaults.ingress_with_cidr_ipv4, []) + ingress_with_cidr_ipv6 = try(each.value.ingress_with_cidr_ipv6, var.defaults.ingress_with_cidr_ipv6, []) + ingress_with_prefix_list_id = try(each.value.ingress_with_prefix_list_id, var.defaults.ingress_with_prefix_list_id, []) + ingress_with_referenced_security_group_id = try(each.value.ingress_with_referenced_security_group_id, var.defaults.ingress_with_referenced_security_group_id, []) + ingress_with_self = try(each.value.ingress_with_self, var.defaults.ingress_with_self, []) + name = try(each.value.name, var.defaults.name) + number_of_computed_egress_cidr_blocks = try(each.value.number_of_computed_egress_cidr_blocks, var.defaults.number_of_computed_egress_cidr_blocks, 0) + number_of_computed_egress_ipv6_cidr_blocks = try(each.value.number_of_computed_egress_ipv6_cidr_blocks, var.defaults.number_of_computed_egress_ipv6_cidr_blocks, 0) + number_of_computed_egress_prefix_list_ids = try(each.value.number_of_computed_egress_prefix_list_ids, var.defaults.number_of_computed_egress_prefix_list_ids, 0) + number_of_computed_egress_rules = try(each.value.number_of_computed_egress_rules, var.defaults.number_of_computed_egress_rules, 0) + number_of_computed_egress_with_cidr_ipv4 = try(each.value.number_of_computed_egress_with_cidr_ipv4, var.defaults.number_of_computed_egress_with_cidr_ipv4, 0) + number_of_computed_egress_with_cidr_ipv6 = try(each.value.number_of_computed_egress_with_cidr_ipv6, var.defaults.number_of_computed_egress_with_cidr_ipv6, 0) + number_of_computed_egress_with_prefix_list_id = try(each.value.number_of_computed_egress_with_prefix_list_id, var.defaults.number_of_computed_egress_with_prefix_list_id, 0) + number_of_computed_egress_with_referenced_security_group_id = try(each.value.number_of_computed_egress_with_referenced_security_group_id, var.defaults.number_of_computed_egress_with_referenced_security_group_id, 0) + number_of_computed_egress_with_self = try(each.value.number_of_computed_egress_with_self, var.defaults.number_of_computed_egress_with_self, 0) + number_of_computed_ingress_cidr_blocks = try(each.value.number_of_computed_ingress_cidr_blocks, var.defaults.number_of_computed_ingress_cidr_blocks, 0) + number_of_computed_ingress_ipv6_cidr_blocks = try(each.value.number_of_computed_ingress_ipv6_cidr_blocks, var.defaults.number_of_computed_ingress_ipv6_cidr_blocks, 0) + number_of_computed_ingress_prefix_list_ids = try(each.value.number_of_computed_ingress_prefix_list_ids, var.defaults.number_of_computed_ingress_prefix_list_ids, 0) + number_of_computed_ingress_rules = try(each.value.number_of_computed_ingress_rules, var.defaults.number_of_computed_ingress_rules, 0) + number_of_computed_ingress_with_cidr_ipv4 = try(each.value.number_of_computed_ingress_with_cidr_ipv4, var.defaults.number_of_computed_ingress_with_cidr_ipv4, 0) + number_of_computed_ingress_with_cidr_ipv6 = try(each.value.number_of_computed_ingress_with_cidr_ipv6, var.defaults.number_of_computed_ingress_with_cidr_ipv6, 0) + number_of_computed_ingress_with_prefix_list_id = try(each.value.number_of_computed_ingress_with_prefix_list_id, var.defaults.number_of_computed_ingress_with_prefix_list_id, 0) + number_of_computed_ingress_with_referenced_security_group_id = try(each.value.number_of_computed_ingress_with_referenced_security_group_id, var.defaults.number_of_computed_ingress_with_referenced_security_group_id, 0) + number_of_computed_ingress_with_self = try(each.value.number_of_computed_ingress_with_self, var.defaults.number_of_computed_ingress_with_self, 0) + revoke_rules_on_delete = try(each.value.revoke_rules_on_delete, var.defaults.revoke_rules_on_delete, false) + tags = try(each.value.tags, var.defaults.tags, {}) + use_name_prefix = try(each.value.use_name_prefix, var.defaults.use_name_prefix, true) + vpc_id = try(each.value.vpc_id, var.defaults.vpc_id) } diff --git a/wrappers/etcd/main.tf b/wrappers/etcd/main.tf index ef6995fd..dd308d04 100644 --- a/wrappers/etcd/main.tf +++ b/wrappers/etcd/main.tf @@ -3,77 +3,77 @@ module "wrapper" { for_each = var.items - auto_computed_egress_rules = try(each.value.auto_computed_egress_rules, var.defaults.auto_computed_egress_rules, []) - auto_computed_egress_with_self = try(each.value.auto_computed_egress_with_self, var.defaults.auto_computed_egress_with_self, []) - auto_computed_ingress_rules = try(each.value.auto_computed_ingress_rules, var.defaults.auto_computed_ingress_rules, []) - auto_computed_ingress_with_self = try(each.value.auto_computed_ingress_with_self, var.defaults.auto_computed_ingress_with_self, []) - auto_egress_rules = try(each.value.auto_egress_rules, var.defaults.auto_egress_rules, ["all-all"]) - auto_egress_with_self = try(each.value.auto_egress_with_self, var.defaults.auto_egress_with_self, []) - auto_ingress_rules = try(each.value.auto_ingress_rules, var.defaults.auto_ingress_rules, ["etcd-client-tcp", "etcd-peer-tcp"]) - auto_ingress_with_self = try(each.value.auto_ingress_with_self, var.defaults.auto_ingress_with_self, [{ "rule" = "all-all" }]) - auto_number_of_computed_egress_rules = try(each.value.auto_number_of_computed_egress_rules, var.defaults.auto_number_of_computed_egress_rules, 0) - auto_number_of_computed_egress_with_self = try(each.value.auto_number_of_computed_egress_with_self, var.defaults.auto_number_of_computed_egress_with_self, 0) - auto_number_of_computed_ingress_rules = try(each.value.auto_number_of_computed_ingress_rules, var.defaults.auto_number_of_computed_ingress_rules, 0) - auto_number_of_computed_ingress_with_self = try(each.value.auto_number_of_computed_ingress_with_self, var.defaults.auto_number_of_computed_ingress_with_self, 0) - computed_egress_cidr_blocks = try(each.value.computed_egress_cidr_blocks, var.defaults.computed_egress_cidr_blocks, ["0.0.0.0/0"]) - computed_egress_ipv6_cidr_blocks = try(each.value.computed_egress_ipv6_cidr_blocks, var.defaults.computed_egress_ipv6_cidr_blocks, ["::/0"]) - computed_egress_prefix_list_ids = try(each.value.computed_egress_prefix_list_ids, var.defaults.computed_egress_prefix_list_ids, []) - computed_egress_rules = try(each.value.computed_egress_rules, var.defaults.computed_egress_rules, []) - computed_egress_with_cidr_blocks = try(each.value.computed_egress_with_cidr_blocks, var.defaults.computed_egress_with_cidr_blocks, []) - computed_egress_with_ipv6_cidr_blocks = try(each.value.computed_egress_with_ipv6_cidr_blocks, var.defaults.computed_egress_with_ipv6_cidr_blocks, []) - computed_egress_with_prefix_list_ids = try(each.value.computed_egress_with_prefix_list_ids, var.defaults.computed_egress_with_prefix_list_ids, []) - computed_egress_with_self = try(each.value.computed_egress_with_self, var.defaults.computed_egress_with_self, []) - computed_egress_with_source_security_group_id = try(each.value.computed_egress_with_source_security_group_id, var.defaults.computed_egress_with_source_security_group_id, []) - computed_ingress_cidr_blocks = try(each.value.computed_ingress_cidr_blocks, var.defaults.computed_ingress_cidr_blocks, []) - computed_ingress_ipv6_cidr_blocks = try(each.value.computed_ingress_ipv6_cidr_blocks, var.defaults.computed_ingress_ipv6_cidr_blocks, []) - computed_ingress_prefix_list_ids = try(each.value.computed_ingress_prefix_list_ids, var.defaults.computed_ingress_prefix_list_ids, []) - computed_ingress_rules = try(each.value.computed_ingress_rules, var.defaults.computed_ingress_rules, []) - computed_ingress_with_cidr_blocks = try(each.value.computed_ingress_with_cidr_blocks, var.defaults.computed_ingress_with_cidr_blocks, []) - computed_ingress_with_ipv6_cidr_blocks = try(each.value.computed_ingress_with_ipv6_cidr_blocks, var.defaults.computed_ingress_with_ipv6_cidr_blocks, []) - computed_ingress_with_prefix_list_ids = try(each.value.computed_ingress_with_prefix_list_ids, var.defaults.computed_ingress_with_prefix_list_ids, []) - computed_ingress_with_self = try(each.value.computed_ingress_with_self, var.defaults.computed_ingress_with_self, []) - computed_ingress_with_source_security_group_id = try(each.value.computed_ingress_with_source_security_group_id, var.defaults.computed_ingress_with_source_security_group_id, []) - create = try(each.value.create, var.defaults.create, true) - description = try(each.value.description, var.defaults.description, "Security Group managed by Terraform") - egress_cidr_blocks = try(each.value.egress_cidr_blocks, var.defaults.egress_cidr_blocks, ["0.0.0.0/0"]) - egress_ipv6_cidr_blocks = try(each.value.egress_ipv6_cidr_blocks, var.defaults.egress_ipv6_cidr_blocks, ["::/0"]) - egress_prefix_list_ids = try(each.value.egress_prefix_list_ids, var.defaults.egress_prefix_list_ids, []) - egress_rules = try(each.value.egress_rules, var.defaults.egress_rules, []) - egress_with_cidr_blocks = try(each.value.egress_with_cidr_blocks, var.defaults.egress_with_cidr_blocks, []) - egress_with_ipv6_cidr_blocks = try(each.value.egress_with_ipv6_cidr_blocks, var.defaults.egress_with_ipv6_cidr_blocks, []) - egress_with_prefix_list_ids = try(each.value.egress_with_prefix_list_ids, var.defaults.egress_with_prefix_list_ids, []) - egress_with_self = try(each.value.egress_with_self, var.defaults.egress_with_self, []) - egress_with_source_security_group_id = try(each.value.egress_with_source_security_group_id, var.defaults.egress_with_source_security_group_id, []) - ingress_cidr_blocks = try(each.value.ingress_cidr_blocks, var.defaults.ingress_cidr_blocks, []) - ingress_ipv6_cidr_blocks = try(each.value.ingress_ipv6_cidr_blocks, var.defaults.ingress_ipv6_cidr_blocks, []) - ingress_prefix_list_ids = try(each.value.ingress_prefix_list_ids, var.defaults.ingress_prefix_list_ids, []) - ingress_rules = try(each.value.ingress_rules, var.defaults.ingress_rules, []) - ingress_with_cidr_blocks = try(each.value.ingress_with_cidr_blocks, var.defaults.ingress_with_cidr_blocks, []) - ingress_with_ipv6_cidr_blocks = try(each.value.ingress_with_ipv6_cidr_blocks, var.defaults.ingress_with_ipv6_cidr_blocks, []) - ingress_with_prefix_list_ids = try(each.value.ingress_with_prefix_list_ids, var.defaults.ingress_with_prefix_list_ids, []) - ingress_with_self = try(each.value.ingress_with_self, var.defaults.ingress_with_self, []) - ingress_with_source_security_group_id = try(each.value.ingress_with_source_security_group_id, var.defaults.ingress_with_source_security_group_id, []) - name = try(each.value.name, var.defaults.name) - number_of_computed_egress_cidr_blocks = try(each.value.number_of_computed_egress_cidr_blocks, var.defaults.number_of_computed_egress_cidr_blocks, 0) - number_of_computed_egress_ipv6_cidr_blocks = try(each.value.number_of_computed_egress_ipv6_cidr_blocks, var.defaults.number_of_computed_egress_ipv6_cidr_blocks, 0) - number_of_computed_egress_prefix_list_ids = try(each.value.number_of_computed_egress_prefix_list_ids, var.defaults.number_of_computed_egress_prefix_list_ids, 0) - number_of_computed_egress_rules = try(each.value.number_of_computed_egress_rules, var.defaults.number_of_computed_egress_rules, 0) - number_of_computed_egress_with_cidr_blocks = try(each.value.number_of_computed_egress_with_cidr_blocks, var.defaults.number_of_computed_egress_with_cidr_blocks, 0) - number_of_computed_egress_with_ipv6_cidr_blocks = try(each.value.number_of_computed_egress_with_ipv6_cidr_blocks, var.defaults.number_of_computed_egress_with_ipv6_cidr_blocks, 0) - number_of_computed_egress_with_prefix_list_ids = try(each.value.number_of_computed_egress_with_prefix_list_ids, var.defaults.number_of_computed_egress_with_prefix_list_ids, 0) - number_of_computed_egress_with_self = try(each.value.number_of_computed_egress_with_self, var.defaults.number_of_computed_egress_with_self, 0) - number_of_computed_egress_with_source_security_group_id = try(each.value.number_of_computed_egress_with_source_security_group_id, var.defaults.number_of_computed_egress_with_source_security_group_id, 0) - number_of_computed_ingress_cidr_blocks = try(each.value.number_of_computed_ingress_cidr_blocks, var.defaults.number_of_computed_ingress_cidr_blocks, 0) - number_of_computed_ingress_ipv6_cidr_blocks = try(each.value.number_of_computed_ingress_ipv6_cidr_blocks, var.defaults.number_of_computed_ingress_ipv6_cidr_blocks, 0) - number_of_computed_ingress_prefix_list_ids = try(each.value.number_of_computed_ingress_prefix_list_ids, var.defaults.number_of_computed_ingress_prefix_list_ids, 0) - number_of_computed_ingress_rules = try(each.value.number_of_computed_ingress_rules, var.defaults.number_of_computed_ingress_rules, 0) - number_of_computed_ingress_with_cidr_blocks = try(each.value.number_of_computed_ingress_with_cidr_blocks, var.defaults.number_of_computed_ingress_with_cidr_blocks, 0) - number_of_computed_ingress_with_ipv6_cidr_blocks = try(each.value.number_of_computed_ingress_with_ipv6_cidr_blocks, var.defaults.number_of_computed_ingress_with_ipv6_cidr_blocks, 0) - number_of_computed_ingress_with_prefix_list_ids = try(each.value.number_of_computed_ingress_with_prefix_list_ids, var.defaults.number_of_computed_ingress_with_prefix_list_ids, 0) - number_of_computed_ingress_with_self = try(each.value.number_of_computed_ingress_with_self, var.defaults.number_of_computed_ingress_with_self, 0) - number_of_computed_ingress_with_source_security_group_id = try(each.value.number_of_computed_ingress_with_source_security_group_id, var.defaults.number_of_computed_ingress_with_source_security_group_id, 0) - revoke_rules_on_delete = try(each.value.revoke_rules_on_delete, var.defaults.revoke_rules_on_delete, false) - tags = try(each.value.tags, var.defaults.tags, {}) - use_name_prefix = try(each.value.use_name_prefix, var.defaults.use_name_prefix, true) - vpc_id = try(each.value.vpc_id, var.defaults.vpc_id) + auto_computed_egress_rules = try(each.value.auto_computed_egress_rules, var.defaults.auto_computed_egress_rules, []) + auto_computed_egress_with_self = try(each.value.auto_computed_egress_with_self, var.defaults.auto_computed_egress_with_self, []) + auto_computed_ingress_rules = try(each.value.auto_computed_ingress_rules, var.defaults.auto_computed_ingress_rules, []) + auto_computed_ingress_with_self = try(each.value.auto_computed_ingress_with_self, var.defaults.auto_computed_ingress_with_self, []) + auto_egress_rules = try(each.value.auto_egress_rules, var.defaults.auto_egress_rules, ["all-all"]) + auto_egress_with_self = try(each.value.auto_egress_with_self, var.defaults.auto_egress_with_self, []) + auto_ingress_rules = try(each.value.auto_ingress_rules, var.defaults.auto_ingress_rules, ["etcd-client-tcp", "etcd-peer-tcp"]) + auto_ingress_with_self = try(each.value.auto_ingress_with_self, var.defaults.auto_ingress_with_self, [{ "rule" = "all-all" }]) + auto_number_of_computed_egress_rules = try(each.value.auto_number_of_computed_egress_rules, var.defaults.auto_number_of_computed_egress_rules, 0) + auto_number_of_computed_egress_with_self = try(each.value.auto_number_of_computed_egress_with_self, var.defaults.auto_number_of_computed_egress_with_self, 0) + auto_number_of_computed_ingress_rules = try(each.value.auto_number_of_computed_ingress_rules, var.defaults.auto_number_of_computed_ingress_rules, 0) + auto_number_of_computed_ingress_with_self = try(each.value.auto_number_of_computed_ingress_with_self, var.defaults.auto_number_of_computed_ingress_with_self, 0) + computed_egress_cidr_blocks = try(each.value.computed_egress_cidr_blocks, var.defaults.computed_egress_cidr_blocks, ["0.0.0.0/0"]) + computed_egress_ipv6_cidr_blocks = try(each.value.computed_egress_ipv6_cidr_blocks, var.defaults.computed_egress_ipv6_cidr_blocks, ["::/0"]) + computed_egress_prefix_list_ids = try(each.value.computed_egress_prefix_list_ids, var.defaults.computed_egress_prefix_list_ids, []) + computed_egress_rules = try(each.value.computed_egress_rules, var.defaults.computed_egress_rules, []) + computed_egress_with_cidr_ipv4 = try(each.value.computed_egress_with_cidr_ipv4, var.defaults.computed_egress_with_cidr_ipv4, []) + computed_egress_with_cidr_ipv6 = try(each.value.computed_egress_with_cidr_ipv6, var.defaults.computed_egress_with_cidr_ipv6, []) + computed_egress_with_prefix_list_id = try(each.value.computed_egress_with_prefix_list_id, var.defaults.computed_egress_with_prefix_list_id, []) + computed_egress_with_referenced_security_group_id = try(each.value.computed_egress_with_referenced_security_group_id, var.defaults.computed_egress_with_referenced_security_group_id, []) + computed_egress_with_self = try(each.value.computed_egress_with_self, var.defaults.computed_egress_with_self, []) + computed_ingress_cidr_blocks = try(each.value.computed_ingress_cidr_blocks, var.defaults.computed_ingress_cidr_blocks, []) + computed_ingress_ipv6_cidr_blocks = try(each.value.computed_ingress_ipv6_cidr_blocks, var.defaults.computed_ingress_ipv6_cidr_blocks, []) + computed_ingress_prefix_list_ids = try(each.value.computed_ingress_prefix_list_ids, var.defaults.computed_ingress_prefix_list_ids, []) + computed_ingress_rules = try(each.value.computed_ingress_rules, var.defaults.computed_ingress_rules, []) + computed_ingress_with_cidr_ipv4 = try(each.value.computed_ingress_with_cidr_ipv4, var.defaults.computed_ingress_with_cidr_ipv4, []) + computed_ingress_with_cidr_ipv6 = try(each.value.computed_ingress_with_cidr_ipv6, var.defaults.computed_ingress_with_cidr_ipv6, []) + computed_ingress_with_prefix_list_id = try(each.value.computed_ingress_with_prefix_list_id, var.defaults.computed_ingress_with_prefix_list_id, []) + computed_ingress_with_referenced_security_group_id = try(each.value.computed_ingress_with_referenced_security_group_id, var.defaults.computed_ingress_with_referenced_security_group_id, []) + computed_ingress_with_self = try(each.value.computed_ingress_with_self, var.defaults.computed_ingress_with_self, []) + create = try(each.value.create, var.defaults.create, true) + description = try(each.value.description, var.defaults.description, "Security Group managed by Terraform") + egress_cidr_ipv4 = try(each.value.egress_cidr_ipv4, var.defaults.egress_cidr_ipv4, ["0.0.0.0/0"]) + egress_cidr_ipv6 = try(each.value.egress_cidr_ipv6, var.defaults.egress_cidr_ipv6, ["::/0"]) + egress_prefix_list_ids = try(each.value.egress_prefix_list_ids, var.defaults.egress_prefix_list_ids, []) + egress_rules = try(each.value.egress_rules, var.defaults.egress_rules, []) + egress_with_cidr_ipv4 = try(each.value.egress_with_cidr_ipv4, var.defaults.egress_with_cidr_ipv4, []) + egress_with_cidr_ipv6 = try(each.value.egress_with_cidr_ipv6, var.defaults.egress_with_cidr_ipv6, []) + egress_with_prefix_list_id = try(each.value.egress_with_prefix_list_id, var.defaults.egress_with_prefix_list_id, []) + egress_with_referenced_security_group_id = try(each.value.egress_with_referenced_security_group_id, var.defaults.egress_with_referenced_security_group_id, []) + egress_with_self = try(each.value.egress_with_self, var.defaults.egress_with_self, []) + ingress_cidr_ipv4 = try(each.value.ingress_cidr_ipv4, var.defaults.ingress_cidr_ipv4, []) + ingress_cidr_ipv6 = try(each.value.ingress_cidr_ipv6, var.defaults.ingress_cidr_ipv6, []) + ingress_prefix_list_ids = try(each.value.ingress_prefix_list_ids, var.defaults.ingress_prefix_list_ids, []) + ingress_rules = try(each.value.ingress_rules, var.defaults.ingress_rules, []) + ingress_with_cidr_ipv4 = try(each.value.ingress_with_cidr_ipv4, var.defaults.ingress_with_cidr_ipv4, []) + ingress_with_cidr_ipv6 = try(each.value.ingress_with_cidr_ipv6, var.defaults.ingress_with_cidr_ipv6, []) + ingress_with_prefix_list_id = try(each.value.ingress_with_prefix_list_id, var.defaults.ingress_with_prefix_list_id, []) + ingress_with_referenced_security_group_id = try(each.value.ingress_with_referenced_security_group_id, var.defaults.ingress_with_referenced_security_group_id, []) + ingress_with_self = try(each.value.ingress_with_self, var.defaults.ingress_with_self, []) + name = try(each.value.name, var.defaults.name) + number_of_computed_egress_cidr_blocks = try(each.value.number_of_computed_egress_cidr_blocks, var.defaults.number_of_computed_egress_cidr_blocks, 0) + number_of_computed_egress_ipv6_cidr_blocks = try(each.value.number_of_computed_egress_ipv6_cidr_blocks, var.defaults.number_of_computed_egress_ipv6_cidr_blocks, 0) + number_of_computed_egress_prefix_list_ids = try(each.value.number_of_computed_egress_prefix_list_ids, var.defaults.number_of_computed_egress_prefix_list_ids, 0) + number_of_computed_egress_rules = try(each.value.number_of_computed_egress_rules, var.defaults.number_of_computed_egress_rules, 0) + number_of_computed_egress_with_cidr_ipv4 = try(each.value.number_of_computed_egress_with_cidr_ipv4, var.defaults.number_of_computed_egress_with_cidr_ipv4, 0) + number_of_computed_egress_with_cidr_ipv6 = try(each.value.number_of_computed_egress_with_cidr_ipv6, var.defaults.number_of_computed_egress_with_cidr_ipv6, 0) + number_of_computed_egress_with_prefix_list_id = try(each.value.number_of_computed_egress_with_prefix_list_id, var.defaults.number_of_computed_egress_with_prefix_list_id, 0) + number_of_computed_egress_with_referenced_security_group_id = try(each.value.number_of_computed_egress_with_referenced_security_group_id, var.defaults.number_of_computed_egress_with_referenced_security_group_id, 0) + number_of_computed_egress_with_self = try(each.value.number_of_computed_egress_with_self, var.defaults.number_of_computed_egress_with_self, 0) + number_of_computed_ingress_cidr_blocks = try(each.value.number_of_computed_ingress_cidr_blocks, var.defaults.number_of_computed_ingress_cidr_blocks, 0) + number_of_computed_ingress_ipv6_cidr_blocks = try(each.value.number_of_computed_ingress_ipv6_cidr_blocks, var.defaults.number_of_computed_ingress_ipv6_cidr_blocks, 0) + number_of_computed_ingress_prefix_list_ids = try(each.value.number_of_computed_ingress_prefix_list_ids, var.defaults.number_of_computed_ingress_prefix_list_ids, 0) + number_of_computed_ingress_rules = try(each.value.number_of_computed_ingress_rules, var.defaults.number_of_computed_ingress_rules, 0) + number_of_computed_ingress_with_cidr_ipv4 = try(each.value.number_of_computed_ingress_with_cidr_ipv4, var.defaults.number_of_computed_ingress_with_cidr_ipv4, 0) + number_of_computed_ingress_with_cidr_ipv6 = try(each.value.number_of_computed_ingress_with_cidr_ipv6, var.defaults.number_of_computed_ingress_with_cidr_ipv6, 0) + number_of_computed_ingress_with_prefix_list_id = try(each.value.number_of_computed_ingress_with_prefix_list_id, var.defaults.number_of_computed_ingress_with_prefix_list_id, 0) + number_of_computed_ingress_with_referenced_security_group_id = try(each.value.number_of_computed_ingress_with_referenced_security_group_id, var.defaults.number_of_computed_ingress_with_referenced_security_group_id, 0) + number_of_computed_ingress_with_self = try(each.value.number_of_computed_ingress_with_self, var.defaults.number_of_computed_ingress_with_self, 0) + revoke_rules_on_delete = try(each.value.revoke_rules_on_delete, var.defaults.revoke_rules_on_delete, false) + tags = try(each.value.tags, var.defaults.tags, {}) + use_name_prefix = try(each.value.use_name_prefix, var.defaults.use_name_prefix, true) + vpc_id = try(each.value.vpc_id, var.defaults.vpc_id) } diff --git a/wrappers/grafana/main.tf b/wrappers/grafana/main.tf index 90732969..a11162f6 100644 --- a/wrappers/grafana/main.tf +++ b/wrappers/grafana/main.tf @@ -3,77 +3,77 @@ module "wrapper" { for_each = var.items - auto_computed_egress_rules = try(each.value.auto_computed_egress_rules, var.defaults.auto_computed_egress_rules, []) - auto_computed_egress_with_self = try(each.value.auto_computed_egress_with_self, var.defaults.auto_computed_egress_with_self, []) - auto_computed_ingress_rules = try(each.value.auto_computed_ingress_rules, var.defaults.auto_computed_ingress_rules, []) - auto_computed_ingress_with_self = try(each.value.auto_computed_ingress_with_self, var.defaults.auto_computed_ingress_with_self, []) - auto_egress_rules = try(each.value.auto_egress_rules, var.defaults.auto_egress_rules, ["all-all"]) - auto_egress_with_self = try(each.value.auto_egress_with_self, var.defaults.auto_egress_with_self, []) - auto_ingress_rules = try(each.value.auto_ingress_rules, var.defaults.auto_ingress_rules, ["grafana-tcp"]) - auto_ingress_with_self = try(each.value.auto_ingress_with_self, var.defaults.auto_ingress_with_self, [{ "rule" = "all-all" }]) - auto_number_of_computed_egress_rules = try(each.value.auto_number_of_computed_egress_rules, var.defaults.auto_number_of_computed_egress_rules, 0) - auto_number_of_computed_egress_with_self = try(each.value.auto_number_of_computed_egress_with_self, var.defaults.auto_number_of_computed_egress_with_self, 0) - auto_number_of_computed_ingress_rules = try(each.value.auto_number_of_computed_ingress_rules, var.defaults.auto_number_of_computed_ingress_rules, 0) - auto_number_of_computed_ingress_with_self = try(each.value.auto_number_of_computed_ingress_with_self, var.defaults.auto_number_of_computed_ingress_with_self, 0) - computed_egress_cidr_blocks = try(each.value.computed_egress_cidr_blocks, var.defaults.computed_egress_cidr_blocks, ["0.0.0.0/0"]) - computed_egress_ipv6_cidr_blocks = try(each.value.computed_egress_ipv6_cidr_blocks, var.defaults.computed_egress_ipv6_cidr_blocks, ["::/0"]) - computed_egress_prefix_list_ids = try(each.value.computed_egress_prefix_list_ids, var.defaults.computed_egress_prefix_list_ids, []) - computed_egress_rules = try(each.value.computed_egress_rules, var.defaults.computed_egress_rules, []) - computed_egress_with_cidr_blocks = try(each.value.computed_egress_with_cidr_blocks, var.defaults.computed_egress_with_cidr_blocks, []) - computed_egress_with_ipv6_cidr_blocks = try(each.value.computed_egress_with_ipv6_cidr_blocks, var.defaults.computed_egress_with_ipv6_cidr_blocks, []) - computed_egress_with_prefix_list_ids = try(each.value.computed_egress_with_prefix_list_ids, var.defaults.computed_egress_with_prefix_list_ids, []) - computed_egress_with_self = try(each.value.computed_egress_with_self, var.defaults.computed_egress_with_self, []) - computed_egress_with_source_security_group_id = try(each.value.computed_egress_with_source_security_group_id, var.defaults.computed_egress_with_source_security_group_id, []) - computed_ingress_cidr_blocks = try(each.value.computed_ingress_cidr_blocks, var.defaults.computed_ingress_cidr_blocks, []) - computed_ingress_ipv6_cidr_blocks = try(each.value.computed_ingress_ipv6_cidr_blocks, var.defaults.computed_ingress_ipv6_cidr_blocks, []) - computed_ingress_prefix_list_ids = try(each.value.computed_ingress_prefix_list_ids, var.defaults.computed_ingress_prefix_list_ids, []) - computed_ingress_rules = try(each.value.computed_ingress_rules, var.defaults.computed_ingress_rules, []) - computed_ingress_with_cidr_blocks = try(each.value.computed_ingress_with_cidr_blocks, var.defaults.computed_ingress_with_cidr_blocks, []) - computed_ingress_with_ipv6_cidr_blocks = try(each.value.computed_ingress_with_ipv6_cidr_blocks, var.defaults.computed_ingress_with_ipv6_cidr_blocks, []) - computed_ingress_with_prefix_list_ids = try(each.value.computed_ingress_with_prefix_list_ids, var.defaults.computed_ingress_with_prefix_list_ids, []) - computed_ingress_with_self = try(each.value.computed_ingress_with_self, var.defaults.computed_ingress_with_self, []) - computed_ingress_with_source_security_group_id = try(each.value.computed_ingress_with_source_security_group_id, var.defaults.computed_ingress_with_source_security_group_id, []) - create = try(each.value.create, var.defaults.create, true) - description = try(each.value.description, var.defaults.description, "Security Group managed by Terraform") - egress_cidr_blocks = try(each.value.egress_cidr_blocks, var.defaults.egress_cidr_blocks, ["0.0.0.0/0"]) - egress_ipv6_cidr_blocks = try(each.value.egress_ipv6_cidr_blocks, var.defaults.egress_ipv6_cidr_blocks, ["::/0"]) - egress_prefix_list_ids = try(each.value.egress_prefix_list_ids, var.defaults.egress_prefix_list_ids, []) - egress_rules = try(each.value.egress_rules, var.defaults.egress_rules, []) - egress_with_cidr_blocks = try(each.value.egress_with_cidr_blocks, var.defaults.egress_with_cidr_blocks, []) - egress_with_ipv6_cidr_blocks = try(each.value.egress_with_ipv6_cidr_blocks, var.defaults.egress_with_ipv6_cidr_blocks, []) - egress_with_prefix_list_ids = try(each.value.egress_with_prefix_list_ids, var.defaults.egress_with_prefix_list_ids, []) - egress_with_self = try(each.value.egress_with_self, var.defaults.egress_with_self, []) - egress_with_source_security_group_id = try(each.value.egress_with_source_security_group_id, var.defaults.egress_with_source_security_group_id, []) - ingress_cidr_blocks = try(each.value.ingress_cidr_blocks, var.defaults.ingress_cidr_blocks, []) - ingress_ipv6_cidr_blocks = try(each.value.ingress_ipv6_cidr_blocks, var.defaults.ingress_ipv6_cidr_blocks, []) - ingress_prefix_list_ids = try(each.value.ingress_prefix_list_ids, var.defaults.ingress_prefix_list_ids, []) - ingress_rules = try(each.value.ingress_rules, var.defaults.ingress_rules, []) - ingress_with_cidr_blocks = try(each.value.ingress_with_cidr_blocks, var.defaults.ingress_with_cidr_blocks, []) - ingress_with_ipv6_cidr_blocks = try(each.value.ingress_with_ipv6_cidr_blocks, var.defaults.ingress_with_ipv6_cidr_blocks, []) - ingress_with_prefix_list_ids = try(each.value.ingress_with_prefix_list_ids, var.defaults.ingress_with_prefix_list_ids, []) - ingress_with_self = try(each.value.ingress_with_self, var.defaults.ingress_with_self, []) - ingress_with_source_security_group_id = try(each.value.ingress_with_source_security_group_id, var.defaults.ingress_with_source_security_group_id, []) - name = try(each.value.name, var.defaults.name) - number_of_computed_egress_cidr_blocks = try(each.value.number_of_computed_egress_cidr_blocks, var.defaults.number_of_computed_egress_cidr_blocks, 0) - number_of_computed_egress_ipv6_cidr_blocks = try(each.value.number_of_computed_egress_ipv6_cidr_blocks, var.defaults.number_of_computed_egress_ipv6_cidr_blocks, 0) - number_of_computed_egress_prefix_list_ids = try(each.value.number_of_computed_egress_prefix_list_ids, var.defaults.number_of_computed_egress_prefix_list_ids, 0) - number_of_computed_egress_rules = try(each.value.number_of_computed_egress_rules, var.defaults.number_of_computed_egress_rules, 0) - number_of_computed_egress_with_cidr_blocks = try(each.value.number_of_computed_egress_with_cidr_blocks, var.defaults.number_of_computed_egress_with_cidr_blocks, 0) - number_of_computed_egress_with_ipv6_cidr_blocks = try(each.value.number_of_computed_egress_with_ipv6_cidr_blocks, var.defaults.number_of_computed_egress_with_ipv6_cidr_blocks, 0) - number_of_computed_egress_with_prefix_list_ids = try(each.value.number_of_computed_egress_with_prefix_list_ids, var.defaults.number_of_computed_egress_with_prefix_list_ids, 0) - number_of_computed_egress_with_self = try(each.value.number_of_computed_egress_with_self, var.defaults.number_of_computed_egress_with_self, 0) - number_of_computed_egress_with_source_security_group_id = try(each.value.number_of_computed_egress_with_source_security_group_id, var.defaults.number_of_computed_egress_with_source_security_group_id, 0) - number_of_computed_ingress_cidr_blocks = try(each.value.number_of_computed_ingress_cidr_blocks, var.defaults.number_of_computed_ingress_cidr_blocks, 0) - number_of_computed_ingress_ipv6_cidr_blocks = try(each.value.number_of_computed_ingress_ipv6_cidr_blocks, var.defaults.number_of_computed_ingress_ipv6_cidr_blocks, 0) - number_of_computed_ingress_prefix_list_ids = try(each.value.number_of_computed_ingress_prefix_list_ids, var.defaults.number_of_computed_ingress_prefix_list_ids, 0) - number_of_computed_ingress_rules = try(each.value.number_of_computed_ingress_rules, var.defaults.number_of_computed_ingress_rules, 0) - number_of_computed_ingress_with_cidr_blocks = try(each.value.number_of_computed_ingress_with_cidr_blocks, var.defaults.number_of_computed_ingress_with_cidr_blocks, 0) - number_of_computed_ingress_with_ipv6_cidr_blocks = try(each.value.number_of_computed_ingress_with_ipv6_cidr_blocks, var.defaults.number_of_computed_ingress_with_ipv6_cidr_blocks, 0) - number_of_computed_ingress_with_prefix_list_ids = try(each.value.number_of_computed_ingress_with_prefix_list_ids, var.defaults.number_of_computed_ingress_with_prefix_list_ids, 0) - number_of_computed_ingress_with_self = try(each.value.number_of_computed_ingress_with_self, var.defaults.number_of_computed_ingress_with_self, 0) - number_of_computed_ingress_with_source_security_group_id = try(each.value.number_of_computed_ingress_with_source_security_group_id, var.defaults.number_of_computed_ingress_with_source_security_group_id, 0) - revoke_rules_on_delete = try(each.value.revoke_rules_on_delete, var.defaults.revoke_rules_on_delete, false) - tags = try(each.value.tags, var.defaults.tags, {}) - use_name_prefix = try(each.value.use_name_prefix, var.defaults.use_name_prefix, true) - vpc_id = try(each.value.vpc_id, var.defaults.vpc_id) + auto_computed_egress_rules = try(each.value.auto_computed_egress_rules, var.defaults.auto_computed_egress_rules, []) + auto_computed_egress_with_self = try(each.value.auto_computed_egress_with_self, var.defaults.auto_computed_egress_with_self, []) + auto_computed_ingress_rules = try(each.value.auto_computed_ingress_rules, var.defaults.auto_computed_ingress_rules, []) + auto_computed_ingress_with_self = try(each.value.auto_computed_ingress_with_self, var.defaults.auto_computed_ingress_with_self, []) + auto_egress_rules = try(each.value.auto_egress_rules, var.defaults.auto_egress_rules, ["all-all"]) + auto_egress_with_self = try(each.value.auto_egress_with_self, var.defaults.auto_egress_with_self, []) + auto_ingress_rules = try(each.value.auto_ingress_rules, var.defaults.auto_ingress_rules, ["grafana-tcp"]) + auto_ingress_with_self = try(each.value.auto_ingress_with_self, var.defaults.auto_ingress_with_self, [{ "rule" = "all-all" }]) + auto_number_of_computed_egress_rules = try(each.value.auto_number_of_computed_egress_rules, var.defaults.auto_number_of_computed_egress_rules, 0) + auto_number_of_computed_egress_with_self = try(each.value.auto_number_of_computed_egress_with_self, var.defaults.auto_number_of_computed_egress_with_self, 0) + auto_number_of_computed_ingress_rules = try(each.value.auto_number_of_computed_ingress_rules, var.defaults.auto_number_of_computed_ingress_rules, 0) + auto_number_of_computed_ingress_with_self = try(each.value.auto_number_of_computed_ingress_with_self, var.defaults.auto_number_of_computed_ingress_with_self, 0) + computed_egress_cidr_blocks = try(each.value.computed_egress_cidr_blocks, var.defaults.computed_egress_cidr_blocks, ["0.0.0.0/0"]) + computed_egress_ipv6_cidr_blocks = try(each.value.computed_egress_ipv6_cidr_blocks, var.defaults.computed_egress_ipv6_cidr_blocks, ["::/0"]) + computed_egress_prefix_list_ids = try(each.value.computed_egress_prefix_list_ids, var.defaults.computed_egress_prefix_list_ids, []) + computed_egress_rules = try(each.value.computed_egress_rules, var.defaults.computed_egress_rules, []) + computed_egress_with_cidr_ipv4 = try(each.value.computed_egress_with_cidr_ipv4, var.defaults.computed_egress_with_cidr_ipv4, []) + computed_egress_with_cidr_ipv6 = try(each.value.computed_egress_with_cidr_ipv6, var.defaults.computed_egress_with_cidr_ipv6, []) + computed_egress_with_prefix_list_id = try(each.value.computed_egress_with_prefix_list_id, var.defaults.computed_egress_with_prefix_list_id, []) + computed_egress_with_referenced_security_group_id = try(each.value.computed_egress_with_referenced_security_group_id, var.defaults.computed_egress_with_referenced_security_group_id, []) + computed_egress_with_self = try(each.value.computed_egress_with_self, var.defaults.computed_egress_with_self, []) + computed_ingress_cidr_blocks = try(each.value.computed_ingress_cidr_blocks, var.defaults.computed_ingress_cidr_blocks, []) + computed_ingress_ipv6_cidr_blocks = try(each.value.computed_ingress_ipv6_cidr_blocks, var.defaults.computed_ingress_ipv6_cidr_blocks, []) + computed_ingress_prefix_list_ids = try(each.value.computed_ingress_prefix_list_ids, var.defaults.computed_ingress_prefix_list_ids, []) + computed_ingress_rules = try(each.value.computed_ingress_rules, var.defaults.computed_ingress_rules, []) + computed_ingress_with_cidr_ipv4 = try(each.value.computed_ingress_with_cidr_ipv4, var.defaults.computed_ingress_with_cidr_ipv4, []) + computed_ingress_with_cidr_ipv6 = try(each.value.computed_ingress_with_cidr_ipv6, var.defaults.computed_ingress_with_cidr_ipv6, []) + computed_ingress_with_prefix_list_id = try(each.value.computed_ingress_with_prefix_list_id, var.defaults.computed_ingress_with_prefix_list_id, []) + computed_ingress_with_referenced_security_group_id = try(each.value.computed_ingress_with_referenced_security_group_id, var.defaults.computed_ingress_with_referenced_security_group_id, []) + computed_ingress_with_self = try(each.value.computed_ingress_with_self, var.defaults.computed_ingress_with_self, []) + create = try(each.value.create, var.defaults.create, true) + description = try(each.value.description, var.defaults.description, "Security Group managed by Terraform") + egress_cidr_ipv4 = try(each.value.egress_cidr_ipv4, var.defaults.egress_cidr_ipv4, ["0.0.0.0/0"]) + egress_cidr_ipv6 = try(each.value.egress_cidr_ipv6, var.defaults.egress_cidr_ipv6, ["::/0"]) + egress_prefix_list_ids = try(each.value.egress_prefix_list_ids, var.defaults.egress_prefix_list_ids, []) + egress_rules = try(each.value.egress_rules, var.defaults.egress_rules, []) + egress_with_cidr_ipv4 = try(each.value.egress_with_cidr_ipv4, var.defaults.egress_with_cidr_ipv4, []) + egress_with_cidr_ipv6 = try(each.value.egress_with_cidr_ipv6, var.defaults.egress_with_cidr_ipv6, []) + egress_with_prefix_list_id = try(each.value.egress_with_prefix_list_id, var.defaults.egress_with_prefix_list_id, []) + egress_with_referenced_security_group_id = try(each.value.egress_with_referenced_security_group_id, var.defaults.egress_with_referenced_security_group_id, []) + egress_with_self = try(each.value.egress_with_self, var.defaults.egress_with_self, []) + ingress_cidr_ipv4 = try(each.value.ingress_cidr_ipv4, var.defaults.ingress_cidr_ipv4, []) + ingress_cidr_ipv6 = try(each.value.ingress_cidr_ipv6, var.defaults.ingress_cidr_ipv6, []) + ingress_prefix_list_ids = try(each.value.ingress_prefix_list_ids, var.defaults.ingress_prefix_list_ids, []) + ingress_rules = try(each.value.ingress_rules, var.defaults.ingress_rules, []) + ingress_with_cidr_ipv4 = try(each.value.ingress_with_cidr_ipv4, var.defaults.ingress_with_cidr_ipv4, []) + ingress_with_cidr_ipv6 = try(each.value.ingress_with_cidr_ipv6, var.defaults.ingress_with_cidr_ipv6, []) + ingress_with_prefix_list_id = try(each.value.ingress_with_prefix_list_id, var.defaults.ingress_with_prefix_list_id, []) + ingress_with_referenced_security_group_id = try(each.value.ingress_with_referenced_security_group_id, var.defaults.ingress_with_referenced_security_group_id, []) + ingress_with_self = try(each.value.ingress_with_self, var.defaults.ingress_with_self, []) + name = try(each.value.name, var.defaults.name) + number_of_computed_egress_cidr_blocks = try(each.value.number_of_computed_egress_cidr_blocks, var.defaults.number_of_computed_egress_cidr_blocks, 0) + number_of_computed_egress_ipv6_cidr_blocks = try(each.value.number_of_computed_egress_ipv6_cidr_blocks, var.defaults.number_of_computed_egress_ipv6_cidr_blocks, 0) + number_of_computed_egress_prefix_list_ids = try(each.value.number_of_computed_egress_prefix_list_ids, var.defaults.number_of_computed_egress_prefix_list_ids, 0) + number_of_computed_egress_rules = try(each.value.number_of_computed_egress_rules, var.defaults.number_of_computed_egress_rules, 0) + number_of_computed_egress_with_cidr_ipv4 = try(each.value.number_of_computed_egress_with_cidr_ipv4, var.defaults.number_of_computed_egress_with_cidr_ipv4, 0) + number_of_computed_egress_with_cidr_ipv6 = try(each.value.number_of_computed_egress_with_cidr_ipv6, var.defaults.number_of_computed_egress_with_cidr_ipv6, 0) + number_of_computed_egress_with_prefix_list_id = try(each.value.number_of_computed_egress_with_prefix_list_id, var.defaults.number_of_computed_egress_with_prefix_list_id, 0) + number_of_computed_egress_with_referenced_security_group_id = try(each.value.number_of_computed_egress_with_referenced_security_group_id, var.defaults.number_of_computed_egress_with_referenced_security_group_id, 0) + number_of_computed_egress_with_self = try(each.value.number_of_computed_egress_with_self, var.defaults.number_of_computed_egress_with_self, 0) + number_of_computed_ingress_cidr_blocks = try(each.value.number_of_computed_ingress_cidr_blocks, var.defaults.number_of_computed_ingress_cidr_blocks, 0) + number_of_computed_ingress_ipv6_cidr_blocks = try(each.value.number_of_computed_ingress_ipv6_cidr_blocks, var.defaults.number_of_computed_ingress_ipv6_cidr_blocks, 0) + number_of_computed_ingress_prefix_list_ids = try(each.value.number_of_computed_ingress_prefix_list_ids, var.defaults.number_of_computed_ingress_prefix_list_ids, 0) + number_of_computed_ingress_rules = try(each.value.number_of_computed_ingress_rules, var.defaults.number_of_computed_ingress_rules, 0) + number_of_computed_ingress_with_cidr_ipv4 = try(each.value.number_of_computed_ingress_with_cidr_ipv4, var.defaults.number_of_computed_ingress_with_cidr_ipv4, 0) + number_of_computed_ingress_with_cidr_ipv6 = try(each.value.number_of_computed_ingress_with_cidr_ipv6, var.defaults.number_of_computed_ingress_with_cidr_ipv6, 0) + number_of_computed_ingress_with_prefix_list_id = try(each.value.number_of_computed_ingress_with_prefix_list_id, var.defaults.number_of_computed_ingress_with_prefix_list_id, 0) + number_of_computed_ingress_with_referenced_security_group_id = try(each.value.number_of_computed_ingress_with_referenced_security_group_id, var.defaults.number_of_computed_ingress_with_referenced_security_group_id, 0) + number_of_computed_ingress_with_self = try(each.value.number_of_computed_ingress_with_self, var.defaults.number_of_computed_ingress_with_self, 0) + revoke_rules_on_delete = try(each.value.revoke_rules_on_delete, var.defaults.revoke_rules_on_delete, false) + tags = try(each.value.tags, var.defaults.tags, {}) + use_name_prefix = try(each.value.use_name_prefix, var.defaults.use_name_prefix, true) + vpc_id = try(each.value.vpc_id, var.defaults.vpc_id) } diff --git a/wrappers/graphite-statsd/main.tf b/wrappers/graphite-statsd/main.tf index 5a84f89e..30eec3b6 100644 --- a/wrappers/graphite-statsd/main.tf +++ b/wrappers/graphite-statsd/main.tf @@ -3,77 +3,77 @@ module "wrapper" { for_each = var.items - auto_computed_egress_rules = try(each.value.auto_computed_egress_rules, var.defaults.auto_computed_egress_rules, []) - auto_computed_egress_with_self = try(each.value.auto_computed_egress_with_self, var.defaults.auto_computed_egress_with_self, []) - auto_computed_ingress_rules = try(each.value.auto_computed_ingress_rules, var.defaults.auto_computed_ingress_rules, []) - auto_computed_ingress_with_self = try(each.value.auto_computed_ingress_with_self, var.defaults.auto_computed_ingress_with_self, []) - auto_egress_rules = try(each.value.auto_egress_rules, var.defaults.auto_egress_rules, ["all-all"]) - auto_egress_with_self = try(each.value.auto_egress_with_self, var.defaults.auto_egress_with_self, []) - auto_ingress_rules = try(each.value.auto_ingress_rules, var.defaults.auto_ingress_rules, ["graphite-webui", "graphite-2003-tcp", "graphite-2004-tcp", "graphite-2023-tcp", "graphite-2024-tcp", "graphite-8080-tcp", "graphite-8125-tcp", "graphite-8125-udp", "graphite-8126-tcp"]) - auto_ingress_with_self = try(each.value.auto_ingress_with_self, var.defaults.auto_ingress_with_self, [{ "rule" = "all-all" }]) - auto_number_of_computed_egress_rules = try(each.value.auto_number_of_computed_egress_rules, var.defaults.auto_number_of_computed_egress_rules, 0) - auto_number_of_computed_egress_with_self = try(each.value.auto_number_of_computed_egress_with_self, var.defaults.auto_number_of_computed_egress_with_self, 0) - auto_number_of_computed_ingress_rules = try(each.value.auto_number_of_computed_ingress_rules, var.defaults.auto_number_of_computed_ingress_rules, 0) - auto_number_of_computed_ingress_with_self = try(each.value.auto_number_of_computed_ingress_with_self, var.defaults.auto_number_of_computed_ingress_with_self, 0) - computed_egress_cidr_blocks = try(each.value.computed_egress_cidr_blocks, var.defaults.computed_egress_cidr_blocks, ["0.0.0.0/0"]) - computed_egress_ipv6_cidr_blocks = try(each.value.computed_egress_ipv6_cidr_blocks, var.defaults.computed_egress_ipv6_cidr_blocks, ["::/0"]) - computed_egress_prefix_list_ids = try(each.value.computed_egress_prefix_list_ids, var.defaults.computed_egress_prefix_list_ids, []) - computed_egress_rules = try(each.value.computed_egress_rules, var.defaults.computed_egress_rules, []) - computed_egress_with_cidr_blocks = try(each.value.computed_egress_with_cidr_blocks, var.defaults.computed_egress_with_cidr_blocks, []) - computed_egress_with_ipv6_cidr_blocks = try(each.value.computed_egress_with_ipv6_cidr_blocks, var.defaults.computed_egress_with_ipv6_cidr_blocks, []) - computed_egress_with_prefix_list_ids = try(each.value.computed_egress_with_prefix_list_ids, var.defaults.computed_egress_with_prefix_list_ids, []) - computed_egress_with_self = try(each.value.computed_egress_with_self, var.defaults.computed_egress_with_self, []) - computed_egress_with_source_security_group_id = try(each.value.computed_egress_with_source_security_group_id, var.defaults.computed_egress_with_source_security_group_id, []) - computed_ingress_cidr_blocks = try(each.value.computed_ingress_cidr_blocks, var.defaults.computed_ingress_cidr_blocks, []) - computed_ingress_ipv6_cidr_blocks = try(each.value.computed_ingress_ipv6_cidr_blocks, var.defaults.computed_ingress_ipv6_cidr_blocks, []) - computed_ingress_prefix_list_ids = try(each.value.computed_ingress_prefix_list_ids, var.defaults.computed_ingress_prefix_list_ids, []) - computed_ingress_rules = try(each.value.computed_ingress_rules, var.defaults.computed_ingress_rules, []) - computed_ingress_with_cidr_blocks = try(each.value.computed_ingress_with_cidr_blocks, var.defaults.computed_ingress_with_cidr_blocks, []) - computed_ingress_with_ipv6_cidr_blocks = try(each.value.computed_ingress_with_ipv6_cidr_blocks, var.defaults.computed_ingress_with_ipv6_cidr_blocks, []) - computed_ingress_with_prefix_list_ids = try(each.value.computed_ingress_with_prefix_list_ids, var.defaults.computed_ingress_with_prefix_list_ids, []) - computed_ingress_with_self = try(each.value.computed_ingress_with_self, var.defaults.computed_ingress_with_self, []) - computed_ingress_with_source_security_group_id = try(each.value.computed_ingress_with_source_security_group_id, var.defaults.computed_ingress_with_source_security_group_id, []) - create = try(each.value.create, var.defaults.create, true) - description = try(each.value.description, var.defaults.description, "Security Group managed by Terraform") - egress_cidr_blocks = try(each.value.egress_cidr_blocks, var.defaults.egress_cidr_blocks, ["0.0.0.0/0"]) - egress_ipv6_cidr_blocks = try(each.value.egress_ipv6_cidr_blocks, var.defaults.egress_ipv6_cidr_blocks, ["::/0"]) - egress_prefix_list_ids = try(each.value.egress_prefix_list_ids, var.defaults.egress_prefix_list_ids, []) - egress_rules = try(each.value.egress_rules, var.defaults.egress_rules, []) - egress_with_cidr_blocks = try(each.value.egress_with_cidr_blocks, var.defaults.egress_with_cidr_blocks, []) - egress_with_ipv6_cidr_blocks = try(each.value.egress_with_ipv6_cidr_blocks, var.defaults.egress_with_ipv6_cidr_blocks, []) - egress_with_prefix_list_ids = try(each.value.egress_with_prefix_list_ids, var.defaults.egress_with_prefix_list_ids, []) - egress_with_self = try(each.value.egress_with_self, var.defaults.egress_with_self, []) - egress_with_source_security_group_id = try(each.value.egress_with_source_security_group_id, var.defaults.egress_with_source_security_group_id, []) - ingress_cidr_blocks = try(each.value.ingress_cidr_blocks, var.defaults.ingress_cidr_blocks, []) - ingress_ipv6_cidr_blocks = try(each.value.ingress_ipv6_cidr_blocks, var.defaults.ingress_ipv6_cidr_blocks, []) - ingress_prefix_list_ids = try(each.value.ingress_prefix_list_ids, var.defaults.ingress_prefix_list_ids, []) - ingress_rules = try(each.value.ingress_rules, var.defaults.ingress_rules, []) - ingress_with_cidr_blocks = try(each.value.ingress_with_cidr_blocks, var.defaults.ingress_with_cidr_blocks, []) - ingress_with_ipv6_cidr_blocks = try(each.value.ingress_with_ipv6_cidr_blocks, var.defaults.ingress_with_ipv6_cidr_blocks, []) - ingress_with_prefix_list_ids = try(each.value.ingress_with_prefix_list_ids, var.defaults.ingress_with_prefix_list_ids, []) - ingress_with_self = try(each.value.ingress_with_self, var.defaults.ingress_with_self, []) - ingress_with_source_security_group_id = try(each.value.ingress_with_source_security_group_id, var.defaults.ingress_with_source_security_group_id, []) - name = try(each.value.name, var.defaults.name) - number_of_computed_egress_cidr_blocks = try(each.value.number_of_computed_egress_cidr_blocks, var.defaults.number_of_computed_egress_cidr_blocks, 0) - number_of_computed_egress_ipv6_cidr_blocks = try(each.value.number_of_computed_egress_ipv6_cidr_blocks, var.defaults.number_of_computed_egress_ipv6_cidr_blocks, 0) - number_of_computed_egress_prefix_list_ids = try(each.value.number_of_computed_egress_prefix_list_ids, var.defaults.number_of_computed_egress_prefix_list_ids, 0) - number_of_computed_egress_rules = try(each.value.number_of_computed_egress_rules, var.defaults.number_of_computed_egress_rules, 0) - number_of_computed_egress_with_cidr_blocks = try(each.value.number_of_computed_egress_with_cidr_blocks, var.defaults.number_of_computed_egress_with_cidr_blocks, 0) - number_of_computed_egress_with_ipv6_cidr_blocks = try(each.value.number_of_computed_egress_with_ipv6_cidr_blocks, var.defaults.number_of_computed_egress_with_ipv6_cidr_blocks, 0) - number_of_computed_egress_with_prefix_list_ids = try(each.value.number_of_computed_egress_with_prefix_list_ids, var.defaults.number_of_computed_egress_with_prefix_list_ids, 0) - number_of_computed_egress_with_self = try(each.value.number_of_computed_egress_with_self, var.defaults.number_of_computed_egress_with_self, 0) - number_of_computed_egress_with_source_security_group_id = try(each.value.number_of_computed_egress_with_source_security_group_id, var.defaults.number_of_computed_egress_with_source_security_group_id, 0) - number_of_computed_ingress_cidr_blocks = try(each.value.number_of_computed_ingress_cidr_blocks, var.defaults.number_of_computed_ingress_cidr_blocks, 0) - number_of_computed_ingress_ipv6_cidr_blocks = try(each.value.number_of_computed_ingress_ipv6_cidr_blocks, var.defaults.number_of_computed_ingress_ipv6_cidr_blocks, 0) - number_of_computed_ingress_prefix_list_ids = try(each.value.number_of_computed_ingress_prefix_list_ids, var.defaults.number_of_computed_ingress_prefix_list_ids, 0) - number_of_computed_ingress_rules = try(each.value.number_of_computed_ingress_rules, var.defaults.number_of_computed_ingress_rules, 0) - number_of_computed_ingress_with_cidr_blocks = try(each.value.number_of_computed_ingress_with_cidr_blocks, var.defaults.number_of_computed_ingress_with_cidr_blocks, 0) - number_of_computed_ingress_with_ipv6_cidr_blocks = try(each.value.number_of_computed_ingress_with_ipv6_cidr_blocks, var.defaults.number_of_computed_ingress_with_ipv6_cidr_blocks, 0) - number_of_computed_ingress_with_prefix_list_ids = try(each.value.number_of_computed_ingress_with_prefix_list_ids, var.defaults.number_of_computed_ingress_with_prefix_list_ids, 0) - number_of_computed_ingress_with_self = try(each.value.number_of_computed_ingress_with_self, var.defaults.number_of_computed_ingress_with_self, 0) - number_of_computed_ingress_with_source_security_group_id = try(each.value.number_of_computed_ingress_with_source_security_group_id, var.defaults.number_of_computed_ingress_with_source_security_group_id, 0) - revoke_rules_on_delete = try(each.value.revoke_rules_on_delete, var.defaults.revoke_rules_on_delete, false) - tags = try(each.value.tags, var.defaults.tags, {}) - use_name_prefix = try(each.value.use_name_prefix, var.defaults.use_name_prefix, true) - vpc_id = try(each.value.vpc_id, var.defaults.vpc_id) + auto_computed_egress_rules = try(each.value.auto_computed_egress_rules, var.defaults.auto_computed_egress_rules, []) + auto_computed_egress_with_self = try(each.value.auto_computed_egress_with_self, var.defaults.auto_computed_egress_with_self, []) + auto_computed_ingress_rules = try(each.value.auto_computed_ingress_rules, var.defaults.auto_computed_ingress_rules, []) + auto_computed_ingress_with_self = try(each.value.auto_computed_ingress_with_self, var.defaults.auto_computed_ingress_with_self, []) + auto_egress_rules = try(each.value.auto_egress_rules, var.defaults.auto_egress_rules, ["all-all"]) + auto_egress_with_self = try(each.value.auto_egress_with_self, var.defaults.auto_egress_with_self, []) + auto_ingress_rules = try(each.value.auto_ingress_rules, var.defaults.auto_ingress_rules, ["graphite-webui", "graphite-2003-tcp", "graphite-2004-tcp", "graphite-2023-tcp", "graphite-2024-tcp", "graphite-8080-tcp", "graphite-8125-tcp", "graphite-8125-udp", "graphite-8126-tcp"]) + auto_ingress_with_self = try(each.value.auto_ingress_with_self, var.defaults.auto_ingress_with_self, [{ "rule" = "all-all" }]) + auto_number_of_computed_egress_rules = try(each.value.auto_number_of_computed_egress_rules, var.defaults.auto_number_of_computed_egress_rules, 0) + auto_number_of_computed_egress_with_self = try(each.value.auto_number_of_computed_egress_with_self, var.defaults.auto_number_of_computed_egress_with_self, 0) + auto_number_of_computed_ingress_rules = try(each.value.auto_number_of_computed_ingress_rules, var.defaults.auto_number_of_computed_ingress_rules, 0) + auto_number_of_computed_ingress_with_self = try(each.value.auto_number_of_computed_ingress_with_self, var.defaults.auto_number_of_computed_ingress_with_self, 0) + computed_egress_cidr_blocks = try(each.value.computed_egress_cidr_blocks, var.defaults.computed_egress_cidr_blocks, ["0.0.0.0/0"]) + computed_egress_ipv6_cidr_blocks = try(each.value.computed_egress_ipv6_cidr_blocks, var.defaults.computed_egress_ipv6_cidr_blocks, ["::/0"]) + computed_egress_prefix_list_ids = try(each.value.computed_egress_prefix_list_ids, var.defaults.computed_egress_prefix_list_ids, []) + computed_egress_rules = try(each.value.computed_egress_rules, var.defaults.computed_egress_rules, []) + computed_egress_with_cidr_ipv4 = try(each.value.computed_egress_with_cidr_ipv4, var.defaults.computed_egress_with_cidr_ipv4, []) + computed_egress_with_cidr_ipv6 = try(each.value.computed_egress_with_cidr_ipv6, var.defaults.computed_egress_with_cidr_ipv6, []) + computed_egress_with_prefix_list_id = try(each.value.computed_egress_with_prefix_list_id, var.defaults.computed_egress_with_prefix_list_id, []) + computed_egress_with_referenced_security_group_id = try(each.value.computed_egress_with_referenced_security_group_id, var.defaults.computed_egress_with_referenced_security_group_id, []) + computed_egress_with_self = try(each.value.computed_egress_with_self, var.defaults.computed_egress_with_self, []) + computed_ingress_cidr_blocks = try(each.value.computed_ingress_cidr_blocks, var.defaults.computed_ingress_cidr_blocks, []) + computed_ingress_ipv6_cidr_blocks = try(each.value.computed_ingress_ipv6_cidr_blocks, var.defaults.computed_ingress_ipv6_cidr_blocks, []) + computed_ingress_prefix_list_ids = try(each.value.computed_ingress_prefix_list_ids, var.defaults.computed_ingress_prefix_list_ids, []) + computed_ingress_rules = try(each.value.computed_ingress_rules, var.defaults.computed_ingress_rules, []) + computed_ingress_with_cidr_ipv4 = try(each.value.computed_ingress_with_cidr_ipv4, var.defaults.computed_ingress_with_cidr_ipv4, []) + computed_ingress_with_cidr_ipv6 = try(each.value.computed_ingress_with_cidr_ipv6, var.defaults.computed_ingress_with_cidr_ipv6, []) + computed_ingress_with_prefix_list_id = try(each.value.computed_ingress_with_prefix_list_id, var.defaults.computed_ingress_with_prefix_list_id, []) + computed_ingress_with_referenced_security_group_id = try(each.value.computed_ingress_with_referenced_security_group_id, var.defaults.computed_ingress_with_referenced_security_group_id, []) + computed_ingress_with_self = try(each.value.computed_ingress_with_self, var.defaults.computed_ingress_with_self, []) + create = try(each.value.create, var.defaults.create, true) + description = try(each.value.description, var.defaults.description, "Security Group managed by Terraform") + egress_cidr_ipv4 = try(each.value.egress_cidr_ipv4, var.defaults.egress_cidr_ipv4, ["0.0.0.0/0"]) + egress_cidr_ipv6 = try(each.value.egress_cidr_ipv6, var.defaults.egress_cidr_ipv6, ["::/0"]) + egress_prefix_list_ids = try(each.value.egress_prefix_list_ids, var.defaults.egress_prefix_list_ids, []) + egress_rules = try(each.value.egress_rules, var.defaults.egress_rules, []) + egress_with_cidr_ipv4 = try(each.value.egress_with_cidr_ipv4, var.defaults.egress_with_cidr_ipv4, []) + egress_with_cidr_ipv6 = try(each.value.egress_with_cidr_ipv6, var.defaults.egress_with_cidr_ipv6, []) + egress_with_prefix_list_id = try(each.value.egress_with_prefix_list_id, var.defaults.egress_with_prefix_list_id, []) + egress_with_referenced_security_group_id = try(each.value.egress_with_referenced_security_group_id, var.defaults.egress_with_referenced_security_group_id, []) + egress_with_self = try(each.value.egress_with_self, var.defaults.egress_with_self, []) + ingress_cidr_ipv4 = try(each.value.ingress_cidr_ipv4, var.defaults.ingress_cidr_ipv4, []) + ingress_cidr_ipv6 = try(each.value.ingress_cidr_ipv6, var.defaults.ingress_cidr_ipv6, []) + ingress_prefix_list_ids = try(each.value.ingress_prefix_list_ids, var.defaults.ingress_prefix_list_ids, []) + ingress_rules = try(each.value.ingress_rules, var.defaults.ingress_rules, []) + ingress_with_cidr_ipv4 = try(each.value.ingress_with_cidr_ipv4, var.defaults.ingress_with_cidr_ipv4, []) + ingress_with_cidr_ipv6 = try(each.value.ingress_with_cidr_ipv6, var.defaults.ingress_with_cidr_ipv6, []) + ingress_with_prefix_list_id = try(each.value.ingress_with_prefix_list_id, var.defaults.ingress_with_prefix_list_id, []) + ingress_with_referenced_security_group_id = try(each.value.ingress_with_referenced_security_group_id, var.defaults.ingress_with_referenced_security_group_id, []) + ingress_with_self = try(each.value.ingress_with_self, var.defaults.ingress_with_self, []) + name = try(each.value.name, var.defaults.name) + number_of_computed_egress_cidr_blocks = try(each.value.number_of_computed_egress_cidr_blocks, var.defaults.number_of_computed_egress_cidr_blocks, 0) + number_of_computed_egress_ipv6_cidr_blocks = try(each.value.number_of_computed_egress_ipv6_cidr_blocks, var.defaults.number_of_computed_egress_ipv6_cidr_blocks, 0) + number_of_computed_egress_prefix_list_ids = try(each.value.number_of_computed_egress_prefix_list_ids, var.defaults.number_of_computed_egress_prefix_list_ids, 0) + number_of_computed_egress_rules = try(each.value.number_of_computed_egress_rules, var.defaults.number_of_computed_egress_rules, 0) + number_of_computed_egress_with_cidr_ipv4 = try(each.value.number_of_computed_egress_with_cidr_ipv4, var.defaults.number_of_computed_egress_with_cidr_ipv4, 0) + number_of_computed_egress_with_cidr_ipv6 = try(each.value.number_of_computed_egress_with_cidr_ipv6, var.defaults.number_of_computed_egress_with_cidr_ipv6, 0) + number_of_computed_egress_with_prefix_list_id = try(each.value.number_of_computed_egress_with_prefix_list_id, var.defaults.number_of_computed_egress_with_prefix_list_id, 0) + number_of_computed_egress_with_referenced_security_group_id = try(each.value.number_of_computed_egress_with_referenced_security_group_id, var.defaults.number_of_computed_egress_with_referenced_security_group_id, 0) + number_of_computed_egress_with_self = try(each.value.number_of_computed_egress_with_self, var.defaults.number_of_computed_egress_with_self, 0) + number_of_computed_ingress_cidr_blocks = try(each.value.number_of_computed_ingress_cidr_blocks, var.defaults.number_of_computed_ingress_cidr_blocks, 0) + number_of_computed_ingress_ipv6_cidr_blocks = try(each.value.number_of_computed_ingress_ipv6_cidr_blocks, var.defaults.number_of_computed_ingress_ipv6_cidr_blocks, 0) + number_of_computed_ingress_prefix_list_ids = try(each.value.number_of_computed_ingress_prefix_list_ids, var.defaults.number_of_computed_ingress_prefix_list_ids, 0) + number_of_computed_ingress_rules = try(each.value.number_of_computed_ingress_rules, var.defaults.number_of_computed_ingress_rules, 0) + number_of_computed_ingress_with_cidr_ipv4 = try(each.value.number_of_computed_ingress_with_cidr_ipv4, var.defaults.number_of_computed_ingress_with_cidr_ipv4, 0) + number_of_computed_ingress_with_cidr_ipv6 = try(each.value.number_of_computed_ingress_with_cidr_ipv6, var.defaults.number_of_computed_ingress_with_cidr_ipv6, 0) + number_of_computed_ingress_with_prefix_list_id = try(each.value.number_of_computed_ingress_with_prefix_list_id, var.defaults.number_of_computed_ingress_with_prefix_list_id, 0) + number_of_computed_ingress_with_referenced_security_group_id = try(each.value.number_of_computed_ingress_with_referenced_security_group_id, var.defaults.number_of_computed_ingress_with_referenced_security_group_id, 0) + number_of_computed_ingress_with_self = try(each.value.number_of_computed_ingress_with_self, var.defaults.number_of_computed_ingress_with_self, 0) + revoke_rules_on_delete = try(each.value.revoke_rules_on_delete, var.defaults.revoke_rules_on_delete, false) + tags = try(each.value.tags, var.defaults.tags, {}) + use_name_prefix = try(each.value.use_name_prefix, var.defaults.use_name_prefix, true) + vpc_id = try(each.value.vpc_id, var.defaults.vpc_id) } diff --git a/wrappers/http-80/main.tf b/wrappers/http-80/main.tf index fd4161d5..2e46813a 100644 --- a/wrappers/http-80/main.tf +++ b/wrappers/http-80/main.tf @@ -3,77 +3,77 @@ module "wrapper" { for_each = var.items - auto_computed_egress_rules = try(each.value.auto_computed_egress_rules, var.defaults.auto_computed_egress_rules, []) - auto_computed_egress_with_self = try(each.value.auto_computed_egress_with_self, var.defaults.auto_computed_egress_with_self, []) - auto_computed_ingress_rules = try(each.value.auto_computed_ingress_rules, var.defaults.auto_computed_ingress_rules, []) - auto_computed_ingress_with_self = try(each.value.auto_computed_ingress_with_self, var.defaults.auto_computed_ingress_with_self, []) - auto_egress_rules = try(each.value.auto_egress_rules, var.defaults.auto_egress_rules, ["all-all"]) - auto_egress_with_self = try(each.value.auto_egress_with_self, var.defaults.auto_egress_with_self, []) - auto_ingress_rules = try(each.value.auto_ingress_rules, var.defaults.auto_ingress_rules, ["http-80-tcp"]) - auto_ingress_with_self = try(each.value.auto_ingress_with_self, var.defaults.auto_ingress_with_self, [{ "rule" = "all-all" }]) - auto_number_of_computed_egress_rules = try(each.value.auto_number_of_computed_egress_rules, var.defaults.auto_number_of_computed_egress_rules, 0) - auto_number_of_computed_egress_with_self = try(each.value.auto_number_of_computed_egress_with_self, var.defaults.auto_number_of_computed_egress_with_self, 0) - auto_number_of_computed_ingress_rules = try(each.value.auto_number_of_computed_ingress_rules, var.defaults.auto_number_of_computed_ingress_rules, 0) - auto_number_of_computed_ingress_with_self = try(each.value.auto_number_of_computed_ingress_with_self, var.defaults.auto_number_of_computed_ingress_with_self, 0) - computed_egress_cidr_blocks = try(each.value.computed_egress_cidr_blocks, var.defaults.computed_egress_cidr_blocks, ["0.0.0.0/0"]) - computed_egress_ipv6_cidr_blocks = try(each.value.computed_egress_ipv6_cidr_blocks, var.defaults.computed_egress_ipv6_cidr_blocks, ["::/0"]) - computed_egress_prefix_list_ids = try(each.value.computed_egress_prefix_list_ids, var.defaults.computed_egress_prefix_list_ids, []) - computed_egress_rules = try(each.value.computed_egress_rules, var.defaults.computed_egress_rules, []) - computed_egress_with_cidr_blocks = try(each.value.computed_egress_with_cidr_blocks, var.defaults.computed_egress_with_cidr_blocks, []) - computed_egress_with_ipv6_cidr_blocks = try(each.value.computed_egress_with_ipv6_cidr_blocks, var.defaults.computed_egress_with_ipv6_cidr_blocks, []) - computed_egress_with_prefix_list_ids = try(each.value.computed_egress_with_prefix_list_ids, var.defaults.computed_egress_with_prefix_list_ids, []) - computed_egress_with_self = try(each.value.computed_egress_with_self, var.defaults.computed_egress_with_self, []) - computed_egress_with_source_security_group_id = try(each.value.computed_egress_with_source_security_group_id, var.defaults.computed_egress_with_source_security_group_id, []) - computed_ingress_cidr_blocks = try(each.value.computed_ingress_cidr_blocks, var.defaults.computed_ingress_cidr_blocks, []) - computed_ingress_ipv6_cidr_blocks = try(each.value.computed_ingress_ipv6_cidr_blocks, var.defaults.computed_ingress_ipv6_cidr_blocks, []) - computed_ingress_prefix_list_ids = try(each.value.computed_ingress_prefix_list_ids, var.defaults.computed_ingress_prefix_list_ids, []) - computed_ingress_rules = try(each.value.computed_ingress_rules, var.defaults.computed_ingress_rules, []) - computed_ingress_with_cidr_blocks = try(each.value.computed_ingress_with_cidr_blocks, var.defaults.computed_ingress_with_cidr_blocks, []) - computed_ingress_with_ipv6_cidr_blocks = try(each.value.computed_ingress_with_ipv6_cidr_blocks, var.defaults.computed_ingress_with_ipv6_cidr_blocks, []) - computed_ingress_with_prefix_list_ids = try(each.value.computed_ingress_with_prefix_list_ids, var.defaults.computed_ingress_with_prefix_list_ids, []) - computed_ingress_with_self = try(each.value.computed_ingress_with_self, var.defaults.computed_ingress_with_self, []) - computed_ingress_with_source_security_group_id = try(each.value.computed_ingress_with_source_security_group_id, var.defaults.computed_ingress_with_source_security_group_id, []) - create = try(each.value.create, var.defaults.create, true) - description = try(each.value.description, var.defaults.description, "Security Group managed by Terraform") - egress_cidr_blocks = try(each.value.egress_cidr_blocks, var.defaults.egress_cidr_blocks, ["0.0.0.0/0"]) - egress_ipv6_cidr_blocks = try(each.value.egress_ipv6_cidr_blocks, var.defaults.egress_ipv6_cidr_blocks, ["::/0"]) - egress_prefix_list_ids = try(each.value.egress_prefix_list_ids, var.defaults.egress_prefix_list_ids, []) - egress_rules = try(each.value.egress_rules, var.defaults.egress_rules, []) - egress_with_cidr_blocks = try(each.value.egress_with_cidr_blocks, var.defaults.egress_with_cidr_blocks, []) - egress_with_ipv6_cidr_blocks = try(each.value.egress_with_ipv6_cidr_blocks, var.defaults.egress_with_ipv6_cidr_blocks, []) - egress_with_prefix_list_ids = try(each.value.egress_with_prefix_list_ids, var.defaults.egress_with_prefix_list_ids, []) - egress_with_self = try(each.value.egress_with_self, var.defaults.egress_with_self, []) - egress_with_source_security_group_id = try(each.value.egress_with_source_security_group_id, var.defaults.egress_with_source_security_group_id, []) - ingress_cidr_blocks = try(each.value.ingress_cidr_blocks, var.defaults.ingress_cidr_blocks, []) - ingress_ipv6_cidr_blocks = try(each.value.ingress_ipv6_cidr_blocks, var.defaults.ingress_ipv6_cidr_blocks, []) - ingress_prefix_list_ids = try(each.value.ingress_prefix_list_ids, var.defaults.ingress_prefix_list_ids, []) - ingress_rules = try(each.value.ingress_rules, var.defaults.ingress_rules, []) - ingress_with_cidr_blocks = try(each.value.ingress_with_cidr_blocks, var.defaults.ingress_with_cidr_blocks, []) - ingress_with_ipv6_cidr_blocks = try(each.value.ingress_with_ipv6_cidr_blocks, var.defaults.ingress_with_ipv6_cidr_blocks, []) - ingress_with_prefix_list_ids = try(each.value.ingress_with_prefix_list_ids, var.defaults.ingress_with_prefix_list_ids, []) - ingress_with_self = try(each.value.ingress_with_self, var.defaults.ingress_with_self, []) - ingress_with_source_security_group_id = try(each.value.ingress_with_source_security_group_id, var.defaults.ingress_with_source_security_group_id, []) - name = try(each.value.name, var.defaults.name) - number_of_computed_egress_cidr_blocks = try(each.value.number_of_computed_egress_cidr_blocks, var.defaults.number_of_computed_egress_cidr_blocks, 0) - number_of_computed_egress_ipv6_cidr_blocks = try(each.value.number_of_computed_egress_ipv6_cidr_blocks, var.defaults.number_of_computed_egress_ipv6_cidr_blocks, 0) - number_of_computed_egress_prefix_list_ids = try(each.value.number_of_computed_egress_prefix_list_ids, var.defaults.number_of_computed_egress_prefix_list_ids, 0) - number_of_computed_egress_rules = try(each.value.number_of_computed_egress_rules, var.defaults.number_of_computed_egress_rules, 0) - number_of_computed_egress_with_cidr_blocks = try(each.value.number_of_computed_egress_with_cidr_blocks, var.defaults.number_of_computed_egress_with_cidr_blocks, 0) - number_of_computed_egress_with_ipv6_cidr_blocks = try(each.value.number_of_computed_egress_with_ipv6_cidr_blocks, var.defaults.number_of_computed_egress_with_ipv6_cidr_blocks, 0) - number_of_computed_egress_with_prefix_list_ids = try(each.value.number_of_computed_egress_with_prefix_list_ids, var.defaults.number_of_computed_egress_with_prefix_list_ids, 0) - number_of_computed_egress_with_self = try(each.value.number_of_computed_egress_with_self, var.defaults.number_of_computed_egress_with_self, 0) - number_of_computed_egress_with_source_security_group_id = try(each.value.number_of_computed_egress_with_source_security_group_id, var.defaults.number_of_computed_egress_with_source_security_group_id, 0) - number_of_computed_ingress_cidr_blocks = try(each.value.number_of_computed_ingress_cidr_blocks, var.defaults.number_of_computed_ingress_cidr_blocks, 0) - number_of_computed_ingress_ipv6_cidr_blocks = try(each.value.number_of_computed_ingress_ipv6_cidr_blocks, var.defaults.number_of_computed_ingress_ipv6_cidr_blocks, 0) - number_of_computed_ingress_prefix_list_ids = try(each.value.number_of_computed_ingress_prefix_list_ids, var.defaults.number_of_computed_ingress_prefix_list_ids, 0) - number_of_computed_ingress_rules = try(each.value.number_of_computed_ingress_rules, var.defaults.number_of_computed_ingress_rules, 0) - number_of_computed_ingress_with_cidr_blocks = try(each.value.number_of_computed_ingress_with_cidr_blocks, var.defaults.number_of_computed_ingress_with_cidr_blocks, 0) - number_of_computed_ingress_with_ipv6_cidr_blocks = try(each.value.number_of_computed_ingress_with_ipv6_cidr_blocks, var.defaults.number_of_computed_ingress_with_ipv6_cidr_blocks, 0) - number_of_computed_ingress_with_prefix_list_ids = try(each.value.number_of_computed_ingress_with_prefix_list_ids, var.defaults.number_of_computed_ingress_with_prefix_list_ids, 0) - number_of_computed_ingress_with_self = try(each.value.number_of_computed_ingress_with_self, var.defaults.number_of_computed_ingress_with_self, 0) - number_of_computed_ingress_with_source_security_group_id = try(each.value.number_of_computed_ingress_with_source_security_group_id, var.defaults.number_of_computed_ingress_with_source_security_group_id, 0) - revoke_rules_on_delete = try(each.value.revoke_rules_on_delete, var.defaults.revoke_rules_on_delete, false) - tags = try(each.value.tags, var.defaults.tags, {}) - use_name_prefix = try(each.value.use_name_prefix, var.defaults.use_name_prefix, true) - vpc_id = try(each.value.vpc_id, var.defaults.vpc_id) + auto_computed_egress_rules = try(each.value.auto_computed_egress_rules, var.defaults.auto_computed_egress_rules, []) + auto_computed_egress_with_self = try(each.value.auto_computed_egress_with_self, var.defaults.auto_computed_egress_with_self, []) + auto_computed_ingress_rules = try(each.value.auto_computed_ingress_rules, var.defaults.auto_computed_ingress_rules, []) + auto_computed_ingress_with_self = try(each.value.auto_computed_ingress_with_self, var.defaults.auto_computed_ingress_with_self, []) + auto_egress_rules = try(each.value.auto_egress_rules, var.defaults.auto_egress_rules, ["all-all"]) + auto_egress_with_self = try(each.value.auto_egress_with_self, var.defaults.auto_egress_with_self, []) + auto_ingress_rules = try(each.value.auto_ingress_rules, var.defaults.auto_ingress_rules, ["http-80-tcp"]) + auto_ingress_with_self = try(each.value.auto_ingress_with_self, var.defaults.auto_ingress_with_self, [{ "rule" = "all-all" }]) + auto_number_of_computed_egress_rules = try(each.value.auto_number_of_computed_egress_rules, var.defaults.auto_number_of_computed_egress_rules, 0) + auto_number_of_computed_egress_with_self = try(each.value.auto_number_of_computed_egress_with_self, var.defaults.auto_number_of_computed_egress_with_self, 0) + auto_number_of_computed_ingress_rules = try(each.value.auto_number_of_computed_ingress_rules, var.defaults.auto_number_of_computed_ingress_rules, 0) + auto_number_of_computed_ingress_with_self = try(each.value.auto_number_of_computed_ingress_with_self, var.defaults.auto_number_of_computed_ingress_with_self, 0) + computed_egress_cidr_blocks = try(each.value.computed_egress_cidr_blocks, var.defaults.computed_egress_cidr_blocks, ["0.0.0.0/0"]) + computed_egress_ipv6_cidr_blocks = try(each.value.computed_egress_ipv6_cidr_blocks, var.defaults.computed_egress_ipv6_cidr_blocks, ["::/0"]) + computed_egress_prefix_list_ids = try(each.value.computed_egress_prefix_list_ids, var.defaults.computed_egress_prefix_list_ids, []) + computed_egress_rules = try(each.value.computed_egress_rules, var.defaults.computed_egress_rules, []) + computed_egress_with_cidr_ipv4 = try(each.value.computed_egress_with_cidr_ipv4, var.defaults.computed_egress_with_cidr_ipv4, []) + computed_egress_with_cidr_ipv6 = try(each.value.computed_egress_with_cidr_ipv6, var.defaults.computed_egress_with_cidr_ipv6, []) + computed_egress_with_prefix_list_id = try(each.value.computed_egress_with_prefix_list_id, var.defaults.computed_egress_with_prefix_list_id, []) + computed_egress_with_referenced_security_group_id = try(each.value.computed_egress_with_referenced_security_group_id, var.defaults.computed_egress_with_referenced_security_group_id, []) + computed_egress_with_self = try(each.value.computed_egress_with_self, var.defaults.computed_egress_with_self, []) + computed_ingress_cidr_blocks = try(each.value.computed_ingress_cidr_blocks, var.defaults.computed_ingress_cidr_blocks, []) + computed_ingress_ipv6_cidr_blocks = try(each.value.computed_ingress_ipv6_cidr_blocks, var.defaults.computed_ingress_ipv6_cidr_blocks, []) + computed_ingress_prefix_list_ids = try(each.value.computed_ingress_prefix_list_ids, var.defaults.computed_ingress_prefix_list_ids, []) + computed_ingress_rules = try(each.value.computed_ingress_rules, var.defaults.computed_ingress_rules, []) + computed_ingress_with_cidr_ipv4 = try(each.value.computed_ingress_with_cidr_ipv4, var.defaults.computed_ingress_with_cidr_ipv4, []) + computed_ingress_with_cidr_ipv6 = try(each.value.computed_ingress_with_cidr_ipv6, var.defaults.computed_ingress_with_cidr_ipv6, []) + computed_ingress_with_prefix_list_id = try(each.value.computed_ingress_with_prefix_list_id, var.defaults.computed_ingress_with_prefix_list_id, []) + computed_ingress_with_referenced_security_group_id = try(each.value.computed_ingress_with_referenced_security_group_id, var.defaults.computed_ingress_with_referenced_security_group_id, []) + computed_ingress_with_self = try(each.value.computed_ingress_with_self, var.defaults.computed_ingress_with_self, []) + create = try(each.value.create, var.defaults.create, true) + description = try(each.value.description, var.defaults.description, "Security Group managed by Terraform") + egress_cidr_ipv4 = try(each.value.egress_cidr_ipv4, var.defaults.egress_cidr_ipv4, ["0.0.0.0/0"]) + egress_cidr_ipv6 = try(each.value.egress_cidr_ipv6, var.defaults.egress_cidr_ipv6, ["::/0"]) + egress_prefix_list_ids = try(each.value.egress_prefix_list_ids, var.defaults.egress_prefix_list_ids, []) + egress_rules = try(each.value.egress_rules, var.defaults.egress_rules, []) + egress_with_cidr_ipv4 = try(each.value.egress_with_cidr_ipv4, var.defaults.egress_with_cidr_ipv4, []) + egress_with_cidr_ipv6 = try(each.value.egress_with_cidr_ipv6, var.defaults.egress_with_cidr_ipv6, []) + egress_with_prefix_list_id = try(each.value.egress_with_prefix_list_id, var.defaults.egress_with_prefix_list_id, []) + egress_with_referenced_security_group_id = try(each.value.egress_with_referenced_security_group_id, var.defaults.egress_with_referenced_security_group_id, []) + egress_with_self = try(each.value.egress_with_self, var.defaults.egress_with_self, []) + ingress_cidr_ipv4 = try(each.value.ingress_cidr_ipv4, var.defaults.ingress_cidr_ipv4, []) + ingress_cidr_ipv6 = try(each.value.ingress_cidr_ipv6, var.defaults.ingress_cidr_ipv6, []) + ingress_prefix_list_ids = try(each.value.ingress_prefix_list_ids, var.defaults.ingress_prefix_list_ids, []) + ingress_rules = try(each.value.ingress_rules, var.defaults.ingress_rules, []) + ingress_with_cidr_ipv4 = try(each.value.ingress_with_cidr_ipv4, var.defaults.ingress_with_cidr_ipv4, []) + ingress_with_cidr_ipv6 = try(each.value.ingress_with_cidr_ipv6, var.defaults.ingress_with_cidr_ipv6, []) + ingress_with_prefix_list_id = try(each.value.ingress_with_prefix_list_id, var.defaults.ingress_with_prefix_list_id, []) + ingress_with_referenced_security_group_id = try(each.value.ingress_with_referenced_security_group_id, var.defaults.ingress_with_referenced_security_group_id, []) + ingress_with_self = try(each.value.ingress_with_self, var.defaults.ingress_with_self, []) + name = try(each.value.name, var.defaults.name) + number_of_computed_egress_cidr_blocks = try(each.value.number_of_computed_egress_cidr_blocks, var.defaults.number_of_computed_egress_cidr_blocks, 0) + number_of_computed_egress_ipv6_cidr_blocks = try(each.value.number_of_computed_egress_ipv6_cidr_blocks, var.defaults.number_of_computed_egress_ipv6_cidr_blocks, 0) + number_of_computed_egress_prefix_list_ids = try(each.value.number_of_computed_egress_prefix_list_ids, var.defaults.number_of_computed_egress_prefix_list_ids, 0) + number_of_computed_egress_rules = try(each.value.number_of_computed_egress_rules, var.defaults.number_of_computed_egress_rules, 0) + number_of_computed_egress_with_cidr_ipv4 = try(each.value.number_of_computed_egress_with_cidr_ipv4, var.defaults.number_of_computed_egress_with_cidr_ipv4, 0) + number_of_computed_egress_with_cidr_ipv6 = try(each.value.number_of_computed_egress_with_cidr_ipv6, var.defaults.number_of_computed_egress_with_cidr_ipv6, 0) + number_of_computed_egress_with_prefix_list_id = try(each.value.number_of_computed_egress_with_prefix_list_id, var.defaults.number_of_computed_egress_with_prefix_list_id, 0) + number_of_computed_egress_with_referenced_security_group_id = try(each.value.number_of_computed_egress_with_referenced_security_group_id, var.defaults.number_of_computed_egress_with_referenced_security_group_id, 0) + number_of_computed_egress_with_self = try(each.value.number_of_computed_egress_with_self, var.defaults.number_of_computed_egress_with_self, 0) + number_of_computed_ingress_cidr_blocks = try(each.value.number_of_computed_ingress_cidr_blocks, var.defaults.number_of_computed_ingress_cidr_blocks, 0) + number_of_computed_ingress_ipv6_cidr_blocks = try(each.value.number_of_computed_ingress_ipv6_cidr_blocks, var.defaults.number_of_computed_ingress_ipv6_cidr_blocks, 0) + number_of_computed_ingress_prefix_list_ids = try(each.value.number_of_computed_ingress_prefix_list_ids, var.defaults.number_of_computed_ingress_prefix_list_ids, 0) + number_of_computed_ingress_rules = try(each.value.number_of_computed_ingress_rules, var.defaults.number_of_computed_ingress_rules, 0) + number_of_computed_ingress_with_cidr_ipv4 = try(each.value.number_of_computed_ingress_with_cidr_ipv4, var.defaults.number_of_computed_ingress_with_cidr_ipv4, 0) + number_of_computed_ingress_with_cidr_ipv6 = try(each.value.number_of_computed_ingress_with_cidr_ipv6, var.defaults.number_of_computed_ingress_with_cidr_ipv6, 0) + number_of_computed_ingress_with_prefix_list_id = try(each.value.number_of_computed_ingress_with_prefix_list_id, var.defaults.number_of_computed_ingress_with_prefix_list_id, 0) + number_of_computed_ingress_with_referenced_security_group_id = try(each.value.number_of_computed_ingress_with_referenced_security_group_id, var.defaults.number_of_computed_ingress_with_referenced_security_group_id, 0) + number_of_computed_ingress_with_self = try(each.value.number_of_computed_ingress_with_self, var.defaults.number_of_computed_ingress_with_self, 0) + revoke_rules_on_delete = try(each.value.revoke_rules_on_delete, var.defaults.revoke_rules_on_delete, false) + tags = try(each.value.tags, var.defaults.tags, {}) + use_name_prefix = try(each.value.use_name_prefix, var.defaults.use_name_prefix, true) + vpc_id = try(each.value.vpc_id, var.defaults.vpc_id) } diff --git a/wrappers/http-8080/main.tf b/wrappers/http-8080/main.tf index c86eab72..46ceadc9 100644 --- a/wrappers/http-8080/main.tf +++ b/wrappers/http-8080/main.tf @@ -3,77 +3,77 @@ module "wrapper" { for_each = var.items - auto_computed_egress_rules = try(each.value.auto_computed_egress_rules, var.defaults.auto_computed_egress_rules, []) - auto_computed_egress_with_self = try(each.value.auto_computed_egress_with_self, var.defaults.auto_computed_egress_with_self, []) - auto_computed_ingress_rules = try(each.value.auto_computed_ingress_rules, var.defaults.auto_computed_ingress_rules, []) - auto_computed_ingress_with_self = try(each.value.auto_computed_ingress_with_self, var.defaults.auto_computed_ingress_with_self, []) - auto_egress_rules = try(each.value.auto_egress_rules, var.defaults.auto_egress_rules, ["all-all"]) - auto_egress_with_self = try(each.value.auto_egress_with_self, var.defaults.auto_egress_with_self, []) - auto_ingress_rules = try(each.value.auto_ingress_rules, var.defaults.auto_ingress_rules, ["http-8080-tcp"]) - auto_ingress_with_self = try(each.value.auto_ingress_with_self, var.defaults.auto_ingress_with_self, [{ "rule" = "all-all" }]) - auto_number_of_computed_egress_rules = try(each.value.auto_number_of_computed_egress_rules, var.defaults.auto_number_of_computed_egress_rules, 0) - auto_number_of_computed_egress_with_self = try(each.value.auto_number_of_computed_egress_with_self, var.defaults.auto_number_of_computed_egress_with_self, 0) - auto_number_of_computed_ingress_rules = try(each.value.auto_number_of_computed_ingress_rules, var.defaults.auto_number_of_computed_ingress_rules, 0) - auto_number_of_computed_ingress_with_self = try(each.value.auto_number_of_computed_ingress_with_self, var.defaults.auto_number_of_computed_ingress_with_self, 0) - computed_egress_cidr_blocks = try(each.value.computed_egress_cidr_blocks, var.defaults.computed_egress_cidr_blocks, ["0.0.0.0/0"]) - computed_egress_ipv6_cidr_blocks = try(each.value.computed_egress_ipv6_cidr_blocks, var.defaults.computed_egress_ipv6_cidr_blocks, ["::/0"]) - computed_egress_prefix_list_ids = try(each.value.computed_egress_prefix_list_ids, var.defaults.computed_egress_prefix_list_ids, []) - computed_egress_rules = try(each.value.computed_egress_rules, var.defaults.computed_egress_rules, []) - computed_egress_with_cidr_blocks = try(each.value.computed_egress_with_cidr_blocks, var.defaults.computed_egress_with_cidr_blocks, []) - computed_egress_with_ipv6_cidr_blocks = try(each.value.computed_egress_with_ipv6_cidr_blocks, var.defaults.computed_egress_with_ipv6_cidr_blocks, []) - computed_egress_with_prefix_list_ids = try(each.value.computed_egress_with_prefix_list_ids, var.defaults.computed_egress_with_prefix_list_ids, []) - computed_egress_with_self = try(each.value.computed_egress_with_self, var.defaults.computed_egress_with_self, []) - computed_egress_with_source_security_group_id = try(each.value.computed_egress_with_source_security_group_id, var.defaults.computed_egress_with_source_security_group_id, []) - computed_ingress_cidr_blocks = try(each.value.computed_ingress_cidr_blocks, var.defaults.computed_ingress_cidr_blocks, []) - computed_ingress_ipv6_cidr_blocks = try(each.value.computed_ingress_ipv6_cidr_blocks, var.defaults.computed_ingress_ipv6_cidr_blocks, []) - computed_ingress_prefix_list_ids = try(each.value.computed_ingress_prefix_list_ids, var.defaults.computed_ingress_prefix_list_ids, []) - computed_ingress_rules = try(each.value.computed_ingress_rules, var.defaults.computed_ingress_rules, []) - computed_ingress_with_cidr_blocks = try(each.value.computed_ingress_with_cidr_blocks, var.defaults.computed_ingress_with_cidr_blocks, []) - computed_ingress_with_ipv6_cidr_blocks = try(each.value.computed_ingress_with_ipv6_cidr_blocks, var.defaults.computed_ingress_with_ipv6_cidr_blocks, []) - computed_ingress_with_prefix_list_ids = try(each.value.computed_ingress_with_prefix_list_ids, var.defaults.computed_ingress_with_prefix_list_ids, []) - computed_ingress_with_self = try(each.value.computed_ingress_with_self, var.defaults.computed_ingress_with_self, []) - computed_ingress_with_source_security_group_id = try(each.value.computed_ingress_with_source_security_group_id, var.defaults.computed_ingress_with_source_security_group_id, []) - create = try(each.value.create, var.defaults.create, true) - description = try(each.value.description, var.defaults.description, "Security Group managed by Terraform") - egress_cidr_blocks = try(each.value.egress_cidr_blocks, var.defaults.egress_cidr_blocks, ["0.0.0.0/0"]) - egress_ipv6_cidr_blocks = try(each.value.egress_ipv6_cidr_blocks, var.defaults.egress_ipv6_cidr_blocks, ["::/0"]) - egress_prefix_list_ids = try(each.value.egress_prefix_list_ids, var.defaults.egress_prefix_list_ids, []) - egress_rules = try(each.value.egress_rules, var.defaults.egress_rules, []) - egress_with_cidr_blocks = try(each.value.egress_with_cidr_blocks, var.defaults.egress_with_cidr_blocks, []) - egress_with_ipv6_cidr_blocks = try(each.value.egress_with_ipv6_cidr_blocks, var.defaults.egress_with_ipv6_cidr_blocks, []) - egress_with_prefix_list_ids = try(each.value.egress_with_prefix_list_ids, var.defaults.egress_with_prefix_list_ids, []) - egress_with_self = try(each.value.egress_with_self, var.defaults.egress_with_self, []) - egress_with_source_security_group_id = try(each.value.egress_with_source_security_group_id, var.defaults.egress_with_source_security_group_id, []) - ingress_cidr_blocks = try(each.value.ingress_cidr_blocks, var.defaults.ingress_cidr_blocks, []) - ingress_ipv6_cidr_blocks = try(each.value.ingress_ipv6_cidr_blocks, var.defaults.ingress_ipv6_cidr_blocks, []) - ingress_prefix_list_ids = try(each.value.ingress_prefix_list_ids, var.defaults.ingress_prefix_list_ids, []) - ingress_rules = try(each.value.ingress_rules, var.defaults.ingress_rules, []) - ingress_with_cidr_blocks = try(each.value.ingress_with_cidr_blocks, var.defaults.ingress_with_cidr_blocks, []) - ingress_with_ipv6_cidr_blocks = try(each.value.ingress_with_ipv6_cidr_blocks, var.defaults.ingress_with_ipv6_cidr_blocks, []) - ingress_with_prefix_list_ids = try(each.value.ingress_with_prefix_list_ids, var.defaults.ingress_with_prefix_list_ids, []) - ingress_with_self = try(each.value.ingress_with_self, var.defaults.ingress_with_self, []) - ingress_with_source_security_group_id = try(each.value.ingress_with_source_security_group_id, var.defaults.ingress_with_source_security_group_id, []) - name = try(each.value.name, var.defaults.name) - number_of_computed_egress_cidr_blocks = try(each.value.number_of_computed_egress_cidr_blocks, var.defaults.number_of_computed_egress_cidr_blocks, 0) - number_of_computed_egress_ipv6_cidr_blocks = try(each.value.number_of_computed_egress_ipv6_cidr_blocks, var.defaults.number_of_computed_egress_ipv6_cidr_blocks, 0) - number_of_computed_egress_prefix_list_ids = try(each.value.number_of_computed_egress_prefix_list_ids, var.defaults.number_of_computed_egress_prefix_list_ids, 0) - number_of_computed_egress_rules = try(each.value.number_of_computed_egress_rules, var.defaults.number_of_computed_egress_rules, 0) - number_of_computed_egress_with_cidr_blocks = try(each.value.number_of_computed_egress_with_cidr_blocks, var.defaults.number_of_computed_egress_with_cidr_blocks, 0) - number_of_computed_egress_with_ipv6_cidr_blocks = try(each.value.number_of_computed_egress_with_ipv6_cidr_blocks, var.defaults.number_of_computed_egress_with_ipv6_cidr_blocks, 0) - number_of_computed_egress_with_prefix_list_ids = try(each.value.number_of_computed_egress_with_prefix_list_ids, var.defaults.number_of_computed_egress_with_prefix_list_ids, 0) - number_of_computed_egress_with_self = try(each.value.number_of_computed_egress_with_self, var.defaults.number_of_computed_egress_with_self, 0) - number_of_computed_egress_with_source_security_group_id = try(each.value.number_of_computed_egress_with_source_security_group_id, var.defaults.number_of_computed_egress_with_source_security_group_id, 0) - number_of_computed_ingress_cidr_blocks = try(each.value.number_of_computed_ingress_cidr_blocks, var.defaults.number_of_computed_ingress_cidr_blocks, 0) - number_of_computed_ingress_ipv6_cidr_blocks = try(each.value.number_of_computed_ingress_ipv6_cidr_blocks, var.defaults.number_of_computed_ingress_ipv6_cidr_blocks, 0) - number_of_computed_ingress_prefix_list_ids = try(each.value.number_of_computed_ingress_prefix_list_ids, var.defaults.number_of_computed_ingress_prefix_list_ids, 0) - number_of_computed_ingress_rules = try(each.value.number_of_computed_ingress_rules, var.defaults.number_of_computed_ingress_rules, 0) - number_of_computed_ingress_with_cidr_blocks = try(each.value.number_of_computed_ingress_with_cidr_blocks, var.defaults.number_of_computed_ingress_with_cidr_blocks, 0) - number_of_computed_ingress_with_ipv6_cidr_blocks = try(each.value.number_of_computed_ingress_with_ipv6_cidr_blocks, var.defaults.number_of_computed_ingress_with_ipv6_cidr_blocks, 0) - number_of_computed_ingress_with_prefix_list_ids = try(each.value.number_of_computed_ingress_with_prefix_list_ids, var.defaults.number_of_computed_ingress_with_prefix_list_ids, 0) - number_of_computed_ingress_with_self = try(each.value.number_of_computed_ingress_with_self, var.defaults.number_of_computed_ingress_with_self, 0) - number_of_computed_ingress_with_source_security_group_id = try(each.value.number_of_computed_ingress_with_source_security_group_id, var.defaults.number_of_computed_ingress_with_source_security_group_id, 0) - revoke_rules_on_delete = try(each.value.revoke_rules_on_delete, var.defaults.revoke_rules_on_delete, false) - tags = try(each.value.tags, var.defaults.tags, {}) - use_name_prefix = try(each.value.use_name_prefix, var.defaults.use_name_prefix, true) - vpc_id = try(each.value.vpc_id, var.defaults.vpc_id) + auto_computed_egress_rules = try(each.value.auto_computed_egress_rules, var.defaults.auto_computed_egress_rules, []) + auto_computed_egress_with_self = try(each.value.auto_computed_egress_with_self, var.defaults.auto_computed_egress_with_self, []) + auto_computed_ingress_rules = try(each.value.auto_computed_ingress_rules, var.defaults.auto_computed_ingress_rules, []) + auto_computed_ingress_with_self = try(each.value.auto_computed_ingress_with_self, var.defaults.auto_computed_ingress_with_self, []) + auto_egress_rules = try(each.value.auto_egress_rules, var.defaults.auto_egress_rules, ["all-all"]) + auto_egress_with_self = try(each.value.auto_egress_with_self, var.defaults.auto_egress_with_self, []) + auto_ingress_rules = try(each.value.auto_ingress_rules, var.defaults.auto_ingress_rules, ["http-8080-tcp"]) + auto_ingress_with_self = try(each.value.auto_ingress_with_self, var.defaults.auto_ingress_with_self, [{ "rule" = "all-all" }]) + auto_number_of_computed_egress_rules = try(each.value.auto_number_of_computed_egress_rules, var.defaults.auto_number_of_computed_egress_rules, 0) + auto_number_of_computed_egress_with_self = try(each.value.auto_number_of_computed_egress_with_self, var.defaults.auto_number_of_computed_egress_with_self, 0) + auto_number_of_computed_ingress_rules = try(each.value.auto_number_of_computed_ingress_rules, var.defaults.auto_number_of_computed_ingress_rules, 0) + auto_number_of_computed_ingress_with_self = try(each.value.auto_number_of_computed_ingress_with_self, var.defaults.auto_number_of_computed_ingress_with_self, 0) + computed_egress_cidr_blocks = try(each.value.computed_egress_cidr_blocks, var.defaults.computed_egress_cidr_blocks, ["0.0.0.0/0"]) + computed_egress_ipv6_cidr_blocks = try(each.value.computed_egress_ipv6_cidr_blocks, var.defaults.computed_egress_ipv6_cidr_blocks, ["::/0"]) + computed_egress_prefix_list_ids = try(each.value.computed_egress_prefix_list_ids, var.defaults.computed_egress_prefix_list_ids, []) + computed_egress_rules = try(each.value.computed_egress_rules, var.defaults.computed_egress_rules, []) + computed_egress_with_cidr_ipv4 = try(each.value.computed_egress_with_cidr_ipv4, var.defaults.computed_egress_with_cidr_ipv4, []) + computed_egress_with_cidr_ipv6 = try(each.value.computed_egress_with_cidr_ipv6, var.defaults.computed_egress_with_cidr_ipv6, []) + computed_egress_with_prefix_list_id = try(each.value.computed_egress_with_prefix_list_id, var.defaults.computed_egress_with_prefix_list_id, []) + computed_egress_with_referenced_security_group_id = try(each.value.computed_egress_with_referenced_security_group_id, var.defaults.computed_egress_with_referenced_security_group_id, []) + computed_egress_with_self = try(each.value.computed_egress_with_self, var.defaults.computed_egress_with_self, []) + computed_ingress_cidr_blocks = try(each.value.computed_ingress_cidr_blocks, var.defaults.computed_ingress_cidr_blocks, []) + computed_ingress_ipv6_cidr_blocks = try(each.value.computed_ingress_ipv6_cidr_blocks, var.defaults.computed_ingress_ipv6_cidr_blocks, []) + computed_ingress_prefix_list_ids = try(each.value.computed_ingress_prefix_list_ids, var.defaults.computed_ingress_prefix_list_ids, []) + computed_ingress_rules = try(each.value.computed_ingress_rules, var.defaults.computed_ingress_rules, []) + computed_ingress_with_cidr_ipv4 = try(each.value.computed_ingress_with_cidr_ipv4, var.defaults.computed_ingress_with_cidr_ipv4, []) + computed_ingress_with_cidr_ipv6 = try(each.value.computed_ingress_with_cidr_ipv6, var.defaults.computed_ingress_with_cidr_ipv6, []) + computed_ingress_with_prefix_list_id = try(each.value.computed_ingress_with_prefix_list_id, var.defaults.computed_ingress_with_prefix_list_id, []) + computed_ingress_with_referenced_security_group_id = try(each.value.computed_ingress_with_referenced_security_group_id, var.defaults.computed_ingress_with_referenced_security_group_id, []) + computed_ingress_with_self = try(each.value.computed_ingress_with_self, var.defaults.computed_ingress_with_self, []) + create = try(each.value.create, var.defaults.create, true) + description = try(each.value.description, var.defaults.description, "Security Group managed by Terraform") + egress_cidr_ipv4 = try(each.value.egress_cidr_ipv4, var.defaults.egress_cidr_ipv4, ["0.0.0.0/0"]) + egress_cidr_ipv6 = try(each.value.egress_cidr_ipv6, var.defaults.egress_cidr_ipv6, ["::/0"]) + egress_prefix_list_ids = try(each.value.egress_prefix_list_ids, var.defaults.egress_prefix_list_ids, []) + egress_rules = try(each.value.egress_rules, var.defaults.egress_rules, []) + egress_with_cidr_ipv4 = try(each.value.egress_with_cidr_ipv4, var.defaults.egress_with_cidr_ipv4, []) + egress_with_cidr_ipv6 = try(each.value.egress_with_cidr_ipv6, var.defaults.egress_with_cidr_ipv6, []) + egress_with_prefix_list_id = try(each.value.egress_with_prefix_list_id, var.defaults.egress_with_prefix_list_id, []) + egress_with_referenced_security_group_id = try(each.value.egress_with_referenced_security_group_id, var.defaults.egress_with_referenced_security_group_id, []) + egress_with_self = try(each.value.egress_with_self, var.defaults.egress_with_self, []) + ingress_cidr_ipv4 = try(each.value.ingress_cidr_ipv4, var.defaults.ingress_cidr_ipv4, []) + ingress_cidr_ipv6 = try(each.value.ingress_cidr_ipv6, var.defaults.ingress_cidr_ipv6, []) + ingress_prefix_list_ids = try(each.value.ingress_prefix_list_ids, var.defaults.ingress_prefix_list_ids, []) + ingress_rules = try(each.value.ingress_rules, var.defaults.ingress_rules, []) + ingress_with_cidr_ipv4 = try(each.value.ingress_with_cidr_ipv4, var.defaults.ingress_with_cidr_ipv4, []) + ingress_with_cidr_ipv6 = try(each.value.ingress_with_cidr_ipv6, var.defaults.ingress_with_cidr_ipv6, []) + ingress_with_prefix_list_id = try(each.value.ingress_with_prefix_list_id, var.defaults.ingress_with_prefix_list_id, []) + ingress_with_referenced_security_group_id = try(each.value.ingress_with_referenced_security_group_id, var.defaults.ingress_with_referenced_security_group_id, []) + ingress_with_self = try(each.value.ingress_with_self, var.defaults.ingress_with_self, []) + name = try(each.value.name, var.defaults.name) + number_of_computed_egress_cidr_blocks = try(each.value.number_of_computed_egress_cidr_blocks, var.defaults.number_of_computed_egress_cidr_blocks, 0) + number_of_computed_egress_ipv6_cidr_blocks = try(each.value.number_of_computed_egress_ipv6_cidr_blocks, var.defaults.number_of_computed_egress_ipv6_cidr_blocks, 0) + number_of_computed_egress_prefix_list_ids = try(each.value.number_of_computed_egress_prefix_list_ids, var.defaults.number_of_computed_egress_prefix_list_ids, 0) + number_of_computed_egress_rules = try(each.value.number_of_computed_egress_rules, var.defaults.number_of_computed_egress_rules, 0) + number_of_computed_egress_with_cidr_ipv4 = try(each.value.number_of_computed_egress_with_cidr_ipv4, var.defaults.number_of_computed_egress_with_cidr_ipv4, 0) + number_of_computed_egress_with_cidr_ipv6 = try(each.value.number_of_computed_egress_with_cidr_ipv6, var.defaults.number_of_computed_egress_with_cidr_ipv6, 0) + number_of_computed_egress_with_prefix_list_id = try(each.value.number_of_computed_egress_with_prefix_list_id, var.defaults.number_of_computed_egress_with_prefix_list_id, 0) + number_of_computed_egress_with_referenced_security_group_id = try(each.value.number_of_computed_egress_with_referenced_security_group_id, var.defaults.number_of_computed_egress_with_referenced_security_group_id, 0) + number_of_computed_egress_with_self = try(each.value.number_of_computed_egress_with_self, var.defaults.number_of_computed_egress_with_self, 0) + number_of_computed_ingress_cidr_blocks = try(each.value.number_of_computed_ingress_cidr_blocks, var.defaults.number_of_computed_ingress_cidr_blocks, 0) + number_of_computed_ingress_ipv6_cidr_blocks = try(each.value.number_of_computed_ingress_ipv6_cidr_blocks, var.defaults.number_of_computed_ingress_ipv6_cidr_blocks, 0) + number_of_computed_ingress_prefix_list_ids = try(each.value.number_of_computed_ingress_prefix_list_ids, var.defaults.number_of_computed_ingress_prefix_list_ids, 0) + number_of_computed_ingress_rules = try(each.value.number_of_computed_ingress_rules, var.defaults.number_of_computed_ingress_rules, 0) + number_of_computed_ingress_with_cidr_ipv4 = try(each.value.number_of_computed_ingress_with_cidr_ipv4, var.defaults.number_of_computed_ingress_with_cidr_ipv4, 0) + number_of_computed_ingress_with_cidr_ipv6 = try(each.value.number_of_computed_ingress_with_cidr_ipv6, var.defaults.number_of_computed_ingress_with_cidr_ipv6, 0) + number_of_computed_ingress_with_prefix_list_id = try(each.value.number_of_computed_ingress_with_prefix_list_id, var.defaults.number_of_computed_ingress_with_prefix_list_id, 0) + number_of_computed_ingress_with_referenced_security_group_id = try(each.value.number_of_computed_ingress_with_referenced_security_group_id, var.defaults.number_of_computed_ingress_with_referenced_security_group_id, 0) + number_of_computed_ingress_with_self = try(each.value.number_of_computed_ingress_with_self, var.defaults.number_of_computed_ingress_with_self, 0) + revoke_rules_on_delete = try(each.value.revoke_rules_on_delete, var.defaults.revoke_rules_on_delete, false) + tags = try(each.value.tags, var.defaults.tags, {}) + use_name_prefix = try(each.value.use_name_prefix, var.defaults.use_name_prefix, true) + vpc_id = try(each.value.vpc_id, var.defaults.vpc_id) } diff --git a/wrappers/https-443/main.tf b/wrappers/https-443/main.tf index b8a4d6f2..2984004b 100644 --- a/wrappers/https-443/main.tf +++ b/wrappers/https-443/main.tf @@ -3,77 +3,77 @@ module "wrapper" { for_each = var.items - auto_computed_egress_rules = try(each.value.auto_computed_egress_rules, var.defaults.auto_computed_egress_rules, []) - auto_computed_egress_with_self = try(each.value.auto_computed_egress_with_self, var.defaults.auto_computed_egress_with_self, []) - auto_computed_ingress_rules = try(each.value.auto_computed_ingress_rules, var.defaults.auto_computed_ingress_rules, []) - auto_computed_ingress_with_self = try(each.value.auto_computed_ingress_with_self, var.defaults.auto_computed_ingress_with_self, []) - auto_egress_rules = try(each.value.auto_egress_rules, var.defaults.auto_egress_rules, ["all-all"]) - auto_egress_with_self = try(each.value.auto_egress_with_self, var.defaults.auto_egress_with_self, []) - auto_ingress_rules = try(each.value.auto_ingress_rules, var.defaults.auto_ingress_rules, ["https-443-tcp"]) - auto_ingress_with_self = try(each.value.auto_ingress_with_self, var.defaults.auto_ingress_with_self, [{ "rule" = "all-all" }]) - auto_number_of_computed_egress_rules = try(each.value.auto_number_of_computed_egress_rules, var.defaults.auto_number_of_computed_egress_rules, 0) - auto_number_of_computed_egress_with_self = try(each.value.auto_number_of_computed_egress_with_self, var.defaults.auto_number_of_computed_egress_with_self, 0) - auto_number_of_computed_ingress_rules = try(each.value.auto_number_of_computed_ingress_rules, var.defaults.auto_number_of_computed_ingress_rules, 0) - auto_number_of_computed_ingress_with_self = try(each.value.auto_number_of_computed_ingress_with_self, var.defaults.auto_number_of_computed_ingress_with_self, 0) - computed_egress_cidr_blocks = try(each.value.computed_egress_cidr_blocks, var.defaults.computed_egress_cidr_blocks, ["0.0.0.0/0"]) - computed_egress_ipv6_cidr_blocks = try(each.value.computed_egress_ipv6_cidr_blocks, var.defaults.computed_egress_ipv6_cidr_blocks, ["::/0"]) - computed_egress_prefix_list_ids = try(each.value.computed_egress_prefix_list_ids, var.defaults.computed_egress_prefix_list_ids, []) - computed_egress_rules = try(each.value.computed_egress_rules, var.defaults.computed_egress_rules, []) - computed_egress_with_cidr_blocks = try(each.value.computed_egress_with_cidr_blocks, var.defaults.computed_egress_with_cidr_blocks, []) - computed_egress_with_ipv6_cidr_blocks = try(each.value.computed_egress_with_ipv6_cidr_blocks, var.defaults.computed_egress_with_ipv6_cidr_blocks, []) - computed_egress_with_prefix_list_ids = try(each.value.computed_egress_with_prefix_list_ids, var.defaults.computed_egress_with_prefix_list_ids, []) - computed_egress_with_self = try(each.value.computed_egress_with_self, var.defaults.computed_egress_with_self, []) - computed_egress_with_source_security_group_id = try(each.value.computed_egress_with_source_security_group_id, var.defaults.computed_egress_with_source_security_group_id, []) - computed_ingress_cidr_blocks = try(each.value.computed_ingress_cidr_blocks, var.defaults.computed_ingress_cidr_blocks, []) - computed_ingress_ipv6_cidr_blocks = try(each.value.computed_ingress_ipv6_cidr_blocks, var.defaults.computed_ingress_ipv6_cidr_blocks, []) - computed_ingress_prefix_list_ids = try(each.value.computed_ingress_prefix_list_ids, var.defaults.computed_ingress_prefix_list_ids, []) - computed_ingress_rules = try(each.value.computed_ingress_rules, var.defaults.computed_ingress_rules, []) - computed_ingress_with_cidr_blocks = try(each.value.computed_ingress_with_cidr_blocks, var.defaults.computed_ingress_with_cidr_blocks, []) - computed_ingress_with_ipv6_cidr_blocks = try(each.value.computed_ingress_with_ipv6_cidr_blocks, var.defaults.computed_ingress_with_ipv6_cidr_blocks, []) - computed_ingress_with_prefix_list_ids = try(each.value.computed_ingress_with_prefix_list_ids, var.defaults.computed_ingress_with_prefix_list_ids, []) - computed_ingress_with_self = try(each.value.computed_ingress_with_self, var.defaults.computed_ingress_with_self, []) - computed_ingress_with_source_security_group_id = try(each.value.computed_ingress_with_source_security_group_id, var.defaults.computed_ingress_with_source_security_group_id, []) - create = try(each.value.create, var.defaults.create, true) - description = try(each.value.description, var.defaults.description, "Security Group managed by Terraform") - egress_cidr_blocks = try(each.value.egress_cidr_blocks, var.defaults.egress_cidr_blocks, ["0.0.0.0/0"]) - egress_ipv6_cidr_blocks = try(each.value.egress_ipv6_cidr_blocks, var.defaults.egress_ipv6_cidr_blocks, ["::/0"]) - egress_prefix_list_ids = try(each.value.egress_prefix_list_ids, var.defaults.egress_prefix_list_ids, []) - egress_rules = try(each.value.egress_rules, var.defaults.egress_rules, []) - egress_with_cidr_blocks = try(each.value.egress_with_cidr_blocks, var.defaults.egress_with_cidr_blocks, []) - egress_with_ipv6_cidr_blocks = try(each.value.egress_with_ipv6_cidr_blocks, var.defaults.egress_with_ipv6_cidr_blocks, []) - egress_with_prefix_list_ids = try(each.value.egress_with_prefix_list_ids, var.defaults.egress_with_prefix_list_ids, []) - egress_with_self = try(each.value.egress_with_self, var.defaults.egress_with_self, []) - egress_with_source_security_group_id = try(each.value.egress_with_source_security_group_id, var.defaults.egress_with_source_security_group_id, []) - ingress_cidr_blocks = try(each.value.ingress_cidr_blocks, var.defaults.ingress_cidr_blocks, []) - ingress_ipv6_cidr_blocks = try(each.value.ingress_ipv6_cidr_blocks, var.defaults.ingress_ipv6_cidr_blocks, []) - ingress_prefix_list_ids = try(each.value.ingress_prefix_list_ids, var.defaults.ingress_prefix_list_ids, []) - ingress_rules = try(each.value.ingress_rules, var.defaults.ingress_rules, []) - ingress_with_cidr_blocks = try(each.value.ingress_with_cidr_blocks, var.defaults.ingress_with_cidr_blocks, []) - ingress_with_ipv6_cidr_blocks = try(each.value.ingress_with_ipv6_cidr_blocks, var.defaults.ingress_with_ipv6_cidr_blocks, []) - ingress_with_prefix_list_ids = try(each.value.ingress_with_prefix_list_ids, var.defaults.ingress_with_prefix_list_ids, []) - ingress_with_self = try(each.value.ingress_with_self, var.defaults.ingress_with_self, []) - ingress_with_source_security_group_id = try(each.value.ingress_with_source_security_group_id, var.defaults.ingress_with_source_security_group_id, []) - name = try(each.value.name, var.defaults.name) - number_of_computed_egress_cidr_blocks = try(each.value.number_of_computed_egress_cidr_blocks, var.defaults.number_of_computed_egress_cidr_blocks, 0) - number_of_computed_egress_ipv6_cidr_blocks = try(each.value.number_of_computed_egress_ipv6_cidr_blocks, var.defaults.number_of_computed_egress_ipv6_cidr_blocks, 0) - number_of_computed_egress_prefix_list_ids = try(each.value.number_of_computed_egress_prefix_list_ids, var.defaults.number_of_computed_egress_prefix_list_ids, 0) - number_of_computed_egress_rules = try(each.value.number_of_computed_egress_rules, var.defaults.number_of_computed_egress_rules, 0) - number_of_computed_egress_with_cidr_blocks = try(each.value.number_of_computed_egress_with_cidr_blocks, var.defaults.number_of_computed_egress_with_cidr_blocks, 0) - number_of_computed_egress_with_ipv6_cidr_blocks = try(each.value.number_of_computed_egress_with_ipv6_cidr_blocks, var.defaults.number_of_computed_egress_with_ipv6_cidr_blocks, 0) - number_of_computed_egress_with_prefix_list_ids = try(each.value.number_of_computed_egress_with_prefix_list_ids, var.defaults.number_of_computed_egress_with_prefix_list_ids, 0) - number_of_computed_egress_with_self = try(each.value.number_of_computed_egress_with_self, var.defaults.number_of_computed_egress_with_self, 0) - number_of_computed_egress_with_source_security_group_id = try(each.value.number_of_computed_egress_with_source_security_group_id, var.defaults.number_of_computed_egress_with_source_security_group_id, 0) - number_of_computed_ingress_cidr_blocks = try(each.value.number_of_computed_ingress_cidr_blocks, var.defaults.number_of_computed_ingress_cidr_blocks, 0) - number_of_computed_ingress_ipv6_cidr_blocks = try(each.value.number_of_computed_ingress_ipv6_cidr_blocks, var.defaults.number_of_computed_ingress_ipv6_cidr_blocks, 0) - number_of_computed_ingress_prefix_list_ids = try(each.value.number_of_computed_ingress_prefix_list_ids, var.defaults.number_of_computed_ingress_prefix_list_ids, 0) - number_of_computed_ingress_rules = try(each.value.number_of_computed_ingress_rules, var.defaults.number_of_computed_ingress_rules, 0) - number_of_computed_ingress_with_cidr_blocks = try(each.value.number_of_computed_ingress_with_cidr_blocks, var.defaults.number_of_computed_ingress_with_cidr_blocks, 0) - number_of_computed_ingress_with_ipv6_cidr_blocks = try(each.value.number_of_computed_ingress_with_ipv6_cidr_blocks, var.defaults.number_of_computed_ingress_with_ipv6_cidr_blocks, 0) - number_of_computed_ingress_with_prefix_list_ids = try(each.value.number_of_computed_ingress_with_prefix_list_ids, var.defaults.number_of_computed_ingress_with_prefix_list_ids, 0) - number_of_computed_ingress_with_self = try(each.value.number_of_computed_ingress_with_self, var.defaults.number_of_computed_ingress_with_self, 0) - number_of_computed_ingress_with_source_security_group_id = try(each.value.number_of_computed_ingress_with_source_security_group_id, var.defaults.number_of_computed_ingress_with_source_security_group_id, 0) - revoke_rules_on_delete = try(each.value.revoke_rules_on_delete, var.defaults.revoke_rules_on_delete, false) - tags = try(each.value.tags, var.defaults.tags, {}) - use_name_prefix = try(each.value.use_name_prefix, var.defaults.use_name_prefix, true) - vpc_id = try(each.value.vpc_id, var.defaults.vpc_id) + auto_computed_egress_rules = try(each.value.auto_computed_egress_rules, var.defaults.auto_computed_egress_rules, []) + auto_computed_egress_with_self = try(each.value.auto_computed_egress_with_self, var.defaults.auto_computed_egress_with_self, []) + auto_computed_ingress_rules = try(each.value.auto_computed_ingress_rules, var.defaults.auto_computed_ingress_rules, []) + auto_computed_ingress_with_self = try(each.value.auto_computed_ingress_with_self, var.defaults.auto_computed_ingress_with_self, []) + auto_egress_rules = try(each.value.auto_egress_rules, var.defaults.auto_egress_rules, ["all-all"]) + auto_egress_with_self = try(each.value.auto_egress_with_self, var.defaults.auto_egress_with_self, []) + auto_ingress_rules = try(each.value.auto_ingress_rules, var.defaults.auto_ingress_rules, ["https-443-tcp"]) + auto_ingress_with_self = try(each.value.auto_ingress_with_self, var.defaults.auto_ingress_with_self, [{ "rule" = "all-all" }]) + auto_number_of_computed_egress_rules = try(each.value.auto_number_of_computed_egress_rules, var.defaults.auto_number_of_computed_egress_rules, 0) + auto_number_of_computed_egress_with_self = try(each.value.auto_number_of_computed_egress_with_self, var.defaults.auto_number_of_computed_egress_with_self, 0) + auto_number_of_computed_ingress_rules = try(each.value.auto_number_of_computed_ingress_rules, var.defaults.auto_number_of_computed_ingress_rules, 0) + auto_number_of_computed_ingress_with_self = try(each.value.auto_number_of_computed_ingress_with_self, var.defaults.auto_number_of_computed_ingress_with_self, 0) + computed_egress_cidr_blocks = try(each.value.computed_egress_cidr_blocks, var.defaults.computed_egress_cidr_blocks, ["0.0.0.0/0"]) + computed_egress_ipv6_cidr_blocks = try(each.value.computed_egress_ipv6_cidr_blocks, var.defaults.computed_egress_ipv6_cidr_blocks, ["::/0"]) + computed_egress_prefix_list_ids = try(each.value.computed_egress_prefix_list_ids, var.defaults.computed_egress_prefix_list_ids, []) + computed_egress_rules = try(each.value.computed_egress_rules, var.defaults.computed_egress_rules, []) + computed_egress_with_cidr_ipv4 = try(each.value.computed_egress_with_cidr_ipv4, var.defaults.computed_egress_with_cidr_ipv4, []) + computed_egress_with_cidr_ipv6 = try(each.value.computed_egress_with_cidr_ipv6, var.defaults.computed_egress_with_cidr_ipv6, []) + computed_egress_with_prefix_list_id = try(each.value.computed_egress_with_prefix_list_id, var.defaults.computed_egress_with_prefix_list_id, []) + computed_egress_with_referenced_security_group_id = try(each.value.computed_egress_with_referenced_security_group_id, var.defaults.computed_egress_with_referenced_security_group_id, []) + computed_egress_with_self = try(each.value.computed_egress_with_self, var.defaults.computed_egress_with_self, []) + computed_ingress_cidr_blocks = try(each.value.computed_ingress_cidr_blocks, var.defaults.computed_ingress_cidr_blocks, []) + computed_ingress_ipv6_cidr_blocks = try(each.value.computed_ingress_ipv6_cidr_blocks, var.defaults.computed_ingress_ipv6_cidr_blocks, []) + computed_ingress_prefix_list_ids = try(each.value.computed_ingress_prefix_list_ids, var.defaults.computed_ingress_prefix_list_ids, []) + computed_ingress_rules = try(each.value.computed_ingress_rules, var.defaults.computed_ingress_rules, []) + computed_ingress_with_cidr_ipv4 = try(each.value.computed_ingress_with_cidr_ipv4, var.defaults.computed_ingress_with_cidr_ipv4, []) + computed_ingress_with_cidr_ipv6 = try(each.value.computed_ingress_with_cidr_ipv6, var.defaults.computed_ingress_with_cidr_ipv6, []) + computed_ingress_with_prefix_list_id = try(each.value.computed_ingress_with_prefix_list_id, var.defaults.computed_ingress_with_prefix_list_id, []) + computed_ingress_with_referenced_security_group_id = try(each.value.computed_ingress_with_referenced_security_group_id, var.defaults.computed_ingress_with_referenced_security_group_id, []) + computed_ingress_with_self = try(each.value.computed_ingress_with_self, var.defaults.computed_ingress_with_self, []) + create = try(each.value.create, var.defaults.create, true) + description = try(each.value.description, var.defaults.description, "Security Group managed by Terraform") + egress_cidr_ipv4 = try(each.value.egress_cidr_ipv4, var.defaults.egress_cidr_ipv4, ["0.0.0.0/0"]) + egress_cidr_ipv6 = try(each.value.egress_cidr_ipv6, var.defaults.egress_cidr_ipv6, ["::/0"]) + egress_prefix_list_ids = try(each.value.egress_prefix_list_ids, var.defaults.egress_prefix_list_ids, []) + egress_rules = try(each.value.egress_rules, var.defaults.egress_rules, []) + egress_with_cidr_ipv4 = try(each.value.egress_with_cidr_ipv4, var.defaults.egress_with_cidr_ipv4, []) + egress_with_cidr_ipv6 = try(each.value.egress_with_cidr_ipv6, var.defaults.egress_with_cidr_ipv6, []) + egress_with_prefix_list_id = try(each.value.egress_with_prefix_list_id, var.defaults.egress_with_prefix_list_id, []) + egress_with_referenced_security_group_id = try(each.value.egress_with_referenced_security_group_id, var.defaults.egress_with_referenced_security_group_id, []) + egress_with_self = try(each.value.egress_with_self, var.defaults.egress_with_self, []) + ingress_cidr_ipv4 = try(each.value.ingress_cidr_ipv4, var.defaults.ingress_cidr_ipv4, []) + ingress_cidr_ipv6 = try(each.value.ingress_cidr_ipv6, var.defaults.ingress_cidr_ipv6, []) + ingress_prefix_list_ids = try(each.value.ingress_prefix_list_ids, var.defaults.ingress_prefix_list_ids, []) + ingress_rules = try(each.value.ingress_rules, var.defaults.ingress_rules, []) + ingress_with_cidr_ipv4 = try(each.value.ingress_with_cidr_ipv4, var.defaults.ingress_with_cidr_ipv4, []) + ingress_with_cidr_ipv6 = try(each.value.ingress_with_cidr_ipv6, var.defaults.ingress_with_cidr_ipv6, []) + ingress_with_prefix_list_id = try(each.value.ingress_with_prefix_list_id, var.defaults.ingress_with_prefix_list_id, []) + ingress_with_referenced_security_group_id = try(each.value.ingress_with_referenced_security_group_id, var.defaults.ingress_with_referenced_security_group_id, []) + ingress_with_self = try(each.value.ingress_with_self, var.defaults.ingress_with_self, []) + name = try(each.value.name, var.defaults.name) + number_of_computed_egress_cidr_blocks = try(each.value.number_of_computed_egress_cidr_blocks, var.defaults.number_of_computed_egress_cidr_blocks, 0) + number_of_computed_egress_ipv6_cidr_blocks = try(each.value.number_of_computed_egress_ipv6_cidr_blocks, var.defaults.number_of_computed_egress_ipv6_cidr_blocks, 0) + number_of_computed_egress_prefix_list_ids = try(each.value.number_of_computed_egress_prefix_list_ids, var.defaults.number_of_computed_egress_prefix_list_ids, 0) + number_of_computed_egress_rules = try(each.value.number_of_computed_egress_rules, var.defaults.number_of_computed_egress_rules, 0) + number_of_computed_egress_with_cidr_ipv4 = try(each.value.number_of_computed_egress_with_cidr_ipv4, var.defaults.number_of_computed_egress_with_cidr_ipv4, 0) + number_of_computed_egress_with_cidr_ipv6 = try(each.value.number_of_computed_egress_with_cidr_ipv6, var.defaults.number_of_computed_egress_with_cidr_ipv6, 0) + number_of_computed_egress_with_prefix_list_id = try(each.value.number_of_computed_egress_with_prefix_list_id, var.defaults.number_of_computed_egress_with_prefix_list_id, 0) + number_of_computed_egress_with_referenced_security_group_id = try(each.value.number_of_computed_egress_with_referenced_security_group_id, var.defaults.number_of_computed_egress_with_referenced_security_group_id, 0) + number_of_computed_egress_with_self = try(each.value.number_of_computed_egress_with_self, var.defaults.number_of_computed_egress_with_self, 0) + number_of_computed_ingress_cidr_blocks = try(each.value.number_of_computed_ingress_cidr_blocks, var.defaults.number_of_computed_ingress_cidr_blocks, 0) + number_of_computed_ingress_ipv6_cidr_blocks = try(each.value.number_of_computed_ingress_ipv6_cidr_blocks, var.defaults.number_of_computed_ingress_ipv6_cidr_blocks, 0) + number_of_computed_ingress_prefix_list_ids = try(each.value.number_of_computed_ingress_prefix_list_ids, var.defaults.number_of_computed_ingress_prefix_list_ids, 0) + number_of_computed_ingress_rules = try(each.value.number_of_computed_ingress_rules, var.defaults.number_of_computed_ingress_rules, 0) + number_of_computed_ingress_with_cidr_ipv4 = try(each.value.number_of_computed_ingress_with_cidr_ipv4, var.defaults.number_of_computed_ingress_with_cidr_ipv4, 0) + number_of_computed_ingress_with_cidr_ipv6 = try(each.value.number_of_computed_ingress_with_cidr_ipv6, var.defaults.number_of_computed_ingress_with_cidr_ipv6, 0) + number_of_computed_ingress_with_prefix_list_id = try(each.value.number_of_computed_ingress_with_prefix_list_id, var.defaults.number_of_computed_ingress_with_prefix_list_id, 0) + number_of_computed_ingress_with_referenced_security_group_id = try(each.value.number_of_computed_ingress_with_referenced_security_group_id, var.defaults.number_of_computed_ingress_with_referenced_security_group_id, 0) + number_of_computed_ingress_with_self = try(each.value.number_of_computed_ingress_with_self, var.defaults.number_of_computed_ingress_with_self, 0) + revoke_rules_on_delete = try(each.value.revoke_rules_on_delete, var.defaults.revoke_rules_on_delete, false) + tags = try(each.value.tags, var.defaults.tags, {}) + use_name_prefix = try(each.value.use_name_prefix, var.defaults.use_name_prefix, true) + vpc_id = try(each.value.vpc_id, var.defaults.vpc_id) } diff --git a/wrappers/https-8443/main.tf b/wrappers/https-8443/main.tf index 55ffa4f5..2f3f12b9 100644 --- a/wrappers/https-8443/main.tf +++ b/wrappers/https-8443/main.tf @@ -3,77 +3,77 @@ module "wrapper" { for_each = var.items - auto_computed_egress_rules = try(each.value.auto_computed_egress_rules, var.defaults.auto_computed_egress_rules, []) - auto_computed_egress_with_self = try(each.value.auto_computed_egress_with_self, var.defaults.auto_computed_egress_with_self, []) - auto_computed_ingress_rules = try(each.value.auto_computed_ingress_rules, var.defaults.auto_computed_ingress_rules, []) - auto_computed_ingress_with_self = try(each.value.auto_computed_ingress_with_self, var.defaults.auto_computed_ingress_with_self, []) - auto_egress_rules = try(each.value.auto_egress_rules, var.defaults.auto_egress_rules, ["all-all"]) - auto_egress_with_self = try(each.value.auto_egress_with_self, var.defaults.auto_egress_with_self, []) - auto_ingress_rules = try(each.value.auto_ingress_rules, var.defaults.auto_ingress_rules, ["https-8443-tcp"]) - auto_ingress_with_self = try(each.value.auto_ingress_with_self, var.defaults.auto_ingress_with_self, [{ "rule" = "all-all" }]) - auto_number_of_computed_egress_rules = try(each.value.auto_number_of_computed_egress_rules, var.defaults.auto_number_of_computed_egress_rules, 0) - auto_number_of_computed_egress_with_self = try(each.value.auto_number_of_computed_egress_with_self, var.defaults.auto_number_of_computed_egress_with_self, 0) - auto_number_of_computed_ingress_rules = try(each.value.auto_number_of_computed_ingress_rules, var.defaults.auto_number_of_computed_ingress_rules, 0) - auto_number_of_computed_ingress_with_self = try(each.value.auto_number_of_computed_ingress_with_self, var.defaults.auto_number_of_computed_ingress_with_self, 0) - computed_egress_cidr_blocks = try(each.value.computed_egress_cidr_blocks, var.defaults.computed_egress_cidr_blocks, ["0.0.0.0/0"]) - computed_egress_ipv6_cidr_blocks = try(each.value.computed_egress_ipv6_cidr_blocks, var.defaults.computed_egress_ipv6_cidr_blocks, ["::/0"]) - computed_egress_prefix_list_ids = try(each.value.computed_egress_prefix_list_ids, var.defaults.computed_egress_prefix_list_ids, []) - computed_egress_rules = try(each.value.computed_egress_rules, var.defaults.computed_egress_rules, []) - computed_egress_with_cidr_blocks = try(each.value.computed_egress_with_cidr_blocks, var.defaults.computed_egress_with_cidr_blocks, []) - computed_egress_with_ipv6_cidr_blocks = try(each.value.computed_egress_with_ipv6_cidr_blocks, var.defaults.computed_egress_with_ipv6_cidr_blocks, []) - computed_egress_with_prefix_list_ids = try(each.value.computed_egress_with_prefix_list_ids, var.defaults.computed_egress_with_prefix_list_ids, []) - computed_egress_with_self = try(each.value.computed_egress_with_self, var.defaults.computed_egress_with_self, []) - computed_egress_with_source_security_group_id = try(each.value.computed_egress_with_source_security_group_id, var.defaults.computed_egress_with_source_security_group_id, []) - computed_ingress_cidr_blocks = try(each.value.computed_ingress_cidr_blocks, var.defaults.computed_ingress_cidr_blocks, []) - computed_ingress_ipv6_cidr_blocks = try(each.value.computed_ingress_ipv6_cidr_blocks, var.defaults.computed_ingress_ipv6_cidr_blocks, []) - computed_ingress_prefix_list_ids = try(each.value.computed_ingress_prefix_list_ids, var.defaults.computed_ingress_prefix_list_ids, []) - computed_ingress_rules = try(each.value.computed_ingress_rules, var.defaults.computed_ingress_rules, []) - computed_ingress_with_cidr_blocks = try(each.value.computed_ingress_with_cidr_blocks, var.defaults.computed_ingress_with_cidr_blocks, []) - computed_ingress_with_ipv6_cidr_blocks = try(each.value.computed_ingress_with_ipv6_cidr_blocks, var.defaults.computed_ingress_with_ipv6_cidr_blocks, []) - computed_ingress_with_prefix_list_ids = try(each.value.computed_ingress_with_prefix_list_ids, var.defaults.computed_ingress_with_prefix_list_ids, []) - computed_ingress_with_self = try(each.value.computed_ingress_with_self, var.defaults.computed_ingress_with_self, []) - computed_ingress_with_source_security_group_id = try(each.value.computed_ingress_with_source_security_group_id, var.defaults.computed_ingress_with_source_security_group_id, []) - create = try(each.value.create, var.defaults.create, true) - description = try(each.value.description, var.defaults.description, "Security Group managed by Terraform") - egress_cidr_blocks = try(each.value.egress_cidr_blocks, var.defaults.egress_cidr_blocks, ["0.0.0.0/0"]) - egress_ipv6_cidr_blocks = try(each.value.egress_ipv6_cidr_blocks, var.defaults.egress_ipv6_cidr_blocks, ["::/0"]) - egress_prefix_list_ids = try(each.value.egress_prefix_list_ids, var.defaults.egress_prefix_list_ids, []) - egress_rules = try(each.value.egress_rules, var.defaults.egress_rules, []) - egress_with_cidr_blocks = try(each.value.egress_with_cidr_blocks, var.defaults.egress_with_cidr_blocks, []) - egress_with_ipv6_cidr_blocks = try(each.value.egress_with_ipv6_cidr_blocks, var.defaults.egress_with_ipv6_cidr_blocks, []) - egress_with_prefix_list_ids = try(each.value.egress_with_prefix_list_ids, var.defaults.egress_with_prefix_list_ids, []) - egress_with_self = try(each.value.egress_with_self, var.defaults.egress_with_self, []) - egress_with_source_security_group_id = try(each.value.egress_with_source_security_group_id, var.defaults.egress_with_source_security_group_id, []) - ingress_cidr_blocks = try(each.value.ingress_cidr_blocks, var.defaults.ingress_cidr_blocks, []) - ingress_ipv6_cidr_blocks = try(each.value.ingress_ipv6_cidr_blocks, var.defaults.ingress_ipv6_cidr_blocks, []) - ingress_prefix_list_ids = try(each.value.ingress_prefix_list_ids, var.defaults.ingress_prefix_list_ids, []) - ingress_rules = try(each.value.ingress_rules, var.defaults.ingress_rules, []) - ingress_with_cidr_blocks = try(each.value.ingress_with_cidr_blocks, var.defaults.ingress_with_cidr_blocks, []) - ingress_with_ipv6_cidr_blocks = try(each.value.ingress_with_ipv6_cidr_blocks, var.defaults.ingress_with_ipv6_cidr_blocks, []) - ingress_with_prefix_list_ids = try(each.value.ingress_with_prefix_list_ids, var.defaults.ingress_with_prefix_list_ids, []) - ingress_with_self = try(each.value.ingress_with_self, var.defaults.ingress_with_self, []) - ingress_with_source_security_group_id = try(each.value.ingress_with_source_security_group_id, var.defaults.ingress_with_source_security_group_id, []) - name = try(each.value.name, var.defaults.name) - number_of_computed_egress_cidr_blocks = try(each.value.number_of_computed_egress_cidr_blocks, var.defaults.number_of_computed_egress_cidr_blocks, 0) - number_of_computed_egress_ipv6_cidr_blocks = try(each.value.number_of_computed_egress_ipv6_cidr_blocks, var.defaults.number_of_computed_egress_ipv6_cidr_blocks, 0) - number_of_computed_egress_prefix_list_ids = try(each.value.number_of_computed_egress_prefix_list_ids, var.defaults.number_of_computed_egress_prefix_list_ids, 0) - number_of_computed_egress_rules = try(each.value.number_of_computed_egress_rules, var.defaults.number_of_computed_egress_rules, 0) - number_of_computed_egress_with_cidr_blocks = try(each.value.number_of_computed_egress_with_cidr_blocks, var.defaults.number_of_computed_egress_with_cidr_blocks, 0) - number_of_computed_egress_with_ipv6_cidr_blocks = try(each.value.number_of_computed_egress_with_ipv6_cidr_blocks, var.defaults.number_of_computed_egress_with_ipv6_cidr_blocks, 0) - number_of_computed_egress_with_prefix_list_ids = try(each.value.number_of_computed_egress_with_prefix_list_ids, var.defaults.number_of_computed_egress_with_prefix_list_ids, 0) - number_of_computed_egress_with_self = try(each.value.number_of_computed_egress_with_self, var.defaults.number_of_computed_egress_with_self, 0) - number_of_computed_egress_with_source_security_group_id = try(each.value.number_of_computed_egress_with_source_security_group_id, var.defaults.number_of_computed_egress_with_source_security_group_id, 0) - number_of_computed_ingress_cidr_blocks = try(each.value.number_of_computed_ingress_cidr_blocks, var.defaults.number_of_computed_ingress_cidr_blocks, 0) - number_of_computed_ingress_ipv6_cidr_blocks = try(each.value.number_of_computed_ingress_ipv6_cidr_blocks, var.defaults.number_of_computed_ingress_ipv6_cidr_blocks, 0) - number_of_computed_ingress_prefix_list_ids = try(each.value.number_of_computed_ingress_prefix_list_ids, var.defaults.number_of_computed_ingress_prefix_list_ids, 0) - number_of_computed_ingress_rules = try(each.value.number_of_computed_ingress_rules, var.defaults.number_of_computed_ingress_rules, 0) - number_of_computed_ingress_with_cidr_blocks = try(each.value.number_of_computed_ingress_with_cidr_blocks, var.defaults.number_of_computed_ingress_with_cidr_blocks, 0) - number_of_computed_ingress_with_ipv6_cidr_blocks = try(each.value.number_of_computed_ingress_with_ipv6_cidr_blocks, var.defaults.number_of_computed_ingress_with_ipv6_cidr_blocks, 0) - number_of_computed_ingress_with_prefix_list_ids = try(each.value.number_of_computed_ingress_with_prefix_list_ids, var.defaults.number_of_computed_ingress_with_prefix_list_ids, 0) - number_of_computed_ingress_with_self = try(each.value.number_of_computed_ingress_with_self, var.defaults.number_of_computed_ingress_with_self, 0) - number_of_computed_ingress_with_source_security_group_id = try(each.value.number_of_computed_ingress_with_source_security_group_id, var.defaults.number_of_computed_ingress_with_source_security_group_id, 0) - revoke_rules_on_delete = try(each.value.revoke_rules_on_delete, var.defaults.revoke_rules_on_delete, false) - tags = try(each.value.tags, var.defaults.tags, {}) - use_name_prefix = try(each.value.use_name_prefix, var.defaults.use_name_prefix, true) - vpc_id = try(each.value.vpc_id, var.defaults.vpc_id) + auto_computed_egress_rules = try(each.value.auto_computed_egress_rules, var.defaults.auto_computed_egress_rules, []) + auto_computed_egress_with_self = try(each.value.auto_computed_egress_with_self, var.defaults.auto_computed_egress_with_self, []) + auto_computed_ingress_rules = try(each.value.auto_computed_ingress_rules, var.defaults.auto_computed_ingress_rules, []) + auto_computed_ingress_with_self = try(each.value.auto_computed_ingress_with_self, var.defaults.auto_computed_ingress_with_self, []) + auto_egress_rules = try(each.value.auto_egress_rules, var.defaults.auto_egress_rules, ["all-all"]) + auto_egress_with_self = try(each.value.auto_egress_with_self, var.defaults.auto_egress_with_self, []) + auto_ingress_rules = try(each.value.auto_ingress_rules, var.defaults.auto_ingress_rules, ["https-8443-tcp"]) + auto_ingress_with_self = try(each.value.auto_ingress_with_self, var.defaults.auto_ingress_with_self, [{ "rule" = "all-all" }]) + auto_number_of_computed_egress_rules = try(each.value.auto_number_of_computed_egress_rules, var.defaults.auto_number_of_computed_egress_rules, 0) + auto_number_of_computed_egress_with_self = try(each.value.auto_number_of_computed_egress_with_self, var.defaults.auto_number_of_computed_egress_with_self, 0) + auto_number_of_computed_ingress_rules = try(each.value.auto_number_of_computed_ingress_rules, var.defaults.auto_number_of_computed_ingress_rules, 0) + auto_number_of_computed_ingress_with_self = try(each.value.auto_number_of_computed_ingress_with_self, var.defaults.auto_number_of_computed_ingress_with_self, 0) + computed_egress_cidr_blocks = try(each.value.computed_egress_cidr_blocks, var.defaults.computed_egress_cidr_blocks, ["0.0.0.0/0"]) + computed_egress_ipv6_cidr_blocks = try(each.value.computed_egress_ipv6_cidr_blocks, var.defaults.computed_egress_ipv6_cidr_blocks, ["::/0"]) + computed_egress_prefix_list_ids = try(each.value.computed_egress_prefix_list_ids, var.defaults.computed_egress_prefix_list_ids, []) + computed_egress_rules = try(each.value.computed_egress_rules, var.defaults.computed_egress_rules, []) + computed_egress_with_cidr_ipv4 = try(each.value.computed_egress_with_cidr_ipv4, var.defaults.computed_egress_with_cidr_ipv4, []) + computed_egress_with_cidr_ipv6 = try(each.value.computed_egress_with_cidr_ipv6, var.defaults.computed_egress_with_cidr_ipv6, []) + computed_egress_with_prefix_list_id = try(each.value.computed_egress_with_prefix_list_id, var.defaults.computed_egress_with_prefix_list_id, []) + computed_egress_with_referenced_security_group_id = try(each.value.computed_egress_with_referenced_security_group_id, var.defaults.computed_egress_with_referenced_security_group_id, []) + computed_egress_with_self = try(each.value.computed_egress_with_self, var.defaults.computed_egress_with_self, []) + computed_ingress_cidr_blocks = try(each.value.computed_ingress_cidr_blocks, var.defaults.computed_ingress_cidr_blocks, []) + computed_ingress_ipv6_cidr_blocks = try(each.value.computed_ingress_ipv6_cidr_blocks, var.defaults.computed_ingress_ipv6_cidr_blocks, []) + computed_ingress_prefix_list_ids = try(each.value.computed_ingress_prefix_list_ids, var.defaults.computed_ingress_prefix_list_ids, []) + computed_ingress_rules = try(each.value.computed_ingress_rules, var.defaults.computed_ingress_rules, []) + computed_ingress_with_cidr_ipv4 = try(each.value.computed_ingress_with_cidr_ipv4, var.defaults.computed_ingress_with_cidr_ipv4, []) + computed_ingress_with_cidr_ipv6 = try(each.value.computed_ingress_with_cidr_ipv6, var.defaults.computed_ingress_with_cidr_ipv6, []) + computed_ingress_with_prefix_list_id = try(each.value.computed_ingress_with_prefix_list_id, var.defaults.computed_ingress_with_prefix_list_id, []) + computed_ingress_with_referenced_security_group_id = try(each.value.computed_ingress_with_referenced_security_group_id, var.defaults.computed_ingress_with_referenced_security_group_id, []) + computed_ingress_with_self = try(each.value.computed_ingress_with_self, var.defaults.computed_ingress_with_self, []) + create = try(each.value.create, var.defaults.create, true) + description = try(each.value.description, var.defaults.description, "Security Group managed by Terraform") + egress_cidr_ipv4 = try(each.value.egress_cidr_ipv4, var.defaults.egress_cidr_ipv4, ["0.0.0.0/0"]) + egress_cidr_ipv6 = try(each.value.egress_cidr_ipv6, var.defaults.egress_cidr_ipv6, ["::/0"]) + egress_prefix_list_ids = try(each.value.egress_prefix_list_ids, var.defaults.egress_prefix_list_ids, []) + egress_rules = try(each.value.egress_rules, var.defaults.egress_rules, []) + egress_with_cidr_ipv4 = try(each.value.egress_with_cidr_ipv4, var.defaults.egress_with_cidr_ipv4, []) + egress_with_cidr_ipv6 = try(each.value.egress_with_cidr_ipv6, var.defaults.egress_with_cidr_ipv6, []) + egress_with_prefix_list_id = try(each.value.egress_with_prefix_list_id, var.defaults.egress_with_prefix_list_id, []) + egress_with_referenced_security_group_id = try(each.value.egress_with_referenced_security_group_id, var.defaults.egress_with_referenced_security_group_id, []) + egress_with_self = try(each.value.egress_with_self, var.defaults.egress_with_self, []) + ingress_cidr_ipv4 = try(each.value.ingress_cidr_ipv4, var.defaults.ingress_cidr_ipv4, []) + ingress_cidr_ipv6 = try(each.value.ingress_cidr_ipv6, var.defaults.ingress_cidr_ipv6, []) + ingress_prefix_list_ids = try(each.value.ingress_prefix_list_ids, var.defaults.ingress_prefix_list_ids, []) + ingress_rules = try(each.value.ingress_rules, var.defaults.ingress_rules, []) + ingress_with_cidr_ipv4 = try(each.value.ingress_with_cidr_ipv4, var.defaults.ingress_with_cidr_ipv4, []) + ingress_with_cidr_ipv6 = try(each.value.ingress_with_cidr_ipv6, var.defaults.ingress_with_cidr_ipv6, []) + ingress_with_prefix_list_id = try(each.value.ingress_with_prefix_list_id, var.defaults.ingress_with_prefix_list_id, []) + ingress_with_referenced_security_group_id = try(each.value.ingress_with_referenced_security_group_id, var.defaults.ingress_with_referenced_security_group_id, []) + ingress_with_self = try(each.value.ingress_with_self, var.defaults.ingress_with_self, []) + name = try(each.value.name, var.defaults.name) + number_of_computed_egress_cidr_blocks = try(each.value.number_of_computed_egress_cidr_blocks, var.defaults.number_of_computed_egress_cidr_blocks, 0) + number_of_computed_egress_ipv6_cidr_blocks = try(each.value.number_of_computed_egress_ipv6_cidr_blocks, var.defaults.number_of_computed_egress_ipv6_cidr_blocks, 0) + number_of_computed_egress_prefix_list_ids = try(each.value.number_of_computed_egress_prefix_list_ids, var.defaults.number_of_computed_egress_prefix_list_ids, 0) + number_of_computed_egress_rules = try(each.value.number_of_computed_egress_rules, var.defaults.number_of_computed_egress_rules, 0) + number_of_computed_egress_with_cidr_ipv4 = try(each.value.number_of_computed_egress_with_cidr_ipv4, var.defaults.number_of_computed_egress_with_cidr_ipv4, 0) + number_of_computed_egress_with_cidr_ipv6 = try(each.value.number_of_computed_egress_with_cidr_ipv6, var.defaults.number_of_computed_egress_with_cidr_ipv6, 0) + number_of_computed_egress_with_prefix_list_id = try(each.value.number_of_computed_egress_with_prefix_list_id, var.defaults.number_of_computed_egress_with_prefix_list_id, 0) + number_of_computed_egress_with_referenced_security_group_id = try(each.value.number_of_computed_egress_with_referenced_security_group_id, var.defaults.number_of_computed_egress_with_referenced_security_group_id, 0) + number_of_computed_egress_with_self = try(each.value.number_of_computed_egress_with_self, var.defaults.number_of_computed_egress_with_self, 0) + number_of_computed_ingress_cidr_blocks = try(each.value.number_of_computed_ingress_cidr_blocks, var.defaults.number_of_computed_ingress_cidr_blocks, 0) + number_of_computed_ingress_ipv6_cidr_blocks = try(each.value.number_of_computed_ingress_ipv6_cidr_blocks, var.defaults.number_of_computed_ingress_ipv6_cidr_blocks, 0) + number_of_computed_ingress_prefix_list_ids = try(each.value.number_of_computed_ingress_prefix_list_ids, var.defaults.number_of_computed_ingress_prefix_list_ids, 0) + number_of_computed_ingress_rules = try(each.value.number_of_computed_ingress_rules, var.defaults.number_of_computed_ingress_rules, 0) + number_of_computed_ingress_with_cidr_ipv4 = try(each.value.number_of_computed_ingress_with_cidr_ipv4, var.defaults.number_of_computed_ingress_with_cidr_ipv4, 0) + number_of_computed_ingress_with_cidr_ipv6 = try(each.value.number_of_computed_ingress_with_cidr_ipv6, var.defaults.number_of_computed_ingress_with_cidr_ipv6, 0) + number_of_computed_ingress_with_prefix_list_id = try(each.value.number_of_computed_ingress_with_prefix_list_id, var.defaults.number_of_computed_ingress_with_prefix_list_id, 0) + number_of_computed_ingress_with_referenced_security_group_id = try(each.value.number_of_computed_ingress_with_referenced_security_group_id, var.defaults.number_of_computed_ingress_with_referenced_security_group_id, 0) + number_of_computed_ingress_with_self = try(each.value.number_of_computed_ingress_with_self, var.defaults.number_of_computed_ingress_with_self, 0) + revoke_rules_on_delete = try(each.value.revoke_rules_on_delete, var.defaults.revoke_rules_on_delete, false) + tags = try(each.value.tags, var.defaults.tags, {}) + use_name_prefix = try(each.value.use_name_prefix, var.defaults.use_name_prefix, true) + vpc_id = try(each.value.vpc_id, var.defaults.vpc_id) } diff --git a/wrappers/ipsec-4500/main.tf b/wrappers/ipsec-4500/main.tf index 884769c8..7e0f200f 100644 --- a/wrappers/ipsec-4500/main.tf +++ b/wrappers/ipsec-4500/main.tf @@ -3,77 +3,77 @@ module "wrapper" { for_each = var.items - auto_computed_egress_rules = try(each.value.auto_computed_egress_rules, var.defaults.auto_computed_egress_rules, []) - auto_computed_egress_with_self = try(each.value.auto_computed_egress_with_self, var.defaults.auto_computed_egress_with_self, []) - auto_computed_ingress_rules = try(each.value.auto_computed_ingress_rules, var.defaults.auto_computed_ingress_rules, []) - auto_computed_ingress_with_self = try(each.value.auto_computed_ingress_with_self, var.defaults.auto_computed_ingress_with_self, []) - auto_egress_rules = try(each.value.auto_egress_rules, var.defaults.auto_egress_rules, ["all-all"]) - auto_egress_with_self = try(each.value.auto_egress_with_self, var.defaults.auto_egress_with_self, []) - auto_ingress_rules = try(each.value.auto_ingress_rules, var.defaults.auto_ingress_rules, ["ipsec-4500-udp"]) - auto_ingress_with_self = try(each.value.auto_ingress_with_self, var.defaults.auto_ingress_with_self, [{ "rule" = "all-all" }]) - auto_number_of_computed_egress_rules = try(each.value.auto_number_of_computed_egress_rules, var.defaults.auto_number_of_computed_egress_rules, 0) - auto_number_of_computed_egress_with_self = try(each.value.auto_number_of_computed_egress_with_self, var.defaults.auto_number_of_computed_egress_with_self, 0) - auto_number_of_computed_ingress_rules = try(each.value.auto_number_of_computed_ingress_rules, var.defaults.auto_number_of_computed_ingress_rules, 0) - auto_number_of_computed_ingress_with_self = try(each.value.auto_number_of_computed_ingress_with_self, var.defaults.auto_number_of_computed_ingress_with_self, 0) - computed_egress_cidr_blocks = try(each.value.computed_egress_cidr_blocks, var.defaults.computed_egress_cidr_blocks, ["0.0.0.0/0"]) - computed_egress_ipv6_cidr_blocks = try(each.value.computed_egress_ipv6_cidr_blocks, var.defaults.computed_egress_ipv6_cidr_blocks, ["::/0"]) - computed_egress_prefix_list_ids = try(each.value.computed_egress_prefix_list_ids, var.defaults.computed_egress_prefix_list_ids, []) - computed_egress_rules = try(each.value.computed_egress_rules, var.defaults.computed_egress_rules, []) - computed_egress_with_cidr_blocks = try(each.value.computed_egress_with_cidr_blocks, var.defaults.computed_egress_with_cidr_blocks, []) - computed_egress_with_ipv6_cidr_blocks = try(each.value.computed_egress_with_ipv6_cidr_blocks, var.defaults.computed_egress_with_ipv6_cidr_blocks, []) - computed_egress_with_prefix_list_ids = try(each.value.computed_egress_with_prefix_list_ids, var.defaults.computed_egress_with_prefix_list_ids, []) - computed_egress_with_self = try(each.value.computed_egress_with_self, var.defaults.computed_egress_with_self, []) - computed_egress_with_source_security_group_id = try(each.value.computed_egress_with_source_security_group_id, var.defaults.computed_egress_with_source_security_group_id, []) - computed_ingress_cidr_blocks = try(each.value.computed_ingress_cidr_blocks, var.defaults.computed_ingress_cidr_blocks, []) - computed_ingress_ipv6_cidr_blocks = try(each.value.computed_ingress_ipv6_cidr_blocks, var.defaults.computed_ingress_ipv6_cidr_blocks, []) - computed_ingress_prefix_list_ids = try(each.value.computed_ingress_prefix_list_ids, var.defaults.computed_ingress_prefix_list_ids, []) - computed_ingress_rules = try(each.value.computed_ingress_rules, var.defaults.computed_ingress_rules, []) - computed_ingress_with_cidr_blocks = try(each.value.computed_ingress_with_cidr_blocks, var.defaults.computed_ingress_with_cidr_blocks, []) - computed_ingress_with_ipv6_cidr_blocks = try(each.value.computed_ingress_with_ipv6_cidr_blocks, var.defaults.computed_ingress_with_ipv6_cidr_blocks, []) - computed_ingress_with_prefix_list_ids = try(each.value.computed_ingress_with_prefix_list_ids, var.defaults.computed_ingress_with_prefix_list_ids, []) - computed_ingress_with_self = try(each.value.computed_ingress_with_self, var.defaults.computed_ingress_with_self, []) - computed_ingress_with_source_security_group_id = try(each.value.computed_ingress_with_source_security_group_id, var.defaults.computed_ingress_with_source_security_group_id, []) - create = try(each.value.create, var.defaults.create, true) - description = try(each.value.description, var.defaults.description, "Security Group managed by Terraform") - egress_cidr_blocks = try(each.value.egress_cidr_blocks, var.defaults.egress_cidr_blocks, ["0.0.0.0/0"]) - egress_ipv6_cidr_blocks = try(each.value.egress_ipv6_cidr_blocks, var.defaults.egress_ipv6_cidr_blocks, ["::/0"]) - egress_prefix_list_ids = try(each.value.egress_prefix_list_ids, var.defaults.egress_prefix_list_ids, []) - egress_rules = try(each.value.egress_rules, var.defaults.egress_rules, []) - egress_with_cidr_blocks = try(each.value.egress_with_cidr_blocks, var.defaults.egress_with_cidr_blocks, []) - egress_with_ipv6_cidr_blocks = try(each.value.egress_with_ipv6_cidr_blocks, var.defaults.egress_with_ipv6_cidr_blocks, []) - egress_with_prefix_list_ids = try(each.value.egress_with_prefix_list_ids, var.defaults.egress_with_prefix_list_ids, []) - egress_with_self = try(each.value.egress_with_self, var.defaults.egress_with_self, []) - egress_with_source_security_group_id = try(each.value.egress_with_source_security_group_id, var.defaults.egress_with_source_security_group_id, []) - ingress_cidr_blocks = try(each.value.ingress_cidr_blocks, var.defaults.ingress_cidr_blocks, []) - ingress_ipv6_cidr_blocks = try(each.value.ingress_ipv6_cidr_blocks, var.defaults.ingress_ipv6_cidr_blocks, []) - ingress_prefix_list_ids = try(each.value.ingress_prefix_list_ids, var.defaults.ingress_prefix_list_ids, []) - ingress_rules = try(each.value.ingress_rules, var.defaults.ingress_rules, []) - ingress_with_cidr_blocks = try(each.value.ingress_with_cidr_blocks, var.defaults.ingress_with_cidr_blocks, []) - ingress_with_ipv6_cidr_blocks = try(each.value.ingress_with_ipv6_cidr_blocks, var.defaults.ingress_with_ipv6_cidr_blocks, []) - ingress_with_prefix_list_ids = try(each.value.ingress_with_prefix_list_ids, var.defaults.ingress_with_prefix_list_ids, []) - ingress_with_self = try(each.value.ingress_with_self, var.defaults.ingress_with_self, []) - ingress_with_source_security_group_id = try(each.value.ingress_with_source_security_group_id, var.defaults.ingress_with_source_security_group_id, []) - name = try(each.value.name, var.defaults.name) - number_of_computed_egress_cidr_blocks = try(each.value.number_of_computed_egress_cidr_blocks, var.defaults.number_of_computed_egress_cidr_blocks, 0) - number_of_computed_egress_ipv6_cidr_blocks = try(each.value.number_of_computed_egress_ipv6_cidr_blocks, var.defaults.number_of_computed_egress_ipv6_cidr_blocks, 0) - number_of_computed_egress_prefix_list_ids = try(each.value.number_of_computed_egress_prefix_list_ids, var.defaults.number_of_computed_egress_prefix_list_ids, 0) - number_of_computed_egress_rules = try(each.value.number_of_computed_egress_rules, var.defaults.number_of_computed_egress_rules, 0) - number_of_computed_egress_with_cidr_blocks = try(each.value.number_of_computed_egress_with_cidr_blocks, var.defaults.number_of_computed_egress_with_cidr_blocks, 0) - number_of_computed_egress_with_ipv6_cidr_blocks = try(each.value.number_of_computed_egress_with_ipv6_cidr_blocks, var.defaults.number_of_computed_egress_with_ipv6_cidr_blocks, 0) - number_of_computed_egress_with_prefix_list_ids = try(each.value.number_of_computed_egress_with_prefix_list_ids, var.defaults.number_of_computed_egress_with_prefix_list_ids, 0) - number_of_computed_egress_with_self = try(each.value.number_of_computed_egress_with_self, var.defaults.number_of_computed_egress_with_self, 0) - number_of_computed_egress_with_source_security_group_id = try(each.value.number_of_computed_egress_with_source_security_group_id, var.defaults.number_of_computed_egress_with_source_security_group_id, 0) - number_of_computed_ingress_cidr_blocks = try(each.value.number_of_computed_ingress_cidr_blocks, var.defaults.number_of_computed_ingress_cidr_blocks, 0) - number_of_computed_ingress_ipv6_cidr_blocks = try(each.value.number_of_computed_ingress_ipv6_cidr_blocks, var.defaults.number_of_computed_ingress_ipv6_cidr_blocks, 0) - number_of_computed_ingress_prefix_list_ids = try(each.value.number_of_computed_ingress_prefix_list_ids, var.defaults.number_of_computed_ingress_prefix_list_ids, 0) - number_of_computed_ingress_rules = try(each.value.number_of_computed_ingress_rules, var.defaults.number_of_computed_ingress_rules, 0) - number_of_computed_ingress_with_cidr_blocks = try(each.value.number_of_computed_ingress_with_cidr_blocks, var.defaults.number_of_computed_ingress_with_cidr_blocks, 0) - number_of_computed_ingress_with_ipv6_cidr_blocks = try(each.value.number_of_computed_ingress_with_ipv6_cidr_blocks, var.defaults.number_of_computed_ingress_with_ipv6_cidr_blocks, 0) - number_of_computed_ingress_with_prefix_list_ids = try(each.value.number_of_computed_ingress_with_prefix_list_ids, var.defaults.number_of_computed_ingress_with_prefix_list_ids, 0) - number_of_computed_ingress_with_self = try(each.value.number_of_computed_ingress_with_self, var.defaults.number_of_computed_ingress_with_self, 0) - number_of_computed_ingress_with_source_security_group_id = try(each.value.number_of_computed_ingress_with_source_security_group_id, var.defaults.number_of_computed_ingress_with_source_security_group_id, 0) - revoke_rules_on_delete = try(each.value.revoke_rules_on_delete, var.defaults.revoke_rules_on_delete, false) - tags = try(each.value.tags, var.defaults.tags, {}) - use_name_prefix = try(each.value.use_name_prefix, var.defaults.use_name_prefix, true) - vpc_id = try(each.value.vpc_id, var.defaults.vpc_id) + auto_computed_egress_rules = try(each.value.auto_computed_egress_rules, var.defaults.auto_computed_egress_rules, []) + auto_computed_egress_with_self = try(each.value.auto_computed_egress_with_self, var.defaults.auto_computed_egress_with_self, []) + auto_computed_ingress_rules = try(each.value.auto_computed_ingress_rules, var.defaults.auto_computed_ingress_rules, []) + auto_computed_ingress_with_self = try(each.value.auto_computed_ingress_with_self, var.defaults.auto_computed_ingress_with_self, []) + auto_egress_rules = try(each.value.auto_egress_rules, var.defaults.auto_egress_rules, ["all-all"]) + auto_egress_with_self = try(each.value.auto_egress_with_self, var.defaults.auto_egress_with_self, []) + auto_ingress_rules = try(each.value.auto_ingress_rules, var.defaults.auto_ingress_rules, ["ipsec-4500-udp"]) + auto_ingress_with_self = try(each.value.auto_ingress_with_self, var.defaults.auto_ingress_with_self, [{ "rule" = "all-all" }]) + auto_number_of_computed_egress_rules = try(each.value.auto_number_of_computed_egress_rules, var.defaults.auto_number_of_computed_egress_rules, 0) + auto_number_of_computed_egress_with_self = try(each.value.auto_number_of_computed_egress_with_self, var.defaults.auto_number_of_computed_egress_with_self, 0) + auto_number_of_computed_ingress_rules = try(each.value.auto_number_of_computed_ingress_rules, var.defaults.auto_number_of_computed_ingress_rules, 0) + auto_number_of_computed_ingress_with_self = try(each.value.auto_number_of_computed_ingress_with_self, var.defaults.auto_number_of_computed_ingress_with_self, 0) + computed_egress_cidr_blocks = try(each.value.computed_egress_cidr_blocks, var.defaults.computed_egress_cidr_blocks, ["0.0.0.0/0"]) + computed_egress_ipv6_cidr_blocks = try(each.value.computed_egress_ipv6_cidr_blocks, var.defaults.computed_egress_ipv6_cidr_blocks, ["::/0"]) + computed_egress_prefix_list_ids = try(each.value.computed_egress_prefix_list_ids, var.defaults.computed_egress_prefix_list_ids, []) + computed_egress_rules = try(each.value.computed_egress_rules, var.defaults.computed_egress_rules, []) + computed_egress_with_cidr_ipv4 = try(each.value.computed_egress_with_cidr_ipv4, var.defaults.computed_egress_with_cidr_ipv4, []) + computed_egress_with_cidr_ipv6 = try(each.value.computed_egress_with_cidr_ipv6, var.defaults.computed_egress_with_cidr_ipv6, []) + computed_egress_with_prefix_list_id = try(each.value.computed_egress_with_prefix_list_id, var.defaults.computed_egress_with_prefix_list_id, []) + computed_egress_with_referenced_security_group_id = try(each.value.computed_egress_with_referenced_security_group_id, var.defaults.computed_egress_with_referenced_security_group_id, []) + computed_egress_with_self = try(each.value.computed_egress_with_self, var.defaults.computed_egress_with_self, []) + computed_ingress_cidr_blocks = try(each.value.computed_ingress_cidr_blocks, var.defaults.computed_ingress_cidr_blocks, []) + computed_ingress_ipv6_cidr_blocks = try(each.value.computed_ingress_ipv6_cidr_blocks, var.defaults.computed_ingress_ipv6_cidr_blocks, []) + computed_ingress_prefix_list_ids = try(each.value.computed_ingress_prefix_list_ids, var.defaults.computed_ingress_prefix_list_ids, []) + computed_ingress_rules = try(each.value.computed_ingress_rules, var.defaults.computed_ingress_rules, []) + computed_ingress_with_cidr_ipv4 = try(each.value.computed_ingress_with_cidr_ipv4, var.defaults.computed_ingress_with_cidr_ipv4, []) + computed_ingress_with_cidr_ipv6 = try(each.value.computed_ingress_with_cidr_ipv6, var.defaults.computed_ingress_with_cidr_ipv6, []) + computed_ingress_with_prefix_list_id = try(each.value.computed_ingress_with_prefix_list_id, var.defaults.computed_ingress_with_prefix_list_id, []) + computed_ingress_with_referenced_security_group_id = try(each.value.computed_ingress_with_referenced_security_group_id, var.defaults.computed_ingress_with_referenced_security_group_id, []) + computed_ingress_with_self = try(each.value.computed_ingress_with_self, var.defaults.computed_ingress_with_self, []) + create = try(each.value.create, var.defaults.create, true) + description = try(each.value.description, var.defaults.description, "Security Group managed by Terraform") + egress_cidr_ipv4 = try(each.value.egress_cidr_ipv4, var.defaults.egress_cidr_ipv4, ["0.0.0.0/0"]) + egress_cidr_ipv6 = try(each.value.egress_cidr_ipv6, var.defaults.egress_cidr_ipv6, ["::/0"]) + egress_prefix_list_ids = try(each.value.egress_prefix_list_ids, var.defaults.egress_prefix_list_ids, []) + egress_rules = try(each.value.egress_rules, var.defaults.egress_rules, []) + egress_with_cidr_ipv4 = try(each.value.egress_with_cidr_ipv4, var.defaults.egress_with_cidr_ipv4, []) + egress_with_cidr_ipv6 = try(each.value.egress_with_cidr_ipv6, var.defaults.egress_with_cidr_ipv6, []) + egress_with_prefix_list_id = try(each.value.egress_with_prefix_list_id, var.defaults.egress_with_prefix_list_id, []) + egress_with_referenced_security_group_id = try(each.value.egress_with_referenced_security_group_id, var.defaults.egress_with_referenced_security_group_id, []) + egress_with_self = try(each.value.egress_with_self, var.defaults.egress_with_self, []) + ingress_cidr_ipv4 = try(each.value.ingress_cidr_ipv4, var.defaults.ingress_cidr_ipv4, []) + ingress_cidr_ipv6 = try(each.value.ingress_cidr_ipv6, var.defaults.ingress_cidr_ipv6, []) + ingress_prefix_list_ids = try(each.value.ingress_prefix_list_ids, var.defaults.ingress_prefix_list_ids, []) + ingress_rules = try(each.value.ingress_rules, var.defaults.ingress_rules, []) + ingress_with_cidr_ipv4 = try(each.value.ingress_with_cidr_ipv4, var.defaults.ingress_with_cidr_ipv4, []) + ingress_with_cidr_ipv6 = try(each.value.ingress_with_cidr_ipv6, var.defaults.ingress_with_cidr_ipv6, []) + ingress_with_prefix_list_id = try(each.value.ingress_with_prefix_list_id, var.defaults.ingress_with_prefix_list_id, []) + ingress_with_referenced_security_group_id = try(each.value.ingress_with_referenced_security_group_id, var.defaults.ingress_with_referenced_security_group_id, []) + ingress_with_self = try(each.value.ingress_with_self, var.defaults.ingress_with_self, []) + name = try(each.value.name, var.defaults.name) + number_of_computed_egress_cidr_blocks = try(each.value.number_of_computed_egress_cidr_blocks, var.defaults.number_of_computed_egress_cidr_blocks, 0) + number_of_computed_egress_ipv6_cidr_blocks = try(each.value.number_of_computed_egress_ipv6_cidr_blocks, var.defaults.number_of_computed_egress_ipv6_cidr_blocks, 0) + number_of_computed_egress_prefix_list_ids = try(each.value.number_of_computed_egress_prefix_list_ids, var.defaults.number_of_computed_egress_prefix_list_ids, 0) + number_of_computed_egress_rules = try(each.value.number_of_computed_egress_rules, var.defaults.number_of_computed_egress_rules, 0) + number_of_computed_egress_with_cidr_ipv4 = try(each.value.number_of_computed_egress_with_cidr_ipv4, var.defaults.number_of_computed_egress_with_cidr_ipv4, 0) + number_of_computed_egress_with_cidr_ipv6 = try(each.value.number_of_computed_egress_with_cidr_ipv6, var.defaults.number_of_computed_egress_with_cidr_ipv6, 0) + number_of_computed_egress_with_prefix_list_id = try(each.value.number_of_computed_egress_with_prefix_list_id, var.defaults.number_of_computed_egress_with_prefix_list_id, 0) + number_of_computed_egress_with_referenced_security_group_id = try(each.value.number_of_computed_egress_with_referenced_security_group_id, var.defaults.number_of_computed_egress_with_referenced_security_group_id, 0) + number_of_computed_egress_with_self = try(each.value.number_of_computed_egress_with_self, var.defaults.number_of_computed_egress_with_self, 0) + number_of_computed_ingress_cidr_blocks = try(each.value.number_of_computed_ingress_cidr_blocks, var.defaults.number_of_computed_ingress_cidr_blocks, 0) + number_of_computed_ingress_ipv6_cidr_blocks = try(each.value.number_of_computed_ingress_ipv6_cidr_blocks, var.defaults.number_of_computed_ingress_ipv6_cidr_blocks, 0) + number_of_computed_ingress_prefix_list_ids = try(each.value.number_of_computed_ingress_prefix_list_ids, var.defaults.number_of_computed_ingress_prefix_list_ids, 0) + number_of_computed_ingress_rules = try(each.value.number_of_computed_ingress_rules, var.defaults.number_of_computed_ingress_rules, 0) + number_of_computed_ingress_with_cidr_ipv4 = try(each.value.number_of_computed_ingress_with_cidr_ipv4, var.defaults.number_of_computed_ingress_with_cidr_ipv4, 0) + number_of_computed_ingress_with_cidr_ipv6 = try(each.value.number_of_computed_ingress_with_cidr_ipv6, var.defaults.number_of_computed_ingress_with_cidr_ipv6, 0) + number_of_computed_ingress_with_prefix_list_id = try(each.value.number_of_computed_ingress_with_prefix_list_id, var.defaults.number_of_computed_ingress_with_prefix_list_id, 0) + number_of_computed_ingress_with_referenced_security_group_id = try(each.value.number_of_computed_ingress_with_referenced_security_group_id, var.defaults.number_of_computed_ingress_with_referenced_security_group_id, 0) + number_of_computed_ingress_with_self = try(each.value.number_of_computed_ingress_with_self, var.defaults.number_of_computed_ingress_with_self, 0) + revoke_rules_on_delete = try(each.value.revoke_rules_on_delete, var.defaults.revoke_rules_on_delete, false) + tags = try(each.value.tags, var.defaults.tags, {}) + use_name_prefix = try(each.value.use_name_prefix, var.defaults.use_name_prefix, true) + vpc_id = try(each.value.vpc_id, var.defaults.vpc_id) } diff --git a/wrappers/ipsec-500/main.tf b/wrappers/ipsec-500/main.tf index 3ddecd6b..604b9207 100644 --- a/wrappers/ipsec-500/main.tf +++ b/wrappers/ipsec-500/main.tf @@ -3,77 +3,77 @@ module "wrapper" { for_each = var.items - auto_computed_egress_rules = try(each.value.auto_computed_egress_rules, var.defaults.auto_computed_egress_rules, []) - auto_computed_egress_with_self = try(each.value.auto_computed_egress_with_self, var.defaults.auto_computed_egress_with_self, []) - auto_computed_ingress_rules = try(each.value.auto_computed_ingress_rules, var.defaults.auto_computed_ingress_rules, []) - auto_computed_ingress_with_self = try(each.value.auto_computed_ingress_with_self, var.defaults.auto_computed_ingress_with_self, []) - auto_egress_rules = try(each.value.auto_egress_rules, var.defaults.auto_egress_rules, ["all-all"]) - auto_egress_with_self = try(each.value.auto_egress_with_self, var.defaults.auto_egress_with_self, []) - auto_ingress_rules = try(each.value.auto_ingress_rules, var.defaults.auto_ingress_rules, ["ipsec-500-udp"]) - auto_ingress_with_self = try(each.value.auto_ingress_with_self, var.defaults.auto_ingress_with_self, [{ "rule" = "all-all" }]) - auto_number_of_computed_egress_rules = try(each.value.auto_number_of_computed_egress_rules, var.defaults.auto_number_of_computed_egress_rules, 0) - auto_number_of_computed_egress_with_self = try(each.value.auto_number_of_computed_egress_with_self, var.defaults.auto_number_of_computed_egress_with_self, 0) - auto_number_of_computed_ingress_rules = try(each.value.auto_number_of_computed_ingress_rules, var.defaults.auto_number_of_computed_ingress_rules, 0) - auto_number_of_computed_ingress_with_self = try(each.value.auto_number_of_computed_ingress_with_self, var.defaults.auto_number_of_computed_ingress_with_self, 0) - computed_egress_cidr_blocks = try(each.value.computed_egress_cidr_blocks, var.defaults.computed_egress_cidr_blocks, ["0.0.0.0/0"]) - computed_egress_ipv6_cidr_blocks = try(each.value.computed_egress_ipv6_cidr_blocks, var.defaults.computed_egress_ipv6_cidr_blocks, ["::/0"]) - computed_egress_prefix_list_ids = try(each.value.computed_egress_prefix_list_ids, var.defaults.computed_egress_prefix_list_ids, []) - computed_egress_rules = try(each.value.computed_egress_rules, var.defaults.computed_egress_rules, []) - computed_egress_with_cidr_blocks = try(each.value.computed_egress_with_cidr_blocks, var.defaults.computed_egress_with_cidr_blocks, []) - computed_egress_with_ipv6_cidr_blocks = try(each.value.computed_egress_with_ipv6_cidr_blocks, var.defaults.computed_egress_with_ipv6_cidr_blocks, []) - computed_egress_with_prefix_list_ids = try(each.value.computed_egress_with_prefix_list_ids, var.defaults.computed_egress_with_prefix_list_ids, []) - computed_egress_with_self = try(each.value.computed_egress_with_self, var.defaults.computed_egress_with_self, []) - computed_egress_with_source_security_group_id = try(each.value.computed_egress_with_source_security_group_id, var.defaults.computed_egress_with_source_security_group_id, []) - computed_ingress_cidr_blocks = try(each.value.computed_ingress_cidr_blocks, var.defaults.computed_ingress_cidr_blocks, []) - computed_ingress_ipv6_cidr_blocks = try(each.value.computed_ingress_ipv6_cidr_blocks, var.defaults.computed_ingress_ipv6_cidr_blocks, []) - computed_ingress_prefix_list_ids = try(each.value.computed_ingress_prefix_list_ids, var.defaults.computed_ingress_prefix_list_ids, []) - computed_ingress_rules = try(each.value.computed_ingress_rules, var.defaults.computed_ingress_rules, []) - computed_ingress_with_cidr_blocks = try(each.value.computed_ingress_with_cidr_blocks, var.defaults.computed_ingress_with_cidr_blocks, []) - computed_ingress_with_ipv6_cidr_blocks = try(each.value.computed_ingress_with_ipv6_cidr_blocks, var.defaults.computed_ingress_with_ipv6_cidr_blocks, []) - computed_ingress_with_prefix_list_ids = try(each.value.computed_ingress_with_prefix_list_ids, var.defaults.computed_ingress_with_prefix_list_ids, []) - computed_ingress_with_self = try(each.value.computed_ingress_with_self, var.defaults.computed_ingress_with_self, []) - computed_ingress_with_source_security_group_id = try(each.value.computed_ingress_with_source_security_group_id, var.defaults.computed_ingress_with_source_security_group_id, []) - create = try(each.value.create, var.defaults.create, true) - description = try(each.value.description, var.defaults.description, "Security Group managed by Terraform") - egress_cidr_blocks = try(each.value.egress_cidr_blocks, var.defaults.egress_cidr_blocks, ["0.0.0.0/0"]) - egress_ipv6_cidr_blocks = try(each.value.egress_ipv6_cidr_blocks, var.defaults.egress_ipv6_cidr_blocks, ["::/0"]) - egress_prefix_list_ids = try(each.value.egress_prefix_list_ids, var.defaults.egress_prefix_list_ids, []) - egress_rules = try(each.value.egress_rules, var.defaults.egress_rules, []) - egress_with_cidr_blocks = try(each.value.egress_with_cidr_blocks, var.defaults.egress_with_cidr_blocks, []) - egress_with_ipv6_cidr_blocks = try(each.value.egress_with_ipv6_cidr_blocks, var.defaults.egress_with_ipv6_cidr_blocks, []) - egress_with_prefix_list_ids = try(each.value.egress_with_prefix_list_ids, var.defaults.egress_with_prefix_list_ids, []) - egress_with_self = try(each.value.egress_with_self, var.defaults.egress_with_self, []) - egress_with_source_security_group_id = try(each.value.egress_with_source_security_group_id, var.defaults.egress_with_source_security_group_id, []) - ingress_cidr_blocks = try(each.value.ingress_cidr_blocks, var.defaults.ingress_cidr_blocks, []) - ingress_ipv6_cidr_blocks = try(each.value.ingress_ipv6_cidr_blocks, var.defaults.ingress_ipv6_cidr_blocks, []) - ingress_prefix_list_ids = try(each.value.ingress_prefix_list_ids, var.defaults.ingress_prefix_list_ids, []) - ingress_rules = try(each.value.ingress_rules, var.defaults.ingress_rules, []) - ingress_with_cidr_blocks = try(each.value.ingress_with_cidr_blocks, var.defaults.ingress_with_cidr_blocks, []) - ingress_with_ipv6_cidr_blocks = try(each.value.ingress_with_ipv6_cidr_blocks, var.defaults.ingress_with_ipv6_cidr_blocks, []) - ingress_with_prefix_list_ids = try(each.value.ingress_with_prefix_list_ids, var.defaults.ingress_with_prefix_list_ids, []) - ingress_with_self = try(each.value.ingress_with_self, var.defaults.ingress_with_self, []) - ingress_with_source_security_group_id = try(each.value.ingress_with_source_security_group_id, var.defaults.ingress_with_source_security_group_id, []) - name = try(each.value.name, var.defaults.name) - number_of_computed_egress_cidr_blocks = try(each.value.number_of_computed_egress_cidr_blocks, var.defaults.number_of_computed_egress_cidr_blocks, 0) - number_of_computed_egress_ipv6_cidr_blocks = try(each.value.number_of_computed_egress_ipv6_cidr_blocks, var.defaults.number_of_computed_egress_ipv6_cidr_blocks, 0) - number_of_computed_egress_prefix_list_ids = try(each.value.number_of_computed_egress_prefix_list_ids, var.defaults.number_of_computed_egress_prefix_list_ids, 0) - number_of_computed_egress_rules = try(each.value.number_of_computed_egress_rules, var.defaults.number_of_computed_egress_rules, 0) - number_of_computed_egress_with_cidr_blocks = try(each.value.number_of_computed_egress_with_cidr_blocks, var.defaults.number_of_computed_egress_with_cidr_blocks, 0) - number_of_computed_egress_with_ipv6_cidr_blocks = try(each.value.number_of_computed_egress_with_ipv6_cidr_blocks, var.defaults.number_of_computed_egress_with_ipv6_cidr_blocks, 0) - number_of_computed_egress_with_prefix_list_ids = try(each.value.number_of_computed_egress_with_prefix_list_ids, var.defaults.number_of_computed_egress_with_prefix_list_ids, 0) - number_of_computed_egress_with_self = try(each.value.number_of_computed_egress_with_self, var.defaults.number_of_computed_egress_with_self, 0) - number_of_computed_egress_with_source_security_group_id = try(each.value.number_of_computed_egress_with_source_security_group_id, var.defaults.number_of_computed_egress_with_source_security_group_id, 0) - number_of_computed_ingress_cidr_blocks = try(each.value.number_of_computed_ingress_cidr_blocks, var.defaults.number_of_computed_ingress_cidr_blocks, 0) - number_of_computed_ingress_ipv6_cidr_blocks = try(each.value.number_of_computed_ingress_ipv6_cidr_blocks, var.defaults.number_of_computed_ingress_ipv6_cidr_blocks, 0) - number_of_computed_ingress_prefix_list_ids = try(each.value.number_of_computed_ingress_prefix_list_ids, var.defaults.number_of_computed_ingress_prefix_list_ids, 0) - number_of_computed_ingress_rules = try(each.value.number_of_computed_ingress_rules, var.defaults.number_of_computed_ingress_rules, 0) - number_of_computed_ingress_with_cidr_blocks = try(each.value.number_of_computed_ingress_with_cidr_blocks, var.defaults.number_of_computed_ingress_with_cidr_blocks, 0) - number_of_computed_ingress_with_ipv6_cidr_blocks = try(each.value.number_of_computed_ingress_with_ipv6_cidr_blocks, var.defaults.number_of_computed_ingress_with_ipv6_cidr_blocks, 0) - number_of_computed_ingress_with_prefix_list_ids = try(each.value.number_of_computed_ingress_with_prefix_list_ids, var.defaults.number_of_computed_ingress_with_prefix_list_ids, 0) - number_of_computed_ingress_with_self = try(each.value.number_of_computed_ingress_with_self, var.defaults.number_of_computed_ingress_with_self, 0) - number_of_computed_ingress_with_source_security_group_id = try(each.value.number_of_computed_ingress_with_source_security_group_id, var.defaults.number_of_computed_ingress_with_source_security_group_id, 0) - revoke_rules_on_delete = try(each.value.revoke_rules_on_delete, var.defaults.revoke_rules_on_delete, false) - tags = try(each.value.tags, var.defaults.tags, {}) - use_name_prefix = try(each.value.use_name_prefix, var.defaults.use_name_prefix, true) - vpc_id = try(each.value.vpc_id, var.defaults.vpc_id) + auto_computed_egress_rules = try(each.value.auto_computed_egress_rules, var.defaults.auto_computed_egress_rules, []) + auto_computed_egress_with_self = try(each.value.auto_computed_egress_with_self, var.defaults.auto_computed_egress_with_self, []) + auto_computed_ingress_rules = try(each.value.auto_computed_ingress_rules, var.defaults.auto_computed_ingress_rules, []) + auto_computed_ingress_with_self = try(each.value.auto_computed_ingress_with_self, var.defaults.auto_computed_ingress_with_self, []) + auto_egress_rules = try(each.value.auto_egress_rules, var.defaults.auto_egress_rules, ["all-all"]) + auto_egress_with_self = try(each.value.auto_egress_with_self, var.defaults.auto_egress_with_self, []) + auto_ingress_rules = try(each.value.auto_ingress_rules, var.defaults.auto_ingress_rules, ["ipsec-500-udp"]) + auto_ingress_with_self = try(each.value.auto_ingress_with_self, var.defaults.auto_ingress_with_self, [{ "rule" = "all-all" }]) + auto_number_of_computed_egress_rules = try(each.value.auto_number_of_computed_egress_rules, var.defaults.auto_number_of_computed_egress_rules, 0) + auto_number_of_computed_egress_with_self = try(each.value.auto_number_of_computed_egress_with_self, var.defaults.auto_number_of_computed_egress_with_self, 0) + auto_number_of_computed_ingress_rules = try(each.value.auto_number_of_computed_ingress_rules, var.defaults.auto_number_of_computed_ingress_rules, 0) + auto_number_of_computed_ingress_with_self = try(each.value.auto_number_of_computed_ingress_with_self, var.defaults.auto_number_of_computed_ingress_with_self, 0) + computed_egress_cidr_blocks = try(each.value.computed_egress_cidr_blocks, var.defaults.computed_egress_cidr_blocks, ["0.0.0.0/0"]) + computed_egress_ipv6_cidr_blocks = try(each.value.computed_egress_ipv6_cidr_blocks, var.defaults.computed_egress_ipv6_cidr_blocks, ["::/0"]) + computed_egress_prefix_list_ids = try(each.value.computed_egress_prefix_list_ids, var.defaults.computed_egress_prefix_list_ids, []) + computed_egress_rules = try(each.value.computed_egress_rules, var.defaults.computed_egress_rules, []) + computed_egress_with_cidr_ipv4 = try(each.value.computed_egress_with_cidr_ipv4, var.defaults.computed_egress_with_cidr_ipv4, []) + computed_egress_with_cidr_ipv6 = try(each.value.computed_egress_with_cidr_ipv6, var.defaults.computed_egress_with_cidr_ipv6, []) + computed_egress_with_prefix_list_id = try(each.value.computed_egress_with_prefix_list_id, var.defaults.computed_egress_with_prefix_list_id, []) + computed_egress_with_referenced_security_group_id = try(each.value.computed_egress_with_referenced_security_group_id, var.defaults.computed_egress_with_referenced_security_group_id, []) + computed_egress_with_self = try(each.value.computed_egress_with_self, var.defaults.computed_egress_with_self, []) + computed_ingress_cidr_blocks = try(each.value.computed_ingress_cidr_blocks, var.defaults.computed_ingress_cidr_blocks, []) + computed_ingress_ipv6_cidr_blocks = try(each.value.computed_ingress_ipv6_cidr_blocks, var.defaults.computed_ingress_ipv6_cidr_blocks, []) + computed_ingress_prefix_list_ids = try(each.value.computed_ingress_prefix_list_ids, var.defaults.computed_ingress_prefix_list_ids, []) + computed_ingress_rules = try(each.value.computed_ingress_rules, var.defaults.computed_ingress_rules, []) + computed_ingress_with_cidr_ipv4 = try(each.value.computed_ingress_with_cidr_ipv4, var.defaults.computed_ingress_with_cidr_ipv4, []) + computed_ingress_with_cidr_ipv6 = try(each.value.computed_ingress_with_cidr_ipv6, var.defaults.computed_ingress_with_cidr_ipv6, []) + computed_ingress_with_prefix_list_id = try(each.value.computed_ingress_with_prefix_list_id, var.defaults.computed_ingress_with_prefix_list_id, []) + computed_ingress_with_referenced_security_group_id = try(each.value.computed_ingress_with_referenced_security_group_id, var.defaults.computed_ingress_with_referenced_security_group_id, []) + computed_ingress_with_self = try(each.value.computed_ingress_with_self, var.defaults.computed_ingress_with_self, []) + create = try(each.value.create, var.defaults.create, true) + description = try(each.value.description, var.defaults.description, "Security Group managed by Terraform") + egress_cidr_ipv4 = try(each.value.egress_cidr_ipv4, var.defaults.egress_cidr_ipv4, ["0.0.0.0/0"]) + egress_cidr_ipv6 = try(each.value.egress_cidr_ipv6, var.defaults.egress_cidr_ipv6, ["::/0"]) + egress_prefix_list_ids = try(each.value.egress_prefix_list_ids, var.defaults.egress_prefix_list_ids, []) + egress_rules = try(each.value.egress_rules, var.defaults.egress_rules, []) + egress_with_cidr_ipv4 = try(each.value.egress_with_cidr_ipv4, var.defaults.egress_with_cidr_ipv4, []) + egress_with_cidr_ipv6 = try(each.value.egress_with_cidr_ipv6, var.defaults.egress_with_cidr_ipv6, []) + egress_with_prefix_list_id = try(each.value.egress_with_prefix_list_id, var.defaults.egress_with_prefix_list_id, []) + egress_with_referenced_security_group_id = try(each.value.egress_with_referenced_security_group_id, var.defaults.egress_with_referenced_security_group_id, []) + egress_with_self = try(each.value.egress_with_self, var.defaults.egress_with_self, []) + ingress_cidr_ipv4 = try(each.value.ingress_cidr_ipv4, var.defaults.ingress_cidr_ipv4, []) + ingress_cidr_ipv6 = try(each.value.ingress_cidr_ipv6, var.defaults.ingress_cidr_ipv6, []) + ingress_prefix_list_ids = try(each.value.ingress_prefix_list_ids, var.defaults.ingress_prefix_list_ids, []) + ingress_rules = try(each.value.ingress_rules, var.defaults.ingress_rules, []) + ingress_with_cidr_ipv4 = try(each.value.ingress_with_cidr_ipv4, var.defaults.ingress_with_cidr_ipv4, []) + ingress_with_cidr_ipv6 = try(each.value.ingress_with_cidr_ipv6, var.defaults.ingress_with_cidr_ipv6, []) + ingress_with_prefix_list_id = try(each.value.ingress_with_prefix_list_id, var.defaults.ingress_with_prefix_list_id, []) + ingress_with_referenced_security_group_id = try(each.value.ingress_with_referenced_security_group_id, var.defaults.ingress_with_referenced_security_group_id, []) + ingress_with_self = try(each.value.ingress_with_self, var.defaults.ingress_with_self, []) + name = try(each.value.name, var.defaults.name) + number_of_computed_egress_cidr_blocks = try(each.value.number_of_computed_egress_cidr_blocks, var.defaults.number_of_computed_egress_cidr_blocks, 0) + number_of_computed_egress_ipv6_cidr_blocks = try(each.value.number_of_computed_egress_ipv6_cidr_blocks, var.defaults.number_of_computed_egress_ipv6_cidr_blocks, 0) + number_of_computed_egress_prefix_list_ids = try(each.value.number_of_computed_egress_prefix_list_ids, var.defaults.number_of_computed_egress_prefix_list_ids, 0) + number_of_computed_egress_rules = try(each.value.number_of_computed_egress_rules, var.defaults.number_of_computed_egress_rules, 0) + number_of_computed_egress_with_cidr_ipv4 = try(each.value.number_of_computed_egress_with_cidr_ipv4, var.defaults.number_of_computed_egress_with_cidr_ipv4, 0) + number_of_computed_egress_with_cidr_ipv6 = try(each.value.number_of_computed_egress_with_cidr_ipv6, var.defaults.number_of_computed_egress_with_cidr_ipv6, 0) + number_of_computed_egress_with_prefix_list_id = try(each.value.number_of_computed_egress_with_prefix_list_id, var.defaults.number_of_computed_egress_with_prefix_list_id, 0) + number_of_computed_egress_with_referenced_security_group_id = try(each.value.number_of_computed_egress_with_referenced_security_group_id, var.defaults.number_of_computed_egress_with_referenced_security_group_id, 0) + number_of_computed_egress_with_self = try(each.value.number_of_computed_egress_with_self, var.defaults.number_of_computed_egress_with_self, 0) + number_of_computed_ingress_cidr_blocks = try(each.value.number_of_computed_ingress_cidr_blocks, var.defaults.number_of_computed_ingress_cidr_blocks, 0) + number_of_computed_ingress_ipv6_cidr_blocks = try(each.value.number_of_computed_ingress_ipv6_cidr_blocks, var.defaults.number_of_computed_ingress_ipv6_cidr_blocks, 0) + number_of_computed_ingress_prefix_list_ids = try(each.value.number_of_computed_ingress_prefix_list_ids, var.defaults.number_of_computed_ingress_prefix_list_ids, 0) + number_of_computed_ingress_rules = try(each.value.number_of_computed_ingress_rules, var.defaults.number_of_computed_ingress_rules, 0) + number_of_computed_ingress_with_cidr_ipv4 = try(each.value.number_of_computed_ingress_with_cidr_ipv4, var.defaults.number_of_computed_ingress_with_cidr_ipv4, 0) + number_of_computed_ingress_with_cidr_ipv6 = try(each.value.number_of_computed_ingress_with_cidr_ipv6, var.defaults.number_of_computed_ingress_with_cidr_ipv6, 0) + number_of_computed_ingress_with_prefix_list_id = try(each.value.number_of_computed_ingress_with_prefix_list_id, var.defaults.number_of_computed_ingress_with_prefix_list_id, 0) + number_of_computed_ingress_with_referenced_security_group_id = try(each.value.number_of_computed_ingress_with_referenced_security_group_id, var.defaults.number_of_computed_ingress_with_referenced_security_group_id, 0) + number_of_computed_ingress_with_self = try(each.value.number_of_computed_ingress_with_self, var.defaults.number_of_computed_ingress_with_self, 0) + revoke_rules_on_delete = try(each.value.revoke_rules_on_delete, var.defaults.revoke_rules_on_delete, false) + tags = try(each.value.tags, var.defaults.tags, {}) + use_name_prefix = try(each.value.use_name_prefix, var.defaults.use_name_prefix, true) + vpc_id = try(each.value.vpc_id, var.defaults.vpc_id) } diff --git a/wrappers/kafka/main.tf b/wrappers/kafka/main.tf index d654f96d..a48af3dc 100644 --- a/wrappers/kafka/main.tf +++ b/wrappers/kafka/main.tf @@ -3,77 +3,77 @@ module "wrapper" { for_each = var.items - auto_computed_egress_rules = try(each.value.auto_computed_egress_rules, var.defaults.auto_computed_egress_rules, []) - auto_computed_egress_with_self = try(each.value.auto_computed_egress_with_self, var.defaults.auto_computed_egress_with_self, []) - auto_computed_ingress_rules = try(each.value.auto_computed_ingress_rules, var.defaults.auto_computed_ingress_rules, []) - auto_computed_ingress_with_self = try(each.value.auto_computed_ingress_with_self, var.defaults.auto_computed_ingress_with_self, []) - auto_egress_rules = try(each.value.auto_egress_rules, var.defaults.auto_egress_rules, ["all-all"]) - auto_egress_with_self = try(each.value.auto_egress_with_self, var.defaults.auto_egress_with_self, []) - auto_ingress_rules = try(each.value.auto_ingress_rules, var.defaults.auto_ingress_rules, ["kafka-broker-tcp", "kafka-broker-tls-tcp", "kafka-broker-tls-public-tcp", "kafka-broker-sasl-scram-tcp", "kafka-broker-sasl-scram-tcp", "kafka-broker-sasl-iam-tcp", "kafka-broker-sasl-iam-public-tcp", "kafka-jmx-exporter-tcp", "kafka-node-exporter-tcp"]) - auto_ingress_with_self = try(each.value.auto_ingress_with_self, var.defaults.auto_ingress_with_self, [{ "rule" = "all-all" }]) - auto_number_of_computed_egress_rules = try(each.value.auto_number_of_computed_egress_rules, var.defaults.auto_number_of_computed_egress_rules, 0) - auto_number_of_computed_egress_with_self = try(each.value.auto_number_of_computed_egress_with_self, var.defaults.auto_number_of_computed_egress_with_self, 0) - auto_number_of_computed_ingress_rules = try(each.value.auto_number_of_computed_ingress_rules, var.defaults.auto_number_of_computed_ingress_rules, 0) - auto_number_of_computed_ingress_with_self = try(each.value.auto_number_of_computed_ingress_with_self, var.defaults.auto_number_of_computed_ingress_with_self, 0) - computed_egress_cidr_blocks = try(each.value.computed_egress_cidr_blocks, var.defaults.computed_egress_cidr_blocks, ["0.0.0.0/0"]) - computed_egress_ipv6_cidr_blocks = try(each.value.computed_egress_ipv6_cidr_blocks, var.defaults.computed_egress_ipv6_cidr_blocks, ["::/0"]) - computed_egress_prefix_list_ids = try(each.value.computed_egress_prefix_list_ids, var.defaults.computed_egress_prefix_list_ids, []) - computed_egress_rules = try(each.value.computed_egress_rules, var.defaults.computed_egress_rules, []) - computed_egress_with_cidr_blocks = try(each.value.computed_egress_with_cidr_blocks, var.defaults.computed_egress_with_cidr_blocks, []) - computed_egress_with_ipv6_cidr_blocks = try(each.value.computed_egress_with_ipv6_cidr_blocks, var.defaults.computed_egress_with_ipv6_cidr_blocks, []) - computed_egress_with_prefix_list_ids = try(each.value.computed_egress_with_prefix_list_ids, var.defaults.computed_egress_with_prefix_list_ids, []) - computed_egress_with_self = try(each.value.computed_egress_with_self, var.defaults.computed_egress_with_self, []) - computed_egress_with_source_security_group_id = try(each.value.computed_egress_with_source_security_group_id, var.defaults.computed_egress_with_source_security_group_id, []) - computed_ingress_cidr_blocks = try(each.value.computed_ingress_cidr_blocks, var.defaults.computed_ingress_cidr_blocks, []) - computed_ingress_ipv6_cidr_blocks = try(each.value.computed_ingress_ipv6_cidr_blocks, var.defaults.computed_ingress_ipv6_cidr_blocks, []) - computed_ingress_prefix_list_ids = try(each.value.computed_ingress_prefix_list_ids, var.defaults.computed_ingress_prefix_list_ids, []) - computed_ingress_rules = try(each.value.computed_ingress_rules, var.defaults.computed_ingress_rules, []) - computed_ingress_with_cidr_blocks = try(each.value.computed_ingress_with_cidr_blocks, var.defaults.computed_ingress_with_cidr_blocks, []) - computed_ingress_with_ipv6_cidr_blocks = try(each.value.computed_ingress_with_ipv6_cidr_blocks, var.defaults.computed_ingress_with_ipv6_cidr_blocks, []) - computed_ingress_with_prefix_list_ids = try(each.value.computed_ingress_with_prefix_list_ids, var.defaults.computed_ingress_with_prefix_list_ids, []) - computed_ingress_with_self = try(each.value.computed_ingress_with_self, var.defaults.computed_ingress_with_self, []) - computed_ingress_with_source_security_group_id = try(each.value.computed_ingress_with_source_security_group_id, var.defaults.computed_ingress_with_source_security_group_id, []) - create = try(each.value.create, var.defaults.create, true) - description = try(each.value.description, var.defaults.description, "Security Group managed by Terraform") - egress_cidr_blocks = try(each.value.egress_cidr_blocks, var.defaults.egress_cidr_blocks, ["0.0.0.0/0"]) - egress_ipv6_cidr_blocks = try(each.value.egress_ipv6_cidr_blocks, var.defaults.egress_ipv6_cidr_blocks, ["::/0"]) - egress_prefix_list_ids = try(each.value.egress_prefix_list_ids, var.defaults.egress_prefix_list_ids, []) - egress_rules = try(each.value.egress_rules, var.defaults.egress_rules, []) - egress_with_cidr_blocks = try(each.value.egress_with_cidr_blocks, var.defaults.egress_with_cidr_blocks, []) - egress_with_ipv6_cidr_blocks = try(each.value.egress_with_ipv6_cidr_blocks, var.defaults.egress_with_ipv6_cidr_blocks, []) - egress_with_prefix_list_ids = try(each.value.egress_with_prefix_list_ids, var.defaults.egress_with_prefix_list_ids, []) - egress_with_self = try(each.value.egress_with_self, var.defaults.egress_with_self, []) - egress_with_source_security_group_id = try(each.value.egress_with_source_security_group_id, var.defaults.egress_with_source_security_group_id, []) - ingress_cidr_blocks = try(each.value.ingress_cidr_blocks, var.defaults.ingress_cidr_blocks, []) - ingress_ipv6_cidr_blocks = try(each.value.ingress_ipv6_cidr_blocks, var.defaults.ingress_ipv6_cidr_blocks, []) - ingress_prefix_list_ids = try(each.value.ingress_prefix_list_ids, var.defaults.ingress_prefix_list_ids, []) - ingress_rules = try(each.value.ingress_rules, var.defaults.ingress_rules, []) - ingress_with_cidr_blocks = try(each.value.ingress_with_cidr_blocks, var.defaults.ingress_with_cidr_blocks, []) - ingress_with_ipv6_cidr_blocks = try(each.value.ingress_with_ipv6_cidr_blocks, var.defaults.ingress_with_ipv6_cidr_blocks, []) - ingress_with_prefix_list_ids = try(each.value.ingress_with_prefix_list_ids, var.defaults.ingress_with_prefix_list_ids, []) - ingress_with_self = try(each.value.ingress_with_self, var.defaults.ingress_with_self, []) - ingress_with_source_security_group_id = try(each.value.ingress_with_source_security_group_id, var.defaults.ingress_with_source_security_group_id, []) - name = try(each.value.name, var.defaults.name) - number_of_computed_egress_cidr_blocks = try(each.value.number_of_computed_egress_cidr_blocks, var.defaults.number_of_computed_egress_cidr_blocks, 0) - number_of_computed_egress_ipv6_cidr_blocks = try(each.value.number_of_computed_egress_ipv6_cidr_blocks, var.defaults.number_of_computed_egress_ipv6_cidr_blocks, 0) - number_of_computed_egress_prefix_list_ids = try(each.value.number_of_computed_egress_prefix_list_ids, var.defaults.number_of_computed_egress_prefix_list_ids, 0) - number_of_computed_egress_rules = try(each.value.number_of_computed_egress_rules, var.defaults.number_of_computed_egress_rules, 0) - number_of_computed_egress_with_cidr_blocks = try(each.value.number_of_computed_egress_with_cidr_blocks, var.defaults.number_of_computed_egress_with_cidr_blocks, 0) - number_of_computed_egress_with_ipv6_cidr_blocks = try(each.value.number_of_computed_egress_with_ipv6_cidr_blocks, var.defaults.number_of_computed_egress_with_ipv6_cidr_blocks, 0) - number_of_computed_egress_with_prefix_list_ids = try(each.value.number_of_computed_egress_with_prefix_list_ids, var.defaults.number_of_computed_egress_with_prefix_list_ids, 0) - number_of_computed_egress_with_self = try(each.value.number_of_computed_egress_with_self, var.defaults.number_of_computed_egress_with_self, 0) - number_of_computed_egress_with_source_security_group_id = try(each.value.number_of_computed_egress_with_source_security_group_id, var.defaults.number_of_computed_egress_with_source_security_group_id, 0) - number_of_computed_ingress_cidr_blocks = try(each.value.number_of_computed_ingress_cidr_blocks, var.defaults.number_of_computed_ingress_cidr_blocks, 0) - number_of_computed_ingress_ipv6_cidr_blocks = try(each.value.number_of_computed_ingress_ipv6_cidr_blocks, var.defaults.number_of_computed_ingress_ipv6_cidr_blocks, 0) - number_of_computed_ingress_prefix_list_ids = try(each.value.number_of_computed_ingress_prefix_list_ids, var.defaults.number_of_computed_ingress_prefix_list_ids, 0) - number_of_computed_ingress_rules = try(each.value.number_of_computed_ingress_rules, var.defaults.number_of_computed_ingress_rules, 0) - number_of_computed_ingress_with_cidr_blocks = try(each.value.number_of_computed_ingress_with_cidr_blocks, var.defaults.number_of_computed_ingress_with_cidr_blocks, 0) - number_of_computed_ingress_with_ipv6_cidr_blocks = try(each.value.number_of_computed_ingress_with_ipv6_cidr_blocks, var.defaults.number_of_computed_ingress_with_ipv6_cidr_blocks, 0) - number_of_computed_ingress_with_prefix_list_ids = try(each.value.number_of_computed_ingress_with_prefix_list_ids, var.defaults.number_of_computed_ingress_with_prefix_list_ids, 0) - number_of_computed_ingress_with_self = try(each.value.number_of_computed_ingress_with_self, var.defaults.number_of_computed_ingress_with_self, 0) - number_of_computed_ingress_with_source_security_group_id = try(each.value.number_of_computed_ingress_with_source_security_group_id, var.defaults.number_of_computed_ingress_with_source_security_group_id, 0) - revoke_rules_on_delete = try(each.value.revoke_rules_on_delete, var.defaults.revoke_rules_on_delete, false) - tags = try(each.value.tags, var.defaults.tags, {}) - use_name_prefix = try(each.value.use_name_prefix, var.defaults.use_name_prefix, true) - vpc_id = try(each.value.vpc_id, var.defaults.vpc_id) + auto_computed_egress_rules = try(each.value.auto_computed_egress_rules, var.defaults.auto_computed_egress_rules, []) + auto_computed_egress_with_self = try(each.value.auto_computed_egress_with_self, var.defaults.auto_computed_egress_with_self, []) + auto_computed_ingress_rules = try(each.value.auto_computed_ingress_rules, var.defaults.auto_computed_ingress_rules, []) + auto_computed_ingress_with_self = try(each.value.auto_computed_ingress_with_self, var.defaults.auto_computed_ingress_with_self, []) + auto_egress_rules = try(each.value.auto_egress_rules, var.defaults.auto_egress_rules, ["all-all"]) + auto_egress_with_self = try(each.value.auto_egress_with_self, var.defaults.auto_egress_with_self, []) + auto_ingress_rules = try(each.value.auto_ingress_rules, var.defaults.auto_ingress_rules, ["kafka-broker-tcp", "kafka-broker-tls-tcp", "kafka-broker-tls-public-tcp", "kafka-broker-sasl-scram-tcp", "kafka-broker-sasl-scram-tcp", "kafka-broker-sasl-iam-tcp", "kafka-broker-sasl-iam-public-tcp", "kafka-jmx-exporter-tcp", "kafka-node-exporter-tcp"]) + auto_ingress_with_self = try(each.value.auto_ingress_with_self, var.defaults.auto_ingress_with_self, [{ "rule" = "all-all" }]) + auto_number_of_computed_egress_rules = try(each.value.auto_number_of_computed_egress_rules, var.defaults.auto_number_of_computed_egress_rules, 0) + auto_number_of_computed_egress_with_self = try(each.value.auto_number_of_computed_egress_with_self, var.defaults.auto_number_of_computed_egress_with_self, 0) + auto_number_of_computed_ingress_rules = try(each.value.auto_number_of_computed_ingress_rules, var.defaults.auto_number_of_computed_ingress_rules, 0) + auto_number_of_computed_ingress_with_self = try(each.value.auto_number_of_computed_ingress_with_self, var.defaults.auto_number_of_computed_ingress_with_self, 0) + computed_egress_cidr_blocks = try(each.value.computed_egress_cidr_blocks, var.defaults.computed_egress_cidr_blocks, ["0.0.0.0/0"]) + computed_egress_ipv6_cidr_blocks = try(each.value.computed_egress_ipv6_cidr_blocks, var.defaults.computed_egress_ipv6_cidr_blocks, ["::/0"]) + computed_egress_prefix_list_ids = try(each.value.computed_egress_prefix_list_ids, var.defaults.computed_egress_prefix_list_ids, []) + computed_egress_rules = try(each.value.computed_egress_rules, var.defaults.computed_egress_rules, []) + computed_egress_with_cidr_ipv4 = try(each.value.computed_egress_with_cidr_ipv4, var.defaults.computed_egress_with_cidr_ipv4, []) + computed_egress_with_cidr_ipv6 = try(each.value.computed_egress_with_cidr_ipv6, var.defaults.computed_egress_with_cidr_ipv6, []) + computed_egress_with_prefix_list_id = try(each.value.computed_egress_with_prefix_list_id, var.defaults.computed_egress_with_prefix_list_id, []) + computed_egress_with_referenced_security_group_id = try(each.value.computed_egress_with_referenced_security_group_id, var.defaults.computed_egress_with_referenced_security_group_id, []) + computed_egress_with_self = try(each.value.computed_egress_with_self, var.defaults.computed_egress_with_self, []) + computed_ingress_cidr_blocks = try(each.value.computed_ingress_cidr_blocks, var.defaults.computed_ingress_cidr_blocks, []) + computed_ingress_ipv6_cidr_blocks = try(each.value.computed_ingress_ipv6_cidr_blocks, var.defaults.computed_ingress_ipv6_cidr_blocks, []) + computed_ingress_prefix_list_ids = try(each.value.computed_ingress_prefix_list_ids, var.defaults.computed_ingress_prefix_list_ids, []) + computed_ingress_rules = try(each.value.computed_ingress_rules, var.defaults.computed_ingress_rules, []) + computed_ingress_with_cidr_ipv4 = try(each.value.computed_ingress_with_cidr_ipv4, var.defaults.computed_ingress_with_cidr_ipv4, []) + computed_ingress_with_cidr_ipv6 = try(each.value.computed_ingress_with_cidr_ipv6, var.defaults.computed_ingress_with_cidr_ipv6, []) + computed_ingress_with_prefix_list_id = try(each.value.computed_ingress_with_prefix_list_id, var.defaults.computed_ingress_with_prefix_list_id, []) + computed_ingress_with_referenced_security_group_id = try(each.value.computed_ingress_with_referenced_security_group_id, var.defaults.computed_ingress_with_referenced_security_group_id, []) + computed_ingress_with_self = try(each.value.computed_ingress_with_self, var.defaults.computed_ingress_with_self, []) + create = try(each.value.create, var.defaults.create, true) + description = try(each.value.description, var.defaults.description, "Security Group managed by Terraform") + egress_cidr_ipv4 = try(each.value.egress_cidr_ipv4, var.defaults.egress_cidr_ipv4, ["0.0.0.0/0"]) + egress_cidr_ipv6 = try(each.value.egress_cidr_ipv6, var.defaults.egress_cidr_ipv6, ["::/0"]) + egress_prefix_list_ids = try(each.value.egress_prefix_list_ids, var.defaults.egress_prefix_list_ids, []) + egress_rules = try(each.value.egress_rules, var.defaults.egress_rules, []) + egress_with_cidr_ipv4 = try(each.value.egress_with_cidr_ipv4, var.defaults.egress_with_cidr_ipv4, []) + egress_with_cidr_ipv6 = try(each.value.egress_with_cidr_ipv6, var.defaults.egress_with_cidr_ipv6, []) + egress_with_prefix_list_id = try(each.value.egress_with_prefix_list_id, var.defaults.egress_with_prefix_list_id, []) + egress_with_referenced_security_group_id = try(each.value.egress_with_referenced_security_group_id, var.defaults.egress_with_referenced_security_group_id, []) + egress_with_self = try(each.value.egress_with_self, var.defaults.egress_with_self, []) + ingress_cidr_ipv4 = try(each.value.ingress_cidr_ipv4, var.defaults.ingress_cidr_ipv4, []) + ingress_cidr_ipv6 = try(each.value.ingress_cidr_ipv6, var.defaults.ingress_cidr_ipv6, []) + ingress_prefix_list_ids = try(each.value.ingress_prefix_list_ids, var.defaults.ingress_prefix_list_ids, []) + ingress_rules = try(each.value.ingress_rules, var.defaults.ingress_rules, []) + ingress_with_cidr_ipv4 = try(each.value.ingress_with_cidr_ipv4, var.defaults.ingress_with_cidr_ipv4, []) + ingress_with_cidr_ipv6 = try(each.value.ingress_with_cidr_ipv6, var.defaults.ingress_with_cidr_ipv6, []) + ingress_with_prefix_list_id = try(each.value.ingress_with_prefix_list_id, var.defaults.ingress_with_prefix_list_id, []) + ingress_with_referenced_security_group_id = try(each.value.ingress_with_referenced_security_group_id, var.defaults.ingress_with_referenced_security_group_id, []) + ingress_with_self = try(each.value.ingress_with_self, var.defaults.ingress_with_self, []) + name = try(each.value.name, var.defaults.name) + number_of_computed_egress_cidr_blocks = try(each.value.number_of_computed_egress_cidr_blocks, var.defaults.number_of_computed_egress_cidr_blocks, 0) + number_of_computed_egress_ipv6_cidr_blocks = try(each.value.number_of_computed_egress_ipv6_cidr_blocks, var.defaults.number_of_computed_egress_ipv6_cidr_blocks, 0) + number_of_computed_egress_prefix_list_ids = try(each.value.number_of_computed_egress_prefix_list_ids, var.defaults.number_of_computed_egress_prefix_list_ids, 0) + number_of_computed_egress_rules = try(each.value.number_of_computed_egress_rules, var.defaults.number_of_computed_egress_rules, 0) + number_of_computed_egress_with_cidr_ipv4 = try(each.value.number_of_computed_egress_with_cidr_ipv4, var.defaults.number_of_computed_egress_with_cidr_ipv4, 0) + number_of_computed_egress_with_cidr_ipv6 = try(each.value.number_of_computed_egress_with_cidr_ipv6, var.defaults.number_of_computed_egress_with_cidr_ipv6, 0) + number_of_computed_egress_with_prefix_list_id = try(each.value.number_of_computed_egress_with_prefix_list_id, var.defaults.number_of_computed_egress_with_prefix_list_id, 0) + number_of_computed_egress_with_referenced_security_group_id = try(each.value.number_of_computed_egress_with_referenced_security_group_id, var.defaults.number_of_computed_egress_with_referenced_security_group_id, 0) + number_of_computed_egress_with_self = try(each.value.number_of_computed_egress_with_self, var.defaults.number_of_computed_egress_with_self, 0) + number_of_computed_ingress_cidr_blocks = try(each.value.number_of_computed_ingress_cidr_blocks, var.defaults.number_of_computed_ingress_cidr_blocks, 0) + number_of_computed_ingress_ipv6_cidr_blocks = try(each.value.number_of_computed_ingress_ipv6_cidr_blocks, var.defaults.number_of_computed_ingress_ipv6_cidr_blocks, 0) + number_of_computed_ingress_prefix_list_ids = try(each.value.number_of_computed_ingress_prefix_list_ids, var.defaults.number_of_computed_ingress_prefix_list_ids, 0) + number_of_computed_ingress_rules = try(each.value.number_of_computed_ingress_rules, var.defaults.number_of_computed_ingress_rules, 0) + number_of_computed_ingress_with_cidr_ipv4 = try(each.value.number_of_computed_ingress_with_cidr_ipv4, var.defaults.number_of_computed_ingress_with_cidr_ipv4, 0) + number_of_computed_ingress_with_cidr_ipv6 = try(each.value.number_of_computed_ingress_with_cidr_ipv6, var.defaults.number_of_computed_ingress_with_cidr_ipv6, 0) + number_of_computed_ingress_with_prefix_list_id = try(each.value.number_of_computed_ingress_with_prefix_list_id, var.defaults.number_of_computed_ingress_with_prefix_list_id, 0) + number_of_computed_ingress_with_referenced_security_group_id = try(each.value.number_of_computed_ingress_with_referenced_security_group_id, var.defaults.number_of_computed_ingress_with_referenced_security_group_id, 0) + number_of_computed_ingress_with_self = try(each.value.number_of_computed_ingress_with_self, var.defaults.number_of_computed_ingress_with_self, 0) + revoke_rules_on_delete = try(each.value.revoke_rules_on_delete, var.defaults.revoke_rules_on_delete, false) + tags = try(each.value.tags, var.defaults.tags, {}) + use_name_prefix = try(each.value.use_name_prefix, var.defaults.use_name_prefix, true) + vpc_id = try(each.value.vpc_id, var.defaults.vpc_id) } diff --git a/wrappers/kibana/main.tf b/wrappers/kibana/main.tf index dd3dab8f..ce0f2612 100644 --- a/wrappers/kibana/main.tf +++ b/wrappers/kibana/main.tf @@ -3,77 +3,77 @@ module "wrapper" { for_each = var.items - auto_computed_egress_rules = try(each.value.auto_computed_egress_rules, var.defaults.auto_computed_egress_rules, []) - auto_computed_egress_with_self = try(each.value.auto_computed_egress_with_self, var.defaults.auto_computed_egress_with_self, []) - auto_computed_ingress_rules = try(each.value.auto_computed_ingress_rules, var.defaults.auto_computed_ingress_rules, []) - auto_computed_ingress_with_self = try(each.value.auto_computed_ingress_with_self, var.defaults.auto_computed_ingress_with_self, []) - auto_egress_rules = try(each.value.auto_egress_rules, var.defaults.auto_egress_rules, ["all-all"]) - auto_egress_with_self = try(each.value.auto_egress_with_self, var.defaults.auto_egress_with_self, []) - auto_ingress_rules = try(each.value.auto_ingress_rules, var.defaults.auto_ingress_rules, ["kibana-tcp"]) - auto_ingress_with_self = try(each.value.auto_ingress_with_self, var.defaults.auto_ingress_with_self, [{ "rule" = "all-all" }]) - auto_number_of_computed_egress_rules = try(each.value.auto_number_of_computed_egress_rules, var.defaults.auto_number_of_computed_egress_rules, 0) - auto_number_of_computed_egress_with_self = try(each.value.auto_number_of_computed_egress_with_self, var.defaults.auto_number_of_computed_egress_with_self, 0) - auto_number_of_computed_ingress_rules = try(each.value.auto_number_of_computed_ingress_rules, var.defaults.auto_number_of_computed_ingress_rules, 0) - auto_number_of_computed_ingress_with_self = try(each.value.auto_number_of_computed_ingress_with_self, var.defaults.auto_number_of_computed_ingress_with_self, 0) - computed_egress_cidr_blocks = try(each.value.computed_egress_cidr_blocks, var.defaults.computed_egress_cidr_blocks, ["0.0.0.0/0"]) - computed_egress_ipv6_cidr_blocks = try(each.value.computed_egress_ipv6_cidr_blocks, var.defaults.computed_egress_ipv6_cidr_blocks, ["::/0"]) - computed_egress_prefix_list_ids = try(each.value.computed_egress_prefix_list_ids, var.defaults.computed_egress_prefix_list_ids, []) - computed_egress_rules = try(each.value.computed_egress_rules, var.defaults.computed_egress_rules, []) - computed_egress_with_cidr_blocks = try(each.value.computed_egress_with_cidr_blocks, var.defaults.computed_egress_with_cidr_blocks, []) - computed_egress_with_ipv6_cidr_blocks = try(each.value.computed_egress_with_ipv6_cidr_blocks, var.defaults.computed_egress_with_ipv6_cidr_blocks, []) - computed_egress_with_prefix_list_ids = try(each.value.computed_egress_with_prefix_list_ids, var.defaults.computed_egress_with_prefix_list_ids, []) - computed_egress_with_self = try(each.value.computed_egress_with_self, var.defaults.computed_egress_with_self, []) - computed_egress_with_source_security_group_id = try(each.value.computed_egress_with_source_security_group_id, var.defaults.computed_egress_with_source_security_group_id, []) - computed_ingress_cidr_blocks = try(each.value.computed_ingress_cidr_blocks, var.defaults.computed_ingress_cidr_blocks, []) - computed_ingress_ipv6_cidr_blocks = try(each.value.computed_ingress_ipv6_cidr_blocks, var.defaults.computed_ingress_ipv6_cidr_blocks, []) - computed_ingress_prefix_list_ids = try(each.value.computed_ingress_prefix_list_ids, var.defaults.computed_ingress_prefix_list_ids, []) - computed_ingress_rules = try(each.value.computed_ingress_rules, var.defaults.computed_ingress_rules, []) - computed_ingress_with_cidr_blocks = try(each.value.computed_ingress_with_cidr_blocks, var.defaults.computed_ingress_with_cidr_blocks, []) - computed_ingress_with_ipv6_cidr_blocks = try(each.value.computed_ingress_with_ipv6_cidr_blocks, var.defaults.computed_ingress_with_ipv6_cidr_blocks, []) - computed_ingress_with_prefix_list_ids = try(each.value.computed_ingress_with_prefix_list_ids, var.defaults.computed_ingress_with_prefix_list_ids, []) - computed_ingress_with_self = try(each.value.computed_ingress_with_self, var.defaults.computed_ingress_with_self, []) - computed_ingress_with_source_security_group_id = try(each.value.computed_ingress_with_source_security_group_id, var.defaults.computed_ingress_with_source_security_group_id, []) - create = try(each.value.create, var.defaults.create, true) - description = try(each.value.description, var.defaults.description, "Security Group managed by Terraform") - egress_cidr_blocks = try(each.value.egress_cidr_blocks, var.defaults.egress_cidr_blocks, ["0.0.0.0/0"]) - egress_ipv6_cidr_blocks = try(each.value.egress_ipv6_cidr_blocks, var.defaults.egress_ipv6_cidr_blocks, ["::/0"]) - egress_prefix_list_ids = try(each.value.egress_prefix_list_ids, var.defaults.egress_prefix_list_ids, []) - egress_rules = try(each.value.egress_rules, var.defaults.egress_rules, []) - egress_with_cidr_blocks = try(each.value.egress_with_cidr_blocks, var.defaults.egress_with_cidr_blocks, []) - egress_with_ipv6_cidr_blocks = try(each.value.egress_with_ipv6_cidr_blocks, var.defaults.egress_with_ipv6_cidr_blocks, []) - egress_with_prefix_list_ids = try(each.value.egress_with_prefix_list_ids, var.defaults.egress_with_prefix_list_ids, []) - egress_with_self = try(each.value.egress_with_self, var.defaults.egress_with_self, []) - egress_with_source_security_group_id = try(each.value.egress_with_source_security_group_id, var.defaults.egress_with_source_security_group_id, []) - ingress_cidr_blocks = try(each.value.ingress_cidr_blocks, var.defaults.ingress_cidr_blocks, []) - ingress_ipv6_cidr_blocks = try(each.value.ingress_ipv6_cidr_blocks, var.defaults.ingress_ipv6_cidr_blocks, []) - ingress_prefix_list_ids = try(each.value.ingress_prefix_list_ids, var.defaults.ingress_prefix_list_ids, []) - ingress_rules = try(each.value.ingress_rules, var.defaults.ingress_rules, []) - ingress_with_cidr_blocks = try(each.value.ingress_with_cidr_blocks, var.defaults.ingress_with_cidr_blocks, []) - ingress_with_ipv6_cidr_blocks = try(each.value.ingress_with_ipv6_cidr_blocks, var.defaults.ingress_with_ipv6_cidr_blocks, []) - ingress_with_prefix_list_ids = try(each.value.ingress_with_prefix_list_ids, var.defaults.ingress_with_prefix_list_ids, []) - ingress_with_self = try(each.value.ingress_with_self, var.defaults.ingress_with_self, []) - ingress_with_source_security_group_id = try(each.value.ingress_with_source_security_group_id, var.defaults.ingress_with_source_security_group_id, []) - name = try(each.value.name, var.defaults.name) - number_of_computed_egress_cidr_blocks = try(each.value.number_of_computed_egress_cidr_blocks, var.defaults.number_of_computed_egress_cidr_blocks, 0) - number_of_computed_egress_ipv6_cidr_blocks = try(each.value.number_of_computed_egress_ipv6_cidr_blocks, var.defaults.number_of_computed_egress_ipv6_cidr_blocks, 0) - number_of_computed_egress_prefix_list_ids = try(each.value.number_of_computed_egress_prefix_list_ids, var.defaults.number_of_computed_egress_prefix_list_ids, 0) - number_of_computed_egress_rules = try(each.value.number_of_computed_egress_rules, var.defaults.number_of_computed_egress_rules, 0) - number_of_computed_egress_with_cidr_blocks = try(each.value.number_of_computed_egress_with_cidr_blocks, var.defaults.number_of_computed_egress_with_cidr_blocks, 0) - number_of_computed_egress_with_ipv6_cidr_blocks = try(each.value.number_of_computed_egress_with_ipv6_cidr_blocks, var.defaults.number_of_computed_egress_with_ipv6_cidr_blocks, 0) - number_of_computed_egress_with_prefix_list_ids = try(each.value.number_of_computed_egress_with_prefix_list_ids, var.defaults.number_of_computed_egress_with_prefix_list_ids, 0) - number_of_computed_egress_with_self = try(each.value.number_of_computed_egress_with_self, var.defaults.number_of_computed_egress_with_self, 0) - number_of_computed_egress_with_source_security_group_id = try(each.value.number_of_computed_egress_with_source_security_group_id, var.defaults.number_of_computed_egress_with_source_security_group_id, 0) - number_of_computed_ingress_cidr_blocks = try(each.value.number_of_computed_ingress_cidr_blocks, var.defaults.number_of_computed_ingress_cidr_blocks, 0) - number_of_computed_ingress_ipv6_cidr_blocks = try(each.value.number_of_computed_ingress_ipv6_cidr_blocks, var.defaults.number_of_computed_ingress_ipv6_cidr_blocks, 0) - number_of_computed_ingress_prefix_list_ids = try(each.value.number_of_computed_ingress_prefix_list_ids, var.defaults.number_of_computed_ingress_prefix_list_ids, 0) - number_of_computed_ingress_rules = try(each.value.number_of_computed_ingress_rules, var.defaults.number_of_computed_ingress_rules, 0) - number_of_computed_ingress_with_cidr_blocks = try(each.value.number_of_computed_ingress_with_cidr_blocks, var.defaults.number_of_computed_ingress_with_cidr_blocks, 0) - number_of_computed_ingress_with_ipv6_cidr_blocks = try(each.value.number_of_computed_ingress_with_ipv6_cidr_blocks, var.defaults.number_of_computed_ingress_with_ipv6_cidr_blocks, 0) - number_of_computed_ingress_with_prefix_list_ids = try(each.value.number_of_computed_ingress_with_prefix_list_ids, var.defaults.number_of_computed_ingress_with_prefix_list_ids, 0) - number_of_computed_ingress_with_self = try(each.value.number_of_computed_ingress_with_self, var.defaults.number_of_computed_ingress_with_self, 0) - number_of_computed_ingress_with_source_security_group_id = try(each.value.number_of_computed_ingress_with_source_security_group_id, var.defaults.number_of_computed_ingress_with_source_security_group_id, 0) - revoke_rules_on_delete = try(each.value.revoke_rules_on_delete, var.defaults.revoke_rules_on_delete, false) - tags = try(each.value.tags, var.defaults.tags, {}) - use_name_prefix = try(each.value.use_name_prefix, var.defaults.use_name_prefix, true) - vpc_id = try(each.value.vpc_id, var.defaults.vpc_id) + auto_computed_egress_rules = try(each.value.auto_computed_egress_rules, var.defaults.auto_computed_egress_rules, []) + auto_computed_egress_with_self = try(each.value.auto_computed_egress_with_self, var.defaults.auto_computed_egress_with_self, []) + auto_computed_ingress_rules = try(each.value.auto_computed_ingress_rules, var.defaults.auto_computed_ingress_rules, []) + auto_computed_ingress_with_self = try(each.value.auto_computed_ingress_with_self, var.defaults.auto_computed_ingress_with_self, []) + auto_egress_rules = try(each.value.auto_egress_rules, var.defaults.auto_egress_rules, ["all-all"]) + auto_egress_with_self = try(each.value.auto_egress_with_self, var.defaults.auto_egress_with_self, []) + auto_ingress_rules = try(each.value.auto_ingress_rules, var.defaults.auto_ingress_rules, ["kibana-tcp"]) + auto_ingress_with_self = try(each.value.auto_ingress_with_self, var.defaults.auto_ingress_with_self, [{ "rule" = "all-all" }]) + auto_number_of_computed_egress_rules = try(each.value.auto_number_of_computed_egress_rules, var.defaults.auto_number_of_computed_egress_rules, 0) + auto_number_of_computed_egress_with_self = try(each.value.auto_number_of_computed_egress_with_self, var.defaults.auto_number_of_computed_egress_with_self, 0) + auto_number_of_computed_ingress_rules = try(each.value.auto_number_of_computed_ingress_rules, var.defaults.auto_number_of_computed_ingress_rules, 0) + auto_number_of_computed_ingress_with_self = try(each.value.auto_number_of_computed_ingress_with_self, var.defaults.auto_number_of_computed_ingress_with_self, 0) + computed_egress_cidr_blocks = try(each.value.computed_egress_cidr_blocks, var.defaults.computed_egress_cidr_blocks, ["0.0.0.0/0"]) + computed_egress_ipv6_cidr_blocks = try(each.value.computed_egress_ipv6_cidr_blocks, var.defaults.computed_egress_ipv6_cidr_blocks, ["::/0"]) + computed_egress_prefix_list_ids = try(each.value.computed_egress_prefix_list_ids, var.defaults.computed_egress_prefix_list_ids, []) + computed_egress_rules = try(each.value.computed_egress_rules, var.defaults.computed_egress_rules, []) + computed_egress_with_cidr_ipv4 = try(each.value.computed_egress_with_cidr_ipv4, var.defaults.computed_egress_with_cidr_ipv4, []) + computed_egress_with_cidr_ipv6 = try(each.value.computed_egress_with_cidr_ipv6, var.defaults.computed_egress_with_cidr_ipv6, []) + computed_egress_with_prefix_list_id = try(each.value.computed_egress_with_prefix_list_id, var.defaults.computed_egress_with_prefix_list_id, []) + computed_egress_with_referenced_security_group_id = try(each.value.computed_egress_with_referenced_security_group_id, var.defaults.computed_egress_with_referenced_security_group_id, []) + computed_egress_with_self = try(each.value.computed_egress_with_self, var.defaults.computed_egress_with_self, []) + computed_ingress_cidr_blocks = try(each.value.computed_ingress_cidr_blocks, var.defaults.computed_ingress_cidr_blocks, []) + computed_ingress_ipv6_cidr_blocks = try(each.value.computed_ingress_ipv6_cidr_blocks, var.defaults.computed_ingress_ipv6_cidr_blocks, []) + computed_ingress_prefix_list_ids = try(each.value.computed_ingress_prefix_list_ids, var.defaults.computed_ingress_prefix_list_ids, []) + computed_ingress_rules = try(each.value.computed_ingress_rules, var.defaults.computed_ingress_rules, []) + computed_ingress_with_cidr_ipv4 = try(each.value.computed_ingress_with_cidr_ipv4, var.defaults.computed_ingress_with_cidr_ipv4, []) + computed_ingress_with_cidr_ipv6 = try(each.value.computed_ingress_with_cidr_ipv6, var.defaults.computed_ingress_with_cidr_ipv6, []) + computed_ingress_with_prefix_list_id = try(each.value.computed_ingress_with_prefix_list_id, var.defaults.computed_ingress_with_prefix_list_id, []) + computed_ingress_with_referenced_security_group_id = try(each.value.computed_ingress_with_referenced_security_group_id, var.defaults.computed_ingress_with_referenced_security_group_id, []) + computed_ingress_with_self = try(each.value.computed_ingress_with_self, var.defaults.computed_ingress_with_self, []) + create = try(each.value.create, var.defaults.create, true) + description = try(each.value.description, var.defaults.description, "Security Group managed by Terraform") + egress_cidr_ipv4 = try(each.value.egress_cidr_ipv4, var.defaults.egress_cidr_ipv4, ["0.0.0.0/0"]) + egress_cidr_ipv6 = try(each.value.egress_cidr_ipv6, var.defaults.egress_cidr_ipv6, ["::/0"]) + egress_prefix_list_ids = try(each.value.egress_prefix_list_ids, var.defaults.egress_prefix_list_ids, []) + egress_rules = try(each.value.egress_rules, var.defaults.egress_rules, []) + egress_with_cidr_ipv4 = try(each.value.egress_with_cidr_ipv4, var.defaults.egress_with_cidr_ipv4, []) + egress_with_cidr_ipv6 = try(each.value.egress_with_cidr_ipv6, var.defaults.egress_with_cidr_ipv6, []) + egress_with_prefix_list_id = try(each.value.egress_with_prefix_list_id, var.defaults.egress_with_prefix_list_id, []) + egress_with_referenced_security_group_id = try(each.value.egress_with_referenced_security_group_id, var.defaults.egress_with_referenced_security_group_id, []) + egress_with_self = try(each.value.egress_with_self, var.defaults.egress_with_self, []) + ingress_cidr_ipv4 = try(each.value.ingress_cidr_ipv4, var.defaults.ingress_cidr_ipv4, []) + ingress_cidr_ipv6 = try(each.value.ingress_cidr_ipv6, var.defaults.ingress_cidr_ipv6, []) + ingress_prefix_list_ids = try(each.value.ingress_prefix_list_ids, var.defaults.ingress_prefix_list_ids, []) + ingress_rules = try(each.value.ingress_rules, var.defaults.ingress_rules, []) + ingress_with_cidr_ipv4 = try(each.value.ingress_with_cidr_ipv4, var.defaults.ingress_with_cidr_ipv4, []) + ingress_with_cidr_ipv6 = try(each.value.ingress_with_cidr_ipv6, var.defaults.ingress_with_cidr_ipv6, []) + ingress_with_prefix_list_id = try(each.value.ingress_with_prefix_list_id, var.defaults.ingress_with_prefix_list_id, []) + ingress_with_referenced_security_group_id = try(each.value.ingress_with_referenced_security_group_id, var.defaults.ingress_with_referenced_security_group_id, []) + ingress_with_self = try(each.value.ingress_with_self, var.defaults.ingress_with_self, []) + name = try(each.value.name, var.defaults.name) + number_of_computed_egress_cidr_blocks = try(each.value.number_of_computed_egress_cidr_blocks, var.defaults.number_of_computed_egress_cidr_blocks, 0) + number_of_computed_egress_ipv6_cidr_blocks = try(each.value.number_of_computed_egress_ipv6_cidr_blocks, var.defaults.number_of_computed_egress_ipv6_cidr_blocks, 0) + number_of_computed_egress_prefix_list_ids = try(each.value.number_of_computed_egress_prefix_list_ids, var.defaults.number_of_computed_egress_prefix_list_ids, 0) + number_of_computed_egress_rules = try(each.value.number_of_computed_egress_rules, var.defaults.number_of_computed_egress_rules, 0) + number_of_computed_egress_with_cidr_ipv4 = try(each.value.number_of_computed_egress_with_cidr_ipv4, var.defaults.number_of_computed_egress_with_cidr_ipv4, 0) + number_of_computed_egress_with_cidr_ipv6 = try(each.value.number_of_computed_egress_with_cidr_ipv6, var.defaults.number_of_computed_egress_with_cidr_ipv6, 0) + number_of_computed_egress_with_prefix_list_id = try(each.value.number_of_computed_egress_with_prefix_list_id, var.defaults.number_of_computed_egress_with_prefix_list_id, 0) + number_of_computed_egress_with_referenced_security_group_id = try(each.value.number_of_computed_egress_with_referenced_security_group_id, var.defaults.number_of_computed_egress_with_referenced_security_group_id, 0) + number_of_computed_egress_with_self = try(each.value.number_of_computed_egress_with_self, var.defaults.number_of_computed_egress_with_self, 0) + number_of_computed_ingress_cidr_blocks = try(each.value.number_of_computed_ingress_cidr_blocks, var.defaults.number_of_computed_ingress_cidr_blocks, 0) + number_of_computed_ingress_ipv6_cidr_blocks = try(each.value.number_of_computed_ingress_ipv6_cidr_blocks, var.defaults.number_of_computed_ingress_ipv6_cidr_blocks, 0) + number_of_computed_ingress_prefix_list_ids = try(each.value.number_of_computed_ingress_prefix_list_ids, var.defaults.number_of_computed_ingress_prefix_list_ids, 0) + number_of_computed_ingress_rules = try(each.value.number_of_computed_ingress_rules, var.defaults.number_of_computed_ingress_rules, 0) + number_of_computed_ingress_with_cidr_ipv4 = try(each.value.number_of_computed_ingress_with_cidr_ipv4, var.defaults.number_of_computed_ingress_with_cidr_ipv4, 0) + number_of_computed_ingress_with_cidr_ipv6 = try(each.value.number_of_computed_ingress_with_cidr_ipv6, var.defaults.number_of_computed_ingress_with_cidr_ipv6, 0) + number_of_computed_ingress_with_prefix_list_id = try(each.value.number_of_computed_ingress_with_prefix_list_id, var.defaults.number_of_computed_ingress_with_prefix_list_id, 0) + number_of_computed_ingress_with_referenced_security_group_id = try(each.value.number_of_computed_ingress_with_referenced_security_group_id, var.defaults.number_of_computed_ingress_with_referenced_security_group_id, 0) + number_of_computed_ingress_with_self = try(each.value.number_of_computed_ingress_with_self, var.defaults.number_of_computed_ingress_with_self, 0) + revoke_rules_on_delete = try(each.value.revoke_rules_on_delete, var.defaults.revoke_rules_on_delete, false) + tags = try(each.value.tags, var.defaults.tags, {}) + use_name_prefix = try(each.value.use_name_prefix, var.defaults.use_name_prefix, true) + vpc_id = try(each.value.vpc_id, var.defaults.vpc_id) } diff --git a/wrappers/kubernetes-api/main.tf b/wrappers/kubernetes-api/main.tf index eab20653..1aea3688 100644 --- a/wrappers/kubernetes-api/main.tf +++ b/wrappers/kubernetes-api/main.tf @@ -3,77 +3,77 @@ module "wrapper" { for_each = var.items - auto_computed_egress_rules = try(each.value.auto_computed_egress_rules, var.defaults.auto_computed_egress_rules, []) - auto_computed_egress_with_self = try(each.value.auto_computed_egress_with_self, var.defaults.auto_computed_egress_with_self, []) - auto_computed_ingress_rules = try(each.value.auto_computed_ingress_rules, var.defaults.auto_computed_ingress_rules, []) - auto_computed_ingress_with_self = try(each.value.auto_computed_ingress_with_self, var.defaults.auto_computed_ingress_with_self, []) - auto_egress_rules = try(each.value.auto_egress_rules, var.defaults.auto_egress_rules, ["all-all"]) - auto_egress_with_self = try(each.value.auto_egress_with_self, var.defaults.auto_egress_with_self, []) - auto_ingress_rules = try(each.value.auto_ingress_rules, var.defaults.auto_ingress_rules, ["kubernetes-api-tcp"]) - auto_ingress_with_self = try(each.value.auto_ingress_with_self, var.defaults.auto_ingress_with_self, [{ "rule" = "all-all" }]) - auto_number_of_computed_egress_rules = try(each.value.auto_number_of_computed_egress_rules, var.defaults.auto_number_of_computed_egress_rules, 0) - auto_number_of_computed_egress_with_self = try(each.value.auto_number_of_computed_egress_with_self, var.defaults.auto_number_of_computed_egress_with_self, 0) - auto_number_of_computed_ingress_rules = try(each.value.auto_number_of_computed_ingress_rules, var.defaults.auto_number_of_computed_ingress_rules, 0) - auto_number_of_computed_ingress_with_self = try(each.value.auto_number_of_computed_ingress_with_self, var.defaults.auto_number_of_computed_ingress_with_self, 0) - computed_egress_cidr_blocks = try(each.value.computed_egress_cidr_blocks, var.defaults.computed_egress_cidr_blocks, ["0.0.0.0/0"]) - computed_egress_ipv6_cidr_blocks = try(each.value.computed_egress_ipv6_cidr_blocks, var.defaults.computed_egress_ipv6_cidr_blocks, ["::/0"]) - computed_egress_prefix_list_ids = try(each.value.computed_egress_prefix_list_ids, var.defaults.computed_egress_prefix_list_ids, []) - computed_egress_rules = try(each.value.computed_egress_rules, var.defaults.computed_egress_rules, []) - computed_egress_with_cidr_blocks = try(each.value.computed_egress_with_cidr_blocks, var.defaults.computed_egress_with_cidr_blocks, []) - computed_egress_with_ipv6_cidr_blocks = try(each.value.computed_egress_with_ipv6_cidr_blocks, var.defaults.computed_egress_with_ipv6_cidr_blocks, []) - computed_egress_with_prefix_list_ids = try(each.value.computed_egress_with_prefix_list_ids, var.defaults.computed_egress_with_prefix_list_ids, []) - computed_egress_with_self = try(each.value.computed_egress_with_self, var.defaults.computed_egress_with_self, []) - computed_egress_with_source_security_group_id = try(each.value.computed_egress_with_source_security_group_id, var.defaults.computed_egress_with_source_security_group_id, []) - computed_ingress_cidr_blocks = try(each.value.computed_ingress_cidr_blocks, var.defaults.computed_ingress_cidr_blocks, []) - computed_ingress_ipv6_cidr_blocks = try(each.value.computed_ingress_ipv6_cidr_blocks, var.defaults.computed_ingress_ipv6_cidr_blocks, []) - computed_ingress_prefix_list_ids = try(each.value.computed_ingress_prefix_list_ids, var.defaults.computed_ingress_prefix_list_ids, []) - computed_ingress_rules = try(each.value.computed_ingress_rules, var.defaults.computed_ingress_rules, []) - computed_ingress_with_cidr_blocks = try(each.value.computed_ingress_with_cidr_blocks, var.defaults.computed_ingress_with_cidr_blocks, []) - computed_ingress_with_ipv6_cidr_blocks = try(each.value.computed_ingress_with_ipv6_cidr_blocks, var.defaults.computed_ingress_with_ipv6_cidr_blocks, []) - computed_ingress_with_prefix_list_ids = try(each.value.computed_ingress_with_prefix_list_ids, var.defaults.computed_ingress_with_prefix_list_ids, []) - computed_ingress_with_self = try(each.value.computed_ingress_with_self, var.defaults.computed_ingress_with_self, []) - computed_ingress_with_source_security_group_id = try(each.value.computed_ingress_with_source_security_group_id, var.defaults.computed_ingress_with_source_security_group_id, []) - create = try(each.value.create, var.defaults.create, true) - description = try(each.value.description, var.defaults.description, "Security Group managed by Terraform") - egress_cidr_blocks = try(each.value.egress_cidr_blocks, var.defaults.egress_cidr_blocks, ["0.0.0.0/0"]) - egress_ipv6_cidr_blocks = try(each.value.egress_ipv6_cidr_blocks, var.defaults.egress_ipv6_cidr_blocks, ["::/0"]) - egress_prefix_list_ids = try(each.value.egress_prefix_list_ids, var.defaults.egress_prefix_list_ids, []) - egress_rules = try(each.value.egress_rules, var.defaults.egress_rules, []) - egress_with_cidr_blocks = try(each.value.egress_with_cidr_blocks, var.defaults.egress_with_cidr_blocks, []) - egress_with_ipv6_cidr_blocks = try(each.value.egress_with_ipv6_cidr_blocks, var.defaults.egress_with_ipv6_cidr_blocks, []) - egress_with_prefix_list_ids = try(each.value.egress_with_prefix_list_ids, var.defaults.egress_with_prefix_list_ids, []) - egress_with_self = try(each.value.egress_with_self, var.defaults.egress_with_self, []) - egress_with_source_security_group_id = try(each.value.egress_with_source_security_group_id, var.defaults.egress_with_source_security_group_id, []) - ingress_cidr_blocks = try(each.value.ingress_cidr_blocks, var.defaults.ingress_cidr_blocks, []) - ingress_ipv6_cidr_blocks = try(each.value.ingress_ipv6_cidr_blocks, var.defaults.ingress_ipv6_cidr_blocks, []) - ingress_prefix_list_ids = try(each.value.ingress_prefix_list_ids, var.defaults.ingress_prefix_list_ids, []) - ingress_rules = try(each.value.ingress_rules, var.defaults.ingress_rules, []) - ingress_with_cidr_blocks = try(each.value.ingress_with_cidr_blocks, var.defaults.ingress_with_cidr_blocks, []) - ingress_with_ipv6_cidr_blocks = try(each.value.ingress_with_ipv6_cidr_blocks, var.defaults.ingress_with_ipv6_cidr_blocks, []) - ingress_with_prefix_list_ids = try(each.value.ingress_with_prefix_list_ids, var.defaults.ingress_with_prefix_list_ids, []) - ingress_with_self = try(each.value.ingress_with_self, var.defaults.ingress_with_self, []) - ingress_with_source_security_group_id = try(each.value.ingress_with_source_security_group_id, var.defaults.ingress_with_source_security_group_id, []) - name = try(each.value.name, var.defaults.name) - number_of_computed_egress_cidr_blocks = try(each.value.number_of_computed_egress_cidr_blocks, var.defaults.number_of_computed_egress_cidr_blocks, 0) - number_of_computed_egress_ipv6_cidr_blocks = try(each.value.number_of_computed_egress_ipv6_cidr_blocks, var.defaults.number_of_computed_egress_ipv6_cidr_blocks, 0) - number_of_computed_egress_prefix_list_ids = try(each.value.number_of_computed_egress_prefix_list_ids, var.defaults.number_of_computed_egress_prefix_list_ids, 0) - number_of_computed_egress_rules = try(each.value.number_of_computed_egress_rules, var.defaults.number_of_computed_egress_rules, 0) - number_of_computed_egress_with_cidr_blocks = try(each.value.number_of_computed_egress_with_cidr_blocks, var.defaults.number_of_computed_egress_with_cidr_blocks, 0) - number_of_computed_egress_with_ipv6_cidr_blocks = try(each.value.number_of_computed_egress_with_ipv6_cidr_blocks, var.defaults.number_of_computed_egress_with_ipv6_cidr_blocks, 0) - number_of_computed_egress_with_prefix_list_ids = try(each.value.number_of_computed_egress_with_prefix_list_ids, var.defaults.number_of_computed_egress_with_prefix_list_ids, 0) - number_of_computed_egress_with_self = try(each.value.number_of_computed_egress_with_self, var.defaults.number_of_computed_egress_with_self, 0) - number_of_computed_egress_with_source_security_group_id = try(each.value.number_of_computed_egress_with_source_security_group_id, var.defaults.number_of_computed_egress_with_source_security_group_id, 0) - number_of_computed_ingress_cidr_blocks = try(each.value.number_of_computed_ingress_cidr_blocks, var.defaults.number_of_computed_ingress_cidr_blocks, 0) - number_of_computed_ingress_ipv6_cidr_blocks = try(each.value.number_of_computed_ingress_ipv6_cidr_blocks, var.defaults.number_of_computed_ingress_ipv6_cidr_blocks, 0) - number_of_computed_ingress_prefix_list_ids = try(each.value.number_of_computed_ingress_prefix_list_ids, var.defaults.number_of_computed_ingress_prefix_list_ids, 0) - number_of_computed_ingress_rules = try(each.value.number_of_computed_ingress_rules, var.defaults.number_of_computed_ingress_rules, 0) - number_of_computed_ingress_with_cidr_blocks = try(each.value.number_of_computed_ingress_with_cidr_blocks, var.defaults.number_of_computed_ingress_with_cidr_blocks, 0) - number_of_computed_ingress_with_ipv6_cidr_blocks = try(each.value.number_of_computed_ingress_with_ipv6_cidr_blocks, var.defaults.number_of_computed_ingress_with_ipv6_cidr_blocks, 0) - number_of_computed_ingress_with_prefix_list_ids = try(each.value.number_of_computed_ingress_with_prefix_list_ids, var.defaults.number_of_computed_ingress_with_prefix_list_ids, 0) - number_of_computed_ingress_with_self = try(each.value.number_of_computed_ingress_with_self, var.defaults.number_of_computed_ingress_with_self, 0) - number_of_computed_ingress_with_source_security_group_id = try(each.value.number_of_computed_ingress_with_source_security_group_id, var.defaults.number_of_computed_ingress_with_source_security_group_id, 0) - revoke_rules_on_delete = try(each.value.revoke_rules_on_delete, var.defaults.revoke_rules_on_delete, false) - tags = try(each.value.tags, var.defaults.tags, {}) - use_name_prefix = try(each.value.use_name_prefix, var.defaults.use_name_prefix, true) - vpc_id = try(each.value.vpc_id, var.defaults.vpc_id) + auto_computed_egress_rules = try(each.value.auto_computed_egress_rules, var.defaults.auto_computed_egress_rules, []) + auto_computed_egress_with_self = try(each.value.auto_computed_egress_with_self, var.defaults.auto_computed_egress_with_self, []) + auto_computed_ingress_rules = try(each.value.auto_computed_ingress_rules, var.defaults.auto_computed_ingress_rules, []) + auto_computed_ingress_with_self = try(each.value.auto_computed_ingress_with_self, var.defaults.auto_computed_ingress_with_self, []) + auto_egress_rules = try(each.value.auto_egress_rules, var.defaults.auto_egress_rules, ["all-all"]) + auto_egress_with_self = try(each.value.auto_egress_with_self, var.defaults.auto_egress_with_self, []) + auto_ingress_rules = try(each.value.auto_ingress_rules, var.defaults.auto_ingress_rules, ["kubernetes-api-tcp"]) + auto_ingress_with_self = try(each.value.auto_ingress_with_self, var.defaults.auto_ingress_with_self, [{ "rule" = "all-all" }]) + auto_number_of_computed_egress_rules = try(each.value.auto_number_of_computed_egress_rules, var.defaults.auto_number_of_computed_egress_rules, 0) + auto_number_of_computed_egress_with_self = try(each.value.auto_number_of_computed_egress_with_self, var.defaults.auto_number_of_computed_egress_with_self, 0) + auto_number_of_computed_ingress_rules = try(each.value.auto_number_of_computed_ingress_rules, var.defaults.auto_number_of_computed_ingress_rules, 0) + auto_number_of_computed_ingress_with_self = try(each.value.auto_number_of_computed_ingress_with_self, var.defaults.auto_number_of_computed_ingress_with_self, 0) + computed_egress_cidr_blocks = try(each.value.computed_egress_cidr_blocks, var.defaults.computed_egress_cidr_blocks, ["0.0.0.0/0"]) + computed_egress_ipv6_cidr_blocks = try(each.value.computed_egress_ipv6_cidr_blocks, var.defaults.computed_egress_ipv6_cidr_blocks, ["::/0"]) + computed_egress_prefix_list_ids = try(each.value.computed_egress_prefix_list_ids, var.defaults.computed_egress_prefix_list_ids, []) + computed_egress_rules = try(each.value.computed_egress_rules, var.defaults.computed_egress_rules, []) + computed_egress_with_cidr_ipv4 = try(each.value.computed_egress_with_cidr_ipv4, var.defaults.computed_egress_with_cidr_ipv4, []) + computed_egress_with_cidr_ipv6 = try(each.value.computed_egress_with_cidr_ipv6, var.defaults.computed_egress_with_cidr_ipv6, []) + computed_egress_with_prefix_list_id = try(each.value.computed_egress_with_prefix_list_id, var.defaults.computed_egress_with_prefix_list_id, []) + computed_egress_with_referenced_security_group_id = try(each.value.computed_egress_with_referenced_security_group_id, var.defaults.computed_egress_with_referenced_security_group_id, []) + computed_egress_with_self = try(each.value.computed_egress_with_self, var.defaults.computed_egress_with_self, []) + computed_ingress_cidr_blocks = try(each.value.computed_ingress_cidr_blocks, var.defaults.computed_ingress_cidr_blocks, []) + computed_ingress_ipv6_cidr_blocks = try(each.value.computed_ingress_ipv6_cidr_blocks, var.defaults.computed_ingress_ipv6_cidr_blocks, []) + computed_ingress_prefix_list_ids = try(each.value.computed_ingress_prefix_list_ids, var.defaults.computed_ingress_prefix_list_ids, []) + computed_ingress_rules = try(each.value.computed_ingress_rules, var.defaults.computed_ingress_rules, []) + computed_ingress_with_cidr_ipv4 = try(each.value.computed_ingress_with_cidr_ipv4, var.defaults.computed_ingress_with_cidr_ipv4, []) + computed_ingress_with_cidr_ipv6 = try(each.value.computed_ingress_with_cidr_ipv6, var.defaults.computed_ingress_with_cidr_ipv6, []) + computed_ingress_with_prefix_list_id = try(each.value.computed_ingress_with_prefix_list_id, var.defaults.computed_ingress_with_prefix_list_id, []) + computed_ingress_with_referenced_security_group_id = try(each.value.computed_ingress_with_referenced_security_group_id, var.defaults.computed_ingress_with_referenced_security_group_id, []) + computed_ingress_with_self = try(each.value.computed_ingress_with_self, var.defaults.computed_ingress_with_self, []) + create = try(each.value.create, var.defaults.create, true) + description = try(each.value.description, var.defaults.description, "Security Group managed by Terraform") + egress_cidr_ipv4 = try(each.value.egress_cidr_ipv4, var.defaults.egress_cidr_ipv4, ["0.0.0.0/0"]) + egress_cidr_ipv6 = try(each.value.egress_cidr_ipv6, var.defaults.egress_cidr_ipv6, ["::/0"]) + egress_prefix_list_ids = try(each.value.egress_prefix_list_ids, var.defaults.egress_prefix_list_ids, []) + egress_rules = try(each.value.egress_rules, var.defaults.egress_rules, []) + egress_with_cidr_ipv4 = try(each.value.egress_with_cidr_ipv4, var.defaults.egress_with_cidr_ipv4, []) + egress_with_cidr_ipv6 = try(each.value.egress_with_cidr_ipv6, var.defaults.egress_with_cidr_ipv6, []) + egress_with_prefix_list_id = try(each.value.egress_with_prefix_list_id, var.defaults.egress_with_prefix_list_id, []) + egress_with_referenced_security_group_id = try(each.value.egress_with_referenced_security_group_id, var.defaults.egress_with_referenced_security_group_id, []) + egress_with_self = try(each.value.egress_with_self, var.defaults.egress_with_self, []) + ingress_cidr_ipv4 = try(each.value.ingress_cidr_ipv4, var.defaults.ingress_cidr_ipv4, []) + ingress_cidr_ipv6 = try(each.value.ingress_cidr_ipv6, var.defaults.ingress_cidr_ipv6, []) + ingress_prefix_list_ids = try(each.value.ingress_prefix_list_ids, var.defaults.ingress_prefix_list_ids, []) + ingress_rules = try(each.value.ingress_rules, var.defaults.ingress_rules, []) + ingress_with_cidr_ipv4 = try(each.value.ingress_with_cidr_ipv4, var.defaults.ingress_with_cidr_ipv4, []) + ingress_with_cidr_ipv6 = try(each.value.ingress_with_cidr_ipv6, var.defaults.ingress_with_cidr_ipv6, []) + ingress_with_prefix_list_id = try(each.value.ingress_with_prefix_list_id, var.defaults.ingress_with_prefix_list_id, []) + ingress_with_referenced_security_group_id = try(each.value.ingress_with_referenced_security_group_id, var.defaults.ingress_with_referenced_security_group_id, []) + ingress_with_self = try(each.value.ingress_with_self, var.defaults.ingress_with_self, []) + name = try(each.value.name, var.defaults.name) + number_of_computed_egress_cidr_blocks = try(each.value.number_of_computed_egress_cidr_blocks, var.defaults.number_of_computed_egress_cidr_blocks, 0) + number_of_computed_egress_ipv6_cidr_blocks = try(each.value.number_of_computed_egress_ipv6_cidr_blocks, var.defaults.number_of_computed_egress_ipv6_cidr_blocks, 0) + number_of_computed_egress_prefix_list_ids = try(each.value.number_of_computed_egress_prefix_list_ids, var.defaults.number_of_computed_egress_prefix_list_ids, 0) + number_of_computed_egress_rules = try(each.value.number_of_computed_egress_rules, var.defaults.number_of_computed_egress_rules, 0) + number_of_computed_egress_with_cidr_ipv4 = try(each.value.number_of_computed_egress_with_cidr_ipv4, var.defaults.number_of_computed_egress_with_cidr_ipv4, 0) + number_of_computed_egress_with_cidr_ipv6 = try(each.value.number_of_computed_egress_with_cidr_ipv6, var.defaults.number_of_computed_egress_with_cidr_ipv6, 0) + number_of_computed_egress_with_prefix_list_id = try(each.value.number_of_computed_egress_with_prefix_list_id, var.defaults.number_of_computed_egress_with_prefix_list_id, 0) + number_of_computed_egress_with_referenced_security_group_id = try(each.value.number_of_computed_egress_with_referenced_security_group_id, var.defaults.number_of_computed_egress_with_referenced_security_group_id, 0) + number_of_computed_egress_with_self = try(each.value.number_of_computed_egress_with_self, var.defaults.number_of_computed_egress_with_self, 0) + number_of_computed_ingress_cidr_blocks = try(each.value.number_of_computed_ingress_cidr_blocks, var.defaults.number_of_computed_ingress_cidr_blocks, 0) + number_of_computed_ingress_ipv6_cidr_blocks = try(each.value.number_of_computed_ingress_ipv6_cidr_blocks, var.defaults.number_of_computed_ingress_ipv6_cidr_blocks, 0) + number_of_computed_ingress_prefix_list_ids = try(each.value.number_of_computed_ingress_prefix_list_ids, var.defaults.number_of_computed_ingress_prefix_list_ids, 0) + number_of_computed_ingress_rules = try(each.value.number_of_computed_ingress_rules, var.defaults.number_of_computed_ingress_rules, 0) + number_of_computed_ingress_with_cidr_ipv4 = try(each.value.number_of_computed_ingress_with_cidr_ipv4, var.defaults.number_of_computed_ingress_with_cidr_ipv4, 0) + number_of_computed_ingress_with_cidr_ipv6 = try(each.value.number_of_computed_ingress_with_cidr_ipv6, var.defaults.number_of_computed_ingress_with_cidr_ipv6, 0) + number_of_computed_ingress_with_prefix_list_id = try(each.value.number_of_computed_ingress_with_prefix_list_id, var.defaults.number_of_computed_ingress_with_prefix_list_id, 0) + number_of_computed_ingress_with_referenced_security_group_id = try(each.value.number_of_computed_ingress_with_referenced_security_group_id, var.defaults.number_of_computed_ingress_with_referenced_security_group_id, 0) + number_of_computed_ingress_with_self = try(each.value.number_of_computed_ingress_with_self, var.defaults.number_of_computed_ingress_with_self, 0) + revoke_rules_on_delete = try(each.value.revoke_rules_on_delete, var.defaults.revoke_rules_on_delete, false) + tags = try(each.value.tags, var.defaults.tags, {}) + use_name_prefix = try(each.value.use_name_prefix, var.defaults.use_name_prefix, true) + vpc_id = try(each.value.vpc_id, var.defaults.vpc_id) } diff --git a/wrappers/ldap/main.tf b/wrappers/ldap/main.tf index 6e239b82..b7639b23 100644 --- a/wrappers/ldap/main.tf +++ b/wrappers/ldap/main.tf @@ -3,77 +3,77 @@ module "wrapper" { for_each = var.items - auto_computed_egress_rules = try(each.value.auto_computed_egress_rules, var.defaults.auto_computed_egress_rules, []) - auto_computed_egress_with_self = try(each.value.auto_computed_egress_with_self, var.defaults.auto_computed_egress_with_self, []) - auto_computed_ingress_rules = try(each.value.auto_computed_ingress_rules, var.defaults.auto_computed_ingress_rules, []) - auto_computed_ingress_with_self = try(each.value.auto_computed_ingress_with_self, var.defaults.auto_computed_ingress_with_self, []) - auto_egress_rules = try(each.value.auto_egress_rules, var.defaults.auto_egress_rules, ["all-all"]) - auto_egress_with_self = try(each.value.auto_egress_with_self, var.defaults.auto_egress_with_self, []) - auto_ingress_rules = try(each.value.auto_ingress_rules, var.defaults.auto_ingress_rules, ["ldap-tcp"]) - auto_ingress_with_self = try(each.value.auto_ingress_with_self, var.defaults.auto_ingress_with_self, [{ "rule" = "all-all" }]) - auto_number_of_computed_egress_rules = try(each.value.auto_number_of_computed_egress_rules, var.defaults.auto_number_of_computed_egress_rules, 0) - auto_number_of_computed_egress_with_self = try(each.value.auto_number_of_computed_egress_with_self, var.defaults.auto_number_of_computed_egress_with_self, 0) - auto_number_of_computed_ingress_rules = try(each.value.auto_number_of_computed_ingress_rules, var.defaults.auto_number_of_computed_ingress_rules, 0) - auto_number_of_computed_ingress_with_self = try(each.value.auto_number_of_computed_ingress_with_self, var.defaults.auto_number_of_computed_ingress_with_self, 0) - computed_egress_cidr_blocks = try(each.value.computed_egress_cidr_blocks, var.defaults.computed_egress_cidr_blocks, ["0.0.0.0/0"]) - computed_egress_ipv6_cidr_blocks = try(each.value.computed_egress_ipv6_cidr_blocks, var.defaults.computed_egress_ipv6_cidr_blocks, ["::/0"]) - computed_egress_prefix_list_ids = try(each.value.computed_egress_prefix_list_ids, var.defaults.computed_egress_prefix_list_ids, []) - computed_egress_rules = try(each.value.computed_egress_rules, var.defaults.computed_egress_rules, []) - computed_egress_with_cidr_blocks = try(each.value.computed_egress_with_cidr_blocks, var.defaults.computed_egress_with_cidr_blocks, []) - computed_egress_with_ipv6_cidr_blocks = try(each.value.computed_egress_with_ipv6_cidr_blocks, var.defaults.computed_egress_with_ipv6_cidr_blocks, []) - computed_egress_with_prefix_list_ids = try(each.value.computed_egress_with_prefix_list_ids, var.defaults.computed_egress_with_prefix_list_ids, []) - computed_egress_with_self = try(each.value.computed_egress_with_self, var.defaults.computed_egress_with_self, []) - computed_egress_with_source_security_group_id = try(each.value.computed_egress_with_source_security_group_id, var.defaults.computed_egress_with_source_security_group_id, []) - computed_ingress_cidr_blocks = try(each.value.computed_ingress_cidr_blocks, var.defaults.computed_ingress_cidr_blocks, []) - computed_ingress_ipv6_cidr_blocks = try(each.value.computed_ingress_ipv6_cidr_blocks, var.defaults.computed_ingress_ipv6_cidr_blocks, []) - computed_ingress_prefix_list_ids = try(each.value.computed_ingress_prefix_list_ids, var.defaults.computed_ingress_prefix_list_ids, []) - computed_ingress_rules = try(each.value.computed_ingress_rules, var.defaults.computed_ingress_rules, []) - computed_ingress_with_cidr_blocks = try(each.value.computed_ingress_with_cidr_blocks, var.defaults.computed_ingress_with_cidr_blocks, []) - computed_ingress_with_ipv6_cidr_blocks = try(each.value.computed_ingress_with_ipv6_cidr_blocks, var.defaults.computed_ingress_with_ipv6_cidr_blocks, []) - computed_ingress_with_prefix_list_ids = try(each.value.computed_ingress_with_prefix_list_ids, var.defaults.computed_ingress_with_prefix_list_ids, []) - computed_ingress_with_self = try(each.value.computed_ingress_with_self, var.defaults.computed_ingress_with_self, []) - computed_ingress_with_source_security_group_id = try(each.value.computed_ingress_with_source_security_group_id, var.defaults.computed_ingress_with_source_security_group_id, []) - create = try(each.value.create, var.defaults.create, true) - description = try(each.value.description, var.defaults.description, "Security Group managed by Terraform") - egress_cidr_blocks = try(each.value.egress_cidr_blocks, var.defaults.egress_cidr_blocks, ["0.0.0.0/0"]) - egress_ipv6_cidr_blocks = try(each.value.egress_ipv6_cidr_blocks, var.defaults.egress_ipv6_cidr_blocks, ["::/0"]) - egress_prefix_list_ids = try(each.value.egress_prefix_list_ids, var.defaults.egress_prefix_list_ids, []) - egress_rules = try(each.value.egress_rules, var.defaults.egress_rules, []) - egress_with_cidr_blocks = try(each.value.egress_with_cidr_blocks, var.defaults.egress_with_cidr_blocks, []) - egress_with_ipv6_cidr_blocks = try(each.value.egress_with_ipv6_cidr_blocks, var.defaults.egress_with_ipv6_cidr_blocks, []) - egress_with_prefix_list_ids = try(each.value.egress_with_prefix_list_ids, var.defaults.egress_with_prefix_list_ids, []) - egress_with_self = try(each.value.egress_with_self, var.defaults.egress_with_self, []) - egress_with_source_security_group_id = try(each.value.egress_with_source_security_group_id, var.defaults.egress_with_source_security_group_id, []) - ingress_cidr_blocks = try(each.value.ingress_cidr_blocks, var.defaults.ingress_cidr_blocks, []) - ingress_ipv6_cidr_blocks = try(each.value.ingress_ipv6_cidr_blocks, var.defaults.ingress_ipv6_cidr_blocks, []) - ingress_prefix_list_ids = try(each.value.ingress_prefix_list_ids, var.defaults.ingress_prefix_list_ids, []) - ingress_rules = try(each.value.ingress_rules, var.defaults.ingress_rules, []) - ingress_with_cidr_blocks = try(each.value.ingress_with_cidr_blocks, var.defaults.ingress_with_cidr_blocks, []) - ingress_with_ipv6_cidr_blocks = try(each.value.ingress_with_ipv6_cidr_blocks, var.defaults.ingress_with_ipv6_cidr_blocks, []) - ingress_with_prefix_list_ids = try(each.value.ingress_with_prefix_list_ids, var.defaults.ingress_with_prefix_list_ids, []) - ingress_with_self = try(each.value.ingress_with_self, var.defaults.ingress_with_self, []) - ingress_with_source_security_group_id = try(each.value.ingress_with_source_security_group_id, var.defaults.ingress_with_source_security_group_id, []) - name = try(each.value.name, var.defaults.name) - number_of_computed_egress_cidr_blocks = try(each.value.number_of_computed_egress_cidr_blocks, var.defaults.number_of_computed_egress_cidr_blocks, 0) - number_of_computed_egress_ipv6_cidr_blocks = try(each.value.number_of_computed_egress_ipv6_cidr_blocks, var.defaults.number_of_computed_egress_ipv6_cidr_blocks, 0) - number_of_computed_egress_prefix_list_ids = try(each.value.number_of_computed_egress_prefix_list_ids, var.defaults.number_of_computed_egress_prefix_list_ids, 0) - number_of_computed_egress_rules = try(each.value.number_of_computed_egress_rules, var.defaults.number_of_computed_egress_rules, 0) - number_of_computed_egress_with_cidr_blocks = try(each.value.number_of_computed_egress_with_cidr_blocks, var.defaults.number_of_computed_egress_with_cidr_blocks, 0) - number_of_computed_egress_with_ipv6_cidr_blocks = try(each.value.number_of_computed_egress_with_ipv6_cidr_blocks, var.defaults.number_of_computed_egress_with_ipv6_cidr_blocks, 0) - number_of_computed_egress_with_prefix_list_ids = try(each.value.number_of_computed_egress_with_prefix_list_ids, var.defaults.number_of_computed_egress_with_prefix_list_ids, 0) - number_of_computed_egress_with_self = try(each.value.number_of_computed_egress_with_self, var.defaults.number_of_computed_egress_with_self, 0) - number_of_computed_egress_with_source_security_group_id = try(each.value.number_of_computed_egress_with_source_security_group_id, var.defaults.number_of_computed_egress_with_source_security_group_id, 0) - number_of_computed_ingress_cidr_blocks = try(each.value.number_of_computed_ingress_cidr_blocks, var.defaults.number_of_computed_ingress_cidr_blocks, 0) - number_of_computed_ingress_ipv6_cidr_blocks = try(each.value.number_of_computed_ingress_ipv6_cidr_blocks, var.defaults.number_of_computed_ingress_ipv6_cidr_blocks, 0) - number_of_computed_ingress_prefix_list_ids = try(each.value.number_of_computed_ingress_prefix_list_ids, var.defaults.number_of_computed_ingress_prefix_list_ids, 0) - number_of_computed_ingress_rules = try(each.value.number_of_computed_ingress_rules, var.defaults.number_of_computed_ingress_rules, 0) - number_of_computed_ingress_with_cidr_blocks = try(each.value.number_of_computed_ingress_with_cidr_blocks, var.defaults.number_of_computed_ingress_with_cidr_blocks, 0) - number_of_computed_ingress_with_ipv6_cidr_blocks = try(each.value.number_of_computed_ingress_with_ipv6_cidr_blocks, var.defaults.number_of_computed_ingress_with_ipv6_cidr_blocks, 0) - number_of_computed_ingress_with_prefix_list_ids = try(each.value.number_of_computed_ingress_with_prefix_list_ids, var.defaults.number_of_computed_ingress_with_prefix_list_ids, 0) - number_of_computed_ingress_with_self = try(each.value.number_of_computed_ingress_with_self, var.defaults.number_of_computed_ingress_with_self, 0) - number_of_computed_ingress_with_source_security_group_id = try(each.value.number_of_computed_ingress_with_source_security_group_id, var.defaults.number_of_computed_ingress_with_source_security_group_id, 0) - revoke_rules_on_delete = try(each.value.revoke_rules_on_delete, var.defaults.revoke_rules_on_delete, false) - tags = try(each.value.tags, var.defaults.tags, {}) - use_name_prefix = try(each.value.use_name_prefix, var.defaults.use_name_prefix, true) - vpc_id = try(each.value.vpc_id, var.defaults.vpc_id) + auto_computed_egress_rules = try(each.value.auto_computed_egress_rules, var.defaults.auto_computed_egress_rules, []) + auto_computed_egress_with_self = try(each.value.auto_computed_egress_with_self, var.defaults.auto_computed_egress_with_self, []) + auto_computed_ingress_rules = try(each.value.auto_computed_ingress_rules, var.defaults.auto_computed_ingress_rules, []) + auto_computed_ingress_with_self = try(each.value.auto_computed_ingress_with_self, var.defaults.auto_computed_ingress_with_self, []) + auto_egress_rules = try(each.value.auto_egress_rules, var.defaults.auto_egress_rules, ["all-all"]) + auto_egress_with_self = try(each.value.auto_egress_with_self, var.defaults.auto_egress_with_self, []) + auto_ingress_rules = try(each.value.auto_ingress_rules, var.defaults.auto_ingress_rules, ["ldap-tcp"]) + auto_ingress_with_self = try(each.value.auto_ingress_with_self, var.defaults.auto_ingress_with_self, [{ "rule" = "all-all" }]) + auto_number_of_computed_egress_rules = try(each.value.auto_number_of_computed_egress_rules, var.defaults.auto_number_of_computed_egress_rules, 0) + auto_number_of_computed_egress_with_self = try(each.value.auto_number_of_computed_egress_with_self, var.defaults.auto_number_of_computed_egress_with_self, 0) + auto_number_of_computed_ingress_rules = try(each.value.auto_number_of_computed_ingress_rules, var.defaults.auto_number_of_computed_ingress_rules, 0) + auto_number_of_computed_ingress_with_self = try(each.value.auto_number_of_computed_ingress_with_self, var.defaults.auto_number_of_computed_ingress_with_self, 0) + computed_egress_cidr_blocks = try(each.value.computed_egress_cidr_blocks, var.defaults.computed_egress_cidr_blocks, ["0.0.0.0/0"]) + computed_egress_ipv6_cidr_blocks = try(each.value.computed_egress_ipv6_cidr_blocks, var.defaults.computed_egress_ipv6_cidr_blocks, ["::/0"]) + computed_egress_prefix_list_ids = try(each.value.computed_egress_prefix_list_ids, var.defaults.computed_egress_prefix_list_ids, []) + computed_egress_rules = try(each.value.computed_egress_rules, var.defaults.computed_egress_rules, []) + computed_egress_with_cidr_ipv4 = try(each.value.computed_egress_with_cidr_ipv4, var.defaults.computed_egress_with_cidr_ipv4, []) + computed_egress_with_cidr_ipv6 = try(each.value.computed_egress_with_cidr_ipv6, var.defaults.computed_egress_with_cidr_ipv6, []) + computed_egress_with_prefix_list_id = try(each.value.computed_egress_with_prefix_list_id, var.defaults.computed_egress_with_prefix_list_id, []) + computed_egress_with_referenced_security_group_id = try(each.value.computed_egress_with_referenced_security_group_id, var.defaults.computed_egress_with_referenced_security_group_id, []) + computed_egress_with_self = try(each.value.computed_egress_with_self, var.defaults.computed_egress_with_self, []) + computed_ingress_cidr_blocks = try(each.value.computed_ingress_cidr_blocks, var.defaults.computed_ingress_cidr_blocks, []) + computed_ingress_ipv6_cidr_blocks = try(each.value.computed_ingress_ipv6_cidr_blocks, var.defaults.computed_ingress_ipv6_cidr_blocks, []) + computed_ingress_prefix_list_ids = try(each.value.computed_ingress_prefix_list_ids, var.defaults.computed_ingress_prefix_list_ids, []) + computed_ingress_rules = try(each.value.computed_ingress_rules, var.defaults.computed_ingress_rules, []) + computed_ingress_with_cidr_ipv4 = try(each.value.computed_ingress_with_cidr_ipv4, var.defaults.computed_ingress_with_cidr_ipv4, []) + computed_ingress_with_cidr_ipv6 = try(each.value.computed_ingress_with_cidr_ipv6, var.defaults.computed_ingress_with_cidr_ipv6, []) + computed_ingress_with_prefix_list_id = try(each.value.computed_ingress_with_prefix_list_id, var.defaults.computed_ingress_with_prefix_list_id, []) + computed_ingress_with_referenced_security_group_id = try(each.value.computed_ingress_with_referenced_security_group_id, var.defaults.computed_ingress_with_referenced_security_group_id, []) + computed_ingress_with_self = try(each.value.computed_ingress_with_self, var.defaults.computed_ingress_with_self, []) + create = try(each.value.create, var.defaults.create, true) + description = try(each.value.description, var.defaults.description, "Security Group managed by Terraform") + egress_cidr_ipv4 = try(each.value.egress_cidr_ipv4, var.defaults.egress_cidr_ipv4, ["0.0.0.0/0"]) + egress_cidr_ipv6 = try(each.value.egress_cidr_ipv6, var.defaults.egress_cidr_ipv6, ["::/0"]) + egress_prefix_list_ids = try(each.value.egress_prefix_list_ids, var.defaults.egress_prefix_list_ids, []) + egress_rules = try(each.value.egress_rules, var.defaults.egress_rules, []) + egress_with_cidr_ipv4 = try(each.value.egress_with_cidr_ipv4, var.defaults.egress_with_cidr_ipv4, []) + egress_with_cidr_ipv6 = try(each.value.egress_with_cidr_ipv6, var.defaults.egress_with_cidr_ipv6, []) + egress_with_prefix_list_id = try(each.value.egress_with_prefix_list_id, var.defaults.egress_with_prefix_list_id, []) + egress_with_referenced_security_group_id = try(each.value.egress_with_referenced_security_group_id, var.defaults.egress_with_referenced_security_group_id, []) + egress_with_self = try(each.value.egress_with_self, var.defaults.egress_with_self, []) + ingress_cidr_ipv4 = try(each.value.ingress_cidr_ipv4, var.defaults.ingress_cidr_ipv4, []) + ingress_cidr_ipv6 = try(each.value.ingress_cidr_ipv6, var.defaults.ingress_cidr_ipv6, []) + ingress_prefix_list_ids = try(each.value.ingress_prefix_list_ids, var.defaults.ingress_prefix_list_ids, []) + ingress_rules = try(each.value.ingress_rules, var.defaults.ingress_rules, []) + ingress_with_cidr_ipv4 = try(each.value.ingress_with_cidr_ipv4, var.defaults.ingress_with_cidr_ipv4, []) + ingress_with_cidr_ipv6 = try(each.value.ingress_with_cidr_ipv6, var.defaults.ingress_with_cidr_ipv6, []) + ingress_with_prefix_list_id = try(each.value.ingress_with_prefix_list_id, var.defaults.ingress_with_prefix_list_id, []) + ingress_with_referenced_security_group_id = try(each.value.ingress_with_referenced_security_group_id, var.defaults.ingress_with_referenced_security_group_id, []) + ingress_with_self = try(each.value.ingress_with_self, var.defaults.ingress_with_self, []) + name = try(each.value.name, var.defaults.name) + number_of_computed_egress_cidr_blocks = try(each.value.number_of_computed_egress_cidr_blocks, var.defaults.number_of_computed_egress_cidr_blocks, 0) + number_of_computed_egress_ipv6_cidr_blocks = try(each.value.number_of_computed_egress_ipv6_cidr_blocks, var.defaults.number_of_computed_egress_ipv6_cidr_blocks, 0) + number_of_computed_egress_prefix_list_ids = try(each.value.number_of_computed_egress_prefix_list_ids, var.defaults.number_of_computed_egress_prefix_list_ids, 0) + number_of_computed_egress_rules = try(each.value.number_of_computed_egress_rules, var.defaults.number_of_computed_egress_rules, 0) + number_of_computed_egress_with_cidr_ipv4 = try(each.value.number_of_computed_egress_with_cidr_ipv4, var.defaults.number_of_computed_egress_with_cidr_ipv4, 0) + number_of_computed_egress_with_cidr_ipv6 = try(each.value.number_of_computed_egress_with_cidr_ipv6, var.defaults.number_of_computed_egress_with_cidr_ipv6, 0) + number_of_computed_egress_with_prefix_list_id = try(each.value.number_of_computed_egress_with_prefix_list_id, var.defaults.number_of_computed_egress_with_prefix_list_id, 0) + number_of_computed_egress_with_referenced_security_group_id = try(each.value.number_of_computed_egress_with_referenced_security_group_id, var.defaults.number_of_computed_egress_with_referenced_security_group_id, 0) + number_of_computed_egress_with_self = try(each.value.number_of_computed_egress_with_self, var.defaults.number_of_computed_egress_with_self, 0) + number_of_computed_ingress_cidr_blocks = try(each.value.number_of_computed_ingress_cidr_blocks, var.defaults.number_of_computed_ingress_cidr_blocks, 0) + number_of_computed_ingress_ipv6_cidr_blocks = try(each.value.number_of_computed_ingress_ipv6_cidr_blocks, var.defaults.number_of_computed_ingress_ipv6_cidr_blocks, 0) + number_of_computed_ingress_prefix_list_ids = try(each.value.number_of_computed_ingress_prefix_list_ids, var.defaults.number_of_computed_ingress_prefix_list_ids, 0) + number_of_computed_ingress_rules = try(each.value.number_of_computed_ingress_rules, var.defaults.number_of_computed_ingress_rules, 0) + number_of_computed_ingress_with_cidr_ipv4 = try(each.value.number_of_computed_ingress_with_cidr_ipv4, var.defaults.number_of_computed_ingress_with_cidr_ipv4, 0) + number_of_computed_ingress_with_cidr_ipv6 = try(each.value.number_of_computed_ingress_with_cidr_ipv6, var.defaults.number_of_computed_ingress_with_cidr_ipv6, 0) + number_of_computed_ingress_with_prefix_list_id = try(each.value.number_of_computed_ingress_with_prefix_list_id, var.defaults.number_of_computed_ingress_with_prefix_list_id, 0) + number_of_computed_ingress_with_referenced_security_group_id = try(each.value.number_of_computed_ingress_with_referenced_security_group_id, var.defaults.number_of_computed_ingress_with_referenced_security_group_id, 0) + number_of_computed_ingress_with_self = try(each.value.number_of_computed_ingress_with_self, var.defaults.number_of_computed_ingress_with_self, 0) + revoke_rules_on_delete = try(each.value.revoke_rules_on_delete, var.defaults.revoke_rules_on_delete, false) + tags = try(each.value.tags, var.defaults.tags, {}) + use_name_prefix = try(each.value.use_name_prefix, var.defaults.use_name_prefix, true) + vpc_id = try(each.value.vpc_id, var.defaults.vpc_id) } diff --git a/wrappers/ldaps/main.tf b/wrappers/ldaps/main.tf index 812457ba..0a52ce1d 100644 --- a/wrappers/ldaps/main.tf +++ b/wrappers/ldaps/main.tf @@ -3,77 +3,77 @@ module "wrapper" { for_each = var.items - auto_computed_egress_rules = try(each.value.auto_computed_egress_rules, var.defaults.auto_computed_egress_rules, []) - auto_computed_egress_with_self = try(each.value.auto_computed_egress_with_self, var.defaults.auto_computed_egress_with_self, []) - auto_computed_ingress_rules = try(each.value.auto_computed_ingress_rules, var.defaults.auto_computed_ingress_rules, []) - auto_computed_ingress_with_self = try(each.value.auto_computed_ingress_with_self, var.defaults.auto_computed_ingress_with_self, []) - auto_egress_rules = try(each.value.auto_egress_rules, var.defaults.auto_egress_rules, ["all-all"]) - auto_egress_with_self = try(each.value.auto_egress_with_self, var.defaults.auto_egress_with_self, []) - auto_ingress_rules = try(each.value.auto_ingress_rules, var.defaults.auto_ingress_rules, ["ldaps-tcp"]) - auto_ingress_with_self = try(each.value.auto_ingress_with_self, var.defaults.auto_ingress_with_self, [{ "rule" = "all-all" }]) - auto_number_of_computed_egress_rules = try(each.value.auto_number_of_computed_egress_rules, var.defaults.auto_number_of_computed_egress_rules, 0) - auto_number_of_computed_egress_with_self = try(each.value.auto_number_of_computed_egress_with_self, var.defaults.auto_number_of_computed_egress_with_self, 0) - auto_number_of_computed_ingress_rules = try(each.value.auto_number_of_computed_ingress_rules, var.defaults.auto_number_of_computed_ingress_rules, 0) - auto_number_of_computed_ingress_with_self = try(each.value.auto_number_of_computed_ingress_with_self, var.defaults.auto_number_of_computed_ingress_with_self, 0) - computed_egress_cidr_blocks = try(each.value.computed_egress_cidr_blocks, var.defaults.computed_egress_cidr_blocks, ["0.0.0.0/0"]) - computed_egress_ipv6_cidr_blocks = try(each.value.computed_egress_ipv6_cidr_blocks, var.defaults.computed_egress_ipv6_cidr_blocks, ["::/0"]) - computed_egress_prefix_list_ids = try(each.value.computed_egress_prefix_list_ids, var.defaults.computed_egress_prefix_list_ids, []) - computed_egress_rules = try(each.value.computed_egress_rules, var.defaults.computed_egress_rules, []) - computed_egress_with_cidr_blocks = try(each.value.computed_egress_with_cidr_blocks, var.defaults.computed_egress_with_cidr_blocks, []) - computed_egress_with_ipv6_cidr_blocks = try(each.value.computed_egress_with_ipv6_cidr_blocks, var.defaults.computed_egress_with_ipv6_cidr_blocks, []) - computed_egress_with_prefix_list_ids = try(each.value.computed_egress_with_prefix_list_ids, var.defaults.computed_egress_with_prefix_list_ids, []) - computed_egress_with_self = try(each.value.computed_egress_with_self, var.defaults.computed_egress_with_self, []) - computed_egress_with_source_security_group_id = try(each.value.computed_egress_with_source_security_group_id, var.defaults.computed_egress_with_source_security_group_id, []) - computed_ingress_cidr_blocks = try(each.value.computed_ingress_cidr_blocks, var.defaults.computed_ingress_cidr_blocks, []) - computed_ingress_ipv6_cidr_blocks = try(each.value.computed_ingress_ipv6_cidr_blocks, var.defaults.computed_ingress_ipv6_cidr_blocks, []) - computed_ingress_prefix_list_ids = try(each.value.computed_ingress_prefix_list_ids, var.defaults.computed_ingress_prefix_list_ids, []) - computed_ingress_rules = try(each.value.computed_ingress_rules, var.defaults.computed_ingress_rules, []) - computed_ingress_with_cidr_blocks = try(each.value.computed_ingress_with_cidr_blocks, var.defaults.computed_ingress_with_cidr_blocks, []) - computed_ingress_with_ipv6_cidr_blocks = try(each.value.computed_ingress_with_ipv6_cidr_blocks, var.defaults.computed_ingress_with_ipv6_cidr_blocks, []) - computed_ingress_with_prefix_list_ids = try(each.value.computed_ingress_with_prefix_list_ids, var.defaults.computed_ingress_with_prefix_list_ids, []) - computed_ingress_with_self = try(each.value.computed_ingress_with_self, var.defaults.computed_ingress_with_self, []) - computed_ingress_with_source_security_group_id = try(each.value.computed_ingress_with_source_security_group_id, var.defaults.computed_ingress_with_source_security_group_id, []) - create = try(each.value.create, var.defaults.create, true) - description = try(each.value.description, var.defaults.description, "Security Group managed by Terraform") - egress_cidr_blocks = try(each.value.egress_cidr_blocks, var.defaults.egress_cidr_blocks, ["0.0.0.0/0"]) - egress_ipv6_cidr_blocks = try(each.value.egress_ipv6_cidr_blocks, var.defaults.egress_ipv6_cidr_blocks, ["::/0"]) - egress_prefix_list_ids = try(each.value.egress_prefix_list_ids, var.defaults.egress_prefix_list_ids, []) - egress_rules = try(each.value.egress_rules, var.defaults.egress_rules, []) - egress_with_cidr_blocks = try(each.value.egress_with_cidr_blocks, var.defaults.egress_with_cidr_blocks, []) - egress_with_ipv6_cidr_blocks = try(each.value.egress_with_ipv6_cidr_blocks, var.defaults.egress_with_ipv6_cidr_blocks, []) - egress_with_prefix_list_ids = try(each.value.egress_with_prefix_list_ids, var.defaults.egress_with_prefix_list_ids, []) - egress_with_self = try(each.value.egress_with_self, var.defaults.egress_with_self, []) - egress_with_source_security_group_id = try(each.value.egress_with_source_security_group_id, var.defaults.egress_with_source_security_group_id, []) - ingress_cidr_blocks = try(each.value.ingress_cidr_blocks, var.defaults.ingress_cidr_blocks, []) - ingress_ipv6_cidr_blocks = try(each.value.ingress_ipv6_cidr_blocks, var.defaults.ingress_ipv6_cidr_blocks, []) - ingress_prefix_list_ids = try(each.value.ingress_prefix_list_ids, var.defaults.ingress_prefix_list_ids, []) - ingress_rules = try(each.value.ingress_rules, var.defaults.ingress_rules, []) - ingress_with_cidr_blocks = try(each.value.ingress_with_cidr_blocks, var.defaults.ingress_with_cidr_blocks, []) - ingress_with_ipv6_cidr_blocks = try(each.value.ingress_with_ipv6_cidr_blocks, var.defaults.ingress_with_ipv6_cidr_blocks, []) - ingress_with_prefix_list_ids = try(each.value.ingress_with_prefix_list_ids, var.defaults.ingress_with_prefix_list_ids, []) - ingress_with_self = try(each.value.ingress_with_self, var.defaults.ingress_with_self, []) - ingress_with_source_security_group_id = try(each.value.ingress_with_source_security_group_id, var.defaults.ingress_with_source_security_group_id, []) - name = try(each.value.name, var.defaults.name) - number_of_computed_egress_cidr_blocks = try(each.value.number_of_computed_egress_cidr_blocks, var.defaults.number_of_computed_egress_cidr_blocks, 0) - number_of_computed_egress_ipv6_cidr_blocks = try(each.value.number_of_computed_egress_ipv6_cidr_blocks, var.defaults.number_of_computed_egress_ipv6_cidr_blocks, 0) - number_of_computed_egress_prefix_list_ids = try(each.value.number_of_computed_egress_prefix_list_ids, var.defaults.number_of_computed_egress_prefix_list_ids, 0) - number_of_computed_egress_rules = try(each.value.number_of_computed_egress_rules, var.defaults.number_of_computed_egress_rules, 0) - number_of_computed_egress_with_cidr_blocks = try(each.value.number_of_computed_egress_with_cidr_blocks, var.defaults.number_of_computed_egress_with_cidr_blocks, 0) - number_of_computed_egress_with_ipv6_cidr_blocks = try(each.value.number_of_computed_egress_with_ipv6_cidr_blocks, var.defaults.number_of_computed_egress_with_ipv6_cidr_blocks, 0) - number_of_computed_egress_with_prefix_list_ids = try(each.value.number_of_computed_egress_with_prefix_list_ids, var.defaults.number_of_computed_egress_with_prefix_list_ids, 0) - number_of_computed_egress_with_self = try(each.value.number_of_computed_egress_with_self, var.defaults.number_of_computed_egress_with_self, 0) - number_of_computed_egress_with_source_security_group_id = try(each.value.number_of_computed_egress_with_source_security_group_id, var.defaults.number_of_computed_egress_with_source_security_group_id, 0) - number_of_computed_ingress_cidr_blocks = try(each.value.number_of_computed_ingress_cidr_blocks, var.defaults.number_of_computed_ingress_cidr_blocks, 0) - number_of_computed_ingress_ipv6_cidr_blocks = try(each.value.number_of_computed_ingress_ipv6_cidr_blocks, var.defaults.number_of_computed_ingress_ipv6_cidr_blocks, 0) - number_of_computed_ingress_prefix_list_ids = try(each.value.number_of_computed_ingress_prefix_list_ids, var.defaults.number_of_computed_ingress_prefix_list_ids, 0) - number_of_computed_ingress_rules = try(each.value.number_of_computed_ingress_rules, var.defaults.number_of_computed_ingress_rules, 0) - number_of_computed_ingress_with_cidr_blocks = try(each.value.number_of_computed_ingress_with_cidr_blocks, var.defaults.number_of_computed_ingress_with_cidr_blocks, 0) - number_of_computed_ingress_with_ipv6_cidr_blocks = try(each.value.number_of_computed_ingress_with_ipv6_cidr_blocks, var.defaults.number_of_computed_ingress_with_ipv6_cidr_blocks, 0) - number_of_computed_ingress_with_prefix_list_ids = try(each.value.number_of_computed_ingress_with_prefix_list_ids, var.defaults.number_of_computed_ingress_with_prefix_list_ids, 0) - number_of_computed_ingress_with_self = try(each.value.number_of_computed_ingress_with_self, var.defaults.number_of_computed_ingress_with_self, 0) - number_of_computed_ingress_with_source_security_group_id = try(each.value.number_of_computed_ingress_with_source_security_group_id, var.defaults.number_of_computed_ingress_with_source_security_group_id, 0) - revoke_rules_on_delete = try(each.value.revoke_rules_on_delete, var.defaults.revoke_rules_on_delete, false) - tags = try(each.value.tags, var.defaults.tags, {}) - use_name_prefix = try(each.value.use_name_prefix, var.defaults.use_name_prefix, true) - vpc_id = try(each.value.vpc_id, var.defaults.vpc_id) + auto_computed_egress_rules = try(each.value.auto_computed_egress_rules, var.defaults.auto_computed_egress_rules, []) + auto_computed_egress_with_self = try(each.value.auto_computed_egress_with_self, var.defaults.auto_computed_egress_with_self, []) + auto_computed_ingress_rules = try(each.value.auto_computed_ingress_rules, var.defaults.auto_computed_ingress_rules, []) + auto_computed_ingress_with_self = try(each.value.auto_computed_ingress_with_self, var.defaults.auto_computed_ingress_with_self, []) + auto_egress_rules = try(each.value.auto_egress_rules, var.defaults.auto_egress_rules, ["all-all"]) + auto_egress_with_self = try(each.value.auto_egress_with_self, var.defaults.auto_egress_with_self, []) + auto_ingress_rules = try(each.value.auto_ingress_rules, var.defaults.auto_ingress_rules, ["ldaps-tcp"]) + auto_ingress_with_self = try(each.value.auto_ingress_with_self, var.defaults.auto_ingress_with_self, [{ "rule" = "all-all" }]) + auto_number_of_computed_egress_rules = try(each.value.auto_number_of_computed_egress_rules, var.defaults.auto_number_of_computed_egress_rules, 0) + auto_number_of_computed_egress_with_self = try(each.value.auto_number_of_computed_egress_with_self, var.defaults.auto_number_of_computed_egress_with_self, 0) + auto_number_of_computed_ingress_rules = try(each.value.auto_number_of_computed_ingress_rules, var.defaults.auto_number_of_computed_ingress_rules, 0) + auto_number_of_computed_ingress_with_self = try(each.value.auto_number_of_computed_ingress_with_self, var.defaults.auto_number_of_computed_ingress_with_self, 0) + computed_egress_cidr_blocks = try(each.value.computed_egress_cidr_blocks, var.defaults.computed_egress_cidr_blocks, ["0.0.0.0/0"]) + computed_egress_ipv6_cidr_blocks = try(each.value.computed_egress_ipv6_cidr_blocks, var.defaults.computed_egress_ipv6_cidr_blocks, ["::/0"]) + computed_egress_prefix_list_ids = try(each.value.computed_egress_prefix_list_ids, var.defaults.computed_egress_prefix_list_ids, []) + computed_egress_rules = try(each.value.computed_egress_rules, var.defaults.computed_egress_rules, []) + computed_egress_with_cidr_ipv4 = try(each.value.computed_egress_with_cidr_ipv4, var.defaults.computed_egress_with_cidr_ipv4, []) + computed_egress_with_cidr_ipv6 = try(each.value.computed_egress_with_cidr_ipv6, var.defaults.computed_egress_with_cidr_ipv6, []) + computed_egress_with_prefix_list_id = try(each.value.computed_egress_with_prefix_list_id, var.defaults.computed_egress_with_prefix_list_id, []) + computed_egress_with_referenced_security_group_id = try(each.value.computed_egress_with_referenced_security_group_id, var.defaults.computed_egress_with_referenced_security_group_id, []) + computed_egress_with_self = try(each.value.computed_egress_with_self, var.defaults.computed_egress_with_self, []) + computed_ingress_cidr_blocks = try(each.value.computed_ingress_cidr_blocks, var.defaults.computed_ingress_cidr_blocks, []) + computed_ingress_ipv6_cidr_blocks = try(each.value.computed_ingress_ipv6_cidr_blocks, var.defaults.computed_ingress_ipv6_cidr_blocks, []) + computed_ingress_prefix_list_ids = try(each.value.computed_ingress_prefix_list_ids, var.defaults.computed_ingress_prefix_list_ids, []) + computed_ingress_rules = try(each.value.computed_ingress_rules, var.defaults.computed_ingress_rules, []) + computed_ingress_with_cidr_ipv4 = try(each.value.computed_ingress_with_cidr_ipv4, var.defaults.computed_ingress_with_cidr_ipv4, []) + computed_ingress_with_cidr_ipv6 = try(each.value.computed_ingress_with_cidr_ipv6, var.defaults.computed_ingress_with_cidr_ipv6, []) + computed_ingress_with_prefix_list_id = try(each.value.computed_ingress_with_prefix_list_id, var.defaults.computed_ingress_with_prefix_list_id, []) + computed_ingress_with_referenced_security_group_id = try(each.value.computed_ingress_with_referenced_security_group_id, var.defaults.computed_ingress_with_referenced_security_group_id, []) + computed_ingress_with_self = try(each.value.computed_ingress_with_self, var.defaults.computed_ingress_with_self, []) + create = try(each.value.create, var.defaults.create, true) + description = try(each.value.description, var.defaults.description, "Security Group managed by Terraform") + egress_cidr_ipv4 = try(each.value.egress_cidr_ipv4, var.defaults.egress_cidr_ipv4, ["0.0.0.0/0"]) + egress_cidr_ipv6 = try(each.value.egress_cidr_ipv6, var.defaults.egress_cidr_ipv6, ["::/0"]) + egress_prefix_list_ids = try(each.value.egress_prefix_list_ids, var.defaults.egress_prefix_list_ids, []) + egress_rules = try(each.value.egress_rules, var.defaults.egress_rules, []) + egress_with_cidr_ipv4 = try(each.value.egress_with_cidr_ipv4, var.defaults.egress_with_cidr_ipv4, []) + egress_with_cidr_ipv6 = try(each.value.egress_with_cidr_ipv6, var.defaults.egress_with_cidr_ipv6, []) + egress_with_prefix_list_id = try(each.value.egress_with_prefix_list_id, var.defaults.egress_with_prefix_list_id, []) + egress_with_referenced_security_group_id = try(each.value.egress_with_referenced_security_group_id, var.defaults.egress_with_referenced_security_group_id, []) + egress_with_self = try(each.value.egress_with_self, var.defaults.egress_with_self, []) + ingress_cidr_ipv4 = try(each.value.ingress_cidr_ipv4, var.defaults.ingress_cidr_ipv4, []) + ingress_cidr_ipv6 = try(each.value.ingress_cidr_ipv6, var.defaults.ingress_cidr_ipv6, []) + ingress_prefix_list_ids = try(each.value.ingress_prefix_list_ids, var.defaults.ingress_prefix_list_ids, []) + ingress_rules = try(each.value.ingress_rules, var.defaults.ingress_rules, []) + ingress_with_cidr_ipv4 = try(each.value.ingress_with_cidr_ipv4, var.defaults.ingress_with_cidr_ipv4, []) + ingress_with_cidr_ipv6 = try(each.value.ingress_with_cidr_ipv6, var.defaults.ingress_with_cidr_ipv6, []) + ingress_with_prefix_list_id = try(each.value.ingress_with_prefix_list_id, var.defaults.ingress_with_prefix_list_id, []) + ingress_with_referenced_security_group_id = try(each.value.ingress_with_referenced_security_group_id, var.defaults.ingress_with_referenced_security_group_id, []) + ingress_with_self = try(each.value.ingress_with_self, var.defaults.ingress_with_self, []) + name = try(each.value.name, var.defaults.name) + number_of_computed_egress_cidr_blocks = try(each.value.number_of_computed_egress_cidr_blocks, var.defaults.number_of_computed_egress_cidr_blocks, 0) + number_of_computed_egress_ipv6_cidr_blocks = try(each.value.number_of_computed_egress_ipv6_cidr_blocks, var.defaults.number_of_computed_egress_ipv6_cidr_blocks, 0) + number_of_computed_egress_prefix_list_ids = try(each.value.number_of_computed_egress_prefix_list_ids, var.defaults.number_of_computed_egress_prefix_list_ids, 0) + number_of_computed_egress_rules = try(each.value.number_of_computed_egress_rules, var.defaults.number_of_computed_egress_rules, 0) + number_of_computed_egress_with_cidr_ipv4 = try(each.value.number_of_computed_egress_with_cidr_ipv4, var.defaults.number_of_computed_egress_with_cidr_ipv4, 0) + number_of_computed_egress_with_cidr_ipv6 = try(each.value.number_of_computed_egress_with_cidr_ipv6, var.defaults.number_of_computed_egress_with_cidr_ipv6, 0) + number_of_computed_egress_with_prefix_list_id = try(each.value.number_of_computed_egress_with_prefix_list_id, var.defaults.number_of_computed_egress_with_prefix_list_id, 0) + number_of_computed_egress_with_referenced_security_group_id = try(each.value.number_of_computed_egress_with_referenced_security_group_id, var.defaults.number_of_computed_egress_with_referenced_security_group_id, 0) + number_of_computed_egress_with_self = try(each.value.number_of_computed_egress_with_self, var.defaults.number_of_computed_egress_with_self, 0) + number_of_computed_ingress_cidr_blocks = try(each.value.number_of_computed_ingress_cidr_blocks, var.defaults.number_of_computed_ingress_cidr_blocks, 0) + number_of_computed_ingress_ipv6_cidr_blocks = try(each.value.number_of_computed_ingress_ipv6_cidr_blocks, var.defaults.number_of_computed_ingress_ipv6_cidr_blocks, 0) + number_of_computed_ingress_prefix_list_ids = try(each.value.number_of_computed_ingress_prefix_list_ids, var.defaults.number_of_computed_ingress_prefix_list_ids, 0) + number_of_computed_ingress_rules = try(each.value.number_of_computed_ingress_rules, var.defaults.number_of_computed_ingress_rules, 0) + number_of_computed_ingress_with_cidr_ipv4 = try(each.value.number_of_computed_ingress_with_cidr_ipv4, var.defaults.number_of_computed_ingress_with_cidr_ipv4, 0) + number_of_computed_ingress_with_cidr_ipv6 = try(each.value.number_of_computed_ingress_with_cidr_ipv6, var.defaults.number_of_computed_ingress_with_cidr_ipv6, 0) + number_of_computed_ingress_with_prefix_list_id = try(each.value.number_of_computed_ingress_with_prefix_list_id, var.defaults.number_of_computed_ingress_with_prefix_list_id, 0) + number_of_computed_ingress_with_referenced_security_group_id = try(each.value.number_of_computed_ingress_with_referenced_security_group_id, var.defaults.number_of_computed_ingress_with_referenced_security_group_id, 0) + number_of_computed_ingress_with_self = try(each.value.number_of_computed_ingress_with_self, var.defaults.number_of_computed_ingress_with_self, 0) + revoke_rules_on_delete = try(each.value.revoke_rules_on_delete, var.defaults.revoke_rules_on_delete, false) + tags = try(each.value.tags, var.defaults.tags, {}) + use_name_prefix = try(each.value.use_name_prefix, var.defaults.use_name_prefix, true) + vpc_id = try(each.value.vpc_id, var.defaults.vpc_id) } diff --git a/wrappers/logstash/main.tf b/wrappers/logstash/main.tf index d3489369..8b6d73d5 100644 --- a/wrappers/logstash/main.tf +++ b/wrappers/logstash/main.tf @@ -3,77 +3,77 @@ module "wrapper" { for_each = var.items - auto_computed_egress_rules = try(each.value.auto_computed_egress_rules, var.defaults.auto_computed_egress_rules, []) - auto_computed_egress_with_self = try(each.value.auto_computed_egress_with_self, var.defaults.auto_computed_egress_with_self, []) - auto_computed_ingress_rules = try(each.value.auto_computed_ingress_rules, var.defaults.auto_computed_ingress_rules, []) - auto_computed_ingress_with_self = try(each.value.auto_computed_ingress_with_self, var.defaults.auto_computed_ingress_with_self, []) - auto_egress_rules = try(each.value.auto_egress_rules, var.defaults.auto_egress_rules, ["all-all"]) - auto_egress_with_self = try(each.value.auto_egress_with_self, var.defaults.auto_egress_with_self, []) - auto_ingress_rules = try(each.value.auto_ingress_rules, var.defaults.auto_ingress_rules, ["logstash-tcp"]) - auto_ingress_with_self = try(each.value.auto_ingress_with_self, var.defaults.auto_ingress_with_self, [{ "rule" = "all-all" }]) - auto_number_of_computed_egress_rules = try(each.value.auto_number_of_computed_egress_rules, var.defaults.auto_number_of_computed_egress_rules, 0) - auto_number_of_computed_egress_with_self = try(each.value.auto_number_of_computed_egress_with_self, var.defaults.auto_number_of_computed_egress_with_self, 0) - auto_number_of_computed_ingress_rules = try(each.value.auto_number_of_computed_ingress_rules, var.defaults.auto_number_of_computed_ingress_rules, 0) - auto_number_of_computed_ingress_with_self = try(each.value.auto_number_of_computed_ingress_with_self, var.defaults.auto_number_of_computed_ingress_with_self, 0) - computed_egress_cidr_blocks = try(each.value.computed_egress_cidr_blocks, var.defaults.computed_egress_cidr_blocks, ["0.0.0.0/0"]) - computed_egress_ipv6_cidr_blocks = try(each.value.computed_egress_ipv6_cidr_blocks, var.defaults.computed_egress_ipv6_cidr_blocks, ["::/0"]) - computed_egress_prefix_list_ids = try(each.value.computed_egress_prefix_list_ids, var.defaults.computed_egress_prefix_list_ids, []) - computed_egress_rules = try(each.value.computed_egress_rules, var.defaults.computed_egress_rules, []) - computed_egress_with_cidr_blocks = try(each.value.computed_egress_with_cidr_blocks, var.defaults.computed_egress_with_cidr_blocks, []) - computed_egress_with_ipv6_cidr_blocks = try(each.value.computed_egress_with_ipv6_cidr_blocks, var.defaults.computed_egress_with_ipv6_cidr_blocks, []) - computed_egress_with_prefix_list_ids = try(each.value.computed_egress_with_prefix_list_ids, var.defaults.computed_egress_with_prefix_list_ids, []) - computed_egress_with_self = try(each.value.computed_egress_with_self, var.defaults.computed_egress_with_self, []) - computed_egress_with_source_security_group_id = try(each.value.computed_egress_with_source_security_group_id, var.defaults.computed_egress_with_source_security_group_id, []) - computed_ingress_cidr_blocks = try(each.value.computed_ingress_cidr_blocks, var.defaults.computed_ingress_cidr_blocks, []) - computed_ingress_ipv6_cidr_blocks = try(each.value.computed_ingress_ipv6_cidr_blocks, var.defaults.computed_ingress_ipv6_cidr_blocks, []) - computed_ingress_prefix_list_ids = try(each.value.computed_ingress_prefix_list_ids, var.defaults.computed_ingress_prefix_list_ids, []) - computed_ingress_rules = try(each.value.computed_ingress_rules, var.defaults.computed_ingress_rules, []) - computed_ingress_with_cidr_blocks = try(each.value.computed_ingress_with_cidr_blocks, var.defaults.computed_ingress_with_cidr_blocks, []) - computed_ingress_with_ipv6_cidr_blocks = try(each.value.computed_ingress_with_ipv6_cidr_blocks, var.defaults.computed_ingress_with_ipv6_cidr_blocks, []) - computed_ingress_with_prefix_list_ids = try(each.value.computed_ingress_with_prefix_list_ids, var.defaults.computed_ingress_with_prefix_list_ids, []) - computed_ingress_with_self = try(each.value.computed_ingress_with_self, var.defaults.computed_ingress_with_self, []) - computed_ingress_with_source_security_group_id = try(each.value.computed_ingress_with_source_security_group_id, var.defaults.computed_ingress_with_source_security_group_id, []) - create = try(each.value.create, var.defaults.create, true) - description = try(each.value.description, var.defaults.description, "Security Group managed by Terraform") - egress_cidr_blocks = try(each.value.egress_cidr_blocks, var.defaults.egress_cidr_blocks, ["0.0.0.0/0"]) - egress_ipv6_cidr_blocks = try(each.value.egress_ipv6_cidr_blocks, var.defaults.egress_ipv6_cidr_blocks, ["::/0"]) - egress_prefix_list_ids = try(each.value.egress_prefix_list_ids, var.defaults.egress_prefix_list_ids, []) - egress_rules = try(each.value.egress_rules, var.defaults.egress_rules, []) - egress_with_cidr_blocks = try(each.value.egress_with_cidr_blocks, var.defaults.egress_with_cidr_blocks, []) - egress_with_ipv6_cidr_blocks = try(each.value.egress_with_ipv6_cidr_blocks, var.defaults.egress_with_ipv6_cidr_blocks, []) - egress_with_prefix_list_ids = try(each.value.egress_with_prefix_list_ids, var.defaults.egress_with_prefix_list_ids, []) - egress_with_self = try(each.value.egress_with_self, var.defaults.egress_with_self, []) - egress_with_source_security_group_id = try(each.value.egress_with_source_security_group_id, var.defaults.egress_with_source_security_group_id, []) - ingress_cidr_blocks = try(each.value.ingress_cidr_blocks, var.defaults.ingress_cidr_blocks, []) - ingress_ipv6_cidr_blocks = try(each.value.ingress_ipv6_cidr_blocks, var.defaults.ingress_ipv6_cidr_blocks, []) - ingress_prefix_list_ids = try(each.value.ingress_prefix_list_ids, var.defaults.ingress_prefix_list_ids, []) - ingress_rules = try(each.value.ingress_rules, var.defaults.ingress_rules, []) - ingress_with_cidr_blocks = try(each.value.ingress_with_cidr_blocks, var.defaults.ingress_with_cidr_blocks, []) - ingress_with_ipv6_cidr_blocks = try(each.value.ingress_with_ipv6_cidr_blocks, var.defaults.ingress_with_ipv6_cidr_blocks, []) - ingress_with_prefix_list_ids = try(each.value.ingress_with_prefix_list_ids, var.defaults.ingress_with_prefix_list_ids, []) - ingress_with_self = try(each.value.ingress_with_self, var.defaults.ingress_with_self, []) - ingress_with_source_security_group_id = try(each.value.ingress_with_source_security_group_id, var.defaults.ingress_with_source_security_group_id, []) - name = try(each.value.name, var.defaults.name) - number_of_computed_egress_cidr_blocks = try(each.value.number_of_computed_egress_cidr_blocks, var.defaults.number_of_computed_egress_cidr_blocks, 0) - number_of_computed_egress_ipv6_cidr_blocks = try(each.value.number_of_computed_egress_ipv6_cidr_blocks, var.defaults.number_of_computed_egress_ipv6_cidr_blocks, 0) - number_of_computed_egress_prefix_list_ids = try(each.value.number_of_computed_egress_prefix_list_ids, var.defaults.number_of_computed_egress_prefix_list_ids, 0) - number_of_computed_egress_rules = try(each.value.number_of_computed_egress_rules, var.defaults.number_of_computed_egress_rules, 0) - number_of_computed_egress_with_cidr_blocks = try(each.value.number_of_computed_egress_with_cidr_blocks, var.defaults.number_of_computed_egress_with_cidr_blocks, 0) - number_of_computed_egress_with_ipv6_cidr_blocks = try(each.value.number_of_computed_egress_with_ipv6_cidr_blocks, var.defaults.number_of_computed_egress_with_ipv6_cidr_blocks, 0) - number_of_computed_egress_with_prefix_list_ids = try(each.value.number_of_computed_egress_with_prefix_list_ids, var.defaults.number_of_computed_egress_with_prefix_list_ids, 0) - number_of_computed_egress_with_self = try(each.value.number_of_computed_egress_with_self, var.defaults.number_of_computed_egress_with_self, 0) - number_of_computed_egress_with_source_security_group_id = try(each.value.number_of_computed_egress_with_source_security_group_id, var.defaults.number_of_computed_egress_with_source_security_group_id, 0) - number_of_computed_ingress_cidr_blocks = try(each.value.number_of_computed_ingress_cidr_blocks, var.defaults.number_of_computed_ingress_cidr_blocks, 0) - number_of_computed_ingress_ipv6_cidr_blocks = try(each.value.number_of_computed_ingress_ipv6_cidr_blocks, var.defaults.number_of_computed_ingress_ipv6_cidr_blocks, 0) - number_of_computed_ingress_prefix_list_ids = try(each.value.number_of_computed_ingress_prefix_list_ids, var.defaults.number_of_computed_ingress_prefix_list_ids, 0) - number_of_computed_ingress_rules = try(each.value.number_of_computed_ingress_rules, var.defaults.number_of_computed_ingress_rules, 0) - number_of_computed_ingress_with_cidr_blocks = try(each.value.number_of_computed_ingress_with_cidr_blocks, var.defaults.number_of_computed_ingress_with_cidr_blocks, 0) - number_of_computed_ingress_with_ipv6_cidr_blocks = try(each.value.number_of_computed_ingress_with_ipv6_cidr_blocks, var.defaults.number_of_computed_ingress_with_ipv6_cidr_blocks, 0) - number_of_computed_ingress_with_prefix_list_ids = try(each.value.number_of_computed_ingress_with_prefix_list_ids, var.defaults.number_of_computed_ingress_with_prefix_list_ids, 0) - number_of_computed_ingress_with_self = try(each.value.number_of_computed_ingress_with_self, var.defaults.number_of_computed_ingress_with_self, 0) - number_of_computed_ingress_with_source_security_group_id = try(each.value.number_of_computed_ingress_with_source_security_group_id, var.defaults.number_of_computed_ingress_with_source_security_group_id, 0) - revoke_rules_on_delete = try(each.value.revoke_rules_on_delete, var.defaults.revoke_rules_on_delete, false) - tags = try(each.value.tags, var.defaults.tags, {}) - use_name_prefix = try(each.value.use_name_prefix, var.defaults.use_name_prefix, true) - vpc_id = try(each.value.vpc_id, var.defaults.vpc_id) + auto_computed_egress_rules = try(each.value.auto_computed_egress_rules, var.defaults.auto_computed_egress_rules, []) + auto_computed_egress_with_self = try(each.value.auto_computed_egress_with_self, var.defaults.auto_computed_egress_with_self, []) + auto_computed_ingress_rules = try(each.value.auto_computed_ingress_rules, var.defaults.auto_computed_ingress_rules, []) + auto_computed_ingress_with_self = try(each.value.auto_computed_ingress_with_self, var.defaults.auto_computed_ingress_with_self, []) + auto_egress_rules = try(each.value.auto_egress_rules, var.defaults.auto_egress_rules, ["all-all"]) + auto_egress_with_self = try(each.value.auto_egress_with_self, var.defaults.auto_egress_with_self, []) + auto_ingress_rules = try(each.value.auto_ingress_rules, var.defaults.auto_ingress_rules, ["logstash-tcp"]) + auto_ingress_with_self = try(each.value.auto_ingress_with_self, var.defaults.auto_ingress_with_self, [{ "rule" = "all-all" }]) + auto_number_of_computed_egress_rules = try(each.value.auto_number_of_computed_egress_rules, var.defaults.auto_number_of_computed_egress_rules, 0) + auto_number_of_computed_egress_with_self = try(each.value.auto_number_of_computed_egress_with_self, var.defaults.auto_number_of_computed_egress_with_self, 0) + auto_number_of_computed_ingress_rules = try(each.value.auto_number_of_computed_ingress_rules, var.defaults.auto_number_of_computed_ingress_rules, 0) + auto_number_of_computed_ingress_with_self = try(each.value.auto_number_of_computed_ingress_with_self, var.defaults.auto_number_of_computed_ingress_with_self, 0) + computed_egress_cidr_blocks = try(each.value.computed_egress_cidr_blocks, var.defaults.computed_egress_cidr_blocks, ["0.0.0.0/0"]) + computed_egress_ipv6_cidr_blocks = try(each.value.computed_egress_ipv6_cidr_blocks, var.defaults.computed_egress_ipv6_cidr_blocks, ["::/0"]) + computed_egress_prefix_list_ids = try(each.value.computed_egress_prefix_list_ids, var.defaults.computed_egress_prefix_list_ids, []) + computed_egress_rules = try(each.value.computed_egress_rules, var.defaults.computed_egress_rules, []) + computed_egress_with_cidr_ipv4 = try(each.value.computed_egress_with_cidr_ipv4, var.defaults.computed_egress_with_cidr_ipv4, []) + computed_egress_with_cidr_ipv6 = try(each.value.computed_egress_with_cidr_ipv6, var.defaults.computed_egress_with_cidr_ipv6, []) + computed_egress_with_prefix_list_id = try(each.value.computed_egress_with_prefix_list_id, var.defaults.computed_egress_with_prefix_list_id, []) + computed_egress_with_referenced_security_group_id = try(each.value.computed_egress_with_referenced_security_group_id, var.defaults.computed_egress_with_referenced_security_group_id, []) + computed_egress_with_self = try(each.value.computed_egress_with_self, var.defaults.computed_egress_with_self, []) + computed_ingress_cidr_blocks = try(each.value.computed_ingress_cidr_blocks, var.defaults.computed_ingress_cidr_blocks, []) + computed_ingress_ipv6_cidr_blocks = try(each.value.computed_ingress_ipv6_cidr_blocks, var.defaults.computed_ingress_ipv6_cidr_blocks, []) + computed_ingress_prefix_list_ids = try(each.value.computed_ingress_prefix_list_ids, var.defaults.computed_ingress_prefix_list_ids, []) + computed_ingress_rules = try(each.value.computed_ingress_rules, var.defaults.computed_ingress_rules, []) + computed_ingress_with_cidr_ipv4 = try(each.value.computed_ingress_with_cidr_ipv4, var.defaults.computed_ingress_with_cidr_ipv4, []) + computed_ingress_with_cidr_ipv6 = try(each.value.computed_ingress_with_cidr_ipv6, var.defaults.computed_ingress_with_cidr_ipv6, []) + computed_ingress_with_prefix_list_id = try(each.value.computed_ingress_with_prefix_list_id, var.defaults.computed_ingress_with_prefix_list_id, []) + computed_ingress_with_referenced_security_group_id = try(each.value.computed_ingress_with_referenced_security_group_id, var.defaults.computed_ingress_with_referenced_security_group_id, []) + computed_ingress_with_self = try(each.value.computed_ingress_with_self, var.defaults.computed_ingress_with_self, []) + create = try(each.value.create, var.defaults.create, true) + description = try(each.value.description, var.defaults.description, "Security Group managed by Terraform") + egress_cidr_ipv4 = try(each.value.egress_cidr_ipv4, var.defaults.egress_cidr_ipv4, ["0.0.0.0/0"]) + egress_cidr_ipv6 = try(each.value.egress_cidr_ipv6, var.defaults.egress_cidr_ipv6, ["::/0"]) + egress_prefix_list_ids = try(each.value.egress_prefix_list_ids, var.defaults.egress_prefix_list_ids, []) + egress_rules = try(each.value.egress_rules, var.defaults.egress_rules, []) + egress_with_cidr_ipv4 = try(each.value.egress_with_cidr_ipv4, var.defaults.egress_with_cidr_ipv4, []) + egress_with_cidr_ipv6 = try(each.value.egress_with_cidr_ipv6, var.defaults.egress_with_cidr_ipv6, []) + egress_with_prefix_list_id = try(each.value.egress_with_prefix_list_id, var.defaults.egress_with_prefix_list_id, []) + egress_with_referenced_security_group_id = try(each.value.egress_with_referenced_security_group_id, var.defaults.egress_with_referenced_security_group_id, []) + egress_with_self = try(each.value.egress_with_self, var.defaults.egress_with_self, []) + ingress_cidr_ipv4 = try(each.value.ingress_cidr_ipv4, var.defaults.ingress_cidr_ipv4, []) + ingress_cidr_ipv6 = try(each.value.ingress_cidr_ipv6, var.defaults.ingress_cidr_ipv6, []) + ingress_prefix_list_ids = try(each.value.ingress_prefix_list_ids, var.defaults.ingress_prefix_list_ids, []) + ingress_rules = try(each.value.ingress_rules, var.defaults.ingress_rules, []) + ingress_with_cidr_ipv4 = try(each.value.ingress_with_cidr_ipv4, var.defaults.ingress_with_cidr_ipv4, []) + ingress_with_cidr_ipv6 = try(each.value.ingress_with_cidr_ipv6, var.defaults.ingress_with_cidr_ipv6, []) + ingress_with_prefix_list_id = try(each.value.ingress_with_prefix_list_id, var.defaults.ingress_with_prefix_list_id, []) + ingress_with_referenced_security_group_id = try(each.value.ingress_with_referenced_security_group_id, var.defaults.ingress_with_referenced_security_group_id, []) + ingress_with_self = try(each.value.ingress_with_self, var.defaults.ingress_with_self, []) + name = try(each.value.name, var.defaults.name) + number_of_computed_egress_cidr_blocks = try(each.value.number_of_computed_egress_cidr_blocks, var.defaults.number_of_computed_egress_cidr_blocks, 0) + number_of_computed_egress_ipv6_cidr_blocks = try(each.value.number_of_computed_egress_ipv6_cidr_blocks, var.defaults.number_of_computed_egress_ipv6_cidr_blocks, 0) + number_of_computed_egress_prefix_list_ids = try(each.value.number_of_computed_egress_prefix_list_ids, var.defaults.number_of_computed_egress_prefix_list_ids, 0) + number_of_computed_egress_rules = try(each.value.number_of_computed_egress_rules, var.defaults.number_of_computed_egress_rules, 0) + number_of_computed_egress_with_cidr_ipv4 = try(each.value.number_of_computed_egress_with_cidr_ipv4, var.defaults.number_of_computed_egress_with_cidr_ipv4, 0) + number_of_computed_egress_with_cidr_ipv6 = try(each.value.number_of_computed_egress_with_cidr_ipv6, var.defaults.number_of_computed_egress_with_cidr_ipv6, 0) + number_of_computed_egress_with_prefix_list_id = try(each.value.number_of_computed_egress_with_prefix_list_id, var.defaults.number_of_computed_egress_with_prefix_list_id, 0) + number_of_computed_egress_with_referenced_security_group_id = try(each.value.number_of_computed_egress_with_referenced_security_group_id, var.defaults.number_of_computed_egress_with_referenced_security_group_id, 0) + number_of_computed_egress_with_self = try(each.value.number_of_computed_egress_with_self, var.defaults.number_of_computed_egress_with_self, 0) + number_of_computed_ingress_cidr_blocks = try(each.value.number_of_computed_ingress_cidr_blocks, var.defaults.number_of_computed_ingress_cidr_blocks, 0) + number_of_computed_ingress_ipv6_cidr_blocks = try(each.value.number_of_computed_ingress_ipv6_cidr_blocks, var.defaults.number_of_computed_ingress_ipv6_cidr_blocks, 0) + number_of_computed_ingress_prefix_list_ids = try(each.value.number_of_computed_ingress_prefix_list_ids, var.defaults.number_of_computed_ingress_prefix_list_ids, 0) + number_of_computed_ingress_rules = try(each.value.number_of_computed_ingress_rules, var.defaults.number_of_computed_ingress_rules, 0) + number_of_computed_ingress_with_cidr_ipv4 = try(each.value.number_of_computed_ingress_with_cidr_ipv4, var.defaults.number_of_computed_ingress_with_cidr_ipv4, 0) + number_of_computed_ingress_with_cidr_ipv6 = try(each.value.number_of_computed_ingress_with_cidr_ipv6, var.defaults.number_of_computed_ingress_with_cidr_ipv6, 0) + number_of_computed_ingress_with_prefix_list_id = try(each.value.number_of_computed_ingress_with_prefix_list_id, var.defaults.number_of_computed_ingress_with_prefix_list_id, 0) + number_of_computed_ingress_with_referenced_security_group_id = try(each.value.number_of_computed_ingress_with_referenced_security_group_id, var.defaults.number_of_computed_ingress_with_referenced_security_group_id, 0) + number_of_computed_ingress_with_self = try(each.value.number_of_computed_ingress_with_self, var.defaults.number_of_computed_ingress_with_self, 0) + revoke_rules_on_delete = try(each.value.revoke_rules_on_delete, var.defaults.revoke_rules_on_delete, false) + tags = try(each.value.tags, var.defaults.tags, {}) + use_name_prefix = try(each.value.use_name_prefix, var.defaults.use_name_prefix, true) + vpc_id = try(each.value.vpc_id, var.defaults.vpc_id) } diff --git a/wrappers/loki/main.tf b/wrappers/loki/main.tf index 85fcacea..0d1b1fb8 100644 --- a/wrappers/loki/main.tf +++ b/wrappers/loki/main.tf @@ -3,77 +3,77 @@ module "wrapper" { for_each = var.items - auto_computed_egress_rules = try(each.value.auto_computed_egress_rules, var.defaults.auto_computed_egress_rules, []) - auto_computed_egress_with_self = try(each.value.auto_computed_egress_with_self, var.defaults.auto_computed_egress_with_self, []) - auto_computed_ingress_rules = try(each.value.auto_computed_ingress_rules, var.defaults.auto_computed_ingress_rules, []) - auto_computed_ingress_with_self = try(each.value.auto_computed_ingress_with_self, var.defaults.auto_computed_ingress_with_self, []) - auto_egress_rules = try(each.value.auto_egress_rules, var.defaults.auto_egress_rules, ["all-all"]) - auto_egress_with_self = try(each.value.auto_egress_with_self, var.defaults.auto_egress_with_self, []) - auto_ingress_rules = try(each.value.auto_ingress_rules, var.defaults.auto_ingress_rules, ["loki-grafana", "loki-grafana-grpc"]) - auto_ingress_with_self = try(each.value.auto_ingress_with_self, var.defaults.auto_ingress_with_self, [{ "rule" = "all-all" }]) - auto_number_of_computed_egress_rules = try(each.value.auto_number_of_computed_egress_rules, var.defaults.auto_number_of_computed_egress_rules, 0) - auto_number_of_computed_egress_with_self = try(each.value.auto_number_of_computed_egress_with_self, var.defaults.auto_number_of_computed_egress_with_self, 0) - auto_number_of_computed_ingress_rules = try(each.value.auto_number_of_computed_ingress_rules, var.defaults.auto_number_of_computed_ingress_rules, 0) - auto_number_of_computed_ingress_with_self = try(each.value.auto_number_of_computed_ingress_with_self, var.defaults.auto_number_of_computed_ingress_with_self, 0) - computed_egress_cidr_blocks = try(each.value.computed_egress_cidr_blocks, var.defaults.computed_egress_cidr_blocks, ["0.0.0.0/0"]) - computed_egress_ipv6_cidr_blocks = try(each.value.computed_egress_ipv6_cidr_blocks, var.defaults.computed_egress_ipv6_cidr_blocks, ["::/0"]) - computed_egress_prefix_list_ids = try(each.value.computed_egress_prefix_list_ids, var.defaults.computed_egress_prefix_list_ids, []) - computed_egress_rules = try(each.value.computed_egress_rules, var.defaults.computed_egress_rules, []) - computed_egress_with_cidr_blocks = try(each.value.computed_egress_with_cidr_blocks, var.defaults.computed_egress_with_cidr_blocks, []) - computed_egress_with_ipv6_cidr_blocks = try(each.value.computed_egress_with_ipv6_cidr_blocks, var.defaults.computed_egress_with_ipv6_cidr_blocks, []) - computed_egress_with_prefix_list_ids = try(each.value.computed_egress_with_prefix_list_ids, var.defaults.computed_egress_with_prefix_list_ids, []) - computed_egress_with_self = try(each.value.computed_egress_with_self, var.defaults.computed_egress_with_self, []) - computed_egress_with_source_security_group_id = try(each.value.computed_egress_with_source_security_group_id, var.defaults.computed_egress_with_source_security_group_id, []) - computed_ingress_cidr_blocks = try(each.value.computed_ingress_cidr_blocks, var.defaults.computed_ingress_cidr_blocks, []) - computed_ingress_ipv6_cidr_blocks = try(each.value.computed_ingress_ipv6_cidr_blocks, var.defaults.computed_ingress_ipv6_cidr_blocks, []) - computed_ingress_prefix_list_ids = try(each.value.computed_ingress_prefix_list_ids, var.defaults.computed_ingress_prefix_list_ids, []) - computed_ingress_rules = try(each.value.computed_ingress_rules, var.defaults.computed_ingress_rules, []) - computed_ingress_with_cidr_blocks = try(each.value.computed_ingress_with_cidr_blocks, var.defaults.computed_ingress_with_cidr_blocks, []) - computed_ingress_with_ipv6_cidr_blocks = try(each.value.computed_ingress_with_ipv6_cidr_blocks, var.defaults.computed_ingress_with_ipv6_cidr_blocks, []) - computed_ingress_with_prefix_list_ids = try(each.value.computed_ingress_with_prefix_list_ids, var.defaults.computed_ingress_with_prefix_list_ids, []) - computed_ingress_with_self = try(each.value.computed_ingress_with_self, var.defaults.computed_ingress_with_self, []) - computed_ingress_with_source_security_group_id = try(each.value.computed_ingress_with_source_security_group_id, var.defaults.computed_ingress_with_source_security_group_id, []) - create = try(each.value.create, var.defaults.create, true) - description = try(each.value.description, var.defaults.description, "Security Group managed by Terraform") - egress_cidr_blocks = try(each.value.egress_cidr_blocks, var.defaults.egress_cidr_blocks, ["0.0.0.0/0"]) - egress_ipv6_cidr_blocks = try(each.value.egress_ipv6_cidr_blocks, var.defaults.egress_ipv6_cidr_blocks, ["::/0"]) - egress_prefix_list_ids = try(each.value.egress_prefix_list_ids, var.defaults.egress_prefix_list_ids, []) - egress_rules = try(each.value.egress_rules, var.defaults.egress_rules, []) - egress_with_cidr_blocks = try(each.value.egress_with_cidr_blocks, var.defaults.egress_with_cidr_blocks, []) - egress_with_ipv6_cidr_blocks = try(each.value.egress_with_ipv6_cidr_blocks, var.defaults.egress_with_ipv6_cidr_blocks, []) - egress_with_prefix_list_ids = try(each.value.egress_with_prefix_list_ids, var.defaults.egress_with_prefix_list_ids, []) - egress_with_self = try(each.value.egress_with_self, var.defaults.egress_with_self, []) - egress_with_source_security_group_id = try(each.value.egress_with_source_security_group_id, var.defaults.egress_with_source_security_group_id, []) - ingress_cidr_blocks = try(each.value.ingress_cidr_blocks, var.defaults.ingress_cidr_blocks, []) - ingress_ipv6_cidr_blocks = try(each.value.ingress_ipv6_cidr_blocks, var.defaults.ingress_ipv6_cidr_blocks, []) - ingress_prefix_list_ids = try(each.value.ingress_prefix_list_ids, var.defaults.ingress_prefix_list_ids, []) - ingress_rules = try(each.value.ingress_rules, var.defaults.ingress_rules, []) - ingress_with_cidr_blocks = try(each.value.ingress_with_cidr_blocks, var.defaults.ingress_with_cidr_blocks, []) - ingress_with_ipv6_cidr_blocks = try(each.value.ingress_with_ipv6_cidr_blocks, var.defaults.ingress_with_ipv6_cidr_blocks, []) - ingress_with_prefix_list_ids = try(each.value.ingress_with_prefix_list_ids, var.defaults.ingress_with_prefix_list_ids, []) - ingress_with_self = try(each.value.ingress_with_self, var.defaults.ingress_with_self, []) - ingress_with_source_security_group_id = try(each.value.ingress_with_source_security_group_id, var.defaults.ingress_with_source_security_group_id, []) - name = try(each.value.name, var.defaults.name) - number_of_computed_egress_cidr_blocks = try(each.value.number_of_computed_egress_cidr_blocks, var.defaults.number_of_computed_egress_cidr_blocks, 0) - number_of_computed_egress_ipv6_cidr_blocks = try(each.value.number_of_computed_egress_ipv6_cidr_blocks, var.defaults.number_of_computed_egress_ipv6_cidr_blocks, 0) - number_of_computed_egress_prefix_list_ids = try(each.value.number_of_computed_egress_prefix_list_ids, var.defaults.number_of_computed_egress_prefix_list_ids, 0) - number_of_computed_egress_rules = try(each.value.number_of_computed_egress_rules, var.defaults.number_of_computed_egress_rules, 0) - number_of_computed_egress_with_cidr_blocks = try(each.value.number_of_computed_egress_with_cidr_blocks, var.defaults.number_of_computed_egress_with_cidr_blocks, 0) - number_of_computed_egress_with_ipv6_cidr_blocks = try(each.value.number_of_computed_egress_with_ipv6_cidr_blocks, var.defaults.number_of_computed_egress_with_ipv6_cidr_blocks, 0) - number_of_computed_egress_with_prefix_list_ids = try(each.value.number_of_computed_egress_with_prefix_list_ids, var.defaults.number_of_computed_egress_with_prefix_list_ids, 0) - number_of_computed_egress_with_self = try(each.value.number_of_computed_egress_with_self, var.defaults.number_of_computed_egress_with_self, 0) - number_of_computed_egress_with_source_security_group_id = try(each.value.number_of_computed_egress_with_source_security_group_id, var.defaults.number_of_computed_egress_with_source_security_group_id, 0) - number_of_computed_ingress_cidr_blocks = try(each.value.number_of_computed_ingress_cidr_blocks, var.defaults.number_of_computed_ingress_cidr_blocks, 0) - number_of_computed_ingress_ipv6_cidr_blocks = try(each.value.number_of_computed_ingress_ipv6_cidr_blocks, var.defaults.number_of_computed_ingress_ipv6_cidr_blocks, 0) - number_of_computed_ingress_prefix_list_ids = try(each.value.number_of_computed_ingress_prefix_list_ids, var.defaults.number_of_computed_ingress_prefix_list_ids, 0) - number_of_computed_ingress_rules = try(each.value.number_of_computed_ingress_rules, var.defaults.number_of_computed_ingress_rules, 0) - number_of_computed_ingress_with_cidr_blocks = try(each.value.number_of_computed_ingress_with_cidr_blocks, var.defaults.number_of_computed_ingress_with_cidr_blocks, 0) - number_of_computed_ingress_with_ipv6_cidr_blocks = try(each.value.number_of_computed_ingress_with_ipv6_cidr_blocks, var.defaults.number_of_computed_ingress_with_ipv6_cidr_blocks, 0) - number_of_computed_ingress_with_prefix_list_ids = try(each.value.number_of_computed_ingress_with_prefix_list_ids, var.defaults.number_of_computed_ingress_with_prefix_list_ids, 0) - number_of_computed_ingress_with_self = try(each.value.number_of_computed_ingress_with_self, var.defaults.number_of_computed_ingress_with_self, 0) - number_of_computed_ingress_with_source_security_group_id = try(each.value.number_of_computed_ingress_with_source_security_group_id, var.defaults.number_of_computed_ingress_with_source_security_group_id, 0) - revoke_rules_on_delete = try(each.value.revoke_rules_on_delete, var.defaults.revoke_rules_on_delete, false) - tags = try(each.value.tags, var.defaults.tags, {}) - use_name_prefix = try(each.value.use_name_prefix, var.defaults.use_name_prefix, true) - vpc_id = try(each.value.vpc_id, var.defaults.vpc_id) + auto_computed_egress_rules = try(each.value.auto_computed_egress_rules, var.defaults.auto_computed_egress_rules, []) + auto_computed_egress_with_self = try(each.value.auto_computed_egress_with_self, var.defaults.auto_computed_egress_with_self, []) + auto_computed_ingress_rules = try(each.value.auto_computed_ingress_rules, var.defaults.auto_computed_ingress_rules, []) + auto_computed_ingress_with_self = try(each.value.auto_computed_ingress_with_self, var.defaults.auto_computed_ingress_with_self, []) + auto_egress_rules = try(each.value.auto_egress_rules, var.defaults.auto_egress_rules, ["all-all"]) + auto_egress_with_self = try(each.value.auto_egress_with_self, var.defaults.auto_egress_with_self, []) + auto_ingress_rules = try(each.value.auto_ingress_rules, var.defaults.auto_ingress_rules, ["loki-grafana", "loki-grafana-grpc"]) + auto_ingress_with_self = try(each.value.auto_ingress_with_self, var.defaults.auto_ingress_with_self, [{ "rule" = "all-all" }]) + auto_number_of_computed_egress_rules = try(each.value.auto_number_of_computed_egress_rules, var.defaults.auto_number_of_computed_egress_rules, 0) + auto_number_of_computed_egress_with_self = try(each.value.auto_number_of_computed_egress_with_self, var.defaults.auto_number_of_computed_egress_with_self, 0) + auto_number_of_computed_ingress_rules = try(each.value.auto_number_of_computed_ingress_rules, var.defaults.auto_number_of_computed_ingress_rules, 0) + auto_number_of_computed_ingress_with_self = try(each.value.auto_number_of_computed_ingress_with_self, var.defaults.auto_number_of_computed_ingress_with_self, 0) + computed_egress_cidr_blocks = try(each.value.computed_egress_cidr_blocks, var.defaults.computed_egress_cidr_blocks, ["0.0.0.0/0"]) + computed_egress_ipv6_cidr_blocks = try(each.value.computed_egress_ipv6_cidr_blocks, var.defaults.computed_egress_ipv6_cidr_blocks, ["::/0"]) + computed_egress_prefix_list_ids = try(each.value.computed_egress_prefix_list_ids, var.defaults.computed_egress_prefix_list_ids, []) + computed_egress_rules = try(each.value.computed_egress_rules, var.defaults.computed_egress_rules, []) + computed_egress_with_cidr_ipv4 = try(each.value.computed_egress_with_cidr_ipv4, var.defaults.computed_egress_with_cidr_ipv4, []) + computed_egress_with_cidr_ipv6 = try(each.value.computed_egress_with_cidr_ipv6, var.defaults.computed_egress_with_cidr_ipv6, []) + computed_egress_with_prefix_list_id = try(each.value.computed_egress_with_prefix_list_id, var.defaults.computed_egress_with_prefix_list_id, []) + computed_egress_with_referenced_security_group_id = try(each.value.computed_egress_with_referenced_security_group_id, var.defaults.computed_egress_with_referenced_security_group_id, []) + computed_egress_with_self = try(each.value.computed_egress_with_self, var.defaults.computed_egress_with_self, []) + computed_ingress_cidr_blocks = try(each.value.computed_ingress_cidr_blocks, var.defaults.computed_ingress_cidr_blocks, []) + computed_ingress_ipv6_cidr_blocks = try(each.value.computed_ingress_ipv6_cidr_blocks, var.defaults.computed_ingress_ipv6_cidr_blocks, []) + computed_ingress_prefix_list_ids = try(each.value.computed_ingress_prefix_list_ids, var.defaults.computed_ingress_prefix_list_ids, []) + computed_ingress_rules = try(each.value.computed_ingress_rules, var.defaults.computed_ingress_rules, []) + computed_ingress_with_cidr_ipv4 = try(each.value.computed_ingress_with_cidr_ipv4, var.defaults.computed_ingress_with_cidr_ipv4, []) + computed_ingress_with_cidr_ipv6 = try(each.value.computed_ingress_with_cidr_ipv6, var.defaults.computed_ingress_with_cidr_ipv6, []) + computed_ingress_with_prefix_list_id = try(each.value.computed_ingress_with_prefix_list_id, var.defaults.computed_ingress_with_prefix_list_id, []) + computed_ingress_with_referenced_security_group_id = try(each.value.computed_ingress_with_referenced_security_group_id, var.defaults.computed_ingress_with_referenced_security_group_id, []) + computed_ingress_with_self = try(each.value.computed_ingress_with_self, var.defaults.computed_ingress_with_self, []) + create = try(each.value.create, var.defaults.create, true) + description = try(each.value.description, var.defaults.description, "Security Group managed by Terraform") + egress_cidr_ipv4 = try(each.value.egress_cidr_ipv4, var.defaults.egress_cidr_ipv4, ["0.0.0.0/0"]) + egress_cidr_ipv6 = try(each.value.egress_cidr_ipv6, var.defaults.egress_cidr_ipv6, ["::/0"]) + egress_prefix_list_ids = try(each.value.egress_prefix_list_ids, var.defaults.egress_prefix_list_ids, []) + egress_rules = try(each.value.egress_rules, var.defaults.egress_rules, []) + egress_with_cidr_ipv4 = try(each.value.egress_with_cidr_ipv4, var.defaults.egress_with_cidr_ipv4, []) + egress_with_cidr_ipv6 = try(each.value.egress_with_cidr_ipv6, var.defaults.egress_with_cidr_ipv6, []) + egress_with_prefix_list_id = try(each.value.egress_with_prefix_list_id, var.defaults.egress_with_prefix_list_id, []) + egress_with_referenced_security_group_id = try(each.value.egress_with_referenced_security_group_id, var.defaults.egress_with_referenced_security_group_id, []) + egress_with_self = try(each.value.egress_with_self, var.defaults.egress_with_self, []) + ingress_cidr_ipv4 = try(each.value.ingress_cidr_ipv4, var.defaults.ingress_cidr_ipv4, []) + ingress_cidr_ipv6 = try(each.value.ingress_cidr_ipv6, var.defaults.ingress_cidr_ipv6, []) + ingress_prefix_list_ids = try(each.value.ingress_prefix_list_ids, var.defaults.ingress_prefix_list_ids, []) + ingress_rules = try(each.value.ingress_rules, var.defaults.ingress_rules, []) + ingress_with_cidr_ipv4 = try(each.value.ingress_with_cidr_ipv4, var.defaults.ingress_with_cidr_ipv4, []) + ingress_with_cidr_ipv6 = try(each.value.ingress_with_cidr_ipv6, var.defaults.ingress_with_cidr_ipv6, []) + ingress_with_prefix_list_id = try(each.value.ingress_with_prefix_list_id, var.defaults.ingress_with_prefix_list_id, []) + ingress_with_referenced_security_group_id = try(each.value.ingress_with_referenced_security_group_id, var.defaults.ingress_with_referenced_security_group_id, []) + ingress_with_self = try(each.value.ingress_with_self, var.defaults.ingress_with_self, []) + name = try(each.value.name, var.defaults.name) + number_of_computed_egress_cidr_blocks = try(each.value.number_of_computed_egress_cidr_blocks, var.defaults.number_of_computed_egress_cidr_blocks, 0) + number_of_computed_egress_ipv6_cidr_blocks = try(each.value.number_of_computed_egress_ipv6_cidr_blocks, var.defaults.number_of_computed_egress_ipv6_cidr_blocks, 0) + number_of_computed_egress_prefix_list_ids = try(each.value.number_of_computed_egress_prefix_list_ids, var.defaults.number_of_computed_egress_prefix_list_ids, 0) + number_of_computed_egress_rules = try(each.value.number_of_computed_egress_rules, var.defaults.number_of_computed_egress_rules, 0) + number_of_computed_egress_with_cidr_ipv4 = try(each.value.number_of_computed_egress_with_cidr_ipv4, var.defaults.number_of_computed_egress_with_cidr_ipv4, 0) + number_of_computed_egress_with_cidr_ipv6 = try(each.value.number_of_computed_egress_with_cidr_ipv6, var.defaults.number_of_computed_egress_with_cidr_ipv6, 0) + number_of_computed_egress_with_prefix_list_id = try(each.value.number_of_computed_egress_with_prefix_list_id, var.defaults.number_of_computed_egress_with_prefix_list_id, 0) + number_of_computed_egress_with_referenced_security_group_id = try(each.value.number_of_computed_egress_with_referenced_security_group_id, var.defaults.number_of_computed_egress_with_referenced_security_group_id, 0) + number_of_computed_egress_with_self = try(each.value.number_of_computed_egress_with_self, var.defaults.number_of_computed_egress_with_self, 0) + number_of_computed_ingress_cidr_blocks = try(each.value.number_of_computed_ingress_cidr_blocks, var.defaults.number_of_computed_ingress_cidr_blocks, 0) + number_of_computed_ingress_ipv6_cidr_blocks = try(each.value.number_of_computed_ingress_ipv6_cidr_blocks, var.defaults.number_of_computed_ingress_ipv6_cidr_blocks, 0) + number_of_computed_ingress_prefix_list_ids = try(each.value.number_of_computed_ingress_prefix_list_ids, var.defaults.number_of_computed_ingress_prefix_list_ids, 0) + number_of_computed_ingress_rules = try(each.value.number_of_computed_ingress_rules, var.defaults.number_of_computed_ingress_rules, 0) + number_of_computed_ingress_with_cidr_ipv4 = try(each.value.number_of_computed_ingress_with_cidr_ipv4, var.defaults.number_of_computed_ingress_with_cidr_ipv4, 0) + number_of_computed_ingress_with_cidr_ipv6 = try(each.value.number_of_computed_ingress_with_cidr_ipv6, var.defaults.number_of_computed_ingress_with_cidr_ipv6, 0) + number_of_computed_ingress_with_prefix_list_id = try(each.value.number_of_computed_ingress_with_prefix_list_id, var.defaults.number_of_computed_ingress_with_prefix_list_id, 0) + number_of_computed_ingress_with_referenced_security_group_id = try(each.value.number_of_computed_ingress_with_referenced_security_group_id, var.defaults.number_of_computed_ingress_with_referenced_security_group_id, 0) + number_of_computed_ingress_with_self = try(each.value.number_of_computed_ingress_with_self, var.defaults.number_of_computed_ingress_with_self, 0) + revoke_rules_on_delete = try(each.value.revoke_rules_on_delete, var.defaults.revoke_rules_on_delete, false) + tags = try(each.value.tags, var.defaults.tags, {}) + use_name_prefix = try(each.value.use_name_prefix, var.defaults.use_name_prefix, true) + vpc_id = try(each.value.vpc_id, var.defaults.vpc_id) } diff --git a/wrappers/main.tf b/wrappers/main.tf index 83712d17..7f0bd7d8 100644 --- a/wrappers/main.tf +++ b/wrappers/main.tf @@ -290,56 +290,56 @@ module "wrapper" { egress_rules = ["all-all"] } }) - computed_egress_rules = try(each.value.computed_egress_rules, var.defaults.computed_egress_rules, []) - computed_egress_with_cidr_blocks = try(each.value.computed_egress_with_cidr_blocks, var.defaults.computed_egress_with_cidr_blocks, []) - computed_egress_with_ipv6_cidr_blocks = try(each.value.computed_egress_with_ipv6_cidr_blocks, var.defaults.computed_egress_with_ipv6_cidr_blocks, []) - computed_egress_with_prefix_list_ids = try(each.value.computed_egress_with_prefix_list_ids, var.defaults.computed_egress_with_prefix_list_ids, []) - computed_egress_with_self = try(each.value.computed_egress_with_self, var.defaults.computed_egress_with_self, []) - computed_egress_with_source_security_group_id = try(each.value.computed_egress_with_source_security_group_id, var.defaults.computed_egress_with_source_security_group_id, []) - computed_ingress_rules = try(each.value.computed_ingress_rules, var.defaults.computed_ingress_rules, []) - computed_ingress_with_cidr_blocks = try(each.value.computed_ingress_with_cidr_blocks, var.defaults.computed_ingress_with_cidr_blocks, []) - computed_ingress_with_ipv6_cidr_blocks = try(each.value.computed_ingress_with_ipv6_cidr_blocks, var.defaults.computed_ingress_with_ipv6_cidr_blocks, []) - computed_ingress_with_prefix_list_ids = try(each.value.computed_ingress_with_prefix_list_ids, var.defaults.computed_ingress_with_prefix_list_ids, []) - computed_ingress_with_self = try(each.value.computed_ingress_with_self, var.defaults.computed_ingress_with_self, []) - computed_ingress_with_source_security_group_id = try(each.value.computed_ingress_with_source_security_group_id, var.defaults.computed_ingress_with_source_security_group_id, []) - create = try(each.value.create, var.defaults.create, true) - create_sg = try(each.value.create_sg, var.defaults.create_sg, true) - create_timeout = try(each.value.create_timeout, var.defaults.create_timeout, "10m") - delete_timeout = try(each.value.delete_timeout, var.defaults.delete_timeout, "15m") - description = try(each.value.description, var.defaults.description, "Security Group managed by Terraform") - egress_cidr_blocks = try(each.value.egress_cidr_blocks, var.defaults.egress_cidr_blocks, ["0.0.0.0/0"]) - egress_ipv6_cidr_blocks = try(each.value.egress_ipv6_cidr_blocks, var.defaults.egress_ipv6_cidr_blocks, ["::/0"]) - egress_prefix_list_ids = try(each.value.egress_prefix_list_ids, var.defaults.egress_prefix_list_ids, []) - egress_rules = try(each.value.egress_rules, var.defaults.egress_rules, []) - egress_with_cidr_blocks = try(each.value.egress_with_cidr_blocks, var.defaults.egress_with_cidr_blocks, []) - egress_with_ipv6_cidr_blocks = try(each.value.egress_with_ipv6_cidr_blocks, var.defaults.egress_with_ipv6_cidr_blocks, []) - egress_with_prefix_list_ids = try(each.value.egress_with_prefix_list_ids, var.defaults.egress_with_prefix_list_ids, []) - egress_with_self = try(each.value.egress_with_self, var.defaults.egress_with_self, []) - egress_with_source_security_group_id = try(each.value.egress_with_source_security_group_id, var.defaults.egress_with_source_security_group_id, []) - ingress_cidr_blocks = try(each.value.ingress_cidr_blocks, var.defaults.ingress_cidr_blocks, []) - ingress_ipv6_cidr_blocks = try(each.value.ingress_ipv6_cidr_blocks, var.defaults.ingress_ipv6_cidr_blocks, []) - ingress_prefix_list_ids = try(each.value.ingress_prefix_list_ids, var.defaults.ingress_prefix_list_ids, []) - ingress_rules = try(each.value.ingress_rules, var.defaults.ingress_rules, []) - ingress_with_cidr_blocks = try(each.value.ingress_with_cidr_blocks, var.defaults.ingress_with_cidr_blocks, []) - ingress_with_ipv6_cidr_blocks = try(each.value.ingress_with_ipv6_cidr_blocks, var.defaults.ingress_with_ipv6_cidr_blocks, []) - ingress_with_prefix_list_ids = try(each.value.ingress_with_prefix_list_ids, var.defaults.ingress_with_prefix_list_ids, []) - ingress_with_self = try(each.value.ingress_with_self, var.defaults.ingress_with_self, []) - ingress_with_source_security_group_id = try(each.value.ingress_with_source_security_group_id, var.defaults.ingress_with_source_security_group_id, []) - name = try(each.value.name, var.defaults.name, null) - number_of_computed_egress_rules = try(each.value.number_of_computed_egress_rules, var.defaults.number_of_computed_egress_rules, 0) - number_of_computed_egress_with_cidr_blocks = try(each.value.number_of_computed_egress_with_cidr_blocks, var.defaults.number_of_computed_egress_with_cidr_blocks, 0) - number_of_computed_egress_with_ipv6_cidr_blocks = try(each.value.number_of_computed_egress_with_ipv6_cidr_blocks, var.defaults.number_of_computed_egress_with_ipv6_cidr_blocks, 0) - number_of_computed_egress_with_prefix_list_ids = try(each.value.number_of_computed_egress_with_prefix_list_ids, var.defaults.number_of_computed_egress_with_prefix_list_ids, 0) - number_of_computed_egress_with_self = try(each.value.number_of_computed_egress_with_self, var.defaults.number_of_computed_egress_with_self, 0) - number_of_computed_egress_with_source_security_group_id = try(each.value.number_of_computed_egress_with_source_security_group_id, var.defaults.number_of_computed_egress_with_source_security_group_id, 0) - number_of_computed_ingress_rules = try(each.value.number_of_computed_ingress_rules, var.defaults.number_of_computed_ingress_rules, 0) - number_of_computed_ingress_with_cidr_blocks = try(each.value.number_of_computed_ingress_with_cidr_blocks, var.defaults.number_of_computed_ingress_with_cidr_blocks, 0) - number_of_computed_ingress_with_ipv6_cidr_blocks = try(each.value.number_of_computed_ingress_with_ipv6_cidr_blocks, var.defaults.number_of_computed_ingress_with_ipv6_cidr_blocks, 0) - number_of_computed_ingress_with_prefix_list_ids = try(each.value.number_of_computed_ingress_with_prefix_list_ids, var.defaults.number_of_computed_ingress_with_prefix_list_ids, 0) - number_of_computed_ingress_with_self = try(each.value.number_of_computed_ingress_with_self, var.defaults.number_of_computed_ingress_with_self, 0) - number_of_computed_ingress_with_source_security_group_id = try(each.value.number_of_computed_ingress_with_source_security_group_id, var.defaults.number_of_computed_ingress_with_source_security_group_id, 0) - putin_khuylo = try(each.value.putin_khuylo, var.defaults.putin_khuylo, true) - revoke_rules_on_delete = try(each.value.revoke_rules_on_delete, var.defaults.revoke_rules_on_delete, false) + computed_egress_rules = try(each.value.computed_egress_rules, var.defaults.computed_egress_rules, []) + computed_egress_with_cidr_ipv4 = try(each.value.computed_egress_with_cidr_ipv4, var.defaults.computed_egress_with_cidr_ipv4, []) + computed_egress_with_cidr_ipv6 = try(each.value.computed_egress_with_cidr_ipv6, var.defaults.computed_egress_with_cidr_ipv6, []) + computed_egress_with_prefix_list_id = try(each.value.computed_egress_with_prefix_list_id, var.defaults.computed_egress_with_prefix_list_id, []) + computed_egress_with_referenced_security_group_id = try(each.value.computed_egress_with_referenced_security_group_id, var.defaults.computed_egress_with_referenced_security_group_id, []) + computed_egress_with_self = try(each.value.computed_egress_with_self, var.defaults.computed_egress_with_self, []) + computed_ingress_rules = try(each.value.computed_ingress_rules, var.defaults.computed_ingress_rules, []) + computed_ingress_with_cidr_ipv4 = try(each.value.computed_ingress_with_cidr_ipv4, var.defaults.computed_ingress_with_cidr_ipv4, []) + computed_ingress_with_cidr_ipv6 = try(each.value.computed_ingress_with_cidr_ipv6, var.defaults.computed_ingress_with_cidr_ipv6, []) + computed_ingress_with_prefix_list_id = try(each.value.computed_ingress_with_prefix_list_id, var.defaults.computed_ingress_with_prefix_list_id, []) + computed_ingress_with_referenced_security_group_id = try(each.value.computed_ingress_with_referenced_security_group_id, var.defaults.computed_ingress_with_referenced_security_group_id, []) + computed_ingress_with_self = try(each.value.computed_ingress_with_self, var.defaults.computed_ingress_with_self, []) + create = try(each.value.create, var.defaults.create, true) + create_sg = try(each.value.create_sg, var.defaults.create_sg, true) + create_timeout = try(each.value.create_timeout, var.defaults.create_timeout, "10m") + delete_timeout = try(each.value.delete_timeout, var.defaults.delete_timeout, "15m") + description = try(each.value.description, var.defaults.description, "Security Group managed by Terraform") + egress_cidr_ipv4 = try(each.value.egress_cidr_ipv4, var.defaults.egress_cidr_ipv4, ["0.0.0.0/0"]) + egress_cidr_ipv6 = try(each.value.egress_cidr_ipv6, var.defaults.egress_cidr_ipv6, ["::/0"]) + egress_prefix_list_ids = try(each.value.egress_prefix_list_ids, var.defaults.egress_prefix_list_ids, []) + egress_rules = try(each.value.egress_rules, var.defaults.egress_rules, []) + egress_with_cidr_ipv4 = try(each.value.egress_with_cidr_ipv4, var.defaults.egress_with_cidr_ipv4, []) + egress_with_cidr_ipv6 = try(each.value.egress_with_cidr_ipv6, var.defaults.egress_with_cidr_ipv6, []) + egress_with_prefix_list_id = try(each.value.egress_with_prefix_list_id, var.defaults.egress_with_prefix_list_id, []) + egress_with_referenced_security_group_id = try(each.value.egress_with_referenced_security_group_id, var.defaults.egress_with_referenced_security_group_id, []) + egress_with_self = try(each.value.egress_with_self, var.defaults.egress_with_self, []) + ingress_cidr_ipv4 = try(each.value.ingress_cidr_ipv4, var.defaults.ingress_cidr_ipv4, []) + ingress_cidr_ipv6 = try(each.value.ingress_cidr_ipv6, var.defaults.ingress_cidr_ipv6, []) + ingress_prefix_list_ids = try(each.value.ingress_prefix_list_ids, var.defaults.ingress_prefix_list_ids, []) + ingress_rules = try(each.value.ingress_rules, var.defaults.ingress_rules, []) + ingress_with_cidr_ipv4 = try(each.value.ingress_with_cidr_ipv4, var.defaults.ingress_with_cidr_ipv4, []) + ingress_with_cidr_ipv6 = try(each.value.ingress_with_cidr_ipv6, var.defaults.ingress_with_cidr_ipv6, []) + ingress_with_prefix_list_id = try(each.value.ingress_with_prefix_list_id, var.defaults.ingress_with_prefix_list_id, []) + ingress_with_referenced_security_group_id = try(each.value.ingress_with_referenced_security_group_id, var.defaults.ingress_with_referenced_security_group_id, []) + ingress_with_self = try(each.value.ingress_with_self, var.defaults.ingress_with_self, []) + name = try(each.value.name, var.defaults.name, null) + number_of_computed_egress_rules = try(each.value.number_of_computed_egress_rules, var.defaults.number_of_computed_egress_rules, 0) + number_of_computed_egress_with_cidr_ipv4 = try(each.value.number_of_computed_egress_with_cidr_ipv4, var.defaults.number_of_computed_egress_with_cidr_ipv4, 0) + number_of_computed_egress_with_cidr_ipv6 = try(each.value.number_of_computed_egress_with_cidr_ipv6, var.defaults.number_of_computed_egress_with_cidr_ipv6, 0) + number_of_computed_egress_with_prefix_list_id = try(each.value.number_of_computed_egress_with_prefix_list_id, var.defaults.number_of_computed_egress_with_prefix_list_id, 0) + number_of_computed_egress_with_referenced_security_group_id = try(each.value.number_of_computed_egress_with_referenced_security_group_id, var.defaults.number_of_computed_egress_with_referenced_security_group_id, 0) + number_of_computed_egress_with_self = try(each.value.number_of_computed_egress_with_self, var.defaults.number_of_computed_egress_with_self, 0) + number_of_computed_ingress_rules = try(each.value.number_of_computed_ingress_rules, var.defaults.number_of_computed_ingress_rules, 0) + number_of_computed_ingress_with_cidr_ipv4 = try(each.value.number_of_computed_ingress_with_cidr_ipv4, var.defaults.number_of_computed_ingress_with_cidr_ipv4, 0) + number_of_computed_ingress_with_cidr_ipv6 = try(each.value.number_of_computed_ingress_with_cidr_ipv6, var.defaults.number_of_computed_ingress_with_cidr_ipv6, 0) + number_of_computed_ingress_with_prefix_list_id = try(each.value.number_of_computed_ingress_with_prefix_list_id, var.defaults.number_of_computed_ingress_with_prefix_list_id, 0) + number_of_computed_ingress_with_referenced_security_group_id = try(each.value.number_of_computed_ingress_with_referenced_security_group_id, var.defaults.number_of_computed_ingress_with_referenced_security_group_id, 0) + number_of_computed_ingress_with_self = try(each.value.number_of_computed_ingress_with_self, var.defaults.number_of_computed_ingress_with_self, 0) + putin_khuylo = try(each.value.putin_khuylo, var.defaults.putin_khuylo, true) + revoke_rules_on_delete = try(each.value.revoke_rules_on_delete, var.defaults.revoke_rules_on_delete, false) rules = try(each.value.rules, var.defaults.rules, { activemq-5671-tcp = [5671, 5671, "tcp", "ActiveMQ AMQP"] diff --git a/wrappers/memcached/main.tf b/wrappers/memcached/main.tf index b184df6e..dfdf0342 100644 --- a/wrappers/memcached/main.tf +++ b/wrappers/memcached/main.tf @@ -3,77 +3,77 @@ module "wrapper" { for_each = var.items - auto_computed_egress_rules = try(each.value.auto_computed_egress_rules, var.defaults.auto_computed_egress_rules, []) - auto_computed_egress_with_self = try(each.value.auto_computed_egress_with_self, var.defaults.auto_computed_egress_with_self, []) - auto_computed_ingress_rules = try(each.value.auto_computed_ingress_rules, var.defaults.auto_computed_ingress_rules, []) - auto_computed_ingress_with_self = try(each.value.auto_computed_ingress_with_self, var.defaults.auto_computed_ingress_with_self, []) - auto_egress_rules = try(each.value.auto_egress_rules, var.defaults.auto_egress_rules, ["all-all"]) - auto_egress_with_self = try(each.value.auto_egress_with_self, var.defaults.auto_egress_with_self, []) - auto_ingress_rules = try(each.value.auto_ingress_rules, var.defaults.auto_ingress_rules, ["memcached-tcp"]) - auto_ingress_with_self = try(each.value.auto_ingress_with_self, var.defaults.auto_ingress_with_self, [{ "rule" = "all-all" }]) - auto_number_of_computed_egress_rules = try(each.value.auto_number_of_computed_egress_rules, var.defaults.auto_number_of_computed_egress_rules, 0) - auto_number_of_computed_egress_with_self = try(each.value.auto_number_of_computed_egress_with_self, var.defaults.auto_number_of_computed_egress_with_self, 0) - auto_number_of_computed_ingress_rules = try(each.value.auto_number_of_computed_ingress_rules, var.defaults.auto_number_of_computed_ingress_rules, 0) - auto_number_of_computed_ingress_with_self = try(each.value.auto_number_of_computed_ingress_with_self, var.defaults.auto_number_of_computed_ingress_with_self, 0) - computed_egress_cidr_blocks = try(each.value.computed_egress_cidr_blocks, var.defaults.computed_egress_cidr_blocks, ["0.0.0.0/0"]) - computed_egress_ipv6_cidr_blocks = try(each.value.computed_egress_ipv6_cidr_blocks, var.defaults.computed_egress_ipv6_cidr_blocks, ["::/0"]) - computed_egress_prefix_list_ids = try(each.value.computed_egress_prefix_list_ids, var.defaults.computed_egress_prefix_list_ids, []) - computed_egress_rules = try(each.value.computed_egress_rules, var.defaults.computed_egress_rules, []) - computed_egress_with_cidr_blocks = try(each.value.computed_egress_with_cidr_blocks, var.defaults.computed_egress_with_cidr_blocks, []) - computed_egress_with_ipv6_cidr_blocks = try(each.value.computed_egress_with_ipv6_cidr_blocks, var.defaults.computed_egress_with_ipv6_cidr_blocks, []) - computed_egress_with_prefix_list_ids = try(each.value.computed_egress_with_prefix_list_ids, var.defaults.computed_egress_with_prefix_list_ids, []) - computed_egress_with_self = try(each.value.computed_egress_with_self, var.defaults.computed_egress_with_self, []) - computed_egress_with_source_security_group_id = try(each.value.computed_egress_with_source_security_group_id, var.defaults.computed_egress_with_source_security_group_id, []) - computed_ingress_cidr_blocks = try(each.value.computed_ingress_cidr_blocks, var.defaults.computed_ingress_cidr_blocks, []) - computed_ingress_ipv6_cidr_blocks = try(each.value.computed_ingress_ipv6_cidr_blocks, var.defaults.computed_ingress_ipv6_cidr_blocks, []) - computed_ingress_prefix_list_ids = try(each.value.computed_ingress_prefix_list_ids, var.defaults.computed_ingress_prefix_list_ids, []) - computed_ingress_rules = try(each.value.computed_ingress_rules, var.defaults.computed_ingress_rules, []) - computed_ingress_with_cidr_blocks = try(each.value.computed_ingress_with_cidr_blocks, var.defaults.computed_ingress_with_cidr_blocks, []) - computed_ingress_with_ipv6_cidr_blocks = try(each.value.computed_ingress_with_ipv6_cidr_blocks, var.defaults.computed_ingress_with_ipv6_cidr_blocks, []) - computed_ingress_with_prefix_list_ids = try(each.value.computed_ingress_with_prefix_list_ids, var.defaults.computed_ingress_with_prefix_list_ids, []) - computed_ingress_with_self = try(each.value.computed_ingress_with_self, var.defaults.computed_ingress_with_self, []) - computed_ingress_with_source_security_group_id = try(each.value.computed_ingress_with_source_security_group_id, var.defaults.computed_ingress_with_source_security_group_id, []) - create = try(each.value.create, var.defaults.create, true) - description = try(each.value.description, var.defaults.description, "Security Group managed by Terraform") - egress_cidr_blocks = try(each.value.egress_cidr_blocks, var.defaults.egress_cidr_blocks, ["0.0.0.0/0"]) - egress_ipv6_cidr_blocks = try(each.value.egress_ipv6_cidr_blocks, var.defaults.egress_ipv6_cidr_blocks, ["::/0"]) - egress_prefix_list_ids = try(each.value.egress_prefix_list_ids, var.defaults.egress_prefix_list_ids, []) - egress_rules = try(each.value.egress_rules, var.defaults.egress_rules, []) - egress_with_cidr_blocks = try(each.value.egress_with_cidr_blocks, var.defaults.egress_with_cidr_blocks, []) - egress_with_ipv6_cidr_blocks = try(each.value.egress_with_ipv6_cidr_blocks, var.defaults.egress_with_ipv6_cidr_blocks, []) - egress_with_prefix_list_ids = try(each.value.egress_with_prefix_list_ids, var.defaults.egress_with_prefix_list_ids, []) - egress_with_self = try(each.value.egress_with_self, var.defaults.egress_with_self, []) - egress_with_source_security_group_id = try(each.value.egress_with_source_security_group_id, var.defaults.egress_with_source_security_group_id, []) - ingress_cidr_blocks = try(each.value.ingress_cidr_blocks, var.defaults.ingress_cidr_blocks, []) - ingress_ipv6_cidr_blocks = try(each.value.ingress_ipv6_cidr_blocks, var.defaults.ingress_ipv6_cidr_blocks, []) - ingress_prefix_list_ids = try(each.value.ingress_prefix_list_ids, var.defaults.ingress_prefix_list_ids, []) - ingress_rules = try(each.value.ingress_rules, var.defaults.ingress_rules, []) - ingress_with_cidr_blocks = try(each.value.ingress_with_cidr_blocks, var.defaults.ingress_with_cidr_blocks, []) - ingress_with_ipv6_cidr_blocks = try(each.value.ingress_with_ipv6_cidr_blocks, var.defaults.ingress_with_ipv6_cidr_blocks, []) - ingress_with_prefix_list_ids = try(each.value.ingress_with_prefix_list_ids, var.defaults.ingress_with_prefix_list_ids, []) - ingress_with_self = try(each.value.ingress_with_self, var.defaults.ingress_with_self, []) - ingress_with_source_security_group_id = try(each.value.ingress_with_source_security_group_id, var.defaults.ingress_with_source_security_group_id, []) - name = try(each.value.name, var.defaults.name) - number_of_computed_egress_cidr_blocks = try(each.value.number_of_computed_egress_cidr_blocks, var.defaults.number_of_computed_egress_cidr_blocks, 0) - number_of_computed_egress_ipv6_cidr_blocks = try(each.value.number_of_computed_egress_ipv6_cidr_blocks, var.defaults.number_of_computed_egress_ipv6_cidr_blocks, 0) - number_of_computed_egress_prefix_list_ids = try(each.value.number_of_computed_egress_prefix_list_ids, var.defaults.number_of_computed_egress_prefix_list_ids, 0) - number_of_computed_egress_rules = try(each.value.number_of_computed_egress_rules, var.defaults.number_of_computed_egress_rules, 0) - number_of_computed_egress_with_cidr_blocks = try(each.value.number_of_computed_egress_with_cidr_blocks, var.defaults.number_of_computed_egress_with_cidr_blocks, 0) - number_of_computed_egress_with_ipv6_cidr_blocks = try(each.value.number_of_computed_egress_with_ipv6_cidr_blocks, var.defaults.number_of_computed_egress_with_ipv6_cidr_blocks, 0) - number_of_computed_egress_with_prefix_list_ids = try(each.value.number_of_computed_egress_with_prefix_list_ids, var.defaults.number_of_computed_egress_with_prefix_list_ids, 0) - number_of_computed_egress_with_self = try(each.value.number_of_computed_egress_with_self, var.defaults.number_of_computed_egress_with_self, 0) - number_of_computed_egress_with_source_security_group_id = try(each.value.number_of_computed_egress_with_source_security_group_id, var.defaults.number_of_computed_egress_with_source_security_group_id, 0) - number_of_computed_ingress_cidr_blocks = try(each.value.number_of_computed_ingress_cidr_blocks, var.defaults.number_of_computed_ingress_cidr_blocks, 0) - number_of_computed_ingress_ipv6_cidr_blocks = try(each.value.number_of_computed_ingress_ipv6_cidr_blocks, var.defaults.number_of_computed_ingress_ipv6_cidr_blocks, 0) - number_of_computed_ingress_prefix_list_ids = try(each.value.number_of_computed_ingress_prefix_list_ids, var.defaults.number_of_computed_ingress_prefix_list_ids, 0) - number_of_computed_ingress_rules = try(each.value.number_of_computed_ingress_rules, var.defaults.number_of_computed_ingress_rules, 0) - number_of_computed_ingress_with_cidr_blocks = try(each.value.number_of_computed_ingress_with_cidr_blocks, var.defaults.number_of_computed_ingress_with_cidr_blocks, 0) - number_of_computed_ingress_with_ipv6_cidr_blocks = try(each.value.number_of_computed_ingress_with_ipv6_cidr_blocks, var.defaults.number_of_computed_ingress_with_ipv6_cidr_blocks, 0) - number_of_computed_ingress_with_prefix_list_ids = try(each.value.number_of_computed_ingress_with_prefix_list_ids, var.defaults.number_of_computed_ingress_with_prefix_list_ids, 0) - number_of_computed_ingress_with_self = try(each.value.number_of_computed_ingress_with_self, var.defaults.number_of_computed_ingress_with_self, 0) - number_of_computed_ingress_with_source_security_group_id = try(each.value.number_of_computed_ingress_with_source_security_group_id, var.defaults.number_of_computed_ingress_with_source_security_group_id, 0) - revoke_rules_on_delete = try(each.value.revoke_rules_on_delete, var.defaults.revoke_rules_on_delete, false) - tags = try(each.value.tags, var.defaults.tags, {}) - use_name_prefix = try(each.value.use_name_prefix, var.defaults.use_name_prefix, true) - vpc_id = try(each.value.vpc_id, var.defaults.vpc_id) + auto_computed_egress_rules = try(each.value.auto_computed_egress_rules, var.defaults.auto_computed_egress_rules, []) + auto_computed_egress_with_self = try(each.value.auto_computed_egress_with_self, var.defaults.auto_computed_egress_with_self, []) + auto_computed_ingress_rules = try(each.value.auto_computed_ingress_rules, var.defaults.auto_computed_ingress_rules, []) + auto_computed_ingress_with_self = try(each.value.auto_computed_ingress_with_self, var.defaults.auto_computed_ingress_with_self, []) + auto_egress_rules = try(each.value.auto_egress_rules, var.defaults.auto_egress_rules, ["all-all"]) + auto_egress_with_self = try(each.value.auto_egress_with_self, var.defaults.auto_egress_with_self, []) + auto_ingress_rules = try(each.value.auto_ingress_rules, var.defaults.auto_ingress_rules, ["memcached-tcp"]) + auto_ingress_with_self = try(each.value.auto_ingress_with_self, var.defaults.auto_ingress_with_self, [{ "rule" = "all-all" }]) + auto_number_of_computed_egress_rules = try(each.value.auto_number_of_computed_egress_rules, var.defaults.auto_number_of_computed_egress_rules, 0) + auto_number_of_computed_egress_with_self = try(each.value.auto_number_of_computed_egress_with_self, var.defaults.auto_number_of_computed_egress_with_self, 0) + auto_number_of_computed_ingress_rules = try(each.value.auto_number_of_computed_ingress_rules, var.defaults.auto_number_of_computed_ingress_rules, 0) + auto_number_of_computed_ingress_with_self = try(each.value.auto_number_of_computed_ingress_with_self, var.defaults.auto_number_of_computed_ingress_with_self, 0) + computed_egress_cidr_blocks = try(each.value.computed_egress_cidr_blocks, var.defaults.computed_egress_cidr_blocks, ["0.0.0.0/0"]) + computed_egress_ipv6_cidr_blocks = try(each.value.computed_egress_ipv6_cidr_blocks, var.defaults.computed_egress_ipv6_cidr_blocks, ["::/0"]) + computed_egress_prefix_list_ids = try(each.value.computed_egress_prefix_list_ids, var.defaults.computed_egress_prefix_list_ids, []) + computed_egress_rules = try(each.value.computed_egress_rules, var.defaults.computed_egress_rules, []) + computed_egress_with_cidr_ipv4 = try(each.value.computed_egress_with_cidr_ipv4, var.defaults.computed_egress_with_cidr_ipv4, []) + computed_egress_with_cidr_ipv6 = try(each.value.computed_egress_with_cidr_ipv6, var.defaults.computed_egress_with_cidr_ipv6, []) + computed_egress_with_prefix_list_id = try(each.value.computed_egress_with_prefix_list_id, var.defaults.computed_egress_with_prefix_list_id, []) + computed_egress_with_referenced_security_group_id = try(each.value.computed_egress_with_referenced_security_group_id, var.defaults.computed_egress_with_referenced_security_group_id, []) + computed_egress_with_self = try(each.value.computed_egress_with_self, var.defaults.computed_egress_with_self, []) + computed_ingress_cidr_blocks = try(each.value.computed_ingress_cidr_blocks, var.defaults.computed_ingress_cidr_blocks, []) + computed_ingress_ipv6_cidr_blocks = try(each.value.computed_ingress_ipv6_cidr_blocks, var.defaults.computed_ingress_ipv6_cidr_blocks, []) + computed_ingress_prefix_list_ids = try(each.value.computed_ingress_prefix_list_ids, var.defaults.computed_ingress_prefix_list_ids, []) + computed_ingress_rules = try(each.value.computed_ingress_rules, var.defaults.computed_ingress_rules, []) + computed_ingress_with_cidr_ipv4 = try(each.value.computed_ingress_with_cidr_ipv4, var.defaults.computed_ingress_with_cidr_ipv4, []) + computed_ingress_with_cidr_ipv6 = try(each.value.computed_ingress_with_cidr_ipv6, var.defaults.computed_ingress_with_cidr_ipv6, []) + computed_ingress_with_prefix_list_id = try(each.value.computed_ingress_with_prefix_list_id, var.defaults.computed_ingress_with_prefix_list_id, []) + computed_ingress_with_referenced_security_group_id = try(each.value.computed_ingress_with_referenced_security_group_id, var.defaults.computed_ingress_with_referenced_security_group_id, []) + computed_ingress_with_self = try(each.value.computed_ingress_with_self, var.defaults.computed_ingress_with_self, []) + create = try(each.value.create, var.defaults.create, true) + description = try(each.value.description, var.defaults.description, "Security Group managed by Terraform") + egress_cidr_ipv4 = try(each.value.egress_cidr_ipv4, var.defaults.egress_cidr_ipv4, ["0.0.0.0/0"]) + egress_cidr_ipv6 = try(each.value.egress_cidr_ipv6, var.defaults.egress_cidr_ipv6, ["::/0"]) + egress_prefix_list_ids = try(each.value.egress_prefix_list_ids, var.defaults.egress_prefix_list_ids, []) + egress_rules = try(each.value.egress_rules, var.defaults.egress_rules, []) + egress_with_cidr_ipv4 = try(each.value.egress_with_cidr_ipv4, var.defaults.egress_with_cidr_ipv4, []) + egress_with_cidr_ipv6 = try(each.value.egress_with_cidr_ipv6, var.defaults.egress_with_cidr_ipv6, []) + egress_with_prefix_list_id = try(each.value.egress_with_prefix_list_id, var.defaults.egress_with_prefix_list_id, []) + egress_with_referenced_security_group_id = try(each.value.egress_with_referenced_security_group_id, var.defaults.egress_with_referenced_security_group_id, []) + egress_with_self = try(each.value.egress_with_self, var.defaults.egress_with_self, []) + ingress_cidr_ipv4 = try(each.value.ingress_cidr_ipv4, var.defaults.ingress_cidr_ipv4, []) + ingress_cidr_ipv6 = try(each.value.ingress_cidr_ipv6, var.defaults.ingress_cidr_ipv6, []) + ingress_prefix_list_ids = try(each.value.ingress_prefix_list_ids, var.defaults.ingress_prefix_list_ids, []) + ingress_rules = try(each.value.ingress_rules, var.defaults.ingress_rules, []) + ingress_with_cidr_ipv4 = try(each.value.ingress_with_cidr_ipv4, var.defaults.ingress_with_cidr_ipv4, []) + ingress_with_cidr_ipv6 = try(each.value.ingress_with_cidr_ipv6, var.defaults.ingress_with_cidr_ipv6, []) + ingress_with_prefix_list_id = try(each.value.ingress_with_prefix_list_id, var.defaults.ingress_with_prefix_list_id, []) + ingress_with_referenced_security_group_id = try(each.value.ingress_with_referenced_security_group_id, var.defaults.ingress_with_referenced_security_group_id, []) + ingress_with_self = try(each.value.ingress_with_self, var.defaults.ingress_with_self, []) + name = try(each.value.name, var.defaults.name) + number_of_computed_egress_cidr_blocks = try(each.value.number_of_computed_egress_cidr_blocks, var.defaults.number_of_computed_egress_cidr_blocks, 0) + number_of_computed_egress_ipv6_cidr_blocks = try(each.value.number_of_computed_egress_ipv6_cidr_blocks, var.defaults.number_of_computed_egress_ipv6_cidr_blocks, 0) + number_of_computed_egress_prefix_list_ids = try(each.value.number_of_computed_egress_prefix_list_ids, var.defaults.number_of_computed_egress_prefix_list_ids, 0) + number_of_computed_egress_rules = try(each.value.number_of_computed_egress_rules, var.defaults.number_of_computed_egress_rules, 0) + number_of_computed_egress_with_cidr_ipv4 = try(each.value.number_of_computed_egress_with_cidr_ipv4, var.defaults.number_of_computed_egress_with_cidr_ipv4, 0) + number_of_computed_egress_with_cidr_ipv6 = try(each.value.number_of_computed_egress_with_cidr_ipv6, var.defaults.number_of_computed_egress_with_cidr_ipv6, 0) + number_of_computed_egress_with_prefix_list_id = try(each.value.number_of_computed_egress_with_prefix_list_id, var.defaults.number_of_computed_egress_with_prefix_list_id, 0) + number_of_computed_egress_with_referenced_security_group_id = try(each.value.number_of_computed_egress_with_referenced_security_group_id, var.defaults.number_of_computed_egress_with_referenced_security_group_id, 0) + number_of_computed_egress_with_self = try(each.value.number_of_computed_egress_with_self, var.defaults.number_of_computed_egress_with_self, 0) + number_of_computed_ingress_cidr_blocks = try(each.value.number_of_computed_ingress_cidr_blocks, var.defaults.number_of_computed_ingress_cidr_blocks, 0) + number_of_computed_ingress_ipv6_cidr_blocks = try(each.value.number_of_computed_ingress_ipv6_cidr_blocks, var.defaults.number_of_computed_ingress_ipv6_cidr_blocks, 0) + number_of_computed_ingress_prefix_list_ids = try(each.value.number_of_computed_ingress_prefix_list_ids, var.defaults.number_of_computed_ingress_prefix_list_ids, 0) + number_of_computed_ingress_rules = try(each.value.number_of_computed_ingress_rules, var.defaults.number_of_computed_ingress_rules, 0) + number_of_computed_ingress_with_cidr_ipv4 = try(each.value.number_of_computed_ingress_with_cidr_ipv4, var.defaults.number_of_computed_ingress_with_cidr_ipv4, 0) + number_of_computed_ingress_with_cidr_ipv6 = try(each.value.number_of_computed_ingress_with_cidr_ipv6, var.defaults.number_of_computed_ingress_with_cidr_ipv6, 0) + number_of_computed_ingress_with_prefix_list_id = try(each.value.number_of_computed_ingress_with_prefix_list_id, var.defaults.number_of_computed_ingress_with_prefix_list_id, 0) + number_of_computed_ingress_with_referenced_security_group_id = try(each.value.number_of_computed_ingress_with_referenced_security_group_id, var.defaults.number_of_computed_ingress_with_referenced_security_group_id, 0) + number_of_computed_ingress_with_self = try(each.value.number_of_computed_ingress_with_self, var.defaults.number_of_computed_ingress_with_self, 0) + revoke_rules_on_delete = try(each.value.revoke_rules_on_delete, var.defaults.revoke_rules_on_delete, false) + tags = try(each.value.tags, var.defaults.tags, {}) + use_name_prefix = try(each.value.use_name_prefix, var.defaults.use_name_prefix, true) + vpc_id = try(each.value.vpc_id, var.defaults.vpc_id) } diff --git a/wrappers/minio/main.tf b/wrappers/minio/main.tf index 3941aa13..85301055 100644 --- a/wrappers/minio/main.tf +++ b/wrappers/minio/main.tf @@ -3,77 +3,77 @@ module "wrapper" { for_each = var.items - auto_computed_egress_rules = try(each.value.auto_computed_egress_rules, var.defaults.auto_computed_egress_rules, []) - auto_computed_egress_with_self = try(each.value.auto_computed_egress_with_self, var.defaults.auto_computed_egress_with_self, []) - auto_computed_ingress_rules = try(each.value.auto_computed_ingress_rules, var.defaults.auto_computed_ingress_rules, []) - auto_computed_ingress_with_self = try(each.value.auto_computed_ingress_with_self, var.defaults.auto_computed_ingress_with_self, []) - auto_egress_rules = try(each.value.auto_egress_rules, var.defaults.auto_egress_rules, ["all-all"]) - auto_egress_with_self = try(each.value.auto_egress_with_self, var.defaults.auto_egress_with_self, []) - auto_ingress_rules = try(each.value.auto_ingress_rules, var.defaults.auto_ingress_rules, ["minio-tcp"]) - auto_ingress_with_self = try(each.value.auto_ingress_with_self, var.defaults.auto_ingress_with_self, [{ "rule" = "all-all" }]) - auto_number_of_computed_egress_rules = try(each.value.auto_number_of_computed_egress_rules, var.defaults.auto_number_of_computed_egress_rules, 0) - auto_number_of_computed_egress_with_self = try(each.value.auto_number_of_computed_egress_with_self, var.defaults.auto_number_of_computed_egress_with_self, 0) - auto_number_of_computed_ingress_rules = try(each.value.auto_number_of_computed_ingress_rules, var.defaults.auto_number_of_computed_ingress_rules, 0) - auto_number_of_computed_ingress_with_self = try(each.value.auto_number_of_computed_ingress_with_self, var.defaults.auto_number_of_computed_ingress_with_self, 0) - computed_egress_cidr_blocks = try(each.value.computed_egress_cidr_blocks, var.defaults.computed_egress_cidr_blocks, ["0.0.0.0/0"]) - computed_egress_ipv6_cidr_blocks = try(each.value.computed_egress_ipv6_cidr_blocks, var.defaults.computed_egress_ipv6_cidr_blocks, ["::/0"]) - computed_egress_prefix_list_ids = try(each.value.computed_egress_prefix_list_ids, var.defaults.computed_egress_prefix_list_ids, []) - computed_egress_rules = try(each.value.computed_egress_rules, var.defaults.computed_egress_rules, []) - computed_egress_with_cidr_blocks = try(each.value.computed_egress_with_cidr_blocks, var.defaults.computed_egress_with_cidr_blocks, []) - computed_egress_with_ipv6_cidr_blocks = try(each.value.computed_egress_with_ipv6_cidr_blocks, var.defaults.computed_egress_with_ipv6_cidr_blocks, []) - computed_egress_with_prefix_list_ids = try(each.value.computed_egress_with_prefix_list_ids, var.defaults.computed_egress_with_prefix_list_ids, []) - computed_egress_with_self = try(each.value.computed_egress_with_self, var.defaults.computed_egress_with_self, []) - computed_egress_with_source_security_group_id = try(each.value.computed_egress_with_source_security_group_id, var.defaults.computed_egress_with_source_security_group_id, []) - computed_ingress_cidr_blocks = try(each.value.computed_ingress_cidr_blocks, var.defaults.computed_ingress_cidr_blocks, []) - computed_ingress_ipv6_cidr_blocks = try(each.value.computed_ingress_ipv6_cidr_blocks, var.defaults.computed_ingress_ipv6_cidr_blocks, []) - computed_ingress_prefix_list_ids = try(each.value.computed_ingress_prefix_list_ids, var.defaults.computed_ingress_prefix_list_ids, []) - computed_ingress_rules = try(each.value.computed_ingress_rules, var.defaults.computed_ingress_rules, []) - computed_ingress_with_cidr_blocks = try(each.value.computed_ingress_with_cidr_blocks, var.defaults.computed_ingress_with_cidr_blocks, []) - computed_ingress_with_ipv6_cidr_blocks = try(each.value.computed_ingress_with_ipv6_cidr_blocks, var.defaults.computed_ingress_with_ipv6_cidr_blocks, []) - computed_ingress_with_prefix_list_ids = try(each.value.computed_ingress_with_prefix_list_ids, var.defaults.computed_ingress_with_prefix_list_ids, []) - computed_ingress_with_self = try(each.value.computed_ingress_with_self, var.defaults.computed_ingress_with_self, []) - computed_ingress_with_source_security_group_id = try(each.value.computed_ingress_with_source_security_group_id, var.defaults.computed_ingress_with_source_security_group_id, []) - create = try(each.value.create, var.defaults.create, true) - description = try(each.value.description, var.defaults.description, "Security Group managed by Terraform") - egress_cidr_blocks = try(each.value.egress_cidr_blocks, var.defaults.egress_cidr_blocks, ["0.0.0.0/0"]) - egress_ipv6_cidr_blocks = try(each.value.egress_ipv6_cidr_blocks, var.defaults.egress_ipv6_cidr_blocks, ["::/0"]) - egress_prefix_list_ids = try(each.value.egress_prefix_list_ids, var.defaults.egress_prefix_list_ids, []) - egress_rules = try(each.value.egress_rules, var.defaults.egress_rules, []) - egress_with_cidr_blocks = try(each.value.egress_with_cidr_blocks, var.defaults.egress_with_cidr_blocks, []) - egress_with_ipv6_cidr_blocks = try(each.value.egress_with_ipv6_cidr_blocks, var.defaults.egress_with_ipv6_cidr_blocks, []) - egress_with_prefix_list_ids = try(each.value.egress_with_prefix_list_ids, var.defaults.egress_with_prefix_list_ids, []) - egress_with_self = try(each.value.egress_with_self, var.defaults.egress_with_self, []) - egress_with_source_security_group_id = try(each.value.egress_with_source_security_group_id, var.defaults.egress_with_source_security_group_id, []) - ingress_cidr_blocks = try(each.value.ingress_cidr_blocks, var.defaults.ingress_cidr_blocks, []) - ingress_ipv6_cidr_blocks = try(each.value.ingress_ipv6_cidr_blocks, var.defaults.ingress_ipv6_cidr_blocks, []) - ingress_prefix_list_ids = try(each.value.ingress_prefix_list_ids, var.defaults.ingress_prefix_list_ids, []) - ingress_rules = try(each.value.ingress_rules, var.defaults.ingress_rules, []) - ingress_with_cidr_blocks = try(each.value.ingress_with_cidr_blocks, var.defaults.ingress_with_cidr_blocks, []) - ingress_with_ipv6_cidr_blocks = try(each.value.ingress_with_ipv6_cidr_blocks, var.defaults.ingress_with_ipv6_cidr_blocks, []) - ingress_with_prefix_list_ids = try(each.value.ingress_with_prefix_list_ids, var.defaults.ingress_with_prefix_list_ids, []) - ingress_with_self = try(each.value.ingress_with_self, var.defaults.ingress_with_self, []) - ingress_with_source_security_group_id = try(each.value.ingress_with_source_security_group_id, var.defaults.ingress_with_source_security_group_id, []) - name = try(each.value.name, var.defaults.name) - number_of_computed_egress_cidr_blocks = try(each.value.number_of_computed_egress_cidr_blocks, var.defaults.number_of_computed_egress_cidr_blocks, 0) - number_of_computed_egress_ipv6_cidr_blocks = try(each.value.number_of_computed_egress_ipv6_cidr_blocks, var.defaults.number_of_computed_egress_ipv6_cidr_blocks, 0) - number_of_computed_egress_prefix_list_ids = try(each.value.number_of_computed_egress_prefix_list_ids, var.defaults.number_of_computed_egress_prefix_list_ids, 0) - number_of_computed_egress_rules = try(each.value.number_of_computed_egress_rules, var.defaults.number_of_computed_egress_rules, 0) - number_of_computed_egress_with_cidr_blocks = try(each.value.number_of_computed_egress_with_cidr_blocks, var.defaults.number_of_computed_egress_with_cidr_blocks, 0) - number_of_computed_egress_with_ipv6_cidr_blocks = try(each.value.number_of_computed_egress_with_ipv6_cidr_blocks, var.defaults.number_of_computed_egress_with_ipv6_cidr_blocks, 0) - number_of_computed_egress_with_prefix_list_ids = try(each.value.number_of_computed_egress_with_prefix_list_ids, var.defaults.number_of_computed_egress_with_prefix_list_ids, 0) - number_of_computed_egress_with_self = try(each.value.number_of_computed_egress_with_self, var.defaults.number_of_computed_egress_with_self, 0) - number_of_computed_egress_with_source_security_group_id = try(each.value.number_of_computed_egress_with_source_security_group_id, var.defaults.number_of_computed_egress_with_source_security_group_id, 0) - number_of_computed_ingress_cidr_blocks = try(each.value.number_of_computed_ingress_cidr_blocks, var.defaults.number_of_computed_ingress_cidr_blocks, 0) - number_of_computed_ingress_ipv6_cidr_blocks = try(each.value.number_of_computed_ingress_ipv6_cidr_blocks, var.defaults.number_of_computed_ingress_ipv6_cidr_blocks, 0) - number_of_computed_ingress_prefix_list_ids = try(each.value.number_of_computed_ingress_prefix_list_ids, var.defaults.number_of_computed_ingress_prefix_list_ids, 0) - number_of_computed_ingress_rules = try(each.value.number_of_computed_ingress_rules, var.defaults.number_of_computed_ingress_rules, 0) - number_of_computed_ingress_with_cidr_blocks = try(each.value.number_of_computed_ingress_with_cidr_blocks, var.defaults.number_of_computed_ingress_with_cidr_blocks, 0) - number_of_computed_ingress_with_ipv6_cidr_blocks = try(each.value.number_of_computed_ingress_with_ipv6_cidr_blocks, var.defaults.number_of_computed_ingress_with_ipv6_cidr_blocks, 0) - number_of_computed_ingress_with_prefix_list_ids = try(each.value.number_of_computed_ingress_with_prefix_list_ids, var.defaults.number_of_computed_ingress_with_prefix_list_ids, 0) - number_of_computed_ingress_with_self = try(each.value.number_of_computed_ingress_with_self, var.defaults.number_of_computed_ingress_with_self, 0) - number_of_computed_ingress_with_source_security_group_id = try(each.value.number_of_computed_ingress_with_source_security_group_id, var.defaults.number_of_computed_ingress_with_source_security_group_id, 0) - revoke_rules_on_delete = try(each.value.revoke_rules_on_delete, var.defaults.revoke_rules_on_delete, false) - tags = try(each.value.tags, var.defaults.tags, {}) - use_name_prefix = try(each.value.use_name_prefix, var.defaults.use_name_prefix, true) - vpc_id = try(each.value.vpc_id, var.defaults.vpc_id) + auto_computed_egress_rules = try(each.value.auto_computed_egress_rules, var.defaults.auto_computed_egress_rules, []) + auto_computed_egress_with_self = try(each.value.auto_computed_egress_with_self, var.defaults.auto_computed_egress_with_self, []) + auto_computed_ingress_rules = try(each.value.auto_computed_ingress_rules, var.defaults.auto_computed_ingress_rules, []) + auto_computed_ingress_with_self = try(each.value.auto_computed_ingress_with_self, var.defaults.auto_computed_ingress_with_self, []) + auto_egress_rules = try(each.value.auto_egress_rules, var.defaults.auto_egress_rules, ["all-all"]) + auto_egress_with_self = try(each.value.auto_egress_with_self, var.defaults.auto_egress_with_self, []) + auto_ingress_rules = try(each.value.auto_ingress_rules, var.defaults.auto_ingress_rules, ["minio-tcp"]) + auto_ingress_with_self = try(each.value.auto_ingress_with_self, var.defaults.auto_ingress_with_self, [{ "rule" = "all-all" }]) + auto_number_of_computed_egress_rules = try(each.value.auto_number_of_computed_egress_rules, var.defaults.auto_number_of_computed_egress_rules, 0) + auto_number_of_computed_egress_with_self = try(each.value.auto_number_of_computed_egress_with_self, var.defaults.auto_number_of_computed_egress_with_self, 0) + auto_number_of_computed_ingress_rules = try(each.value.auto_number_of_computed_ingress_rules, var.defaults.auto_number_of_computed_ingress_rules, 0) + auto_number_of_computed_ingress_with_self = try(each.value.auto_number_of_computed_ingress_with_self, var.defaults.auto_number_of_computed_ingress_with_self, 0) + computed_egress_cidr_blocks = try(each.value.computed_egress_cidr_blocks, var.defaults.computed_egress_cidr_blocks, ["0.0.0.0/0"]) + computed_egress_ipv6_cidr_blocks = try(each.value.computed_egress_ipv6_cidr_blocks, var.defaults.computed_egress_ipv6_cidr_blocks, ["::/0"]) + computed_egress_prefix_list_ids = try(each.value.computed_egress_prefix_list_ids, var.defaults.computed_egress_prefix_list_ids, []) + computed_egress_rules = try(each.value.computed_egress_rules, var.defaults.computed_egress_rules, []) + computed_egress_with_cidr_ipv4 = try(each.value.computed_egress_with_cidr_ipv4, var.defaults.computed_egress_with_cidr_ipv4, []) + computed_egress_with_cidr_ipv6 = try(each.value.computed_egress_with_cidr_ipv6, var.defaults.computed_egress_with_cidr_ipv6, []) + computed_egress_with_prefix_list_id = try(each.value.computed_egress_with_prefix_list_id, var.defaults.computed_egress_with_prefix_list_id, []) + computed_egress_with_referenced_security_group_id = try(each.value.computed_egress_with_referenced_security_group_id, var.defaults.computed_egress_with_referenced_security_group_id, []) + computed_egress_with_self = try(each.value.computed_egress_with_self, var.defaults.computed_egress_with_self, []) + computed_ingress_cidr_blocks = try(each.value.computed_ingress_cidr_blocks, var.defaults.computed_ingress_cidr_blocks, []) + computed_ingress_ipv6_cidr_blocks = try(each.value.computed_ingress_ipv6_cidr_blocks, var.defaults.computed_ingress_ipv6_cidr_blocks, []) + computed_ingress_prefix_list_ids = try(each.value.computed_ingress_prefix_list_ids, var.defaults.computed_ingress_prefix_list_ids, []) + computed_ingress_rules = try(each.value.computed_ingress_rules, var.defaults.computed_ingress_rules, []) + computed_ingress_with_cidr_ipv4 = try(each.value.computed_ingress_with_cidr_ipv4, var.defaults.computed_ingress_with_cidr_ipv4, []) + computed_ingress_with_cidr_ipv6 = try(each.value.computed_ingress_with_cidr_ipv6, var.defaults.computed_ingress_with_cidr_ipv6, []) + computed_ingress_with_prefix_list_id = try(each.value.computed_ingress_with_prefix_list_id, var.defaults.computed_ingress_with_prefix_list_id, []) + computed_ingress_with_referenced_security_group_id = try(each.value.computed_ingress_with_referenced_security_group_id, var.defaults.computed_ingress_with_referenced_security_group_id, []) + computed_ingress_with_self = try(each.value.computed_ingress_with_self, var.defaults.computed_ingress_with_self, []) + create = try(each.value.create, var.defaults.create, true) + description = try(each.value.description, var.defaults.description, "Security Group managed by Terraform") + egress_cidr_ipv4 = try(each.value.egress_cidr_ipv4, var.defaults.egress_cidr_ipv4, ["0.0.0.0/0"]) + egress_cidr_ipv6 = try(each.value.egress_cidr_ipv6, var.defaults.egress_cidr_ipv6, ["::/0"]) + egress_prefix_list_ids = try(each.value.egress_prefix_list_ids, var.defaults.egress_prefix_list_ids, []) + egress_rules = try(each.value.egress_rules, var.defaults.egress_rules, []) + egress_with_cidr_ipv4 = try(each.value.egress_with_cidr_ipv4, var.defaults.egress_with_cidr_ipv4, []) + egress_with_cidr_ipv6 = try(each.value.egress_with_cidr_ipv6, var.defaults.egress_with_cidr_ipv6, []) + egress_with_prefix_list_id = try(each.value.egress_with_prefix_list_id, var.defaults.egress_with_prefix_list_id, []) + egress_with_referenced_security_group_id = try(each.value.egress_with_referenced_security_group_id, var.defaults.egress_with_referenced_security_group_id, []) + egress_with_self = try(each.value.egress_with_self, var.defaults.egress_with_self, []) + ingress_cidr_ipv4 = try(each.value.ingress_cidr_ipv4, var.defaults.ingress_cidr_ipv4, []) + ingress_cidr_ipv6 = try(each.value.ingress_cidr_ipv6, var.defaults.ingress_cidr_ipv6, []) + ingress_prefix_list_ids = try(each.value.ingress_prefix_list_ids, var.defaults.ingress_prefix_list_ids, []) + ingress_rules = try(each.value.ingress_rules, var.defaults.ingress_rules, []) + ingress_with_cidr_ipv4 = try(each.value.ingress_with_cidr_ipv4, var.defaults.ingress_with_cidr_ipv4, []) + ingress_with_cidr_ipv6 = try(each.value.ingress_with_cidr_ipv6, var.defaults.ingress_with_cidr_ipv6, []) + ingress_with_prefix_list_id = try(each.value.ingress_with_prefix_list_id, var.defaults.ingress_with_prefix_list_id, []) + ingress_with_referenced_security_group_id = try(each.value.ingress_with_referenced_security_group_id, var.defaults.ingress_with_referenced_security_group_id, []) + ingress_with_self = try(each.value.ingress_with_self, var.defaults.ingress_with_self, []) + name = try(each.value.name, var.defaults.name) + number_of_computed_egress_cidr_blocks = try(each.value.number_of_computed_egress_cidr_blocks, var.defaults.number_of_computed_egress_cidr_blocks, 0) + number_of_computed_egress_ipv6_cidr_blocks = try(each.value.number_of_computed_egress_ipv6_cidr_blocks, var.defaults.number_of_computed_egress_ipv6_cidr_blocks, 0) + number_of_computed_egress_prefix_list_ids = try(each.value.number_of_computed_egress_prefix_list_ids, var.defaults.number_of_computed_egress_prefix_list_ids, 0) + number_of_computed_egress_rules = try(each.value.number_of_computed_egress_rules, var.defaults.number_of_computed_egress_rules, 0) + number_of_computed_egress_with_cidr_ipv4 = try(each.value.number_of_computed_egress_with_cidr_ipv4, var.defaults.number_of_computed_egress_with_cidr_ipv4, 0) + number_of_computed_egress_with_cidr_ipv6 = try(each.value.number_of_computed_egress_with_cidr_ipv6, var.defaults.number_of_computed_egress_with_cidr_ipv6, 0) + number_of_computed_egress_with_prefix_list_id = try(each.value.number_of_computed_egress_with_prefix_list_id, var.defaults.number_of_computed_egress_with_prefix_list_id, 0) + number_of_computed_egress_with_referenced_security_group_id = try(each.value.number_of_computed_egress_with_referenced_security_group_id, var.defaults.number_of_computed_egress_with_referenced_security_group_id, 0) + number_of_computed_egress_with_self = try(each.value.number_of_computed_egress_with_self, var.defaults.number_of_computed_egress_with_self, 0) + number_of_computed_ingress_cidr_blocks = try(each.value.number_of_computed_ingress_cidr_blocks, var.defaults.number_of_computed_ingress_cidr_blocks, 0) + number_of_computed_ingress_ipv6_cidr_blocks = try(each.value.number_of_computed_ingress_ipv6_cidr_blocks, var.defaults.number_of_computed_ingress_ipv6_cidr_blocks, 0) + number_of_computed_ingress_prefix_list_ids = try(each.value.number_of_computed_ingress_prefix_list_ids, var.defaults.number_of_computed_ingress_prefix_list_ids, 0) + number_of_computed_ingress_rules = try(each.value.number_of_computed_ingress_rules, var.defaults.number_of_computed_ingress_rules, 0) + number_of_computed_ingress_with_cidr_ipv4 = try(each.value.number_of_computed_ingress_with_cidr_ipv4, var.defaults.number_of_computed_ingress_with_cidr_ipv4, 0) + number_of_computed_ingress_with_cidr_ipv6 = try(each.value.number_of_computed_ingress_with_cidr_ipv6, var.defaults.number_of_computed_ingress_with_cidr_ipv6, 0) + number_of_computed_ingress_with_prefix_list_id = try(each.value.number_of_computed_ingress_with_prefix_list_id, var.defaults.number_of_computed_ingress_with_prefix_list_id, 0) + number_of_computed_ingress_with_referenced_security_group_id = try(each.value.number_of_computed_ingress_with_referenced_security_group_id, var.defaults.number_of_computed_ingress_with_referenced_security_group_id, 0) + number_of_computed_ingress_with_self = try(each.value.number_of_computed_ingress_with_self, var.defaults.number_of_computed_ingress_with_self, 0) + revoke_rules_on_delete = try(each.value.revoke_rules_on_delete, var.defaults.revoke_rules_on_delete, false) + tags = try(each.value.tags, var.defaults.tags, {}) + use_name_prefix = try(each.value.use_name_prefix, var.defaults.use_name_prefix, true) + vpc_id = try(each.value.vpc_id, var.defaults.vpc_id) } diff --git a/wrappers/mongodb/main.tf b/wrappers/mongodb/main.tf index eca4acb6..89819943 100644 --- a/wrappers/mongodb/main.tf +++ b/wrappers/mongodb/main.tf @@ -3,77 +3,77 @@ module "wrapper" { for_each = var.items - auto_computed_egress_rules = try(each.value.auto_computed_egress_rules, var.defaults.auto_computed_egress_rules, []) - auto_computed_egress_with_self = try(each.value.auto_computed_egress_with_self, var.defaults.auto_computed_egress_with_self, []) - auto_computed_ingress_rules = try(each.value.auto_computed_ingress_rules, var.defaults.auto_computed_ingress_rules, []) - auto_computed_ingress_with_self = try(each.value.auto_computed_ingress_with_self, var.defaults.auto_computed_ingress_with_self, []) - auto_egress_rules = try(each.value.auto_egress_rules, var.defaults.auto_egress_rules, ["all-all"]) - auto_egress_with_self = try(each.value.auto_egress_with_self, var.defaults.auto_egress_with_self, []) - auto_ingress_rules = try(each.value.auto_ingress_rules, var.defaults.auto_ingress_rules, ["mongodb-27017-tcp", "mongodb-27018-tcp", "mongodb-27019-tcp"]) - auto_ingress_with_self = try(each.value.auto_ingress_with_self, var.defaults.auto_ingress_with_self, [{ "rule" = "all-all" }]) - auto_number_of_computed_egress_rules = try(each.value.auto_number_of_computed_egress_rules, var.defaults.auto_number_of_computed_egress_rules, 0) - auto_number_of_computed_egress_with_self = try(each.value.auto_number_of_computed_egress_with_self, var.defaults.auto_number_of_computed_egress_with_self, 0) - auto_number_of_computed_ingress_rules = try(each.value.auto_number_of_computed_ingress_rules, var.defaults.auto_number_of_computed_ingress_rules, 0) - auto_number_of_computed_ingress_with_self = try(each.value.auto_number_of_computed_ingress_with_self, var.defaults.auto_number_of_computed_ingress_with_self, 0) - computed_egress_cidr_blocks = try(each.value.computed_egress_cidr_blocks, var.defaults.computed_egress_cidr_blocks, ["0.0.0.0/0"]) - computed_egress_ipv6_cidr_blocks = try(each.value.computed_egress_ipv6_cidr_blocks, var.defaults.computed_egress_ipv6_cidr_blocks, ["::/0"]) - computed_egress_prefix_list_ids = try(each.value.computed_egress_prefix_list_ids, var.defaults.computed_egress_prefix_list_ids, []) - computed_egress_rules = try(each.value.computed_egress_rules, var.defaults.computed_egress_rules, []) - computed_egress_with_cidr_blocks = try(each.value.computed_egress_with_cidr_blocks, var.defaults.computed_egress_with_cidr_blocks, []) - computed_egress_with_ipv6_cidr_blocks = try(each.value.computed_egress_with_ipv6_cidr_blocks, var.defaults.computed_egress_with_ipv6_cidr_blocks, []) - computed_egress_with_prefix_list_ids = try(each.value.computed_egress_with_prefix_list_ids, var.defaults.computed_egress_with_prefix_list_ids, []) - computed_egress_with_self = try(each.value.computed_egress_with_self, var.defaults.computed_egress_with_self, []) - computed_egress_with_source_security_group_id = try(each.value.computed_egress_with_source_security_group_id, var.defaults.computed_egress_with_source_security_group_id, []) - computed_ingress_cidr_blocks = try(each.value.computed_ingress_cidr_blocks, var.defaults.computed_ingress_cidr_blocks, []) - computed_ingress_ipv6_cidr_blocks = try(each.value.computed_ingress_ipv6_cidr_blocks, var.defaults.computed_ingress_ipv6_cidr_blocks, []) - computed_ingress_prefix_list_ids = try(each.value.computed_ingress_prefix_list_ids, var.defaults.computed_ingress_prefix_list_ids, []) - computed_ingress_rules = try(each.value.computed_ingress_rules, var.defaults.computed_ingress_rules, []) - computed_ingress_with_cidr_blocks = try(each.value.computed_ingress_with_cidr_blocks, var.defaults.computed_ingress_with_cidr_blocks, []) - computed_ingress_with_ipv6_cidr_blocks = try(each.value.computed_ingress_with_ipv6_cidr_blocks, var.defaults.computed_ingress_with_ipv6_cidr_blocks, []) - computed_ingress_with_prefix_list_ids = try(each.value.computed_ingress_with_prefix_list_ids, var.defaults.computed_ingress_with_prefix_list_ids, []) - computed_ingress_with_self = try(each.value.computed_ingress_with_self, var.defaults.computed_ingress_with_self, []) - computed_ingress_with_source_security_group_id = try(each.value.computed_ingress_with_source_security_group_id, var.defaults.computed_ingress_with_source_security_group_id, []) - create = try(each.value.create, var.defaults.create, true) - description = try(each.value.description, var.defaults.description, "Security Group managed by Terraform") - egress_cidr_blocks = try(each.value.egress_cidr_blocks, var.defaults.egress_cidr_blocks, ["0.0.0.0/0"]) - egress_ipv6_cidr_blocks = try(each.value.egress_ipv6_cidr_blocks, var.defaults.egress_ipv6_cidr_blocks, ["::/0"]) - egress_prefix_list_ids = try(each.value.egress_prefix_list_ids, var.defaults.egress_prefix_list_ids, []) - egress_rules = try(each.value.egress_rules, var.defaults.egress_rules, []) - egress_with_cidr_blocks = try(each.value.egress_with_cidr_blocks, var.defaults.egress_with_cidr_blocks, []) - egress_with_ipv6_cidr_blocks = try(each.value.egress_with_ipv6_cidr_blocks, var.defaults.egress_with_ipv6_cidr_blocks, []) - egress_with_prefix_list_ids = try(each.value.egress_with_prefix_list_ids, var.defaults.egress_with_prefix_list_ids, []) - egress_with_self = try(each.value.egress_with_self, var.defaults.egress_with_self, []) - egress_with_source_security_group_id = try(each.value.egress_with_source_security_group_id, var.defaults.egress_with_source_security_group_id, []) - ingress_cidr_blocks = try(each.value.ingress_cidr_blocks, var.defaults.ingress_cidr_blocks, []) - ingress_ipv6_cidr_blocks = try(each.value.ingress_ipv6_cidr_blocks, var.defaults.ingress_ipv6_cidr_blocks, []) - ingress_prefix_list_ids = try(each.value.ingress_prefix_list_ids, var.defaults.ingress_prefix_list_ids, []) - ingress_rules = try(each.value.ingress_rules, var.defaults.ingress_rules, []) - ingress_with_cidr_blocks = try(each.value.ingress_with_cidr_blocks, var.defaults.ingress_with_cidr_blocks, []) - ingress_with_ipv6_cidr_blocks = try(each.value.ingress_with_ipv6_cidr_blocks, var.defaults.ingress_with_ipv6_cidr_blocks, []) - ingress_with_prefix_list_ids = try(each.value.ingress_with_prefix_list_ids, var.defaults.ingress_with_prefix_list_ids, []) - ingress_with_self = try(each.value.ingress_with_self, var.defaults.ingress_with_self, []) - ingress_with_source_security_group_id = try(each.value.ingress_with_source_security_group_id, var.defaults.ingress_with_source_security_group_id, []) - name = try(each.value.name, var.defaults.name) - number_of_computed_egress_cidr_blocks = try(each.value.number_of_computed_egress_cidr_blocks, var.defaults.number_of_computed_egress_cidr_blocks, 0) - number_of_computed_egress_ipv6_cidr_blocks = try(each.value.number_of_computed_egress_ipv6_cidr_blocks, var.defaults.number_of_computed_egress_ipv6_cidr_blocks, 0) - number_of_computed_egress_prefix_list_ids = try(each.value.number_of_computed_egress_prefix_list_ids, var.defaults.number_of_computed_egress_prefix_list_ids, 0) - number_of_computed_egress_rules = try(each.value.number_of_computed_egress_rules, var.defaults.number_of_computed_egress_rules, 0) - number_of_computed_egress_with_cidr_blocks = try(each.value.number_of_computed_egress_with_cidr_blocks, var.defaults.number_of_computed_egress_with_cidr_blocks, 0) - number_of_computed_egress_with_ipv6_cidr_blocks = try(each.value.number_of_computed_egress_with_ipv6_cidr_blocks, var.defaults.number_of_computed_egress_with_ipv6_cidr_blocks, 0) - number_of_computed_egress_with_prefix_list_ids = try(each.value.number_of_computed_egress_with_prefix_list_ids, var.defaults.number_of_computed_egress_with_prefix_list_ids, 0) - number_of_computed_egress_with_self = try(each.value.number_of_computed_egress_with_self, var.defaults.number_of_computed_egress_with_self, 0) - number_of_computed_egress_with_source_security_group_id = try(each.value.number_of_computed_egress_with_source_security_group_id, var.defaults.number_of_computed_egress_with_source_security_group_id, 0) - number_of_computed_ingress_cidr_blocks = try(each.value.number_of_computed_ingress_cidr_blocks, var.defaults.number_of_computed_ingress_cidr_blocks, 0) - number_of_computed_ingress_ipv6_cidr_blocks = try(each.value.number_of_computed_ingress_ipv6_cidr_blocks, var.defaults.number_of_computed_ingress_ipv6_cidr_blocks, 0) - number_of_computed_ingress_prefix_list_ids = try(each.value.number_of_computed_ingress_prefix_list_ids, var.defaults.number_of_computed_ingress_prefix_list_ids, 0) - number_of_computed_ingress_rules = try(each.value.number_of_computed_ingress_rules, var.defaults.number_of_computed_ingress_rules, 0) - number_of_computed_ingress_with_cidr_blocks = try(each.value.number_of_computed_ingress_with_cidr_blocks, var.defaults.number_of_computed_ingress_with_cidr_blocks, 0) - number_of_computed_ingress_with_ipv6_cidr_blocks = try(each.value.number_of_computed_ingress_with_ipv6_cidr_blocks, var.defaults.number_of_computed_ingress_with_ipv6_cidr_blocks, 0) - number_of_computed_ingress_with_prefix_list_ids = try(each.value.number_of_computed_ingress_with_prefix_list_ids, var.defaults.number_of_computed_ingress_with_prefix_list_ids, 0) - number_of_computed_ingress_with_self = try(each.value.number_of_computed_ingress_with_self, var.defaults.number_of_computed_ingress_with_self, 0) - number_of_computed_ingress_with_source_security_group_id = try(each.value.number_of_computed_ingress_with_source_security_group_id, var.defaults.number_of_computed_ingress_with_source_security_group_id, 0) - revoke_rules_on_delete = try(each.value.revoke_rules_on_delete, var.defaults.revoke_rules_on_delete, false) - tags = try(each.value.tags, var.defaults.tags, {}) - use_name_prefix = try(each.value.use_name_prefix, var.defaults.use_name_prefix, true) - vpc_id = try(each.value.vpc_id, var.defaults.vpc_id) + auto_computed_egress_rules = try(each.value.auto_computed_egress_rules, var.defaults.auto_computed_egress_rules, []) + auto_computed_egress_with_self = try(each.value.auto_computed_egress_with_self, var.defaults.auto_computed_egress_with_self, []) + auto_computed_ingress_rules = try(each.value.auto_computed_ingress_rules, var.defaults.auto_computed_ingress_rules, []) + auto_computed_ingress_with_self = try(each.value.auto_computed_ingress_with_self, var.defaults.auto_computed_ingress_with_self, []) + auto_egress_rules = try(each.value.auto_egress_rules, var.defaults.auto_egress_rules, ["all-all"]) + auto_egress_with_self = try(each.value.auto_egress_with_self, var.defaults.auto_egress_with_self, []) + auto_ingress_rules = try(each.value.auto_ingress_rules, var.defaults.auto_ingress_rules, ["mongodb-27017-tcp", "mongodb-27018-tcp", "mongodb-27019-tcp"]) + auto_ingress_with_self = try(each.value.auto_ingress_with_self, var.defaults.auto_ingress_with_self, [{ "rule" = "all-all" }]) + auto_number_of_computed_egress_rules = try(each.value.auto_number_of_computed_egress_rules, var.defaults.auto_number_of_computed_egress_rules, 0) + auto_number_of_computed_egress_with_self = try(each.value.auto_number_of_computed_egress_with_self, var.defaults.auto_number_of_computed_egress_with_self, 0) + auto_number_of_computed_ingress_rules = try(each.value.auto_number_of_computed_ingress_rules, var.defaults.auto_number_of_computed_ingress_rules, 0) + auto_number_of_computed_ingress_with_self = try(each.value.auto_number_of_computed_ingress_with_self, var.defaults.auto_number_of_computed_ingress_with_self, 0) + computed_egress_cidr_blocks = try(each.value.computed_egress_cidr_blocks, var.defaults.computed_egress_cidr_blocks, ["0.0.0.0/0"]) + computed_egress_ipv6_cidr_blocks = try(each.value.computed_egress_ipv6_cidr_blocks, var.defaults.computed_egress_ipv6_cidr_blocks, ["::/0"]) + computed_egress_prefix_list_ids = try(each.value.computed_egress_prefix_list_ids, var.defaults.computed_egress_prefix_list_ids, []) + computed_egress_rules = try(each.value.computed_egress_rules, var.defaults.computed_egress_rules, []) + computed_egress_with_cidr_ipv4 = try(each.value.computed_egress_with_cidr_ipv4, var.defaults.computed_egress_with_cidr_ipv4, []) + computed_egress_with_cidr_ipv6 = try(each.value.computed_egress_with_cidr_ipv6, var.defaults.computed_egress_with_cidr_ipv6, []) + computed_egress_with_prefix_list_id = try(each.value.computed_egress_with_prefix_list_id, var.defaults.computed_egress_with_prefix_list_id, []) + computed_egress_with_referenced_security_group_id = try(each.value.computed_egress_with_referenced_security_group_id, var.defaults.computed_egress_with_referenced_security_group_id, []) + computed_egress_with_self = try(each.value.computed_egress_with_self, var.defaults.computed_egress_with_self, []) + computed_ingress_cidr_blocks = try(each.value.computed_ingress_cidr_blocks, var.defaults.computed_ingress_cidr_blocks, []) + computed_ingress_ipv6_cidr_blocks = try(each.value.computed_ingress_ipv6_cidr_blocks, var.defaults.computed_ingress_ipv6_cidr_blocks, []) + computed_ingress_prefix_list_ids = try(each.value.computed_ingress_prefix_list_ids, var.defaults.computed_ingress_prefix_list_ids, []) + computed_ingress_rules = try(each.value.computed_ingress_rules, var.defaults.computed_ingress_rules, []) + computed_ingress_with_cidr_ipv4 = try(each.value.computed_ingress_with_cidr_ipv4, var.defaults.computed_ingress_with_cidr_ipv4, []) + computed_ingress_with_cidr_ipv6 = try(each.value.computed_ingress_with_cidr_ipv6, var.defaults.computed_ingress_with_cidr_ipv6, []) + computed_ingress_with_prefix_list_id = try(each.value.computed_ingress_with_prefix_list_id, var.defaults.computed_ingress_with_prefix_list_id, []) + computed_ingress_with_referenced_security_group_id = try(each.value.computed_ingress_with_referenced_security_group_id, var.defaults.computed_ingress_with_referenced_security_group_id, []) + computed_ingress_with_self = try(each.value.computed_ingress_with_self, var.defaults.computed_ingress_with_self, []) + create = try(each.value.create, var.defaults.create, true) + description = try(each.value.description, var.defaults.description, "Security Group managed by Terraform") + egress_cidr_ipv4 = try(each.value.egress_cidr_ipv4, var.defaults.egress_cidr_ipv4, ["0.0.0.0/0"]) + egress_cidr_ipv6 = try(each.value.egress_cidr_ipv6, var.defaults.egress_cidr_ipv6, ["::/0"]) + egress_prefix_list_ids = try(each.value.egress_prefix_list_ids, var.defaults.egress_prefix_list_ids, []) + egress_rules = try(each.value.egress_rules, var.defaults.egress_rules, []) + egress_with_cidr_ipv4 = try(each.value.egress_with_cidr_ipv4, var.defaults.egress_with_cidr_ipv4, []) + egress_with_cidr_ipv6 = try(each.value.egress_with_cidr_ipv6, var.defaults.egress_with_cidr_ipv6, []) + egress_with_prefix_list_id = try(each.value.egress_with_prefix_list_id, var.defaults.egress_with_prefix_list_id, []) + egress_with_referenced_security_group_id = try(each.value.egress_with_referenced_security_group_id, var.defaults.egress_with_referenced_security_group_id, []) + egress_with_self = try(each.value.egress_with_self, var.defaults.egress_with_self, []) + ingress_cidr_ipv4 = try(each.value.ingress_cidr_ipv4, var.defaults.ingress_cidr_ipv4, []) + ingress_cidr_ipv6 = try(each.value.ingress_cidr_ipv6, var.defaults.ingress_cidr_ipv6, []) + ingress_prefix_list_ids = try(each.value.ingress_prefix_list_ids, var.defaults.ingress_prefix_list_ids, []) + ingress_rules = try(each.value.ingress_rules, var.defaults.ingress_rules, []) + ingress_with_cidr_ipv4 = try(each.value.ingress_with_cidr_ipv4, var.defaults.ingress_with_cidr_ipv4, []) + ingress_with_cidr_ipv6 = try(each.value.ingress_with_cidr_ipv6, var.defaults.ingress_with_cidr_ipv6, []) + ingress_with_prefix_list_id = try(each.value.ingress_with_prefix_list_id, var.defaults.ingress_with_prefix_list_id, []) + ingress_with_referenced_security_group_id = try(each.value.ingress_with_referenced_security_group_id, var.defaults.ingress_with_referenced_security_group_id, []) + ingress_with_self = try(each.value.ingress_with_self, var.defaults.ingress_with_self, []) + name = try(each.value.name, var.defaults.name) + number_of_computed_egress_cidr_blocks = try(each.value.number_of_computed_egress_cidr_blocks, var.defaults.number_of_computed_egress_cidr_blocks, 0) + number_of_computed_egress_ipv6_cidr_blocks = try(each.value.number_of_computed_egress_ipv6_cidr_blocks, var.defaults.number_of_computed_egress_ipv6_cidr_blocks, 0) + number_of_computed_egress_prefix_list_ids = try(each.value.number_of_computed_egress_prefix_list_ids, var.defaults.number_of_computed_egress_prefix_list_ids, 0) + number_of_computed_egress_rules = try(each.value.number_of_computed_egress_rules, var.defaults.number_of_computed_egress_rules, 0) + number_of_computed_egress_with_cidr_ipv4 = try(each.value.number_of_computed_egress_with_cidr_ipv4, var.defaults.number_of_computed_egress_with_cidr_ipv4, 0) + number_of_computed_egress_with_cidr_ipv6 = try(each.value.number_of_computed_egress_with_cidr_ipv6, var.defaults.number_of_computed_egress_with_cidr_ipv6, 0) + number_of_computed_egress_with_prefix_list_id = try(each.value.number_of_computed_egress_with_prefix_list_id, var.defaults.number_of_computed_egress_with_prefix_list_id, 0) + number_of_computed_egress_with_referenced_security_group_id = try(each.value.number_of_computed_egress_with_referenced_security_group_id, var.defaults.number_of_computed_egress_with_referenced_security_group_id, 0) + number_of_computed_egress_with_self = try(each.value.number_of_computed_egress_with_self, var.defaults.number_of_computed_egress_with_self, 0) + number_of_computed_ingress_cidr_blocks = try(each.value.number_of_computed_ingress_cidr_blocks, var.defaults.number_of_computed_ingress_cidr_blocks, 0) + number_of_computed_ingress_ipv6_cidr_blocks = try(each.value.number_of_computed_ingress_ipv6_cidr_blocks, var.defaults.number_of_computed_ingress_ipv6_cidr_blocks, 0) + number_of_computed_ingress_prefix_list_ids = try(each.value.number_of_computed_ingress_prefix_list_ids, var.defaults.number_of_computed_ingress_prefix_list_ids, 0) + number_of_computed_ingress_rules = try(each.value.number_of_computed_ingress_rules, var.defaults.number_of_computed_ingress_rules, 0) + number_of_computed_ingress_with_cidr_ipv4 = try(each.value.number_of_computed_ingress_with_cidr_ipv4, var.defaults.number_of_computed_ingress_with_cidr_ipv4, 0) + number_of_computed_ingress_with_cidr_ipv6 = try(each.value.number_of_computed_ingress_with_cidr_ipv6, var.defaults.number_of_computed_ingress_with_cidr_ipv6, 0) + number_of_computed_ingress_with_prefix_list_id = try(each.value.number_of_computed_ingress_with_prefix_list_id, var.defaults.number_of_computed_ingress_with_prefix_list_id, 0) + number_of_computed_ingress_with_referenced_security_group_id = try(each.value.number_of_computed_ingress_with_referenced_security_group_id, var.defaults.number_of_computed_ingress_with_referenced_security_group_id, 0) + number_of_computed_ingress_with_self = try(each.value.number_of_computed_ingress_with_self, var.defaults.number_of_computed_ingress_with_self, 0) + revoke_rules_on_delete = try(each.value.revoke_rules_on_delete, var.defaults.revoke_rules_on_delete, false) + tags = try(each.value.tags, var.defaults.tags, {}) + use_name_prefix = try(each.value.use_name_prefix, var.defaults.use_name_prefix, true) + vpc_id = try(each.value.vpc_id, var.defaults.vpc_id) } diff --git a/wrappers/mssql/main.tf b/wrappers/mssql/main.tf index 2d2fdd7d..078a171a 100644 --- a/wrappers/mssql/main.tf +++ b/wrappers/mssql/main.tf @@ -3,77 +3,77 @@ module "wrapper" { for_each = var.items - auto_computed_egress_rules = try(each.value.auto_computed_egress_rules, var.defaults.auto_computed_egress_rules, []) - auto_computed_egress_with_self = try(each.value.auto_computed_egress_with_self, var.defaults.auto_computed_egress_with_self, []) - auto_computed_ingress_rules = try(each.value.auto_computed_ingress_rules, var.defaults.auto_computed_ingress_rules, []) - auto_computed_ingress_with_self = try(each.value.auto_computed_ingress_with_self, var.defaults.auto_computed_ingress_with_self, []) - auto_egress_rules = try(each.value.auto_egress_rules, var.defaults.auto_egress_rules, ["all-all"]) - auto_egress_with_self = try(each.value.auto_egress_with_self, var.defaults.auto_egress_with_self, []) - auto_ingress_rules = try(each.value.auto_ingress_rules, var.defaults.auto_ingress_rules, ["mssql-tcp", "mssql-udp", "mssql-analytics-tcp", "mssql-broker-tcp"]) - auto_ingress_with_self = try(each.value.auto_ingress_with_self, var.defaults.auto_ingress_with_self, [{ "rule" = "all-all" }]) - auto_number_of_computed_egress_rules = try(each.value.auto_number_of_computed_egress_rules, var.defaults.auto_number_of_computed_egress_rules, 0) - auto_number_of_computed_egress_with_self = try(each.value.auto_number_of_computed_egress_with_self, var.defaults.auto_number_of_computed_egress_with_self, 0) - auto_number_of_computed_ingress_rules = try(each.value.auto_number_of_computed_ingress_rules, var.defaults.auto_number_of_computed_ingress_rules, 0) - auto_number_of_computed_ingress_with_self = try(each.value.auto_number_of_computed_ingress_with_self, var.defaults.auto_number_of_computed_ingress_with_self, 0) - computed_egress_cidr_blocks = try(each.value.computed_egress_cidr_blocks, var.defaults.computed_egress_cidr_blocks, ["0.0.0.0/0"]) - computed_egress_ipv6_cidr_blocks = try(each.value.computed_egress_ipv6_cidr_blocks, var.defaults.computed_egress_ipv6_cidr_blocks, ["::/0"]) - computed_egress_prefix_list_ids = try(each.value.computed_egress_prefix_list_ids, var.defaults.computed_egress_prefix_list_ids, []) - computed_egress_rules = try(each.value.computed_egress_rules, var.defaults.computed_egress_rules, []) - computed_egress_with_cidr_blocks = try(each.value.computed_egress_with_cidr_blocks, var.defaults.computed_egress_with_cidr_blocks, []) - computed_egress_with_ipv6_cidr_blocks = try(each.value.computed_egress_with_ipv6_cidr_blocks, var.defaults.computed_egress_with_ipv6_cidr_blocks, []) - computed_egress_with_prefix_list_ids = try(each.value.computed_egress_with_prefix_list_ids, var.defaults.computed_egress_with_prefix_list_ids, []) - computed_egress_with_self = try(each.value.computed_egress_with_self, var.defaults.computed_egress_with_self, []) - computed_egress_with_source_security_group_id = try(each.value.computed_egress_with_source_security_group_id, var.defaults.computed_egress_with_source_security_group_id, []) - computed_ingress_cidr_blocks = try(each.value.computed_ingress_cidr_blocks, var.defaults.computed_ingress_cidr_blocks, []) - computed_ingress_ipv6_cidr_blocks = try(each.value.computed_ingress_ipv6_cidr_blocks, var.defaults.computed_ingress_ipv6_cidr_blocks, []) - computed_ingress_prefix_list_ids = try(each.value.computed_ingress_prefix_list_ids, var.defaults.computed_ingress_prefix_list_ids, []) - computed_ingress_rules = try(each.value.computed_ingress_rules, var.defaults.computed_ingress_rules, []) - computed_ingress_with_cidr_blocks = try(each.value.computed_ingress_with_cidr_blocks, var.defaults.computed_ingress_with_cidr_blocks, []) - computed_ingress_with_ipv6_cidr_blocks = try(each.value.computed_ingress_with_ipv6_cidr_blocks, var.defaults.computed_ingress_with_ipv6_cidr_blocks, []) - computed_ingress_with_prefix_list_ids = try(each.value.computed_ingress_with_prefix_list_ids, var.defaults.computed_ingress_with_prefix_list_ids, []) - computed_ingress_with_self = try(each.value.computed_ingress_with_self, var.defaults.computed_ingress_with_self, []) - computed_ingress_with_source_security_group_id = try(each.value.computed_ingress_with_source_security_group_id, var.defaults.computed_ingress_with_source_security_group_id, []) - create = try(each.value.create, var.defaults.create, true) - description = try(each.value.description, var.defaults.description, "Security Group managed by Terraform") - egress_cidr_blocks = try(each.value.egress_cidr_blocks, var.defaults.egress_cidr_blocks, ["0.0.0.0/0"]) - egress_ipv6_cidr_blocks = try(each.value.egress_ipv6_cidr_blocks, var.defaults.egress_ipv6_cidr_blocks, ["::/0"]) - egress_prefix_list_ids = try(each.value.egress_prefix_list_ids, var.defaults.egress_prefix_list_ids, []) - egress_rules = try(each.value.egress_rules, var.defaults.egress_rules, []) - egress_with_cidr_blocks = try(each.value.egress_with_cidr_blocks, var.defaults.egress_with_cidr_blocks, []) - egress_with_ipv6_cidr_blocks = try(each.value.egress_with_ipv6_cidr_blocks, var.defaults.egress_with_ipv6_cidr_blocks, []) - egress_with_prefix_list_ids = try(each.value.egress_with_prefix_list_ids, var.defaults.egress_with_prefix_list_ids, []) - egress_with_self = try(each.value.egress_with_self, var.defaults.egress_with_self, []) - egress_with_source_security_group_id = try(each.value.egress_with_source_security_group_id, var.defaults.egress_with_source_security_group_id, []) - ingress_cidr_blocks = try(each.value.ingress_cidr_blocks, var.defaults.ingress_cidr_blocks, []) - ingress_ipv6_cidr_blocks = try(each.value.ingress_ipv6_cidr_blocks, var.defaults.ingress_ipv6_cidr_blocks, []) - ingress_prefix_list_ids = try(each.value.ingress_prefix_list_ids, var.defaults.ingress_prefix_list_ids, []) - ingress_rules = try(each.value.ingress_rules, var.defaults.ingress_rules, []) - ingress_with_cidr_blocks = try(each.value.ingress_with_cidr_blocks, var.defaults.ingress_with_cidr_blocks, []) - ingress_with_ipv6_cidr_blocks = try(each.value.ingress_with_ipv6_cidr_blocks, var.defaults.ingress_with_ipv6_cidr_blocks, []) - ingress_with_prefix_list_ids = try(each.value.ingress_with_prefix_list_ids, var.defaults.ingress_with_prefix_list_ids, []) - ingress_with_self = try(each.value.ingress_with_self, var.defaults.ingress_with_self, []) - ingress_with_source_security_group_id = try(each.value.ingress_with_source_security_group_id, var.defaults.ingress_with_source_security_group_id, []) - name = try(each.value.name, var.defaults.name) - number_of_computed_egress_cidr_blocks = try(each.value.number_of_computed_egress_cidr_blocks, var.defaults.number_of_computed_egress_cidr_blocks, 0) - number_of_computed_egress_ipv6_cidr_blocks = try(each.value.number_of_computed_egress_ipv6_cidr_blocks, var.defaults.number_of_computed_egress_ipv6_cidr_blocks, 0) - number_of_computed_egress_prefix_list_ids = try(each.value.number_of_computed_egress_prefix_list_ids, var.defaults.number_of_computed_egress_prefix_list_ids, 0) - number_of_computed_egress_rules = try(each.value.number_of_computed_egress_rules, var.defaults.number_of_computed_egress_rules, 0) - number_of_computed_egress_with_cidr_blocks = try(each.value.number_of_computed_egress_with_cidr_blocks, var.defaults.number_of_computed_egress_with_cidr_blocks, 0) - number_of_computed_egress_with_ipv6_cidr_blocks = try(each.value.number_of_computed_egress_with_ipv6_cidr_blocks, var.defaults.number_of_computed_egress_with_ipv6_cidr_blocks, 0) - number_of_computed_egress_with_prefix_list_ids = try(each.value.number_of_computed_egress_with_prefix_list_ids, var.defaults.number_of_computed_egress_with_prefix_list_ids, 0) - number_of_computed_egress_with_self = try(each.value.number_of_computed_egress_with_self, var.defaults.number_of_computed_egress_with_self, 0) - number_of_computed_egress_with_source_security_group_id = try(each.value.number_of_computed_egress_with_source_security_group_id, var.defaults.number_of_computed_egress_with_source_security_group_id, 0) - number_of_computed_ingress_cidr_blocks = try(each.value.number_of_computed_ingress_cidr_blocks, var.defaults.number_of_computed_ingress_cidr_blocks, 0) - number_of_computed_ingress_ipv6_cidr_blocks = try(each.value.number_of_computed_ingress_ipv6_cidr_blocks, var.defaults.number_of_computed_ingress_ipv6_cidr_blocks, 0) - number_of_computed_ingress_prefix_list_ids = try(each.value.number_of_computed_ingress_prefix_list_ids, var.defaults.number_of_computed_ingress_prefix_list_ids, 0) - number_of_computed_ingress_rules = try(each.value.number_of_computed_ingress_rules, var.defaults.number_of_computed_ingress_rules, 0) - number_of_computed_ingress_with_cidr_blocks = try(each.value.number_of_computed_ingress_with_cidr_blocks, var.defaults.number_of_computed_ingress_with_cidr_blocks, 0) - number_of_computed_ingress_with_ipv6_cidr_blocks = try(each.value.number_of_computed_ingress_with_ipv6_cidr_blocks, var.defaults.number_of_computed_ingress_with_ipv6_cidr_blocks, 0) - number_of_computed_ingress_with_prefix_list_ids = try(each.value.number_of_computed_ingress_with_prefix_list_ids, var.defaults.number_of_computed_ingress_with_prefix_list_ids, 0) - number_of_computed_ingress_with_self = try(each.value.number_of_computed_ingress_with_self, var.defaults.number_of_computed_ingress_with_self, 0) - number_of_computed_ingress_with_source_security_group_id = try(each.value.number_of_computed_ingress_with_source_security_group_id, var.defaults.number_of_computed_ingress_with_source_security_group_id, 0) - revoke_rules_on_delete = try(each.value.revoke_rules_on_delete, var.defaults.revoke_rules_on_delete, false) - tags = try(each.value.tags, var.defaults.tags, {}) - use_name_prefix = try(each.value.use_name_prefix, var.defaults.use_name_prefix, true) - vpc_id = try(each.value.vpc_id, var.defaults.vpc_id) + auto_computed_egress_rules = try(each.value.auto_computed_egress_rules, var.defaults.auto_computed_egress_rules, []) + auto_computed_egress_with_self = try(each.value.auto_computed_egress_with_self, var.defaults.auto_computed_egress_with_self, []) + auto_computed_ingress_rules = try(each.value.auto_computed_ingress_rules, var.defaults.auto_computed_ingress_rules, []) + auto_computed_ingress_with_self = try(each.value.auto_computed_ingress_with_self, var.defaults.auto_computed_ingress_with_self, []) + auto_egress_rules = try(each.value.auto_egress_rules, var.defaults.auto_egress_rules, ["all-all"]) + auto_egress_with_self = try(each.value.auto_egress_with_self, var.defaults.auto_egress_with_self, []) + auto_ingress_rules = try(each.value.auto_ingress_rules, var.defaults.auto_ingress_rules, ["mssql-tcp", "mssql-udp", "mssql-analytics-tcp", "mssql-broker-tcp"]) + auto_ingress_with_self = try(each.value.auto_ingress_with_self, var.defaults.auto_ingress_with_self, [{ "rule" = "all-all" }]) + auto_number_of_computed_egress_rules = try(each.value.auto_number_of_computed_egress_rules, var.defaults.auto_number_of_computed_egress_rules, 0) + auto_number_of_computed_egress_with_self = try(each.value.auto_number_of_computed_egress_with_self, var.defaults.auto_number_of_computed_egress_with_self, 0) + auto_number_of_computed_ingress_rules = try(each.value.auto_number_of_computed_ingress_rules, var.defaults.auto_number_of_computed_ingress_rules, 0) + auto_number_of_computed_ingress_with_self = try(each.value.auto_number_of_computed_ingress_with_self, var.defaults.auto_number_of_computed_ingress_with_self, 0) + computed_egress_cidr_blocks = try(each.value.computed_egress_cidr_blocks, var.defaults.computed_egress_cidr_blocks, ["0.0.0.0/0"]) + computed_egress_ipv6_cidr_blocks = try(each.value.computed_egress_ipv6_cidr_blocks, var.defaults.computed_egress_ipv6_cidr_blocks, ["::/0"]) + computed_egress_prefix_list_ids = try(each.value.computed_egress_prefix_list_ids, var.defaults.computed_egress_prefix_list_ids, []) + computed_egress_rules = try(each.value.computed_egress_rules, var.defaults.computed_egress_rules, []) + computed_egress_with_cidr_ipv4 = try(each.value.computed_egress_with_cidr_ipv4, var.defaults.computed_egress_with_cidr_ipv4, []) + computed_egress_with_cidr_ipv6 = try(each.value.computed_egress_with_cidr_ipv6, var.defaults.computed_egress_with_cidr_ipv6, []) + computed_egress_with_prefix_list_id = try(each.value.computed_egress_with_prefix_list_id, var.defaults.computed_egress_with_prefix_list_id, []) + computed_egress_with_referenced_security_group_id = try(each.value.computed_egress_with_referenced_security_group_id, var.defaults.computed_egress_with_referenced_security_group_id, []) + computed_egress_with_self = try(each.value.computed_egress_with_self, var.defaults.computed_egress_with_self, []) + computed_ingress_cidr_blocks = try(each.value.computed_ingress_cidr_blocks, var.defaults.computed_ingress_cidr_blocks, []) + computed_ingress_ipv6_cidr_blocks = try(each.value.computed_ingress_ipv6_cidr_blocks, var.defaults.computed_ingress_ipv6_cidr_blocks, []) + computed_ingress_prefix_list_ids = try(each.value.computed_ingress_prefix_list_ids, var.defaults.computed_ingress_prefix_list_ids, []) + computed_ingress_rules = try(each.value.computed_ingress_rules, var.defaults.computed_ingress_rules, []) + computed_ingress_with_cidr_ipv4 = try(each.value.computed_ingress_with_cidr_ipv4, var.defaults.computed_ingress_with_cidr_ipv4, []) + computed_ingress_with_cidr_ipv6 = try(each.value.computed_ingress_with_cidr_ipv6, var.defaults.computed_ingress_with_cidr_ipv6, []) + computed_ingress_with_prefix_list_id = try(each.value.computed_ingress_with_prefix_list_id, var.defaults.computed_ingress_with_prefix_list_id, []) + computed_ingress_with_referenced_security_group_id = try(each.value.computed_ingress_with_referenced_security_group_id, var.defaults.computed_ingress_with_referenced_security_group_id, []) + computed_ingress_with_self = try(each.value.computed_ingress_with_self, var.defaults.computed_ingress_with_self, []) + create = try(each.value.create, var.defaults.create, true) + description = try(each.value.description, var.defaults.description, "Security Group managed by Terraform") + egress_cidr_ipv4 = try(each.value.egress_cidr_ipv4, var.defaults.egress_cidr_ipv4, ["0.0.0.0/0"]) + egress_cidr_ipv6 = try(each.value.egress_cidr_ipv6, var.defaults.egress_cidr_ipv6, ["::/0"]) + egress_prefix_list_ids = try(each.value.egress_prefix_list_ids, var.defaults.egress_prefix_list_ids, []) + egress_rules = try(each.value.egress_rules, var.defaults.egress_rules, []) + egress_with_cidr_ipv4 = try(each.value.egress_with_cidr_ipv4, var.defaults.egress_with_cidr_ipv4, []) + egress_with_cidr_ipv6 = try(each.value.egress_with_cidr_ipv6, var.defaults.egress_with_cidr_ipv6, []) + egress_with_prefix_list_id = try(each.value.egress_with_prefix_list_id, var.defaults.egress_with_prefix_list_id, []) + egress_with_referenced_security_group_id = try(each.value.egress_with_referenced_security_group_id, var.defaults.egress_with_referenced_security_group_id, []) + egress_with_self = try(each.value.egress_with_self, var.defaults.egress_with_self, []) + ingress_cidr_ipv4 = try(each.value.ingress_cidr_ipv4, var.defaults.ingress_cidr_ipv4, []) + ingress_cidr_ipv6 = try(each.value.ingress_cidr_ipv6, var.defaults.ingress_cidr_ipv6, []) + ingress_prefix_list_ids = try(each.value.ingress_prefix_list_ids, var.defaults.ingress_prefix_list_ids, []) + ingress_rules = try(each.value.ingress_rules, var.defaults.ingress_rules, []) + ingress_with_cidr_ipv4 = try(each.value.ingress_with_cidr_ipv4, var.defaults.ingress_with_cidr_ipv4, []) + ingress_with_cidr_ipv6 = try(each.value.ingress_with_cidr_ipv6, var.defaults.ingress_with_cidr_ipv6, []) + ingress_with_prefix_list_id = try(each.value.ingress_with_prefix_list_id, var.defaults.ingress_with_prefix_list_id, []) + ingress_with_referenced_security_group_id = try(each.value.ingress_with_referenced_security_group_id, var.defaults.ingress_with_referenced_security_group_id, []) + ingress_with_self = try(each.value.ingress_with_self, var.defaults.ingress_with_self, []) + name = try(each.value.name, var.defaults.name) + number_of_computed_egress_cidr_blocks = try(each.value.number_of_computed_egress_cidr_blocks, var.defaults.number_of_computed_egress_cidr_blocks, 0) + number_of_computed_egress_ipv6_cidr_blocks = try(each.value.number_of_computed_egress_ipv6_cidr_blocks, var.defaults.number_of_computed_egress_ipv6_cidr_blocks, 0) + number_of_computed_egress_prefix_list_ids = try(each.value.number_of_computed_egress_prefix_list_ids, var.defaults.number_of_computed_egress_prefix_list_ids, 0) + number_of_computed_egress_rules = try(each.value.number_of_computed_egress_rules, var.defaults.number_of_computed_egress_rules, 0) + number_of_computed_egress_with_cidr_ipv4 = try(each.value.number_of_computed_egress_with_cidr_ipv4, var.defaults.number_of_computed_egress_with_cidr_ipv4, 0) + number_of_computed_egress_with_cidr_ipv6 = try(each.value.number_of_computed_egress_with_cidr_ipv6, var.defaults.number_of_computed_egress_with_cidr_ipv6, 0) + number_of_computed_egress_with_prefix_list_id = try(each.value.number_of_computed_egress_with_prefix_list_id, var.defaults.number_of_computed_egress_with_prefix_list_id, 0) + number_of_computed_egress_with_referenced_security_group_id = try(each.value.number_of_computed_egress_with_referenced_security_group_id, var.defaults.number_of_computed_egress_with_referenced_security_group_id, 0) + number_of_computed_egress_with_self = try(each.value.number_of_computed_egress_with_self, var.defaults.number_of_computed_egress_with_self, 0) + number_of_computed_ingress_cidr_blocks = try(each.value.number_of_computed_ingress_cidr_blocks, var.defaults.number_of_computed_ingress_cidr_blocks, 0) + number_of_computed_ingress_ipv6_cidr_blocks = try(each.value.number_of_computed_ingress_ipv6_cidr_blocks, var.defaults.number_of_computed_ingress_ipv6_cidr_blocks, 0) + number_of_computed_ingress_prefix_list_ids = try(each.value.number_of_computed_ingress_prefix_list_ids, var.defaults.number_of_computed_ingress_prefix_list_ids, 0) + number_of_computed_ingress_rules = try(each.value.number_of_computed_ingress_rules, var.defaults.number_of_computed_ingress_rules, 0) + number_of_computed_ingress_with_cidr_ipv4 = try(each.value.number_of_computed_ingress_with_cidr_ipv4, var.defaults.number_of_computed_ingress_with_cidr_ipv4, 0) + number_of_computed_ingress_with_cidr_ipv6 = try(each.value.number_of_computed_ingress_with_cidr_ipv6, var.defaults.number_of_computed_ingress_with_cidr_ipv6, 0) + number_of_computed_ingress_with_prefix_list_id = try(each.value.number_of_computed_ingress_with_prefix_list_id, var.defaults.number_of_computed_ingress_with_prefix_list_id, 0) + number_of_computed_ingress_with_referenced_security_group_id = try(each.value.number_of_computed_ingress_with_referenced_security_group_id, var.defaults.number_of_computed_ingress_with_referenced_security_group_id, 0) + number_of_computed_ingress_with_self = try(each.value.number_of_computed_ingress_with_self, var.defaults.number_of_computed_ingress_with_self, 0) + revoke_rules_on_delete = try(each.value.revoke_rules_on_delete, var.defaults.revoke_rules_on_delete, false) + tags = try(each.value.tags, var.defaults.tags, {}) + use_name_prefix = try(each.value.use_name_prefix, var.defaults.use_name_prefix, true) + vpc_id = try(each.value.vpc_id, var.defaults.vpc_id) } diff --git a/wrappers/mysql/main.tf b/wrappers/mysql/main.tf index 6468a277..2d5ff2fe 100644 --- a/wrappers/mysql/main.tf +++ b/wrappers/mysql/main.tf @@ -3,77 +3,77 @@ module "wrapper" { for_each = var.items - auto_computed_egress_rules = try(each.value.auto_computed_egress_rules, var.defaults.auto_computed_egress_rules, []) - auto_computed_egress_with_self = try(each.value.auto_computed_egress_with_self, var.defaults.auto_computed_egress_with_self, []) - auto_computed_ingress_rules = try(each.value.auto_computed_ingress_rules, var.defaults.auto_computed_ingress_rules, []) - auto_computed_ingress_with_self = try(each.value.auto_computed_ingress_with_self, var.defaults.auto_computed_ingress_with_self, []) - auto_egress_rules = try(each.value.auto_egress_rules, var.defaults.auto_egress_rules, ["all-all"]) - auto_egress_with_self = try(each.value.auto_egress_with_self, var.defaults.auto_egress_with_self, []) - auto_ingress_rules = try(each.value.auto_ingress_rules, var.defaults.auto_ingress_rules, ["mysql-tcp"]) - auto_ingress_with_self = try(each.value.auto_ingress_with_self, var.defaults.auto_ingress_with_self, [{ "rule" = "all-all" }]) - auto_number_of_computed_egress_rules = try(each.value.auto_number_of_computed_egress_rules, var.defaults.auto_number_of_computed_egress_rules, 0) - auto_number_of_computed_egress_with_self = try(each.value.auto_number_of_computed_egress_with_self, var.defaults.auto_number_of_computed_egress_with_self, 0) - auto_number_of_computed_ingress_rules = try(each.value.auto_number_of_computed_ingress_rules, var.defaults.auto_number_of_computed_ingress_rules, 0) - auto_number_of_computed_ingress_with_self = try(each.value.auto_number_of_computed_ingress_with_self, var.defaults.auto_number_of_computed_ingress_with_self, 0) - computed_egress_cidr_blocks = try(each.value.computed_egress_cidr_blocks, var.defaults.computed_egress_cidr_blocks, ["0.0.0.0/0"]) - computed_egress_ipv6_cidr_blocks = try(each.value.computed_egress_ipv6_cidr_blocks, var.defaults.computed_egress_ipv6_cidr_blocks, ["::/0"]) - computed_egress_prefix_list_ids = try(each.value.computed_egress_prefix_list_ids, var.defaults.computed_egress_prefix_list_ids, []) - computed_egress_rules = try(each.value.computed_egress_rules, var.defaults.computed_egress_rules, []) - computed_egress_with_cidr_blocks = try(each.value.computed_egress_with_cidr_blocks, var.defaults.computed_egress_with_cidr_blocks, []) - computed_egress_with_ipv6_cidr_blocks = try(each.value.computed_egress_with_ipv6_cidr_blocks, var.defaults.computed_egress_with_ipv6_cidr_blocks, []) - computed_egress_with_prefix_list_ids = try(each.value.computed_egress_with_prefix_list_ids, var.defaults.computed_egress_with_prefix_list_ids, []) - computed_egress_with_self = try(each.value.computed_egress_with_self, var.defaults.computed_egress_with_self, []) - computed_egress_with_source_security_group_id = try(each.value.computed_egress_with_source_security_group_id, var.defaults.computed_egress_with_source_security_group_id, []) - computed_ingress_cidr_blocks = try(each.value.computed_ingress_cidr_blocks, var.defaults.computed_ingress_cidr_blocks, []) - computed_ingress_ipv6_cidr_blocks = try(each.value.computed_ingress_ipv6_cidr_blocks, var.defaults.computed_ingress_ipv6_cidr_blocks, []) - computed_ingress_prefix_list_ids = try(each.value.computed_ingress_prefix_list_ids, var.defaults.computed_ingress_prefix_list_ids, []) - computed_ingress_rules = try(each.value.computed_ingress_rules, var.defaults.computed_ingress_rules, []) - computed_ingress_with_cidr_blocks = try(each.value.computed_ingress_with_cidr_blocks, var.defaults.computed_ingress_with_cidr_blocks, []) - computed_ingress_with_ipv6_cidr_blocks = try(each.value.computed_ingress_with_ipv6_cidr_blocks, var.defaults.computed_ingress_with_ipv6_cidr_blocks, []) - computed_ingress_with_prefix_list_ids = try(each.value.computed_ingress_with_prefix_list_ids, var.defaults.computed_ingress_with_prefix_list_ids, []) - computed_ingress_with_self = try(each.value.computed_ingress_with_self, var.defaults.computed_ingress_with_self, []) - computed_ingress_with_source_security_group_id = try(each.value.computed_ingress_with_source_security_group_id, var.defaults.computed_ingress_with_source_security_group_id, []) - create = try(each.value.create, var.defaults.create, true) - description = try(each.value.description, var.defaults.description, "Security Group managed by Terraform") - egress_cidr_blocks = try(each.value.egress_cidr_blocks, var.defaults.egress_cidr_blocks, ["0.0.0.0/0"]) - egress_ipv6_cidr_blocks = try(each.value.egress_ipv6_cidr_blocks, var.defaults.egress_ipv6_cidr_blocks, ["::/0"]) - egress_prefix_list_ids = try(each.value.egress_prefix_list_ids, var.defaults.egress_prefix_list_ids, []) - egress_rules = try(each.value.egress_rules, var.defaults.egress_rules, []) - egress_with_cidr_blocks = try(each.value.egress_with_cidr_blocks, var.defaults.egress_with_cidr_blocks, []) - egress_with_ipv6_cidr_blocks = try(each.value.egress_with_ipv6_cidr_blocks, var.defaults.egress_with_ipv6_cidr_blocks, []) - egress_with_prefix_list_ids = try(each.value.egress_with_prefix_list_ids, var.defaults.egress_with_prefix_list_ids, []) - egress_with_self = try(each.value.egress_with_self, var.defaults.egress_with_self, []) - egress_with_source_security_group_id = try(each.value.egress_with_source_security_group_id, var.defaults.egress_with_source_security_group_id, []) - ingress_cidr_blocks = try(each.value.ingress_cidr_blocks, var.defaults.ingress_cidr_blocks, []) - ingress_ipv6_cidr_blocks = try(each.value.ingress_ipv6_cidr_blocks, var.defaults.ingress_ipv6_cidr_blocks, []) - ingress_prefix_list_ids = try(each.value.ingress_prefix_list_ids, var.defaults.ingress_prefix_list_ids, []) - ingress_rules = try(each.value.ingress_rules, var.defaults.ingress_rules, []) - ingress_with_cidr_blocks = try(each.value.ingress_with_cidr_blocks, var.defaults.ingress_with_cidr_blocks, []) - ingress_with_ipv6_cidr_blocks = try(each.value.ingress_with_ipv6_cidr_blocks, var.defaults.ingress_with_ipv6_cidr_blocks, []) - ingress_with_prefix_list_ids = try(each.value.ingress_with_prefix_list_ids, var.defaults.ingress_with_prefix_list_ids, []) - ingress_with_self = try(each.value.ingress_with_self, var.defaults.ingress_with_self, []) - ingress_with_source_security_group_id = try(each.value.ingress_with_source_security_group_id, var.defaults.ingress_with_source_security_group_id, []) - name = try(each.value.name, var.defaults.name) - number_of_computed_egress_cidr_blocks = try(each.value.number_of_computed_egress_cidr_blocks, var.defaults.number_of_computed_egress_cidr_blocks, 0) - number_of_computed_egress_ipv6_cidr_blocks = try(each.value.number_of_computed_egress_ipv6_cidr_blocks, var.defaults.number_of_computed_egress_ipv6_cidr_blocks, 0) - number_of_computed_egress_prefix_list_ids = try(each.value.number_of_computed_egress_prefix_list_ids, var.defaults.number_of_computed_egress_prefix_list_ids, 0) - number_of_computed_egress_rules = try(each.value.number_of_computed_egress_rules, var.defaults.number_of_computed_egress_rules, 0) - number_of_computed_egress_with_cidr_blocks = try(each.value.number_of_computed_egress_with_cidr_blocks, var.defaults.number_of_computed_egress_with_cidr_blocks, 0) - number_of_computed_egress_with_ipv6_cidr_blocks = try(each.value.number_of_computed_egress_with_ipv6_cidr_blocks, var.defaults.number_of_computed_egress_with_ipv6_cidr_blocks, 0) - number_of_computed_egress_with_prefix_list_ids = try(each.value.number_of_computed_egress_with_prefix_list_ids, var.defaults.number_of_computed_egress_with_prefix_list_ids, 0) - number_of_computed_egress_with_self = try(each.value.number_of_computed_egress_with_self, var.defaults.number_of_computed_egress_with_self, 0) - number_of_computed_egress_with_source_security_group_id = try(each.value.number_of_computed_egress_with_source_security_group_id, var.defaults.number_of_computed_egress_with_source_security_group_id, 0) - number_of_computed_ingress_cidr_blocks = try(each.value.number_of_computed_ingress_cidr_blocks, var.defaults.number_of_computed_ingress_cidr_blocks, 0) - number_of_computed_ingress_ipv6_cidr_blocks = try(each.value.number_of_computed_ingress_ipv6_cidr_blocks, var.defaults.number_of_computed_ingress_ipv6_cidr_blocks, 0) - number_of_computed_ingress_prefix_list_ids = try(each.value.number_of_computed_ingress_prefix_list_ids, var.defaults.number_of_computed_ingress_prefix_list_ids, 0) - number_of_computed_ingress_rules = try(each.value.number_of_computed_ingress_rules, var.defaults.number_of_computed_ingress_rules, 0) - number_of_computed_ingress_with_cidr_blocks = try(each.value.number_of_computed_ingress_with_cidr_blocks, var.defaults.number_of_computed_ingress_with_cidr_blocks, 0) - number_of_computed_ingress_with_ipv6_cidr_blocks = try(each.value.number_of_computed_ingress_with_ipv6_cidr_blocks, var.defaults.number_of_computed_ingress_with_ipv6_cidr_blocks, 0) - number_of_computed_ingress_with_prefix_list_ids = try(each.value.number_of_computed_ingress_with_prefix_list_ids, var.defaults.number_of_computed_ingress_with_prefix_list_ids, 0) - number_of_computed_ingress_with_self = try(each.value.number_of_computed_ingress_with_self, var.defaults.number_of_computed_ingress_with_self, 0) - number_of_computed_ingress_with_source_security_group_id = try(each.value.number_of_computed_ingress_with_source_security_group_id, var.defaults.number_of_computed_ingress_with_source_security_group_id, 0) - revoke_rules_on_delete = try(each.value.revoke_rules_on_delete, var.defaults.revoke_rules_on_delete, false) - tags = try(each.value.tags, var.defaults.tags, {}) - use_name_prefix = try(each.value.use_name_prefix, var.defaults.use_name_prefix, true) - vpc_id = try(each.value.vpc_id, var.defaults.vpc_id) + auto_computed_egress_rules = try(each.value.auto_computed_egress_rules, var.defaults.auto_computed_egress_rules, []) + auto_computed_egress_with_self = try(each.value.auto_computed_egress_with_self, var.defaults.auto_computed_egress_with_self, []) + auto_computed_ingress_rules = try(each.value.auto_computed_ingress_rules, var.defaults.auto_computed_ingress_rules, []) + auto_computed_ingress_with_self = try(each.value.auto_computed_ingress_with_self, var.defaults.auto_computed_ingress_with_self, []) + auto_egress_rules = try(each.value.auto_egress_rules, var.defaults.auto_egress_rules, ["all-all"]) + auto_egress_with_self = try(each.value.auto_egress_with_self, var.defaults.auto_egress_with_self, []) + auto_ingress_rules = try(each.value.auto_ingress_rules, var.defaults.auto_ingress_rules, ["mysql-tcp"]) + auto_ingress_with_self = try(each.value.auto_ingress_with_self, var.defaults.auto_ingress_with_self, [{ "rule" = "all-all" }]) + auto_number_of_computed_egress_rules = try(each.value.auto_number_of_computed_egress_rules, var.defaults.auto_number_of_computed_egress_rules, 0) + auto_number_of_computed_egress_with_self = try(each.value.auto_number_of_computed_egress_with_self, var.defaults.auto_number_of_computed_egress_with_self, 0) + auto_number_of_computed_ingress_rules = try(each.value.auto_number_of_computed_ingress_rules, var.defaults.auto_number_of_computed_ingress_rules, 0) + auto_number_of_computed_ingress_with_self = try(each.value.auto_number_of_computed_ingress_with_self, var.defaults.auto_number_of_computed_ingress_with_self, 0) + computed_egress_cidr_blocks = try(each.value.computed_egress_cidr_blocks, var.defaults.computed_egress_cidr_blocks, ["0.0.0.0/0"]) + computed_egress_ipv6_cidr_blocks = try(each.value.computed_egress_ipv6_cidr_blocks, var.defaults.computed_egress_ipv6_cidr_blocks, ["::/0"]) + computed_egress_prefix_list_ids = try(each.value.computed_egress_prefix_list_ids, var.defaults.computed_egress_prefix_list_ids, []) + computed_egress_rules = try(each.value.computed_egress_rules, var.defaults.computed_egress_rules, []) + computed_egress_with_cidr_ipv4 = try(each.value.computed_egress_with_cidr_ipv4, var.defaults.computed_egress_with_cidr_ipv4, []) + computed_egress_with_cidr_ipv6 = try(each.value.computed_egress_with_cidr_ipv6, var.defaults.computed_egress_with_cidr_ipv6, []) + computed_egress_with_prefix_list_id = try(each.value.computed_egress_with_prefix_list_id, var.defaults.computed_egress_with_prefix_list_id, []) + computed_egress_with_referenced_security_group_id = try(each.value.computed_egress_with_referenced_security_group_id, var.defaults.computed_egress_with_referenced_security_group_id, []) + computed_egress_with_self = try(each.value.computed_egress_with_self, var.defaults.computed_egress_with_self, []) + computed_ingress_cidr_blocks = try(each.value.computed_ingress_cidr_blocks, var.defaults.computed_ingress_cidr_blocks, []) + computed_ingress_ipv6_cidr_blocks = try(each.value.computed_ingress_ipv6_cidr_blocks, var.defaults.computed_ingress_ipv6_cidr_blocks, []) + computed_ingress_prefix_list_ids = try(each.value.computed_ingress_prefix_list_ids, var.defaults.computed_ingress_prefix_list_ids, []) + computed_ingress_rules = try(each.value.computed_ingress_rules, var.defaults.computed_ingress_rules, []) + computed_ingress_with_cidr_ipv4 = try(each.value.computed_ingress_with_cidr_ipv4, var.defaults.computed_ingress_with_cidr_ipv4, []) + computed_ingress_with_cidr_ipv6 = try(each.value.computed_ingress_with_cidr_ipv6, var.defaults.computed_ingress_with_cidr_ipv6, []) + computed_ingress_with_prefix_list_id = try(each.value.computed_ingress_with_prefix_list_id, var.defaults.computed_ingress_with_prefix_list_id, []) + computed_ingress_with_referenced_security_group_id = try(each.value.computed_ingress_with_referenced_security_group_id, var.defaults.computed_ingress_with_referenced_security_group_id, []) + computed_ingress_with_self = try(each.value.computed_ingress_with_self, var.defaults.computed_ingress_with_self, []) + create = try(each.value.create, var.defaults.create, true) + description = try(each.value.description, var.defaults.description, "Security Group managed by Terraform") + egress_cidr_ipv4 = try(each.value.egress_cidr_ipv4, var.defaults.egress_cidr_ipv4, ["0.0.0.0/0"]) + egress_cidr_ipv6 = try(each.value.egress_cidr_ipv6, var.defaults.egress_cidr_ipv6, ["::/0"]) + egress_prefix_list_ids = try(each.value.egress_prefix_list_ids, var.defaults.egress_prefix_list_ids, []) + egress_rules = try(each.value.egress_rules, var.defaults.egress_rules, []) + egress_with_cidr_ipv4 = try(each.value.egress_with_cidr_ipv4, var.defaults.egress_with_cidr_ipv4, []) + egress_with_cidr_ipv6 = try(each.value.egress_with_cidr_ipv6, var.defaults.egress_with_cidr_ipv6, []) + egress_with_prefix_list_id = try(each.value.egress_with_prefix_list_id, var.defaults.egress_with_prefix_list_id, []) + egress_with_referenced_security_group_id = try(each.value.egress_with_referenced_security_group_id, var.defaults.egress_with_referenced_security_group_id, []) + egress_with_self = try(each.value.egress_with_self, var.defaults.egress_with_self, []) + ingress_cidr_ipv4 = try(each.value.ingress_cidr_ipv4, var.defaults.ingress_cidr_ipv4, []) + ingress_cidr_ipv6 = try(each.value.ingress_cidr_ipv6, var.defaults.ingress_cidr_ipv6, []) + ingress_prefix_list_ids = try(each.value.ingress_prefix_list_ids, var.defaults.ingress_prefix_list_ids, []) + ingress_rules = try(each.value.ingress_rules, var.defaults.ingress_rules, []) + ingress_with_cidr_ipv4 = try(each.value.ingress_with_cidr_ipv4, var.defaults.ingress_with_cidr_ipv4, []) + ingress_with_cidr_ipv6 = try(each.value.ingress_with_cidr_ipv6, var.defaults.ingress_with_cidr_ipv6, []) + ingress_with_prefix_list_id = try(each.value.ingress_with_prefix_list_id, var.defaults.ingress_with_prefix_list_id, []) + ingress_with_referenced_security_group_id = try(each.value.ingress_with_referenced_security_group_id, var.defaults.ingress_with_referenced_security_group_id, []) + ingress_with_self = try(each.value.ingress_with_self, var.defaults.ingress_with_self, []) + name = try(each.value.name, var.defaults.name) + number_of_computed_egress_cidr_blocks = try(each.value.number_of_computed_egress_cidr_blocks, var.defaults.number_of_computed_egress_cidr_blocks, 0) + number_of_computed_egress_ipv6_cidr_blocks = try(each.value.number_of_computed_egress_ipv6_cidr_blocks, var.defaults.number_of_computed_egress_ipv6_cidr_blocks, 0) + number_of_computed_egress_prefix_list_ids = try(each.value.number_of_computed_egress_prefix_list_ids, var.defaults.number_of_computed_egress_prefix_list_ids, 0) + number_of_computed_egress_rules = try(each.value.number_of_computed_egress_rules, var.defaults.number_of_computed_egress_rules, 0) + number_of_computed_egress_with_cidr_ipv4 = try(each.value.number_of_computed_egress_with_cidr_ipv4, var.defaults.number_of_computed_egress_with_cidr_ipv4, 0) + number_of_computed_egress_with_cidr_ipv6 = try(each.value.number_of_computed_egress_with_cidr_ipv6, var.defaults.number_of_computed_egress_with_cidr_ipv6, 0) + number_of_computed_egress_with_prefix_list_id = try(each.value.number_of_computed_egress_with_prefix_list_id, var.defaults.number_of_computed_egress_with_prefix_list_id, 0) + number_of_computed_egress_with_referenced_security_group_id = try(each.value.number_of_computed_egress_with_referenced_security_group_id, var.defaults.number_of_computed_egress_with_referenced_security_group_id, 0) + number_of_computed_egress_with_self = try(each.value.number_of_computed_egress_with_self, var.defaults.number_of_computed_egress_with_self, 0) + number_of_computed_ingress_cidr_blocks = try(each.value.number_of_computed_ingress_cidr_blocks, var.defaults.number_of_computed_ingress_cidr_blocks, 0) + number_of_computed_ingress_ipv6_cidr_blocks = try(each.value.number_of_computed_ingress_ipv6_cidr_blocks, var.defaults.number_of_computed_ingress_ipv6_cidr_blocks, 0) + number_of_computed_ingress_prefix_list_ids = try(each.value.number_of_computed_ingress_prefix_list_ids, var.defaults.number_of_computed_ingress_prefix_list_ids, 0) + number_of_computed_ingress_rules = try(each.value.number_of_computed_ingress_rules, var.defaults.number_of_computed_ingress_rules, 0) + number_of_computed_ingress_with_cidr_ipv4 = try(each.value.number_of_computed_ingress_with_cidr_ipv4, var.defaults.number_of_computed_ingress_with_cidr_ipv4, 0) + number_of_computed_ingress_with_cidr_ipv6 = try(each.value.number_of_computed_ingress_with_cidr_ipv6, var.defaults.number_of_computed_ingress_with_cidr_ipv6, 0) + number_of_computed_ingress_with_prefix_list_id = try(each.value.number_of_computed_ingress_with_prefix_list_id, var.defaults.number_of_computed_ingress_with_prefix_list_id, 0) + number_of_computed_ingress_with_referenced_security_group_id = try(each.value.number_of_computed_ingress_with_referenced_security_group_id, var.defaults.number_of_computed_ingress_with_referenced_security_group_id, 0) + number_of_computed_ingress_with_self = try(each.value.number_of_computed_ingress_with_self, var.defaults.number_of_computed_ingress_with_self, 0) + revoke_rules_on_delete = try(each.value.revoke_rules_on_delete, var.defaults.revoke_rules_on_delete, false) + tags = try(each.value.tags, var.defaults.tags, {}) + use_name_prefix = try(each.value.use_name_prefix, var.defaults.use_name_prefix, true) + vpc_id = try(each.value.vpc_id, var.defaults.vpc_id) } diff --git a/wrappers/nfs/main.tf b/wrappers/nfs/main.tf index 598d3e91..60d6fcb6 100644 --- a/wrappers/nfs/main.tf +++ b/wrappers/nfs/main.tf @@ -3,77 +3,77 @@ module "wrapper" { for_each = var.items - auto_computed_egress_rules = try(each.value.auto_computed_egress_rules, var.defaults.auto_computed_egress_rules, []) - auto_computed_egress_with_self = try(each.value.auto_computed_egress_with_self, var.defaults.auto_computed_egress_with_self, []) - auto_computed_ingress_rules = try(each.value.auto_computed_ingress_rules, var.defaults.auto_computed_ingress_rules, []) - auto_computed_ingress_with_self = try(each.value.auto_computed_ingress_with_self, var.defaults.auto_computed_ingress_with_self, []) - auto_egress_rules = try(each.value.auto_egress_rules, var.defaults.auto_egress_rules, ["all-all"]) - auto_egress_with_self = try(each.value.auto_egress_with_self, var.defaults.auto_egress_with_self, []) - auto_ingress_rules = try(each.value.auto_ingress_rules, var.defaults.auto_ingress_rules, ["nfs-tcp"]) - auto_ingress_with_self = try(each.value.auto_ingress_with_self, var.defaults.auto_ingress_with_self, [{ "rule" = "all-all" }]) - auto_number_of_computed_egress_rules = try(each.value.auto_number_of_computed_egress_rules, var.defaults.auto_number_of_computed_egress_rules, 0) - auto_number_of_computed_egress_with_self = try(each.value.auto_number_of_computed_egress_with_self, var.defaults.auto_number_of_computed_egress_with_self, 0) - auto_number_of_computed_ingress_rules = try(each.value.auto_number_of_computed_ingress_rules, var.defaults.auto_number_of_computed_ingress_rules, 0) - auto_number_of_computed_ingress_with_self = try(each.value.auto_number_of_computed_ingress_with_self, var.defaults.auto_number_of_computed_ingress_with_self, 0) - computed_egress_cidr_blocks = try(each.value.computed_egress_cidr_blocks, var.defaults.computed_egress_cidr_blocks, ["0.0.0.0/0"]) - computed_egress_ipv6_cidr_blocks = try(each.value.computed_egress_ipv6_cidr_blocks, var.defaults.computed_egress_ipv6_cidr_blocks, ["::/0"]) - computed_egress_prefix_list_ids = try(each.value.computed_egress_prefix_list_ids, var.defaults.computed_egress_prefix_list_ids, []) - computed_egress_rules = try(each.value.computed_egress_rules, var.defaults.computed_egress_rules, []) - computed_egress_with_cidr_blocks = try(each.value.computed_egress_with_cidr_blocks, var.defaults.computed_egress_with_cidr_blocks, []) - computed_egress_with_ipv6_cidr_blocks = try(each.value.computed_egress_with_ipv6_cidr_blocks, var.defaults.computed_egress_with_ipv6_cidr_blocks, []) - computed_egress_with_prefix_list_ids = try(each.value.computed_egress_with_prefix_list_ids, var.defaults.computed_egress_with_prefix_list_ids, []) - computed_egress_with_self = try(each.value.computed_egress_with_self, var.defaults.computed_egress_with_self, []) - computed_egress_with_source_security_group_id = try(each.value.computed_egress_with_source_security_group_id, var.defaults.computed_egress_with_source_security_group_id, []) - computed_ingress_cidr_blocks = try(each.value.computed_ingress_cidr_blocks, var.defaults.computed_ingress_cidr_blocks, []) - computed_ingress_ipv6_cidr_blocks = try(each.value.computed_ingress_ipv6_cidr_blocks, var.defaults.computed_ingress_ipv6_cidr_blocks, []) - computed_ingress_prefix_list_ids = try(each.value.computed_ingress_prefix_list_ids, var.defaults.computed_ingress_prefix_list_ids, []) - computed_ingress_rules = try(each.value.computed_ingress_rules, var.defaults.computed_ingress_rules, []) - computed_ingress_with_cidr_blocks = try(each.value.computed_ingress_with_cidr_blocks, var.defaults.computed_ingress_with_cidr_blocks, []) - computed_ingress_with_ipv6_cidr_blocks = try(each.value.computed_ingress_with_ipv6_cidr_blocks, var.defaults.computed_ingress_with_ipv6_cidr_blocks, []) - computed_ingress_with_prefix_list_ids = try(each.value.computed_ingress_with_prefix_list_ids, var.defaults.computed_ingress_with_prefix_list_ids, []) - computed_ingress_with_self = try(each.value.computed_ingress_with_self, var.defaults.computed_ingress_with_self, []) - computed_ingress_with_source_security_group_id = try(each.value.computed_ingress_with_source_security_group_id, var.defaults.computed_ingress_with_source_security_group_id, []) - create = try(each.value.create, var.defaults.create, true) - description = try(each.value.description, var.defaults.description, "Security Group managed by Terraform") - egress_cidr_blocks = try(each.value.egress_cidr_blocks, var.defaults.egress_cidr_blocks, ["0.0.0.0/0"]) - egress_ipv6_cidr_blocks = try(each.value.egress_ipv6_cidr_blocks, var.defaults.egress_ipv6_cidr_blocks, ["::/0"]) - egress_prefix_list_ids = try(each.value.egress_prefix_list_ids, var.defaults.egress_prefix_list_ids, []) - egress_rules = try(each.value.egress_rules, var.defaults.egress_rules, []) - egress_with_cidr_blocks = try(each.value.egress_with_cidr_blocks, var.defaults.egress_with_cidr_blocks, []) - egress_with_ipv6_cidr_blocks = try(each.value.egress_with_ipv6_cidr_blocks, var.defaults.egress_with_ipv6_cidr_blocks, []) - egress_with_prefix_list_ids = try(each.value.egress_with_prefix_list_ids, var.defaults.egress_with_prefix_list_ids, []) - egress_with_self = try(each.value.egress_with_self, var.defaults.egress_with_self, []) - egress_with_source_security_group_id = try(each.value.egress_with_source_security_group_id, var.defaults.egress_with_source_security_group_id, []) - ingress_cidr_blocks = try(each.value.ingress_cidr_blocks, var.defaults.ingress_cidr_blocks, []) - ingress_ipv6_cidr_blocks = try(each.value.ingress_ipv6_cidr_blocks, var.defaults.ingress_ipv6_cidr_blocks, []) - ingress_prefix_list_ids = try(each.value.ingress_prefix_list_ids, var.defaults.ingress_prefix_list_ids, []) - ingress_rules = try(each.value.ingress_rules, var.defaults.ingress_rules, []) - ingress_with_cidr_blocks = try(each.value.ingress_with_cidr_blocks, var.defaults.ingress_with_cidr_blocks, []) - ingress_with_ipv6_cidr_blocks = try(each.value.ingress_with_ipv6_cidr_blocks, var.defaults.ingress_with_ipv6_cidr_blocks, []) - ingress_with_prefix_list_ids = try(each.value.ingress_with_prefix_list_ids, var.defaults.ingress_with_prefix_list_ids, []) - ingress_with_self = try(each.value.ingress_with_self, var.defaults.ingress_with_self, []) - ingress_with_source_security_group_id = try(each.value.ingress_with_source_security_group_id, var.defaults.ingress_with_source_security_group_id, []) - name = try(each.value.name, var.defaults.name) - number_of_computed_egress_cidr_blocks = try(each.value.number_of_computed_egress_cidr_blocks, var.defaults.number_of_computed_egress_cidr_blocks, 0) - number_of_computed_egress_ipv6_cidr_blocks = try(each.value.number_of_computed_egress_ipv6_cidr_blocks, var.defaults.number_of_computed_egress_ipv6_cidr_blocks, 0) - number_of_computed_egress_prefix_list_ids = try(each.value.number_of_computed_egress_prefix_list_ids, var.defaults.number_of_computed_egress_prefix_list_ids, 0) - number_of_computed_egress_rules = try(each.value.number_of_computed_egress_rules, var.defaults.number_of_computed_egress_rules, 0) - number_of_computed_egress_with_cidr_blocks = try(each.value.number_of_computed_egress_with_cidr_blocks, var.defaults.number_of_computed_egress_with_cidr_blocks, 0) - number_of_computed_egress_with_ipv6_cidr_blocks = try(each.value.number_of_computed_egress_with_ipv6_cidr_blocks, var.defaults.number_of_computed_egress_with_ipv6_cidr_blocks, 0) - number_of_computed_egress_with_prefix_list_ids = try(each.value.number_of_computed_egress_with_prefix_list_ids, var.defaults.number_of_computed_egress_with_prefix_list_ids, 0) - number_of_computed_egress_with_self = try(each.value.number_of_computed_egress_with_self, var.defaults.number_of_computed_egress_with_self, 0) - number_of_computed_egress_with_source_security_group_id = try(each.value.number_of_computed_egress_with_source_security_group_id, var.defaults.number_of_computed_egress_with_source_security_group_id, 0) - number_of_computed_ingress_cidr_blocks = try(each.value.number_of_computed_ingress_cidr_blocks, var.defaults.number_of_computed_ingress_cidr_blocks, 0) - number_of_computed_ingress_ipv6_cidr_blocks = try(each.value.number_of_computed_ingress_ipv6_cidr_blocks, var.defaults.number_of_computed_ingress_ipv6_cidr_blocks, 0) - number_of_computed_ingress_prefix_list_ids = try(each.value.number_of_computed_ingress_prefix_list_ids, var.defaults.number_of_computed_ingress_prefix_list_ids, 0) - number_of_computed_ingress_rules = try(each.value.number_of_computed_ingress_rules, var.defaults.number_of_computed_ingress_rules, 0) - number_of_computed_ingress_with_cidr_blocks = try(each.value.number_of_computed_ingress_with_cidr_blocks, var.defaults.number_of_computed_ingress_with_cidr_blocks, 0) - number_of_computed_ingress_with_ipv6_cidr_blocks = try(each.value.number_of_computed_ingress_with_ipv6_cidr_blocks, var.defaults.number_of_computed_ingress_with_ipv6_cidr_blocks, 0) - number_of_computed_ingress_with_prefix_list_ids = try(each.value.number_of_computed_ingress_with_prefix_list_ids, var.defaults.number_of_computed_ingress_with_prefix_list_ids, 0) - number_of_computed_ingress_with_self = try(each.value.number_of_computed_ingress_with_self, var.defaults.number_of_computed_ingress_with_self, 0) - number_of_computed_ingress_with_source_security_group_id = try(each.value.number_of_computed_ingress_with_source_security_group_id, var.defaults.number_of_computed_ingress_with_source_security_group_id, 0) - revoke_rules_on_delete = try(each.value.revoke_rules_on_delete, var.defaults.revoke_rules_on_delete, false) - tags = try(each.value.tags, var.defaults.tags, {}) - use_name_prefix = try(each.value.use_name_prefix, var.defaults.use_name_prefix, true) - vpc_id = try(each.value.vpc_id, var.defaults.vpc_id) + auto_computed_egress_rules = try(each.value.auto_computed_egress_rules, var.defaults.auto_computed_egress_rules, []) + auto_computed_egress_with_self = try(each.value.auto_computed_egress_with_self, var.defaults.auto_computed_egress_with_self, []) + auto_computed_ingress_rules = try(each.value.auto_computed_ingress_rules, var.defaults.auto_computed_ingress_rules, []) + auto_computed_ingress_with_self = try(each.value.auto_computed_ingress_with_self, var.defaults.auto_computed_ingress_with_self, []) + auto_egress_rules = try(each.value.auto_egress_rules, var.defaults.auto_egress_rules, ["all-all"]) + auto_egress_with_self = try(each.value.auto_egress_with_self, var.defaults.auto_egress_with_self, []) + auto_ingress_rules = try(each.value.auto_ingress_rules, var.defaults.auto_ingress_rules, ["nfs-tcp"]) + auto_ingress_with_self = try(each.value.auto_ingress_with_self, var.defaults.auto_ingress_with_self, [{ "rule" = "all-all" }]) + auto_number_of_computed_egress_rules = try(each.value.auto_number_of_computed_egress_rules, var.defaults.auto_number_of_computed_egress_rules, 0) + auto_number_of_computed_egress_with_self = try(each.value.auto_number_of_computed_egress_with_self, var.defaults.auto_number_of_computed_egress_with_self, 0) + auto_number_of_computed_ingress_rules = try(each.value.auto_number_of_computed_ingress_rules, var.defaults.auto_number_of_computed_ingress_rules, 0) + auto_number_of_computed_ingress_with_self = try(each.value.auto_number_of_computed_ingress_with_self, var.defaults.auto_number_of_computed_ingress_with_self, 0) + computed_egress_cidr_blocks = try(each.value.computed_egress_cidr_blocks, var.defaults.computed_egress_cidr_blocks, ["0.0.0.0/0"]) + computed_egress_ipv6_cidr_blocks = try(each.value.computed_egress_ipv6_cidr_blocks, var.defaults.computed_egress_ipv6_cidr_blocks, ["::/0"]) + computed_egress_prefix_list_ids = try(each.value.computed_egress_prefix_list_ids, var.defaults.computed_egress_prefix_list_ids, []) + computed_egress_rules = try(each.value.computed_egress_rules, var.defaults.computed_egress_rules, []) + computed_egress_with_cidr_ipv4 = try(each.value.computed_egress_with_cidr_ipv4, var.defaults.computed_egress_with_cidr_ipv4, []) + computed_egress_with_cidr_ipv6 = try(each.value.computed_egress_with_cidr_ipv6, var.defaults.computed_egress_with_cidr_ipv6, []) + computed_egress_with_prefix_list_id = try(each.value.computed_egress_with_prefix_list_id, var.defaults.computed_egress_with_prefix_list_id, []) + computed_egress_with_referenced_security_group_id = try(each.value.computed_egress_with_referenced_security_group_id, var.defaults.computed_egress_with_referenced_security_group_id, []) + computed_egress_with_self = try(each.value.computed_egress_with_self, var.defaults.computed_egress_with_self, []) + computed_ingress_cidr_blocks = try(each.value.computed_ingress_cidr_blocks, var.defaults.computed_ingress_cidr_blocks, []) + computed_ingress_ipv6_cidr_blocks = try(each.value.computed_ingress_ipv6_cidr_blocks, var.defaults.computed_ingress_ipv6_cidr_blocks, []) + computed_ingress_prefix_list_ids = try(each.value.computed_ingress_prefix_list_ids, var.defaults.computed_ingress_prefix_list_ids, []) + computed_ingress_rules = try(each.value.computed_ingress_rules, var.defaults.computed_ingress_rules, []) + computed_ingress_with_cidr_ipv4 = try(each.value.computed_ingress_with_cidr_ipv4, var.defaults.computed_ingress_with_cidr_ipv4, []) + computed_ingress_with_cidr_ipv6 = try(each.value.computed_ingress_with_cidr_ipv6, var.defaults.computed_ingress_with_cidr_ipv6, []) + computed_ingress_with_prefix_list_id = try(each.value.computed_ingress_with_prefix_list_id, var.defaults.computed_ingress_with_prefix_list_id, []) + computed_ingress_with_referenced_security_group_id = try(each.value.computed_ingress_with_referenced_security_group_id, var.defaults.computed_ingress_with_referenced_security_group_id, []) + computed_ingress_with_self = try(each.value.computed_ingress_with_self, var.defaults.computed_ingress_with_self, []) + create = try(each.value.create, var.defaults.create, true) + description = try(each.value.description, var.defaults.description, "Security Group managed by Terraform") + egress_cidr_ipv4 = try(each.value.egress_cidr_ipv4, var.defaults.egress_cidr_ipv4, ["0.0.0.0/0"]) + egress_cidr_ipv6 = try(each.value.egress_cidr_ipv6, var.defaults.egress_cidr_ipv6, ["::/0"]) + egress_prefix_list_ids = try(each.value.egress_prefix_list_ids, var.defaults.egress_prefix_list_ids, []) + egress_rules = try(each.value.egress_rules, var.defaults.egress_rules, []) + egress_with_cidr_ipv4 = try(each.value.egress_with_cidr_ipv4, var.defaults.egress_with_cidr_ipv4, []) + egress_with_cidr_ipv6 = try(each.value.egress_with_cidr_ipv6, var.defaults.egress_with_cidr_ipv6, []) + egress_with_prefix_list_id = try(each.value.egress_with_prefix_list_id, var.defaults.egress_with_prefix_list_id, []) + egress_with_referenced_security_group_id = try(each.value.egress_with_referenced_security_group_id, var.defaults.egress_with_referenced_security_group_id, []) + egress_with_self = try(each.value.egress_with_self, var.defaults.egress_with_self, []) + ingress_cidr_ipv4 = try(each.value.ingress_cidr_ipv4, var.defaults.ingress_cidr_ipv4, []) + ingress_cidr_ipv6 = try(each.value.ingress_cidr_ipv6, var.defaults.ingress_cidr_ipv6, []) + ingress_prefix_list_ids = try(each.value.ingress_prefix_list_ids, var.defaults.ingress_prefix_list_ids, []) + ingress_rules = try(each.value.ingress_rules, var.defaults.ingress_rules, []) + ingress_with_cidr_ipv4 = try(each.value.ingress_with_cidr_ipv4, var.defaults.ingress_with_cidr_ipv4, []) + ingress_with_cidr_ipv6 = try(each.value.ingress_with_cidr_ipv6, var.defaults.ingress_with_cidr_ipv6, []) + ingress_with_prefix_list_id = try(each.value.ingress_with_prefix_list_id, var.defaults.ingress_with_prefix_list_id, []) + ingress_with_referenced_security_group_id = try(each.value.ingress_with_referenced_security_group_id, var.defaults.ingress_with_referenced_security_group_id, []) + ingress_with_self = try(each.value.ingress_with_self, var.defaults.ingress_with_self, []) + name = try(each.value.name, var.defaults.name) + number_of_computed_egress_cidr_blocks = try(each.value.number_of_computed_egress_cidr_blocks, var.defaults.number_of_computed_egress_cidr_blocks, 0) + number_of_computed_egress_ipv6_cidr_blocks = try(each.value.number_of_computed_egress_ipv6_cidr_blocks, var.defaults.number_of_computed_egress_ipv6_cidr_blocks, 0) + number_of_computed_egress_prefix_list_ids = try(each.value.number_of_computed_egress_prefix_list_ids, var.defaults.number_of_computed_egress_prefix_list_ids, 0) + number_of_computed_egress_rules = try(each.value.number_of_computed_egress_rules, var.defaults.number_of_computed_egress_rules, 0) + number_of_computed_egress_with_cidr_ipv4 = try(each.value.number_of_computed_egress_with_cidr_ipv4, var.defaults.number_of_computed_egress_with_cidr_ipv4, 0) + number_of_computed_egress_with_cidr_ipv6 = try(each.value.number_of_computed_egress_with_cidr_ipv6, var.defaults.number_of_computed_egress_with_cidr_ipv6, 0) + number_of_computed_egress_with_prefix_list_id = try(each.value.number_of_computed_egress_with_prefix_list_id, var.defaults.number_of_computed_egress_with_prefix_list_id, 0) + number_of_computed_egress_with_referenced_security_group_id = try(each.value.number_of_computed_egress_with_referenced_security_group_id, var.defaults.number_of_computed_egress_with_referenced_security_group_id, 0) + number_of_computed_egress_with_self = try(each.value.number_of_computed_egress_with_self, var.defaults.number_of_computed_egress_with_self, 0) + number_of_computed_ingress_cidr_blocks = try(each.value.number_of_computed_ingress_cidr_blocks, var.defaults.number_of_computed_ingress_cidr_blocks, 0) + number_of_computed_ingress_ipv6_cidr_blocks = try(each.value.number_of_computed_ingress_ipv6_cidr_blocks, var.defaults.number_of_computed_ingress_ipv6_cidr_blocks, 0) + number_of_computed_ingress_prefix_list_ids = try(each.value.number_of_computed_ingress_prefix_list_ids, var.defaults.number_of_computed_ingress_prefix_list_ids, 0) + number_of_computed_ingress_rules = try(each.value.number_of_computed_ingress_rules, var.defaults.number_of_computed_ingress_rules, 0) + number_of_computed_ingress_with_cidr_ipv4 = try(each.value.number_of_computed_ingress_with_cidr_ipv4, var.defaults.number_of_computed_ingress_with_cidr_ipv4, 0) + number_of_computed_ingress_with_cidr_ipv6 = try(each.value.number_of_computed_ingress_with_cidr_ipv6, var.defaults.number_of_computed_ingress_with_cidr_ipv6, 0) + number_of_computed_ingress_with_prefix_list_id = try(each.value.number_of_computed_ingress_with_prefix_list_id, var.defaults.number_of_computed_ingress_with_prefix_list_id, 0) + number_of_computed_ingress_with_referenced_security_group_id = try(each.value.number_of_computed_ingress_with_referenced_security_group_id, var.defaults.number_of_computed_ingress_with_referenced_security_group_id, 0) + number_of_computed_ingress_with_self = try(each.value.number_of_computed_ingress_with_self, var.defaults.number_of_computed_ingress_with_self, 0) + revoke_rules_on_delete = try(each.value.revoke_rules_on_delete, var.defaults.revoke_rules_on_delete, false) + tags = try(each.value.tags, var.defaults.tags, {}) + use_name_prefix = try(each.value.use_name_prefix, var.defaults.use_name_prefix, true) + vpc_id = try(each.value.vpc_id, var.defaults.vpc_id) } diff --git a/wrappers/nomad/main.tf b/wrappers/nomad/main.tf index 44a6177d..c0513adf 100644 --- a/wrappers/nomad/main.tf +++ b/wrappers/nomad/main.tf @@ -3,77 +3,77 @@ module "wrapper" { for_each = var.items - auto_computed_egress_rules = try(each.value.auto_computed_egress_rules, var.defaults.auto_computed_egress_rules, []) - auto_computed_egress_with_self = try(each.value.auto_computed_egress_with_self, var.defaults.auto_computed_egress_with_self, []) - auto_computed_ingress_rules = try(each.value.auto_computed_ingress_rules, var.defaults.auto_computed_ingress_rules, []) - auto_computed_ingress_with_self = try(each.value.auto_computed_ingress_with_self, var.defaults.auto_computed_ingress_with_self, []) - auto_egress_rules = try(each.value.auto_egress_rules, var.defaults.auto_egress_rules, ["all-all"]) - auto_egress_with_self = try(each.value.auto_egress_with_self, var.defaults.auto_egress_with_self, []) - auto_ingress_rules = try(each.value.auto_ingress_rules, var.defaults.auto_ingress_rules, ["nomad-http-tcp", "nomad-rpc-tcp", "nomad-serf-tcp", "nomad-serf-udp"]) - auto_ingress_with_self = try(each.value.auto_ingress_with_self, var.defaults.auto_ingress_with_self, [{ "rule" = "all-all" }]) - auto_number_of_computed_egress_rules = try(each.value.auto_number_of_computed_egress_rules, var.defaults.auto_number_of_computed_egress_rules, 0) - auto_number_of_computed_egress_with_self = try(each.value.auto_number_of_computed_egress_with_self, var.defaults.auto_number_of_computed_egress_with_self, 0) - auto_number_of_computed_ingress_rules = try(each.value.auto_number_of_computed_ingress_rules, var.defaults.auto_number_of_computed_ingress_rules, 0) - auto_number_of_computed_ingress_with_self = try(each.value.auto_number_of_computed_ingress_with_self, var.defaults.auto_number_of_computed_ingress_with_self, 0) - computed_egress_cidr_blocks = try(each.value.computed_egress_cidr_blocks, var.defaults.computed_egress_cidr_blocks, ["0.0.0.0/0"]) - computed_egress_ipv6_cidr_blocks = try(each.value.computed_egress_ipv6_cidr_blocks, var.defaults.computed_egress_ipv6_cidr_blocks, ["::/0"]) - computed_egress_prefix_list_ids = try(each.value.computed_egress_prefix_list_ids, var.defaults.computed_egress_prefix_list_ids, []) - computed_egress_rules = try(each.value.computed_egress_rules, var.defaults.computed_egress_rules, []) - computed_egress_with_cidr_blocks = try(each.value.computed_egress_with_cidr_blocks, var.defaults.computed_egress_with_cidr_blocks, []) - computed_egress_with_ipv6_cidr_blocks = try(each.value.computed_egress_with_ipv6_cidr_blocks, var.defaults.computed_egress_with_ipv6_cidr_blocks, []) - computed_egress_with_prefix_list_ids = try(each.value.computed_egress_with_prefix_list_ids, var.defaults.computed_egress_with_prefix_list_ids, []) - computed_egress_with_self = try(each.value.computed_egress_with_self, var.defaults.computed_egress_with_self, []) - computed_egress_with_source_security_group_id = try(each.value.computed_egress_with_source_security_group_id, var.defaults.computed_egress_with_source_security_group_id, []) - computed_ingress_cidr_blocks = try(each.value.computed_ingress_cidr_blocks, var.defaults.computed_ingress_cidr_blocks, []) - computed_ingress_ipv6_cidr_blocks = try(each.value.computed_ingress_ipv6_cidr_blocks, var.defaults.computed_ingress_ipv6_cidr_blocks, []) - computed_ingress_prefix_list_ids = try(each.value.computed_ingress_prefix_list_ids, var.defaults.computed_ingress_prefix_list_ids, []) - computed_ingress_rules = try(each.value.computed_ingress_rules, var.defaults.computed_ingress_rules, []) - computed_ingress_with_cidr_blocks = try(each.value.computed_ingress_with_cidr_blocks, var.defaults.computed_ingress_with_cidr_blocks, []) - computed_ingress_with_ipv6_cidr_blocks = try(each.value.computed_ingress_with_ipv6_cidr_blocks, var.defaults.computed_ingress_with_ipv6_cidr_blocks, []) - computed_ingress_with_prefix_list_ids = try(each.value.computed_ingress_with_prefix_list_ids, var.defaults.computed_ingress_with_prefix_list_ids, []) - computed_ingress_with_self = try(each.value.computed_ingress_with_self, var.defaults.computed_ingress_with_self, []) - computed_ingress_with_source_security_group_id = try(each.value.computed_ingress_with_source_security_group_id, var.defaults.computed_ingress_with_source_security_group_id, []) - create = try(each.value.create, var.defaults.create, true) - description = try(each.value.description, var.defaults.description, "Security Group managed by Terraform") - egress_cidr_blocks = try(each.value.egress_cidr_blocks, var.defaults.egress_cidr_blocks, ["0.0.0.0/0"]) - egress_ipv6_cidr_blocks = try(each.value.egress_ipv6_cidr_blocks, var.defaults.egress_ipv6_cidr_blocks, ["::/0"]) - egress_prefix_list_ids = try(each.value.egress_prefix_list_ids, var.defaults.egress_prefix_list_ids, []) - egress_rules = try(each.value.egress_rules, var.defaults.egress_rules, []) - egress_with_cidr_blocks = try(each.value.egress_with_cidr_blocks, var.defaults.egress_with_cidr_blocks, []) - egress_with_ipv6_cidr_blocks = try(each.value.egress_with_ipv6_cidr_blocks, var.defaults.egress_with_ipv6_cidr_blocks, []) - egress_with_prefix_list_ids = try(each.value.egress_with_prefix_list_ids, var.defaults.egress_with_prefix_list_ids, []) - egress_with_self = try(each.value.egress_with_self, var.defaults.egress_with_self, []) - egress_with_source_security_group_id = try(each.value.egress_with_source_security_group_id, var.defaults.egress_with_source_security_group_id, []) - ingress_cidr_blocks = try(each.value.ingress_cidr_blocks, var.defaults.ingress_cidr_blocks, []) - ingress_ipv6_cidr_blocks = try(each.value.ingress_ipv6_cidr_blocks, var.defaults.ingress_ipv6_cidr_blocks, []) - ingress_prefix_list_ids = try(each.value.ingress_prefix_list_ids, var.defaults.ingress_prefix_list_ids, []) - ingress_rules = try(each.value.ingress_rules, var.defaults.ingress_rules, []) - ingress_with_cidr_blocks = try(each.value.ingress_with_cidr_blocks, var.defaults.ingress_with_cidr_blocks, []) - ingress_with_ipv6_cidr_blocks = try(each.value.ingress_with_ipv6_cidr_blocks, var.defaults.ingress_with_ipv6_cidr_blocks, []) - ingress_with_prefix_list_ids = try(each.value.ingress_with_prefix_list_ids, var.defaults.ingress_with_prefix_list_ids, []) - ingress_with_self = try(each.value.ingress_with_self, var.defaults.ingress_with_self, []) - ingress_with_source_security_group_id = try(each.value.ingress_with_source_security_group_id, var.defaults.ingress_with_source_security_group_id, []) - name = try(each.value.name, var.defaults.name) - number_of_computed_egress_cidr_blocks = try(each.value.number_of_computed_egress_cidr_blocks, var.defaults.number_of_computed_egress_cidr_blocks, 0) - number_of_computed_egress_ipv6_cidr_blocks = try(each.value.number_of_computed_egress_ipv6_cidr_blocks, var.defaults.number_of_computed_egress_ipv6_cidr_blocks, 0) - number_of_computed_egress_prefix_list_ids = try(each.value.number_of_computed_egress_prefix_list_ids, var.defaults.number_of_computed_egress_prefix_list_ids, 0) - number_of_computed_egress_rules = try(each.value.number_of_computed_egress_rules, var.defaults.number_of_computed_egress_rules, 0) - number_of_computed_egress_with_cidr_blocks = try(each.value.number_of_computed_egress_with_cidr_blocks, var.defaults.number_of_computed_egress_with_cidr_blocks, 0) - number_of_computed_egress_with_ipv6_cidr_blocks = try(each.value.number_of_computed_egress_with_ipv6_cidr_blocks, var.defaults.number_of_computed_egress_with_ipv6_cidr_blocks, 0) - number_of_computed_egress_with_prefix_list_ids = try(each.value.number_of_computed_egress_with_prefix_list_ids, var.defaults.number_of_computed_egress_with_prefix_list_ids, 0) - number_of_computed_egress_with_self = try(each.value.number_of_computed_egress_with_self, var.defaults.number_of_computed_egress_with_self, 0) - number_of_computed_egress_with_source_security_group_id = try(each.value.number_of_computed_egress_with_source_security_group_id, var.defaults.number_of_computed_egress_with_source_security_group_id, 0) - number_of_computed_ingress_cidr_blocks = try(each.value.number_of_computed_ingress_cidr_blocks, var.defaults.number_of_computed_ingress_cidr_blocks, 0) - number_of_computed_ingress_ipv6_cidr_blocks = try(each.value.number_of_computed_ingress_ipv6_cidr_blocks, var.defaults.number_of_computed_ingress_ipv6_cidr_blocks, 0) - number_of_computed_ingress_prefix_list_ids = try(each.value.number_of_computed_ingress_prefix_list_ids, var.defaults.number_of_computed_ingress_prefix_list_ids, 0) - number_of_computed_ingress_rules = try(each.value.number_of_computed_ingress_rules, var.defaults.number_of_computed_ingress_rules, 0) - number_of_computed_ingress_with_cidr_blocks = try(each.value.number_of_computed_ingress_with_cidr_blocks, var.defaults.number_of_computed_ingress_with_cidr_blocks, 0) - number_of_computed_ingress_with_ipv6_cidr_blocks = try(each.value.number_of_computed_ingress_with_ipv6_cidr_blocks, var.defaults.number_of_computed_ingress_with_ipv6_cidr_blocks, 0) - number_of_computed_ingress_with_prefix_list_ids = try(each.value.number_of_computed_ingress_with_prefix_list_ids, var.defaults.number_of_computed_ingress_with_prefix_list_ids, 0) - number_of_computed_ingress_with_self = try(each.value.number_of_computed_ingress_with_self, var.defaults.number_of_computed_ingress_with_self, 0) - number_of_computed_ingress_with_source_security_group_id = try(each.value.number_of_computed_ingress_with_source_security_group_id, var.defaults.number_of_computed_ingress_with_source_security_group_id, 0) - revoke_rules_on_delete = try(each.value.revoke_rules_on_delete, var.defaults.revoke_rules_on_delete, false) - tags = try(each.value.tags, var.defaults.tags, {}) - use_name_prefix = try(each.value.use_name_prefix, var.defaults.use_name_prefix, true) - vpc_id = try(each.value.vpc_id, var.defaults.vpc_id) + auto_computed_egress_rules = try(each.value.auto_computed_egress_rules, var.defaults.auto_computed_egress_rules, []) + auto_computed_egress_with_self = try(each.value.auto_computed_egress_with_self, var.defaults.auto_computed_egress_with_self, []) + auto_computed_ingress_rules = try(each.value.auto_computed_ingress_rules, var.defaults.auto_computed_ingress_rules, []) + auto_computed_ingress_with_self = try(each.value.auto_computed_ingress_with_self, var.defaults.auto_computed_ingress_with_self, []) + auto_egress_rules = try(each.value.auto_egress_rules, var.defaults.auto_egress_rules, ["all-all"]) + auto_egress_with_self = try(each.value.auto_egress_with_self, var.defaults.auto_egress_with_self, []) + auto_ingress_rules = try(each.value.auto_ingress_rules, var.defaults.auto_ingress_rules, ["nomad-http-tcp", "nomad-rpc-tcp", "nomad-serf-tcp", "nomad-serf-udp"]) + auto_ingress_with_self = try(each.value.auto_ingress_with_self, var.defaults.auto_ingress_with_self, [{ "rule" = "all-all" }]) + auto_number_of_computed_egress_rules = try(each.value.auto_number_of_computed_egress_rules, var.defaults.auto_number_of_computed_egress_rules, 0) + auto_number_of_computed_egress_with_self = try(each.value.auto_number_of_computed_egress_with_self, var.defaults.auto_number_of_computed_egress_with_self, 0) + auto_number_of_computed_ingress_rules = try(each.value.auto_number_of_computed_ingress_rules, var.defaults.auto_number_of_computed_ingress_rules, 0) + auto_number_of_computed_ingress_with_self = try(each.value.auto_number_of_computed_ingress_with_self, var.defaults.auto_number_of_computed_ingress_with_self, 0) + computed_egress_cidr_blocks = try(each.value.computed_egress_cidr_blocks, var.defaults.computed_egress_cidr_blocks, ["0.0.0.0/0"]) + computed_egress_ipv6_cidr_blocks = try(each.value.computed_egress_ipv6_cidr_blocks, var.defaults.computed_egress_ipv6_cidr_blocks, ["::/0"]) + computed_egress_prefix_list_ids = try(each.value.computed_egress_prefix_list_ids, var.defaults.computed_egress_prefix_list_ids, []) + computed_egress_rules = try(each.value.computed_egress_rules, var.defaults.computed_egress_rules, []) + computed_egress_with_cidr_ipv4 = try(each.value.computed_egress_with_cidr_ipv4, var.defaults.computed_egress_with_cidr_ipv4, []) + computed_egress_with_cidr_ipv6 = try(each.value.computed_egress_with_cidr_ipv6, var.defaults.computed_egress_with_cidr_ipv6, []) + computed_egress_with_prefix_list_id = try(each.value.computed_egress_with_prefix_list_id, var.defaults.computed_egress_with_prefix_list_id, []) + computed_egress_with_referenced_security_group_id = try(each.value.computed_egress_with_referenced_security_group_id, var.defaults.computed_egress_with_referenced_security_group_id, []) + computed_egress_with_self = try(each.value.computed_egress_with_self, var.defaults.computed_egress_with_self, []) + computed_ingress_cidr_blocks = try(each.value.computed_ingress_cidr_blocks, var.defaults.computed_ingress_cidr_blocks, []) + computed_ingress_ipv6_cidr_blocks = try(each.value.computed_ingress_ipv6_cidr_blocks, var.defaults.computed_ingress_ipv6_cidr_blocks, []) + computed_ingress_prefix_list_ids = try(each.value.computed_ingress_prefix_list_ids, var.defaults.computed_ingress_prefix_list_ids, []) + computed_ingress_rules = try(each.value.computed_ingress_rules, var.defaults.computed_ingress_rules, []) + computed_ingress_with_cidr_ipv4 = try(each.value.computed_ingress_with_cidr_ipv4, var.defaults.computed_ingress_with_cidr_ipv4, []) + computed_ingress_with_cidr_ipv6 = try(each.value.computed_ingress_with_cidr_ipv6, var.defaults.computed_ingress_with_cidr_ipv6, []) + computed_ingress_with_prefix_list_id = try(each.value.computed_ingress_with_prefix_list_id, var.defaults.computed_ingress_with_prefix_list_id, []) + computed_ingress_with_referenced_security_group_id = try(each.value.computed_ingress_with_referenced_security_group_id, var.defaults.computed_ingress_with_referenced_security_group_id, []) + computed_ingress_with_self = try(each.value.computed_ingress_with_self, var.defaults.computed_ingress_with_self, []) + create = try(each.value.create, var.defaults.create, true) + description = try(each.value.description, var.defaults.description, "Security Group managed by Terraform") + egress_cidr_ipv4 = try(each.value.egress_cidr_ipv4, var.defaults.egress_cidr_ipv4, ["0.0.0.0/0"]) + egress_cidr_ipv6 = try(each.value.egress_cidr_ipv6, var.defaults.egress_cidr_ipv6, ["::/0"]) + egress_prefix_list_ids = try(each.value.egress_prefix_list_ids, var.defaults.egress_prefix_list_ids, []) + egress_rules = try(each.value.egress_rules, var.defaults.egress_rules, []) + egress_with_cidr_ipv4 = try(each.value.egress_with_cidr_ipv4, var.defaults.egress_with_cidr_ipv4, []) + egress_with_cidr_ipv6 = try(each.value.egress_with_cidr_ipv6, var.defaults.egress_with_cidr_ipv6, []) + egress_with_prefix_list_id = try(each.value.egress_with_prefix_list_id, var.defaults.egress_with_prefix_list_id, []) + egress_with_referenced_security_group_id = try(each.value.egress_with_referenced_security_group_id, var.defaults.egress_with_referenced_security_group_id, []) + egress_with_self = try(each.value.egress_with_self, var.defaults.egress_with_self, []) + ingress_cidr_ipv4 = try(each.value.ingress_cidr_ipv4, var.defaults.ingress_cidr_ipv4, []) + ingress_cidr_ipv6 = try(each.value.ingress_cidr_ipv6, var.defaults.ingress_cidr_ipv6, []) + ingress_prefix_list_ids = try(each.value.ingress_prefix_list_ids, var.defaults.ingress_prefix_list_ids, []) + ingress_rules = try(each.value.ingress_rules, var.defaults.ingress_rules, []) + ingress_with_cidr_ipv4 = try(each.value.ingress_with_cidr_ipv4, var.defaults.ingress_with_cidr_ipv4, []) + ingress_with_cidr_ipv6 = try(each.value.ingress_with_cidr_ipv6, var.defaults.ingress_with_cidr_ipv6, []) + ingress_with_prefix_list_id = try(each.value.ingress_with_prefix_list_id, var.defaults.ingress_with_prefix_list_id, []) + ingress_with_referenced_security_group_id = try(each.value.ingress_with_referenced_security_group_id, var.defaults.ingress_with_referenced_security_group_id, []) + ingress_with_self = try(each.value.ingress_with_self, var.defaults.ingress_with_self, []) + name = try(each.value.name, var.defaults.name) + number_of_computed_egress_cidr_blocks = try(each.value.number_of_computed_egress_cidr_blocks, var.defaults.number_of_computed_egress_cidr_blocks, 0) + number_of_computed_egress_ipv6_cidr_blocks = try(each.value.number_of_computed_egress_ipv6_cidr_blocks, var.defaults.number_of_computed_egress_ipv6_cidr_blocks, 0) + number_of_computed_egress_prefix_list_ids = try(each.value.number_of_computed_egress_prefix_list_ids, var.defaults.number_of_computed_egress_prefix_list_ids, 0) + number_of_computed_egress_rules = try(each.value.number_of_computed_egress_rules, var.defaults.number_of_computed_egress_rules, 0) + number_of_computed_egress_with_cidr_ipv4 = try(each.value.number_of_computed_egress_with_cidr_ipv4, var.defaults.number_of_computed_egress_with_cidr_ipv4, 0) + number_of_computed_egress_with_cidr_ipv6 = try(each.value.number_of_computed_egress_with_cidr_ipv6, var.defaults.number_of_computed_egress_with_cidr_ipv6, 0) + number_of_computed_egress_with_prefix_list_id = try(each.value.number_of_computed_egress_with_prefix_list_id, var.defaults.number_of_computed_egress_with_prefix_list_id, 0) + number_of_computed_egress_with_referenced_security_group_id = try(each.value.number_of_computed_egress_with_referenced_security_group_id, var.defaults.number_of_computed_egress_with_referenced_security_group_id, 0) + number_of_computed_egress_with_self = try(each.value.number_of_computed_egress_with_self, var.defaults.number_of_computed_egress_with_self, 0) + number_of_computed_ingress_cidr_blocks = try(each.value.number_of_computed_ingress_cidr_blocks, var.defaults.number_of_computed_ingress_cidr_blocks, 0) + number_of_computed_ingress_ipv6_cidr_blocks = try(each.value.number_of_computed_ingress_ipv6_cidr_blocks, var.defaults.number_of_computed_ingress_ipv6_cidr_blocks, 0) + number_of_computed_ingress_prefix_list_ids = try(each.value.number_of_computed_ingress_prefix_list_ids, var.defaults.number_of_computed_ingress_prefix_list_ids, 0) + number_of_computed_ingress_rules = try(each.value.number_of_computed_ingress_rules, var.defaults.number_of_computed_ingress_rules, 0) + number_of_computed_ingress_with_cidr_ipv4 = try(each.value.number_of_computed_ingress_with_cidr_ipv4, var.defaults.number_of_computed_ingress_with_cidr_ipv4, 0) + number_of_computed_ingress_with_cidr_ipv6 = try(each.value.number_of_computed_ingress_with_cidr_ipv6, var.defaults.number_of_computed_ingress_with_cidr_ipv6, 0) + number_of_computed_ingress_with_prefix_list_id = try(each.value.number_of_computed_ingress_with_prefix_list_id, var.defaults.number_of_computed_ingress_with_prefix_list_id, 0) + number_of_computed_ingress_with_referenced_security_group_id = try(each.value.number_of_computed_ingress_with_referenced_security_group_id, var.defaults.number_of_computed_ingress_with_referenced_security_group_id, 0) + number_of_computed_ingress_with_self = try(each.value.number_of_computed_ingress_with_self, var.defaults.number_of_computed_ingress_with_self, 0) + revoke_rules_on_delete = try(each.value.revoke_rules_on_delete, var.defaults.revoke_rules_on_delete, false) + tags = try(each.value.tags, var.defaults.tags, {}) + use_name_prefix = try(each.value.use_name_prefix, var.defaults.use_name_prefix, true) + vpc_id = try(each.value.vpc_id, var.defaults.vpc_id) } diff --git a/wrappers/ntp/main.tf b/wrappers/ntp/main.tf index 83ae8434..4c27b308 100644 --- a/wrappers/ntp/main.tf +++ b/wrappers/ntp/main.tf @@ -3,77 +3,77 @@ module "wrapper" { for_each = var.items - auto_computed_egress_rules = try(each.value.auto_computed_egress_rules, var.defaults.auto_computed_egress_rules, []) - auto_computed_egress_with_self = try(each.value.auto_computed_egress_with_self, var.defaults.auto_computed_egress_with_self, []) - auto_computed_ingress_rules = try(each.value.auto_computed_ingress_rules, var.defaults.auto_computed_ingress_rules, []) - auto_computed_ingress_with_self = try(each.value.auto_computed_ingress_with_self, var.defaults.auto_computed_ingress_with_self, []) - auto_egress_rules = try(each.value.auto_egress_rules, var.defaults.auto_egress_rules, ["all-all"]) - auto_egress_with_self = try(each.value.auto_egress_with_self, var.defaults.auto_egress_with_self, []) - auto_ingress_rules = try(each.value.auto_ingress_rules, var.defaults.auto_ingress_rules, ["ntp-udp"]) - auto_ingress_with_self = try(each.value.auto_ingress_with_self, var.defaults.auto_ingress_with_self, [{ "rule" = "all-all" }]) - auto_number_of_computed_egress_rules = try(each.value.auto_number_of_computed_egress_rules, var.defaults.auto_number_of_computed_egress_rules, 0) - auto_number_of_computed_egress_with_self = try(each.value.auto_number_of_computed_egress_with_self, var.defaults.auto_number_of_computed_egress_with_self, 0) - auto_number_of_computed_ingress_rules = try(each.value.auto_number_of_computed_ingress_rules, var.defaults.auto_number_of_computed_ingress_rules, 0) - auto_number_of_computed_ingress_with_self = try(each.value.auto_number_of_computed_ingress_with_self, var.defaults.auto_number_of_computed_ingress_with_self, 0) - computed_egress_cidr_blocks = try(each.value.computed_egress_cidr_blocks, var.defaults.computed_egress_cidr_blocks, ["0.0.0.0/0"]) - computed_egress_ipv6_cidr_blocks = try(each.value.computed_egress_ipv6_cidr_blocks, var.defaults.computed_egress_ipv6_cidr_blocks, ["::/0"]) - computed_egress_prefix_list_ids = try(each.value.computed_egress_prefix_list_ids, var.defaults.computed_egress_prefix_list_ids, []) - computed_egress_rules = try(each.value.computed_egress_rules, var.defaults.computed_egress_rules, []) - computed_egress_with_cidr_blocks = try(each.value.computed_egress_with_cidr_blocks, var.defaults.computed_egress_with_cidr_blocks, []) - computed_egress_with_ipv6_cidr_blocks = try(each.value.computed_egress_with_ipv6_cidr_blocks, var.defaults.computed_egress_with_ipv6_cidr_blocks, []) - computed_egress_with_prefix_list_ids = try(each.value.computed_egress_with_prefix_list_ids, var.defaults.computed_egress_with_prefix_list_ids, []) - computed_egress_with_self = try(each.value.computed_egress_with_self, var.defaults.computed_egress_with_self, []) - computed_egress_with_source_security_group_id = try(each.value.computed_egress_with_source_security_group_id, var.defaults.computed_egress_with_source_security_group_id, []) - computed_ingress_cidr_blocks = try(each.value.computed_ingress_cidr_blocks, var.defaults.computed_ingress_cidr_blocks, []) - computed_ingress_ipv6_cidr_blocks = try(each.value.computed_ingress_ipv6_cidr_blocks, var.defaults.computed_ingress_ipv6_cidr_blocks, []) - computed_ingress_prefix_list_ids = try(each.value.computed_ingress_prefix_list_ids, var.defaults.computed_ingress_prefix_list_ids, []) - computed_ingress_rules = try(each.value.computed_ingress_rules, var.defaults.computed_ingress_rules, []) - computed_ingress_with_cidr_blocks = try(each.value.computed_ingress_with_cidr_blocks, var.defaults.computed_ingress_with_cidr_blocks, []) - computed_ingress_with_ipv6_cidr_blocks = try(each.value.computed_ingress_with_ipv6_cidr_blocks, var.defaults.computed_ingress_with_ipv6_cidr_blocks, []) - computed_ingress_with_prefix_list_ids = try(each.value.computed_ingress_with_prefix_list_ids, var.defaults.computed_ingress_with_prefix_list_ids, []) - computed_ingress_with_self = try(each.value.computed_ingress_with_self, var.defaults.computed_ingress_with_self, []) - computed_ingress_with_source_security_group_id = try(each.value.computed_ingress_with_source_security_group_id, var.defaults.computed_ingress_with_source_security_group_id, []) - create = try(each.value.create, var.defaults.create, true) - description = try(each.value.description, var.defaults.description, "Security Group managed by Terraform") - egress_cidr_blocks = try(each.value.egress_cidr_blocks, var.defaults.egress_cidr_blocks, ["0.0.0.0/0"]) - egress_ipv6_cidr_blocks = try(each.value.egress_ipv6_cidr_blocks, var.defaults.egress_ipv6_cidr_blocks, ["::/0"]) - egress_prefix_list_ids = try(each.value.egress_prefix_list_ids, var.defaults.egress_prefix_list_ids, []) - egress_rules = try(each.value.egress_rules, var.defaults.egress_rules, []) - egress_with_cidr_blocks = try(each.value.egress_with_cidr_blocks, var.defaults.egress_with_cidr_blocks, []) - egress_with_ipv6_cidr_blocks = try(each.value.egress_with_ipv6_cidr_blocks, var.defaults.egress_with_ipv6_cidr_blocks, []) - egress_with_prefix_list_ids = try(each.value.egress_with_prefix_list_ids, var.defaults.egress_with_prefix_list_ids, []) - egress_with_self = try(each.value.egress_with_self, var.defaults.egress_with_self, []) - egress_with_source_security_group_id = try(each.value.egress_with_source_security_group_id, var.defaults.egress_with_source_security_group_id, []) - ingress_cidr_blocks = try(each.value.ingress_cidr_blocks, var.defaults.ingress_cidr_blocks, []) - ingress_ipv6_cidr_blocks = try(each.value.ingress_ipv6_cidr_blocks, var.defaults.ingress_ipv6_cidr_blocks, []) - ingress_prefix_list_ids = try(each.value.ingress_prefix_list_ids, var.defaults.ingress_prefix_list_ids, []) - ingress_rules = try(each.value.ingress_rules, var.defaults.ingress_rules, []) - ingress_with_cidr_blocks = try(each.value.ingress_with_cidr_blocks, var.defaults.ingress_with_cidr_blocks, []) - ingress_with_ipv6_cidr_blocks = try(each.value.ingress_with_ipv6_cidr_blocks, var.defaults.ingress_with_ipv6_cidr_blocks, []) - ingress_with_prefix_list_ids = try(each.value.ingress_with_prefix_list_ids, var.defaults.ingress_with_prefix_list_ids, []) - ingress_with_self = try(each.value.ingress_with_self, var.defaults.ingress_with_self, []) - ingress_with_source_security_group_id = try(each.value.ingress_with_source_security_group_id, var.defaults.ingress_with_source_security_group_id, []) - name = try(each.value.name, var.defaults.name) - number_of_computed_egress_cidr_blocks = try(each.value.number_of_computed_egress_cidr_blocks, var.defaults.number_of_computed_egress_cidr_blocks, 0) - number_of_computed_egress_ipv6_cidr_blocks = try(each.value.number_of_computed_egress_ipv6_cidr_blocks, var.defaults.number_of_computed_egress_ipv6_cidr_blocks, 0) - number_of_computed_egress_prefix_list_ids = try(each.value.number_of_computed_egress_prefix_list_ids, var.defaults.number_of_computed_egress_prefix_list_ids, 0) - number_of_computed_egress_rules = try(each.value.number_of_computed_egress_rules, var.defaults.number_of_computed_egress_rules, 0) - number_of_computed_egress_with_cidr_blocks = try(each.value.number_of_computed_egress_with_cidr_blocks, var.defaults.number_of_computed_egress_with_cidr_blocks, 0) - number_of_computed_egress_with_ipv6_cidr_blocks = try(each.value.number_of_computed_egress_with_ipv6_cidr_blocks, var.defaults.number_of_computed_egress_with_ipv6_cidr_blocks, 0) - number_of_computed_egress_with_prefix_list_ids = try(each.value.number_of_computed_egress_with_prefix_list_ids, var.defaults.number_of_computed_egress_with_prefix_list_ids, 0) - number_of_computed_egress_with_self = try(each.value.number_of_computed_egress_with_self, var.defaults.number_of_computed_egress_with_self, 0) - number_of_computed_egress_with_source_security_group_id = try(each.value.number_of_computed_egress_with_source_security_group_id, var.defaults.number_of_computed_egress_with_source_security_group_id, 0) - number_of_computed_ingress_cidr_blocks = try(each.value.number_of_computed_ingress_cidr_blocks, var.defaults.number_of_computed_ingress_cidr_blocks, 0) - number_of_computed_ingress_ipv6_cidr_blocks = try(each.value.number_of_computed_ingress_ipv6_cidr_blocks, var.defaults.number_of_computed_ingress_ipv6_cidr_blocks, 0) - number_of_computed_ingress_prefix_list_ids = try(each.value.number_of_computed_ingress_prefix_list_ids, var.defaults.number_of_computed_ingress_prefix_list_ids, 0) - number_of_computed_ingress_rules = try(each.value.number_of_computed_ingress_rules, var.defaults.number_of_computed_ingress_rules, 0) - number_of_computed_ingress_with_cidr_blocks = try(each.value.number_of_computed_ingress_with_cidr_blocks, var.defaults.number_of_computed_ingress_with_cidr_blocks, 0) - number_of_computed_ingress_with_ipv6_cidr_blocks = try(each.value.number_of_computed_ingress_with_ipv6_cidr_blocks, var.defaults.number_of_computed_ingress_with_ipv6_cidr_blocks, 0) - number_of_computed_ingress_with_prefix_list_ids = try(each.value.number_of_computed_ingress_with_prefix_list_ids, var.defaults.number_of_computed_ingress_with_prefix_list_ids, 0) - number_of_computed_ingress_with_self = try(each.value.number_of_computed_ingress_with_self, var.defaults.number_of_computed_ingress_with_self, 0) - number_of_computed_ingress_with_source_security_group_id = try(each.value.number_of_computed_ingress_with_source_security_group_id, var.defaults.number_of_computed_ingress_with_source_security_group_id, 0) - revoke_rules_on_delete = try(each.value.revoke_rules_on_delete, var.defaults.revoke_rules_on_delete, false) - tags = try(each.value.tags, var.defaults.tags, {}) - use_name_prefix = try(each.value.use_name_prefix, var.defaults.use_name_prefix, true) - vpc_id = try(each.value.vpc_id, var.defaults.vpc_id) + auto_computed_egress_rules = try(each.value.auto_computed_egress_rules, var.defaults.auto_computed_egress_rules, []) + auto_computed_egress_with_self = try(each.value.auto_computed_egress_with_self, var.defaults.auto_computed_egress_with_self, []) + auto_computed_ingress_rules = try(each.value.auto_computed_ingress_rules, var.defaults.auto_computed_ingress_rules, []) + auto_computed_ingress_with_self = try(each.value.auto_computed_ingress_with_self, var.defaults.auto_computed_ingress_with_self, []) + auto_egress_rules = try(each.value.auto_egress_rules, var.defaults.auto_egress_rules, ["all-all"]) + auto_egress_with_self = try(each.value.auto_egress_with_self, var.defaults.auto_egress_with_self, []) + auto_ingress_rules = try(each.value.auto_ingress_rules, var.defaults.auto_ingress_rules, ["ntp-udp"]) + auto_ingress_with_self = try(each.value.auto_ingress_with_self, var.defaults.auto_ingress_with_self, [{ "rule" = "all-all" }]) + auto_number_of_computed_egress_rules = try(each.value.auto_number_of_computed_egress_rules, var.defaults.auto_number_of_computed_egress_rules, 0) + auto_number_of_computed_egress_with_self = try(each.value.auto_number_of_computed_egress_with_self, var.defaults.auto_number_of_computed_egress_with_self, 0) + auto_number_of_computed_ingress_rules = try(each.value.auto_number_of_computed_ingress_rules, var.defaults.auto_number_of_computed_ingress_rules, 0) + auto_number_of_computed_ingress_with_self = try(each.value.auto_number_of_computed_ingress_with_self, var.defaults.auto_number_of_computed_ingress_with_self, 0) + computed_egress_cidr_blocks = try(each.value.computed_egress_cidr_blocks, var.defaults.computed_egress_cidr_blocks, ["0.0.0.0/0"]) + computed_egress_ipv6_cidr_blocks = try(each.value.computed_egress_ipv6_cidr_blocks, var.defaults.computed_egress_ipv6_cidr_blocks, ["::/0"]) + computed_egress_prefix_list_ids = try(each.value.computed_egress_prefix_list_ids, var.defaults.computed_egress_prefix_list_ids, []) + computed_egress_rules = try(each.value.computed_egress_rules, var.defaults.computed_egress_rules, []) + computed_egress_with_cidr_ipv4 = try(each.value.computed_egress_with_cidr_ipv4, var.defaults.computed_egress_with_cidr_ipv4, []) + computed_egress_with_cidr_ipv6 = try(each.value.computed_egress_with_cidr_ipv6, var.defaults.computed_egress_with_cidr_ipv6, []) + computed_egress_with_prefix_list_id = try(each.value.computed_egress_with_prefix_list_id, var.defaults.computed_egress_with_prefix_list_id, []) + computed_egress_with_referenced_security_group_id = try(each.value.computed_egress_with_referenced_security_group_id, var.defaults.computed_egress_with_referenced_security_group_id, []) + computed_egress_with_self = try(each.value.computed_egress_with_self, var.defaults.computed_egress_with_self, []) + computed_ingress_cidr_blocks = try(each.value.computed_ingress_cidr_blocks, var.defaults.computed_ingress_cidr_blocks, []) + computed_ingress_ipv6_cidr_blocks = try(each.value.computed_ingress_ipv6_cidr_blocks, var.defaults.computed_ingress_ipv6_cidr_blocks, []) + computed_ingress_prefix_list_ids = try(each.value.computed_ingress_prefix_list_ids, var.defaults.computed_ingress_prefix_list_ids, []) + computed_ingress_rules = try(each.value.computed_ingress_rules, var.defaults.computed_ingress_rules, []) + computed_ingress_with_cidr_ipv4 = try(each.value.computed_ingress_with_cidr_ipv4, var.defaults.computed_ingress_with_cidr_ipv4, []) + computed_ingress_with_cidr_ipv6 = try(each.value.computed_ingress_with_cidr_ipv6, var.defaults.computed_ingress_with_cidr_ipv6, []) + computed_ingress_with_prefix_list_id = try(each.value.computed_ingress_with_prefix_list_id, var.defaults.computed_ingress_with_prefix_list_id, []) + computed_ingress_with_referenced_security_group_id = try(each.value.computed_ingress_with_referenced_security_group_id, var.defaults.computed_ingress_with_referenced_security_group_id, []) + computed_ingress_with_self = try(each.value.computed_ingress_with_self, var.defaults.computed_ingress_with_self, []) + create = try(each.value.create, var.defaults.create, true) + description = try(each.value.description, var.defaults.description, "Security Group managed by Terraform") + egress_cidr_ipv4 = try(each.value.egress_cidr_ipv4, var.defaults.egress_cidr_ipv4, ["0.0.0.0/0"]) + egress_cidr_ipv6 = try(each.value.egress_cidr_ipv6, var.defaults.egress_cidr_ipv6, ["::/0"]) + egress_prefix_list_ids = try(each.value.egress_prefix_list_ids, var.defaults.egress_prefix_list_ids, []) + egress_rules = try(each.value.egress_rules, var.defaults.egress_rules, []) + egress_with_cidr_ipv4 = try(each.value.egress_with_cidr_ipv4, var.defaults.egress_with_cidr_ipv4, []) + egress_with_cidr_ipv6 = try(each.value.egress_with_cidr_ipv6, var.defaults.egress_with_cidr_ipv6, []) + egress_with_prefix_list_id = try(each.value.egress_with_prefix_list_id, var.defaults.egress_with_prefix_list_id, []) + egress_with_referenced_security_group_id = try(each.value.egress_with_referenced_security_group_id, var.defaults.egress_with_referenced_security_group_id, []) + egress_with_self = try(each.value.egress_with_self, var.defaults.egress_with_self, []) + ingress_cidr_ipv4 = try(each.value.ingress_cidr_ipv4, var.defaults.ingress_cidr_ipv4, []) + ingress_cidr_ipv6 = try(each.value.ingress_cidr_ipv6, var.defaults.ingress_cidr_ipv6, []) + ingress_prefix_list_ids = try(each.value.ingress_prefix_list_ids, var.defaults.ingress_prefix_list_ids, []) + ingress_rules = try(each.value.ingress_rules, var.defaults.ingress_rules, []) + ingress_with_cidr_ipv4 = try(each.value.ingress_with_cidr_ipv4, var.defaults.ingress_with_cidr_ipv4, []) + ingress_with_cidr_ipv6 = try(each.value.ingress_with_cidr_ipv6, var.defaults.ingress_with_cidr_ipv6, []) + ingress_with_prefix_list_id = try(each.value.ingress_with_prefix_list_id, var.defaults.ingress_with_prefix_list_id, []) + ingress_with_referenced_security_group_id = try(each.value.ingress_with_referenced_security_group_id, var.defaults.ingress_with_referenced_security_group_id, []) + ingress_with_self = try(each.value.ingress_with_self, var.defaults.ingress_with_self, []) + name = try(each.value.name, var.defaults.name) + number_of_computed_egress_cidr_blocks = try(each.value.number_of_computed_egress_cidr_blocks, var.defaults.number_of_computed_egress_cidr_blocks, 0) + number_of_computed_egress_ipv6_cidr_blocks = try(each.value.number_of_computed_egress_ipv6_cidr_blocks, var.defaults.number_of_computed_egress_ipv6_cidr_blocks, 0) + number_of_computed_egress_prefix_list_ids = try(each.value.number_of_computed_egress_prefix_list_ids, var.defaults.number_of_computed_egress_prefix_list_ids, 0) + number_of_computed_egress_rules = try(each.value.number_of_computed_egress_rules, var.defaults.number_of_computed_egress_rules, 0) + number_of_computed_egress_with_cidr_ipv4 = try(each.value.number_of_computed_egress_with_cidr_ipv4, var.defaults.number_of_computed_egress_with_cidr_ipv4, 0) + number_of_computed_egress_with_cidr_ipv6 = try(each.value.number_of_computed_egress_with_cidr_ipv6, var.defaults.number_of_computed_egress_with_cidr_ipv6, 0) + number_of_computed_egress_with_prefix_list_id = try(each.value.number_of_computed_egress_with_prefix_list_id, var.defaults.number_of_computed_egress_with_prefix_list_id, 0) + number_of_computed_egress_with_referenced_security_group_id = try(each.value.number_of_computed_egress_with_referenced_security_group_id, var.defaults.number_of_computed_egress_with_referenced_security_group_id, 0) + number_of_computed_egress_with_self = try(each.value.number_of_computed_egress_with_self, var.defaults.number_of_computed_egress_with_self, 0) + number_of_computed_ingress_cidr_blocks = try(each.value.number_of_computed_ingress_cidr_blocks, var.defaults.number_of_computed_ingress_cidr_blocks, 0) + number_of_computed_ingress_ipv6_cidr_blocks = try(each.value.number_of_computed_ingress_ipv6_cidr_blocks, var.defaults.number_of_computed_ingress_ipv6_cidr_blocks, 0) + number_of_computed_ingress_prefix_list_ids = try(each.value.number_of_computed_ingress_prefix_list_ids, var.defaults.number_of_computed_ingress_prefix_list_ids, 0) + number_of_computed_ingress_rules = try(each.value.number_of_computed_ingress_rules, var.defaults.number_of_computed_ingress_rules, 0) + number_of_computed_ingress_with_cidr_ipv4 = try(each.value.number_of_computed_ingress_with_cidr_ipv4, var.defaults.number_of_computed_ingress_with_cidr_ipv4, 0) + number_of_computed_ingress_with_cidr_ipv6 = try(each.value.number_of_computed_ingress_with_cidr_ipv6, var.defaults.number_of_computed_ingress_with_cidr_ipv6, 0) + number_of_computed_ingress_with_prefix_list_id = try(each.value.number_of_computed_ingress_with_prefix_list_id, var.defaults.number_of_computed_ingress_with_prefix_list_id, 0) + number_of_computed_ingress_with_referenced_security_group_id = try(each.value.number_of_computed_ingress_with_referenced_security_group_id, var.defaults.number_of_computed_ingress_with_referenced_security_group_id, 0) + number_of_computed_ingress_with_self = try(each.value.number_of_computed_ingress_with_self, var.defaults.number_of_computed_ingress_with_self, 0) + revoke_rules_on_delete = try(each.value.revoke_rules_on_delete, var.defaults.revoke_rules_on_delete, false) + tags = try(each.value.tags, var.defaults.tags, {}) + use_name_prefix = try(each.value.use_name_prefix, var.defaults.use_name_prefix, true) + vpc_id = try(each.value.vpc_id, var.defaults.vpc_id) } diff --git a/wrappers/openvpn/main.tf b/wrappers/openvpn/main.tf index 7e9e33b2..b6b5b63a 100644 --- a/wrappers/openvpn/main.tf +++ b/wrappers/openvpn/main.tf @@ -3,77 +3,77 @@ module "wrapper" { for_each = var.items - auto_computed_egress_rules = try(each.value.auto_computed_egress_rules, var.defaults.auto_computed_egress_rules, []) - auto_computed_egress_with_self = try(each.value.auto_computed_egress_with_self, var.defaults.auto_computed_egress_with_self, []) - auto_computed_ingress_rules = try(each.value.auto_computed_ingress_rules, var.defaults.auto_computed_ingress_rules, []) - auto_computed_ingress_with_self = try(each.value.auto_computed_ingress_with_self, var.defaults.auto_computed_ingress_with_self, []) - auto_egress_rules = try(each.value.auto_egress_rules, var.defaults.auto_egress_rules, ["all-all"]) - auto_egress_with_self = try(each.value.auto_egress_with_self, var.defaults.auto_egress_with_self, []) - auto_ingress_rules = try(each.value.auto_ingress_rules, var.defaults.auto_ingress_rules, ["openvpn-udp", "openvpn-tcp", "openvpn-https-tcp"]) - auto_ingress_with_self = try(each.value.auto_ingress_with_self, var.defaults.auto_ingress_with_self, [{ "rule" = "all-all" }]) - auto_number_of_computed_egress_rules = try(each.value.auto_number_of_computed_egress_rules, var.defaults.auto_number_of_computed_egress_rules, 0) - auto_number_of_computed_egress_with_self = try(each.value.auto_number_of_computed_egress_with_self, var.defaults.auto_number_of_computed_egress_with_self, 0) - auto_number_of_computed_ingress_rules = try(each.value.auto_number_of_computed_ingress_rules, var.defaults.auto_number_of_computed_ingress_rules, 0) - auto_number_of_computed_ingress_with_self = try(each.value.auto_number_of_computed_ingress_with_self, var.defaults.auto_number_of_computed_ingress_with_self, 0) - computed_egress_cidr_blocks = try(each.value.computed_egress_cidr_blocks, var.defaults.computed_egress_cidr_blocks, ["0.0.0.0/0"]) - computed_egress_ipv6_cidr_blocks = try(each.value.computed_egress_ipv6_cidr_blocks, var.defaults.computed_egress_ipv6_cidr_blocks, ["::/0"]) - computed_egress_prefix_list_ids = try(each.value.computed_egress_prefix_list_ids, var.defaults.computed_egress_prefix_list_ids, []) - computed_egress_rules = try(each.value.computed_egress_rules, var.defaults.computed_egress_rules, []) - computed_egress_with_cidr_blocks = try(each.value.computed_egress_with_cidr_blocks, var.defaults.computed_egress_with_cidr_blocks, []) - computed_egress_with_ipv6_cidr_blocks = try(each.value.computed_egress_with_ipv6_cidr_blocks, var.defaults.computed_egress_with_ipv6_cidr_blocks, []) - computed_egress_with_prefix_list_ids = try(each.value.computed_egress_with_prefix_list_ids, var.defaults.computed_egress_with_prefix_list_ids, []) - computed_egress_with_self = try(each.value.computed_egress_with_self, var.defaults.computed_egress_with_self, []) - computed_egress_with_source_security_group_id = try(each.value.computed_egress_with_source_security_group_id, var.defaults.computed_egress_with_source_security_group_id, []) - computed_ingress_cidr_blocks = try(each.value.computed_ingress_cidr_blocks, var.defaults.computed_ingress_cidr_blocks, []) - computed_ingress_ipv6_cidr_blocks = try(each.value.computed_ingress_ipv6_cidr_blocks, var.defaults.computed_ingress_ipv6_cidr_blocks, []) - computed_ingress_prefix_list_ids = try(each.value.computed_ingress_prefix_list_ids, var.defaults.computed_ingress_prefix_list_ids, []) - computed_ingress_rules = try(each.value.computed_ingress_rules, var.defaults.computed_ingress_rules, []) - computed_ingress_with_cidr_blocks = try(each.value.computed_ingress_with_cidr_blocks, var.defaults.computed_ingress_with_cidr_blocks, []) - computed_ingress_with_ipv6_cidr_blocks = try(each.value.computed_ingress_with_ipv6_cidr_blocks, var.defaults.computed_ingress_with_ipv6_cidr_blocks, []) - computed_ingress_with_prefix_list_ids = try(each.value.computed_ingress_with_prefix_list_ids, var.defaults.computed_ingress_with_prefix_list_ids, []) - computed_ingress_with_self = try(each.value.computed_ingress_with_self, var.defaults.computed_ingress_with_self, []) - computed_ingress_with_source_security_group_id = try(each.value.computed_ingress_with_source_security_group_id, var.defaults.computed_ingress_with_source_security_group_id, []) - create = try(each.value.create, var.defaults.create, true) - description = try(each.value.description, var.defaults.description, "Security Group managed by Terraform") - egress_cidr_blocks = try(each.value.egress_cidr_blocks, var.defaults.egress_cidr_blocks, ["0.0.0.0/0"]) - egress_ipv6_cidr_blocks = try(each.value.egress_ipv6_cidr_blocks, var.defaults.egress_ipv6_cidr_blocks, ["::/0"]) - egress_prefix_list_ids = try(each.value.egress_prefix_list_ids, var.defaults.egress_prefix_list_ids, []) - egress_rules = try(each.value.egress_rules, var.defaults.egress_rules, []) - egress_with_cidr_blocks = try(each.value.egress_with_cidr_blocks, var.defaults.egress_with_cidr_blocks, []) - egress_with_ipv6_cidr_blocks = try(each.value.egress_with_ipv6_cidr_blocks, var.defaults.egress_with_ipv6_cidr_blocks, []) - egress_with_prefix_list_ids = try(each.value.egress_with_prefix_list_ids, var.defaults.egress_with_prefix_list_ids, []) - egress_with_self = try(each.value.egress_with_self, var.defaults.egress_with_self, []) - egress_with_source_security_group_id = try(each.value.egress_with_source_security_group_id, var.defaults.egress_with_source_security_group_id, []) - ingress_cidr_blocks = try(each.value.ingress_cidr_blocks, var.defaults.ingress_cidr_blocks, []) - ingress_ipv6_cidr_blocks = try(each.value.ingress_ipv6_cidr_blocks, var.defaults.ingress_ipv6_cidr_blocks, []) - ingress_prefix_list_ids = try(each.value.ingress_prefix_list_ids, var.defaults.ingress_prefix_list_ids, []) - ingress_rules = try(each.value.ingress_rules, var.defaults.ingress_rules, []) - ingress_with_cidr_blocks = try(each.value.ingress_with_cidr_blocks, var.defaults.ingress_with_cidr_blocks, []) - ingress_with_ipv6_cidr_blocks = try(each.value.ingress_with_ipv6_cidr_blocks, var.defaults.ingress_with_ipv6_cidr_blocks, []) - ingress_with_prefix_list_ids = try(each.value.ingress_with_prefix_list_ids, var.defaults.ingress_with_prefix_list_ids, []) - ingress_with_self = try(each.value.ingress_with_self, var.defaults.ingress_with_self, []) - ingress_with_source_security_group_id = try(each.value.ingress_with_source_security_group_id, var.defaults.ingress_with_source_security_group_id, []) - name = try(each.value.name, var.defaults.name) - number_of_computed_egress_cidr_blocks = try(each.value.number_of_computed_egress_cidr_blocks, var.defaults.number_of_computed_egress_cidr_blocks, 0) - number_of_computed_egress_ipv6_cidr_blocks = try(each.value.number_of_computed_egress_ipv6_cidr_blocks, var.defaults.number_of_computed_egress_ipv6_cidr_blocks, 0) - number_of_computed_egress_prefix_list_ids = try(each.value.number_of_computed_egress_prefix_list_ids, var.defaults.number_of_computed_egress_prefix_list_ids, 0) - number_of_computed_egress_rules = try(each.value.number_of_computed_egress_rules, var.defaults.number_of_computed_egress_rules, 0) - number_of_computed_egress_with_cidr_blocks = try(each.value.number_of_computed_egress_with_cidr_blocks, var.defaults.number_of_computed_egress_with_cidr_blocks, 0) - number_of_computed_egress_with_ipv6_cidr_blocks = try(each.value.number_of_computed_egress_with_ipv6_cidr_blocks, var.defaults.number_of_computed_egress_with_ipv6_cidr_blocks, 0) - number_of_computed_egress_with_prefix_list_ids = try(each.value.number_of_computed_egress_with_prefix_list_ids, var.defaults.number_of_computed_egress_with_prefix_list_ids, 0) - number_of_computed_egress_with_self = try(each.value.number_of_computed_egress_with_self, var.defaults.number_of_computed_egress_with_self, 0) - number_of_computed_egress_with_source_security_group_id = try(each.value.number_of_computed_egress_with_source_security_group_id, var.defaults.number_of_computed_egress_with_source_security_group_id, 0) - number_of_computed_ingress_cidr_blocks = try(each.value.number_of_computed_ingress_cidr_blocks, var.defaults.number_of_computed_ingress_cidr_blocks, 0) - number_of_computed_ingress_ipv6_cidr_blocks = try(each.value.number_of_computed_ingress_ipv6_cidr_blocks, var.defaults.number_of_computed_ingress_ipv6_cidr_blocks, 0) - number_of_computed_ingress_prefix_list_ids = try(each.value.number_of_computed_ingress_prefix_list_ids, var.defaults.number_of_computed_ingress_prefix_list_ids, 0) - number_of_computed_ingress_rules = try(each.value.number_of_computed_ingress_rules, var.defaults.number_of_computed_ingress_rules, 0) - number_of_computed_ingress_with_cidr_blocks = try(each.value.number_of_computed_ingress_with_cidr_blocks, var.defaults.number_of_computed_ingress_with_cidr_blocks, 0) - number_of_computed_ingress_with_ipv6_cidr_blocks = try(each.value.number_of_computed_ingress_with_ipv6_cidr_blocks, var.defaults.number_of_computed_ingress_with_ipv6_cidr_blocks, 0) - number_of_computed_ingress_with_prefix_list_ids = try(each.value.number_of_computed_ingress_with_prefix_list_ids, var.defaults.number_of_computed_ingress_with_prefix_list_ids, 0) - number_of_computed_ingress_with_self = try(each.value.number_of_computed_ingress_with_self, var.defaults.number_of_computed_ingress_with_self, 0) - number_of_computed_ingress_with_source_security_group_id = try(each.value.number_of_computed_ingress_with_source_security_group_id, var.defaults.number_of_computed_ingress_with_source_security_group_id, 0) - revoke_rules_on_delete = try(each.value.revoke_rules_on_delete, var.defaults.revoke_rules_on_delete, false) - tags = try(each.value.tags, var.defaults.tags, {}) - use_name_prefix = try(each.value.use_name_prefix, var.defaults.use_name_prefix, true) - vpc_id = try(each.value.vpc_id, var.defaults.vpc_id) + auto_computed_egress_rules = try(each.value.auto_computed_egress_rules, var.defaults.auto_computed_egress_rules, []) + auto_computed_egress_with_self = try(each.value.auto_computed_egress_with_self, var.defaults.auto_computed_egress_with_self, []) + auto_computed_ingress_rules = try(each.value.auto_computed_ingress_rules, var.defaults.auto_computed_ingress_rules, []) + auto_computed_ingress_with_self = try(each.value.auto_computed_ingress_with_self, var.defaults.auto_computed_ingress_with_self, []) + auto_egress_rules = try(each.value.auto_egress_rules, var.defaults.auto_egress_rules, ["all-all"]) + auto_egress_with_self = try(each.value.auto_egress_with_self, var.defaults.auto_egress_with_self, []) + auto_ingress_rules = try(each.value.auto_ingress_rules, var.defaults.auto_ingress_rules, ["openvpn-udp", "openvpn-tcp", "openvpn-https-tcp"]) + auto_ingress_with_self = try(each.value.auto_ingress_with_self, var.defaults.auto_ingress_with_self, [{ "rule" = "all-all" }]) + auto_number_of_computed_egress_rules = try(each.value.auto_number_of_computed_egress_rules, var.defaults.auto_number_of_computed_egress_rules, 0) + auto_number_of_computed_egress_with_self = try(each.value.auto_number_of_computed_egress_with_self, var.defaults.auto_number_of_computed_egress_with_self, 0) + auto_number_of_computed_ingress_rules = try(each.value.auto_number_of_computed_ingress_rules, var.defaults.auto_number_of_computed_ingress_rules, 0) + auto_number_of_computed_ingress_with_self = try(each.value.auto_number_of_computed_ingress_with_self, var.defaults.auto_number_of_computed_ingress_with_self, 0) + computed_egress_cidr_blocks = try(each.value.computed_egress_cidr_blocks, var.defaults.computed_egress_cidr_blocks, ["0.0.0.0/0"]) + computed_egress_ipv6_cidr_blocks = try(each.value.computed_egress_ipv6_cidr_blocks, var.defaults.computed_egress_ipv6_cidr_blocks, ["::/0"]) + computed_egress_prefix_list_ids = try(each.value.computed_egress_prefix_list_ids, var.defaults.computed_egress_prefix_list_ids, []) + computed_egress_rules = try(each.value.computed_egress_rules, var.defaults.computed_egress_rules, []) + computed_egress_with_cidr_ipv4 = try(each.value.computed_egress_with_cidr_ipv4, var.defaults.computed_egress_with_cidr_ipv4, []) + computed_egress_with_cidr_ipv6 = try(each.value.computed_egress_with_cidr_ipv6, var.defaults.computed_egress_with_cidr_ipv6, []) + computed_egress_with_prefix_list_id = try(each.value.computed_egress_with_prefix_list_id, var.defaults.computed_egress_with_prefix_list_id, []) + computed_egress_with_referenced_security_group_id = try(each.value.computed_egress_with_referenced_security_group_id, var.defaults.computed_egress_with_referenced_security_group_id, []) + computed_egress_with_self = try(each.value.computed_egress_with_self, var.defaults.computed_egress_with_self, []) + computed_ingress_cidr_blocks = try(each.value.computed_ingress_cidr_blocks, var.defaults.computed_ingress_cidr_blocks, []) + computed_ingress_ipv6_cidr_blocks = try(each.value.computed_ingress_ipv6_cidr_blocks, var.defaults.computed_ingress_ipv6_cidr_blocks, []) + computed_ingress_prefix_list_ids = try(each.value.computed_ingress_prefix_list_ids, var.defaults.computed_ingress_prefix_list_ids, []) + computed_ingress_rules = try(each.value.computed_ingress_rules, var.defaults.computed_ingress_rules, []) + computed_ingress_with_cidr_ipv4 = try(each.value.computed_ingress_with_cidr_ipv4, var.defaults.computed_ingress_with_cidr_ipv4, []) + computed_ingress_with_cidr_ipv6 = try(each.value.computed_ingress_with_cidr_ipv6, var.defaults.computed_ingress_with_cidr_ipv6, []) + computed_ingress_with_prefix_list_id = try(each.value.computed_ingress_with_prefix_list_id, var.defaults.computed_ingress_with_prefix_list_id, []) + computed_ingress_with_referenced_security_group_id = try(each.value.computed_ingress_with_referenced_security_group_id, var.defaults.computed_ingress_with_referenced_security_group_id, []) + computed_ingress_with_self = try(each.value.computed_ingress_with_self, var.defaults.computed_ingress_with_self, []) + create = try(each.value.create, var.defaults.create, true) + description = try(each.value.description, var.defaults.description, "Security Group managed by Terraform") + egress_cidr_ipv4 = try(each.value.egress_cidr_ipv4, var.defaults.egress_cidr_ipv4, ["0.0.0.0/0"]) + egress_cidr_ipv6 = try(each.value.egress_cidr_ipv6, var.defaults.egress_cidr_ipv6, ["::/0"]) + egress_prefix_list_ids = try(each.value.egress_prefix_list_ids, var.defaults.egress_prefix_list_ids, []) + egress_rules = try(each.value.egress_rules, var.defaults.egress_rules, []) + egress_with_cidr_ipv4 = try(each.value.egress_with_cidr_ipv4, var.defaults.egress_with_cidr_ipv4, []) + egress_with_cidr_ipv6 = try(each.value.egress_with_cidr_ipv6, var.defaults.egress_with_cidr_ipv6, []) + egress_with_prefix_list_id = try(each.value.egress_with_prefix_list_id, var.defaults.egress_with_prefix_list_id, []) + egress_with_referenced_security_group_id = try(each.value.egress_with_referenced_security_group_id, var.defaults.egress_with_referenced_security_group_id, []) + egress_with_self = try(each.value.egress_with_self, var.defaults.egress_with_self, []) + ingress_cidr_ipv4 = try(each.value.ingress_cidr_ipv4, var.defaults.ingress_cidr_ipv4, []) + ingress_cidr_ipv6 = try(each.value.ingress_cidr_ipv6, var.defaults.ingress_cidr_ipv6, []) + ingress_prefix_list_ids = try(each.value.ingress_prefix_list_ids, var.defaults.ingress_prefix_list_ids, []) + ingress_rules = try(each.value.ingress_rules, var.defaults.ingress_rules, []) + ingress_with_cidr_ipv4 = try(each.value.ingress_with_cidr_ipv4, var.defaults.ingress_with_cidr_ipv4, []) + ingress_with_cidr_ipv6 = try(each.value.ingress_with_cidr_ipv6, var.defaults.ingress_with_cidr_ipv6, []) + ingress_with_prefix_list_id = try(each.value.ingress_with_prefix_list_id, var.defaults.ingress_with_prefix_list_id, []) + ingress_with_referenced_security_group_id = try(each.value.ingress_with_referenced_security_group_id, var.defaults.ingress_with_referenced_security_group_id, []) + ingress_with_self = try(each.value.ingress_with_self, var.defaults.ingress_with_self, []) + name = try(each.value.name, var.defaults.name) + number_of_computed_egress_cidr_blocks = try(each.value.number_of_computed_egress_cidr_blocks, var.defaults.number_of_computed_egress_cidr_blocks, 0) + number_of_computed_egress_ipv6_cidr_blocks = try(each.value.number_of_computed_egress_ipv6_cidr_blocks, var.defaults.number_of_computed_egress_ipv6_cidr_blocks, 0) + number_of_computed_egress_prefix_list_ids = try(each.value.number_of_computed_egress_prefix_list_ids, var.defaults.number_of_computed_egress_prefix_list_ids, 0) + number_of_computed_egress_rules = try(each.value.number_of_computed_egress_rules, var.defaults.number_of_computed_egress_rules, 0) + number_of_computed_egress_with_cidr_ipv4 = try(each.value.number_of_computed_egress_with_cidr_ipv4, var.defaults.number_of_computed_egress_with_cidr_ipv4, 0) + number_of_computed_egress_with_cidr_ipv6 = try(each.value.number_of_computed_egress_with_cidr_ipv6, var.defaults.number_of_computed_egress_with_cidr_ipv6, 0) + number_of_computed_egress_with_prefix_list_id = try(each.value.number_of_computed_egress_with_prefix_list_id, var.defaults.number_of_computed_egress_with_prefix_list_id, 0) + number_of_computed_egress_with_referenced_security_group_id = try(each.value.number_of_computed_egress_with_referenced_security_group_id, var.defaults.number_of_computed_egress_with_referenced_security_group_id, 0) + number_of_computed_egress_with_self = try(each.value.number_of_computed_egress_with_self, var.defaults.number_of_computed_egress_with_self, 0) + number_of_computed_ingress_cidr_blocks = try(each.value.number_of_computed_ingress_cidr_blocks, var.defaults.number_of_computed_ingress_cidr_blocks, 0) + number_of_computed_ingress_ipv6_cidr_blocks = try(each.value.number_of_computed_ingress_ipv6_cidr_blocks, var.defaults.number_of_computed_ingress_ipv6_cidr_blocks, 0) + number_of_computed_ingress_prefix_list_ids = try(each.value.number_of_computed_ingress_prefix_list_ids, var.defaults.number_of_computed_ingress_prefix_list_ids, 0) + number_of_computed_ingress_rules = try(each.value.number_of_computed_ingress_rules, var.defaults.number_of_computed_ingress_rules, 0) + number_of_computed_ingress_with_cidr_ipv4 = try(each.value.number_of_computed_ingress_with_cidr_ipv4, var.defaults.number_of_computed_ingress_with_cidr_ipv4, 0) + number_of_computed_ingress_with_cidr_ipv6 = try(each.value.number_of_computed_ingress_with_cidr_ipv6, var.defaults.number_of_computed_ingress_with_cidr_ipv6, 0) + number_of_computed_ingress_with_prefix_list_id = try(each.value.number_of_computed_ingress_with_prefix_list_id, var.defaults.number_of_computed_ingress_with_prefix_list_id, 0) + number_of_computed_ingress_with_referenced_security_group_id = try(each.value.number_of_computed_ingress_with_referenced_security_group_id, var.defaults.number_of_computed_ingress_with_referenced_security_group_id, 0) + number_of_computed_ingress_with_self = try(each.value.number_of_computed_ingress_with_self, var.defaults.number_of_computed_ingress_with_self, 0) + revoke_rules_on_delete = try(each.value.revoke_rules_on_delete, var.defaults.revoke_rules_on_delete, false) + tags = try(each.value.tags, var.defaults.tags, {}) + use_name_prefix = try(each.value.use_name_prefix, var.defaults.use_name_prefix, true) + vpc_id = try(each.value.vpc_id, var.defaults.vpc_id) } diff --git a/wrappers/oracle-db/main.tf b/wrappers/oracle-db/main.tf index 87947bb5..848311a7 100644 --- a/wrappers/oracle-db/main.tf +++ b/wrappers/oracle-db/main.tf @@ -3,77 +3,77 @@ module "wrapper" { for_each = var.items - auto_computed_egress_rules = try(each.value.auto_computed_egress_rules, var.defaults.auto_computed_egress_rules, []) - auto_computed_egress_with_self = try(each.value.auto_computed_egress_with_self, var.defaults.auto_computed_egress_with_self, []) - auto_computed_ingress_rules = try(each.value.auto_computed_ingress_rules, var.defaults.auto_computed_ingress_rules, []) - auto_computed_ingress_with_self = try(each.value.auto_computed_ingress_with_self, var.defaults.auto_computed_ingress_with_self, []) - auto_egress_rules = try(each.value.auto_egress_rules, var.defaults.auto_egress_rules, ["all-all"]) - auto_egress_with_self = try(each.value.auto_egress_with_self, var.defaults.auto_egress_with_self, []) - auto_ingress_rules = try(each.value.auto_ingress_rules, var.defaults.auto_ingress_rules, ["oracle-db-tcp"]) - auto_ingress_with_self = try(each.value.auto_ingress_with_self, var.defaults.auto_ingress_with_self, [{ "rule" = "all-all" }]) - auto_number_of_computed_egress_rules = try(each.value.auto_number_of_computed_egress_rules, var.defaults.auto_number_of_computed_egress_rules, 0) - auto_number_of_computed_egress_with_self = try(each.value.auto_number_of_computed_egress_with_self, var.defaults.auto_number_of_computed_egress_with_self, 0) - auto_number_of_computed_ingress_rules = try(each.value.auto_number_of_computed_ingress_rules, var.defaults.auto_number_of_computed_ingress_rules, 0) - auto_number_of_computed_ingress_with_self = try(each.value.auto_number_of_computed_ingress_with_self, var.defaults.auto_number_of_computed_ingress_with_self, 0) - computed_egress_cidr_blocks = try(each.value.computed_egress_cidr_blocks, var.defaults.computed_egress_cidr_blocks, ["0.0.0.0/0"]) - computed_egress_ipv6_cidr_blocks = try(each.value.computed_egress_ipv6_cidr_blocks, var.defaults.computed_egress_ipv6_cidr_blocks, ["::/0"]) - computed_egress_prefix_list_ids = try(each.value.computed_egress_prefix_list_ids, var.defaults.computed_egress_prefix_list_ids, []) - computed_egress_rules = try(each.value.computed_egress_rules, var.defaults.computed_egress_rules, []) - computed_egress_with_cidr_blocks = try(each.value.computed_egress_with_cidr_blocks, var.defaults.computed_egress_with_cidr_blocks, []) - computed_egress_with_ipv6_cidr_blocks = try(each.value.computed_egress_with_ipv6_cidr_blocks, var.defaults.computed_egress_with_ipv6_cidr_blocks, []) - computed_egress_with_prefix_list_ids = try(each.value.computed_egress_with_prefix_list_ids, var.defaults.computed_egress_with_prefix_list_ids, []) - computed_egress_with_self = try(each.value.computed_egress_with_self, var.defaults.computed_egress_with_self, []) - computed_egress_with_source_security_group_id = try(each.value.computed_egress_with_source_security_group_id, var.defaults.computed_egress_with_source_security_group_id, []) - computed_ingress_cidr_blocks = try(each.value.computed_ingress_cidr_blocks, var.defaults.computed_ingress_cidr_blocks, []) - computed_ingress_ipv6_cidr_blocks = try(each.value.computed_ingress_ipv6_cidr_blocks, var.defaults.computed_ingress_ipv6_cidr_blocks, []) - computed_ingress_prefix_list_ids = try(each.value.computed_ingress_prefix_list_ids, var.defaults.computed_ingress_prefix_list_ids, []) - computed_ingress_rules = try(each.value.computed_ingress_rules, var.defaults.computed_ingress_rules, []) - computed_ingress_with_cidr_blocks = try(each.value.computed_ingress_with_cidr_blocks, var.defaults.computed_ingress_with_cidr_blocks, []) - computed_ingress_with_ipv6_cidr_blocks = try(each.value.computed_ingress_with_ipv6_cidr_blocks, var.defaults.computed_ingress_with_ipv6_cidr_blocks, []) - computed_ingress_with_prefix_list_ids = try(each.value.computed_ingress_with_prefix_list_ids, var.defaults.computed_ingress_with_prefix_list_ids, []) - computed_ingress_with_self = try(each.value.computed_ingress_with_self, var.defaults.computed_ingress_with_self, []) - computed_ingress_with_source_security_group_id = try(each.value.computed_ingress_with_source_security_group_id, var.defaults.computed_ingress_with_source_security_group_id, []) - create = try(each.value.create, var.defaults.create, true) - description = try(each.value.description, var.defaults.description, "Security Group managed by Terraform") - egress_cidr_blocks = try(each.value.egress_cidr_blocks, var.defaults.egress_cidr_blocks, ["0.0.0.0/0"]) - egress_ipv6_cidr_blocks = try(each.value.egress_ipv6_cidr_blocks, var.defaults.egress_ipv6_cidr_blocks, ["::/0"]) - egress_prefix_list_ids = try(each.value.egress_prefix_list_ids, var.defaults.egress_prefix_list_ids, []) - egress_rules = try(each.value.egress_rules, var.defaults.egress_rules, []) - egress_with_cidr_blocks = try(each.value.egress_with_cidr_blocks, var.defaults.egress_with_cidr_blocks, []) - egress_with_ipv6_cidr_blocks = try(each.value.egress_with_ipv6_cidr_blocks, var.defaults.egress_with_ipv6_cidr_blocks, []) - egress_with_prefix_list_ids = try(each.value.egress_with_prefix_list_ids, var.defaults.egress_with_prefix_list_ids, []) - egress_with_self = try(each.value.egress_with_self, var.defaults.egress_with_self, []) - egress_with_source_security_group_id = try(each.value.egress_with_source_security_group_id, var.defaults.egress_with_source_security_group_id, []) - ingress_cidr_blocks = try(each.value.ingress_cidr_blocks, var.defaults.ingress_cidr_blocks, []) - ingress_ipv6_cidr_blocks = try(each.value.ingress_ipv6_cidr_blocks, var.defaults.ingress_ipv6_cidr_blocks, []) - ingress_prefix_list_ids = try(each.value.ingress_prefix_list_ids, var.defaults.ingress_prefix_list_ids, []) - ingress_rules = try(each.value.ingress_rules, var.defaults.ingress_rules, []) - ingress_with_cidr_blocks = try(each.value.ingress_with_cidr_blocks, var.defaults.ingress_with_cidr_blocks, []) - ingress_with_ipv6_cidr_blocks = try(each.value.ingress_with_ipv6_cidr_blocks, var.defaults.ingress_with_ipv6_cidr_blocks, []) - ingress_with_prefix_list_ids = try(each.value.ingress_with_prefix_list_ids, var.defaults.ingress_with_prefix_list_ids, []) - ingress_with_self = try(each.value.ingress_with_self, var.defaults.ingress_with_self, []) - ingress_with_source_security_group_id = try(each.value.ingress_with_source_security_group_id, var.defaults.ingress_with_source_security_group_id, []) - name = try(each.value.name, var.defaults.name) - number_of_computed_egress_cidr_blocks = try(each.value.number_of_computed_egress_cidr_blocks, var.defaults.number_of_computed_egress_cidr_blocks, 0) - number_of_computed_egress_ipv6_cidr_blocks = try(each.value.number_of_computed_egress_ipv6_cidr_blocks, var.defaults.number_of_computed_egress_ipv6_cidr_blocks, 0) - number_of_computed_egress_prefix_list_ids = try(each.value.number_of_computed_egress_prefix_list_ids, var.defaults.number_of_computed_egress_prefix_list_ids, 0) - number_of_computed_egress_rules = try(each.value.number_of_computed_egress_rules, var.defaults.number_of_computed_egress_rules, 0) - number_of_computed_egress_with_cidr_blocks = try(each.value.number_of_computed_egress_with_cidr_blocks, var.defaults.number_of_computed_egress_with_cidr_blocks, 0) - number_of_computed_egress_with_ipv6_cidr_blocks = try(each.value.number_of_computed_egress_with_ipv6_cidr_blocks, var.defaults.number_of_computed_egress_with_ipv6_cidr_blocks, 0) - number_of_computed_egress_with_prefix_list_ids = try(each.value.number_of_computed_egress_with_prefix_list_ids, var.defaults.number_of_computed_egress_with_prefix_list_ids, 0) - number_of_computed_egress_with_self = try(each.value.number_of_computed_egress_with_self, var.defaults.number_of_computed_egress_with_self, 0) - number_of_computed_egress_with_source_security_group_id = try(each.value.number_of_computed_egress_with_source_security_group_id, var.defaults.number_of_computed_egress_with_source_security_group_id, 0) - number_of_computed_ingress_cidr_blocks = try(each.value.number_of_computed_ingress_cidr_blocks, var.defaults.number_of_computed_ingress_cidr_blocks, 0) - number_of_computed_ingress_ipv6_cidr_blocks = try(each.value.number_of_computed_ingress_ipv6_cidr_blocks, var.defaults.number_of_computed_ingress_ipv6_cidr_blocks, 0) - number_of_computed_ingress_prefix_list_ids = try(each.value.number_of_computed_ingress_prefix_list_ids, var.defaults.number_of_computed_ingress_prefix_list_ids, 0) - number_of_computed_ingress_rules = try(each.value.number_of_computed_ingress_rules, var.defaults.number_of_computed_ingress_rules, 0) - number_of_computed_ingress_with_cidr_blocks = try(each.value.number_of_computed_ingress_with_cidr_blocks, var.defaults.number_of_computed_ingress_with_cidr_blocks, 0) - number_of_computed_ingress_with_ipv6_cidr_blocks = try(each.value.number_of_computed_ingress_with_ipv6_cidr_blocks, var.defaults.number_of_computed_ingress_with_ipv6_cidr_blocks, 0) - number_of_computed_ingress_with_prefix_list_ids = try(each.value.number_of_computed_ingress_with_prefix_list_ids, var.defaults.number_of_computed_ingress_with_prefix_list_ids, 0) - number_of_computed_ingress_with_self = try(each.value.number_of_computed_ingress_with_self, var.defaults.number_of_computed_ingress_with_self, 0) - number_of_computed_ingress_with_source_security_group_id = try(each.value.number_of_computed_ingress_with_source_security_group_id, var.defaults.number_of_computed_ingress_with_source_security_group_id, 0) - revoke_rules_on_delete = try(each.value.revoke_rules_on_delete, var.defaults.revoke_rules_on_delete, false) - tags = try(each.value.tags, var.defaults.tags, {}) - use_name_prefix = try(each.value.use_name_prefix, var.defaults.use_name_prefix, true) - vpc_id = try(each.value.vpc_id, var.defaults.vpc_id) + auto_computed_egress_rules = try(each.value.auto_computed_egress_rules, var.defaults.auto_computed_egress_rules, []) + auto_computed_egress_with_self = try(each.value.auto_computed_egress_with_self, var.defaults.auto_computed_egress_with_self, []) + auto_computed_ingress_rules = try(each.value.auto_computed_ingress_rules, var.defaults.auto_computed_ingress_rules, []) + auto_computed_ingress_with_self = try(each.value.auto_computed_ingress_with_self, var.defaults.auto_computed_ingress_with_self, []) + auto_egress_rules = try(each.value.auto_egress_rules, var.defaults.auto_egress_rules, ["all-all"]) + auto_egress_with_self = try(each.value.auto_egress_with_self, var.defaults.auto_egress_with_self, []) + auto_ingress_rules = try(each.value.auto_ingress_rules, var.defaults.auto_ingress_rules, ["oracle-db-tcp"]) + auto_ingress_with_self = try(each.value.auto_ingress_with_self, var.defaults.auto_ingress_with_self, [{ "rule" = "all-all" }]) + auto_number_of_computed_egress_rules = try(each.value.auto_number_of_computed_egress_rules, var.defaults.auto_number_of_computed_egress_rules, 0) + auto_number_of_computed_egress_with_self = try(each.value.auto_number_of_computed_egress_with_self, var.defaults.auto_number_of_computed_egress_with_self, 0) + auto_number_of_computed_ingress_rules = try(each.value.auto_number_of_computed_ingress_rules, var.defaults.auto_number_of_computed_ingress_rules, 0) + auto_number_of_computed_ingress_with_self = try(each.value.auto_number_of_computed_ingress_with_self, var.defaults.auto_number_of_computed_ingress_with_self, 0) + computed_egress_cidr_blocks = try(each.value.computed_egress_cidr_blocks, var.defaults.computed_egress_cidr_blocks, ["0.0.0.0/0"]) + computed_egress_ipv6_cidr_blocks = try(each.value.computed_egress_ipv6_cidr_blocks, var.defaults.computed_egress_ipv6_cidr_blocks, ["::/0"]) + computed_egress_prefix_list_ids = try(each.value.computed_egress_prefix_list_ids, var.defaults.computed_egress_prefix_list_ids, []) + computed_egress_rules = try(each.value.computed_egress_rules, var.defaults.computed_egress_rules, []) + computed_egress_with_cidr_ipv4 = try(each.value.computed_egress_with_cidr_ipv4, var.defaults.computed_egress_with_cidr_ipv4, []) + computed_egress_with_cidr_ipv6 = try(each.value.computed_egress_with_cidr_ipv6, var.defaults.computed_egress_with_cidr_ipv6, []) + computed_egress_with_prefix_list_id = try(each.value.computed_egress_with_prefix_list_id, var.defaults.computed_egress_with_prefix_list_id, []) + computed_egress_with_referenced_security_group_id = try(each.value.computed_egress_with_referenced_security_group_id, var.defaults.computed_egress_with_referenced_security_group_id, []) + computed_egress_with_self = try(each.value.computed_egress_with_self, var.defaults.computed_egress_with_self, []) + computed_ingress_cidr_blocks = try(each.value.computed_ingress_cidr_blocks, var.defaults.computed_ingress_cidr_blocks, []) + computed_ingress_ipv6_cidr_blocks = try(each.value.computed_ingress_ipv6_cidr_blocks, var.defaults.computed_ingress_ipv6_cidr_blocks, []) + computed_ingress_prefix_list_ids = try(each.value.computed_ingress_prefix_list_ids, var.defaults.computed_ingress_prefix_list_ids, []) + computed_ingress_rules = try(each.value.computed_ingress_rules, var.defaults.computed_ingress_rules, []) + computed_ingress_with_cidr_ipv4 = try(each.value.computed_ingress_with_cidr_ipv4, var.defaults.computed_ingress_with_cidr_ipv4, []) + computed_ingress_with_cidr_ipv6 = try(each.value.computed_ingress_with_cidr_ipv6, var.defaults.computed_ingress_with_cidr_ipv6, []) + computed_ingress_with_prefix_list_id = try(each.value.computed_ingress_with_prefix_list_id, var.defaults.computed_ingress_with_prefix_list_id, []) + computed_ingress_with_referenced_security_group_id = try(each.value.computed_ingress_with_referenced_security_group_id, var.defaults.computed_ingress_with_referenced_security_group_id, []) + computed_ingress_with_self = try(each.value.computed_ingress_with_self, var.defaults.computed_ingress_with_self, []) + create = try(each.value.create, var.defaults.create, true) + description = try(each.value.description, var.defaults.description, "Security Group managed by Terraform") + egress_cidr_ipv4 = try(each.value.egress_cidr_ipv4, var.defaults.egress_cidr_ipv4, ["0.0.0.0/0"]) + egress_cidr_ipv6 = try(each.value.egress_cidr_ipv6, var.defaults.egress_cidr_ipv6, ["::/0"]) + egress_prefix_list_ids = try(each.value.egress_prefix_list_ids, var.defaults.egress_prefix_list_ids, []) + egress_rules = try(each.value.egress_rules, var.defaults.egress_rules, []) + egress_with_cidr_ipv4 = try(each.value.egress_with_cidr_ipv4, var.defaults.egress_with_cidr_ipv4, []) + egress_with_cidr_ipv6 = try(each.value.egress_with_cidr_ipv6, var.defaults.egress_with_cidr_ipv6, []) + egress_with_prefix_list_id = try(each.value.egress_with_prefix_list_id, var.defaults.egress_with_prefix_list_id, []) + egress_with_referenced_security_group_id = try(each.value.egress_with_referenced_security_group_id, var.defaults.egress_with_referenced_security_group_id, []) + egress_with_self = try(each.value.egress_with_self, var.defaults.egress_with_self, []) + ingress_cidr_ipv4 = try(each.value.ingress_cidr_ipv4, var.defaults.ingress_cidr_ipv4, []) + ingress_cidr_ipv6 = try(each.value.ingress_cidr_ipv6, var.defaults.ingress_cidr_ipv6, []) + ingress_prefix_list_ids = try(each.value.ingress_prefix_list_ids, var.defaults.ingress_prefix_list_ids, []) + ingress_rules = try(each.value.ingress_rules, var.defaults.ingress_rules, []) + ingress_with_cidr_ipv4 = try(each.value.ingress_with_cidr_ipv4, var.defaults.ingress_with_cidr_ipv4, []) + ingress_with_cidr_ipv6 = try(each.value.ingress_with_cidr_ipv6, var.defaults.ingress_with_cidr_ipv6, []) + ingress_with_prefix_list_id = try(each.value.ingress_with_prefix_list_id, var.defaults.ingress_with_prefix_list_id, []) + ingress_with_referenced_security_group_id = try(each.value.ingress_with_referenced_security_group_id, var.defaults.ingress_with_referenced_security_group_id, []) + ingress_with_self = try(each.value.ingress_with_self, var.defaults.ingress_with_self, []) + name = try(each.value.name, var.defaults.name) + number_of_computed_egress_cidr_blocks = try(each.value.number_of_computed_egress_cidr_blocks, var.defaults.number_of_computed_egress_cidr_blocks, 0) + number_of_computed_egress_ipv6_cidr_blocks = try(each.value.number_of_computed_egress_ipv6_cidr_blocks, var.defaults.number_of_computed_egress_ipv6_cidr_blocks, 0) + number_of_computed_egress_prefix_list_ids = try(each.value.number_of_computed_egress_prefix_list_ids, var.defaults.number_of_computed_egress_prefix_list_ids, 0) + number_of_computed_egress_rules = try(each.value.number_of_computed_egress_rules, var.defaults.number_of_computed_egress_rules, 0) + number_of_computed_egress_with_cidr_ipv4 = try(each.value.number_of_computed_egress_with_cidr_ipv4, var.defaults.number_of_computed_egress_with_cidr_ipv4, 0) + number_of_computed_egress_with_cidr_ipv6 = try(each.value.number_of_computed_egress_with_cidr_ipv6, var.defaults.number_of_computed_egress_with_cidr_ipv6, 0) + number_of_computed_egress_with_prefix_list_id = try(each.value.number_of_computed_egress_with_prefix_list_id, var.defaults.number_of_computed_egress_with_prefix_list_id, 0) + number_of_computed_egress_with_referenced_security_group_id = try(each.value.number_of_computed_egress_with_referenced_security_group_id, var.defaults.number_of_computed_egress_with_referenced_security_group_id, 0) + number_of_computed_egress_with_self = try(each.value.number_of_computed_egress_with_self, var.defaults.number_of_computed_egress_with_self, 0) + number_of_computed_ingress_cidr_blocks = try(each.value.number_of_computed_ingress_cidr_blocks, var.defaults.number_of_computed_ingress_cidr_blocks, 0) + number_of_computed_ingress_ipv6_cidr_blocks = try(each.value.number_of_computed_ingress_ipv6_cidr_blocks, var.defaults.number_of_computed_ingress_ipv6_cidr_blocks, 0) + number_of_computed_ingress_prefix_list_ids = try(each.value.number_of_computed_ingress_prefix_list_ids, var.defaults.number_of_computed_ingress_prefix_list_ids, 0) + number_of_computed_ingress_rules = try(each.value.number_of_computed_ingress_rules, var.defaults.number_of_computed_ingress_rules, 0) + number_of_computed_ingress_with_cidr_ipv4 = try(each.value.number_of_computed_ingress_with_cidr_ipv4, var.defaults.number_of_computed_ingress_with_cidr_ipv4, 0) + number_of_computed_ingress_with_cidr_ipv6 = try(each.value.number_of_computed_ingress_with_cidr_ipv6, var.defaults.number_of_computed_ingress_with_cidr_ipv6, 0) + number_of_computed_ingress_with_prefix_list_id = try(each.value.number_of_computed_ingress_with_prefix_list_id, var.defaults.number_of_computed_ingress_with_prefix_list_id, 0) + number_of_computed_ingress_with_referenced_security_group_id = try(each.value.number_of_computed_ingress_with_referenced_security_group_id, var.defaults.number_of_computed_ingress_with_referenced_security_group_id, 0) + number_of_computed_ingress_with_self = try(each.value.number_of_computed_ingress_with_self, var.defaults.number_of_computed_ingress_with_self, 0) + revoke_rules_on_delete = try(each.value.revoke_rules_on_delete, var.defaults.revoke_rules_on_delete, false) + tags = try(each.value.tags, var.defaults.tags, {}) + use_name_prefix = try(each.value.use_name_prefix, var.defaults.use_name_prefix, true) + vpc_id = try(each.value.vpc_id, var.defaults.vpc_id) } diff --git a/wrappers/postgresql/main.tf b/wrappers/postgresql/main.tf index 8e7e4868..59f23ee0 100644 --- a/wrappers/postgresql/main.tf +++ b/wrappers/postgresql/main.tf @@ -3,77 +3,77 @@ module "wrapper" { for_each = var.items - auto_computed_egress_rules = try(each.value.auto_computed_egress_rules, var.defaults.auto_computed_egress_rules, []) - auto_computed_egress_with_self = try(each.value.auto_computed_egress_with_self, var.defaults.auto_computed_egress_with_self, []) - auto_computed_ingress_rules = try(each.value.auto_computed_ingress_rules, var.defaults.auto_computed_ingress_rules, []) - auto_computed_ingress_with_self = try(each.value.auto_computed_ingress_with_self, var.defaults.auto_computed_ingress_with_self, []) - auto_egress_rules = try(each.value.auto_egress_rules, var.defaults.auto_egress_rules, ["all-all"]) - auto_egress_with_self = try(each.value.auto_egress_with_self, var.defaults.auto_egress_with_self, []) - auto_ingress_rules = try(each.value.auto_ingress_rules, var.defaults.auto_ingress_rules, ["postgresql-tcp"]) - auto_ingress_with_self = try(each.value.auto_ingress_with_self, var.defaults.auto_ingress_with_self, [{ "rule" = "all-all" }]) - auto_number_of_computed_egress_rules = try(each.value.auto_number_of_computed_egress_rules, var.defaults.auto_number_of_computed_egress_rules, 0) - auto_number_of_computed_egress_with_self = try(each.value.auto_number_of_computed_egress_with_self, var.defaults.auto_number_of_computed_egress_with_self, 0) - auto_number_of_computed_ingress_rules = try(each.value.auto_number_of_computed_ingress_rules, var.defaults.auto_number_of_computed_ingress_rules, 0) - auto_number_of_computed_ingress_with_self = try(each.value.auto_number_of_computed_ingress_with_self, var.defaults.auto_number_of_computed_ingress_with_self, 0) - computed_egress_cidr_blocks = try(each.value.computed_egress_cidr_blocks, var.defaults.computed_egress_cidr_blocks, ["0.0.0.0/0"]) - computed_egress_ipv6_cidr_blocks = try(each.value.computed_egress_ipv6_cidr_blocks, var.defaults.computed_egress_ipv6_cidr_blocks, ["::/0"]) - computed_egress_prefix_list_ids = try(each.value.computed_egress_prefix_list_ids, var.defaults.computed_egress_prefix_list_ids, []) - computed_egress_rules = try(each.value.computed_egress_rules, var.defaults.computed_egress_rules, []) - computed_egress_with_cidr_blocks = try(each.value.computed_egress_with_cidr_blocks, var.defaults.computed_egress_with_cidr_blocks, []) - computed_egress_with_ipv6_cidr_blocks = try(each.value.computed_egress_with_ipv6_cidr_blocks, var.defaults.computed_egress_with_ipv6_cidr_blocks, []) - computed_egress_with_prefix_list_ids = try(each.value.computed_egress_with_prefix_list_ids, var.defaults.computed_egress_with_prefix_list_ids, []) - computed_egress_with_self = try(each.value.computed_egress_with_self, var.defaults.computed_egress_with_self, []) - computed_egress_with_source_security_group_id = try(each.value.computed_egress_with_source_security_group_id, var.defaults.computed_egress_with_source_security_group_id, []) - computed_ingress_cidr_blocks = try(each.value.computed_ingress_cidr_blocks, var.defaults.computed_ingress_cidr_blocks, []) - computed_ingress_ipv6_cidr_blocks = try(each.value.computed_ingress_ipv6_cidr_blocks, var.defaults.computed_ingress_ipv6_cidr_blocks, []) - computed_ingress_prefix_list_ids = try(each.value.computed_ingress_prefix_list_ids, var.defaults.computed_ingress_prefix_list_ids, []) - computed_ingress_rules = try(each.value.computed_ingress_rules, var.defaults.computed_ingress_rules, []) - computed_ingress_with_cidr_blocks = try(each.value.computed_ingress_with_cidr_blocks, var.defaults.computed_ingress_with_cidr_blocks, []) - computed_ingress_with_ipv6_cidr_blocks = try(each.value.computed_ingress_with_ipv6_cidr_blocks, var.defaults.computed_ingress_with_ipv6_cidr_blocks, []) - computed_ingress_with_prefix_list_ids = try(each.value.computed_ingress_with_prefix_list_ids, var.defaults.computed_ingress_with_prefix_list_ids, []) - computed_ingress_with_self = try(each.value.computed_ingress_with_self, var.defaults.computed_ingress_with_self, []) - computed_ingress_with_source_security_group_id = try(each.value.computed_ingress_with_source_security_group_id, var.defaults.computed_ingress_with_source_security_group_id, []) - create = try(each.value.create, var.defaults.create, true) - description = try(each.value.description, var.defaults.description, "Security Group managed by Terraform") - egress_cidr_blocks = try(each.value.egress_cidr_blocks, var.defaults.egress_cidr_blocks, ["0.0.0.0/0"]) - egress_ipv6_cidr_blocks = try(each.value.egress_ipv6_cidr_blocks, var.defaults.egress_ipv6_cidr_blocks, ["::/0"]) - egress_prefix_list_ids = try(each.value.egress_prefix_list_ids, var.defaults.egress_prefix_list_ids, []) - egress_rules = try(each.value.egress_rules, var.defaults.egress_rules, []) - egress_with_cidr_blocks = try(each.value.egress_with_cidr_blocks, var.defaults.egress_with_cidr_blocks, []) - egress_with_ipv6_cidr_blocks = try(each.value.egress_with_ipv6_cidr_blocks, var.defaults.egress_with_ipv6_cidr_blocks, []) - egress_with_prefix_list_ids = try(each.value.egress_with_prefix_list_ids, var.defaults.egress_with_prefix_list_ids, []) - egress_with_self = try(each.value.egress_with_self, var.defaults.egress_with_self, []) - egress_with_source_security_group_id = try(each.value.egress_with_source_security_group_id, var.defaults.egress_with_source_security_group_id, []) - ingress_cidr_blocks = try(each.value.ingress_cidr_blocks, var.defaults.ingress_cidr_blocks, []) - ingress_ipv6_cidr_blocks = try(each.value.ingress_ipv6_cidr_blocks, var.defaults.ingress_ipv6_cidr_blocks, []) - ingress_prefix_list_ids = try(each.value.ingress_prefix_list_ids, var.defaults.ingress_prefix_list_ids, []) - ingress_rules = try(each.value.ingress_rules, var.defaults.ingress_rules, []) - ingress_with_cidr_blocks = try(each.value.ingress_with_cidr_blocks, var.defaults.ingress_with_cidr_blocks, []) - ingress_with_ipv6_cidr_blocks = try(each.value.ingress_with_ipv6_cidr_blocks, var.defaults.ingress_with_ipv6_cidr_blocks, []) - ingress_with_prefix_list_ids = try(each.value.ingress_with_prefix_list_ids, var.defaults.ingress_with_prefix_list_ids, []) - ingress_with_self = try(each.value.ingress_with_self, var.defaults.ingress_with_self, []) - ingress_with_source_security_group_id = try(each.value.ingress_with_source_security_group_id, var.defaults.ingress_with_source_security_group_id, []) - name = try(each.value.name, var.defaults.name) - number_of_computed_egress_cidr_blocks = try(each.value.number_of_computed_egress_cidr_blocks, var.defaults.number_of_computed_egress_cidr_blocks, 0) - number_of_computed_egress_ipv6_cidr_blocks = try(each.value.number_of_computed_egress_ipv6_cidr_blocks, var.defaults.number_of_computed_egress_ipv6_cidr_blocks, 0) - number_of_computed_egress_prefix_list_ids = try(each.value.number_of_computed_egress_prefix_list_ids, var.defaults.number_of_computed_egress_prefix_list_ids, 0) - number_of_computed_egress_rules = try(each.value.number_of_computed_egress_rules, var.defaults.number_of_computed_egress_rules, 0) - number_of_computed_egress_with_cidr_blocks = try(each.value.number_of_computed_egress_with_cidr_blocks, var.defaults.number_of_computed_egress_with_cidr_blocks, 0) - number_of_computed_egress_with_ipv6_cidr_blocks = try(each.value.number_of_computed_egress_with_ipv6_cidr_blocks, var.defaults.number_of_computed_egress_with_ipv6_cidr_blocks, 0) - number_of_computed_egress_with_prefix_list_ids = try(each.value.number_of_computed_egress_with_prefix_list_ids, var.defaults.number_of_computed_egress_with_prefix_list_ids, 0) - number_of_computed_egress_with_self = try(each.value.number_of_computed_egress_with_self, var.defaults.number_of_computed_egress_with_self, 0) - number_of_computed_egress_with_source_security_group_id = try(each.value.number_of_computed_egress_with_source_security_group_id, var.defaults.number_of_computed_egress_with_source_security_group_id, 0) - number_of_computed_ingress_cidr_blocks = try(each.value.number_of_computed_ingress_cidr_blocks, var.defaults.number_of_computed_ingress_cidr_blocks, 0) - number_of_computed_ingress_ipv6_cidr_blocks = try(each.value.number_of_computed_ingress_ipv6_cidr_blocks, var.defaults.number_of_computed_ingress_ipv6_cidr_blocks, 0) - number_of_computed_ingress_prefix_list_ids = try(each.value.number_of_computed_ingress_prefix_list_ids, var.defaults.number_of_computed_ingress_prefix_list_ids, 0) - number_of_computed_ingress_rules = try(each.value.number_of_computed_ingress_rules, var.defaults.number_of_computed_ingress_rules, 0) - number_of_computed_ingress_with_cidr_blocks = try(each.value.number_of_computed_ingress_with_cidr_blocks, var.defaults.number_of_computed_ingress_with_cidr_blocks, 0) - number_of_computed_ingress_with_ipv6_cidr_blocks = try(each.value.number_of_computed_ingress_with_ipv6_cidr_blocks, var.defaults.number_of_computed_ingress_with_ipv6_cidr_blocks, 0) - number_of_computed_ingress_with_prefix_list_ids = try(each.value.number_of_computed_ingress_with_prefix_list_ids, var.defaults.number_of_computed_ingress_with_prefix_list_ids, 0) - number_of_computed_ingress_with_self = try(each.value.number_of_computed_ingress_with_self, var.defaults.number_of_computed_ingress_with_self, 0) - number_of_computed_ingress_with_source_security_group_id = try(each.value.number_of_computed_ingress_with_source_security_group_id, var.defaults.number_of_computed_ingress_with_source_security_group_id, 0) - revoke_rules_on_delete = try(each.value.revoke_rules_on_delete, var.defaults.revoke_rules_on_delete, false) - tags = try(each.value.tags, var.defaults.tags, {}) - use_name_prefix = try(each.value.use_name_prefix, var.defaults.use_name_prefix, true) - vpc_id = try(each.value.vpc_id, var.defaults.vpc_id) + auto_computed_egress_rules = try(each.value.auto_computed_egress_rules, var.defaults.auto_computed_egress_rules, []) + auto_computed_egress_with_self = try(each.value.auto_computed_egress_with_self, var.defaults.auto_computed_egress_with_self, []) + auto_computed_ingress_rules = try(each.value.auto_computed_ingress_rules, var.defaults.auto_computed_ingress_rules, []) + auto_computed_ingress_with_self = try(each.value.auto_computed_ingress_with_self, var.defaults.auto_computed_ingress_with_self, []) + auto_egress_rules = try(each.value.auto_egress_rules, var.defaults.auto_egress_rules, ["all-all"]) + auto_egress_with_self = try(each.value.auto_egress_with_self, var.defaults.auto_egress_with_self, []) + auto_ingress_rules = try(each.value.auto_ingress_rules, var.defaults.auto_ingress_rules, ["postgresql-tcp"]) + auto_ingress_with_self = try(each.value.auto_ingress_with_self, var.defaults.auto_ingress_with_self, [{ "rule" = "all-all" }]) + auto_number_of_computed_egress_rules = try(each.value.auto_number_of_computed_egress_rules, var.defaults.auto_number_of_computed_egress_rules, 0) + auto_number_of_computed_egress_with_self = try(each.value.auto_number_of_computed_egress_with_self, var.defaults.auto_number_of_computed_egress_with_self, 0) + auto_number_of_computed_ingress_rules = try(each.value.auto_number_of_computed_ingress_rules, var.defaults.auto_number_of_computed_ingress_rules, 0) + auto_number_of_computed_ingress_with_self = try(each.value.auto_number_of_computed_ingress_with_self, var.defaults.auto_number_of_computed_ingress_with_self, 0) + computed_egress_cidr_blocks = try(each.value.computed_egress_cidr_blocks, var.defaults.computed_egress_cidr_blocks, ["0.0.0.0/0"]) + computed_egress_ipv6_cidr_blocks = try(each.value.computed_egress_ipv6_cidr_blocks, var.defaults.computed_egress_ipv6_cidr_blocks, ["::/0"]) + computed_egress_prefix_list_ids = try(each.value.computed_egress_prefix_list_ids, var.defaults.computed_egress_prefix_list_ids, []) + computed_egress_rules = try(each.value.computed_egress_rules, var.defaults.computed_egress_rules, []) + computed_egress_with_cidr_ipv4 = try(each.value.computed_egress_with_cidr_ipv4, var.defaults.computed_egress_with_cidr_ipv4, []) + computed_egress_with_cidr_ipv6 = try(each.value.computed_egress_with_cidr_ipv6, var.defaults.computed_egress_with_cidr_ipv6, []) + computed_egress_with_prefix_list_id = try(each.value.computed_egress_with_prefix_list_id, var.defaults.computed_egress_with_prefix_list_id, []) + computed_egress_with_referenced_security_group_id = try(each.value.computed_egress_with_referenced_security_group_id, var.defaults.computed_egress_with_referenced_security_group_id, []) + computed_egress_with_self = try(each.value.computed_egress_with_self, var.defaults.computed_egress_with_self, []) + computed_ingress_cidr_blocks = try(each.value.computed_ingress_cidr_blocks, var.defaults.computed_ingress_cidr_blocks, []) + computed_ingress_ipv6_cidr_blocks = try(each.value.computed_ingress_ipv6_cidr_blocks, var.defaults.computed_ingress_ipv6_cidr_blocks, []) + computed_ingress_prefix_list_ids = try(each.value.computed_ingress_prefix_list_ids, var.defaults.computed_ingress_prefix_list_ids, []) + computed_ingress_rules = try(each.value.computed_ingress_rules, var.defaults.computed_ingress_rules, []) + computed_ingress_with_cidr_ipv4 = try(each.value.computed_ingress_with_cidr_ipv4, var.defaults.computed_ingress_with_cidr_ipv4, []) + computed_ingress_with_cidr_ipv6 = try(each.value.computed_ingress_with_cidr_ipv6, var.defaults.computed_ingress_with_cidr_ipv6, []) + computed_ingress_with_prefix_list_id = try(each.value.computed_ingress_with_prefix_list_id, var.defaults.computed_ingress_with_prefix_list_id, []) + computed_ingress_with_referenced_security_group_id = try(each.value.computed_ingress_with_referenced_security_group_id, var.defaults.computed_ingress_with_referenced_security_group_id, []) + computed_ingress_with_self = try(each.value.computed_ingress_with_self, var.defaults.computed_ingress_with_self, []) + create = try(each.value.create, var.defaults.create, true) + description = try(each.value.description, var.defaults.description, "Security Group managed by Terraform") + egress_cidr_ipv4 = try(each.value.egress_cidr_ipv4, var.defaults.egress_cidr_ipv4, ["0.0.0.0/0"]) + egress_cidr_ipv6 = try(each.value.egress_cidr_ipv6, var.defaults.egress_cidr_ipv6, ["::/0"]) + egress_prefix_list_ids = try(each.value.egress_prefix_list_ids, var.defaults.egress_prefix_list_ids, []) + egress_rules = try(each.value.egress_rules, var.defaults.egress_rules, []) + egress_with_cidr_ipv4 = try(each.value.egress_with_cidr_ipv4, var.defaults.egress_with_cidr_ipv4, []) + egress_with_cidr_ipv6 = try(each.value.egress_with_cidr_ipv6, var.defaults.egress_with_cidr_ipv6, []) + egress_with_prefix_list_id = try(each.value.egress_with_prefix_list_id, var.defaults.egress_with_prefix_list_id, []) + egress_with_referenced_security_group_id = try(each.value.egress_with_referenced_security_group_id, var.defaults.egress_with_referenced_security_group_id, []) + egress_with_self = try(each.value.egress_with_self, var.defaults.egress_with_self, []) + ingress_cidr_ipv4 = try(each.value.ingress_cidr_ipv4, var.defaults.ingress_cidr_ipv4, []) + ingress_cidr_ipv6 = try(each.value.ingress_cidr_ipv6, var.defaults.ingress_cidr_ipv6, []) + ingress_prefix_list_ids = try(each.value.ingress_prefix_list_ids, var.defaults.ingress_prefix_list_ids, []) + ingress_rules = try(each.value.ingress_rules, var.defaults.ingress_rules, []) + ingress_with_cidr_ipv4 = try(each.value.ingress_with_cidr_ipv4, var.defaults.ingress_with_cidr_ipv4, []) + ingress_with_cidr_ipv6 = try(each.value.ingress_with_cidr_ipv6, var.defaults.ingress_with_cidr_ipv6, []) + ingress_with_prefix_list_id = try(each.value.ingress_with_prefix_list_id, var.defaults.ingress_with_prefix_list_id, []) + ingress_with_referenced_security_group_id = try(each.value.ingress_with_referenced_security_group_id, var.defaults.ingress_with_referenced_security_group_id, []) + ingress_with_self = try(each.value.ingress_with_self, var.defaults.ingress_with_self, []) + name = try(each.value.name, var.defaults.name) + number_of_computed_egress_cidr_blocks = try(each.value.number_of_computed_egress_cidr_blocks, var.defaults.number_of_computed_egress_cidr_blocks, 0) + number_of_computed_egress_ipv6_cidr_blocks = try(each.value.number_of_computed_egress_ipv6_cidr_blocks, var.defaults.number_of_computed_egress_ipv6_cidr_blocks, 0) + number_of_computed_egress_prefix_list_ids = try(each.value.number_of_computed_egress_prefix_list_ids, var.defaults.number_of_computed_egress_prefix_list_ids, 0) + number_of_computed_egress_rules = try(each.value.number_of_computed_egress_rules, var.defaults.number_of_computed_egress_rules, 0) + number_of_computed_egress_with_cidr_ipv4 = try(each.value.number_of_computed_egress_with_cidr_ipv4, var.defaults.number_of_computed_egress_with_cidr_ipv4, 0) + number_of_computed_egress_with_cidr_ipv6 = try(each.value.number_of_computed_egress_with_cidr_ipv6, var.defaults.number_of_computed_egress_with_cidr_ipv6, 0) + number_of_computed_egress_with_prefix_list_id = try(each.value.number_of_computed_egress_with_prefix_list_id, var.defaults.number_of_computed_egress_with_prefix_list_id, 0) + number_of_computed_egress_with_referenced_security_group_id = try(each.value.number_of_computed_egress_with_referenced_security_group_id, var.defaults.number_of_computed_egress_with_referenced_security_group_id, 0) + number_of_computed_egress_with_self = try(each.value.number_of_computed_egress_with_self, var.defaults.number_of_computed_egress_with_self, 0) + number_of_computed_ingress_cidr_blocks = try(each.value.number_of_computed_ingress_cidr_blocks, var.defaults.number_of_computed_ingress_cidr_blocks, 0) + number_of_computed_ingress_ipv6_cidr_blocks = try(each.value.number_of_computed_ingress_ipv6_cidr_blocks, var.defaults.number_of_computed_ingress_ipv6_cidr_blocks, 0) + number_of_computed_ingress_prefix_list_ids = try(each.value.number_of_computed_ingress_prefix_list_ids, var.defaults.number_of_computed_ingress_prefix_list_ids, 0) + number_of_computed_ingress_rules = try(each.value.number_of_computed_ingress_rules, var.defaults.number_of_computed_ingress_rules, 0) + number_of_computed_ingress_with_cidr_ipv4 = try(each.value.number_of_computed_ingress_with_cidr_ipv4, var.defaults.number_of_computed_ingress_with_cidr_ipv4, 0) + number_of_computed_ingress_with_cidr_ipv6 = try(each.value.number_of_computed_ingress_with_cidr_ipv6, var.defaults.number_of_computed_ingress_with_cidr_ipv6, 0) + number_of_computed_ingress_with_prefix_list_id = try(each.value.number_of_computed_ingress_with_prefix_list_id, var.defaults.number_of_computed_ingress_with_prefix_list_id, 0) + number_of_computed_ingress_with_referenced_security_group_id = try(each.value.number_of_computed_ingress_with_referenced_security_group_id, var.defaults.number_of_computed_ingress_with_referenced_security_group_id, 0) + number_of_computed_ingress_with_self = try(each.value.number_of_computed_ingress_with_self, var.defaults.number_of_computed_ingress_with_self, 0) + revoke_rules_on_delete = try(each.value.revoke_rules_on_delete, var.defaults.revoke_rules_on_delete, false) + tags = try(each.value.tags, var.defaults.tags, {}) + use_name_prefix = try(each.value.use_name_prefix, var.defaults.use_name_prefix, true) + vpc_id = try(each.value.vpc_id, var.defaults.vpc_id) } diff --git a/wrappers/prometheus/main.tf b/wrappers/prometheus/main.tf index 49cabf9d..e7407f56 100644 --- a/wrappers/prometheus/main.tf +++ b/wrappers/prometheus/main.tf @@ -3,77 +3,77 @@ module "wrapper" { for_each = var.items - auto_computed_egress_rules = try(each.value.auto_computed_egress_rules, var.defaults.auto_computed_egress_rules, []) - auto_computed_egress_with_self = try(each.value.auto_computed_egress_with_self, var.defaults.auto_computed_egress_with_self, []) - auto_computed_ingress_rules = try(each.value.auto_computed_ingress_rules, var.defaults.auto_computed_ingress_rules, []) - auto_computed_ingress_with_self = try(each.value.auto_computed_ingress_with_self, var.defaults.auto_computed_ingress_with_self, []) - auto_egress_rules = try(each.value.auto_egress_rules, var.defaults.auto_egress_rules, ["all-all"]) - auto_egress_with_self = try(each.value.auto_egress_with_self, var.defaults.auto_egress_with_self, []) - auto_ingress_rules = try(each.value.auto_ingress_rules, var.defaults.auto_ingress_rules, ["prometheus-http-tcp", "prometheus-pushgateway-http-tcp", "prometheus-node-exporter-http-tcp"]) - auto_ingress_with_self = try(each.value.auto_ingress_with_self, var.defaults.auto_ingress_with_self, [{ "rule" = "all-all" }]) - auto_number_of_computed_egress_rules = try(each.value.auto_number_of_computed_egress_rules, var.defaults.auto_number_of_computed_egress_rules, 0) - auto_number_of_computed_egress_with_self = try(each.value.auto_number_of_computed_egress_with_self, var.defaults.auto_number_of_computed_egress_with_self, 0) - auto_number_of_computed_ingress_rules = try(each.value.auto_number_of_computed_ingress_rules, var.defaults.auto_number_of_computed_ingress_rules, 0) - auto_number_of_computed_ingress_with_self = try(each.value.auto_number_of_computed_ingress_with_self, var.defaults.auto_number_of_computed_ingress_with_self, 0) - computed_egress_cidr_blocks = try(each.value.computed_egress_cidr_blocks, var.defaults.computed_egress_cidr_blocks, ["0.0.0.0/0"]) - computed_egress_ipv6_cidr_blocks = try(each.value.computed_egress_ipv6_cidr_blocks, var.defaults.computed_egress_ipv6_cidr_blocks, ["::/0"]) - computed_egress_prefix_list_ids = try(each.value.computed_egress_prefix_list_ids, var.defaults.computed_egress_prefix_list_ids, []) - computed_egress_rules = try(each.value.computed_egress_rules, var.defaults.computed_egress_rules, []) - computed_egress_with_cidr_blocks = try(each.value.computed_egress_with_cidr_blocks, var.defaults.computed_egress_with_cidr_blocks, []) - computed_egress_with_ipv6_cidr_blocks = try(each.value.computed_egress_with_ipv6_cidr_blocks, var.defaults.computed_egress_with_ipv6_cidr_blocks, []) - computed_egress_with_prefix_list_ids = try(each.value.computed_egress_with_prefix_list_ids, var.defaults.computed_egress_with_prefix_list_ids, []) - computed_egress_with_self = try(each.value.computed_egress_with_self, var.defaults.computed_egress_with_self, []) - computed_egress_with_source_security_group_id = try(each.value.computed_egress_with_source_security_group_id, var.defaults.computed_egress_with_source_security_group_id, []) - computed_ingress_cidr_blocks = try(each.value.computed_ingress_cidr_blocks, var.defaults.computed_ingress_cidr_blocks, []) - computed_ingress_ipv6_cidr_blocks = try(each.value.computed_ingress_ipv6_cidr_blocks, var.defaults.computed_ingress_ipv6_cidr_blocks, []) - computed_ingress_prefix_list_ids = try(each.value.computed_ingress_prefix_list_ids, var.defaults.computed_ingress_prefix_list_ids, []) - computed_ingress_rules = try(each.value.computed_ingress_rules, var.defaults.computed_ingress_rules, []) - computed_ingress_with_cidr_blocks = try(each.value.computed_ingress_with_cidr_blocks, var.defaults.computed_ingress_with_cidr_blocks, []) - computed_ingress_with_ipv6_cidr_blocks = try(each.value.computed_ingress_with_ipv6_cidr_blocks, var.defaults.computed_ingress_with_ipv6_cidr_blocks, []) - computed_ingress_with_prefix_list_ids = try(each.value.computed_ingress_with_prefix_list_ids, var.defaults.computed_ingress_with_prefix_list_ids, []) - computed_ingress_with_self = try(each.value.computed_ingress_with_self, var.defaults.computed_ingress_with_self, []) - computed_ingress_with_source_security_group_id = try(each.value.computed_ingress_with_source_security_group_id, var.defaults.computed_ingress_with_source_security_group_id, []) - create = try(each.value.create, var.defaults.create, true) - description = try(each.value.description, var.defaults.description, "Security Group managed by Terraform") - egress_cidr_blocks = try(each.value.egress_cidr_blocks, var.defaults.egress_cidr_blocks, ["0.0.0.0/0"]) - egress_ipv6_cidr_blocks = try(each.value.egress_ipv6_cidr_blocks, var.defaults.egress_ipv6_cidr_blocks, ["::/0"]) - egress_prefix_list_ids = try(each.value.egress_prefix_list_ids, var.defaults.egress_prefix_list_ids, []) - egress_rules = try(each.value.egress_rules, var.defaults.egress_rules, []) - egress_with_cidr_blocks = try(each.value.egress_with_cidr_blocks, var.defaults.egress_with_cidr_blocks, []) - egress_with_ipv6_cidr_blocks = try(each.value.egress_with_ipv6_cidr_blocks, var.defaults.egress_with_ipv6_cidr_blocks, []) - egress_with_prefix_list_ids = try(each.value.egress_with_prefix_list_ids, var.defaults.egress_with_prefix_list_ids, []) - egress_with_self = try(each.value.egress_with_self, var.defaults.egress_with_self, []) - egress_with_source_security_group_id = try(each.value.egress_with_source_security_group_id, var.defaults.egress_with_source_security_group_id, []) - ingress_cidr_blocks = try(each.value.ingress_cidr_blocks, var.defaults.ingress_cidr_blocks, []) - ingress_ipv6_cidr_blocks = try(each.value.ingress_ipv6_cidr_blocks, var.defaults.ingress_ipv6_cidr_blocks, []) - ingress_prefix_list_ids = try(each.value.ingress_prefix_list_ids, var.defaults.ingress_prefix_list_ids, []) - ingress_rules = try(each.value.ingress_rules, var.defaults.ingress_rules, []) - ingress_with_cidr_blocks = try(each.value.ingress_with_cidr_blocks, var.defaults.ingress_with_cidr_blocks, []) - ingress_with_ipv6_cidr_blocks = try(each.value.ingress_with_ipv6_cidr_blocks, var.defaults.ingress_with_ipv6_cidr_blocks, []) - ingress_with_prefix_list_ids = try(each.value.ingress_with_prefix_list_ids, var.defaults.ingress_with_prefix_list_ids, []) - ingress_with_self = try(each.value.ingress_with_self, var.defaults.ingress_with_self, []) - ingress_with_source_security_group_id = try(each.value.ingress_with_source_security_group_id, var.defaults.ingress_with_source_security_group_id, []) - name = try(each.value.name, var.defaults.name) - number_of_computed_egress_cidr_blocks = try(each.value.number_of_computed_egress_cidr_blocks, var.defaults.number_of_computed_egress_cidr_blocks, 0) - number_of_computed_egress_ipv6_cidr_blocks = try(each.value.number_of_computed_egress_ipv6_cidr_blocks, var.defaults.number_of_computed_egress_ipv6_cidr_blocks, 0) - number_of_computed_egress_prefix_list_ids = try(each.value.number_of_computed_egress_prefix_list_ids, var.defaults.number_of_computed_egress_prefix_list_ids, 0) - number_of_computed_egress_rules = try(each.value.number_of_computed_egress_rules, var.defaults.number_of_computed_egress_rules, 0) - number_of_computed_egress_with_cidr_blocks = try(each.value.number_of_computed_egress_with_cidr_blocks, var.defaults.number_of_computed_egress_with_cidr_blocks, 0) - number_of_computed_egress_with_ipv6_cidr_blocks = try(each.value.number_of_computed_egress_with_ipv6_cidr_blocks, var.defaults.number_of_computed_egress_with_ipv6_cidr_blocks, 0) - number_of_computed_egress_with_prefix_list_ids = try(each.value.number_of_computed_egress_with_prefix_list_ids, var.defaults.number_of_computed_egress_with_prefix_list_ids, 0) - number_of_computed_egress_with_self = try(each.value.number_of_computed_egress_with_self, var.defaults.number_of_computed_egress_with_self, 0) - number_of_computed_egress_with_source_security_group_id = try(each.value.number_of_computed_egress_with_source_security_group_id, var.defaults.number_of_computed_egress_with_source_security_group_id, 0) - number_of_computed_ingress_cidr_blocks = try(each.value.number_of_computed_ingress_cidr_blocks, var.defaults.number_of_computed_ingress_cidr_blocks, 0) - number_of_computed_ingress_ipv6_cidr_blocks = try(each.value.number_of_computed_ingress_ipv6_cidr_blocks, var.defaults.number_of_computed_ingress_ipv6_cidr_blocks, 0) - number_of_computed_ingress_prefix_list_ids = try(each.value.number_of_computed_ingress_prefix_list_ids, var.defaults.number_of_computed_ingress_prefix_list_ids, 0) - number_of_computed_ingress_rules = try(each.value.number_of_computed_ingress_rules, var.defaults.number_of_computed_ingress_rules, 0) - number_of_computed_ingress_with_cidr_blocks = try(each.value.number_of_computed_ingress_with_cidr_blocks, var.defaults.number_of_computed_ingress_with_cidr_blocks, 0) - number_of_computed_ingress_with_ipv6_cidr_blocks = try(each.value.number_of_computed_ingress_with_ipv6_cidr_blocks, var.defaults.number_of_computed_ingress_with_ipv6_cidr_blocks, 0) - number_of_computed_ingress_with_prefix_list_ids = try(each.value.number_of_computed_ingress_with_prefix_list_ids, var.defaults.number_of_computed_ingress_with_prefix_list_ids, 0) - number_of_computed_ingress_with_self = try(each.value.number_of_computed_ingress_with_self, var.defaults.number_of_computed_ingress_with_self, 0) - number_of_computed_ingress_with_source_security_group_id = try(each.value.number_of_computed_ingress_with_source_security_group_id, var.defaults.number_of_computed_ingress_with_source_security_group_id, 0) - revoke_rules_on_delete = try(each.value.revoke_rules_on_delete, var.defaults.revoke_rules_on_delete, false) - tags = try(each.value.tags, var.defaults.tags, {}) - use_name_prefix = try(each.value.use_name_prefix, var.defaults.use_name_prefix, true) - vpc_id = try(each.value.vpc_id, var.defaults.vpc_id) + auto_computed_egress_rules = try(each.value.auto_computed_egress_rules, var.defaults.auto_computed_egress_rules, []) + auto_computed_egress_with_self = try(each.value.auto_computed_egress_with_self, var.defaults.auto_computed_egress_with_self, []) + auto_computed_ingress_rules = try(each.value.auto_computed_ingress_rules, var.defaults.auto_computed_ingress_rules, []) + auto_computed_ingress_with_self = try(each.value.auto_computed_ingress_with_self, var.defaults.auto_computed_ingress_with_self, []) + auto_egress_rules = try(each.value.auto_egress_rules, var.defaults.auto_egress_rules, ["all-all"]) + auto_egress_with_self = try(each.value.auto_egress_with_self, var.defaults.auto_egress_with_self, []) + auto_ingress_rules = try(each.value.auto_ingress_rules, var.defaults.auto_ingress_rules, ["prometheus-http-tcp", "prometheus-pushgateway-http-tcp", "prometheus-node-exporter-http-tcp"]) + auto_ingress_with_self = try(each.value.auto_ingress_with_self, var.defaults.auto_ingress_with_self, [{ "rule" = "all-all" }]) + auto_number_of_computed_egress_rules = try(each.value.auto_number_of_computed_egress_rules, var.defaults.auto_number_of_computed_egress_rules, 0) + auto_number_of_computed_egress_with_self = try(each.value.auto_number_of_computed_egress_with_self, var.defaults.auto_number_of_computed_egress_with_self, 0) + auto_number_of_computed_ingress_rules = try(each.value.auto_number_of_computed_ingress_rules, var.defaults.auto_number_of_computed_ingress_rules, 0) + auto_number_of_computed_ingress_with_self = try(each.value.auto_number_of_computed_ingress_with_self, var.defaults.auto_number_of_computed_ingress_with_self, 0) + computed_egress_cidr_blocks = try(each.value.computed_egress_cidr_blocks, var.defaults.computed_egress_cidr_blocks, ["0.0.0.0/0"]) + computed_egress_ipv6_cidr_blocks = try(each.value.computed_egress_ipv6_cidr_blocks, var.defaults.computed_egress_ipv6_cidr_blocks, ["::/0"]) + computed_egress_prefix_list_ids = try(each.value.computed_egress_prefix_list_ids, var.defaults.computed_egress_prefix_list_ids, []) + computed_egress_rules = try(each.value.computed_egress_rules, var.defaults.computed_egress_rules, []) + computed_egress_with_cidr_ipv4 = try(each.value.computed_egress_with_cidr_ipv4, var.defaults.computed_egress_with_cidr_ipv4, []) + computed_egress_with_cidr_ipv6 = try(each.value.computed_egress_with_cidr_ipv6, var.defaults.computed_egress_with_cidr_ipv6, []) + computed_egress_with_prefix_list_id = try(each.value.computed_egress_with_prefix_list_id, var.defaults.computed_egress_with_prefix_list_id, []) + computed_egress_with_referenced_security_group_id = try(each.value.computed_egress_with_referenced_security_group_id, var.defaults.computed_egress_with_referenced_security_group_id, []) + computed_egress_with_self = try(each.value.computed_egress_with_self, var.defaults.computed_egress_with_self, []) + computed_ingress_cidr_blocks = try(each.value.computed_ingress_cidr_blocks, var.defaults.computed_ingress_cidr_blocks, []) + computed_ingress_ipv6_cidr_blocks = try(each.value.computed_ingress_ipv6_cidr_blocks, var.defaults.computed_ingress_ipv6_cidr_blocks, []) + computed_ingress_prefix_list_ids = try(each.value.computed_ingress_prefix_list_ids, var.defaults.computed_ingress_prefix_list_ids, []) + computed_ingress_rules = try(each.value.computed_ingress_rules, var.defaults.computed_ingress_rules, []) + computed_ingress_with_cidr_ipv4 = try(each.value.computed_ingress_with_cidr_ipv4, var.defaults.computed_ingress_with_cidr_ipv4, []) + computed_ingress_with_cidr_ipv6 = try(each.value.computed_ingress_with_cidr_ipv6, var.defaults.computed_ingress_with_cidr_ipv6, []) + computed_ingress_with_prefix_list_id = try(each.value.computed_ingress_with_prefix_list_id, var.defaults.computed_ingress_with_prefix_list_id, []) + computed_ingress_with_referenced_security_group_id = try(each.value.computed_ingress_with_referenced_security_group_id, var.defaults.computed_ingress_with_referenced_security_group_id, []) + computed_ingress_with_self = try(each.value.computed_ingress_with_self, var.defaults.computed_ingress_with_self, []) + create = try(each.value.create, var.defaults.create, true) + description = try(each.value.description, var.defaults.description, "Security Group managed by Terraform") + egress_cidr_ipv4 = try(each.value.egress_cidr_ipv4, var.defaults.egress_cidr_ipv4, ["0.0.0.0/0"]) + egress_cidr_ipv6 = try(each.value.egress_cidr_ipv6, var.defaults.egress_cidr_ipv6, ["::/0"]) + egress_prefix_list_ids = try(each.value.egress_prefix_list_ids, var.defaults.egress_prefix_list_ids, []) + egress_rules = try(each.value.egress_rules, var.defaults.egress_rules, []) + egress_with_cidr_ipv4 = try(each.value.egress_with_cidr_ipv4, var.defaults.egress_with_cidr_ipv4, []) + egress_with_cidr_ipv6 = try(each.value.egress_with_cidr_ipv6, var.defaults.egress_with_cidr_ipv6, []) + egress_with_prefix_list_id = try(each.value.egress_with_prefix_list_id, var.defaults.egress_with_prefix_list_id, []) + egress_with_referenced_security_group_id = try(each.value.egress_with_referenced_security_group_id, var.defaults.egress_with_referenced_security_group_id, []) + egress_with_self = try(each.value.egress_with_self, var.defaults.egress_with_self, []) + ingress_cidr_ipv4 = try(each.value.ingress_cidr_ipv4, var.defaults.ingress_cidr_ipv4, []) + ingress_cidr_ipv6 = try(each.value.ingress_cidr_ipv6, var.defaults.ingress_cidr_ipv6, []) + ingress_prefix_list_ids = try(each.value.ingress_prefix_list_ids, var.defaults.ingress_prefix_list_ids, []) + ingress_rules = try(each.value.ingress_rules, var.defaults.ingress_rules, []) + ingress_with_cidr_ipv4 = try(each.value.ingress_with_cidr_ipv4, var.defaults.ingress_with_cidr_ipv4, []) + ingress_with_cidr_ipv6 = try(each.value.ingress_with_cidr_ipv6, var.defaults.ingress_with_cidr_ipv6, []) + ingress_with_prefix_list_id = try(each.value.ingress_with_prefix_list_id, var.defaults.ingress_with_prefix_list_id, []) + ingress_with_referenced_security_group_id = try(each.value.ingress_with_referenced_security_group_id, var.defaults.ingress_with_referenced_security_group_id, []) + ingress_with_self = try(each.value.ingress_with_self, var.defaults.ingress_with_self, []) + name = try(each.value.name, var.defaults.name) + number_of_computed_egress_cidr_blocks = try(each.value.number_of_computed_egress_cidr_blocks, var.defaults.number_of_computed_egress_cidr_blocks, 0) + number_of_computed_egress_ipv6_cidr_blocks = try(each.value.number_of_computed_egress_ipv6_cidr_blocks, var.defaults.number_of_computed_egress_ipv6_cidr_blocks, 0) + number_of_computed_egress_prefix_list_ids = try(each.value.number_of_computed_egress_prefix_list_ids, var.defaults.number_of_computed_egress_prefix_list_ids, 0) + number_of_computed_egress_rules = try(each.value.number_of_computed_egress_rules, var.defaults.number_of_computed_egress_rules, 0) + number_of_computed_egress_with_cidr_ipv4 = try(each.value.number_of_computed_egress_with_cidr_ipv4, var.defaults.number_of_computed_egress_with_cidr_ipv4, 0) + number_of_computed_egress_with_cidr_ipv6 = try(each.value.number_of_computed_egress_with_cidr_ipv6, var.defaults.number_of_computed_egress_with_cidr_ipv6, 0) + number_of_computed_egress_with_prefix_list_id = try(each.value.number_of_computed_egress_with_prefix_list_id, var.defaults.number_of_computed_egress_with_prefix_list_id, 0) + number_of_computed_egress_with_referenced_security_group_id = try(each.value.number_of_computed_egress_with_referenced_security_group_id, var.defaults.number_of_computed_egress_with_referenced_security_group_id, 0) + number_of_computed_egress_with_self = try(each.value.number_of_computed_egress_with_self, var.defaults.number_of_computed_egress_with_self, 0) + number_of_computed_ingress_cidr_blocks = try(each.value.number_of_computed_ingress_cidr_blocks, var.defaults.number_of_computed_ingress_cidr_blocks, 0) + number_of_computed_ingress_ipv6_cidr_blocks = try(each.value.number_of_computed_ingress_ipv6_cidr_blocks, var.defaults.number_of_computed_ingress_ipv6_cidr_blocks, 0) + number_of_computed_ingress_prefix_list_ids = try(each.value.number_of_computed_ingress_prefix_list_ids, var.defaults.number_of_computed_ingress_prefix_list_ids, 0) + number_of_computed_ingress_rules = try(each.value.number_of_computed_ingress_rules, var.defaults.number_of_computed_ingress_rules, 0) + number_of_computed_ingress_with_cidr_ipv4 = try(each.value.number_of_computed_ingress_with_cidr_ipv4, var.defaults.number_of_computed_ingress_with_cidr_ipv4, 0) + number_of_computed_ingress_with_cidr_ipv6 = try(each.value.number_of_computed_ingress_with_cidr_ipv6, var.defaults.number_of_computed_ingress_with_cidr_ipv6, 0) + number_of_computed_ingress_with_prefix_list_id = try(each.value.number_of_computed_ingress_with_prefix_list_id, var.defaults.number_of_computed_ingress_with_prefix_list_id, 0) + number_of_computed_ingress_with_referenced_security_group_id = try(each.value.number_of_computed_ingress_with_referenced_security_group_id, var.defaults.number_of_computed_ingress_with_referenced_security_group_id, 0) + number_of_computed_ingress_with_self = try(each.value.number_of_computed_ingress_with_self, var.defaults.number_of_computed_ingress_with_self, 0) + revoke_rules_on_delete = try(each.value.revoke_rules_on_delete, var.defaults.revoke_rules_on_delete, false) + tags = try(each.value.tags, var.defaults.tags, {}) + use_name_prefix = try(each.value.use_name_prefix, var.defaults.use_name_prefix, true) + vpc_id = try(each.value.vpc_id, var.defaults.vpc_id) } diff --git a/wrappers/promtail/main.tf b/wrappers/promtail/main.tf index fee81db0..acabb14f 100644 --- a/wrappers/promtail/main.tf +++ b/wrappers/promtail/main.tf @@ -3,77 +3,77 @@ module "wrapper" { for_each = var.items - auto_computed_egress_rules = try(each.value.auto_computed_egress_rules, var.defaults.auto_computed_egress_rules, []) - auto_computed_egress_with_self = try(each.value.auto_computed_egress_with_self, var.defaults.auto_computed_egress_with_self, []) - auto_computed_ingress_rules = try(each.value.auto_computed_ingress_rules, var.defaults.auto_computed_ingress_rules, []) - auto_computed_ingress_with_self = try(each.value.auto_computed_ingress_with_self, var.defaults.auto_computed_ingress_with_self, []) - auto_egress_rules = try(each.value.auto_egress_rules, var.defaults.auto_egress_rules, ["all-all"]) - auto_egress_with_self = try(each.value.auto_egress_with_self, var.defaults.auto_egress_with_self, []) - auto_ingress_rules = try(each.value.auto_ingress_rules, var.defaults.auto_ingress_rules, ["promtail-http"]) - auto_ingress_with_self = try(each.value.auto_ingress_with_self, var.defaults.auto_ingress_with_self, [{ "rule" = "all-all" }]) - auto_number_of_computed_egress_rules = try(each.value.auto_number_of_computed_egress_rules, var.defaults.auto_number_of_computed_egress_rules, 0) - auto_number_of_computed_egress_with_self = try(each.value.auto_number_of_computed_egress_with_self, var.defaults.auto_number_of_computed_egress_with_self, 0) - auto_number_of_computed_ingress_rules = try(each.value.auto_number_of_computed_ingress_rules, var.defaults.auto_number_of_computed_ingress_rules, 0) - auto_number_of_computed_ingress_with_self = try(each.value.auto_number_of_computed_ingress_with_self, var.defaults.auto_number_of_computed_ingress_with_self, 0) - computed_egress_cidr_blocks = try(each.value.computed_egress_cidr_blocks, var.defaults.computed_egress_cidr_blocks, ["0.0.0.0/0"]) - computed_egress_ipv6_cidr_blocks = try(each.value.computed_egress_ipv6_cidr_blocks, var.defaults.computed_egress_ipv6_cidr_blocks, ["::/0"]) - computed_egress_prefix_list_ids = try(each.value.computed_egress_prefix_list_ids, var.defaults.computed_egress_prefix_list_ids, []) - computed_egress_rules = try(each.value.computed_egress_rules, var.defaults.computed_egress_rules, []) - computed_egress_with_cidr_blocks = try(each.value.computed_egress_with_cidr_blocks, var.defaults.computed_egress_with_cidr_blocks, []) - computed_egress_with_ipv6_cidr_blocks = try(each.value.computed_egress_with_ipv6_cidr_blocks, var.defaults.computed_egress_with_ipv6_cidr_blocks, []) - computed_egress_with_prefix_list_ids = try(each.value.computed_egress_with_prefix_list_ids, var.defaults.computed_egress_with_prefix_list_ids, []) - computed_egress_with_self = try(each.value.computed_egress_with_self, var.defaults.computed_egress_with_self, []) - computed_egress_with_source_security_group_id = try(each.value.computed_egress_with_source_security_group_id, var.defaults.computed_egress_with_source_security_group_id, []) - computed_ingress_cidr_blocks = try(each.value.computed_ingress_cidr_blocks, var.defaults.computed_ingress_cidr_blocks, []) - computed_ingress_ipv6_cidr_blocks = try(each.value.computed_ingress_ipv6_cidr_blocks, var.defaults.computed_ingress_ipv6_cidr_blocks, []) - computed_ingress_prefix_list_ids = try(each.value.computed_ingress_prefix_list_ids, var.defaults.computed_ingress_prefix_list_ids, []) - computed_ingress_rules = try(each.value.computed_ingress_rules, var.defaults.computed_ingress_rules, []) - computed_ingress_with_cidr_blocks = try(each.value.computed_ingress_with_cidr_blocks, var.defaults.computed_ingress_with_cidr_blocks, []) - computed_ingress_with_ipv6_cidr_blocks = try(each.value.computed_ingress_with_ipv6_cidr_blocks, var.defaults.computed_ingress_with_ipv6_cidr_blocks, []) - computed_ingress_with_prefix_list_ids = try(each.value.computed_ingress_with_prefix_list_ids, var.defaults.computed_ingress_with_prefix_list_ids, []) - computed_ingress_with_self = try(each.value.computed_ingress_with_self, var.defaults.computed_ingress_with_self, []) - computed_ingress_with_source_security_group_id = try(each.value.computed_ingress_with_source_security_group_id, var.defaults.computed_ingress_with_source_security_group_id, []) - create = try(each.value.create, var.defaults.create, true) - description = try(each.value.description, var.defaults.description, "Security Group managed by Terraform") - egress_cidr_blocks = try(each.value.egress_cidr_blocks, var.defaults.egress_cidr_blocks, ["0.0.0.0/0"]) - egress_ipv6_cidr_blocks = try(each.value.egress_ipv6_cidr_blocks, var.defaults.egress_ipv6_cidr_blocks, ["::/0"]) - egress_prefix_list_ids = try(each.value.egress_prefix_list_ids, var.defaults.egress_prefix_list_ids, []) - egress_rules = try(each.value.egress_rules, var.defaults.egress_rules, []) - egress_with_cidr_blocks = try(each.value.egress_with_cidr_blocks, var.defaults.egress_with_cidr_blocks, []) - egress_with_ipv6_cidr_blocks = try(each.value.egress_with_ipv6_cidr_blocks, var.defaults.egress_with_ipv6_cidr_blocks, []) - egress_with_prefix_list_ids = try(each.value.egress_with_prefix_list_ids, var.defaults.egress_with_prefix_list_ids, []) - egress_with_self = try(each.value.egress_with_self, var.defaults.egress_with_self, []) - egress_with_source_security_group_id = try(each.value.egress_with_source_security_group_id, var.defaults.egress_with_source_security_group_id, []) - ingress_cidr_blocks = try(each.value.ingress_cidr_blocks, var.defaults.ingress_cidr_blocks, []) - ingress_ipv6_cidr_blocks = try(each.value.ingress_ipv6_cidr_blocks, var.defaults.ingress_ipv6_cidr_blocks, []) - ingress_prefix_list_ids = try(each.value.ingress_prefix_list_ids, var.defaults.ingress_prefix_list_ids, []) - ingress_rules = try(each.value.ingress_rules, var.defaults.ingress_rules, []) - ingress_with_cidr_blocks = try(each.value.ingress_with_cidr_blocks, var.defaults.ingress_with_cidr_blocks, []) - ingress_with_ipv6_cidr_blocks = try(each.value.ingress_with_ipv6_cidr_blocks, var.defaults.ingress_with_ipv6_cidr_blocks, []) - ingress_with_prefix_list_ids = try(each.value.ingress_with_prefix_list_ids, var.defaults.ingress_with_prefix_list_ids, []) - ingress_with_self = try(each.value.ingress_with_self, var.defaults.ingress_with_self, []) - ingress_with_source_security_group_id = try(each.value.ingress_with_source_security_group_id, var.defaults.ingress_with_source_security_group_id, []) - name = try(each.value.name, var.defaults.name) - number_of_computed_egress_cidr_blocks = try(each.value.number_of_computed_egress_cidr_blocks, var.defaults.number_of_computed_egress_cidr_blocks, 0) - number_of_computed_egress_ipv6_cidr_blocks = try(each.value.number_of_computed_egress_ipv6_cidr_blocks, var.defaults.number_of_computed_egress_ipv6_cidr_blocks, 0) - number_of_computed_egress_prefix_list_ids = try(each.value.number_of_computed_egress_prefix_list_ids, var.defaults.number_of_computed_egress_prefix_list_ids, 0) - number_of_computed_egress_rules = try(each.value.number_of_computed_egress_rules, var.defaults.number_of_computed_egress_rules, 0) - number_of_computed_egress_with_cidr_blocks = try(each.value.number_of_computed_egress_with_cidr_blocks, var.defaults.number_of_computed_egress_with_cidr_blocks, 0) - number_of_computed_egress_with_ipv6_cidr_blocks = try(each.value.number_of_computed_egress_with_ipv6_cidr_blocks, var.defaults.number_of_computed_egress_with_ipv6_cidr_blocks, 0) - number_of_computed_egress_with_prefix_list_ids = try(each.value.number_of_computed_egress_with_prefix_list_ids, var.defaults.number_of_computed_egress_with_prefix_list_ids, 0) - number_of_computed_egress_with_self = try(each.value.number_of_computed_egress_with_self, var.defaults.number_of_computed_egress_with_self, 0) - number_of_computed_egress_with_source_security_group_id = try(each.value.number_of_computed_egress_with_source_security_group_id, var.defaults.number_of_computed_egress_with_source_security_group_id, 0) - number_of_computed_ingress_cidr_blocks = try(each.value.number_of_computed_ingress_cidr_blocks, var.defaults.number_of_computed_ingress_cidr_blocks, 0) - number_of_computed_ingress_ipv6_cidr_blocks = try(each.value.number_of_computed_ingress_ipv6_cidr_blocks, var.defaults.number_of_computed_ingress_ipv6_cidr_blocks, 0) - number_of_computed_ingress_prefix_list_ids = try(each.value.number_of_computed_ingress_prefix_list_ids, var.defaults.number_of_computed_ingress_prefix_list_ids, 0) - number_of_computed_ingress_rules = try(each.value.number_of_computed_ingress_rules, var.defaults.number_of_computed_ingress_rules, 0) - number_of_computed_ingress_with_cidr_blocks = try(each.value.number_of_computed_ingress_with_cidr_blocks, var.defaults.number_of_computed_ingress_with_cidr_blocks, 0) - number_of_computed_ingress_with_ipv6_cidr_blocks = try(each.value.number_of_computed_ingress_with_ipv6_cidr_blocks, var.defaults.number_of_computed_ingress_with_ipv6_cidr_blocks, 0) - number_of_computed_ingress_with_prefix_list_ids = try(each.value.number_of_computed_ingress_with_prefix_list_ids, var.defaults.number_of_computed_ingress_with_prefix_list_ids, 0) - number_of_computed_ingress_with_self = try(each.value.number_of_computed_ingress_with_self, var.defaults.number_of_computed_ingress_with_self, 0) - number_of_computed_ingress_with_source_security_group_id = try(each.value.number_of_computed_ingress_with_source_security_group_id, var.defaults.number_of_computed_ingress_with_source_security_group_id, 0) - revoke_rules_on_delete = try(each.value.revoke_rules_on_delete, var.defaults.revoke_rules_on_delete, false) - tags = try(each.value.tags, var.defaults.tags, {}) - use_name_prefix = try(each.value.use_name_prefix, var.defaults.use_name_prefix, true) - vpc_id = try(each.value.vpc_id, var.defaults.vpc_id) + auto_computed_egress_rules = try(each.value.auto_computed_egress_rules, var.defaults.auto_computed_egress_rules, []) + auto_computed_egress_with_self = try(each.value.auto_computed_egress_with_self, var.defaults.auto_computed_egress_with_self, []) + auto_computed_ingress_rules = try(each.value.auto_computed_ingress_rules, var.defaults.auto_computed_ingress_rules, []) + auto_computed_ingress_with_self = try(each.value.auto_computed_ingress_with_self, var.defaults.auto_computed_ingress_with_self, []) + auto_egress_rules = try(each.value.auto_egress_rules, var.defaults.auto_egress_rules, ["all-all"]) + auto_egress_with_self = try(each.value.auto_egress_with_self, var.defaults.auto_egress_with_self, []) + auto_ingress_rules = try(each.value.auto_ingress_rules, var.defaults.auto_ingress_rules, ["promtail-http"]) + auto_ingress_with_self = try(each.value.auto_ingress_with_self, var.defaults.auto_ingress_with_self, [{ "rule" = "all-all" }]) + auto_number_of_computed_egress_rules = try(each.value.auto_number_of_computed_egress_rules, var.defaults.auto_number_of_computed_egress_rules, 0) + auto_number_of_computed_egress_with_self = try(each.value.auto_number_of_computed_egress_with_self, var.defaults.auto_number_of_computed_egress_with_self, 0) + auto_number_of_computed_ingress_rules = try(each.value.auto_number_of_computed_ingress_rules, var.defaults.auto_number_of_computed_ingress_rules, 0) + auto_number_of_computed_ingress_with_self = try(each.value.auto_number_of_computed_ingress_with_self, var.defaults.auto_number_of_computed_ingress_with_self, 0) + computed_egress_cidr_blocks = try(each.value.computed_egress_cidr_blocks, var.defaults.computed_egress_cidr_blocks, ["0.0.0.0/0"]) + computed_egress_ipv6_cidr_blocks = try(each.value.computed_egress_ipv6_cidr_blocks, var.defaults.computed_egress_ipv6_cidr_blocks, ["::/0"]) + computed_egress_prefix_list_ids = try(each.value.computed_egress_prefix_list_ids, var.defaults.computed_egress_prefix_list_ids, []) + computed_egress_rules = try(each.value.computed_egress_rules, var.defaults.computed_egress_rules, []) + computed_egress_with_cidr_ipv4 = try(each.value.computed_egress_with_cidr_ipv4, var.defaults.computed_egress_with_cidr_ipv4, []) + computed_egress_with_cidr_ipv6 = try(each.value.computed_egress_with_cidr_ipv6, var.defaults.computed_egress_with_cidr_ipv6, []) + computed_egress_with_prefix_list_id = try(each.value.computed_egress_with_prefix_list_id, var.defaults.computed_egress_with_prefix_list_id, []) + computed_egress_with_referenced_security_group_id = try(each.value.computed_egress_with_referenced_security_group_id, var.defaults.computed_egress_with_referenced_security_group_id, []) + computed_egress_with_self = try(each.value.computed_egress_with_self, var.defaults.computed_egress_with_self, []) + computed_ingress_cidr_blocks = try(each.value.computed_ingress_cidr_blocks, var.defaults.computed_ingress_cidr_blocks, []) + computed_ingress_ipv6_cidr_blocks = try(each.value.computed_ingress_ipv6_cidr_blocks, var.defaults.computed_ingress_ipv6_cidr_blocks, []) + computed_ingress_prefix_list_ids = try(each.value.computed_ingress_prefix_list_ids, var.defaults.computed_ingress_prefix_list_ids, []) + computed_ingress_rules = try(each.value.computed_ingress_rules, var.defaults.computed_ingress_rules, []) + computed_ingress_with_cidr_ipv4 = try(each.value.computed_ingress_with_cidr_ipv4, var.defaults.computed_ingress_with_cidr_ipv4, []) + computed_ingress_with_cidr_ipv6 = try(each.value.computed_ingress_with_cidr_ipv6, var.defaults.computed_ingress_with_cidr_ipv6, []) + computed_ingress_with_prefix_list_id = try(each.value.computed_ingress_with_prefix_list_id, var.defaults.computed_ingress_with_prefix_list_id, []) + computed_ingress_with_referenced_security_group_id = try(each.value.computed_ingress_with_referenced_security_group_id, var.defaults.computed_ingress_with_referenced_security_group_id, []) + computed_ingress_with_self = try(each.value.computed_ingress_with_self, var.defaults.computed_ingress_with_self, []) + create = try(each.value.create, var.defaults.create, true) + description = try(each.value.description, var.defaults.description, "Security Group managed by Terraform") + egress_cidr_ipv4 = try(each.value.egress_cidr_ipv4, var.defaults.egress_cidr_ipv4, ["0.0.0.0/0"]) + egress_cidr_ipv6 = try(each.value.egress_cidr_ipv6, var.defaults.egress_cidr_ipv6, ["::/0"]) + egress_prefix_list_ids = try(each.value.egress_prefix_list_ids, var.defaults.egress_prefix_list_ids, []) + egress_rules = try(each.value.egress_rules, var.defaults.egress_rules, []) + egress_with_cidr_ipv4 = try(each.value.egress_with_cidr_ipv4, var.defaults.egress_with_cidr_ipv4, []) + egress_with_cidr_ipv6 = try(each.value.egress_with_cidr_ipv6, var.defaults.egress_with_cidr_ipv6, []) + egress_with_prefix_list_id = try(each.value.egress_with_prefix_list_id, var.defaults.egress_with_prefix_list_id, []) + egress_with_referenced_security_group_id = try(each.value.egress_with_referenced_security_group_id, var.defaults.egress_with_referenced_security_group_id, []) + egress_with_self = try(each.value.egress_with_self, var.defaults.egress_with_self, []) + ingress_cidr_ipv4 = try(each.value.ingress_cidr_ipv4, var.defaults.ingress_cidr_ipv4, []) + ingress_cidr_ipv6 = try(each.value.ingress_cidr_ipv6, var.defaults.ingress_cidr_ipv6, []) + ingress_prefix_list_ids = try(each.value.ingress_prefix_list_ids, var.defaults.ingress_prefix_list_ids, []) + ingress_rules = try(each.value.ingress_rules, var.defaults.ingress_rules, []) + ingress_with_cidr_ipv4 = try(each.value.ingress_with_cidr_ipv4, var.defaults.ingress_with_cidr_ipv4, []) + ingress_with_cidr_ipv6 = try(each.value.ingress_with_cidr_ipv6, var.defaults.ingress_with_cidr_ipv6, []) + ingress_with_prefix_list_id = try(each.value.ingress_with_prefix_list_id, var.defaults.ingress_with_prefix_list_id, []) + ingress_with_referenced_security_group_id = try(each.value.ingress_with_referenced_security_group_id, var.defaults.ingress_with_referenced_security_group_id, []) + ingress_with_self = try(each.value.ingress_with_self, var.defaults.ingress_with_self, []) + name = try(each.value.name, var.defaults.name) + number_of_computed_egress_cidr_blocks = try(each.value.number_of_computed_egress_cidr_blocks, var.defaults.number_of_computed_egress_cidr_blocks, 0) + number_of_computed_egress_ipv6_cidr_blocks = try(each.value.number_of_computed_egress_ipv6_cidr_blocks, var.defaults.number_of_computed_egress_ipv6_cidr_blocks, 0) + number_of_computed_egress_prefix_list_ids = try(each.value.number_of_computed_egress_prefix_list_ids, var.defaults.number_of_computed_egress_prefix_list_ids, 0) + number_of_computed_egress_rules = try(each.value.number_of_computed_egress_rules, var.defaults.number_of_computed_egress_rules, 0) + number_of_computed_egress_with_cidr_ipv4 = try(each.value.number_of_computed_egress_with_cidr_ipv4, var.defaults.number_of_computed_egress_with_cidr_ipv4, 0) + number_of_computed_egress_with_cidr_ipv6 = try(each.value.number_of_computed_egress_with_cidr_ipv6, var.defaults.number_of_computed_egress_with_cidr_ipv6, 0) + number_of_computed_egress_with_prefix_list_id = try(each.value.number_of_computed_egress_with_prefix_list_id, var.defaults.number_of_computed_egress_with_prefix_list_id, 0) + number_of_computed_egress_with_referenced_security_group_id = try(each.value.number_of_computed_egress_with_referenced_security_group_id, var.defaults.number_of_computed_egress_with_referenced_security_group_id, 0) + number_of_computed_egress_with_self = try(each.value.number_of_computed_egress_with_self, var.defaults.number_of_computed_egress_with_self, 0) + number_of_computed_ingress_cidr_blocks = try(each.value.number_of_computed_ingress_cidr_blocks, var.defaults.number_of_computed_ingress_cidr_blocks, 0) + number_of_computed_ingress_ipv6_cidr_blocks = try(each.value.number_of_computed_ingress_ipv6_cidr_blocks, var.defaults.number_of_computed_ingress_ipv6_cidr_blocks, 0) + number_of_computed_ingress_prefix_list_ids = try(each.value.number_of_computed_ingress_prefix_list_ids, var.defaults.number_of_computed_ingress_prefix_list_ids, 0) + number_of_computed_ingress_rules = try(each.value.number_of_computed_ingress_rules, var.defaults.number_of_computed_ingress_rules, 0) + number_of_computed_ingress_with_cidr_ipv4 = try(each.value.number_of_computed_ingress_with_cidr_ipv4, var.defaults.number_of_computed_ingress_with_cidr_ipv4, 0) + number_of_computed_ingress_with_cidr_ipv6 = try(each.value.number_of_computed_ingress_with_cidr_ipv6, var.defaults.number_of_computed_ingress_with_cidr_ipv6, 0) + number_of_computed_ingress_with_prefix_list_id = try(each.value.number_of_computed_ingress_with_prefix_list_id, var.defaults.number_of_computed_ingress_with_prefix_list_id, 0) + number_of_computed_ingress_with_referenced_security_group_id = try(each.value.number_of_computed_ingress_with_referenced_security_group_id, var.defaults.number_of_computed_ingress_with_referenced_security_group_id, 0) + number_of_computed_ingress_with_self = try(each.value.number_of_computed_ingress_with_self, var.defaults.number_of_computed_ingress_with_self, 0) + revoke_rules_on_delete = try(each.value.revoke_rules_on_delete, var.defaults.revoke_rules_on_delete, false) + tags = try(each.value.tags, var.defaults.tags, {}) + use_name_prefix = try(each.value.use_name_prefix, var.defaults.use_name_prefix, true) + vpc_id = try(each.value.vpc_id, var.defaults.vpc_id) } diff --git a/wrappers/puppet/main.tf b/wrappers/puppet/main.tf index e41800df..861bd65c 100644 --- a/wrappers/puppet/main.tf +++ b/wrappers/puppet/main.tf @@ -3,77 +3,77 @@ module "wrapper" { for_each = var.items - auto_computed_egress_rules = try(each.value.auto_computed_egress_rules, var.defaults.auto_computed_egress_rules, []) - auto_computed_egress_with_self = try(each.value.auto_computed_egress_with_self, var.defaults.auto_computed_egress_with_self, []) - auto_computed_ingress_rules = try(each.value.auto_computed_ingress_rules, var.defaults.auto_computed_ingress_rules, []) - auto_computed_ingress_with_self = try(each.value.auto_computed_ingress_with_self, var.defaults.auto_computed_ingress_with_self, []) - auto_egress_rules = try(each.value.auto_egress_rules, var.defaults.auto_egress_rules, ["all-all"]) - auto_egress_with_self = try(each.value.auto_egress_with_self, var.defaults.auto_egress_with_self, []) - auto_ingress_rules = try(each.value.auto_ingress_rules, var.defaults.auto_ingress_rules, ["puppet-tcp", "puppetdb-tcp"]) - auto_ingress_with_self = try(each.value.auto_ingress_with_self, var.defaults.auto_ingress_with_self, [{ "rule" = "all-all" }]) - auto_number_of_computed_egress_rules = try(each.value.auto_number_of_computed_egress_rules, var.defaults.auto_number_of_computed_egress_rules, 0) - auto_number_of_computed_egress_with_self = try(each.value.auto_number_of_computed_egress_with_self, var.defaults.auto_number_of_computed_egress_with_self, 0) - auto_number_of_computed_ingress_rules = try(each.value.auto_number_of_computed_ingress_rules, var.defaults.auto_number_of_computed_ingress_rules, 0) - auto_number_of_computed_ingress_with_self = try(each.value.auto_number_of_computed_ingress_with_self, var.defaults.auto_number_of_computed_ingress_with_self, 0) - computed_egress_cidr_blocks = try(each.value.computed_egress_cidr_blocks, var.defaults.computed_egress_cidr_blocks, ["0.0.0.0/0"]) - computed_egress_ipv6_cidr_blocks = try(each.value.computed_egress_ipv6_cidr_blocks, var.defaults.computed_egress_ipv6_cidr_blocks, ["::/0"]) - computed_egress_prefix_list_ids = try(each.value.computed_egress_prefix_list_ids, var.defaults.computed_egress_prefix_list_ids, []) - computed_egress_rules = try(each.value.computed_egress_rules, var.defaults.computed_egress_rules, []) - computed_egress_with_cidr_blocks = try(each.value.computed_egress_with_cidr_blocks, var.defaults.computed_egress_with_cidr_blocks, []) - computed_egress_with_ipv6_cidr_blocks = try(each.value.computed_egress_with_ipv6_cidr_blocks, var.defaults.computed_egress_with_ipv6_cidr_blocks, []) - computed_egress_with_prefix_list_ids = try(each.value.computed_egress_with_prefix_list_ids, var.defaults.computed_egress_with_prefix_list_ids, []) - computed_egress_with_self = try(each.value.computed_egress_with_self, var.defaults.computed_egress_with_self, []) - computed_egress_with_source_security_group_id = try(each.value.computed_egress_with_source_security_group_id, var.defaults.computed_egress_with_source_security_group_id, []) - computed_ingress_cidr_blocks = try(each.value.computed_ingress_cidr_blocks, var.defaults.computed_ingress_cidr_blocks, []) - computed_ingress_ipv6_cidr_blocks = try(each.value.computed_ingress_ipv6_cidr_blocks, var.defaults.computed_ingress_ipv6_cidr_blocks, []) - computed_ingress_prefix_list_ids = try(each.value.computed_ingress_prefix_list_ids, var.defaults.computed_ingress_prefix_list_ids, []) - computed_ingress_rules = try(each.value.computed_ingress_rules, var.defaults.computed_ingress_rules, []) - computed_ingress_with_cidr_blocks = try(each.value.computed_ingress_with_cidr_blocks, var.defaults.computed_ingress_with_cidr_blocks, []) - computed_ingress_with_ipv6_cidr_blocks = try(each.value.computed_ingress_with_ipv6_cidr_blocks, var.defaults.computed_ingress_with_ipv6_cidr_blocks, []) - computed_ingress_with_prefix_list_ids = try(each.value.computed_ingress_with_prefix_list_ids, var.defaults.computed_ingress_with_prefix_list_ids, []) - computed_ingress_with_self = try(each.value.computed_ingress_with_self, var.defaults.computed_ingress_with_self, []) - computed_ingress_with_source_security_group_id = try(each.value.computed_ingress_with_source_security_group_id, var.defaults.computed_ingress_with_source_security_group_id, []) - create = try(each.value.create, var.defaults.create, true) - description = try(each.value.description, var.defaults.description, "Security Group managed by Terraform") - egress_cidr_blocks = try(each.value.egress_cidr_blocks, var.defaults.egress_cidr_blocks, ["0.0.0.0/0"]) - egress_ipv6_cidr_blocks = try(each.value.egress_ipv6_cidr_blocks, var.defaults.egress_ipv6_cidr_blocks, ["::/0"]) - egress_prefix_list_ids = try(each.value.egress_prefix_list_ids, var.defaults.egress_prefix_list_ids, []) - egress_rules = try(each.value.egress_rules, var.defaults.egress_rules, []) - egress_with_cidr_blocks = try(each.value.egress_with_cidr_blocks, var.defaults.egress_with_cidr_blocks, []) - egress_with_ipv6_cidr_blocks = try(each.value.egress_with_ipv6_cidr_blocks, var.defaults.egress_with_ipv6_cidr_blocks, []) - egress_with_prefix_list_ids = try(each.value.egress_with_prefix_list_ids, var.defaults.egress_with_prefix_list_ids, []) - egress_with_self = try(each.value.egress_with_self, var.defaults.egress_with_self, []) - egress_with_source_security_group_id = try(each.value.egress_with_source_security_group_id, var.defaults.egress_with_source_security_group_id, []) - ingress_cidr_blocks = try(each.value.ingress_cidr_blocks, var.defaults.ingress_cidr_blocks, []) - ingress_ipv6_cidr_blocks = try(each.value.ingress_ipv6_cidr_blocks, var.defaults.ingress_ipv6_cidr_blocks, []) - ingress_prefix_list_ids = try(each.value.ingress_prefix_list_ids, var.defaults.ingress_prefix_list_ids, []) - ingress_rules = try(each.value.ingress_rules, var.defaults.ingress_rules, []) - ingress_with_cidr_blocks = try(each.value.ingress_with_cidr_blocks, var.defaults.ingress_with_cidr_blocks, []) - ingress_with_ipv6_cidr_blocks = try(each.value.ingress_with_ipv6_cidr_blocks, var.defaults.ingress_with_ipv6_cidr_blocks, []) - ingress_with_prefix_list_ids = try(each.value.ingress_with_prefix_list_ids, var.defaults.ingress_with_prefix_list_ids, []) - ingress_with_self = try(each.value.ingress_with_self, var.defaults.ingress_with_self, []) - ingress_with_source_security_group_id = try(each.value.ingress_with_source_security_group_id, var.defaults.ingress_with_source_security_group_id, []) - name = try(each.value.name, var.defaults.name) - number_of_computed_egress_cidr_blocks = try(each.value.number_of_computed_egress_cidr_blocks, var.defaults.number_of_computed_egress_cidr_blocks, 0) - number_of_computed_egress_ipv6_cidr_blocks = try(each.value.number_of_computed_egress_ipv6_cidr_blocks, var.defaults.number_of_computed_egress_ipv6_cidr_blocks, 0) - number_of_computed_egress_prefix_list_ids = try(each.value.number_of_computed_egress_prefix_list_ids, var.defaults.number_of_computed_egress_prefix_list_ids, 0) - number_of_computed_egress_rules = try(each.value.number_of_computed_egress_rules, var.defaults.number_of_computed_egress_rules, 0) - number_of_computed_egress_with_cidr_blocks = try(each.value.number_of_computed_egress_with_cidr_blocks, var.defaults.number_of_computed_egress_with_cidr_blocks, 0) - number_of_computed_egress_with_ipv6_cidr_blocks = try(each.value.number_of_computed_egress_with_ipv6_cidr_blocks, var.defaults.number_of_computed_egress_with_ipv6_cidr_blocks, 0) - number_of_computed_egress_with_prefix_list_ids = try(each.value.number_of_computed_egress_with_prefix_list_ids, var.defaults.number_of_computed_egress_with_prefix_list_ids, 0) - number_of_computed_egress_with_self = try(each.value.number_of_computed_egress_with_self, var.defaults.number_of_computed_egress_with_self, 0) - number_of_computed_egress_with_source_security_group_id = try(each.value.number_of_computed_egress_with_source_security_group_id, var.defaults.number_of_computed_egress_with_source_security_group_id, 0) - number_of_computed_ingress_cidr_blocks = try(each.value.number_of_computed_ingress_cidr_blocks, var.defaults.number_of_computed_ingress_cidr_blocks, 0) - number_of_computed_ingress_ipv6_cidr_blocks = try(each.value.number_of_computed_ingress_ipv6_cidr_blocks, var.defaults.number_of_computed_ingress_ipv6_cidr_blocks, 0) - number_of_computed_ingress_prefix_list_ids = try(each.value.number_of_computed_ingress_prefix_list_ids, var.defaults.number_of_computed_ingress_prefix_list_ids, 0) - number_of_computed_ingress_rules = try(each.value.number_of_computed_ingress_rules, var.defaults.number_of_computed_ingress_rules, 0) - number_of_computed_ingress_with_cidr_blocks = try(each.value.number_of_computed_ingress_with_cidr_blocks, var.defaults.number_of_computed_ingress_with_cidr_blocks, 0) - number_of_computed_ingress_with_ipv6_cidr_blocks = try(each.value.number_of_computed_ingress_with_ipv6_cidr_blocks, var.defaults.number_of_computed_ingress_with_ipv6_cidr_blocks, 0) - number_of_computed_ingress_with_prefix_list_ids = try(each.value.number_of_computed_ingress_with_prefix_list_ids, var.defaults.number_of_computed_ingress_with_prefix_list_ids, 0) - number_of_computed_ingress_with_self = try(each.value.number_of_computed_ingress_with_self, var.defaults.number_of_computed_ingress_with_self, 0) - number_of_computed_ingress_with_source_security_group_id = try(each.value.number_of_computed_ingress_with_source_security_group_id, var.defaults.number_of_computed_ingress_with_source_security_group_id, 0) - revoke_rules_on_delete = try(each.value.revoke_rules_on_delete, var.defaults.revoke_rules_on_delete, false) - tags = try(each.value.tags, var.defaults.tags, {}) - use_name_prefix = try(each.value.use_name_prefix, var.defaults.use_name_prefix, true) - vpc_id = try(each.value.vpc_id, var.defaults.vpc_id) + auto_computed_egress_rules = try(each.value.auto_computed_egress_rules, var.defaults.auto_computed_egress_rules, []) + auto_computed_egress_with_self = try(each.value.auto_computed_egress_with_self, var.defaults.auto_computed_egress_with_self, []) + auto_computed_ingress_rules = try(each.value.auto_computed_ingress_rules, var.defaults.auto_computed_ingress_rules, []) + auto_computed_ingress_with_self = try(each.value.auto_computed_ingress_with_self, var.defaults.auto_computed_ingress_with_self, []) + auto_egress_rules = try(each.value.auto_egress_rules, var.defaults.auto_egress_rules, ["all-all"]) + auto_egress_with_self = try(each.value.auto_egress_with_self, var.defaults.auto_egress_with_self, []) + auto_ingress_rules = try(each.value.auto_ingress_rules, var.defaults.auto_ingress_rules, ["puppet-tcp", "puppetdb-tcp"]) + auto_ingress_with_self = try(each.value.auto_ingress_with_self, var.defaults.auto_ingress_with_self, [{ "rule" = "all-all" }]) + auto_number_of_computed_egress_rules = try(each.value.auto_number_of_computed_egress_rules, var.defaults.auto_number_of_computed_egress_rules, 0) + auto_number_of_computed_egress_with_self = try(each.value.auto_number_of_computed_egress_with_self, var.defaults.auto_number_of_computed_egress_with_self, 0) + auto_number_of_computed_ingress_rules = try(each.value.auto_number_of_computed_ingress_rules, var.defaults.auto_number_of_computed_ingress_rules, 0) + auto_number_of_computed_ingress_with_self = try(each.value.auto_number_of_computed_ingress_with_self, var.defaults.auto_number_of_computed_ingress_with_self, 0) + computed_egress_cidr_blocks = try(each.value.computed_egress_cidr_blocks, var.defaults.computed_egress_cidr_blocks, ["0.0.0.0/0"]) + computed_egress_ipv6_cidr_blocks = try(each.value.computed_egress_ipv6_cidr_blocks, var.defaults.computed_egress_ipv6_cidr_blocks, ["::/0"]) + computed_egress_prefix_list_ids = try(each.value.computed_egress_prefix_list_ids, var.defaults.computed_egress_prefix_list_ids, []) + computed_egress_rules = try(each.value.computed_egress_rules, var.defaults.computed_egress_rules, []) + computed_egress_with_cidr_ipv4 = try(each.value.computed_egress_with_cidr_ipv4, var.defaults.computed_egress_with_cidr_ipv4, []) + computed_egress_with_cidr_ipv6 = try(each.value.computed_egress_with_cidr_ipv6, var.defaults.computed_egress_with_cidr_ipv6, []) + computed_egress_with_prefix_list_id = try(each.value.computed_egress_with_prefix_list_id, var.defaults.computed_egress_with_prefix_list_id, []) + computed_egress_with_referenced_security_group_id = try(each.value.computed_egress_with_referenced_security_group_id, var.defaults.computed_egress_with_referenced_security_group_id, []) + computed_egress_with_self = try(each.value.computed_egress_with_self, var.defaults.computed_egress_with_self, []) + computed_ingress_cidr_blocks = try(each.value.computed_ingress_cidr_blocks, var.defaults.computed_ingress_cidr_blocks, []) + computed_ingress_ipv6_cidr_blocks = try(each.value.computed_ingress_ipv6_cidr_blocks, var.defaults.computed_ingress_ipv6_cidr_blocks, []) + computed_ingress_prefix_list_ids = try(each.value.computed_ingress_prefix_list_ids, var.defaults.computed_ingress_prefix_list_ids, []) + computed_ingress_rules = try(each.value.computed_ingress_rules, var.defaults.computed_ingress_rules, []) + computed_ingress_with_cidr_ipv4 = try(each.value.computed_ingress_with_cidr_ipv4, var.defaults.computed_ingress_with_cidr_ipv4, []) + computed_ingress_with_cidr_ipv6 = try(each.value.computed_ingress_with_cidr_ipv6, var.defaults.computed_ingress_with_cidr_ipv6, []) + computed_ingress_with_prefix_list_id = try(each.value.computed_ingress_with_prefix_list_id, var.defaults.computed_ingress_with_prefix_list_id, []) + computed_ingress_with_referenced_security_group_id = try(each.value.computed_ingress_with_referenced_security_group_id, var.defaults.computed_ingress_with_referenced_security_group_id, []) + computed_ingress_with_self = try(each.value.computed_ingress_with_self, var.defaults.computed_ingress_with_self, []) + create = try(each.value.create, var.defaults.create, true) + description = try(each.value.description, var.defaults.description, "Security Group managed by Terraform") + egress_cidr_ipv4 = try(each.value.egress_cidr_ipv4, var.defaults.egress_cidr_ipv4, ["0.0.0.0/0"]) + egress_cidr_ipv6 = try(each.value.egress_cidr_ipv6, var.defaults.egress_cidr_ipv6, ["::/0"]) + egress_prefix_list_ids = try(each.value.egress_prefix_list_ids, var.defaults.egress_prefix_list_ids, []) + egress_rules = try(each.value.egress_rules, var.defaults.egress_rules, []) + egress_with_cidr_ipv4 = try(each.value.egress_with_cidr_ipv4, var.defaults.egress_with_cidr_ipv4, []) + egress_with_cidr_ipv6 = try(each.value.egress_with_cidr_ipv6, var.defaults.egress_with_cidr_ipv6, []) + egress_with_prefix_list_id = try(each.value.egress_with_prefix_list_id, var.defaults.egress_with_prefix_list_id, []) + egress_with_referenced_security_group_id = try(each.value.egress_with_referenced_security_group_id, var.defaults.egress_with_referenced_security_group_id, []) + egress_with_self = try(each.value.egress_with_self, var.defaults.egress_with_self, []) + ingress_cidr_ipv4 = try(each.value.ingress_cidr_ipv4, var.defaults.ingress_cidr_ipv4, []) + ingress_cidr_ipv6 = try(each.value.ingress_cidr_ipv6, var.defaults.ingress_cidr_ipv6, []) + ingress_prefix_list_ids = try(each.value.ingress_prefix_list_ids, var.defaults.ingress_prefix_list_ids, []) + ingress_rules = try(each.value.ingress_rules, var.defaults.ingress_rules, []) + ingress_with_cidr_ipv4 = try(each.value.ingress_with_cidr_ipv4, var.defaults.ingress_with_cidr_ipv4, []) + ingress_with_cidr_ipv6 = try(each.value.ingress_with_cidr_ipv6, var.defaults.ingress_with_cidr_ipv6, []) + ingress_with_prefix_list_id = try(each.value.ingress_with_prefix_list_id, var.defaults.ingress_with_prefix_list_id, []) + ingress_with_referenced_security_group_id = try(each.value.ingress_with_referenced_security_group_id, var.defaults.ingress_with_referenced_security_group_id, []) + ingress_with_self = try(each.value.ingress_with_self, var.defaults.ingress_with_self, []) + name = try(each.value.name, var.defaults.name) + number_of_computed_egress_cidr_blocks = try(each.value.number_of_computed_egress_cidr_blocks, var.defaults.number_of_computed_egress_cidr_blocks, 0) + number_of_computed_egress_ipv6_cidr_blocks = try(each.value.number_of_computed_egress_ipv6_cidr_blocks, var.defaults.number_of_computed_egress_ipv6_cidr_blocks, 0) + number_of_computed_egress_prefix_list_ids = try(each.value.number_of_computed_egress_prefix_list_ids, var.defaults.number_of_computed_egress_prefix_list_ids, 0) + number_of_computed_egress_rules = try(each.value.number_of_computed_egress_rules, var.defaults.number_of_computed_egress_rules, 0) + number_of_computed_egress_with_cidr_ipv4 = try(each.value.number_of_computed_egress_with_cidr_ipv4, var.defaults.number_of_computed_egress_with_cidr_ipv4, 0) + number_of_computed_egress_with_cidr_ipv6 = try(each.value.number_of_computed_egress_with_cidr_ipv6, var.defaults.number_of_computed_egress_with_cidr_ipv6, 0) + number_of_computed_egress_with_prefix_list_id = try(each.value.number_of_computed_egress_with_prefix_list_id, var.defaults.number_of_computed_egress_with_prefix_list_id, 0) + number_of_computed_egress_with_referenced_security_group_id = try(each.value.number_of_computed_egress_with_referenced_security_group_id, var.defaults.number_of_computed_egress_with_referenced_security_group_id, 0) + number_of_computed_egress_with_self = try(each.value.number_of_computed_egress_with_self, var.defaults.number_of_computed_egress_with_self, 0) + number_of_computed_ingress_cidr_blocks = try(each.value.number_of_computed_ingress_cidr_blocks, var.defaults.number_of_computed_ingress_cidr_blocks, 0) + number_of_computed_ingress_ipv6_cidr_blocks = try(each.value.number_of_computed_ingress_ipv6_cidr_blocks, var.defaults.number_of_computed_ingress_ipv6_cidr_blocks, 0) + number_of_computed_ingress_prefix_list_ids = try(each.value.number_of_computed_ingress_prefix_list_ids, var.defaults.number_of_computed_ingress_prefix_list_ids, 0) + number_of_computed_ingress_rules = try(each.value.number_of_computed_ingress_rules, var.defaults.number_of_computed_ingress_rules, 0) + number_of_computed_ingress_with_cidr_ipv4 = try(each.value.number_of_computed_ingress_with_cidr_ipv4, var.defaults.number_of_computed_ingress_with_cidr_ipv4, 0) + number_of_computed_ingress_with_cidr_ipv6 = try(each.value.number_of_computed_ingress_with_cidr_ipv6, var.defaults.number_of_computed_ingress_with_cidr_ipv6, 0) + number_of_computed_ingress_with_prefix_list_id = try(each.value.number_of_computed_ingress_with_prefix_list_id, var.defaults.number_of_computed_ingress_with_prefix_list_id, 0) + number_of_computed_ingress_with_referenced_security_group_id = try(each.value.number_of_computed_ingress_with_referenced_security_group_id, var.defaults.number_of_computed_ingress_with_referenced_security_group_id, 0) + number_of_computed_ingress_with_self = try(each.value.number_of_computed_ingress_with_self, var.defaults.number_of_computed_ingress_with_self, 0) + revoke_rules_on_delete = try(each.value.revoke_rules_on_delete, var.defaults.revoke_rules_on_delete, false) + tags = try(each.value.tags, var.defaults.tags, {}) + use_name_prefix = try(each.value.use_name_prefix, var.defaults.use_name_prefix, true) + vpc_id = try(each.value.vpc_id, var.defaults.vpc_id) } diff --git a/wrappers/rabbitmq/main.tf b/wrappers/rabbitmq/main.tf index 8cd5e876..4850d9d8 100644 --- a/wrappers/rabbitmq/main.tf +++ b/wrappers/rabbitmq/main.tf @@ -3,77 +3,77 @@ module "wrapper" { for_each = var.items - auto_computed_egress_rules = try(each.value.auto_computed_egress_rules, var.defaults.auto_computed_egress_rules, []) - auto_computed_egress_with_self = try(each.value.auto_computed_egress_with_self, var.defaults.auto_computed_egress_with_self, []) - auto_computed_ingress_rules = try(each.value.auto_computed_ingress_rules, var.defaults.auto_computed_ingress_rules, []) - auto_computed_ingress_with_self = try(each.value.auto_computed_ingress_with_self, var.defaults.auto_computed_ingress_with_self, []) - auto_egress_rules = try(each.value.auto_egress_rules, var.defaults.auto_egress_rules, ["all-all"]) - auto_egress_with_self = try(each.value.auto_egress_with_self, var.defaults.auto_egress_with_self, []) - auto_ingress_rules = try(each.value.auto_ingress_rules, var.defaults.auto_ingress_rules, ["rabbitmq-4369-tcp", "rabbitmq-5671-tcp", "rabbitmq-5672-tcp", "rabbitmq-15672-tcp", "rabbitmq-25672-tcp"]) - auto_ingress_with_self = try(each.value.auto_ingress_with_self, var.defaults.auto_ingress_with_self, [{ "rule" = "all-all" }]) - auto_number_of_computed_egress_rules = try(each.value.auto_number_of_computed_egress_rules, var.defaults.auto_number_of_computed_egress_rules, 0) - auto_number_of_computed_egress_with_self = try(each.value.auto_number_of_computed_egress_with_self, var.defaults.auto_number_of_computed_egress_with_self, 0) - auto_number_of_computed_ingress_rules = try(each.value.auto_number_of_computed_ingress_rules, var.defaults.auto_number_of_computed_ingress_rules, 0) - auto_number_of_computed_ingress_with_self = try(each.value.auto_number_of_computed_ingress_with_self, var.defaults.auto_number_of_computed_ingress_with_self, 0) - computed_egress_cidr_blocks = try(each.value.computed_egress_cidr_blocks, var.defaults.computed_egress_cidr_blocks, ["0.0.0.0/0"]) - computed_egress_ipv6_cidr_blocks = try(each.value.computed_egress_ipv6_cidr_blocks, var.defaults.computed_egress_ipv6_cidr_blocks, ["::/0"]) - computed_egress_prefix_list_ids = try(each.value.computed_egress_prefix_list_ids, var.defaults.computed_egress_prefix_list_ids, []) - computed_egress_rules = try(each.value.computed_egress_rules, var.defaults.computed_egress_rules, []) - computed_egress_with_cidr_blocks = try(each.value.computed_egress_with_cidr_blocks, var.defaults.computed_egress_with_cidr_blocks, []) - computed_egress_with_ipv6_cidr_blocks = try(each.value.computed_egress_with_ipv6_cidr_blocks, var.defaults.computed_egress_with_ipv6_cidr_blocks, []) - computed_egress_with_prefix_list_ids = try(each.value.computed_egress_with_prefix_list_ids, var.defaults.computed_egress_with_prefix_list_ids, []) - computed_egress_with_self = try(each.value.computed_egress_with_self, var.defaults.computed_egress_with_self, []) - computed_egress_with_source_security_group_id = try(each.value.computed_egress_with_source_security_group_id, var.defaults.computed_egress_with_source_security_group_id, []) - computed_ingress_cidr_blocks = try(each.value.computed_ingress_cidr_blocks, var.defaults.computed_ingress_cidr_blocks, []) - computed_ingress_ipv6_cidr_blocks = try(each.value.computed_ingress_ipv6_cidr_blocks, var.defaults.computed_ingress_ipv6_cidr_blocks, []) - computed_ingress_prefix_list_ids = try(each.value.computed_ingress_prefix_list_ids, var.defaults.computed_ingress_prefix_list_ids, []) - computed_ingress_rules = try(each.value.computed_ingress_rules, var.defaults.computed_ingress_rules, []) - computed_ingress_with_cidr_blocks = try(each.value.computed_ingress_with_cidr_blocks, var.defaults.computed_ingress_with_cidr_blocks, []) - computed_ingress_with_ipv6_cidr_blocks = try(each.value.computed_ingress_with_ipv6_cidr_blocks, var.defaults.computed_ingress_with_ipv6_cidr_blocks, []) - computed_ingress_with_prefix_list_ids = try(each.value.computed_ingress_with_prefix_list_ids, var.defaults.computed_ingress_with_prefix_list_ids, []) - computed_ingress_with_self = try(each.value.computed_ingress_with_self, var.defaults.computed_ingress_with_self, []) - computed_ingress_with_source_security_group_id = try(each.value.computed_ingress_with_source_security_group_id, var.defaults.computed_ingress_with_source_security_group_id, []) - create = try(each.value.create, var.defaults.create, true) - description = try(each.value.description, var.defaults.description, "Security Group managed by Terraform") - egress_cidr_blocks = try(each.value.egress_cidr_blocks, var.defaults.egress_cidr_blocks, ["0.0.0.0/0"]) - egress_ipv6_cidr_blocks = try(each.value.egress_ipv6_cidr_blocks, var.defaults.egress_ipv6_cidr_blocks, ["::/0"]) - egress_prefix_list_ids = try(each.value.egress_prefix_list_ids, var.defaults.egress_prefix_list_ids, []) - egress_rules = try(each.value.egress_rules, var.defaults.egress_rules, []) - egress_with_cidr_blocks = try(each.value.egress_with_cidr_blocks, var.defaults.egress_with_cidr_blocks, []) - egress_with_ipv6_cidr_blocks = try(each.value.egress_with_ipv6_cidr_blocks, var.defaults.egress_with_ipv6_cidr_blocks, []) - egress_with_prefix_list_ids = try(each.value.egress_with_prefix_list_ids, var.defaults.egress_with_prefix_list_ids, []) - egress_with_self = try(each.value.egress_with_self, var.defaults.egress_with_self, []) - egress_with_source_security_group_id = try(each.value.egress_with_source_security_group_id, var.defaults.egress_with_source_security_group_id, []) - ingress_cidr_blocks = try(each.value.ingress_cidr_blocks, var.defaults.ingress_cidr_blocks, []) - ingress_ipv6_cidr_blocks = try(each.value.ingress_ipv6_cidr_blocks, var.defaults.ingress_ipv6_cidr_blocks, []) - ingress_prefix_list_ids = try(each.value.ingress_prefix_list_ids, var.defaults.ingress_prefix_list_ids, []) - ingress_rules = try(each.value.ingress_rules, var.defaults.ingress_rules, []) - ingress_with_cidr_blocks = try(each.value.ingress_with_cidr_blocks, var.defaults.ingress_with_cidr_blocks, []) - ingress_with_ipv6_cidr_blocks = try(each.value.ingress_with_ipv6_cidr_blocks, var.defaults.ingress_with_ipv6_cidr_blocks, []) - ingress_with_prefix_list_ids = try(each.value.ingress_with_prefix_list_ids, var.defaults.ingress_with_prefix_list_ids, []) - ingress_with_self = try(each.value.ingress_with_self, var.defaults.ingress_with_self, []) - ingress_with_source_security_group_id = try(each.value.ingress_with_source_security_group_id, var.defaults.ingress_with_source_security_group_id, []) - name = try(each.value.name, var.defaults.name) - number_of_computed_egress_cidr_blocks = try(each.value.number_of_computed_egress_cidr_blocks, var.defaults.number_of_computed_egress_cidr_blocks, 0) - number_of_computed_egress_ipv6_cidr_blocks = try(each.value.number_of_computed_egress_ipv6_cidr_blocks, var.defaults.number_of_computed_egress_ipv6_cidr_blocks, 0) - number_of_computed_egress_prefix_list_ids = try(each.value.number_of_computed_egress_prefix_list_ids, var.defaults.number_of_computed_egress_prefix_list_ids, 0) - number_of_computed_egress_rules = try(each.value.number_of_computed_egress_rules, var.defaults.number_of_computed_egress_rules, 0) - number_of_computed_egress_with_cidr_blocks = try(each.value.number_of_computed_egress_with_cidr_blocks, var.defaults.number_of_computed_egress_with_cidr_blocks, 0) - number_of_computed_egress_with_ipv6_cidr_blocks = try(each.value.number_of_computed_egress_with_ipv6_cidr_blocks, var.defaults.number_of_computed_egress_with_ipv6_cidr_blocks, 0) - number_of_computed_egress_with_prefix_list_ids = try(each.value.number_of_computed_egress_with_prefix_list_ids, var.defaults.number_of_computed_egress_with_prefix_list_ids, 0) - number_of_computed_egress_with_self = try(each.value.number_of_computed_egress_with_self, var.defaults.number_of_computed_egress_with_self, 0) - number_of_computed_egress_with_source_security_group_id = try(each.value.number_of_computed_egress_with_source_security_group_id, var.defaults.number_of_computed_egress_with_source_security_group_id, 0) - number_of_computed_ingress_cidr_blocks = try(each.value.number_of_computed_ingress_cidr_blocks, var.defaults.number_of_computed_ingress_cidr_blocks, 0) - number_of_computed_ingress_ipv6_cidr_blocks = try(each.value.number_of_computed_ingress_ipv6_cidr_blocks, var.defaults.number_of_computed_ingress_ipv6_cidr_blocks, 0) - number_of_computed_ingress_prefix_list_ids = try(each.value.number_of_computed_ingress_prefix_list_ids, var.defaults.number_of_computed_ingress_prefix_list_ids, 0) - number_of_computed_ingress_rules = try(each.value.number_of_computed_ingress_rules, var.defaults.number_of_computed_ingress_rules, 0) - number_of_computed_ingress_with_cidr_blocks = try(each.value.number_of_computed_ingress_with_cidr_blocks, var.defaults.number_of_computed_ingress_with_cidr_blocks, 0) - number_of_computed_ingress_with_ipv6_cidr_blocks = try(each.value.number_of_computed_ingress_with_ipv6_cidr_blocks, var.defaults.number_of_computed_ingress_with_ipv6_cidr_blocks, 0) - number_of_computed_ingress_with_prefix_list_ids = try(each.value.number_of_computed_ingress_with_prefix_list_ids, var.defaults.number_of_computed_ingress_with_prefix_list_ids, 0) - number_of_computed_ingress_with_self = try(each.value.number_of_computed_ingress_with_self, var.defaults.number_of_computed_ingress_with_self, 0) - number_of_computed_ingress_with_source_security_group_id = try(each.value.number_of_computed_ingress_with_source_security_group_id, var.defaults.number_of_computed_ingress_with_source_security_group_id, 0) - revoke_rules_on_delete = try(each.value.revoke_rules_on_delete, var.defaults.revoke_rules_on_delete, false) - tags = try(each.value.tags, var.defaults.tags, {}) - use_name_prefix = try(each.value.use_name_prefix, var.defaults.use_name_prefix, true) - vpc_id = try(each.value.vpc_id, var.defaults.vpc_id) + auto_computed_egress_rules = try(each.value.auto_computed_egress_rules, var.defaults.auto_computed_egress_rules, []) + auto_computed_egress_with_self = try(each.value.auto_computed_egress_with_self, var.defaults.auto_computed_egress_with_self, []) + auto_computed_ingress_rules = try(each.value.auto_computed_ingress_rules, var.defaults.auto_computed_ingress_rules, []) + auto_computed_ingress_with_self = try(each.value.auto_computed_ingress_with_self, var.defaults.auto_computed_ingress_with_self, []) + auto_egress_rules = try(each.value.auto_egress_rules, var.defaults.auto_egress_rules, ["all-all"]) + auto_egress_with_self = try(each.value.auto_egress_with_self, var.defaults.auto_egress_with_self, []) + auto_ingress_rules = try(each.value.auto_ingress_rules, var.defaults.auto_ingress_rules, ["rabbitmq-4369-tcp", "rabbitmq-5671-tcp", "rabbitmq-5672-tcp", "rabbitmq-15672-tcp", "rabbitmq-25672-tcp"]) + auto_ingress_with_self = try(each.value.auto_ingress_with_self, var.defaults.auto_ingress_with_self, [{ "rule" = "all-all" }]) + auto_number_of_computed_egress_rules = try(each.value.auto_number_of_computed_egress_rules, var.defaults.auto_number_of_computed_egress_rules, 0) + auto_number_of_computed_egress_with_self = try(each.value.auto_number_of_computed_egress_with_self, var.defaults.auto_number_of_computed_egress_with_self, 0) + auto_number_of_computed_ingress_rules = try(each.value.auto_number_of_computed_ingress_rules, var.defaults.auto_number_of_computed_ingress_rules, 0) + auto_number_of_computed_ingress_with_self = try(each.value.auto_number_of_computed_ingress_with_self, var.defaults.auto_number_of_computed_ingress_with_self, 0) + computed_egress_cidr_blocks = try(each.value.computed_egress_cidr_blocks, var.defaults.computed_egress_cidr_blocks, ["0.0.0.0/0"]) + computed_egress_ipv6_cidr_blocks = try(each.value.computed_egress_ipv6_cidr_blocks, var.defaults.computed_egress_ipv6_cidr_blocks, ["::/0"]) + computed_egress_prefix_list_ids = try(each.value.computed_egress_prefix_list_ids, var.defaults.computed_egress_prefix_list_ids, []) + computed_egress_rules = try(each.value.computed_egress_rules, var.defaults.computed_egress_rules, []) + computed_egress_with_cidr_ipv4 = try(each.value.computed_egress_with_cidr_ipv4, var.defaults.computed_egress_with_cidr_ipv4, []) + computed_egress_with_cidr_ipv6 = try(each.value.computed_egress_with_cidr_ipv6, var.defaults.computed_egress_with_cidr_ipv6, []) + computed_egress_with_prefix_list_id = try(each.value.computed_egress_with_prefix_list_id, var.defaults.computed_egress_with_prefix_list_id, []) + computed_egress_with_referenced_security_group_id = try(each.value.computed_egress_with_referenced_security_group_id, var.defaults.computed_egress_with_referenced_security_group_id, []) + computed_egress_with_self = try(each.value.computed_egress_with_self, var.defaults.computed_egress_with_self, []) + computed_ingress_cidr_blocks = try(each.value.computed_ingress_cidr_blocks, var.defaults.computed_ingress_cidr_blocks, []) + computed_ingress_ipv6_cidr_blocks = try(each.value.computed_ingress_ipv6_cidr_blocks, var.defaults.computed_ingress_ipv6_cidr_blocks, []) + computed_ingress_prefix_list_ids = try(each.value.computed_ingress_prefix_list_ids, var.defaults.computed_ingress_prefix_list_ids, []) + computed_ingress_rules = try(each.value.computed_ingress_rules, var.defaults.computed_ingress_rules, []) + computed_ingress_with_cidr_ipv4 = try(each.value.computed_ingress_with_cidr_ipv4, var.defaults.computed_ingress_with_cidr_ipv4, []) + computed_ingress_with_cidr_ipv6 = try(each.value.computed_ingress_with_cidr_ipv6, var.defaults.computed_ingress_with_cidr_ipv6, []) + computed_ingress_with_prefix_list_id = try(each.value.computed_ingress_with_prefix_list_id, var.defaults.computed_ingress_with_prefix_list_id, []) + computed_ingress_with_referenced_security_group_id = try(each.value.computed_ingress_with_referenced_security_group_id, var.defaults.computed_ingress_with_referenced_security_group_id, []) + computed_ingress_with_self = try(each.value.computed_ingress_with_self, var.defaults.computed_ingress_with_self, []) + create = try(each.value.create, var.defaults.create, true) + description = try(each.value.description, var.defaults.description, "Security Group managed by Terraform") + egress_cidr_ipv4 = try(each.value.egress_cidr_ipv4, var.defaults.egress_cidr_ipv4, ["0.0.0.0/0"]) + egress_cidr_ipv6 = try(each.value.egress_cidr_ipv6, var.defaults.egress_cidr_ipv6, ["::/0"]) + egress_prefix_list_ids = try(each.value.egress_prefix_list_ids, var.defaults.egress_prefix_list_ids, []) + egress_rules = try(each.value.egress_rules, var.defaults.egress_rules, []) + egress_with_cidr_ipv4 = try(each.value.egress_with_cidr_ipv4, var.defaults.egress_with_cidr_ipv4, []) + egress_with_cidr_ipv6 = try(each.value.egress_with_cidr_ipv6, var.defaults.egress_with_cidr_ipv6, []) + egress_with_prefix_list_id = try(each.value.egress_with_prefix_list_id, var.defaults.egress_with_prefix_list_id, []) + egress_with_referenced_security_group_id = try(each.value.egress_with_referenced_security_group_id, var.defaults.egress_with_referenced_security_group_id, []) + egress_with_self = try(each.value.egress_with_self, var.defaults.egress_with_self, []) + ingress_cidr_ipv4 = try(each.value.ingress_cidr_ipv4, var.defaults.ingress_cidr_ipv4, []) + ingress_cidr_ipv6 = try(each.value.ingress_cidr_ipv6, var.defaults.ingress_cidr_ipv6, []) + ingress_prefix_list_ids = try(each.value.ingress_prefix_list_ids, var.defaults.ingress_prefix_list_ids, []) + ingress_rules = try(each.value.ingress_rules, var.defaults.ingress_rules, []) + ingress_with_cidr_ipv4 = try(each.value.ingress_with_cidr_ipv4, var.defaults.ingress_with_cidr_ipv4, []) + ingress_with_cidr_ipv6 = try(each.value.ingress_with_cidr_ipv6, var.defaults.ingress_with_cidr_ipv6, []) + ingress_with_prefix_list_id = try(each.value.ingress_with_prefix_list_id, var.defaults.ingress_with_prefix_list_id, []) + ingress_with_referenced_security_group_id = try(each.value.ingress_with_referenced_security_group_id, var.defaults.ingress_with_referenced_security_group_id, []) + ingress_with_self = try(each.value.ingress_with_self, var.defaults.ingress_with_self, []) + name = try(each.value.name, var.defaults.name) + number_of_computed_egress_cidr_blocks = try(each.value.number_of_computed_egress_cidr_blocks, var.defaults.number_of_computed_egress_cidr_blocks, 0) + number_of_computed_egress_ipv6_cidr_blocks = try(each.value.number_of_computed_egress_ipv6_cidr_blocks, var.defaults.number_of_computed_egress_ipv6_cidr_blocks, 0) + number_of_computed_egress_prefix_list_ids = try(each.value.number_of_computed_egress_prefix_list_ids, var.defaults.number_of_computed_egress_prefix_list_ids, 0) + number_of_computed_egress_rules = try(each.value.number_of_computed_egress_rules, var.defaults.number_of_computed_egress_rules, 0) + number_of_computed_egress_with_cidr_ipv4 = try(each.value.number_of_computed_egress_with_cidr_ipv4, var.defaults.number_of_computed_egress_with_cidr_ipv4, 0) + number_of_computed_egress_with_cidr_ipv6 = try(each.value.number_of_computed_egress_with_cidr_ipv6, var.defaults.number_of_computed_egress_with_cidr_ipv6, 0) + number_of_computed_egress_with_prefix_list_id = try(each.value.number_of_computed_egress_with_prefix_list_id, var.defaults.number_of_computed_egress_with_prefix_list_id, 0) + number_of_computed_egress_with_referenced_security_group_id = try(each.value.number_of_computed_egress_with_referenced_security_group_id, var.defaults.number_of_computed_egress_with_referenced_security_group_id, 0) + number_of_computed_egress_with_self = try(each.value.number_of_computed_egress_with_self, var.defaults.number_of_computed_egress_with_self, 0) + number_of_computed_ingress_cidr_blocks = try(each.value.number_of_computed_ingress_cidr_blocks, var.defaults.number_of_computed_ingress_cidr_blocks, 0) + number_of_computed_ingress_ipv6_cidr_blocks = try(each.value.number_of_computed_ingress_ipv6_cidr_blocks, var.defaults.number_of_computed_ingress_ipv6_cidr_blocks, 0) + number_of_computed_ingress_prefix_list_ids = try(each.value.number_of_computed_ingress_prefix_list_ids, var.defaults.number_of_computed_ingress_prefix_list_ids, 0) + number_of_computed_ingress_rules = try(each.value.number_of_computed_ingress_rules, var.defaults.number_of_computed_ingress_rules, 0) + number_of_computed_ingress_with_cidr_ipv4 = try(each.value.number_of_computed_ingress_with_cidr_ipv4, var.defaults.number_of_computed_ingress_with_cidr_ipv4, 0) + number_of_computed_ingress_with_cidr_ipv6 = try(each.value.number_of_computed_ingress_with_cidr_ipv6, var.defaults.number_of_computed_ingress_with_cidr_ipv6, 0) + number_of_computed_ingress_with_prefix_list_id = try(each.value.number_of_computed_ingress_with_prefix_list_id, var.defaults.number_of_computed_ingress_with_prefix_list_id, 0) + number_of_computed_ingress_with_referenced_security_group_id = try(each.value.number_of_computed_ingress_with_referenced_security_group_id, var.defaults.number_of_computed_ingress_with_referenced_security_group_id, 0) + number_of_computed_ingress_with_self = try(each.value.number_of_computed_ingress_with_self, var.defaults.number_of_computed_ingress_with_self, 0) + revoke_rules_on_delete = try(each.value.revoke_rules_on_delete, var.defaults.revoke_rules_on_delete, false) + tags = try(each.value.tags, var.defaults.tags, {}) + use_name_prefix = try(each.value.use_name_prefix, var.defaults.use_name_prefix, true) + vpc_id = try(each.value.vpc_id, var.defaults.vpc_id) } diff --git a/wrappers/rdp/main.tf b/wrappers/rdp/main.tf index 1e385c5d..c6eede06 100644 --- a/wrappers/rdp/main.tf +++ b/wrappers/rdp/main.tf @@ -3,77 +3,77 @@ module "wrapper" { for_each = var.items - auto_computed_egress_rules = try(each.value.auto_computed_egress_rules, var.defaults.auto_computed_egress_rules, []) - auto_computed_egress_with_self = try(each.value.auto_computed_egress_with_self, var.defaults.auto_computed_egress_with_self, []) - auto_computed_ingress_rules = try(each.value.auto_computed_ingress_rules, var.defaults.auto_computed_ingress_rules, []) - auto_computed_ingress_with_self = try(each.value.auto_computed_ingress_with_self, var.defaults.auto_computed_ingress_with_self, []) - auto_egress_rules = try(each.value.auto_egress_rules, var.defaults.auto_egress_rules, ["all-all"]) - auto_egress_with_self = try(each.value.auto_egress_with_self, var.defaults.auto_egress_with_self, []) - auto_ingress_rules = try(each.value.auto_ingress_rules, var.defaults.auto_ingress_rules, ["rdp-tcp", "rdp-udp"]) - auto_ingress_with_self = try(each.value.auto_ingress_with_self, var.defaults.auto_ingress_with_self, [{ "rule" = "all-all" }]) - auto_number_of_computed_egress_rules = try(each.value.auto_number_of_computed_egress_rules, var.defaults.auto_number_of_computed_egress_rules, 0) - auto_number_of_computed_egress_with_self = try(each.value.auto_number_of_computed_egress_with_self, var.defaults.auto_number_of_computed_egress_with_self, 0) - auto_number_of_computed_ingress_rules = try(each.value.auto_number_of_computed_ingress_rules, var.defaults.auto_number_of_computed_ingress_rules, 0) - auto_number_of_computed_ingress_with_self = try(each.value.auto_number_of_computed_ingress_with_self, var.defaults.auto_number_of_computed_ingress_with_self, 0) - computed_egress_cidr_blocks = try(each.value.computed_egress_cidr_blocks, var.defaults.computed_egress_cidr_blocks, ["0.0.0.0/0"]) - computed_egress_ipv6_cidr_blocks = try(each.value.computed_egress_ipv6_cidr_blocks, var.defaults.computed_egress_ipv6_cidr_blocks, ["::/0"]) - computed_egress_prefix_list_ids = try(each.value.computed_egress_prefix_list_ids, var.defaults.computed_egress_prefix_list_ids, []) - computed_egress_rules = try(each.value.computed_egress_rules, var.defaults.computed_egress_rules, []) - computed_egress_with_cidr_blocks = try(each.value.computed_egress_with_cidr_blocks, var.defaults.computed_egress_with_cidr_blocks, []) - computed_egress_with_ipv6_cidr_blocks = try(each.value.computed_egress_with_ipv6_cidr_blocks, var.defaults.computed_egress_with_ipv6_cidr_blocks, []) - computed_egress_with_prefix_list_ids = try(each.value.computed_egress_with_prefix_list_ids, var.defaults.computed_egress_with_prefix_list_ids, []) - computed_egress_with_self = try(each.value.computed_egress_with_self, var.defaults.computed_egress_with_self, []) - computed_egress_with_source_security_group_id = try(each.value.computed_egress_with_source_security_group_id, var.defaults.computed_egress_with_source_security_group_id, []) - computed_ingress_cidr_blocks = try(each.value.computed_ingress_cidr_blocks, var.defaults.computed_ingress_cidr_blocks, []) - computed_ingress_ipv6_cidr_blocks = try(each.value.computed_ingress_ipv6_cidr_blocks, var.defaults.computed_ingress_ipv6_cidr_blocks, []) - computed_ingress_prefix_list_ids = try(each.value.computed_ingress_prefix_list_ids, var.defaults.computed_ingress_prefix_list_ids, []) - computed_ingress_rules = try(each.value.computed_ingress_rules, var.defaults.computed_ingress_rules, []) - computed_ingress_with_cidr_blocks = try(each.value.computed_ingress_with_cidr_blocks, var.defaults.computed_ingress_with_cidr_blocks, []) - computed_ingress_with_ipv6_cidr_blocks = try(each.value.computed_ingress_with_ipv6_cidr_blocks, var.defaults.computed_ingress_with_ipv6_cidr_blocks, []) - computed_ingress_with_prefix_list_ids = try(each.value.computed_ingress_with_prefix_list_ids, var.defaults.computed_ingress_with_prefix_list_ids, []) - computed_ingress_with_self = try(each.value.computed_ingress_with_self, var.defaults.computed_ingress_with_self, []) - computed_ingress_with_source_security_group_id = try(each.value.computed_ingress_with_source_security_group_id, var.defaults.computed_ingress_with_source_security_group_id, []) - create = try(each.value.create, var.defaults.create, true) - description = try(each.value.description, var.defaults.description, "Security Group managed by Terraform") - egress_cidr_blocks = try(each.value.egress_cidr_blocks, var.defaults.egress_cidr_blocks, ["0.0.0.0/0"]) - egress_ipv6_cidr_blocks = try(each.value.egress_ipv6_cidr_blocks, var.defaults.egress_ipv6_cidr_blocks, ["::/0"]) - egress_prefix_list_ids = try(each.value.egress_prefix_list_ids, var.defaults.egress_prefix_list_ids, []) - egress_rules = try(each.value.egress_rules, var.defaults.egress_rules, []) - egress_with_cidr_blocks = try(each.value.egress_with_cidr_blocks, var.defaults.egress_with_cidr_blocks, []) - egress_with_ipv6_cidr_blocks = try(each.value.egress_with_ipv6_cidr_blocks, var.defaults.egress_with_ipv6_cidr_blocks, []) - egress_with_prefix_list_ids = try(each.value.egress_with_prefix_list_ids, var.defaults.egress_with_prefix_list_ids, []) - egress_with_self = try(each.value.egress_with_self, var.defaults.egress_with_self, []) - egress_with_source_security_group_id = try(each.value.egress_with_source_security_group_id, var.defaults.egress_with_source_security_group_id, []) - ingress_cidr_blocks = try(each.value.ingress_cidr_blocks, var.defaults.ingress_cidr_blocks, []) - ingress_ipv6_cidr_blocks = try(each.value.ingress_ipv6_cidr_blocks, var.defaults.ingress_ipv6_cidr_blocks, []) - ingress_prefix_list_ids = try(each.value.ingress_prefix_list_ids, var.defaults.ingress_prefix_list_ids, []) - ingress_rules = try(each.value.ingress_rules, var.defaults.ingress_rules, []) - ingress_with_cidr_blocks = try(each.value.ingress_with_cidr_blocks, var.defaults.ingress_with_cidr_blocks, []) - ingress_with_ipv6_cidr_blocks = try(each.value.ingress_with_ipv6_cidr_blocks, var.defaults.ingress_with_ipv6_cidr_blocks, []) - ingress_with_prefix_list_ids = try(each.value.ingress_with_prefix_list_ids, var.defaults.ingress_with_prefix_list_ids, []) - ingress_with_self = try(each.value.ingress_with_self, var.defaults.ingress_with_self, []) - ingress_with_source_security_group_id = try(each.value.ingress_with_source_security_group_id, var.defaults.ingress_with_source_security_group_id, []) - name = try(each.value.name, var.defaults.name) - number_of_computed_egress_cidr_blocks = try(each.value.number_of_computed_egress_cidr_blocks, var.defaults.number_of_computed_egress_cidr_blocks, 0) - number_of_computed_egress_ipv6_cidr_blocks = try(each.value.number_of_computed_egress_ipv6_cidr_blocks, var.defaults.number_of_computed_egress_ipv6_cidr_blocks, 0) - number_of_computed_egress_prefix_list_ids = try(each.value.number_of_computed_egress_prefix_list_ids, var.defaults.number_of_computed_egress_prefix_list_ids, 0) - number_of_computed_egress_rules = try(each.value.number_of_computed_egress_rules, var.defaults.number_of_computed_egress_rules, 0) - number_of_computed_egress_with_cidr_blocks = try(each.value.number_of_computed_egress_with_cidr_blocks, var.defaults.number_of_computed_egress_with_cidr_blocks, 0) - number_of_computed_egress_with_ipv6_cidr_blocks = try(each.value.number_of_computed_egress_with_ipv6_cidr_blocks, var.defaults.number_of_computed_egress_with_ipv6_cidr_blocks, 0) - number_of_computed_egress_with_prefix_list_ids = try(each.value.number_of_computed_egress_with_prefix_list_ids, var.defaults.number_of_computed_egress_with_prefix_list_ids, 0) - number_of_computed_egress_with_self = try(each.value.number_of_computed_egress_with_self, var.defaults.number_of_computed_egress_with_self, 0) - number_of_computed_egress_with_source_security_group_id = try(each.value.number_of_computed_egress_with_source_security_group_id, var.defaults.number_of_computed_egress_with_source_security_group_id, 0) - number_of_computed_ingress_cidr_blocks = try(each.value.number_of_computed_ingress_cidr_blocks, var.defaults.number_of_computed_ingress_cidr_blocks, 0) - number_of_computed_ingress_ipv6_cidr_blocks = try(each.value.number_of_computed_ingress_ipv6_cidr_blocks, var.defaults.number_of_computed_ingress_ipv6_cidr_blocks, 0) - number_of_computed_ingress_prefix_list_ids = try(each.value.number_of_computed_ingress_prefix_list_ids, var.defaults.number_of_computed_ingress_prefix_list_ids, 0) - number_of_computed_ingress_rules = try(each.value.number_of_computed_ingress_rules, var.defaults.number_of_computed_ingress_rules, 0) - number_of_computed_ingress_with_cidr_blocks = try(each.value.number_of_computed_ingress_with_cidr_blocks, var.defaults.number_of_computed_ingress_with_cidr_blocks, 0) - number_of_computed_ingress_with_ipv6_cidr_blocks = try(each.value.number_of_computed_ingress_with_ipv6_cidr_blocks, var.defaults.number_of_computed_ingress_with_ipv6_cidr_blocks, 0) - number_of_computed_ingress_with_prefix_list_ids = try(each.value.number_of_computed_ingress_with_prefix_list_ids, var.defaults.number_of_computed_ingress_with_prefix_list_ids, 0) - number_of_computed_ingress_with_self = try(each.value.number_of_computed_ingress_with_self, var.defaults.number_of_computed_ingress_with_self, 0) - number_of_computed_ingress_with_source_security_group_id = try(each.value.number_of_computed_ingress_with_source_security_group_id, var.defaults.number_of_computed_ingress_with_source_security_group_id, 0) - revoke_rules_on_delete = try(each.value.revoke_rules_on_delete, var.defaults.revoke_rules_on_delete, false) - tags = try(each.value.tags, var.defaults.tags, {}) - use_name_prefix = try(each.value.use_name_prefix, var.defaults.use_name_prefix, true) - vpc_id = try(each.value.vpc_id, var.defaults.vpc_id) + auto_computed_egress_rules = try(each.value.auto_computed_egress_rules, var.defaults.auto_computed_egress_rules, []) + auto_computed_egress_with_self = try(each.value.auto_computed_egress_with_self, var.defaults.auto_computed_egress_with_self, []) + auto_computed_ingress_rules = try(each.value.auto_computed_ingress_rules, var.defaults.auto_computed_ingress_rules, []) + auto_computed_ingress_with_self = try(each.value.auto_computed_ingress_with_self, var.defaults.auto_computed_ingress_with_self, []) + auto_egress_rules = try(each.value.auto_egress_rules, var.defaults.auto_egress_rules, ["all-all"]) + auto_egress_with_self = try(each.value.auto_egress_with_self, var.defaults.auto_egress_with_self, []) + auto_ingress_rules = try(each.value.auto_ingress_rules, var.defaults.auto_ingress_rules, ["rdp-tcp", "rdp-udp"]) + auto_ingress_with_self = try(each.value.auto_ingress_with_self, var.defaults.auto_ingress_with_self, [{ "rule" = "all-all" }]) + auto_number_of_computed_egress_rules = try(each.value.auto_number_of_computed_egress_rules, var.defaults.auto_number_of_computed_egress_rules, 0) + auto_number_of_computed_egress_with_self = try(each.value.auto_number_of_computed_egress_with_self, var.defaults.auto_number_of_computed_egress_with_self, 0) + auto_number_of_computed_ingress_rules = try(each.value.auto_number_of_computed_ingress_rules, var.defaults.auto_number_of_computed_ingress_rules, 0) + auto_number_of_computed_ingress_with_self = try(each.value.auto_number_of_computed_ingress_with_self, var.defaults.auto_number_of_computed_ingress_with_self, 0) + computed_egress_cidr_blocks = try(each.value.computed_egress_cidr_blocks, var.defaults.computed_egress_cidr_blocks, ["0.0.0.0/0"]) + computed_egress_ipv6_cidr_blocks = try(each.value.computed_egress_ipv6_cidr_blocks, var.defaults.computed_egress_ipv6_cidr_blocks, ["::/0"]) + computed_egress_prefix_list_ids = try(each.value.computed_egress_prefix_list_ids, var.defaults.computed_egress_prefix_list_ids, []) + computed_egress_rules = try(each.value.computed_egress_rules, var.defaults.computed_egress_rules, []) + computed_egress_with_cidr_ipv4 = try(each.value.computed_egress_with_cidr_ipv4, var.defaults.computed_egress_with_cidr_ipv4, []) + computed_egress_with_cidr_ipv6 = try(each.value.computed_egress_with_cidr_ipv6, var.defaults.computed_egress_with_cidr_ipv6, []) + computed_egress_with_prefix_list_id = try(each.value.computed_egress_with_prefix_list_id, var.defaults.computed_egress_with_prefix_list_id, []) + computed_egress_with_referenced_security_group_id = try(each.value.computed_egress_with_referenced_security_group_id, var.defaults.computed_egress_with_referenced_security_group_id, []) + computed_egress_with_self = try(each.value.computed_egress_with_self, var.defaults.computed_egress_with_self, []) + computed_ingress_cidr_blocks = try(each.value.computed_ingress_cidr_blocks, var.defaults.computed_ingress_cidr_blocks, []) + computed_ingress_ipv6_cidr_blocks = try(each.value.computed_ingress_ipv6_cidr_blocks, var.defaults.computed_ingress_ipv6_cidr_blocks, []) + computed_ingress_prefix_list_ids = try(each.value.computed_ingress_prefix_list_ids, var.defaults.computed_ingress_prefix_list_ids, []) + computed_ingress_rules = try(each.value.computed_ingress_rules, var.defaults.computed_ingress_rules, []) + computed_ingress_with_cidr_ipv4 = try(each.value.computed_ingress_with_cidr_ipv4, var.defaults.computed_ingress_with_cidr_ipv4, []) + computed_ingress_with_cidr_ipv6 = try(each.value.computed_ingress_with_cidr_ipv6, var.defaults.computed_ingress_with_cidr_ipv6, []) + computed_ingress_with_prefix_list_id = try(each.value.computed_ingress_with_prefix_list_id, var.defaults.computed_ingress_with_prefix_list_id, []) + computed_ingress_with_referenced_security_group_id = try(each.value.computed_ingress_with_referenced_security_group_id, var.defaults.computed_ingress_with_referenced_security_group_id, []) + computed_ingress_with_self = try(each.value.computed_ingress_with_self, var.defaults.computed_ingress_with_self, []) + create = try(each.value.create, var.defaults.create, true) + description = try(each.value.description, var.defaults.description, "Security Group managed by Terraform") + egress_cidr_ipv4 = try(each.value.egress_cidr_ipv4, var.defaults.egress_cidr_ipv4, ["0.0.0.0/0"]) + egress_cidr_ipv6 = try(each.value.egress_cidr_ipv6, var.defaults.egress_cidr_ipv6, ["::/0"]) + egress_prefix_list_ids = try(each.value.egress_prefix_list_ids, var.defaults.egress_prefix_list_ids, []) + egress_rules = try(each.value.egress_rules, var.defaults.egress_rules, []) + egress_with_cidr_ipv4 = try(each.value.egress_with_cidr_ipv4, var.defaults.egress_with_cidr_ipv4, []) + egress_with_cidr_ipv6 = try(each.value.egress_with_cidr_ipv6, var.defaults.egress_with_cidr_ipv6, []) + egress_with_prefix_list_id = try(each.value.egress_with_prefix_list_id, var.defaults.egress_with_prefix_list_id, []) + egress_with_referenced_security_group_id = try(each.value.egress_with_referenced_security_group_id, var.defaults.egress_with_referenced_security_group_id, []) + egress_with_self = try(each.value.egress_with_self, var.defaults.egress_with_self, []) + ingress_cidr_ipv4 = try(each.value.ingress_cidr_ipv4, var.defaults.ingress_cidr_ipv4, []) + ingress_cidr_ipv6 = try(each.value.ingress_cidr_ipv6, var.defaults.ingress_cidr_ipv6, []) + ingress_prefix_list_ids = try(each.value.ingress_prefix_list_ids, var.defaults.ingress_prefix_list_ids, []) + ingress_rules = try(each.value.ingress_rules, var.defaults.ingress_rules, []) + ingress_with_cidr_ipv4 = try(each.value.ingress_with_cidr_ipv4, var.defaults.ingress_with_cidr_ipv4, []) + ingress_with_cidr_ipv6 = try(each.value.ingress_with_cidr_ipv6, var.defaults.ingress_with_cidr_ipv6, []) + ingress_with_prefix_list_id = try(each.value.ingress_with_prefix_list_id, var.defaults.ingress_with_prefix_list_id, []) + ingress_with_referenced_security_group_id = try(each.value.ingress_with_referenced_security_group_id, var.defaults.ingress_with_referenced_security_group_id, []) + ingress_with_self = try(each.value.ingress_with_self, var.defaults.ingress_with_self, []) + name = try(each.value.name, var.defaults.name) + number_of_computed_egress_cidr_blocks = try(each.value.number_of_computed_egress_cidr_blocks, var.defaults.number_of_computed_egress_cidr_blocks, 0) + number_of_computed_egress_ipv6_cidr_blocks = try(each.value.number_of_computed_egress_ipv6_cidr_blocks, var.defaults.number_of_computed_egress_ipv6_cidr_blocks, 0) + number_of_computed_egress_prefix_list_ids = try(each.value.number_of_computed_egress_prefix_list_ids, var.defaults.number_of_computed_egress_prefix_list_ids, 0) + number_of_computed_egress_rules = try(each.value.number_of_computed_egress_rules, var.defaults.number_of_computed_egress_rules, 0) + number_of_computed_egress_with_cidr_ipv4 = try(each.value.number_of_computed_egress_with_cidr_ipv4, var.defaults.number_of_computed_egress_with_cidr_ipv4, 0) + number_of_computed_egress_with_cidr_ipv6 = try(each.value.number_of_computed_egress_with_cidr_ipv6, var.defaults.number_of_computed_egress_with_cidr_ipv6, 0) + number_of_computed_egress_with_prefix_list_id = try(each.value.number_of_computed_egress_with_prefix_list_id, var.defaults.number_of_computed_egress_with_prefix_list_id, 0) + number_of_computed_egress_with_referenced_security_group_id = try(each.value.number_of_computed_egress_with_referenced_security_group_id, var.defaults.number_of_computed_egress_with_referenced_security_group_id, 0) + number_of_computed_egress_with_self = try(each.value.number_of_computed_egress_with_self, var.defaults.number_of_computed_egress_with_self, 0) + number_of_computed_ingress_cidr_blocks = try(each.value.number_of_computed_ingress_cidr_blocks, var.defaults.number_of_computed_ingress_cidr_blocks, 0) + number_of_computed_ingress_ipv6_cidr_blocks = try(each.value.number_of_computed_ingress_ipv6_cidr_blocks, var.defaults.number_of_computed_ingress_ipv6_cidr_blocks, 0) + number_of_computed_ingress_prefix_list_ids = try(each.value.number_of_computed_ingress_prefix_list_ids, var.defaults.number_of_computed_ingress_prefix_list_ids, 0) + number_of_computed_ingress_rules = try(each.value.number_of_computed_ingress_rules, var.defaults.number_of_computed_ingress_rules, 0) + number_of_computed_ingress_with_cidr_ipv4 = try(each.value.number_of_computed_ingress_with_cidr_ipv4, var.defaults.number_of_computed_ingress_with_cidr_ipv4, 0) + number_of_computed_ingress_with_cidr_ipv6 = try(each.value.number_of_computed_ingress_with_cidr_ipv6, var.defaults.number_of_computed_ingress_with_cidr_ipv6, 0) + number_of_computed_ingress_with_prefix_list_id = try(each.value.number_of_computed_ingress_with_prefix_list_id, var.defaults.number_of_computed_ingress_with_prefix_list_id, 0) + number_of_computed_ingress_with_referenced_security_group_id = try(each.value.number_of_computed_ingress_with_referenced_security_group_id, var.defaults.number_of_computed_ingress_with_referenced_security_group_id, 0) + number_of_computed_ingress_with_self = try(each.value.number_of_computed_ingress_with_self, var.defaults.number_of_computed_ingress_with_self, 0) + revoke_rules_on_delete = try(each.value.revoke_rules_on_delete, var.defaults.revoke_rules_on_delete, false) + tags = try(each.value.tags, var.defaults.tags, {}) + use_name_prefix = try(each.value.use_name_prefix, var.defaults.use_name_prefix, true) + vpc_id = try(each.value.vpc_id, var.defaults.vpc_id) } diff --git a/wrappers/redis/main.tf b/wrappers/redis/main.tf index e1e3a0e5..db1277b8 100644 --- a/wrappers/redis/main.tf +++ b/wrappers/redis/main.tf @@ -3,77 +3,77 @@ module "wrapper" { for_each = var.items - auto_computed_egress_rules = try(each.value.auto_computed_egress_rules, var.defaults.auto_computed_egress_rules, []) - auto_computed_egress_with_self = try(each.value.auto_computed_egress_with_self, var.defaults.auto_computed_egress_with_self, []) - auto_computed_ingress_rules = try(each.value.auto_computed_ingress_rules, var.defaults.auto_computed_ingress_rules, []) - auto_computed_ingress_with_self = try(each.value.auto_computed_ingress_with_self, var.defaults.auto_computed_ingress_with_self, []) - auto_egress_rules = try(each.value.auto_egress_rules, var.defaults.auto_egress_rules, ["all-all"]) - auto_egress_with_self = try(each.value.auto_egress_with_self, var.defaults.auto_egress_with_self, []) - auto_ingress_rules = try(each.value.auto_ingress_rules, var.defaults.auto_ingress_rules, ["redis-tcp"]) - auto_ingress_with_self = try(each.value.auto_ingress_with_self, var.defaults.auto_ingress_with_self, [{ "rule" = "all-all" }]) - auto_number_of_computed_egress_rules = try(each.value.auto_number_of_computed_egress_rules, var.defaults.auto_number_of_computed_egress_rules, 0) - auto_number_of_computed_egress_with_self = try(each.value.auto_number_of_computed_egress_with_self, var.defaults.auto_number_of_computed_egress_with_self, 0) - auto_number_of_computed_ingress_rules = try(each.value.auto_number_of_computed_ingress_rules, var.defaults.auto_number_of_computed_ingress_rules, 0) - auto_number_of_computed_ingress_with_self = try(each.value.auto_number_of_computed_ingress_with_self, var.defaults.auto_number_of_computed_ingress_with_self, 0) - computed_egress_cidr_blocks = try(each.value.computed_egress_cidr_blocks, var.defaults.computed_egress_cidr_blocks, ["0.0.0.0/0"]) - computed_egress_ipv6_cidr_blocks = try(each.value.computed_egress_ipv6_cidr_blocks, var.defaults.computed_egress_ipv6_cidr_blocks, ["::/0"]) - computed_egress_prefix_list_ids = try(each.value.computed_egress_prefix_list_ids, var.defaults.computed_egress_prefix_list_ids, []) - computed_egress_rules = try(each.value.computed_egress_rules, var.defaults.computed_egress_rules, []) - computed_egress_with_cidr_blocks = try(each.value.computed_egress_with_cidr_blocks, var.defaults.computed_egress_with_cidr_blocks, []) - computed_egress_with_ipv6_cidr_blocks = try(each.value.computed_egress_with_ipv6_cidr_blocks, var.defaults.computed_egress_with_ipv6_cidr_blocks, []) - computed_egress_with_prefix_list_ids = try(each.value.computed_egress_with_prefix_list_ids, var.defaults.computed_egress_with_prefix_list_ids, []) - computed_egress_with_self = try(each.value.computed_egress_with_self, var.defaults.computed_egress_with_self, []) - computed_egress_with_source_security_group_id = try(each.value.computed_egress_with_source_security_group_id, var.defaults.computed_egress_with_source_security_group_id, []) - computed_ingress_cidr_blocks = try(each.value.computed_ingress_cidr_blocks, var.defaults.computed_ingress_cidr_blocks, []) - computed_ingress_ipv6_cidr_blocks = try(each.value.computed_ingress_ipv6_cidr_blocks, var.defaults.computed_ingress_ipv6_cidr_blocks, []) - computed_ingress_prefix_list_ids = try(each.value.computed_ingress_prefix_list_ids, var.defaults.computed_ingress_prefix_list_ids, []) - computed_ingress_rules = try(each.value.computed_ingress_rules, var.defaults.computed_ingress_rules, []) - computed_ingress_with_cidr_blocks = try(each.value.computed_ingress_with_cidr_blocks, var.defaults.computed_ingress_with_cidr_blocks, []) - computed_ingress_with_ipv6_cidr_blocks = try(each.value.computed_ingress_with_ipv6_cidr_blocks, var.defaults.computed_ingress_with_ipv6_cidr_blocks, []) - computed_ingress_with_prefix_list_ids = try(each.value.computed_ingress_with_prefix_list_ids, var.defaults.computed_ingress_with_prefix_list_ids, []) - computed_ingress_with_self = try(each.value.computed_ingress_with_self, var.defaults.computed_ingress_with_self, []) - computed_ingress_with_source_security_group_id = try(each.value.computed_ingress_with_source_security_group_id, var.defaults.computed_ingress_with_source_security_group_id, []) - create = try(each.value.create, var.defaults.create, true) - description = try(each.value.description, var.defaults.description, "Security Group managed by Terraform") - egress_cidr_blocks = try(each.value.egress_cidr_blocks, var.defaults.egress_cidr_blocks, ["0.0.0.0/0"]) - egress_ipv6_cidr_blocks = try(each.value.egress_ipv6_cidr_blocks, var.defaults.egress_ipv6_cidr_blocks, ["::/0"]) - egress_prefix_list_ids = try(each.value.egress_prefix_list_ids, var.defaults.egress_prefix_list_ids, []) - egress_rules = try(each.value.egress_rules, var.defaults.egress_rules, []) - egress_with_cidr_blocks = try(each.value.egress_with_cidr_blocks, var.defaults.egress_with_cidr_blocks, []) - egress_with_ipv6_cidr_blocks = try(each.value.egress_with_ipv6_cidr_blocks, var.defaults.egress_with_ipv6_cidr_blocks, []) - egress_with_prefix_list_ids = try(each.value.egress_with_prefix_list_ids, var.defaults.egress_with_prefix_list_ids, []) - egress_with_self = try(each.value.egress_with_self, var.defaults.egress_with_self, []) - egress_with_source_security_group_id = try(each.value.egress_with_source_security_group_id, var.defaults.egress_with_source_security_group_id, []) - ingress_cidr_blocks = try(each.value.ingress_cidr_blocks, var.defaults.ingress_cidr_blocks, []) - ingress_ipv6_cidr_blocks = try(each.value.ingress_ipv6_cidr_blocks, var.defaults.ingress_ipv6_cidr_blocks, []) - ingress_prefix_list_ids = try(each.value.ingress_prefix_list_ids, var.defaults.ingress_prefix_list_ids, []) - ingress_rules = try(each.value.ingress_rules, var.defaults.ingress_rules, []) - ingress_with_cidr_blocks = try(each.value.ingress_with_cidr_blocks, var.defaults.ingress_with_cidr_blocks, []) - ingress_with_ipv6_cidr_blocks = try(each.value.ingress_with_ipv6_cidr_blocks, var.defaults.ingress_with_ipv6_cidr_blocks, []) - ingress_with_prefix_list_ids = try(each.value.ingress_with_prefix_list_ids, var.defaults.ingress_with_prefix_list_ids, []) - ingress_with_self = try(each.value.ingress_with_self, var.defaults.ingress_with_self, []) - ingress_with_source_security_group_id = try(each.value.ingress_with_source_security_group_id, var.defaults.ingress_with_source_security_group_id, []) - name = try(each.value.name, var.defaults.name) - number_of_computed_egress_cidr_blocks = try(each.value.number_of_computed_egress_cidr_blocks, var.defaults.number_of_computed_egress_cidr_blocks, 0) - number_of_computed_egress_ipv6_cidr_blocks = try(each.value.number_of_computed_egress_ipv6_cidr_blocks, var.defaults.number_of_computed_egress_ipv6_cidr_blocks, 0) - number_of_computed_egress_prefix_list_ids = try(each.value.number_of_computed_egress_prefix_list_ids, var.defaults.number_of_computed_egress_prefix_list_ids, 0) - number_of_computed_egress_rules = try(each.value.number_of_computed_egress_rules, var.defaults.number_of_computed_egress_rules, 0) - number_of_computed_egress_with_cidr_blocks = try(each.value.number_of_computed_egress_with_cidr_blocks, var.defaults.number_of_computed_egress_with_cidr_blocks, 0) - number_of_computed_egress_with_ipv6_cidr_blocks = try(each.value.number_of_computed_egress_with_ipv6_cidr_blocks, var.defaults.number_of_computed_egress_with_ipv6_cidr_blocks, 0) - number_of_computed_egress_with_prefix_list_ids = try(each.value.number_of_computed_egress_with_prefix_list_ids, var.defaults.number_of_computed_egress_with_prefix_list_ids, 0) - number_of_computed_egress_with_self = try(each.value.number_of_computed_egress_with_self, var.defaults.number_of_computed_egress_with_self, 0) - number_of_computed_egress_with_source_security_group_id = try(each.value.number_of_computed_egress_with_source_security_group_id, var.defaults.number_of_computed_egress_with_source_security_group_id, 0) - number_of_computed_ingress_cidr_blocks = try(each.value.number_of_computed_ingress_cidr_blocks, var.defaults.number_of_computed_ingress_cidr_blocks, 0) - number_of_computed_ingress_ipv6_cidr_blocks = try(each.value.number_of_computed_ingress_ipv6_cidr_blocks, var.defaults.number_of_computed_ingress_ipv6_cidr_blocks, 0) - number_of_computed_ingress_prefix_list_ids = try(each.value.number_of_computed_ingress_prefix_list_ids, var.defaults.number_of_computed_ingress_prefix_list_ids, 0) - number_of_computed_ingress_rules = try(each.value.number_of_computed_ingress_rules, var.defaults.number_of_computed_ingress_rules, 0) - number_of_computed_ingress_with_cidr_blocks = try(each.value.number_of_computed_ingress_with_cidr_blocks, var.defaults.number_of_computed_ingress_with_cidr_blocks, 0) - number_of_computed_ingress_with_ipv6_cidr_blocks = try(each.value.number_of_computed_ingress_with_ipv6_cidr_blocks, var.defaults.number_of_computed_ingress_with_ipv6_cidr_blocks, 0) - number_of_computed_ingress_with_prefix_list_ids = try(each.value.number_of_computed_ingress_with_prefix_list_ids, var.defaults.number_of_computed_ingress_with_prefix_list_ids, 0) - number_of_computed_ingress_with_self = try(each.value.number_of_computed_ingress_with_self, var.defaults.number_of_computed_ingress_with_self, 0) - number_of_computed_ingress_with_source_security_group_id = try(each.value.number_of_computed_ingress_with_source_security_group_id, var.defaults.number_of_computed_ingress_with_source_security_group_id, 0) - revoke_rules_on_delete = try(each.value.revoke_rules_on_delete, var.defaults.revoke_rules_on_delete, false) - tags = try(each.value.tags, var.defaults.tags, {}) - use_name_prefix = try(each.value.use_name_prefix, var.defaults.use_name_prefix, true) - vpc_id = try(each.value.vpc_id, var.defaults.vpc_id) + auto_computed_egress_rules = try(each.value.auto_computed_egress_rules, var.defaults.auto_computed_egress_rules, []) + auto_computed_egress_with_self = try(each.value.auto_computed_egress_with_self, var.defaults.auto_computed_egress_with_self, []) + auto_computed_ingress_rules = try(each.value.auto_computed_ingress_rules, var.defaults.auto_computed_ingress_rules, []) + auto_computed_ingress_with_self = try(each.value.auto_computed_ingress_with_self, var.defaults.auto_computed_ingress_with_self, []) + auto_egress_rules = try(each.value.auto_egress_rules, var.defaults.auto_egress_rules, ["all-all"]) + auto_egress_with_self = try(each.value.auto_egress_with_self, var.defaults.auto_egress_with_self, []) + auto_ingress_rules = try(each.value.auto_ingress_rules, var.defaults.auto_ingress_rules, ["redis-tcp"]) + auto_ingress_with_self = try(each.value.auto_ingress_with_self, var.defaults.auto_ingress_with_self, [{ "rule" = "all-all" }]) + auto_number_of_computed_egress_rules = try(each.value.auto_number_of_computed_egress_rules, var.defaults.auto_number_of_computed_egress_rules, 0) + auto_number_of_computed_egress_with_self = try(each.value.auto_number_of_computed_egress_with_self, var.defaults.auto_number_of_computed_egress_with_self, 0) + auto_number_of_computed_ingress_rules = try(each.value.auto_number_of_computed_ingress_rules, var.defaults.auto_number_of_computed_ingress_rules, 0) + auto_number_of_computed_ingress_with_self = try(each.value.auto_number_of_computed_ingress_with_self, var.defaults.auto_number_of_computed_ingress_with_self, 0) + computed_egress_cidr_blocks = try(each.value.computed_egress_cidr_blocks, var.defaults.computed_egress_cidr_blocks, ["0.0.0.0/0"]) + computed_egress_ipv6_cidr_blocks = try(each.value.computed_egress_ipv6_cidr_blocks, var.defaults.computed_egress_ipv6_cidr_blocks, ["::/0"]) + computed_egress_prefix_list_ids = try(each.value.computed_egress_prefix_list_ids, var.defaults.computed_egress_prefix_list_ids, []) + computed_egress_rules = try(each.value.computed_egress_rules, var.defaults.computed_egress_rules, []) + computed_egress_with_cidr_ipv4 = try(each.value.computed_egress_with_cidr_ipv4, var.defaults.computed_egress_with_cidr_ipv4, []) + computed_egress_with_cidr_ipv6 = try(each.value.computed_egress_with_cidr_ipv6, var.defaults.computed_egress_with_cidr_ipv6, []) + computed_egress_with_prefix_list_id = try(each.value.computed_egress_with_prefix_list_id, var.defaults.computed_egress_with_prefix_list_id, []) + computed_egress_with_referenced_security_group_id = try(each.value.computed_egress_with_referenced_security_group_id, var.defaults.computed_egress_with_referenced_security_group_id, []) + computed_egress_with_self = try(each.value.computed_egress_with_self, var.defaults.computed_egress_with_self, []) + computed_ingress_cidr_blocks = try(each.value.computed_ingress_cidr_blocks, var.defaults.computed_ingress_cidr_blocks, []) + computed_ingress_ipv6_cidr_blocks = try(each.value.computed_ingress_ipv6_cidr_blocks, var.defaults.computed_ingress_ipv6_cidr_blocks, []) + computed_ingress_prefix_list_ids = try(each.value.computed_ingress_prefix_list_ids, var.defaults.computed_ingress_prefix_list_ids, []) + computed_ingress_rules = try(each.value.computed_ingress_rules, var.defaults.computed_ingress_rules, []) + computed_ingress_with_cidr_ipv4 = try(each.value.computed_ingress_with_cidr_ipv4, var.defaults.computed_ingress_with_cidr_ipv4, []) + computed_ingress_with_cidr_ipv6 = try(each.value.computed_ingress_with_cidr_ipv6, var.defaults.computed_ingress_with_cidr_ipv6, []) + computed_ingress_with_prefix_list_id = try(each.value.computed_ingress_with_prefix_list_id, var.defaults.computed_ingress_with_prefix_list_id, []) + computed_ingress_with_referenced_security_group_id = try(each.value.computed_ingress_with_referenced_security_group_id, var.defaults.computed_ingress_with_referenced_security_group_id, []) + computed_ingress_with_self = try(each.value.computed_ingress_with_self, var.defaults.computed_ingress_with_self, []) + create = try(each.value.create, var.defaults.create, true) + description = try(each.value.description, var.defaults.description, "Security Group managed by Terraform") + egress_cidr_ipv4 = try(each.value.egress_cidr_ipv4, var.defaults.egress_cidr_ipv4, ["0.0.0.0/0"]) + egress_cidr_ipv6 = try(each.value.egress_cidr_ipv6, var.defaults.egress_cidr_ipv6, ["::/0"]) + egress_prefix_list_ids = try(each.value.egress_prefix_list_ids, var.defaults.egress_prefix_list_ids, []) + egress_rules = try(each.value.egress_rules, var.defaults.egress_rules, []) + egress_with_cidr_ipv4 = try(each.value.egress_with_cidr_ipv4, var.defaults.egress_with_cidr_ipv4, []) + egress_with_cidr_ipv6 = try(each.value.egress_with_cidr_ipv6, var.defaults.egress_with_cidr_ipv6, []) + egress_with_prefix_list_id = try(each.value.egress_with_prefix_list_id, var.defaults.egress_with_prefix_list_id, []) + egress_with_referenced_security_group_id = try(each.value.egress_with_referenced_security_group_id, var.defaults.egress_with_referenced_security_group_id, []) + egress_with_self = try(each.value.egress_with_self, var.defaults.egress_with_self, []) + ingress_cidr_ipv4 = try(each.value.ingress_cidr_ipv4, var.defaults.ingress_cidr_ipv4, []) + ingress_cidr_ipv6 = try(each.value.ingress_cidr_ipv6, var.defaults.ingress_cidr_ipv6, []) + ingress_prefix_list_ids = try(each.value.ingress_prefix_list_ids, var.defaults.ingress_prefix_list_ids, []) + ingress_rules = try(each.value.ingress_rules, var.defaults.ingress_rules, []) + ingress_with_cidr_ipv4 = try(each.value.ingress_with_cidr_ipv4, var.defaults.ingress_with_cidr_ipv4, []) + ingress_with_cidr_ipv6 = try(each.value.ingress_with_cidr_ipv6, var.defaults.ingress_with_cidr_ipv6, []) + ingress_with_prefix_list_id = try(each.value.ingress_with_prefix_list_id, var.defaults.ingress_with_prefix_list_id, []) + ingress_with_referenced_security_group_id = try(each.value.ingress_with_referenced_security_group_id, var.defaults.ingress_with_referenced_security_group_id, []) + ingress_with_self = try(each.value.ingress_with_self, var.defaults.ingress_with_self, []) + name = try(each.value.name, var.defaults.name) + number_of_computed_egress_cidr_blocks = try(each.value.number_of_computed_egress_cidr_blocks, var.defaults.number_of_computed_egress_cidr_blocks, 0) + number_of_computed_egress_ipv6_cidr_blocks = try(each.value.number_of_computed_egress_ipv6_cidr_blocks, var.defaults.number_of_computed_egress_ipv6_cidr_blocks, 0) + number_of_computed_egress_prefix_list_ids = try(each.value.number_of_computed_egress_prefix_list_ids, var.defaults.number_of_computed_egress_prefix_list_ids, 0) + number_of_computed_egress_rules = try(each.value.number_of_computed_egress_rules, var.defaults.number_of_computed_egress_rules, 0) + number_of_computed_egress_with_cidr_ipv4 = try(each.value.number_of_computed_egress_with_cidr_ipv4, var.defaults.number_of_computed_egress_with_cidr_ipv4, 0) + number_of_computed_egress_with_cidr_ipv6 = try(each.value.number_of_computed_egress_with_cidr_ipv6, var.defaults.number_of_computed_egress_with_cidr_ipv6, 0) + number_of_computed_egress_with_prefix_list_id = try(each.value.number_of_computed_egress_with_prefix_list_id, var.defaults.number_of_computed_egress_with_prefix_list_id, 0) + number_of_computed_egress_with_referenced_security_group_id = try(each.value.number_of_computed_egress_with_referenced_security_group_id, var.defaults.number_of_computed_egress_with_referenced_security_group_id, 0) + number_of_computed_egress_with_self = try(each.value.number_of_computed_egress_with_self, var.defaults.number_of_computed_egress_with_self, 0) + number_of_computed_ingress_cidr_blocks = try(each.value.number_of_computed_ingress_cidr_blocks, var.defaults.number_of_computed_ingress_cidr_blocks, 0) + number_of_computed_ingress_ipv6_cidr_blocks = try(each.value.number_of_computed_ingress_ipv6_cidr_blocks, var.defaults.number_of_computed_ingress_ipv6_cidr_blocks, 0) + number_of_computed_ingress_prefix_list_ids = try(each.value.number_of_computed_ingress_prefix_list_ids, var.defaults.number_of_computed_ingress_prefix_list_ids, 0) + number_of_computed_ingress_rules = try(each.value.number_of_computed_ingress_rules, var.defaults.number_of_computed_ingress_rules, 0) + number_of_computed_ingress_with_cidr_ipv4 = try(each.value.number_of_computed_ingress_with_cidr_ipv4, var.defaults.number_of_computed_ingress_with_cidr_ipv4, 0) + number_of_computed_ingress_with_cidr_ipv6 = try(each.value.number_of_computed_ingress_with_cidr_ipv6, var.defaults.number_of_computed_ingress_with_cidr_ipv6, 0) + number_of_computed_ingress_with_prefix_list_id = try(each.value.number_of_computed_ingress_with_prefix_list_id, var.defaults.number_of_computed_ingress_with_prefix_list_id, 0) + number_of_computed_ingress_with_referenced_security_group_id = try(each.value.number_of_computed_ingress_with_referenced_security_group_id, var.defaults.number_of_computed_ingress_with_referenced_security_group_id, 0) + number_of_computed_ingress_with_self = try(each.value.number_of_computed_ingress_with_self, var.defaults.number_of_computed_ingress_with_self, 0) + revoke_rules_on_delete = try(each.value.revoke_rules_on_delete, var.defaults.revoke_rules_on_delete, false) + tags = try(each.value.tags, var.defaults.tags, {}) + use_name_prefix = try(each.value.use_name_prefix, var.defaults.use_name_prefix, true) + vpc_id = try(each.value.vpc_id, var.defaults.vpc_id) } diff --git a/wrappers/redshift/main.tf b/wrappers/redshift/main.tf index b871c6b6..8ff48266 100644 --- a/wrappers/redshift/main.tf +++ b/wrappers/redshift/main.tf @@ -3,77 +3,77 @@ module "wrapper" { for_each = var.items - auto_computed_egress_rules = try(each.value.auto_computed_egress_rules, var.defaults.auto_computed_egress_rules, []) - auto_computed_egress_with_self = try(each.value.auto_computed_egress_with_self, var.defaults.auto_computed_egress_with_self, []) - auto_computed_ingress_rules = try(each.value.auto_computed_ingress_rules, var.defaults.auto_computed_ingress_rules, []) - auto_computed_ingress_with_self = try(each.value.auto_computed_ingress_with_self, var.defaults.auto_computed_ingress_with_self, []) - auto_egress_rules = try(each.value.auto_egress_rules, var.defaults.auto_egress_rules, ["all-all"]) - auto_egress_with_self = try(each.value.auto_egress_with_self, var.defaults.auto_egress_with_self, []) - auto_ingress_rules = try(each.value.auto_ingress_rules, var.defaults.auto_ingress_rules, ["redshift-tcp"]) - auto_ingress_with_self = try(each.value.auto_ingress_with_self, var.defaults.auto_ingress_with_self, [{ "rule" = "all-all" }]) - auto_number_of_computed_egress_rules = try(each.value.auto_number_of_computed_egress_rules, var.defaults.auto_number_of_computed_egress_rules, 0) - auto_number_of_computed_egress_with_self = try(each.value.auto_number_of_computed_egress_with_self, var.defaults.auto_number_of_computed_egress_with_self, 0) - auto_number_of_computed_ingress_rules = try(each.value.auto_number_of_computed_ingress_rules, var.defaults.auto_number_of_computed_ingress_rules, 0) - auto_number_of_computed_ingress_with_self = try(each.value.auto_number_of_computed_ingress_with_self, var.defaults.auto_number_of_computed_ingress_with_self, 0) - computed_egress_cidr_blocks = try(each.value.computed_egress_cidr_blocks, var.defaults.computed_egress_cidr_blocks, ["0.0.0.0/0"]) - computed_egress_ipv6_cidr_blocks = try(each.value.computed_egress_ipv6_cidr_blocks, var.defaults.computed_egress_ipv6_cidr_blocks, ["::/0"]) - computed_egress_prefix_list_ids = try(each.value.computed_egress_prefix_list_ids, var.defaults.computed_egress_prefix_list_ids, []) - computed_egress_rules = try(each.value.computed_egress_rules, var.defaults.computed_egress_rules, []) - computed_egress_with_cidr_blocks = try(each.value.computed_egress_with_cidr_blocks, var.defaults.computed_egress_with_cidr_blocks, []) - computed_egress_with_ipv6_cidr_blocks = try(each.value.computed_egress_with_ipv6_cidr_blocks, var.defaults.computed_egress_with_ipv6_cidr_blocks, []) - computed_egress_with_prefix_list_ids = try(each.value.computed_egress_with_prefix_list_ids, var.defaults.computed_egress_with_prefix_list_ids, []) - computed_egress_with_self = try(each.value.computed_egress_with_self, var.defaults.computed_egress_with_self, []) - computed_egress_with_source_security_group_id = try(each.value.computed_egress_with_source_security_group_id, var.defaults.computed_egress_with_source_security_group_id, []) - computed_ingress_cidr_blocks = try(each.value.computed_ingress_cidr_blocks, var.defaults.computed_ingress_cidr_blocks, []) - computed_ingress_ipv6_cidr_blocks = try(each.value.computed_ingress_ipv6_cidr_blocks, var.defaults.computed_ingress_ipv6_cidr_blocks, []) - computed_ingress_prefix_list_ids = try(each.value.computed_ingress_prefix_list_ids, var.defaults.computed_ingress_prefix_list_ids, []) - computed_ingress_rules = try(each.value.computed_ingress_rules, var.defaults.computed_ingress_rules, []) - computed_ingress_with_cidr_blocks = try(each.value.computed_ingress_with_cidr_blocks, var.defaults.computed_ingress_with_cidr_blocks, []) - computed_ingress_with_ipv6_cidr_blocks = try(each.value.computed_ingress_with_ipv6_cidr_blocks, var.defaults.computed_ingress_with_ipv6_cidr_blocks, []) - computed_ingress_with_prefix_list_ids = try(each.value.computed_ingress_with_prefix_list_ids, var.defaults.computed_ingress_with_prefix_list_ids, []) - computed_ingress_with_self = try(each.value.computed_ingress_with_self, var.defaults.computed_ingress_with_self, []) - computed_ingress_with_source_security_group_id = try(each.value.computed_ingress_with_source_security_group_id, var.defaults.computed_ingress_with_source_security_group_id, []) - create = try(each.value.create, var.defaults.create, true) - description = try(each.value.description, var.defaults.description, "Security Group managed by Terraform") - egress_cidr_blocks = try(each.value.egress_cidr_blocks, var.defaults.egress_cidr_blocks, ["0.0.0.0/0"]) - egress_ipv6_cidr_blocks = try(each.value.egress_ipv6_cidr_blocks, var.defaults.egress_ipv6_cidr_blocks, ["::/0"]) - egress_prefix_list_ids = try(each.value.egress_prefix_list_ids, var.defaults.egress_prefix_list_ids, []) - egress_rules = try(each.value.egress_rules, var.defaults.egress_rules, []) - egress_with_cidr_blocks = try(each.value.egress_with_cidr_blocks, var.defaults.egress_with_cidr_blocks, []) - egress_with_ipv6_cidr_blocks = try(each.value.egress_with_ipv6_cidr_blocks, var.defaults.egress_with_ipv6_cidr_blocks, []) - egress_with_prefix_list_ids = try(each.value.egress_with_prefix_list_ids, var.defaults.egress_with_prefix_list_ids, []) - egress_with_self = try(each.value.egress_with_self, var.defaults.egress_with_self, []) - egress_with_source_security_group_id = try(each.value.egress_with_source_security_group_id, var.defaults.egress_with_source_security_group_id, []) - ingress_cidr_blocks = try(each.value.ingress_cidr_blocks, var.defaults.ingress_cidr_blocks, []) - ingress_ipv6_cidr_blocks = try(each.value.ingress_ipv6_cidr_blocks, var.defaults.ingress_ipv6_cidr_blocks, []) - ingress_prefix_list_ids = try(each.value.ingress_prefix_list_ids, var.defaults.ingress_prefix_list_ids, []) - ingress_rules = try(each.value.ingress_rules, var.defaults.ingress_rules, []) - ingress_with_cidr_blocks = try(each.value.ingress_with_cidr_blocks, var.defaults.ingress_with_cidr_blocks, []) - ingress_with_ipv6_cidr_blocks = try(each.value.ingress_with_ipv6_cidr_blocks, var.defaults.ingress_with_ipv6_cidr_blocks, []) - ingress_with_prefix_list_ids = try(each.value.ingress_with_prefix_list_ids, var.defaults.ingress_with_prefix_list_ids, []) - ingress_with_self = try(each.value.ingress_with_self, var.defaults.ingress_with_self, []) - ingress_with_source_security_group_id = try(each.value.ingress_with_source_security_group_id, var.defaults.ingress_with_source_security_group_id, []) - name = try(each.value.name, var.defaults.name) - number_of_computed_egress_cidr_blocks = try(each.value.number_of_computed_egress_cidr_blocks, var.defaults.number_of_computed_egress_cidr_blocks, 0) - number_of_computed_egress_ipv6_cidr_blocks = try(each.value.number_of_computed_egress_ipv6_cidr_blocks, var.defaults.number_of_computed_egress_ipv6_cidr_blocks, 0) - number_of_computed_egress_prefix_list_ids = try(each.value.number_of_computed_egress_prefix_list_ids, var.defaults.number_of_computed_egress_prefix_list_ids, 0) - number_of_computed_egress_rules = try(each.value.number_of_computed_egress_rules, var.defaults.number_of_computed_egress_rules, 0) - number_of_computed_egress_with_cidr_blocks = try(each.value.number_of_computed_egress_with_cidr_blocks, var.defaults.number_of_computed_egress_with_cidr_blocks, 0) - number_of_computed_egress_with_ipv6_cidr_blocks = try(each.value.number_of_computed_egress_with_ipv6_cidr_blocks, var.defaults.number_of_computed_egress_with_ipv6_cidr_blocks, 0) - number_of_computed_egress_with_prefix_list_ids = try(each.value.number_of_computed_egress_with_prefix_list_ids, var.defaults.number_of_computed_egress_with_prefix_list_ids, 0) - number_of_computed_egress_with_self = try(each.value.number_of_computed_egress_with_self, var.defaults.number_of_computed_egress_with_self, 0) - number_of_computed_egress_with_source_security_group_id = try(each.value.number_of_computed_egress_with_source_security_group_id, var.defaults.number_of_computed_egress_with_source_security_group_id, 0) - number_of_computed_ingress_cidr_blocks = try(each.value.number_of_computed_ingress_cidr_blocks, var.defaults.number_of_computed_ingress_cidr_blocks, 0) - number_of_computed_ingress_ipv6_cidr_blocks = try(each.value.number_of_computed_ingress_ipv6_cidr_blocks, var.defaults.number_of_computed_ingress_ipv6_cidr_blocks, 0) - number_of_computed_ingress_prefix_list_ids = try(each.value.number_of_computed_ingress_prefix_list_ids, var.defaults.number_of_computed_ingress_prefix_list_ids, 0) - number_of_computed_ingress_rules = try(each.value.number_of_computed_ingress_rules, var.defaults.number_of_computed_ingress_rules, 0) - number_of_computed_ingress_with_cidr_blocks = try(each.value.number_of_computed_ingress_with_cidr_blocks, var.defaults.number_of_computed_ingress_with_cidr_blocks, 0) - number_of_computed_ingress_with_ipv6_cidr_blocks = try(each.value.number_of_computed_ingress_with_ipv6_cidr_blocks, var.defaults.number_of_computed_ingress_with_ipv6_cidr_blocks, 0) - number_of_computed_ingress_with_prefix_list_ids = try(each.value.number_of_computed_ingress_with_prefix_list_ids, var.defaults.number_of_computed_ingress_with_prefix_list_ids, 0) - number_of_computed_ingress_with_self = try(each.value.number_of_computed_ingress_with_self, var.defaults.number_of_computed_ingress_with_self, 0) - number_of_computed_ingress_with_source_security_group_id = try(each.value.number_of_computed_ingress_with_source_security_group_id, var.defaults.number_of_computed_ingress_with_source_security_group_id, 0) - revoke_rules_on_delete = try(each.value.revoke_rules_on_delete, var.defaults.revoke_rules_on_delete, false) - tags = try(each.value.tags, var.defaults.tags, {}) - use_name_prefix = try(each.value.use_name_prefix, var.defaults.use_name_prefix, true) - vpc_id = try(each.value.vpc_id, var.defaults.vpc_id) + auto_computed_egress_rules = try(each.value.auto_computed_egress_rules, var.defaults.auto_computed_egress_rules, []) + auto_computed_egress_with_self = try(each.value.auto_computed_egress_with_self, var.defaults.auto_computed_egress_with_self, []) + auto_computed_ingress_rules = try(each.value.auto_computed_ingress_rules, var.defaults.auto_computed_ingress_rules, []) + auto_computed_ingress_with_self = try(each.value.auto_computed_ingress_with_self, var.defaults.auto_computed_ingress_with_self, []) + auto_egress_rules = try(each.value.auto_egress_rules, var.defaults.auto_egress_rules, ["all-all"]) + auto_egress_with_self = try(each.value.auto_egress_with_self, var.defaults.auto_egress_with_self, []) + auto_ingress_rules = try(each.value.auto_ingress_rules, var.defaults.auto_ingress_rules, ["redshift-tcp"]) + auto_ingress_with_self = try(each.value.auto_ingress_with_self, var.defaults.auto_ingress_with_self, [{ "rule" = "all-all" }]) + auto_number_of_computed_egress_rules = try(each.value.auto_number_of_computed_egress_rules, var.defaults.auto_number_of_computed_egress_rules, 0) + auto_number_of_computed_egress_with_self = try(each.value.auto_number_of_computed_egress_with_self, var.defaults.auto_number_of_computed_egress_with_self, 0) + auto_number_of_computed_ingress_rules = try(each.value.auto_number_of_computed_ingress_rules, var.defaults.auto_number_of_computed_ingress_rules, 0) + auto_number_of_computed_ingress_with_self = try(each.value.auto_number_of_computed_ingress_with_self, var.defaults.auto_number_of_computed_ingress_with_self, 0) + computed_egress_cidr_blocks = try(each.value.computed_egress_cidr_blocks, var.defaults.computed_egress_cidr_blocks, ["0.0.0.0/0"]) + computed_egress_ipv6_cidr_blocks = try(each.value.computed_egress_ipv6_cidr_blocks, var.defaults.computed_egress_ipv6_cidr_blocks, ["::/0"]) + computed_egress_prefix_list_ids = try(each.value.computed_egress_prefix_list_ids, var.defaults.computed_egress_prefix_list_ids, []) + computed_egress_rules = try(each.value.computed_egress_rules, var.defaults.computed_egress_rules, []) + computed_egress_with_cidr_ipv4 = try(each.value.computed_egress_with_cidr_ipv4, var.defaults.computed_egress_with_cidr_ipv4, []) + computed_egress_with_cidr_ipv6 = try(each.value.computed_egress_with_cidr_ipv6, var.defaults.computed_egress_with_cidr_ipv6, []) + computed_egress_with_prefix_list_id = try(each.value.computed_egress_with_prefix_list_id, var.defaults.computed_egress_with_prefix_list_id, []) + computed_egress_with_referenced_security_group_id = try(each.value.computed_egress_with_referenced_security_group_id, var.defaults.computed_egress_with_referenced_security_group_id, []) + computed_egress_with_self = try(each.value.computed_egress_with_self, var.defaults.computed_egress_with_self, []) + computed_ingress_cidr_blocks = try(each.value.computed_ingress_cidr_blocks, var.defaults.computed_ingress_cidr_blocks, []) + computed_ingress_ipv6_cidr_blocks = try(each.value.computed_ingress_ipv6_cidr_blocks, var.defaults.computed_ingress_ipv6_cidr_blocks, []) + computed_ingress_prefix_list_ids = try(each.value.computed_ingress_prefix_list_ids, var.defaults.computed_ingress_prefix_list_ids, []) + computed_ingress_rules = try(each.value.computed_ingress_rules, var.defaults.computed_ingress_rules, []) + computed_ingress_with_cidr_ipv4 = try(each.value.computed_ingress_with_cidr_ipv4, var.defaults.computed_ingress_with_cidr_ipv4, []) + computed_ingress_with_cidr_ipv6 = try(each.value.computed_ingress_with_cidr_ipv6, var.defaults.computed_ingress_with_cidr_ipv6, []) + computed_ingress_with_prefix_list_id = try(each.value.computed_ingress_with_prefix_list_id, var.defaults.computed_ingress_with_prefix_list_id, []) + computed_ingress_with_referenced_security_group_id = try(each.value.computed_ingress_with_referenced_security_group_id, var.defaults.computed_ingress_with_referenced_security_group_id, []) + computed_ingress_with_self = try(each.value.computed_ingress_with_self, var.defaults.computed_ingress_with_self, []) + create = try(each.value.create, var.defaults.create, true) + description = try(each.value.description, var.defaults.description, "Security Group managed by Terraform") + egress_cidr_ipv4 = try(each.value.egress_cidr_ipv4, var.defaults.egress_cidr_ipv4, ["0.0.0.0/0"]) + egress_cidr_ipv6 = try(each.value.egress_cidr_ipv6, var.defaults.egress_cidr_ipv6, ["::/0"]) + egress_prefix_list_ids = try(each.value.egress_prefix_list_ids, var.defaults.egress_prefix_list_ids, []) + egress_rules = try(each.value.egress_rules, var.defaults.egress_rules, []) + egress_with_cidr_ipv4 = try(each.value.egress_with_cidr_ipv4, var.defaults.egress_with_cidr_ipv4, []) + egress_with_cidr_ipv6 = try(each.value.egress_with_cidr_ipv6, var.defaults.egress_with_cidr_ipv6, []) + egress_with_prefix_list_id = try(each.value.egress_with_prefix_list_id, var.defaults.egress_with_prefix_list_id, []) + egress_with_referenced_security_group_id = try(each.value.egress_with_referenced_security_group_id, var.defaults.egress_with_referenced_security_group_id, []) + egress_with_self = try(each.value.egress_with_self, var.defaults.egress_with_self, []) + ingress_cidr_ipv4 = try(each.value.ingress_cidr_ipv4, var.defaults.ingress_cidr_ipv4, []) + ingress_cidr_ipv6 = try(each.value.ingress_cidr_ipv6, var.defaults.ingress_cidr_ipv6, []) + ingress_prefix_list_ids = try(each.value.ingress_prefix_list_ids, var.defaults.ingress_prefix_list_ids, []) + ingress_rules = try(each.value.ingress_rules, var.defaults.ingress_rules, []) + ingress_with_cidr_ipv4 = try(each.value.ingress_with_cidr_ipv4, var.defaults.ingress_with_cidr_ipv4, []) + ingress_with_cidr_ipv6 = try(each.value.ingress_with_cidr_ipv6, var.defaults.ingress_with_cidr_ipv6, []) + ingress_with_prefix_list_id = try(each.value.ingress_with_prefix_list_id, var.defaults.ingress_with_prefix_list_id, []) + ingress_with_referenced_security_group_id = try(each.value.ingress_with_referenced_security_group_id, var.defaults.ingress_with_referenced_security_group_id, []) + ingress_with_self = try(each.value.ingress_with_self, var.defaults.ingress_with_self, []) + name = try(each.value.name, var.defaults.name) + number_of_computed_egress_cidr_blocks = try(each.value.number_of_computed_egress_cidr_blocks, var.defaults.number_of_computed_egress_cidr_blocks, 0) + number_of_computed_egress_ipv6_cidr_blocks = try(each.value.number_of_computed_egress_ipv6_cidr_blocks, var.defaults.number_of_computed_egress_ipv6_cidr_blocks, 0) + number_of_computed_egress_prefix_list_ids = try(each.value.number_of_computed_egress_prefix_list_ids, var.defaults.number_of_computed_egress_prefix_list_ids, 0) + number_of_computed_egress_rules = try(each.value.number_of_computed_egress_rules, var.defaults.number_of_computed_egress_rules, 0) + number_of_computed_egress_with_cidr_ipv4 = try(each.value.number_of_computed_egress_with_cidr_ipv4, var.defaults.number_of_computed_egress_with_cidr_ipv4, 0) + number_of_computed_egress_with_cidr_ipv6 = try(each.value.number_of_computed_egress_with_cidr_ipv6, var.defaults.number_of_computed_egress_with_cidr_ipv6, 0) + number_of_computed_egress_with_prefix_list_id = try(each.value.number_of_computed_egress_with_prefix_list_id, var.defaults.number_of_computed_egress_with_prefix_list_id, 0) + number_of_computed_egress_with_referenced_security_group_id = try(each.value.number_of_computed_egress_with_referenced_security_group_id, var.defaults.number_of_computed_egress_with_referenced_security_group_id, 0) + number_of_computed_egress_with_self = try(each.value.number_of_computed_egress_with_self, var.defaults.number_of_computed_egress_with_self, 0) + number_of_computed_ingress_cidr_blocks = try(each.value.number_of_computed_ingress_cidr_blocks, var.defaults.number_of_computed_ingress_cidr_blocks, 0) + number_of_computed_ingress_ipv6_cidr_blocks = try(each.value.number_of_computed_ingress_ipv6_cidr_blocks, var.defaults.number_of_computed_ingress_ipv6_cidr_blocks, 0) + number_of_computed_ingress_prefix_list_ids = try(each.value.number_of_computed_ingress_prefix_list_ids, var.defaults.number_of_computed_ingress_prefix_list_ids, 0) + number_of_computed_ingress_rules = try(each.value.number_of_computed_ingress_rules, var.defaults.number_of_computed_ingress_rules, 0) + number_of_computed_ingress_with_cidr_ipv4 = try(each.value.number_of_computed_ingress_with_cidr_ipv4, var.defaults.number_of_computed_ingress_with_cidr_ipv4, 0) + number_of_computed_ingress_with_cidr_ipv6 = try(each.value.number_of_computed_ingress_with_cidr_ipv6, var.defaults.number_of_computed_ingress_with_cidr_ipv6, 0) + number_of_computed_ingress_with_prefix_list_id = try(each.value.number_of_computed_ingress_with_prefix_list_id, var.defaults.number_of_computed_ingress_with_prefix_list_id, 0) + number_of_computed_ingress_with_referenced_security_group_id = try(each.value.number_of_computed_ingress_with_referenced_security_group_id, var.defaults.number_of_computed_ingress_with_referenced_security_group_id, 0) + number_of_computed_ingress_with_self = try(each.value.number_of_computed_ingress_with_self, var.defaults.number_of_computed_ingress_with_self, 0) + revoke_rules_on_delete = try(each.value.revoke_rules_on_delete, var.defaults.revoke_rules_on_delete, false) + tags = try(each.value.tags, var.defaults.tags, {}) + use_name_prefix = try(each.value.use_name_prefix, var.defaults.use_name_prefix, true) + vpc_id = try(each.value.vpc_id, var.defaults.vpc_id) } diff --git a/wrappers/smtp-submission/main.tf b/wrappers/smtp-submission/main.tf index 90ba7df5..7c478fc1 100644 --- a/wrappers/smtp-submission/main.tf +++ b/wrappers/smtp-submission/main.tf @@ -3,77 +3,77 @@ module "wrapper" { for_each = var.items - auto_computed_egress_rules = try(each.value.auto_computed_egress_rules, var.defaults.auto_computed_egress_rules, []) - auto_computed_egress_with_self = try(each.value.auto_computed_egress_with_self, var.defaults.auto_computed_egress_with_self, []) - auto_computed_ingress_rules = try(each.value.auto_computed_ingress_rules, var.defaults.auto_computed_ingress_rules, []) - auto_computed_ingress_with_self = try(each.value.auto_computed_ingress_with_self, var.defaults.auto_computed_ingress_with_self, []) - auto_egress_rules = try(each.value.auto_egress_rules, var.defaults.auto_egress_rules, ["all-all"]) - auto_egress_with_self = try(each.value.auto_egress_with_self, var.defaults.auto_egress_with_self, []) - auto_ingress_rules = try(each.value.auto_ingress_rules, var.defaults.auto_ingress_rules, ["smtp-submission-587-tcp", "smtp-submission-2587-tcp"]) - auto_ingress_with_self = try(each.value.auto_ingress_with_self, var.defaults.auto_ingress_with_self, [{ "rule" = "all-all" }]) - auto_number_of_computed_egress_rules = try(each.value.auto_number_of_computed_egress_rules, var.defaults.auto_number_of_computed_egress_rules, 0) - auto_number_of_computed_egress_with_self = try(each.value.auto_number_of_computed_egress_with_self, var.defaults.auto_number_of_computed_egress_with_self, 0) - auto_number_of_computed_ingress_rules = try(each.value.auto_number_of_computed_ingress_rules, var.defaults.auto_number_of_computed_ingress_rules, 0) - auto_number_of_computed_ingress_with_self = try(each.value.auto_number_of_computed_ingress_with_self, var.defaults.auto_number_of_computed_ingress_with_self, 0) - computed_egress_cidr_blocks = try(each.value.computed_egress_cidr_blocks, var.defaults.computed_egress_cidr_blocks, ["0.0.0.0/0"]) - computed_egress_ipv6_cidr_blocks = try(each.value.computed_egress_ipv6_cidr_blocks, var.defaults.computed_egress_ipv6_cidr_blocks, ["::/0"]) - computed_egress_prefix_list_ids = try(each.value.computed_egress_prefix_list_ids, var.defaults.computed_egress_prefix_list_ids, []) - computed_egress_rules = try(each.value.computed_egress_rules, var.defaults.computed_egress_rules, []) - computed_egress_with_cidr_blocks = try(each.value.computed_egress_with_cidr_blocks, var.defaults.computed_egress_with_cidr_blocks, []) - computed_egress_with_ipv6_cidr_blocks = try(each.value.computed_egress_with_ipv6_cidr_blocks, var.defaults.computed_egress_with_ipv6_cidr_blocks, []) - computed_egress_with_prefix_list_ids = try(each.value.computed_egress_with_prefix_list_ids, var.defaults.computed_egress_with_prefix_list_ids, []) - computed_egress_with_self = try(each.value.computed_egress_with_self, var.defaults.computed_egress_with_self, []) - computed_egress_with_source_security_group_id = try(each.value.computed_egress_with_source_security_group_id, var.defaults.computed_egress_with_source_security_group_id, []) - computed_ingress_cidr_blocks = try(each.value.computed_ingress_cidr_blocks, var.defaults.computed_ingress_cidr_blocks, []) - computed_ingress_ipv6_cidr_blocks = try(each.value.computed_ingress_ipv6_cidr_blocks, var.defaults.computed_ingress_ipv6_cidr_blocks, []) - computed_ingress_prefix_list_ids = try(each.value.computed_ingress_prefix_list_ids, var.defaults.computed_ingress_prefix_list_ids, []) - computed_ingress_rules = try(each.value.computed_ingress_rules, var.defaults.computed_ingress_rules, []) - computed_ingress_with_cidr_blocks = try(each.value.computed_ingress_with_cidr_blocks, var.defaults.computed_ingress_with_cidr_blocks, []) - computed_ingress_with_ipv6_cidr_blocks = try(each.value.computed_ingress_with_ipv6_cidr_blocks, var.defaults.computed_ingress_with_ipv6_cidr_blocks, []) - computed_ingress_with_prefix_list_ids = try(each.value.computed_ingress_with_prefix_list_ids, var.defaults.computed_ingress_with_prefix_list_ids, []) - computed_ingress_with_self = try(each.value.computed_ingress_with_self, var.defaults.computed_ingress_with_self, []) - computed_ingress_with_source_security_group_id = try(each.value.computed_ingress_with_source_security_group_id, var.defaults.computed_ingress_with_source_security_group_id, []) - create = try(each.value.create, var.defaults.create, true) - description = try(each.value.description, var.defaults.description, "Security Group managed by Terraform") - egress_cidr_blocks = try(each.value.egress_cidr_blocks, var.defaults.egress_cidr_blocks, ["0.0.0.0/0"]) - egress_ipv6_cidr_blocks = try(each.value.egress_ipv6_cidr_blocks, var.defaults.egress_ipv6_cidr_blocks, ["::/0"]) - egress_prefix_list_ids = try(each.value.egress_prefix_list_ids, var.defaults.egress_prefix_list_ids, []) - egress_rules = try(each.value.egress_rules, var.defaults.egress_rules, []) - egress_with_cidr_blocks = try(each.value.egress_with_cidr_blocks, var.defaults.egress_with_cidr_blocks, []) - egress_with_ipv6_cidr_blocks = try(each.value.egress_with_ipv6_cidr_blocks, var.defaults.egress_with_ipv6_cidr_blocks, []) - egress_with_prefix_list_ids = try(each.value.egress_with_prefix_list_ids, var.defaults.egress_with_prefix_list_ids, []) - egress_with_self = try(each.value.egress_with_self, var.defaults.egress_with_self, []) - egress_with_source_security_group_id = try(each.value.egress_with_source_security_group_id, var.defaults.egress_with_source_security_group_id, []) - ingress_cidr_blocks = try(each.value.ingress_cidr_blocks, var.defaults.ingress_cidr_blocks, []) - ingress_ipv6_cidr_blocks = try(each.value.ingress_ipv6_cidr_blocks, var.defaults.ingress_ipv6_cidr_blocks, []) - ingress_prefix_list_ids = try(each.value.ingress_prefix_list_ids, var.defaults.ingress_prefix_list_ids, []) - ingress_rules = try(each.value.ingress_rules, var.defaults.ingress_rules, []) - ingress_with_cidr_blocks = try(each.value.ingress_with_cidr_blocks, var.defaults.ingress_with_cidr_blocks, []) - ingress_with_ipv6_cidr_blocks = try(each.value.ingress_with_ipv6_cidr_blocks, var.defaults.ingress_with_ipv6_cidr_blocks, []) - ingress_with_prefix_list_ids = try(each.value.ingress_with_prefix_list_ids, var.defaults.ingress_with_prefix_list_ids, []) - ingress_with_self = try(each.value.ingress_with_self, var.defaults.ingress_with_self, []) - ingress_with_source_security_group_id = try(each.value.ingress_with_source_security_group_id, var.defaults.ingress_with_source_security_group_id, []) - name = try(each.value.name, var.defaults.name) - number_of_computed_egress_cidr_blocks = try(each.value.number_of_computed_egress_cidr_blocks, var.defaults.number_of_computed_egress_cidr_blocks, 0) - number_of_computed_egress_ipv6_cidr_blocks = try(each.value.number_of_computed_egress_ipv6_cidr_blocks, var.defaults.number_of_computed_egress_ipv6_cidr_blocks, 0) - number_of_computed_egress_prefix_list_ids = try(each.value.number_of_computed_egress_prefix_list_ids, var.defaults.number_of_computed_egress_prefix_list_ids, 0) - number_of_computed_egress_rules = try(each.value.number_of_computed_egress_rules, var.defaults.number_of_computed_egress_rules, 0) - number_of_computed_egress_with_cidr_blocks = try(each.value.number_of_computed_egress_with_cidr_blocks, var.defaults.number_of_computed_egress_with_cidr_blocks, 0) - number_of_computed_egress_with_ipv6_cidr_blocks = try(each.value.number_of_computed_egress_with_ipv6_cidr_blocks, var.defaults.number_of_computed_egress_with_ipv6_cidr_blocks, 0) - number_of_computed_egress_with_prefix_list_ids = try(each.value.number_of_computed_egress_with_prefix_list_ids, var.defaults.number_of_computed_egress_with_prefix_list_ids, 0) - number_of_computed_egress_with_self = try(each.value.number_of_computed_egress_with_self, var.defaults.number_of_computed_egress_with_self, 0) - number_of_computed_egress_with_source_security_group_id = try(each.value.number_of_computed_egress_with_source_security_group_id, var.defaults.number_of_computed_egress_with_source_security_group_id, 0) - number_of_computed_ingress_cidr_blocks = try(each.value.number_of_computed_ingress_cidr_blocks, var.defaults.number_of_computed_ingress_cidr_blocks, 0) - number_of_computed_ingress_ipv6_cidr_blocks = try(each.value.number_of_computed_ingress_ipv6_cidr_blocks, var.defaults.number_of_computed_ingress_ipv6_cidr_blocks, 0) - number_of_computed_ingress_prefix_list_ids = try(each.value.number_of_computed_ingress_prefix_list_ids, var.defaults.number_of_computed_ingress_prefix_list_ids, 0) - number_of_computed_ingress_rules = try(each.value.number_of_computed_ingress_rules, var.defaults.number_of_computed_ingress_rules, 0) - number_of_computed_ingress_with_cidr_blocks = try(each.value.number_of_computed_ingress_with_cidr_blocks, var.defaults.number_of_computed_ingress_with_cidr_blocks, 0) - number_of_computed_ingress_with_ipv6_cidr_blocks = try(each.value.number_of_computed_ingress_with_ipv6_cidr_blocks, var.defaults.number_of_computed_ingress_with_ipv6_cidr_blocks, 0) - number_of_computed_ingress_with_prefix_list_ids = try(each.value.number_of_computed_ingress_with_prefix_list_ids, var.defaults.number_of_computed_ingress_with_prefix_list_ids, 0) - number_of_computed_ingress_with_self = try(each.value.number_of_computed_ingress_with_self, var.defaults.number_of_computed_ingress_with_self, 0) - number_of_computed_ingress_with_source_security_group_id = try(each.value.number_of_computed_ingress_with_source_security_group_id, var.defaults.number_of_computed_ingress_with_source_security_group_id, 0) - revoke_rules_on_delete = try(each.value.revoke_rules_on_delete, var.defaults.revoke_rules_on_delete, false) - tags = try(each.value.tags, var.defaults.tags, {}) - use_name_prefix = try(each.value.use_name_prefix, var.defaults.use_name_prefix, true) - vpc_id = try(each.value.vpc_id, var.defaults.vpc_id) + auto_computed_egress_rules = try(each.value.auto_computed_egress_rules, var.defaults.auto_computed_egress_rules, []) + auto_computed_egress_with_self = try(each.value.auto_computed_egress_with_self, var.defaults.auto_computed_egress_with_self, []) + auto_computed_ingress_rules = try(each.value.auto_computed_ingress_rules, var.defaults.auto_computed_ingress_rules, []) + auto_computed_ingress_with_self = try(each.value.auto_computed_ingress_with_self, var.defaults.auto_computed_ingress_with_self, []) + auto_egress_rules = try(each.value.auto_egress_rules, var.defaults.auto_egress_rules, ["all-all"]) + auto_egress_with_self = try(each.value.auto_egress_with_self, var.defaults.auto_egress_with_self, []) + auto_ingress_rules = try(each.value.auto_ingress_rules, var.defaults.auto_ingress_rules, ["smtp-submission-587-tcp", "smtp-submission-2587-tcp"]) + auto_ingress_with_self = try(each.value.auto_ingress_with_self, var.defaults.auto_ingress_with_self, [{ "rule" = "all-all" }]) + auto_number_of_computed_egress_rules = try(each.value.auto_number_of_computed_egress_rules, var.defaults.auto_number_of_computed_egress_rules, 0) + auto_number_of_computed_egress_with_self = try(each.value.auto_number_of_computed_egress_with_self, var.defaults.auto_number_of_computed_egress_with_self, 0) + auto_number_of_computed_ingress_rules = try(each.value.auto_number_of_computed_ingress_rules, var.defaults.auto_number_of_computed_ingress_rules, 0) + auto_number_of_computed_ingress_with_self = try(each.value.auto_number_of_computed_ingress_with_self, var.defaults.auto_number_of_computed_ingress_with_self, 0) + computed_egress_cidr_blocks = try(each.value.computed_egress_cidr_blocks, var.defaults.computed_egress_cidr_blocks, ["0.0.0.0/0"]) + computed_egress_ipv6_cidr_blocks = try(each.value.computed_egress_ipv6_cidr_blocks, var.defaults.computed_egress_ipv6_cidr_blocks, ["::/0"]) + computed_egress_prefix_list_ids = try(each.value.computed_egress_prefix_list_ids, var.defaults.computed_egress_prefix_list_ids, []) + computed_egress_rules = try(each.value.computed_egress_rules, var.defaults.computed_egress_rules, []) + computed_egress_with_cidr_ipv4 = try(each.value.computed_egress_with_cidr_ipv4, var.defaults.computed_egress_with_cidr_ipv4, []) + computed_egress_with_cidr_ipv6 = try(each.value.computed_egress_with_cidr_ipv6, var.defaults.computed_egress_with_cidr_ipv6, []) + computed_egress_with_prefix_list_id = try(each.value.computed_egress_with_prefix_list_id, var.defaults.computed_egress_with_prefix_list_id, []) + computed_egress_with_referenced_security_group_id = try(each.value.computed_egress_with_referenced_security_group_id, var.defaults.computed_egress_with_referenced_security_group_id, []) + computed_egress_with_self = try(each.value.computed_egress_with_self, var.defaults.computed_egress_with_self, []) + computed_ingress_cidr_blocks = try(each.value.computed_ingress_cidr_blocks, var.defaults.computed_ingress_cidr_blocks, []) + computed_ingress_ipv6_cidr_blocks = try(each.value.computed_ingress_ipv6_cidr_blocks, var.defaults.computed_ingress_ipv6_cidr_blocks, []) + computed_ingress_prefix_list_ids = try(each.value.computed_ingress_prefix_list_ids, var.defaults.computed_ingress_prefix_list_ids, []) + computed_ingress_rules = try(each.value.computed_ingress_rules, var.defaults.computed_ingress_rules, []) + computed_ingress_with_cidr_ipv4 = try(each.value.computed_ingress_with_cidr_ipv4, var.defaults.computed_ingress_with_cidr_ipv4, []) + computed_ingress_with_cidr_ipv6 = try(each.value.computed_ingress_with_cidr_ipv6, var.defaults.computed_ingress_with_cidr_ipv6, []) + computed_ingress_with_prefix_list_id = try(each.value.computed_ingress_with_prefix_list_id, var.defaults.computed_ingress_with_prefix_list_id, []) + computed_ingress_with_referenced_security_group_id = try(each.value.computed_ingress_with_referenced_security_group_id, var.defaults.computed_ingress_with_referenced_security_group_id, []) + computed_ingress_with_self = try(each.value.computed_ingress_with_self, var.defaults.computed_ingress_with_self, []) + create = try(each.value.create, var.defaults.create, true) + description = try(each.value.description, var.defaults.description, "Security Group managed by Terraform") + egress_cidr_ipv4 = try(each.value.egress_cidr_ipv4, var.defaults.egress_cidr_ipv4, ["0.0.0.0/0"]) + egress_cidr_ipv6 = try(each.value.egress_cidr_ipv6, var.defaults.egress_cidr_ipv6, ["::/0"]) + egress_prefix_list_ids = try(each.value.egress_prefix_list_ids, var.defaults.egress_prefix_list_ids, []) + egress_rules = try(each.value.egress_rules, var.defaults.egress_rules, []) + egress_with_cidr_ipv4 = try(each.value.egress_with_cidr_ipv4, var.defaults.egress_with_cidr_ipv4, []) + egress_with_cidr_ipv6 = try(each.value.egress_with_cidr_ipv6, var.defaults.egress_with_cidr_ipv6, []) + egress_with_prefix_list_id = try(each.value.egress_with_prefix_list_id, var.defaults.egress_with_prefix_list_id, []) + egress_with_referenced_security_group_id = try(each.value.egress_with_referenced_security_group_id, var.defaults.egress_with_referenced_security_group_id, []) + egress_with_self = try(each.value.egress_with_self, var.defaults.egress_with_self, []) + ingress_cidr_ipv4 = try(each.value.ingress_cidr_ipv4, var.defaults.ingress_cidr_ipv4, []) + ingress_cidr_ipv6 = try(each.value.ingress_cidr_ipv6, var.defaults.ingress_cidr_ipv6, []) + ingress_prefix_list_ids = try(each.value.ingress_prefix_list_ids, var.defaults.ingress_prefix_list_ids, []) + ingress_rules = try(each.value.ingress_rules, var.defaults.ingress_rules, []) + ingress_with_cidr_ipv4 = try(each.value.ingress_with_cidr_ipv4, var.defaults.ingress_with_cidr_ipv4, []) + ingress_with_cidr_ipv6 = try(each.value.ingress_with_cidr_ipv6, var.defaults.ingress_with_cidr_ipv6, []) + ingress_with_prefix_list_id = try(each.value.ingress_with_prefix_list_id, var.defaults.ingress_with_prefix_list_id, []) + ingress_with_referenced_security_group_id = try(each.value.ingress_with_referenced_security_group_id, var.defaults.ingress_with_referenced_security_group_id, []) + ingress_with_self = try(each.value.ingress_with_self, var.defaults.ingress_with_self, []) + name = try(each.value.name, var.defaults.name) + number_of_computed_egress_cidr_blocks = try(each.value.number_of_computed_egress_cidr_blocks, var.defaults.number_of_computed_egress_cidr_blocks, 0) + number_of_computed_egress_ipv6_cidr_blocks = try(each.value.number_of_computed_egress_ipv6_cidr_blocks, var.defaults.number_of_computed_egress_ipv6_cidr_blocks, 0) + number_of_computed_egress_prefix_list_ids = try(each.value.number_of_computed_egress_prefix_list_ids, var.defaults.number_of_computed_egress_prefix_list_ids, 0) + number_of_computed_egress_rules = try(each.value.number_of_computed_egress_rules, var.defaults.number_of_computed_egress_rules, 0) + number_of_computed_egress_with_cidr_ipv4 = try(each.value.number_of_computed_egress_with_cidr_ipv4, var.defaults.number_of_computed_egress_with_cidr_ipv4, 0) + number_of_computed_egress_with_cidr_ipv6 = try(each.value.number_of_computed_egress_with_cidr_ipv6, var.defaults.number_of_computed_egress_with_cidr_ipv6, 0) + number_of_computed_egress_with_prefix_list_id = try(each.value.number_of_computed_egress_with_prefix_list_id, var.defaults.number_of_computed_egress_with_prefix_list_id, 0) + number_of_computed_egress_with_referenced_security_group_id = try(each.value.number_of_computed_egress_with_referenced_security_group_id, var.defaults.number_of_computed_egress_with_referenced_security_group_id, 0) + number_of_computed_egress_with_self = try(each.value.number_of_computed_egress_with_self, var.defaults.number_of_computed_egress_with_self, 0) + number_of_computed_ingress_cidr_blocks = try(each.value.number_of_computed_ingress_cidr_blocks, var.defaults.number_of_computed_ingress_cidr_blocks, 0) + number_of_computed_ingress_ipv6_cidr_blocks = try(each.value.number_of_computed_ingress_ipv6_cidr_blocks, var.defaults.number_of_computed_ingress_ipv6_cidr_blocks, 0) + number_of_computed_ingress_prefix_list_ids = try(each.value.number_of_computed_ingress_prefix_list_ids, var.defaults.number_of_computed_ingress_prefix_list_ids, 0) + number_of_computed_ingress_rules = try(each.value.number_of_computed_ingress_rules, var.defaults.number_of_computed_ingress_rules, 0) + number_of_computed_ingress_with_cidr_ipv4 = try(each.value.number_of_computed_ingress_with_cidr_ipv4, var.defaults.number_of_computed_ingress_with_cidr_ipv4, 0) + number_of_computed_ingress_with_cidr_ipv6 = try(each.value.number_of_computed_ingress_with_cidr_ipv6, var.defaults.number_of_computed_ingress_with_cidr_ipv6, 0) + number_of_computed_ingress_with_prefix_list_id = try(each.value.number_of_computed_ingress_with_prefix_list_id, var.defaults.number_of_computed_ingress_with_prefix_list_id, 0) + number_of_computed_ingress_with_referenced_security_group_id = try(each.value.number_of_computed_ingress_with_referenced_security_group_id, var.defaults.number_of_computed_ingress_with_referenced_security_group_id, 0) + number_of_computed_ingress_with_self = try(each.value.number_of_computed_ingress_with_self, var.defaults.number_of_computed_ingress_with_self, 0) + revoke_rules_on_delete = try(each.value.revoke_rules_on_delete, var.defaults.revoke_rules_on_delete, false) + tags = try(each.value.tags, var.defaults.tags, {}) + use_name_prefix = try(each.value.use_name_prefix, var.defaults.use_name_prefix, true) + vpc_id = try(each.value.vpc_id, var.defaults.vpc_id) } diff --git a/wrappers/smtp/main.tf b/wrappers/smtp/main.tf index 0a5a1d84..9855b506 100644 --- a/wrappers/smtp/main.tf +++ b/wrappers/smtp/main.tf @@ -3,77 +3,77 @@ module "wrapper" { for_each = var.items - auto_computed_egress_rules = try(each.value.auto_computed_egress_rules, var.defaults.auto_computed_egress_rules, []) - auto_computed_egress_with_self = try(each.value.auto_computed_egress_with_self, var.defaults.auto_computed_egress_with_self, []) - auto_computed_ingress_rules = try(each.value.auto_computed_ingress_rules, var.defaults.auto_computed_ingress_rules, []) - auto_computed_ingress_with_self = try(each.value.auto_computed_ingress_with_self, var.defaults.auto_computed_ingress_with_self, []) - auto_egress_rules = try(each.value.auto_egress_rules, var.defaults.auto_egress_rules, ["all-all"]) - auto_egress_with_self = try(each.value.auto_egress_with_self, var.defaults.auto_egress_with_self, []) - auto_ingress_rules = try(each.value.auto_ingress_rules, var.defaults.auto_ingress_rules, ["smtp-tcp"]) - auto_ingress_with_self = try(each.value.auto_ingress_with_self, var.defaults.auto_ingress_with_self, [{ "rule" = "all-all" }]) - auto_number_of_computed_egress_rules = try(each.value.auto_number_of_computed_egress_rules, var.defaults.auto_number_of_computed_egress_rules, 0) - auto_number_of_computed_egress_with_self = try(each.value.auto_number_of_computed_egress_with_self, var.defaults.auto_number_of_computed_egress_with_self, 0) - auto_number_of_computed_ingress_rules = try(each.value.auto_number_of_computed_ingress_rules, var.defaults.auto_number_of_computed_ingress_rules, 0) - auto_number_of_computed_ingress_with_self = try(each.value.auto_number_of_computed_ingress_with_self, var.defaults.auto_number_of_computed_ingress_with_self, 0) - computed_egress_cidr_blocks = try(each.value.computed_egress_cidr_blocks, var.defaults.computed_egress_cidr_blocks, ["0.0.0.0/0"]) - computed_egress_ipv6_cidr_blocks = try(each.value.computed_egress_ipv6_cidr_blocks, var.defaults.computed_egress_ipv6_cidr_blocks, ["::/0"]) - computed_egress_prefix_list_ids = try(each.value.computed_egress_prefix_list_ids, var.defaults.computed_egress_prefix_list_ids, []) - computed_egress_rules = try(each.value.computed_egress_rules, var.defaults.computed_egress_rules, []) - computed_egress_with_cidr_blocks = try(each.value.computed_egress_with_cidr_blocks, var.defaults.computed_egress_with_cidr_blocks, []) - computed_egress_with_ipv6_cidr_blocks = try(each.value.computed_egress_with_ipv6_cidr_blocks, var.defaults.computed_egress_with_ipv6_cidr_blocks, []) - computed_egress_with_prefix_list_ids = try(each.value.computed_egress_with_prefix_list_ids, var.defaults.computed_egress_with_prefix_list_ids, []) - computed_egress_with_self = try(each.value.computed_egress_with_self, var.defaults.computed_egress_with_self, []) - computed_egress_with_source_security_group_id = try(each.value.computed_egress_with_source_security_group_id, var.defaults.computed_egress_with_source_security_group_id, []) - computed_ingress_cidr_blocks = try(each.value.computed_ingress_cidr_blocks, var.defaults.computed_ingress_cidr_blocks, []) - computed_ingress_ipv6_cidr_blocks = try(each.value.computed_ingress_ipv6_cidr_blocks, var.defaults.computed_ingress_ipv6_cidr_blocks, []) - computed_ingress_prefix_list_ids = try(each.value.computed_ingress_prefix_list_ids, var.defaults.computed_ingress_prefix_list_ids, []) - computed_ingress_rules = try(each.value.computed_ingress_rules, var.defaults.computed_ingress_rules, []) - computed_ingress_with_cidr_blocks = try(each.value.computed_ingress_with_cidr_blocks, var.defaults.computed_ingress_with_cidr_blocks, []) - computed_ingress_with_ipv6_cidr_blocks = try(each.value.computed_ingress_with_ipv6_cidr_blocks, var.defaults.computed_ingress_with_ipv6_cidr_blocks, []) - computed_ingress_with_prefix_list_ids = try(each.value.computed_ingress_with_prefix_list_ids, var.defaults.computed_ingress_with_prefix_list_ids, []) - computed_ingress_with_self = try(each.value.computed_ingress_with_self, var.defaults.computed_ingress_with_self, []) - computed_ingress_with_source_security_group_id = try(each.value.computed_ingress_with_source_security_group_id, var.defaults.computed_ingress_with_source_security_group_id, []) - create = try(each.value.create, var.defaults.create, true) - description = try(each.value.description, var.defaults.description, "Security Group managed by Terraform") - egress_cidr_blocks = try(each.value.egress_cidr_blocks, var.defaults.egress_cidr_blocks, ["0.0.0.0/0"]) - egress_ipv6_cidr_blocks = try(each.value.egress_ipv6_cidr_blocks, var.defaults.egress_ipv6_cidr_blocks, ["::/0"]) - egress_prefix_list_ids = try(each.value.egress_prefix_list_ids, var.defaults.egress_prefix_list_ids, []) - egress_rules = try(each.value.egress_rules, var.defaults.egress_rules, []) - egress_with_cidr_blocks = try(each.value.egress_with_cidr_blocks, var.defaults.egress_with_cidr_blocks, []) - egress_with_ipv6_cidr_blocks = try(each.value.egress_with_ipv6_cidr_blocks, var.defaults.egress_with_ipv6_cidr_blocks, []) - egress_with_prefix_list_ids = try(each.value.egress_with_prefix_list_ids, var.defaults.egress_with_prefix_list_ids, []) - egress_with_self = try(each.value.egress_with_self, var.defaults.egress_with_self, []) - egress_with_source_security_group_id = try(each.value.egress_with_source_security_group_id, var.defaults.egress_with_source_security_group_id, []) - ingress_cidr_blocks = try(each.value.ingress_cidr_blocks, var.defaults.ingress_cidr_blocks, []) - ingress_ipv6_cidr_blocks = try(each.value.ingress_ipv6_cidr_blocks, var.defaults.ingress_ipv6_cidr_blocks, []) - ingress_prefix_list_ids = try(each.value.ingress_prefix_list_ids, var.defaults.ingress_prefix_list_ids, []) - ingress_rules = try(each.value.ingress_rules, var.defaults.ingress_rules, []) - ingress_with_cidr_blocks = try(each.value.ingress_with_cidr_blocks, var.defaults.ingress_with_cidr_blocks, []) - ingress_with_ipv6_cidr_blocks = try(each.value.ingress_with_ipv6_cidr_blocks, var.defaults.ingress_with_ipv6_cidr_blocks, []) - ingress_with_prefix_list_ids = try(each.value.ingress_with_prefix_list_ids, var.defaults.ingress_with_prefix_list_ids, []) - ingress_with_self = try(each.value.ingress_with_self, var.defaults.ingress_with_self, []) - ingress_with_source_security_group_id = try(each.value.ingress_with_source_security_group_id, var.defaults.ingress_with_source_security_group_id, []) - name = try(each.value.name, var.defaults.name) - number_of_computed_egress_cidr_blocks = try(each.value.number_of_computed_egress_cidr_blocks, var.defaults.number_of_computed_egress_cidr_blocks, 0) - number_of_computed_egress_ipv6_cidr_blocks = try(each.value.number_of_computed_egress_ipv6_cidr_blocks, var.defaults.number_of_computed_egress_ipv6_cidr_blocks, 0) - number_of_computed_egress_prefix_list_ids = try(each.value.number_of_computed_egress_prefix_list_ids, var.defaults.number_of_computed_egress_prefix_list_ids, 0) - number_of_computed_egress_rules = try(each.value.number_of_computed_egress_rules, var.defaults.number_of_computed_egress_rules, 0) - number_of_computed_egress_with_cidr_blocks = try(each.value.number_of_computed_egress_with_cidr_blocks, var.defaults.number_of_computed_egress_with_cidr_blocks, 0) - number_of_computed_egress_with_ipv6_cidr_blocks = try(each.value.number_of_computed_egress_with_ipv6_cidr_blocks, var.defaults.number_of_computed_egress_with_ipv6_cidr_blocks, 0) - number_of_computed_egress_with_prefix_list_ids = try(each.value.number_of_computed_egress_with_prefix_list_ids, var.defaults.number_of_computed_egress_with_prefix_list_ids, 0) - number_of_computed_egress_with_self = try(each.value.number_of_computed_egress_with_self, var.defaults.number_of_computed_egress_with_self, 0) - number_of_computed_egress_with_source_security_group_id = try(each.value.number_of_computed_egress_with_source_security_group_id, var.defaults.number_of_computed_egress_with_source_security_group_id, 0) - number_of_computed_ingress_cidr_blocks = try(each.value.number_of_computed_ingress_cidr_blocks, var.defaults.number_of_computed_ingress_cidr_blocks, 0) - number_of_computed_ingress_ipv6_cidr_blocks = try(each.value.number_of_computed_ingress_ipv6_cidr_blocks, var.defaults.number_of_computed_ingress_ipv6_cidr_blocks, 0) - number_of_computed_ingress_prefix_list_ids = try(each.value.number_of_computed_ingress_prefix_list_ids, var.defaults.number_of_computed_ingress_prefix_list_ids, 0) - number_of_computed_ingress_rules = try(each.value.number_of_computed_ingress_rules, var.defaults.number_of_computed_ingress_rules, 0) - number_of_computed_ingress_with_cidr_blocks = try(each.value.number_of_computed_ingress_with_cidr_blocks, var.defaults.number_of_computed_ingress_with_cidr_blocks, 0) - number_of_computed_ingress_with_ipv6_cidr_blocks = try(each.value.number_of_computed_ingress_with_ipv6_cidr_blocks, var.defaults.number_of_computed_ingress_with_ipv6_cidr_blocks, 0) - number_of_computed_ingress_with_prefix_list_ids = try(each.value.number_of_computed_ingress_with_prefix_list_ids, var.defaults.number_of_computed_ingress_with_prefix_list_ids, 0) - number_of_computed_ingress_with_self = try(each.value.number_of_computed_ingress_with_self, var.defaults.number_of_computed_ingress_with_self, 0) - number_of_computed_ingress_with_source_security_group_id = try(each.value.number_of_computed_ingress_with_source_security_group_id, var.defaults.number_of_computed_ingress_with_source_security_group_id, 0) - revoke_rules_on_delete = try(each.value.revoke_rules_on_delete, var.defaults.revoke_rules_on_delete, false) - tags = try(each.value.tags, var.defaults.tags, {}) - use_name_prefix = try(each.value.use_name_prefix, var.defaults.use_name_prefix, true) - vpc_id = try(each.value.vpc_id, var.defaults.vpc_id) + auto_computed_egress_rules = try(each.value.auto_computed_egress_rules, var.defaults.auto_computed_egress_rules, []) + auto_computed_egress_with_self = try(each.value.auto_computed_egress_with_self, var.defaults.auto_computed_egress_with_self, []) + auto_computed_ingress_rules = try(each.value.auto_computed_ingress_rules, var.defaults.auto_computed_ingress_rules, []) + auto_computed_ingress_with_self = try(each.value.auto_computed_ingress_with_self, var.defaults.auto_computed_ingress_with_self, []) + auto_egress_rules = try(each.value.auto_egress_rules, var.defaults.auto_egress_rules, ["all-all"]) + auto_egress_with_self = try(each.value.auto_egress_with_self, var.defaults.auto_egress_with_self, []) + auto_ingress_rules = try(each.value.auto_ingress_rules, var.defaults.auto_ingress_rules, ["smtp-tcp"]) + auto_ingress_with_self = try(each.value.auto_ingress_with_self, var.defaults.auto_ingress_with_self, [{ "rule" = "all-all" }]) + auto_number_of_computed_egress_rules = try(each.value.auto_number_of_computed_egress_rules, var.defaults.auto_number_of_computed_egress_rules, 0) + auto_number_of_computed_egress_with_self = try(each.value.auto_number_of_computed_egress_with_self, var.defaults.auto_number_of_computed_egress_with_self, 0) + auto_number_of_computed_ingress_rules = try(each.value.auto_number_of_computed_ingress_rules, var.defaults.auto_number_of_computed_ingress_rules, 0) + auto_number_of_computed_ingress_with_self = try(each.value.auto_number_of_computed_ingress_with_self, var.defaults.auto_number_of_computed_ingress_with_self, 0) + computed_egress_cidr_blocks = try(each.value.computed_egress_cidr_blocks, var.defaults.computed_egress_cidr_blocks, ["0.0.0.0/0"]) + computed_egress_ipv6_cidr_blocks = try(each.value.computed_egress_ipv6_cidr_blocks, var.defaults.computed_egress_ipv6_cidr_blocks, ["::/0"]) + computed_egress_prefix_list_ids = try(each.value.computed_egress_prefix_list_ids, var.defaults.computed_egress_prefix_list_ids, []) + computed_egress_rules = try(each.value.computed_egress_rules, var.defaults.computed_egress_rules, []) + computed_egress_with_cidr_ipv4 = try(each.value.computed_egress_with_cidr_ipv4, var.defaults.computed_egress_with_cidr_ipv4, []) + computed_egress_with_cidr_ipv6 = try(each.value.computed_egress_with_cidr_ipv6, var.defaults.computed_egress_with_cidr_ipv6, []) + computed_egress_with_prefix_list_id = try(each.value.computed_egress_with_prefix_list_id, var.defaults.computed_egress_with_prefix_list_id, []) + computed_egress_with_referenced_security_group_id = try(each.value.computed_egress_with_referenced_security_group_id, var.defaults.computed_egress_with_referenced_security_group_id, []) + computed_egress_with_self = try(each.value.computed_egress_with_self, var.defaults.computed_egress_with_self, []) + computed_ingress_cidr_blocks = try(each.value.computed_ingress_cidr_blocks, var.defaults.computed_ingress_cidr_blocks, []) + computed_ingress_ipv6_cidr_blocks = try(each.value.computed_ingress_ipv6_cidr_blocks, var.defaults.computed_ingress_ipv6_cidr_blocks, []) + computed_ingress_prefix_list_ids = try(each.value.computed_ingress_prefix_list_ids, var.defaults.computed_ingress_prefix_list_ids, []) + computed_ingress_rules = try(each.value.computed_ingress_rules, var.defaults.computed_ingress_rules, []) + computed_ingress_with_cidr_ipv4 = try(each.value.computed_ingress_with_cidr_ipv4, var.defaults.computed_ingress_with_cidr_ipv4, []) + computed_ingress_with_cidr_ipv6 = try(each.value.computed_ingress_with_cidr_ipv6, var.defaults.computed_ingress_with_cidr_ipv6, []) + computed_ingress_with_prefix_list_id = try(each.value.computed_ingress_with_prefix_list_id, var.defaults.computed_ingress_with_prefix_list_id, []) + computed_ingress_with_referenced_security_group_id = try(each.value.computed_ingress_with_referenced_security_group_id, var.defaults.computed_ingress_with_referenced_security_group_id, []) + computed_ingress_with_self = try(each.value.computed_ingress_with_self, var.defaults.computed_ingress_with_self, []) + create = try(each.value.create, var.defaults.create, true) + description = try(each.value.description, var.defaults.description, "Security Group managed by Terraform") + egress_cidr_ipv4 = try(each.value.egress_cidr_ipv4, var.defaults.egress_cidr_ipv4, ["0.0.0.0/0"]) + egress_cidr_ipv6 = try(each.value.egress_cidr_ipv6, var.defaults.egress_cidr_ipv6, ["::/0"]) + egress_prefix_list_ids = try(each.value.egress_prefix_list_ids, var.defaults.egress_prefix_list_ids, []) + egress_rules = try(each.value.egress_rules, var.defaults.egress_rules, []) + egress_with_cidr_ipv4 = try(each.value.egress_with_cidr_ipv4, var.defaults.egress_with_cidr_ipv4, []) + egress_with_cidr_ipv6 = try(each.value.egress_with_cidr_ipv6, var.defaults.egress_with_cidr_ipv6, []) + egress_with_prefix_list_id = try(each.value.egress_with_prefix_list_id, var.defaults.egress_with_prefix_list_id, []) + egress_with_referenced_security_group_id = try(each.value.egress_with_referenced_security_group_id, var.defaults.egress_with_referenced_security_group_id, []) + egress_with_self = try(each.value.egress_with_self, var.defaults.egress_with_self, []) + ingress_cidr_ipv4 = try(each.value.ingress_cidr_ipv4, var.defaults.ingress_cidr_ipv4, []) + ingress_cidr_ipv6 = try(each.value.ingress_cidr_ipv6, var.defaults.ingress_cidr_ipv6, []) + ingress_prefix_list_ids = try(each.value.ingress_prefix_list_ids, var.defaults.ingress_prefix_list_ids, []) + ingress_rules = try(each.value.ingress_rules, var.defaults.ingress_rules, []) + ingress_with_cidr_ipv4 = try(each.value.ingress_with_cidr_ipv4, var.defaults.ingress_with_cidr_ipv4, []) + ingress_with_cidr_ipv6 = try(each.value.ingress_with_cidr_ipv6, var.defaults.ingress_with_cidr_ipv6, []) + ingress_with_prefix_list_id = try(each.value.ingress_with_prefix_list_id, var.defaults.ingress_with_prefix_list_id, []) + ingress_with_referenced_security_group_id = try(each.value.ingress_with_referenced_security_group_id, var.defaults.ingress_with_referenced_security_group_id, []) + ingress_with_self = try(each.value.ingress_with_self, var.defaults.ingress_with_self, []) + name = try(each.value.name, var.defaults.name) + number_of_computed_egress_cidr_blocks = try(each.value.number_of_computed_egress_cidr_blocks, var.defaults.number_of_computed_egress_cidr_blocks, 0) + number_of_computed_egress_ipv6_cidr_blocks = try(each.value.number_of_computed_egress_ipv6_cidr_blocks, var.defaults.number_of_computed_egress_ipv6_cidr_blocks, 0) + number_of_computed_egress_prefix_list_ids = try(each.value.number_of_computed_egress_prefix_list_ids, var.defaults.number_of_computed_egress_prefix_list_ids, 0) + number_of_computed_egress_rules = try(each.value.number_of_computed_egress_rules, var.defaults.number_of_computed_egress_rules, 0) + number_of_computed_egress_with_cidr_ipv4 = try(each.value.number_of_computed_egress_with_cidr_ipv4, var.defaults.number_of_computed_egress_with_cidr_ipv4, 0) + number_of_computed_egress_with_cidr_ipv6 = try(each.value.number_of_computed_egress_with_cidr_ipv6, var.defaults.number_of_computed_egress_with_cidr_ipv6, 0) + number_of_computed_egress_with_prefix_list_id = try(each.value.number_of_computed_egress_with_prefix_list_id, var.defaults.number_of_computed_egress_with_prefix_list_id, 0) + number_of_computed_egress_with_referenced_security_group_id = try(each.value.number_of_computed_egress_with_referenced_security_group_id, var.defaults.number_of_computed_egress_with_referenced_security_group_id, 0) + number_of_computed_egress_with_self = try(each.value.number_of_computed_egress_with_self, var.defaults.number_of_computed_egress_with_self, 0) + number_of_computed_ingress_cidr_blocks = try(each.value.number_of_computed_ingress_cidr_blocks, var.defaults.number_of_computed_ingress_cidr_blocks, 0) + number_of_computed_ingress_ipv6_cidr_blocks = try(each.value.number_of_computed_ingress_ipv6_cidr_blocks, var.defaults.number_of_computed_ingress_ipv6_cidr_blocks, 0) + number_of_computed_ingress_prefix_list_ids = try(each.value.number_of_computed_ingress_prefix_list_ids, var.defaults.number_of_computed_ingress_prefix_list_ids, 0) + number_of_computed_ingress_rules = try(each.value.number_of_computed_ingress_rules, var.defaults.number_of_computed_ingress_rules, 0) + number_of_computed_ingress_with_cidr_ipv4 = try(each.value.number_of_computed_ingress_with_cidr_ipv4, var.defaults.number_of_computed_ingress_with_cidr_ipv4, 0) + number_of_computed_ingress_with_cidr_ipv6 = try(each.value.number_of_computed_ingress_with_cidr_ipv6, var.defaults.number_of_computed_ingress_with_cidr_ipv6, 0) + number_of_computed_ingress_with_prefix_list_id = try(each.value.number_of_computed_ingress_with_prefix_list_id, var.defaults.number_of_computed_ingress_with_prefix_list_id, 0) + number_of_computed_ingress_with_referenced_security_group_id = try(each.value.number_of_computed_ingress_with_referenced_security_group_id, var.defaults.number_of_computed_ingress_with_referenced_security_group_id, 0) + number_of_computed_ingress_with_self = try(each.value.number_of_computed_ingress_with_self, var.defaults.number_of_computed_ingress_with_self, 0) + revoke_rules_on_delete = try(each.value.revoke_rules_on_delete, var.defaults.revoke_rules_on_delete, false) + tags = try(each.value.tags, var.defaults.tags, {}) + use_name_prefix = try(each.value.use_name_prefix, var.defaults.use_name_prefix, true) + vpc_id = try(each.value.vpc_id, var.defaults.vpc_id) } diff --git a/wrappers/smtps/main.tf b/wrappers/smtps/main.tf index 08a13288..930ba7db 100644 --- a/wrappers/smtps/main.tf +++ b/wrappers/smtps/main.tf @@ -3,77 +3,77 @@ module "wrapper" { for_each = var.items - auto_computed_egress_rules = try(each.value.auto_computed_egress_rules, var.defaults.auto_computed_egress_rules, []) - auto_computed_egress_with_self = try(each.value.auto_computed_egress_with_self, var.defaults.auto_computed_egress_with_self, []) - auto_computed_ingress_rules = try(each.value.auto_computed_ingress_rules, var.defaults.auto_computed_ingress_rules, []) - auto_computed_ingress_with_self = try(each.value.auto_computed_ingress_with_self, var.defaults.auto_computed_ingress_with_self, []) - auto_egress_rules = try(each.value.auto_egress_rules, var.defaults.auto_egress_rules, ["all-all"]) - auto_egress_with_self = try(each.value.auto_egress_with_self, var.defaults.auto_egress_with_self, []) - auto_ingress_rules = try(each.value.auto_ingress_rules, var.defaults.auto_ingress_rules, ["smtps-465-tcp", "smtps-2465-tcp"]) - auto_ingress_with_self = try(each.value.auto_ingress_with_self, var.defaults.auto_ingress_with_self, [{ "rule" = "all-all" }]) - auto_number_of_computed_egress_rules = try(each.value.auto_number_of_computed_egress_rules, var.defaults.auto_number_of_computed_egress_rules, 0) - auto_number_of_computed_egress_with_self = try(each.value.auto_number_of_computed_egress_with_self, var.defaults.auto_number_of_computed_egress_with_self, 0) - auto_number_of_computed_ingress_rules = try(each.value.auto_number_of_computed_ingress_rules, var.defaults.auto_number_of_computed_ingress_rules, 0) - auto_number_of_computed_ingress_with_self = try(each.value.auto_number_of_computed_ingress_with_self, var.defaults.auto_number_of_computed_ingress_with_self, 0) - computed_egress_cidr_blocks = try(each.value.computed_egress_cidr_blocks, var.defaults.computed_egress_cidr_blocks, ["0.0.0.0/0"]) - computed_egress_ipv6_cidr_blocks = try(each.value.computed_egress_ipv6_cidr_blocks, var.defaults.computed_egress_ipv6_cidr_blocks, ["::/0"]) - computed_egress_prefix_list_ids = try(each.value.computed_egress_prefix_list_ids, var.defaults.computed_egress_prefix_list_ids, []) - computed_egress_rules = try(each.value.computed_egress_rules, var.defaults.computed_egress_rules, []) - computed_egress_with_cidr_blocks = try(each.value.computed_egress_with_cidr_blocks, var.defaults.computed_egress_with_cidr_blocks, []) - computed_egress_with_ipv6_cidr_blocks = try(each.value.computed_egress_with_ipv6_cidr_blocks, var.defaults.computed_egress_with_ipv6_cidr_blocks, []) - computed_egress_with_prefix_list_ids = try(each.value.computed_egress_with_prefix_list_ids, var.defaults.computed_egress_with_prefix_list_ids, []) - computed_egress_with_self = try(each.value.computed_egress_with_self, var.defaults.computed_egress_with_self, []) - computed_egress_with_source_security_group_id = try(each.value.computed_egress_with_source_security_group_id, var.defaults.computed_egress_with_source_security_group_id, []) - computed_ingress_cidr_blocks = try(each.value.computed_ingress_cidr_blocks, var.defaults.computed_ingress_cidr_blocks, []) - computed_ingress_ipv6_cidr_blocks = try(each.value.computed_ingress_ipv6_cidr_blocks, var.defaults.computed_ingress_ipv6_cidr_blocks, []) - computed_ingress_prefix_list_ids = try(each.value.computed_ingress_prefix_list_ids, var.defaults.computed_ingress_prefix_list_ids, []) - computed_ingress_rules = try(each.value.computed_ingress_rules, var.defaults.computed_ingress_rules, []) - computed_ingress_with_cidr_blocks = try(each.value.computed_ingress_with_cidr_blocks, var.defaults.computed_ingress_with_cidr_blocks, []) - computed_ingress_with_ipv6_cidr_blocks = try(each.value.computed_ingress_with_ipv6_cidr_blocks, var.defaults.computed_ingress_with_ipv6_cidr_blocks, []) - computed_ingress_with_prefix_list_ids = try(each.value.computed_ingress_with_prefix_list_ids, var.defaults.computed_ingress_with_prefix_list_ids, []) - computed_ingress_with_self = try(each.value.computed_ingress_with_self, var.defaults.computed_ingress_with_self, []) - computed_ingress_with_source_security_group_id = try(each.value.computed_ingress_with_source_security_group_id, var.defaults.computed_ingress_with_source_security_group_id, []) - create = try(each.value.create, var.defaults.create, true) - description = try(each.value.description, var.defaults.description, "Security Group managed by Terraform") - egress_cidr_blocks = try(each.value.egress_cidr_blocks, var.defaults.egress_cidr_blocks, ["0.0.0.0/0"]) - egress_ipv6_cidr_blocks = try(each.value.egress_ipv6_cidr_blocks, var.defaults.egress_ipv6_cidr_blocks, ["::/0"]) - egress_prefix_list_ids = try(each.value.egress_prefix_list_ids, var.defaults.egress_prefix_list_ids, []) - egress_rules = try(each.value.egress_rules, var.defaults.egress_rules, []) - egress_with_cidr_blocks = try(each.value.egress_with_cidr_blocks, var.defaults.egress_with_cidr_blocks, []) - egress_with_ipv6_cidr_blocks = try(each.value.egress_with_ipv6_cidr_blocks, var.defaults.egress_with_ipv6_cidr_blocks, []) - egress_with_prefix_list_ids = try(each.value.egress_with_prefix_list_ids, var.defaults.egress_with_prefix_list_ids, []) - egress_with_self = try(each.value.egress_with_self, var.defaults.egress_with_self, []) - egress_with_source_security_group_id = try(each.value.egress_with_source_security_group_id, var.defaults.egress_with_source_security_group_id, []) - ingress_cidr_blocks = try(each.value.ingress_cidr_blocks, var.defaults.ingress_cidr_blocks, []) - ingress_ipv6_cidr_blocks = try(each.value.ingress_ipv6_cidr_blocks, var.defaults.ingress_ipv6_cidr_blocks, []) - ingress_prefix_list_ids = try(each.value.ingress_prefix_list_ids, var.defaults.ingress_prefix_list_ids, []) - ingress_rules = try(each.value.ingress_rules, var.defaults.ingress_rules, []) - ingress_with_cidr_blocks = try(each.value.ingress_with_cidr_blocks, var.defaults.ingress_with_cidr_blocks, []) - ingress_with_ipv6_cidr_blocks = try(each.value.ingress_with_ipv6_cidr_blocks, var.defaults.ingress_with_ipv6_cidr_blocks, []) - ingress_with_prefix_list_ids = try(each.value.ingress_with_prefix_list_ids, var.defaults.ingress_with_prefix_list_ids, []) - ingress_with_self = try(each.value.ingress_with_self, var.defaults.ingress_with_self, []) - ingress_with_source_security_group_id = try(each.value.ingress_with_source_security_group_id, var.defaults.ingress_with_source_security_group_id, []) - name = try(each.value.name, var.defaults.name) - number_of_computed_egress_cidr_blocks = try(each.value.number_of_computed_egress_cidr_blocks, var.defaults.number_of_computed_egress_cidr_blocks, 0) - number_of_computed_egress_ipv6_cidr_blocks = try(each.value.number_of_computed_egress_ipv6_cidr_blocks, var.defaults.number_of_computed_egress_ipv6_cidr_blocks, 0) - number_of_computed_egress_prefix_list_ids = try(each.value.number_of_computed_egress_prefix_list_ids, var.defaults.number_of_computed_egress_prefix_list_ids, 0) - number_of_computed_egress_rules = try(each.value.number_of_computed_egress_rules, var.defaults.number_of_computed_egress_rules, 0) - number_of_computed_egress_with_cidr_blocks = try(each.value.number_of_computed_egress_with_cidr_blocks, var.defaults.number_of_computed_egress_with_cidr_blocks, 0) - number_of_computed_egress_with_ipv6_cidr_blocks = try(each.value.number_of_computed_egress_with_ipv6_cidr_blocks, var.defaults.number_of_computed_egress_with_ipv6_cidr_blocks, 0) - number_of_computed_egress_with_prefix_list_ids = try(each.value.number_of_computed_egress_with_prefix_list_ids, var.defaults.number_of_computed_egress_with_prefix_list_ids, 0) - number_of_computed_egress_with_self = try(each.value.number_of_computed_egress_with_self, var.defaults.number_of_computed_egress_with_self, 0) - number_of_computed_egress_with_source_security_group_id = try(each.value.number_of_computed_egress_with_source_security_group_id, var.defaults.number_of_computed_egress_with_source_security_group_id, 0) - number_of_computed_ingress_cidr_blocks = try(each.value.number_of_computed_ingress_cidr_blocks, var.defaults.number_of_computed_ingress_cidr_blocks, 0) - number_of_computed_ingress_ipv6_cidr_blocks = try(each.value.number_of_computed_ingress_ipv6_cidr_blocks, var.defaults.number_of_computed_ingress_ipv6_cidr_blocks, 0) - number_of_computed_ingress_prefix_list_ids = try(each.value.number_of_computed_ingress_prefix_list_ids, var.defaults.number_of_computed_ingress_prefix_list_ids, 0) - number_of_computed_ingress_rules = try(each.value.number_of_computed_ingress_rules, var.defaults.number_of_computed_ingress_rules, 0) - number_of_computed_ingress_with_cidr_blocks = try(each.value.number_of_computed_ingress_with_cidr_blocks, var.defaults.number_of_computed_ingress_with_cidr_blocks, 0) - number_of_computed_ingress_with_ipv6_cidr_blocks = try(each.value.number_of_computed_ingress_with_ipv6_cidr_blocks, var.defaults.number_of_computed_ingress_with_ipv6_cidr_blocks, 0) - number_of_computed_ingress_with_prefix_list_ids = try(each.value.number_of_computed_ingress_with_prefix_list_ids, var.defaults.number_of_computed_ingress_with_prefix_list_ids, 0) - number_of_computed_ingress_with_self = try(each.value.number_of_computed_ingress_with_self, var.defaults.number_of_computed_ingress_with_self, 0) - number_of_computed_ingress_with_source_security_group_id = try(each.value.number_of_computed_ingress_with_source_security_group_id, var.defaults.number_of_computed_ingress_with_source_security_group_id, 0) - revoke_rules_on_delete = try(each.value.revoke_rules_on_delete, var.defaults.revoke_rules_on_delete, false) - tags = try(each.value.tags, var.defaults.tags, {}) - use_name_prefix = try(each.value.use_name_prefix, var.defaults.use_name_prefix, true) - vpc_id = try(each.value.vpc_id, var.defaults.vpc_id) + auto_computed_egress_rules = try(each.value.auto_computed_egress_rules, var.defaults.auto_computed_egress_rules, []) + auto_computed_egress_with_self = try(each.value.auto_computed_egress_with_self, var.defaults.auto_computed_egress_with_self, []) + auto_computed_ingress_rules = try(each.value.auto_computed_ingress_rules, var.defaults.auto_computed_ingress_rules, []) + auto_computed_ingress_with_self = try(each.value.auto_computed_ingress_with_self, var.defaults.auto_computed_ingress_with_self, []) + auto_egress_rules = try(each.value.auto_egress_rules, var.defaults.auto_egress_rules, ["all-all"]) + auto_egress_with_self = try(each.value.auto_egress_with_self, var.defaults.auto_egress_with_self, []) + auto_ingress_rules = try(each.value.auto_ingress_rules, var.defaults.auto_ingress_rules, ["smtps-465-tcp", "smtps-2465-tcp"]) + auto_ingress_with_self = try(each.value.auto_ingress_with_self, var.defaults.auto_ingress_with_self, [{ "rule" = "all-all" }]) + auto_number_of_computed_egress_rules = try(each.value.auto_number_of_computed_egress_rules, var.defaults.auto_number_of_computed_egress_rules, 0) + auto_number_of_computed_egress_with_self = try(each.value.auto_number_of_computed_egress_with_self, var.defaults.auto_number_of_computed_egress_with_self, 0) + auto_number_of_computed_ingress_rules = try(each.value.auto_number_of_computed_ingress_rules, var.defaults.auto_number_of_computed_ingress_rules, 0) + auto_number_of_computed_ingress_with_self = try(each.value.auto_number_of_computed_ingress_with_self, var.defaults.auto_number_of_computed_ingress_with_self, 0) + computed_egress_cidr_blocks = try(each.value.computed_egress_cidr_blocks, var.defaults.computed_egress_cidr_blocks, ["0.0.0.0/0"]) + computed_egress_ipv6_cidr_blocks = try(each.value.computed_egress_ipv6_cidr_blocks, var.defaults.computed_egress_ipv6_cidr_blocks, ["::/0"]) + computed_egress_prefix_list_ids = try(each.value.computed_egress_prefix_list_ids, var.defaults.computed_egress_prefix_list_ids, []) + computed_egress_rules = try(each.value.computed_egress_rules, var.defaults.computed_egress_rules, []) + computed_egress_with_cidr_ipv4 = try(each.value.computed_egress_with_cidr_ipv4, var.defaults.computed_egress_with_cidr_ipv4, []) + computed_egress_with_cidr_ipv6 = try(each.value.computed_egress_with_cidr_ipv6, var.defaults.computed_egress_with_cidr_ipv6, []) + computed_egress_with_prefix_list_id = try(each.value.computed_egress_with_prefix_list_id, var.defaults.computed_egress_with_prefix_list_id, []) + computed_egress_with_referenced_security_group_id = try(each.value.computed_egress_with_referenced_security_group_id, var.defaults.computed_egress_with_referenced_security_group_id, []) + computed_egress_with_self = try(each.value.computed_egress_with_self, var.defaults.computed_egress_with_self, []) + computed_ingress_cidr_blocks = try(each.value.computed_ingress_cidr_blocks, var.defaults.computed_ingress_cidr_blocks, []) + computed_ingress_ipv6_cidr_blocks = try(each.value.computed_ingress_ipv6_cidr_blocks, var.defaults.computed_ingress_ipv6_cidr_blocks, []) + computed_ingress_prefix_list_ids = try(each.value.computed_ingress_prefix_list_ids, var.defaults.computed_ingress_prefix_list_ids, []) + computed_ingress_rules = try(each.value.computed_ingress_rules, var.defaults.computed_ingress_rules, []) + computed_ingress_with_cidr_ipv4 = try(each.value.computed_ingress_with_cidr_ipv4, var.defaults.computed_ingress_with_cidr_ipv4, []) + computed_ingress_with_cidr_ipv6 = try(each.value.computed_ingress_with_cidr_ipv6, var.defaults.computed_ingress_with_cidr_ipv6, []) + computed_ingress_with_prefix_list_id = try(each.value.computed_ingress_with_prefix_list_id, var.defaults.computed_ingress_with_prefix_list_id, []) + computed_ingress_with_referenced_security_group_id = try(each.value.computed_ingress_with_referenced_security_group_id, var.defaults.computed_ingress_with_referenced_security_group_id, []) + computed_ingress_with_self = try(each.value.computed_ingress_with_self, var.defaults.computed_ingress_with_self, []) + create = try(each.value.create, var.defaults.create, true) + description = try(each.value.description, var.defaults.description, "Security Group managed by Terraform") + egress_cidr_ipv4 = try(each.value.egress_cidr_ipv4, var.defaults.egress_cidr_ipv4, ["0.0.0.0/0"]) + egress_cidr_ipv6 = try(each.value.egress_cidr_ipv6, var.defaults.egress_cidr_ipv6, ["::/0"]) + egress_prefix_list_ids = try(each.value.egress_prefix_list_ids, var.defaults.egress_prefix_list_ids, []) + egress_rules = try(each.value.egress_rules, var.defaults.egress_rules, []) + egress_with_cidr_ipv4 = try(each.value.egress_with_cidr_ipv4, var.defaults.egress_with_cidr_ipv4, []) + egress_with_cidr_ipv6 = try(each.value.egress_with_cidr_ipv6, var.defaults.egress_with_cidr_ipv6, []) + egress_with_prefix_list_id = try(each.value.egress_with_prefix_list_id, var.defaults.egress_with_prefix_list_id, []) + egress_with_referenced_security_group_id = try(each.value.egress_with_referenced_security_group_id, var.defaults.egress_with_referenced_security_group_id, []) + egress_with_self = try(each.value.egress_with_self, var.defaults.egress_with_self, []) + ingress_cidr_ipv4 = try(each.value.ingress_cidr_ipv4, var.defaults.ingress_cidr_ipv4, []) + ingress_cidr_ipv6 = try(each.value.ingress_cidr_ipv6, var.defaults.ingress_cidr_ipv6, []) + ingress_prefix_list_ids = try(each.value.ingress_prefix_list_ids, var.defaults.ingress_prefix_list_ids, []) + ingress_rules = try(each.value.ingress_rules, var.defaults.ingress_rules, []) + ingress_with_cidr_ipv4 = try(each.value.ingress_with_cidr_ipv4, var.defaults.ingress_with_cidr_ipv4, []) + ingress_with_cidr_ipv6 = try(each.value.ingress_with_cidr_ipv6, var.defaults.ingress_with_cidr_ipv6, []) + ingress_with_prefix_list_id = try(each.value.ingress_with_prefix_list_id, var.defaults.ingress_with_prefix_list_id, []) + ingress_with_referenced_security_group_id = try(each.value.ingress_with_referenced_security_group_id, var.defaults.ingress_with_referenced_security_group_id, []) + ingress_with_self = try(each.value.ingress_with_self, var.defaults.ingress_with_self, []) + name = try(each.value.name, var.defaults.name) + number_of_computed_egress_cidr_blocks = try(each.value.number_of_computed_egress_cidr_blocks, var.defaults.number_of_computed_egress_cidr_blocks, 0) + number_of_computed_egress_ipv6_cidr_blocks = try(each.value.number_of_computed_egress_ipv6_cidr_blocks, var.defaults.number_of_computed_egress_ipv6_cidr_blocks, 0) + number_of_computed_egress_prefix_list_ids = try(each.value.number_of_computed_egress_prefix_list_ids, var.defaults.number_of_computed_egress_prefix_list_ids, 0) + number_of_computed_egress_rules = try(each.value.number_of_computed_egress_rules, var.defaults.number_of_computed_egress_rules, 0) + number_of_computed_egress_with_cidr_ipv4 = try(each.value.number_of_computed_egress_with_cidr_ipv4, var.defaults.number_of_computed_egress_with_cidr_ipv4, 0) + number_of_computed_egress_with_cidr_ipv6 = try(each.value.number_of_computed_egress_with_cidr_ipv6, var.defaults.number_of_computed_egress_with_cidr_ipv6, 0) + number_of_computed_egress_with_prefix_list_id = try(each.value.number_of_computed_egress_with_prefix_list_id, var.defaults.number_of_computed_egress_with_prefix_list_id, 0) + number_of_computed_egress_with_referenced_security_group_id = try(each.value.number_of_computed_egress_with_referenced_security_group_id, var.defaults.number_of_computed_egress_with_referenced_security_group_id, 0) + number_of_computed_egress_with_self = try(each.value.number_of_computed_egress_with_self, var.defaults.number_of_computed_egress_with_self, 0) + number_of_computed_ingress_cidr_blocks = try(each.value.number_of_computed_ingress_cidr_blocks, var.defaults.number_of_computed_ingress_cidr_blocks, 0) + number_of_computed_ingress_ipv6_cidr_blocks = try(each.value.number_of_computed_ingress_ipv6_cidr_blocks, var.defaults.number_of_computed_ingress_ipv6_cidr_blocks, 0) + number_of_computed_ingress_prefix_list_ids = try(each.value.number_of_computed_ingress_prefix_list_ids, var.defaults.number_of_computed_ingress_prefix_list_ids, 0) + number_of_computed_ingress_rules = try(each.value.number_of_computed_ingress_rules, var.defaults.number_of_computed_ingress_rules, 0) + number_of_computed_ingress_with_cidr_ipv4 = try(each.value.number_of_computed_ingress_with_cidr_ipv4, var.defaults.number_of_computed_ingress_with_cidr_ipv4, 0) + number_of_computed_ingress_with_cidr_ipv6 = try(each.value.number_of_computed_ingress_with_cidr_ipv6, var.defaults.number_of_computed_ingress_with_cidr_ipv6, 0) + number_of_computed_ingress_with_prefix_list_id = try(each.value.number_of_computed_ingress_with_prefix_list_id, var.defaults.number_of_computed_ingress_with_prefix_list_id, 0) + number_of_computed_ingress_with_referenced_security_group_id = try(each.value.number_of_computed_ingress_with_referenced_security_group_id, var.defaults.number_of_computed_ingress_with_referenced_security_group_id, 0) + number_of_computed_ingress_with_self = try(each.value.number_of_computed_ingress_with_self, var.defaults.number_of_computed_ingress_with_self, 0) + revoke_rules_on_delete = try(each.value.revoke_rules_on_delete, var.defaults.revoke_rules_on_delete, false) + tags = try(each.value.tags, var.defaults.tags, {}) + use_name_prefix = try(each.value.use_name_prefix, var.defaults.use_name_prefix, true) + vpc_id = try(each.value.vpc_id, var.defaults.vpc_id) } diff --git a/wrappers/solr/main.tf b/wrappers/solr/main.tf index 444c0c6e..fe8f941f 100644 --- a/wrappers/solr/main.tf +++ b/wrappers/solr/main.tf @@ -3,77 +3,77 @@ module "wrapper" { for_each = var.items - auto_computed_egress_rules = try(each.value.auto_computed_egress_rules, var.defaults.auto_computed_egress_rules, []) - auto_computed_egress_with_self = try(each.value.auto_computed_egress_with_self, var.defaults.auto_computed_egress_with_self, []) - auto_computed_ingress_rules = try(each.value.auto_computed_ingress_rules, var.defaults.auto_computed_ingress_rules, []) - auto_computed_ingress_with_self = try(each.value.auto_computed_ingress_with_self, var.defaults.auto_computed_ingress_with_self, []) - auto_egress_rules = try(each.value.auto_egress_rules, var.defaults.auto_egress_rules, ["all-all"]) - auto_egress_with_self = try(each.value.auto_egress_with_self, var.defaults.auto_egress_with_self, []) - auto_ingress_rules = try(each.value.auto_ingress_rules, var.defaults.auto_ingress_rules, ["solr-tcp"]) - auto_ingress_with_self = try(each.value.auto_ingress_with_self, var.defaults.auto_ingress_with_self, [{ "rule" = "all-all" }]) - auto_number_of_computed_egress_rules = try(each.value.auto_number_of_computed_egress_rules, var.defaults.auto_number_of_computed_egress_rules, 0) - auto_number_of_computed_egress_with_self = try(each.value.auto_number_of_computed_egress_with_self, var.defaults.auto_number_of_computed_egress_with_self, 0) - auto_number_of_computed_ingress_rules = try(each.value.auto_number_of_computed_ingress_rules, var.defaults.auto_number_of_computed_ingress_rules, 0) - auto_number_of_computed_ingress_with_self = try(each.value.auto_number_of_computed_ingress_with_self, var.defaults.auto_number_of_computed_ingress_with_self, 0) - computed_egress_cidr_blocks = try(each.value.computed_egress_cidr_blocks, var.defaults.computed_egress_cidr_blocks, ["0.0.0.0/0"]) - computed_egress_ipv6_cidr_blocks = try(each.value.computed_egress_ipv6_cidr_blocks, var.defaults.computed_egress_ipv6_cidr_blocks, ["::/0"]) - computed_egress_prefix_list_ids = try(each.value.computed_egress_prefix_list_ids, var.defaults.computed_egress_prefix_list_ids, []) - computed_egress_rules = try(each.value.computed_egress_rules, var.defaults.computed_egress_rules, []) - computed_egress_with_cidr_blocks = try(each.value.computed_egress_with_cidr_blocks, var.defaults.computed_egress_with_cidr_blocks, []) - computed_egress_with_ipv6_cidr_blocks = try(each.value.computed_egress_with_ipv6_cidr_blocks, var.defaults.computed_egress_with_ipv6_cidr_blocks, []) - computed_egress_with_prefix_list_ids = try(each.value.computed_egress_with_prefix_list_ids, var.defaults.computed_egress_with_prefix_list_ids, []) - computed_egress_with_self = try(each.value.computed_egress_with_self, var.defaults.computed_egress_with_self, []) - computed_egress_with_source_security_group_id = try(each.value.computed_egress_with_source_security_group_id, var.defaults.computed_egress_with_source_security_group_id, []) - computed_ingress_cidr_blocks = try(each.value.computed_ingress_cidr_blocks, var.defaults.computed_ingress_cidr_blocks, []) - computed_ingress_ipv6_cidr_blocks = try(each.value.computed_ingress_ipv6_cidr_blocks, var.defaults.computed_ingress_ipv6_cidr_blocks, []) - computed_ingress_prefix_list_ids = try(each.value.computed_ingress_prefix_list_ids, var.defaults.computed_ingress_prefix_list_ids, []) - computed_ingress_rules = try(each.value.computed_ingress_rules, var.defaults.computed_ingress_rules, []) - computed_ingress_with_cidr_blocks = try(each.value.computed_ingress_with_cidr_blocks, var.defaults.computed_ingress_with_cidr_blocks, []) - computed_ingress_with_ipv6_cidr_blocks = try(each.value.computed_ingress_with_ipv6_cidr_blocks, var.defaults.computed_ingress_with_ipv6_cidr_blocks, []) - computed_ingress_with_prefix_list_ids = try(each.value.computed_ingress_with_prefix_list_ids, var.defaults.computed_ingress_with_prefix_list_ids, []) - computed_ingress_with_self = try(each.value.computed_ingress_with_self, var.defaults.computed_ingress_with_self, []) - computed_ingress_with_source_security_group_id = try(each.value.computed_ingress_with_source_security_group_id, var.defaults.computed_ingress_with_source_security_group_id, []) - create = try(each.value.create, var.defaults.create, true) - description = try(each.value.description, var.defaults.description, "Security Group managed by Terraform") - egress_cidr_blocks = try(each.value.egress_cidr_blocks, var.defaults.egress_cidr_blocks, ["0.0.0.0/0"]) - egress_ipv6_cidr_blocks = try(each.value.egress_ipv6_cidr_blocks, var.defaults.egress_ipv6_cidr_blocks, ["::/0"]) - egress_prefix_list_ids = try(each.value.egress_prefix_list_ids, var.defaults.egress_prefix_list_ids, []) - egress_rules = try(each.value.egress_rules, var.defaults.egress_rules, []) - egress_with_cidr_blocks = try(each.value.egress_with_cidr_blocks, var.defaults.egress_with_cidr_blocks, []) - egress_with_ipv6_cidr_blocks = try(each.value.egress_with_ipv6_cidr_blocks, var.defaults.egress_with_ipv6_cidr_blocks, []) - egress_with_prefix_list_ids = try(each.value.egress_with_prefix_list_ids, var.defaults.egress_with_prefix_list_ids, []) - egress_with_self = try(each.value.egress_with_self, var.defaults.egress_with_self, []) - egress_with_source_security_group_id = try(each.value.egress_with_source_security_group_id, var.defaults.egress_with_source_security_group_id, []) - ingress_cidr_blocks = try(each.value.ingress_cidr_blocks, var.defaults.ingress_cidr_blocks, []) - ingress_ipv6_cidr_blocks = try(each.value.ingress_ipv6_cidr_blocks, var.defaults.ingress_ipv6_cidr_blocks, []) - ingress_prefix_list_ids = try(each.value.ingress_prefix_list_ids, var.defaults.ingress_prefix_list_ids, []) - ingress_rules = try(each.value.ingress_rules, var.defaults.ingress_rules, []) - ingress_with_cidr_blocks = try(each.value.ingress_with_cidr_blocks, var.defaults.ingress_with_cidr_blocks, []) - ingress_with_ipv6_cidr_blocks = try(each.value.ingress_with_ipv6_cidr_blocks, var.defaults.ingress_with_ipv6_cidr_blocks, []) - ingress_with_prefix_list_ids = try(each.value.ingress_with_prefix_list_ids, var.defaults.ingress_with_prefix_list_ids, []) - ingress_with_self = try(each.value.ingress_with_self, var.defaults.ingress_with_self, []) - ingress_with_source_security_group_id = try(each.value.ingress_with_source_security_group_id, var.defaults.ingress_with_source_security_group_id, []) - name = try(each.value.name, var.defaults.name) - number_of_computed_egress_cidr_blocks = try(each.value.number_of_computed_egress_cidr_blocks, var.defaults.number_of_computed_egress_cidr_blocks, 0) - number_of_computed_egress_ipv6_cidr_blocks = try(each.value.number_of_computed_egress_ipv6_cidr_blocks, var.defaults.number_of_computed_egress_ipv6_cidr_blocks, 0) - number_of_computed_egress_prefix_list_ids = try(each.value.number_of_computed_egress_prefix_list_ids, var.defaults.number_of_computed_egress_prefix_list_ids, 0) - number_of_computed_egress_rules = try(each.value.number_of_computed_egress_rules, var.defaults.number_of_computed_egress_rules, 0) - number_of_computed_egress_with_cidr_blocks = try(each.value.number_of_computed_egress_with_cidr_blocks, var.defaults.number_of_computed_egress_with_cidr_blocks, 0) - number_of_computed_egress_with_ipv6_cidr_blocks = try(each.value.number_of_computed_egress_with_ipv6_cidr_blocks, var.defaults.number_of_computed_egress_with_ipv6_cidr_blocks, 0) - number_of_computed_egress_with_prefix_list_ids = try(each.value.number_of_computed_egress_with_prefix_list_ids, var.defaults.number_of_computed_egress_with_prefix_list_ids, 0) - number_of_computed_egress_with_self = try(each.value.number_of_computed_egress_with_self, var.defaults.number_of_computed_egress_with_self, 0) - number_of_computed_egress_with_source_security_group_id = try(each.value.number_of_computed_egress_with_source_security_group_id, var.defaults.number_of_computed_egress_with_source_security_group_id, 0) - number_of_computed_ingress_cidr_blocks = try(each.value.number_of_computed_ingress_cidr_blocks, var.defaults.number_of_computed_ingress_cidr_blocks, 0) - number_of_computed_ingress_ipv6_cidr_blocks = try(each.value.number_of_computed_ingress_ipv6_cidr_blocks, var.defaults.number_of_computed_ingress_ipv6_cidr_blocks, 0) - number_of_computed_ingress_prefix_list_ids = try(each.value.number_of_computed_ingress_prefix_list_ids, var.defaults.number_of_computed_ingress_prefix_list_ids, 0) - number_of_computed_ingress_rules = try(each.value.number_of_computed_ingress_rules, var.defaults.number_of_computed_ingress_rules, 0) - number_of_computed_ingress_with_cidr_blocks = try(each.value.number_of_computed_ingress_with_cidr_blocks, var.defaults.number_of_computed_ingress_with_cidr_blocks, 0) - number_of_computed_ingress_with_ipv6_cidr_blocks = try(each.value.number_of_computed_ingress_with_ipv6_cidr_blocks, var.defaults.number_of_computed_ingress_with_ipv6_cidr_blocks, 0) - number_of_computed_ingress_with_prefix_list_ids = try(each.value.number_of_computed_ingress_with_prefix_list_ids, var.defaults.number_of_computed_ingress_with_prefix_list_ids, 0) - number_of_computed_ingress_with_self = try(each.value.number_of_computed_ingress_with_self, var.defaults.number_of_computed_ingress_with_self, 0) - number_of_computed_ingress_with_source_security_group_id = try(each.value.number_of_computed_ingress_with_source_security_group_id, var.defaults.number_of_computed_ingress_with_source_security_group_id, 0) - revoke_rules_on_delete = try(each.value.revoke_rules_on_delete, var.defaults.revoke_rules_on_delete, false) - tags = try(each.value.tags, var.defaults.tags, {}) - use_name_prefix = try(each.value.use_name_prefix, var.defaults.use_name_prefix, true) - vpc_id = try(each.value.vpc_id, var.defaults.vpc_id) + auto_computed_egress_rules = try(each.value.auto_computed_egress_rules, var.defaults.auto_computed_egress_rules, []) + auto_computed_egress_with_self = try(each.value.auto_computed_egress_with_self, var.defaults.auto_computed_egress_with_self, []) + auto_computed_ingress_rules = try(each.value.auto_computed_ingress_rules, var.defaults.auto_computed_ingress_rules, []) + auto_computed_ingress_with_self = try(each.value.auto_computed_ingress_with_self, var.defaults.auto_computed_ingress_with_self, []) + auto_egress_rules = try(each.value.auto_egress_rules, var.defaults.auto_egress_rules, ["all-all"]) + auto_egress_with_self = try(each.value.auto_egress_with_self, var.defaults.auto_egress_with_self, []) + auto_ingress_rules = try(each.value.auto_ingress_rules, var.defaults.auto_ingress_rules, ["solr-tcp"]) + auto_ingress_with_self = try(each.value.auto_ingress_with_self, var.defaults.auto_ingress_with_self, [{ "rule" = "all-all" }]) + auto_number_of_computed_egress_rules = try(each.value.auto_number_of_computed_egress_rules, var.defaults.auto_number_of_computed_egress_rules, 0) + auto_number_of_computed_egress_with_self = try(each.value.auto_number_of_computed_egress_with_self, var.defaults.auto_number_of_computed_egress_with_self, 0) + auto_number_of_computed_ingress_rules = try(each.value.auto_number_of_computed_ingress_rules, var.defaults.auto_number_of_computed_ingress_rules, 0) + auto_number_of_computed_ingress_with_self = try(each.value.auto_number_of_computed_ingress_with_self, var.defaults.auto_number_of_computed_ingress_with_self, 0) + computed_egress_cidr_blocks = try(each.value.computed_egress_cidr_blocks, var.defaults.computed_egress_cidr_blocks, ["0.0.0.0/0"]) + computed_egress_ipv6_cidr_blocks = try(each.value.computed_egress_ipv6_cidr_blocks, var.defaults.computed_egress_ipv6_cidr_blocks, ["::/0"]) + computed_egress_prefix_list_ids = try(each.value.computed_egress_prefix_list_ids, var.defaults.computed_egress_prefix_list_ids, []) + computed_egress_rules = try(each.value.computed_egress_rules, var.defaults.computed_egress_rules, []) + computed_egress_with_cidr_ipv4 = try(each.value.computed_egress_with_cidr_ipv4, var.defaults.computed_egress_with_cidr_ipv4, []) + computed_egress_with_cidr_ipv6 = try(each.value.computed_egress_with_cidr_ipv6, var.defaults.computed_egress_with_cidr_ipv6, []) + computed_egress_with_prefix_list_id = try(each.value.computed_egress_with_prefix_list_id, var.defaults.computed_egress_with_prefix_list_id, []) + computed_egress_with_referenced_security_group_id = try(each.value.computed_egress_with_referenced_security_group_id, var.defaults.computed_egress_with_referenced_security_group_id, []) + computed_egress_with_self = try(each.value.computed_egress_with_self, var.defaults.computed_egress_with_self, []) + computed_ingress_cidr_blocks = try(each.value.computed_ingress_cidr_blocks, var.defaults.computed_ingress_cidr_blocks, []) + computed_ingress_ipv6_cidr_blocks = try(each.value.computed_ingress_ipv6_cidr_blocks, var.defaults.computed_ingress_ipv6_cidr_blocks, []) + computed_ingress_prefix_list_ids = try(each.value.computed_ingress_prefix_list_ids, var.defaults.computed_ingress_prefix_list_ids, []) + computed_ingress_rules = try(each.value.computed_ingress_rules, var.defaults.computed_ingress_rules, []) + computed_ingress_with_cidr_ipv4 = try(each.value.computed_ingress_with_cidr_ipv4, var.defaults.computed_ingress_with_cidr_ipv4, []) + computed_ingress_with_cidr_ipv6 = try(each.value.computed_ingress_with_cidr_ipv6, var.defaults.computed_ingress_with_cidr_ipv6, []) + computed_ingress_with_prefix_list_id = try(each.value.computed_ingress_with_prefix_list_id, var.defaults.computed_ingress_with_prefix_list_id, []) + computed_ingress_with_referenced_security_group_id = try(each.value.computed_ingress_with_referenced_security_group_id, var.defaults.computed_ingress_with_referenced_security_group_id, []) + computed_ingress_with_self = try(each.value.computed_ingress_with_self, var.defaults.computed_ingress_with_self, []) + create = try(each.value.create, var.defaults.create, true) + description = try(each.value.description, var.defaults.description, "Security Group managed by Terraform") + egress_cidr_ipv4 = try(each.value.egress_cidr_ipv4, var.defaults.egress_cidr_ipv4, ["0.0.0.0/0"]) + egress_cidr_ipv6 = try(each.value.egress_cidr_ipv6, var.defaults.egress_cidr_ipv6, ["::/0"]) + egress_prefix_list_ids = try(each.value.egress_prefix_list_ids, var.defaults.egress_prefix_list_ids, []) + egress_rules = try(each.value.egress_rules, var.defaults.egress_rules, []) + egress_with_cidr_ipv4 = try(each.value.egress_with_cidr_ipv4, var.defaults.egress_with_cidr_ipv4, []) + egress_with_cidr_ipv6 = try(each.value.egress_with_cidr_ipv6, var.defaults.egress_with_cidr_ipv6, []) + egress_with_prefix_list_id = try(each.value.egress_with_prefix_list_id, var.defaults.egress_with_prefix_list_id, []) + egress_with_referenced_security_group_id = try(each.value.egress_with_referenced_security_group_id, var.defaults.egress_with_referenced_security_group_id, []) + egress_with_self = try(each.value.egress_with_self, var.defaults.egress_with_self, []) + ingress_cidr_ipv4 = try(each.value.ingress_cidr_ipv4, var.defaults.ingress_cidr_ipv4, []) + ingress_cidr_ipv6 = try(each.value.ingress_cidr_ipv6, var.defaults.ingress_cidr_ipv6, []) + ingress_prefix_list_ids = try(each.value.ingress_prefix_list_ids, var.defaults.ingress_prefix_list_ids, []) + ingress_rules = try(each.value.ingress_rules, var.defaults.ingress_rules, []) + ingress_with_cidr_ipv4 = try(each.value.ingress_with_cidr_ipv4, var.defaults.ingress_with_cidr_ipv4, []) + ingress_with_cidr_ipv6 = try(each.value.ingress_with_cidr_ipv6, var.defaults.ingress_with_cidr_ipv6, []) + ingress_with_prefix_list_id = try(each.value.ingress_with_prefix_list_id, var.defaults.ingress_with_prefix_list_id, []) + ingress_with_referenced_security_group_id = try(each.value.ingress_with_referenced_security_group_id, var.defaults.ingress_with_referenced_security_group_id, []) + ingress_with_self = try(each.value.ingress_with_self, var.defaults.ingress_with_self, []) + name = try(each.value.name, var.defaults.name) + number_of_computed_egress_cidr_blocks = try(each.value.number_of_computed_egress_cidr_blocks, var.defaults.number_of_computed_egress_cidr_blocks, 0) + number_of_computed_egress_ipv6_cidr_blocks = try(each.value.number_of_computed_egress_ipv6_cidr_blocks, var.defaults.number_of_computed_egress_ipv6_cidr_blocks, 0) + number_of_computed_egress_prefix_list_ids = try(each.value.number_of_computed_egress_prefix_list_ids, var.defaults.number_of_computed_egress_prefix_list_ids, 0) + number_of_computed_egress_rules = try(each.value.number_of_computed_egress_rules, var.defaults.number_of_computed_egress_rules, 0) + number_of_computed_egress_with_cidr_ipv4 = try(each.value.number_of_computed_egress_with_cidr_ipv4, var.defaults.number_of_computed_egress_with_cidr_ipv4, 0) + number_of_computed_egress_with_cidr_ipv6 = try(each.value.number_of_computed_egress_with_cidr_ipv6, var.defaults.number_of_computed_egress_with_cidr_ipv6, 0) + number_of_computed_egress_with_prefix_list_id = try(each.value.number_of_computed_egress_with_prefix_list_id, var.defaults.number_of_computed_egress_with_prefix_list_id, 0) + number_of_computed_egress_with_referenced_security_group_id = try(each.value.number_of_computed_egress_with_referenced_security_group_id, var.defaults.number_of_computed_egress_with_referenced_security_group_id, 0) + number_of_computed_egress_with_self = try(each.value.number_of_computed_egress_with_self, var.defaults.number_of_computed_egress_with_self, 0) + number_of_computed_ingress_cidr_blocks = try(each.value.number_of_computed_ingress_cidr_blocks, var.defaults.number_of_computed_ingress_cidr_blocks, 0) + number_of_computed_ingress_ipv6_cidr_blocks = try(each.value.number_of_computed_ingress_ipv6_cidr_blocks, var.defaults.number_of_computed_ingress_ipv6_cidr_blocks, 0) + number_of_computed_ingress_prefix_list_ids = try(each.value.number_of_computed_ingress_prefix_list_ids, var.defaults.number_of_computed_ingress_prefix_list_ids, 0) + number_of_computed_ingress_rules = try(each.value.number_of_computed_ingress_rules, var.defaults.number_of_computed_ingress_rules, 0) + number_of_computed_ingress_with_cidr_ipv4 = try(each.value.number_of_computed_ingress_with_cidr_ipv4, var.defaults.number_of_computed_ingress_with_cidr_ipv4, 0) + number_of_computed_ingress_with_cidr_ipv6 = try(each.value.number_of_computed_ingress_with_cidr_ipv6, var.defaults.number_of_computed_ingress_with_cidr_ipv6, 0) + number_of_computed_ingress_with_prefix_list_id = try(each.value.number_of_computed_ingress_with_prefix_list_id, var.defaults.number_of_computed_ingress_with_prefix_list_id, 0) + number_of_computed_ingress_with_referenced_security_group_id = try(each.value.number_of_computed_ingress_with_referenced_security_group_id, var.defaults.number_of_computed_ingress_with_referenced_security_group_id, 0) + number_of_computed_ingress_with_self = try(each.value.number_of_computed_ingress_with_self, var.defaults.number_of_computed_ingress_with_self, 0) + revoke_rules_on_delete = try(each.value.revoke_rules_on_delete, var.defaults.revoke_rules_on_delete, false) + tags = try(each.value.tags, var.defaults.tags, {}) + use_name_prefix = try(each.value.use_name_prefix, var.defaults.use_name_prefix, true) + vpc_id = try(each.value.vpc_id, var.defaults.vpc_id) } diff --git a/wrappers/splunk/main.tf b/wrappers/splunk/main.tf index eb894958..cddf2230 100644 --- a/wrappers/splunk/main.tf +++ b/wrappers/splunk/main.tf @@ -3,77 +3,77 @@ module "wrapper" { for_each = var.items - auto_computed_egress_rules = try(each.value.auto_computed_egress_rules, var.defaults.auto_computed_egress_rules, []) - auto_computed_egress_with_self = try(each.value.auto_computed_egress_with_self, var.defaults.auto_computed_egress_with_self, []) - auto_computed_ingress_rules = try(each.value.auto_computed_ingress_rules, var.defaults.auto_computed_ingress_rules, []) - auto_computed_ingress_with_self = try(each.value.auto_computed_ingress_with_self, var.defaults.auto_computed_ingress_with_self, []) - auto_egress_rules = try(each.value.auto_egress_rules, var.defaults.auto_egress_rules, ["all-all"]) - auto_egress_with_self = try(each.value.auto_egress_with_self, var.defaults.auto_egress_with_self, []) - auto_ingress_rules = try(each.value.auto_ingress_rules, var.defaults.auto_ingress_rules, ["splunk-indexer-tcp", "splunk-web-tcp", "splunk-splunkd-tcp", "splunk-hec-tcp"]) - auto_ingress_with_self = try(each.value.auto_ingress_with_self, var.defaults.auto_ingress_with_self, [{ "rule" = "all-all" }]) - auto_number_of_computed_egress_rules = try(each.value.auto_number_of_computed_egress_rules, var.defaults.auto_number_of_computed_egress_rules, 0) - auto_number_of_computed_egress_with_self = try(each.value.auto_number_of_computed_egress_with_self, var.defaults.auto_number_of_computed_egress_with_self, 0) - auto_number_of_computed_ingress_rules = try(each.value.auto_number_of_computed_ingress_rules, var.defaults.auto_number_of_computed_ingress_rules, 0) - auto_number_of_computed_ingress_with_self = try(each.value.auto_number_of_computed_ingress_with_self, var.defaults.auto_number_of_computed_ingress_with_self, 0) - computed_egress_cidr_blocks = try(each.value.computed_egress_cidr_blocks, var.defaults.computed_egress_cidr_blocks, ["0.0.0.0/0"]) - computed_egress_ipv6_cidr_blocks = try(each.value.computed_egress_ipv6_cidr_blocks, var.defaults.computed_egress_ipv6_cidr_blocks, ["::/0"]) - computed_egress_prefix_list_ids = try(each.value.computed_egress_prefix_list_ids, var.defaults.computed_egress_prefix_list_ids, []) - computed_egress_rules = try(each.value.computed_egress_rules, var.defaults.computed_egress_rules, []) - computed_egress_with_cidr_blocks = try(each.value.computed_egress_with_cidr_blocks, var.defaults.computed_egress_with_cidr_blocks, []) - computed_egress_with_ipv6_cidr_blocks = try(each.value.computed_egress_with_ipv6_cidr_blocks, var.defaults.computed_egress_with_ipv6_cidr_blocks, []) - computed_egress_with_prefix_list_ids = try(each.value.computed_egress_with_prefix_list_ids, var.defaults.computed_egress_with_prefix_list_ids, []) - computed_egress_with_self = try(each.value.computed_egress_with_self, var.defaults.computed_egress_with_self, []) - computed_egress_with_source_security_group_id = try(each.value.computed_egress_with_source_security_group_id, var.defaults.computed_egress_with_source_security_group_id, []) - computed_ingress_cidr_blocks = try(each.value.computed_ingress_cidr_blocks, var.defaults.computed_ingress_cidr_blocks, []) - computed_ingress_ipv6_cidr_blocks = try(each.value.computed_ingress_ipv6_cidr_blocks, var.defaults.computed_ingress_ipv6_cidr_blocks, []) - computed_ingress_prefix_list_ids = try(each.value.computed_ingress_prefix_list_ids, var.defaults.computed_ingress_prefix_list_ids, []) - computed_ingress_rules = try(each.value.computed_ingress_rules, var.defaults.computed_ingress_rules, []) - computed_ingress_with_cidr_blocks = try(each.value.computed_ingress_with_cidr_blocks, var.defaults.computed_ingress_with_cidr_blocks, []) - computed_ingress_with_ipv6_cidr_blocks = try(each.value.computed_ingress_with_ipv6_cidr_blocks, var.defaults.computed_ingress_with_ipv6_cidr_blocks, []) - computed_ingress_with_prefix_list_ids = try(each.value.computed_ingress_with_prefix_list_ids, var.defaults.computed_ingress_with_prefix_list_ids, []) - computed_ingress_with_self = try(each.value.computed_ingress_with_self, var.defaults.computed_ingress_with_self, []) - computed_ingress_with_source_security_group_id = try(each.value.computed_ingress_with_source_security_group_id, var.defaults.computed_ingress_with_source_security_group_id, []) - create = try(each.value.create, var.defaults.create, true) - description = try(each.value.description, var.defaults.description, "Security Group managed by Terraform") - egress_cidr_blocks = try(each.value.egress_cidr_blocks, var.defaults.egress_cidr_blocks, ["0.0.0.0/0"]) - egress_ipv6_cidr_blocks = try(each.value.egress_ipv6_cidr_blocks, var.defaults.egress_ipv6_cidr_blocks, ["::/0"]) - egress_prefix_list_ids = try(each.value.egress_prefix_list_ids, var.defaults.egress_prefix_list_ids, []) - egress_rules = try(each.value.egress_rules, var.defaults.egress_rules, []) - egress_with_cidr_blocks = try(each.value.egress_with_cidr_blocks, var.defaults.egress_with_cidr_blocks, []) - egress_with_ipv6_cidr_blocks = try(each.value.egress_with_ipv6_cidr_blocks, var.defaults.egress_with_ipv6_cidr_blocks, []) - egress_with_prefix_list_ids = try(each.value.egress_with_prefix_list_ids, var.defaults.egress_with_prefix_list_ids, []) - egress_with_self = try(each.value.egress_with_self, var.defaults.egress_with_self, []) - egress_with_source_security_group_id = try(each.value.egress_with_source_security_group_id, var.defaults.egress_with_source_security_group_id, []) - ingress_cidr_blocks = try(each.value.ingress_cidr_blocks, var.defaults.ingress_cidr_blocks, []) - ingress_ipv6_cidr_blocks = try(each.value.ingress_ipv6_cidr_blocks, var.defaults.ingress_ipv6_cidr_blocks, []) - ingress_prefix_list_ids = try(each.value.ingress_prefix_list_ids, var.defaults.ingress_prefix_list_ids, []) - ingress_rules = try(each.value.ingress_rules, var.defaults.ingress_rules, []) - ingress_with_cidr_blocks = try(each.value.ingress_with_cidr_blocks, var.defaults.ingress_with_cidr_blocks, []) - ingress_with_ipv6_cidr_blocks = try(each.value.ingress_with_ipv6_cidr_blocks, var.defaults.ingress_with_ipv6_cidr_blocks, []) - ingress_with_prefix_list_ids = try(each.value.ingress_with_prefix_list_ids, var.defaults.ingress_with_prefix_list_ids, []) - ingress_with_self = try(each.value.ingress_with_self, var.defaults.ingress_with_self, []) - ingress_with_source_security_group_id = try(each.value.ingress_with_source_security_group_id, var.defaults.ingress_with_source_security_group_id, []) - name = try(each.value.name, var.defaults.name) - number_of_computed_egress_cidr_blocks = try(each.value.number_of_computed_egress_cidr_blocks, var.defaults.number_of_computed_egress_cidr_blocks, 0) - number_of_computed_egress_ipv6_cidr_blocks = try(each.value.number_of_computed_egress_ipv6_cidr_blocks, var.defaults.number_of_computed_egress_ipv6_cidr_blocks, 0) - number_of_computed_egress_prefix_list_ids = try(each.value.number_of_computed_egress_prefix_list_ids, var.defaults.number_of_computed_egress_prefix_list_ids, 0) - number_of_computed_egress_rules = try(each.value.number_of_computed_egress_rules, var.defaults.number_of_computed_egress_rules, 0) - number_of_computed_egress_with_cidr_blocks = try(each.value.number_of_computed_egress_with_cidr_blocks, var.defaults.number_of_computed_egress_with_cidr_blocks, 0) - number_of_computed_egress_with_ipv6_cidr_blocks = try(each.value.number_of_computed_egress_with_ipv6_cidr_blocks, var.defaults.number_of_computed_egress_with_ipv6_cidr_blocks, 0) - number_of_computed_egress_with_prefix_list_ids = try(each.value.number_of_computed_egress_with_prefix_list_ids, var.defaults.number_of_computed_egress_with_prefix_list_ids, 0) - number_of_computed_egress_with_self = try(each.value.number_of_computed_egress_with_self, var.defaults.number_of_computed_egress_with_self, 0) - number_of_computed_egress_with_source_security_group_id = try(each.value.number_of_computed_egress_with_source_security_group_id, var.defaults.number_of_computed_egress_with_source_security_group_id, 0) - number_of_computed_ingress_cidr_blocks = try(each.value.number_of_computed_ingress_cidr_blocks, var.defaults.number_of_computed_ingress_cidr_blocks, 0) - number_of_computed_ingress_ipv6_cidr_blocks = try(each.value.number_of_computed_ingress_ipv6_cidr_blocks, var.defaults.number_of_computed_ingress_ipv6_cidr_blocks, 0) - number_of_computed_ingress_prefix_list_ids = try(each.value.number_of_computed_ingress_prefix_list_ids, var.defaults.number_of_computed_ingress_prefix_list_ids, 0) - number_of_computed_ingress_rules = try(each.value.number_of_computed_ingress_rules, var.defaults.number_of_computed_ingress_rules, 0) - number_of_computed_ingress_with_cidr_blocks = try(each.value.number_of_computed_ingress_with_cidr_blocks, var.defaults.number_of_computed_ingress_with_cidr_blocks, 0) - number_of_computed_ingress_with_ipv6_cidr_blocks = try(each.value.number_of_computed_ingress_with_ipv6_cidr_blocks, var.defaults.number_of_computed_ingress_with_ipv6_cidr_blocks, 0) - number_of_computed_ingress_with_prefix_list_ids = try(each.value.number_of_computed_ingress_with_prefix_list_ids, var.defaults.number_of_computed_ingress_with_prefix_list_ids, 0) - number_of_computed_ingress_with_self = try(each.value.number_of_computed_ingress_with_self, var.defaults.number_of_computed_ingress_with_self, 0) - number_of_computed_ingress_with_source_security_group_id = try(each.value.number_of_computed_ingress_with_source_security_group_id, var.defaults.number_of_computed_ingress_with_source_security_group_id, 0) - revoke_rules_on_delete = try(each.value.revoke_rules_on_delete, var.defaults.revoke_rules_on_delete, false) - tags = try(each.value.tags, var.defaults.tags, {}) - use_name_prefix = try(each.value.use_name_prefix, var.defaults.use_name_prefix, true) - vpc_id = try(each.value.vpc_id, var.defaults.vpc_id) + auto_computed_egress_rules = try(each.value.auto_computed_egress_rules, var.defaults.auto_computed_egress_rules, []) + auto_computed_egress_with_self = try(each.value.auto_computed_egress_with_self, var.defaults.auto_computed_egress_with_self, []) + auto_computed_ingress_rules = try(each.value.auto_computed_ingress_rules, var.defaults.auto_computed_ingress_rules, []) + auto_computed_ingress_with_self = try(each.value.auto_computed_ingress_with_self, var.defaults.auto_computed_ingress_with_self, []) + auto_egress_rules = try(each.value.auto_egress_rules, var.defaults.auto_egress_rules, ["all-all"]) + auto_egress_with_self = try(each.value.auto_egress_with_self, var.defaults.auto_egress_with_self, []) + auto_ingress_rules = try(each.value.auto_ingress_rules, var.defaults.auto_ingress_rules, ["splunk-indexer-tcp", "splunk-web-tcp", "splunk-splunkd-tcp", "splunk-hec-tcp"]) + auto_ingress_with_self = try(each.value.auto_ingress_with_self, var.defaults.auto_ingress_with_self, [{ "rule" = "all-all" }]) + auto_number_of_computed_egress_rules = try(each.value.auto_number_of_computed_egress_rules, var.defaults.auto_number_of_computed_egress_rules, 0) + auto_number_of_computed_egress_with_self = try(each.value.auto_number_of_computed_egress_with_self, var.defaults.auto_number_of_computed_egress_with_self, 0) + auto_number_of_computed_ingress_rules = try(each.value.auto_number_of_computed_ingress_rules, var.defaults.auto_number_of_computed_ingress_rules, 0) + auto_number_of_computed_ingress_with_self = try(each.value.auto_number_of_computed_ingress_with_self, var.defaults.auto_number_of_computed_ingress_with_self, 0) + computed_egress_cidr_blocks = try(each.value.computed_egress_cidr_blocks, var.defaults.computed_egress_cidr_blocks, ["0.0.0.0/0"]) + computed_egress_ipv6_cidr_blocks = try(each.value.computed_egress_ipv6_cidr_blocks, var.defaults.computed_egress_ipv6_cidr_blocks, ["::/0"]) + computed_egress_prefix_list_ids = try(each.value.computed_egress_prefix_list_ids, var.defaults.computed_egress_prefix_list_ids, []) + computed_egress_rules = try(each.value.computed_egress_rules, var.defaults.computed_egress_rules, []) + computed_egress_with_cidr_ipv4 = try(each.value.computed_egress_with_cidr_ipv4, var.defaults.computed_egress_with_cidr_ipv4, []) + computed_egress_with_cidr_ipv6 = try(each.value.computed_egress_with_cidr_ipv6, var.defaults.computed_egress_with_cidr_ipv6, []) + computed_egress_with_prefix_list_id = try(each.value.computed_egress_with_prefix_list_id, var.defaults.computed_egress_with_prefix_list_id, []) + computed_egress_with_referenced_security_group_id = try(each.value.computed_egress_with_referenced_security_group_id, var.defaults.computed_egress_with_referenced_security_group_id, []) + computed_egress_with_self = try(each.value.computed_egress_with_self, var.defaults.computed_egress_with_self, []) + computed_ingress_cidr_blocks = try(each.value.computed_ingress_cidr_blocks, var.defaults.computed_ingress_cidr_blocks, []) + computed_ingress_ipv6_cidr_blocks = try(each.value.computed_ingress_ipv6_cidr_blocks, var.defaults.computed_ingress_ipv6_cidr_blocks, []) + computed_ingress_prefix_list_ids = try(each.value.computed_ingress_prefix_list_ids, var.defaults.computed_ingress_prefix_list_ids, []) + computed_ingress_rules = try(each.value.computed_ingress_rules, var.defaults.computed_ingress_rules, []) + computed_ingress_with_cidr_ipv4 = try(each.value.computed_ingress_with_cidr_ipv4, var.defaults.computed_ingress_with_cidr_ipv4, []) + computed_ingress_with_cidr_ipv6 = try(each.value.computed_ingress_with_cidr_ipv6, var.defaults.computed_ingress_with_cidr_ipv6, []) + computed_ingress_with_prefix_list_id = try(each.value.computed_ingress_with_prefix_list_id, var.defaults.computed_ingress_with_prefix_list_id, []) + computed_ingress_with_referenced_security_group_id = try(each.value.computed_ingress_with_referenced_security_group_id, var.defaults.computed_ingress_with_referenced_security_group_id, []) + computed_ingress_with_self = try(each.value.computed_ingress_with_self, var.defaults.computed_ingress_with_self, []) + create = try(each.value.create, var.defaults.create, true) + description = try(each.value.description, var.defaults.description, "Security Group managed by Terraform") + egress_cidr_ipv4 = try(each.value.egress_cidr_ipv4, var.defaults.egress_cidr_ipv4, ["0.0.0.0/0"]) + egress_cidr_ipv6 = try(each.value.egress_cidr_ipv6, var.defaults.egress_cidr_ipv6, ["::/0"]) + egress_prefix_list_ids = try(each.value.egress_prefix_list_ids, var.defaults.egress_prefix_list_ids, []) + egress_rules = try(each.value.egress_rules, var.defaults.egress_rules, []) + egress_with_cidr_ipv4 = try(each.value.egress_with_cidr_ipv4, var.defaults.egress_with_cidr_ipv4, []) + egress_with_cidr_ipv6 = try(each.value.egress_with_cidr_ipv6, var.defaults.egress_with_cidr_ipv6, []) + egress_with_prefix_list_id = try(each.value.egress_with_prefix_list_id, var.defaults.egress_with_prefix_list_id, []) + egress_with_referenced_security_group_id = try(each.value.egress_with_referenced_security_group_id, var.defaults.egress_with_referenced_security_group_id, []) + egress_with_self = try(each.value.egress_with_self, var.defaults.egress_with_self, []) + ingress_cidr_ipv4 = try(each.value.ingress_cidr_ipv4, var.defaults.ingress_cidr_ipv4, []) + ingress_cidr_ipv6 = try(each.value.ingress_cidr_ipv6, var.defaults.ingress_cidr_ipv6, []) + ingress_prefix_list_ids = try(each.value.ingress_prefix_list_ids, var.defaults.ingress_prefix_list_ids, []) + ingress_rules = try(each.value.ingress_rules, var.defaults.ingress_rules, []) + ingress_with_cidr_ipv4 = try(each.value.ingress_with_cidr_ipv4, var.defaults.ingress_with_cidr_ipv4, []) + ingress_with_cidr_ipv6 = try(each.value.ingress_with_cidr_ipv6, var.defaults.ingress_with_cidr_ipv6, []) + ingress_with_prefix_list_id = try(each.value.ingress_with_prefix_list_id, var.defaults.ingress_with_prefix_list_id, []) + ingress_with_referenced_security_group_id = try(each.value.ingress_with_referenced_security_group_id, var.defaults.ingress_with_referenced_security_group_id, []) + ingress_with_self = try(each.value.ingress_with_self, var.defaults.ingress_with_self, []) + name = try(each.value.name, var.defaults.name) + number_of_computed_egress_cidr_blocks = try(each.value.number_of_computed_egress_cidr_blocks, var.defaults.number_of_computed_egress_cidr_blocks, 0) + number_of_computed_egress_ipv6_cidr_blocks = try(each.value.number_of_computed_egress_ipv6_cidr_blocks, var.defaults.number_of_computed_egress_ipv6_cidr_blocks, 0) + number_of_computed_egress_prefix_list_ids = try(each.value.number_of_computed_egress_prefix_list_ids, var.defaults.number_of_computed_egress_prefix_list_ids, 0) + number_of_computed_egress_rules = try(each.value.number_of_computed_egress_rules, var.defaults.number_of_computed_egress_rules, 0) + number_of_computed_egress_with_cidr_ipv4 = try(each.value.number_of_computed_egress_with_cidr_ipv4, var.defaults.number_of_computed_egress_with_cidr_ipv4, 0) + number_of_computed_egress_with_cidr_ipv6 = try(each.value.number_of_computed_egress_with_cidr_ipv6, var.defaults.number_of_computed_egress_with_cidr_ipv6, 0) + number_of_computed_egress_with_prefix_list_id = try(each.value.number_of_computed_egress_with_prefix_list_id, var.defaults.number_of_computed_egress_with_prefix_list_id, 0) + number_of_computed_egress_with_referenced_security_group_id = try(each.value.number_of_computed_egress_with_referenced_security_group_id, var.defaults.number_of_computed_egress_with_referenced_security_group_id, 0) + number_of_computed_egress_with_self = try(each.value.number_of_computed_egress_with_self, var.defaults.number_of_computed_egress_with_self, 0) + number_of_computed_ingress_cidr_blocks = try(each.value.number_of_computed_ingress_cidr_blocks, var.defaults.number_of_computed_ingress_cidr_blocks, 0) + number_of_computed_ingress_ipv6_cidr_blocks = try(each.value.number_of_computed_ingress_ipv6_cidr_blocks, var.defaults.number_of_computed_ingress_ipv6_cidr_blocks, 0) + number_of_computed_ingress_prefix_list_ids = try(each.value.number_of_computed_ingress_prefix_list_ids, var.defaults.number_of_computed_ingress_prefix_list_ids, 0) + number_of_computed_ingress_rules = try(each.value.number_of_computed_ingress_rules, var.defaults.number_of_computed_ingress_rules, 0) + number_of_computed_ingress_with_cidr_ipv4 = try(each.value.number_of_computed_ingress_with_cidr_ipv4, var.defaults.number_of_computed_ingress_with_cidr_ipv4, 0) + number_of_computed_ingress_with_cidr_ipv6 = try(each.value.number_of_computed_ingress_with_cidr_ipv6, var.defaults.number_of_computed_ingress_with_cidr_ipv6, 0) + number_of_computed_ingress_with_prefix_list_id = try(each.value.number_of_computed_ingress_with_prefix_list_id, var.defaults.number_of_computed_ingress_with_prefix_list_id, 0) + number_of_computed_ingress_with_referenced_security_group_id = try(each.value.number_of_computed_ingress_with_referenced_security_group_id, var.defaults.number_of_computed_ingress_with_referenced_security_group_id, 0) + number_of_computed_ingress_with_self = try(each.value.number_of_computed_ingress_with_self, var.defaults.number_of_computed_ingress_with_self, 0) + revoke_rules_on_delete = try(each.value.revoke_rules_on_delete, var.defaults.revoke_rules_on_delete, false) + tags = try(each.value.tags, var.defaults.tags, {}) + use_name_prefix = try(each.value.use_name_prefix, var.defaults.use_name_prefix, true) + vpc_id = try(each.value.vpc_id, var.defaults.vpc_id) } diff --git a/wrappers/squid/main.tf b/wrappers/squid/main.tf index 71f444a8..85d7eed7 100644 --- a/wrappers/squid/main.tf +++ b/wrappers/squid/main.tf @@ -3,77 +3,77 @@ module "wrapper" { for_each = var.items - auto_computed_egress_rules = try(each.value.auto_computed_egress_rules, var.defaults.auto_computed_egress_rules, []) - auto_computed_egress_with_self = try(each.value.auto_computed_egress_with_self, var.defaults.auto_computed_egress_with_self, []) - auto_computed_ingress_rules = try(each.value.auto_computed_ingress_rules, var.defaults.auto_computed_ingress_rules, []) - auto_computed_ingress_with_self = try(each.value.auto_computed_ingress_with_self, var.defaults.auto_computed_ingress_with_self, []) - auto_egress_rules = try(each.value.auto_egress_rules, var.defaults.auto_egress_rules, ["all-all"]) - auto_egress_with_self = try(each.value.auto_egress_with_self, var.defaults.auto_egress_with_self, []) - auto_ingress_rules = try(each.value.auto_ingress_rules, var.defaults.auto_ingress_rules, ["squid-proxy-tcp"]) - auto_ingress_with_self = try(each.value.auto_ingress_with_self, var.defaults.auto_ingress_with_self, [{ "rule" = "all-all" }]) - auto_number_of_computed_egress_rules = try(each.value.auto_number_of_computed_egress_rules, var.defaults.auto_number_of_computed_egress_rules, 0) - auto_number_of_computed_egress_with_self = try(each.value.auto_number_of_computed_egress_with_self, var.defaults.auto_number_of_computed_egress_with_self, 0) - auto_number_of_computed_ingress_rules = try(each.value.auto_number_of_computed_ingress_rules, var.defaults.auto_number_of_computed_ingress_rules, 0) - auto_number_of_computed_ingress_with_self = try(each.value.auto_number_of_computed_ingress_with_self, var.defaults.auto_number_of_computed_ingress_with_self, 0) - computed_egress_cidr_blocks = try(each.value.computed_egress_cidr_blocks, var.defaults.computed_egress_cidr_blocks, ["0.0.0.0/0"]) - computed_egress_ipv6_cidr_blocks = try(each.value.computed_egress_ipv6_cidr_blocks, var.defaults.computed_egress_ipv6_cidr_blocks, ["::/0"]) - computed_egress_prefix_list_ids = try(each.value.computed_egress_prefix_list_ids, var.defaults.computed_egress_prefix_list_ids, []) - computed_egress_rules = try(each.value.computed_egress_rules, var.defaults.computed_egress_rules, []) - computed_egress_with_cidr_blocks = try(each.value.computed_egress_with_cidr_blocks, var.defaults.computed_egress_with_cidr_blocks, []) - computed_egress_with_ipv6_cidr_blocks = try(each.value.computed_egress_with_ipv6_cidr_blocks, var.defaults.computed_egress_with_ipv6_cidr_blocks, []) - computed_egress_with_prefix_list_ids = try(each.value.computed_egress_with_prefix_list_ids, var.defaults.computed_egress_with_prefix_list_ids, []) - computed_egress_with_self = try(each.value.computed_egress_with_self, var.defaults.computed_egress_with_self, []) - computed_egress_with_source_security_group_id = try(each.value.computed_egress_with_source_security_group_id, var.defaults.computed_egress_with_source_security_group_id, []) - computed_ingress_cidr_blocks = try(each.value.computed_ingress_cidr_blocks, var.defaults.computed_ingress_cidr_blocks, []) - computed_ingress_ipv6_cidr_blocks = try(each.value.computed_ingress_ipv6_cidr_blocks, var.defaults.computed_ingress_ipv6_cidr_blocks, []) - computed_ingress_prefix_list_ids = try(each.value.computed_ingress_prefix_list_ids, var.defaults.computed_ingress_prefix_list_ids, []) - computed_ingress_rules = try(each.value.computed_ingress_rules, var.defaults.computed_ingress_rules, []) - computed_ingress_with_cidr_blocks = try(each.value.computed_ingress_with_cidr_blocks, var.defaults.computed_ingress_with_cidr_blocks, []) - computed_ingress_with_ipv6_cidr_blocks = try(each.value.computed_ingress_with_ipv6_cidr_blocks, var.defaults.computed_ingress_with_ipv6_cidr_blocks, []) - computed_ingress_with_prefix_list_ids = try(each.value.computed_ingress_with_prefix_list_ids, var.defaults.computed_ingress_with_prefix_list_ids, []) - computed_ingress_with_self = try(each.value.computed_ingress_with_self, var.defaults.computed_ingress_with_self, []) - computed_ingress_with_source_security_group_id = try(each.value.computed_ingress_with_source_security_group_id, var.defaults.computed_ingress_with_source_security_group_id, []) - create = try(each.value.create, var.defaults.create, true) - description = try(each.value.description, var.defaults.description, "Security Group managed by Terraform") - egress_cidr_blocks = try(each.value.egress_cidr_blocks, var.defaults.egress_cidr_blocks, ["0.0.0.0/0"]) - egress_ipv6_cidr_blocks = try(each.value.egress_ipv6_cidr_blocks, var.defaults.egress_ipv6_cidr_blocks, ["::/0"]) - egress_prefix_list_ids = try(each.value.egress_prefix_list_ids, var.defaults.egress_prefix_list_ids, []) - egress_rules = try(each.value.egress_rules, var.defaults.egress_rules, []) - egress_with_cidr_blocks = try(each.value.egress_with_cidr_blocks, var.defaults.egress_with_cidr_blocks, []) - egress_with_ipv6_cidr_blocks = try(each.value.egress_with_ipv6_cidr_blocks, var.defaults.egress_with_ipv6_cidr_blocks, []) - egress_with_prefix_list_ids = try(each.value.egress_with_prefix_list_ids, var.defaults.egress_with_prefix_list_ids, []) - egress_with_self = try(each.value.egress_with_self, var.defaults.egress_with_self, []) - egress_with_source_security_group_id = try(each.value.egress_with_source_security_group_id, var.defaults.egress_with_source_security_group_id, []) - ingress_cidr_blocks = try(each.value.ingress_cidr_blocks, var.defaults.ingress_cidr_blocks, []) - ingress_ipv6_cidr_blocks = try(each.value.ingress_ipv6_cidr_blocks, var.defaults.ingress_ipv6_cidr_blocks, []) - ingress_prefix_list_ids = try(each.value.ingress_prefix_list_ids, var.defaults.ingress_prefix_list_ids, []) - ingress_rules = try(each.value.ingress_rules, var.defaults.ingress_rules, []) - ingress_with_cidr_blocks = try(each.value.ingress_with_cidr_blocks, var.defaults.ingress_with_cidr_blocks, []) - ingress_with_ipv6_cidr_blocks = try(each.value.ingress_with_ipv6_cidr_blocks, var.defaults.ingress_with_ipv6_cidr_blocks, []) - ingress_with_prefix_list_ids = try(each.value.ingress_with_prefix_list_ids, var.defaults.ingress_with_prefix_list_ids, []) - ingress_with_self = try(each.value.ingress_with_self, var.defaults.ingress_with_self, []) - ingress_with_source_security_group_id = try(each.value.ingress_with_source_security_group_id, var.defaults.ingress_with_source_security_group_id, []) - name = try(each.value.name, var.defaults.name) - number_of_computed_egress_cidr_blocks = try(each.value.number_of_computed_egress_cidr_blocks, var.defaults.number_of_computed_egress_cidr_blocks, 0) - number_of_computed_egress_ipv6_cidr_blocks = try(each.value.number_of_computed_egress_ipv6_cidr_blocks, var.defaults.number_of_computed_egress_ipv6_cidr_blocks, 0) - number_of_computed_egress_prefix_list_ids = try(each.value.number_of_computed_egress_prefix_list_ids, var.defaults.number_of_computed_egress_prefix_list_ids, 0) - number_of_computed_egress_rules = try(each.value.number_of_computed_egress_rules, var.defaults.number_of_computed_egress_rules, 0) - number_of_computed_egress_with_cidr_blocks = try(each.value.number_of_computed_egress_with_cidr_blocks, var.defaults.number_of_computed_egress_with_cidr_blocks, 0) - number_of_computed_egress_with_ipv6_cidr_blocks = try(each.value.number_of_computed_egress_with_ipv6_cidr_blocks, var.defaults.number_of_computed_egress_with_ipv6_cidr_blocks, 0) - number_of_computed_egress_with_prefix_list_ids = try(each.value.number_of_computed_egress_with_prefix_list_ids, var.defaults.number_of_computed_egress_with_prefix_list_ids, 0) - number_of_computed_egress_with_self = try(each.value.number_of_computed_egress_with_self, var.defaults.number_of_computed_egress_with_self, 0) - number_of_computed_egress_with_source_security_group_id = try(each.value.number_of_computed_egress_with_source_security_group_id, var.defaults.number_of_computed_egress_with_source_security_group_id, 0) - number_of_computed_ingress_cidr_blocks = try(each.value.number_of_computed_ingress_cidr_blocks, var.defaults.number_of_computed_ingress_cidr_blocks, 0) - number_of_computed_ingress_ipv6_cidr_blocks = try(each.value.number_of_computed_ingress_ipv6_cidr_blocks, var.defaults.number_of_computed_ingress_ipv6_cidr_blocks, 0) - number_of_computed_ingress_prefix_list_ids = try(each.value.number_of_computed_ingress_prefix_list_ids, var.defaults.number_of_computed_ingress_prefix_list_ids, 0) - number_of_computed_ingress_rules = try(each.value.number_of_computed_ingress_rules, var.defaults.number_of_computed_ingress_rules, 0) - number_of_computed_ingress_with_cidr_blocks = try(each.value.number_of_computed_ingress_with_cidr_blocks, var.defaults.number_of_computed_ingress_with_cidr_blocks, 0) - number_of_computed_ingress_with_ipv6_cidr_blocks = try(each.value.number_of_computed_ingress_with_ipv6_cidr_blocks, var.defaults.number_of_computed_ingress_with_ipv6_cidr_blocks, 0) - number_of_computed_ingress_with_prefix_list_ids = try(each.value.number_of_computed_ingress_with_prefix_list_ids, var.defaults.number_of_computed_ingress_with_prefix_list_ids, 0) - number_of_computed_ingress_with_self = try(each.value.number_of_computed_ingress_with_self, var.defaults.number_of_computed_ingress_with_self, 0) - number_of_computed_ingress_with_source_security_group_id = try(each.value.number_of_computed_ingress_with_source_security_group_id, var.defaults.number_of_computed_ingress_with_source_security_group_id, 0) - revoke_rules_on_delete = try(each.value.revoke_rules_on_delete, var.defaults.revoke_rules_on_delete, false) - tags = try(each.value.tags, var.defaults.tags, {}) - use_name_prefix = try(each.value.use_name_prefix, var.defaults.use_name_prefix, true) - vpc_id = try(each.value.vpc_id, var.defaults.vpc_id) + auto_computed_egress_rules = try(each.value.auto_computed_egress_rules, var.defaults.auto_computed_egress_rules, []) + auto_computed_egress_with_self = try(each.value.auto_computed_egress_with_self, var.defaults.auto_computed_egress_with_self, []) + auto_computed_ingress_rules = try(each.value.auto_computed_ingress_rules, var.defaults.auto_computed_ingress_rules, []) + auto_computed_ingress_with_self = try(each.value.auto_computed_ingress_with_self, var.defaults.auto_computed_ingress_with_self, []) + auto_egress_rules = try(each.value.auto_egress_rules, var.defaults.auto_egress_rules, ["all-all"]) + auto_egress_with_self = try(each.value.auto_egress_with_self, var.defaults.auto_egress_with_self, []) + auto_ingress_rules = try(each.value.auto_ingress_rules, var.defaults.auto_ingress_rules, ["squid-proxy-tcp"]) + auto_ingress_with_self = try(each.value.auto_ingress_with_self, var.defaults.auto_ingress_with_self, [{ "rule" = "all-all" }]) + auto_number_of_computed_egress_rules = try(each.value.auto_number_of_computed_egress_rules, var.defaults.auto_number_of_computed_egress_rules, 0) + auto_number_of_computed_egress_with_self = try(each.value.auto_number_of_computed_egress_with_self, var.defaults.auto_number_of_computed_egress_with_self, 0) + auto_number_of_computed_ingress_rules = try(each.value.auto_number_of_computed_ingress_rules, var.defaults.auto_number_of_computed_ingress_rules, 0) + auto_number_of_computed_ingress_with_self = try(each.value.auto_number_of_computed_ingress_with_self, var.defaults.auto_number_of_computed_ingress_with_self, 0) + computed_egress_cidr_blocks = try(each.value.computed_egress_cidr_blocks, var.defaults.computed_egress_cidr_blocks, ["0.0.0.0/0"]) + computed_egress_ipv6_cidr_blocks = try(each.value.computed_egress_ipv6_cidr_blocks, var.defaults.computed_egress_ipv6_cidr_blocks, ["::/0"]) + computed_egress_prefix_list_ids = try(each.value.computed_egress_prefix_list_ids, var.defaults.computed_egress_prefix_list_ids, []) + computed_egress_rules = try(each.value.computed_egress_rules, var.defaults.computed_egress_rules, []) + computed_egress_with_cidr_ipv4 = try(each.value.computed_egress_with_cidr_ipv4, var.defaults.computed_egress_with_cidr_ipv4, []) + computed_egress_with_cidr_ipv6 = try(each.value.computed_egress_with_cidr_ipv6, var.defaults.computed_egress_with_cidr_ipv6, []) + computed_egress_with_prefix_list_id = try(each.value.computed_egress_with_prefix_list_id, var.defaults.computed_egress_with_prefix_list_id, []) + computed_egress_with_referenced_security_group_id = try(each.value.computed_egress_with_referenced_security_group_id, var.defaults.computed_egress_with_referenced_security_group_id, []) + computed_egress_with_self = try(each.value.computed_egress_with_self, var.defaults.computed_egress_with_self, []) + computed_ingress_cidr_blocks = try(each.value.computed_ingress_cidr_blocks, var.defaults.computed_ingress_cidr_blocks, []) + computed_ingress_ipv6_cidr_blocks = try(each.value.computed_ingress_ipv6_cidr_blocks, var.defaults.computed_ingress_ipv6_cidr_blocks, []) + computed_ingress_prefix_list_ids = try(each.value.computed_ingress_prefix_list_ids, var.defaults.computed_ingress_prefix_list_ids, []) + computed_ingress_rules = try(each.value.computed_ingress_rules, var.defaults.computed_ingress_rules, []) + computed_ingress_with_cidr_ipv4 = try(each.value.computed_ingress_with_cidr_ipv4, var.defaults.computed_ingress_with_cidr_ipv4, []) + computed_ingress_with_cidr_ipv6 = try(each.value.computed_ingress_with_cidr_ipv6, var.defaults.computed_ingress_with_cidr_ipv6, []) + computed_ingress_with_prefix_list_id = try(each.value.computed_ingress_with_prefix_list_id, var.defaults.computed_ingress_with_prefix_list_id, []) + computed_ingress_with_referenced_security_group_id = try(each.value.computed_ingress_with_referenced_security_group_id, var.defaults.computed_ingress_with_referenced_security_group_id, []) + computed_ingress_with_self = try(each.value.computed_ingress_with_self, var.defaults.computed_ingress_with_self, []) + create = try(each.value.create, var.defaults.create, true) + description = try(each.value.description, var.defaults.description, "Security Group managed by Terraform") + egress_cidr_ipv4 = try(each.value.egress_cidr_ipv4, var.defaults.egress_cidr_ipv4, ["0.0.0.0/0"]) + egress_cidr_ipv6 = try(each.value.egress_cidr_ipv6, var.defaults.egress_cidr_ipv6, ["::/0"]) + egress_prefix_list_ids = try(each.value.egress_prefix_list_ids, var.defaults.egress_prefix_list_ids, []) + egress_rules = try(each.value.egress_rules, var.defaults.egress_rules, []) + egress_with_cidr_ipv4 = try(each.value.egress_with_cidr_ipv4, var.defaults.egress_with_cidr_ipv4, []) + egress_with_cidr_ipv6 = try(each.value.egress_with_cidr_ipv6, var.defaults.egress_with_cidr_ipv6, []) + egress_with_prefix_list_id = try(each.value.egress_with_prefix_list_id, var.defaults.egress_with_prefix_list_id, []) + egress_with_referenced_security_group_id = try(each.value.egress_with_referenced_security_group_id, var.defaults.egress_with_referenced_security_group_id, []) + egress_with_self = try(each.value.egress_with_self, var.defaults.egress_with_self, []) + ingress_cidr_ipv4 = try(each.value.ingress_cidr_ipv4, var.defaults.ingress_cidr_ipv4, []) + ingress_cidr_ipv6 = try(each.value.ingress_cidr_ipv6, var.defaults.ingress_cidr_ipv6, []) + ingress_prefix_list_ids = try(each.value.ingress_prefix_list_ids, var.defaults.ingress_prefix_list_ids, []) + ingress_rules = try(each.value.ingress_rules, var.defaults.ingress_rules, []) + ingress_with_cidr_ipv4 = try(each.value.ingress_with_cidr_ipv4, var.defaults.ingress_with_cidr_ipv4, []) + ingress_with_cidr_ipv6 = try(each.value.ingress_with_cidr_ipv6, var.defaults.ingress_with_cidr_ipv6, []) + ingress_with_prefix_list_id = try(each.value.ingress_with_prefix_list_id, var.defaults.ingress_with_prefix_list_id, []) + ingress_with_referenced_security_group_id = try(each.value.ingress_with_referenced_security_group_id, var.defaults.ingress_with_referenced_security_group_id, []) + ingress_with_self = try(each.value.ingress_with_self, var.defaults.ingress_with_self, []) + name = try(each.value.name, var.defaults.name) + number_of_computed_egress_cidr_blocks = try(each.value.number_of_computed_egress_cidr_blocks, var.defaults.number_of_computed_egress_cidr_blocks, 0) + number_of_computed_egress_ipv6_cidr_blocks = try(each.value.number_of_computed_egress_ipv6_cidr_blocks, var.defaults.number_of_computed_egress_ipv6_cidr_blocks, 0) + number_of_computed_egress_prefix_list_ids = try(each.value.number_of_computed_egress_prefix_list_ids, var.defaults.number_of_computed_egress_prefix_list_ids, 0) + number_of_computed_egress_rules = try(each.value.number_of_computed_egress_rules, var.defaults.number_of_computed_egress_rules, 0) + number_of_computed_egress_with_cidr_ipv4 = try(each.value.number_of_computed_egress_with_cidr_ipv4, var.defaults.number_of_computed_egress_with_cidr_ipv4, 0) + number_of_computed_egress_with_cidr_ipv6 = try(each.value.number_of_computed_egress_with_cidr_ipv6, var.defaults.number_of_computed_egress_with_cidr_ipv6, 0) + number_of_computed_egress_with_prefix_list_id = try(each.value.number_of_computed_egress_with_prefix_list_id, var.defaults.number_of_computed_egress_with_prefix_list_id, 0) + number_of_computed_egress_with_referenced_security_group_id = try(each.value.number_of_computed_egress_with_referenced_security_group_id, var.defaults.number_of_computed_egress_with_referenced_security_group_id, 0) + number_of_computed_egress_with_self = try(each.value.number_of_computed_egress_with_self, var.defaults.number_of_computed_egress_with_self, 0) + number_of_computed_ingress_cidr_blocks = try(each.value.number_of_computed_ingress_cidr_blocks, var.defaults.number_of_computed_ingress_cidr_blocks, 0) + number_of_computed_ingress_ipv6_cidr_blocks = try(each.value.number_of_computed_ingress_ipv6_cidr_blocks, var.defaults.number_of_computed_ingress_ipv6_cidr_blocks, 0) + number_of_computed_ingress_prefix_list_ids = try(each.value.number_of_computed_ingress_prefix_list_ids, var.defaults.number_of_computed_ingress_prefix_list_ids, 0) + number_of_computed_ingress_rules = try(each.value.number_of_computed_ingress_rules, var.defaults.number_of_computed_ingress_rules, 0) + number_of_computed_ingress_with_cidr_ipv4 = try(each.value.number_of_computed_ingress_with_cidr_ipv4, var.defaults.number_of_computed_ingress_with_cidr_ipv4, 0) + number_of_computed_ingress_with_cidr_ipv6 = try(each.value.number_of_computed_ingress_with_cidr_ipv6, var.defaults.number_of_computed_ingress_with_cidr_ipv6, 0) + number_of_computed_ingress_with_prefix_list_id = try(each.value.number_of_computed_ingress_with_prefix_list_id, var.defaults.number_of_computed_ingress_with_prefix_list_id, 0) + number_of_computed_ingress_with_referenced_security_group_id = try(each.value.number_of_computed_ingress_with_referenced_security_group_id, var.defaults.number_of_computed_ingress_with_referenced_security_group_id, 0) + number_of_computed_ingress_with_self = try(each.value.number_of_computed_ingress_with_self, var.defaults.number_of_computed_ingress_with_self, 0) + revoke_rules_on_delete = try(each.value.revoke_rules_on_delete, var.defaults.revoke_rules_on_delete, false) + tags = try(each.value.tags, var.defaults.tags, {}) + use_name_prefix = try(each.value.use_name_prefix, var.defaults.use_name_prefix, true) + vpc_id = try(each.value.vpc_id, var.defaults.vpc_id) } diff --git a/wrappers/ssh/main.tf b/wrappers/ssh/main.tf index aeda2251..325957cc 100644 --- a/wrappers/ssh/main.tf +++ b/wrappers/ssh/main.tf @@ -3,77 +3,77 @@ module "wrapper" { for_each = var.items - auto_computed_egress_rules = try(each.value.auto_computed_egress_rules, var.defaults.auto_computed_egress_rules, []) - auto_computed_egress_with_self = try(each.value.auto_computed_egress_with_self, var.defaults.auto_computed_egress_with_self, []) - auto_computed_ingress_rules = try(each.value.auto_computed_ingress_rules, var.defaults.auto_computed_ingress_rules, []) - auto_computed_ingress_with_self = try(each.value.auto_computed_ingress_with_self, var.defaults.auto_computed_ingress_with_self, []) - auto_egress_rules = try(each.value.auto_egress_rules, var.defaults.auto_egress_rules, ["all-all"]) - auto_egress_with_self = try(each.value.auto_egress_with_self, var.defaults.auto_egress_with_self, []) - auto_ingress_rules = try(each.value.auto_ingress_rules, var.defaults.auto_ingress_rules, ["ssh-tcp"]) - auto_ingress_with_self = try(each.value.auto_ingress_with_self, var.defaults.auto_ingress_with_self, [{ "rule" = "all-all" }]) - auto_number_of_computed_egress_rules = try(each.value.auto_number_of_computed_egress_rules, var.defaults.auto_number_of_computed_egress_rules, 0) - auto_number_of_computed_egress_with_self = try(each.value.auto_number_of_computed_egress_with_self, var.defaults.auto_number_of_computed_egress_with_self, 0) - auto_number_of_computed_ingress_rules = try(each.value.auto_number_of_computed_ingress_rules, var.defaults.auto_number_of_computed_ingress_rules, 0) - auto_number_of_computed_ingress_with_self = try(each.value.auto_number_of_computed_ingress_with_self, var.defaults.auto_number_of_computed_ingress_with_self, 0) - computed_egress_cidr_blocks = try(each.value.computed_egress_cidr_blocks, var.defaults.computed_egress_cidr_blocks, ["0.0.0.0/0"]) - computed_egress_ipv6_cidr_blocks = try(each.value.computed_egress_ipv6_cidr_blocks, var.defaults.computed_egress_ipv6_cidr_blocks, ["::/0"]) - computed_egress_prefix_list_ids = try(each.value.computed_egress_prefix_list_ids, var.defaults.computed_egress_prefix_list_ids, []) - computed_egress_rules = try(each.value.computed_egress_rules, var.defaults.computed_egress_rules, []) - computed_egress_with_cidr_blocks = try(each.value.computed_egress_with_cidr_blocks, var.defaults.computed_egress_with_cidr_blocks, []) - computed_egress_with_ipv6_cidr_blocks = try(each.value.computed_egress_with_ipv6_cidr_blocks, var.defaults.computed_egress_with_ipv6_cidr_blocks, []) - computed_egress_with_prefix_list_ids = try(each.value.computed_egress_with_prefix_list_ids, var.defaults.computed_egress_with_prefix_list_ids, []) - computed_egress_with_self = try(each.value.computed_egress_with_self, var.defaults.computed_egress_with_self, []) - computed_egress_with_source_security_group_id = try(each.value.computed_egress_with_source_security_group_id, var.defaults.computed_egress_with_source_security_group_id, []) - computed_ingress_cidr_blocks = try(each.value.computed_ingress_cidr_blocks, var.defaults.computed_ingress_cidr_blocks, []) - computed_ingress_ipv6_cidr_blocks = try(each.value.computed_ingress_ipv6_cidr_blocks, var.defaults.computed_ingress_ipv6_cidr_blocks, []) - computed_ingress_prefix_list_ids = try(each.value.computed_ingress_prefix_list_ids, var.defaults.computed_ingress_prefix_list_ids, []) - computed_ingress_rules = try(each.value.computed_ingress_rules, var.defaults.computed_ingress_rules, []) - computed_ingress_with_cidr_blocks = try(each.value.computed_ingress_with_cidr_blocks, var.defaults.computed_ingress_with_cidr_blocks, []) - computed_ingress_with_ipv6_cidr_blocks = try(each.value.computed_ingress_with_ipv6_cidr_blocks, var.defaults.computed_ingress_with_ipv6_cidr_blocks, []) - computed_ingress_with_prefix_list_ids = try(each.value.computed_ingress_with_prefix_list_ids, var.defaults.computed_ingress_with_prefix_list_ids, []) - computed_ingress_with_self = try(each.value.computed_ingress_with_self, var.defaults.computed_ingress_with_self, []) - computed_ingress_with_source_security_group_id = try(each.value.computed_ingress_with_source_security_group_id, var.defaults.computed_ingress_with_source_security_group_id, []) - create = try(each.value.create, var.defaults.create, true) - description = try(each.value.description, var.defaults.description, "Security Group managed by Terraform") - egress_cidr_blocks = try(each.value.egress_cidr_blocks, var.defaults.egress_cidr_blocks, ["0.0.0.0/0"]) - egress_ipv6_cidr_blocks = try(each.value.egress_ipv6_cidr_blocks, var.defaults.egress_ipv6_cidr_blocks, ["::/0"]) - egress_prefix_list_ids = try(each.value.egress_prefix_list_ids, var.defaults.egress_prefix_list_ids, []) - egress_rules = try(each.value.egress_rules, var.defaults.egress_rules, []) - egress_with_cidr_blocks = try(each.value.egress_with_cidr_blocks, var.defaults.egress_with_cidr_blocks, []) - egress_with_ipv6_cidr_blocks = try(each.value.egress_with_ipv6_cidr_blocks, var.defaults.egress_with_ipv6_cidr_blocks, []) - egress_with_prefix_list_ids = try(each.value.egress_with_prefix_list_ids, var.defaults.egress_with_prefix_list_ids, []) - egress_with_self = try(each.value.egress_with_self, var.defaults.egress_with_self, []) - egress_with_source_security_group_id = try(each.value.egress_with_source_security_group_id, var.defaults.egress_with_source_security_group_id, []) - ingress_cidr_blocks = try(each.value.ingress_cidr_blocks, var.defaults.ingress_cidr_blocks, []) - ingress_ipv6_cidr_blocks = try(each.value.ingress_ipv6_cidr_blocks, var.defaults.ingress_ipv6_cidr_blocks, []) - ingress_prefix_list_ids = try(each.value.ingress_prefix_list_ids, var.defaults.ingress_prefix_list_ids, []) - ingress_rules = try(each.value.ingress_rules, var.defaults.ingress_rules, []) - ingress_with_cidr_blocks = try(each.value.ingress_with_cidr_blocks, var.defaults.ingress_with_cidr_blocks, []) - ingress_with_ipv6_cidr_blocks = try(each.value.ingress_with_ipv6_cidr_blocks, var.defaults.ingress_with_ipv6_cidr_blocks, []) - ingress_with_prefix_list_ids = try(each.value.ingress_with_prefix_list_ids, var.defaults.ingress_with_prefix_list_ids, []) - ingress_with_self = try(each.value.ingress_with_self, var.defaults.ingress_with_self, []) - ingress_with_source_security_group_id = try(each.value.ingress_with_source_security_group_id, var.defaults.ingress_with_source_security_group_id, []) - name = try(each.value.name, var.defaults.name) - number_of_computed_egress_cidr_blocks = try(each.value.number_of_computed_egress_cidr_blocks, var.defaults.number_of_computed_egress_cidr_blocks, 0) - number_of_computed_egress_ipv6_cidr_blocks = try(each.value.number_of_computed_egress_ipv6_cidr_blocks, var.defaults.number_of_computed_egress_ipv6_cidr_blocks, 0) - number_of_computed_egress_prefix_list_ids = try(each.value.number_of_computed_egress_prefix_list_ids, var.defaults.number_of_computed_egress_prefix_list_ids, 0) - number_of_computed_egress_rules = try(each.value.number_of_computed_egress_rules, var.defaults.number_of_computed_egress_rules, 0) - number_of_computed_egress_with_cidr_blocks = try(each.value.number_of_computed_egress_with_cidr_blocks, var.defaults.number_of_computed_egress_with_cidr_blocks, 0) - number_of_computed_egress_with_ipv6_cidr_blocks = try(each.value.number_of_computed_egress_with_ipv6_cidr_blocks, var.defaults.number_of_computed_egress_with_ipv6_cidr_blocks, 0) - number_of_computed_egress_with_prefix_list_ids = try(each.value.number_of_computed_egress_with_prefix_list_ids, var.defaults.number_of_computed_egress_with_prefix_list_ids, 0) - number_of_computed_egress_with_self = try(each.value.number_of_computed_egress_with_self, var.defaults.number_of_computed_egress_with_self, 0) - number_of_computed_egress_with_source_security_group_id = try(each.value.number_of_computed_egress_with_source_security_group_id, var.defaults.number_of_computed_egress_with_source_security_group_id, 0) - number_of_computed_ingress_cidr_blocks = try(each.value.number_of_computed_ingress_cidr_blocks, var.defaults.number_of_computed_ingress_cidr_blocks, 0) - number_of_computed_ingress_ipv6_cidr_blocks = try(each.value.number_of_computed_ingress_ipv6_cidr_blocks, var.defaults.number_of_computed_ingress_ipv6_cidr_blocks, 0) - number_of_computed_ingress_prefix_list_ids = try(each.value.number_of_computed_ingress_prefix_list_ids, var.defaults.number_of_computed_ingress_prefix_list_ids, 0) - number_of_computed_ingress_rules = try(each.value.number_of_computed_ingress_rules, var.defaults.number_of_computed_ingress_rules, 0) - number_of_computed_ingress_with_cidr_blocks = try(each.value.number_of_computed_ingress_with_cidr_blocks, var.defaults.number_of_computed_ingress_with_cidr_blocks, 0) - number_of_computed_ingress_with_ipv6_cidr_blocks = try(each.value.number_of_computed_ingress_with_ipv6_cidr_blocks, var.defaults.number_of_computed_ingress_with_ipv6_cidr_blocks, 0) - number_of_computed_ingress_with_prefix_list_ids = try(each.value.number_of_computed_ingress_with_prefix_list_ids, var.defaults.number_of_computed_ingress_with_prefix_list_ids, 0) - number_of_computed_ingress_with_self = try(each.value.number_of_computed_ingress_with_self, var.defaults.number_of_computed_ingress_with_self, 0) - number_of_computed_ingress_with_source_security_group_id = try(each.value.number_of_computed_ingress_with_source_security_group_id, var.defaults.number_of_computed_ingress_with_source_security_group_id, 0) - revoke_rules_on_delete = try(each.value.revoke_rules_on_delete, var.defaults.revoke_rules_on_delete, false) - tags = try(each.value.tags, var.defaults.tags, {}) - use_name_prefix = try(each.value.use_name_prefix, var.defaults.use_name_prefix, true) - vpc_id = try(each.value.vpc_id, var.defaults.vpc_id) + auto_computed_egress_rules = try(each.value.auto_computed_egress_rules, var.defaults.auto_computed_egress_rules, []) + auto_computed_egress_with_self = try(each.value.auto_computed_egress_with_self, var.defaults.auto_computed_egress_with_self, []) + auto_computed_ingress_rules = try(each.value.auto_computed_ingress_rules, var.defaults.auto_computed_ingress_rules, []) + auto_computed_ingress_with_self = try(each.value.auto_computed_ingress_with_self, var.defaults.auto_computed_ingress_with_self, []) + auto_egress_rules = try(each.value.auto_egress_rules, var.defaults.auto_egress_rules, ["all-all"]) + auto_egress_with_self = try(each.value.auto_egress_with_self, var.defaults.auto_egress_with_self, []) + auto_ingress_rules = try(each.value.auto_ingress_rules, var.defaults.auto_ingress_rules, ["ssh-tcp"]) + auto_ingress_with_self = try(each.value.auto_ingress_with_self, var.defaults.auto_ingress_with_self, [{ "rule" = "all-all" }]) + auto_number_of_computed_egress_rules = try(each.value.auto_number_of_computed_egress_rules, var.defaults.auto_number_of_computed_egress_rules, 0) + auto_number_of_computed_egress_with_self = try(each.value.auto_number_of_computed_egress_with_self, var.defaults.auto_number_of_computed_egress_with_self, 0) + auto_number_of_computed_ingress_rules = try(each.value.auto_number_of_computed_ingress_rules, var.defaults.auto_number_of_computed_ingress_rules, 0) + auto_number_of_computed_ingress_with_self = try(each.value.auto_number_of_computed_ingress_with_self, var.defaults.auto_number_of_computed_ingress_with_self, 0) + computed_egress_cidr_blocks = try(each.value.computed_egress_cidr_blocks, var.defaults.computed_egress_cidr_blocks, ["0.0.0.0/0"]) + computed_egress_ipv6_cidr_blocks = try(each.value.computed_egress_ipv6_cidr_blocks, var.defaults.computed_egress_ipv6_cidr_blocks, ["::/0"]) + computed_egress_prefix_list_ids = try(each.value.computed_egress_prefix_list_ids, var.defaults.computed_egress_prefix_list_ids, []) + computed_egress_rules = try(each.value.computed_egress_rules, var.defaults.computed_egress_rules, []) + computed_egress_with_cidr_ipv4 = try(each.value.computed_egress_with_cidr_ipv4, var.defaults.computed_egress_with_cidr_ipv4, []) + computed_egress_with_cidr_ipv6 = try(each.value.computed_egress_with_cidr_ipv6, var.defaults.computed_egress_with_cidr_ipv6, []) + computed_egress_with_prefix_list_id = try(each.value.computed_egress_with_prefix_list_id, var.defaults.computed_egress_with_prefix_list_id, []) + computed_egress_with_referenced_security_group_id = try(each.value.computed_egress_with_referenced_security_group_id, var.defaults.computed_egress_with_referenced_security_group_id, []) + computed_egress_with_self = try(each.value.computed_egress_with_self, var.defaults.computed_egress_with_self, []) + computed_ingress_cidr_blocks = try(each.value.computed_ingress_cidr_blocks, var.defaults.computed_ingress_cidr_blocks, []) + computed_ingress_ipv6_cidr_blocks = try(each.value.computed_ingress_ipv6_cidr_blocks, var.defaults.computed_ingress_ipv6_cidr_blocks, []) + computed_ingress_prefix_list_ids = try(each.value.computed_ingress_prefix_list_ids, var.defaults.computed_ingress_prefix_list_ids, []) + computed_ingress_rules = try(each.value.computed_ingress_rules, var.defaults.computed_ingress_rules, []) + computed_ingress_with_cidr_ipv4 = try(each.value.computed_ingress_with_cidr_ipv4, var.defaults.computed_ingress_with_cidr_ipv4, []) + computed_ingress_with_cidr_ipv6 = try(each.value.computed_ingress_with_cidr_ipv6, var.defaults.computed_ingress_with_cidr_ipv6, []) + computed_ingress_with_prefix_list_id = try(each.value.computed_ingress_with_prefix_list_id, var.defaults.computed_ingress_with_prefix_list_id, []) + computed_ingress_with_referenced_security_group_id = try(each.value.computed_ingress_with_referenced_security_group_id, var.defaults.computed_ingress_with_referenced_security_group_id, []) + computed_ingress_with_self = try(each.value.computed_ingress_with_self, var.defaults.computed_ingress_with_self, []) + create = try(each.value.create, var.defaults.create, true) + description = try(each.value.description, var.defaults.description, "Security Group managed by Terraform") + egress_cidr_ipv4 = try(each.value.egress_cidr_ipv4, var.defaults.egress_cidr_ipv4, ["0.0.0.0/0"]) + egress_cidr_ipv6 = try(each.value.egress_cidr_ipv6, var.defaults.egress_cidr_ipv6, ["::/0"]) + egress_prefix_list_ids = try(each.value.egress_prefix_list_ids, var.defaults.egress_prefix_list_ids, []) + egress_rules = try(each.value.egress_rules, var.defaults.egress_rules, []) + egress_with_cidr_ipv4 = try(each.value.egress_with_cidr_ipv4, var.defaults.egress_with_cidr_ipv4, []) + egress_with_cidr_ipv6 = try(each.value.egress_with_cidr_ipv6, var.defaults.egress_with_cidr_ipv6, []) + egress_with_prefix_list_id = try(each.value.egress_with_prefix_list_id, var.defaults.egress_with_prefix_list_id, []) + egress_with_referenced_security_group_id = try(each.value.egress_with_referenced_security_group_id, var.defaults.egress_with_referenced_security_group_id, []) + egress_with_self = try(each.value.egress_with_self, var.defaults.egress_with_self, []) + ingress_cidr_ipv4 = try(each.value.ingress_cidr_ipv4, var.defaults.ingress_cidr_ipv4, []) + ingress_cidr_ipv6 = try(each.value.ingress_cidr_ipv6, var.defaults.ingress_cidr_ipv6, []) + ingress_prefix_list_ids = try(each.value.ingress_prefix_list_ids, var.defaults.ingress_prefix_list_ids, []) + ingress_rules = try(each.value.ingress_rules, var.defaults.ingress_rules, []) + ingress_with_cidr_ipv4 = try(each.value.ingress_with_cidr_ipv4, var.defaults.ingress_with_cidr_ipv4, []) + ingress_with_cidr_ipv6 = try(each.value.ingress_with_cidr_ipv6, var.defaults.ingress_with_cidr_ipv6, []) + ingress_with_prefix_list_id = try(each.value.ingress_with_prefix_list_id, var.defaults.ingress_with_prefix_list_id, []) + ingress_with_referenced_security_group_id = try(each.value.ingress_with_referenced_security_group_id, var.defaults.ingress_with_referenced_security_group_id, []) + ingress_with_self = try(each.value.ingress_with_self, var.defaults.ingress_with_self, []) + name = try(each.value.name, var.defaults.name) + number_of_computed_egress_cidr_blocks = try(each.value.number_of_computed_egress_cidr_blocks, var.defaults.number_of_computed_egress_cidr_blocks, 0) + number_of_computed_egress_ipv6_cidr_blocks = try(each.value.number_of_computed_egress_ipv6_cidr_blocks, var.defaults.number_of_computed_egress_ipv6_cidr_blocks, 0) + number_of_computed_egress_prefix_list_ids = try(each.value.number_of_computed_egress_prefix_list_ids, var.defaults.number_of_computed_egress_prefix_list_ids, 0) + number_of_computed_egress_rules = try(each.value.number_of_computed_egress_rules, var.defaults.number_of_computed_egress_rules, 0) + number_of_computed_egress_with_cidr_ipv4 = try(each.value.number_of_computed_egress_with_cidr_ipv4, var.defaults.number_of_computed_egress_with_cidr_ipv4, 0) + number_of_computed_egress_with_cidr_ipv6 = try(each.value.number_of_computed_egress_with_cidr_ipv6, var.defaults.number_of_computed_egress_with_cidr_ipv6, 0) + number_of_computed_egress_with_prefix_list_id = try(each.value.number_of_computed_egress_with_prefix_list_id, var.defaults.number_of_computed_egress_with_prefix_list_id, 0) + number_of_computed_egress_with_referenced_security_group_id = try(each.value.number_of_computed_egress_with_referenced_security_group_id, var.defaults.number_of_computed_egress_with_referenced_security_group_id, 0) + number_of_computed_egress_with_self = try(each.value.number_of_computed_egress_with_self, var.defaults.number_of_computed_egress_with_self, 0) + number_of_computed_ingress_cidr_blocks = try(each.value.number_of_computed_ingress_cidr_blocks, var.defaults.number_of_computed_ingress_cidr_blocks, 0) + number_of_computed_ingress_ipv6_cidr_blocks = try(each.value.number_of_computed_ingress_ipv6_cidr_blocks, var.defaults.number_of_computed_ingress_ipv6_cidr_blocks, 0) + number_of_computed_ingress_prefix_list_ids = try(each.value.number_of_computed_ingress_prefix_list_ids, var.defaults.number_of_computed_ingress_prefix_list_ids, 0) + number_of_computed_ingress_rules = try(each.value.number_of_computed_ingress_rules, var.defaults.number_of_computed_ingress_rules, 0) + number_of_computed_ingress_with_cidr_ipv4 = try(each.value.number_of_computed_ingress_with_cidr_ipv4, var.defaults.number_of_computed_ingress_with_cidr_ipv4, 0) + number_of_computed_ingress_with_cidr_ipv6 = try(each.value.number_of_computed_ingress_with_cidr_ipv6, var.defaults.number_of_computed_ingress_with_cidr_ipv6, 0) + number_of_computed_ingress_with_prefix_list_id = try(each.value.number_of_computed_ingress_with_prefix_list_id, var.defaults.number_of_computed_ingress_with_prefix_list_id, 0) + number_of_computed_ingress_with_referenced_security_group_id = try(each.value.number_of_computed_ingress_with_referenced_security_group_id, var.defaults.number_of_computed_ingress_with_referenced_security_group_id, 0) + number_of_computed_ingress_with_self = try(each.value.number_of_computed_ingress_with_self, var.defaults.number_of_computed_ingress_with_self, 0) + revoke_rules_on_delete = try(each.value.revoke_rules_on_delete, var.defaults.revoke_rules_on_delete, false) + tags = try(each.value.tags, var.defaults.tags, {}) + use_name_prefix = try(each.value.use_name_prefix, var.defaults.use_name_prefix, true) + vpc_id = try(each.value.vpc_id, var.defaults.vpc_id) } diff --git a/wrappers/storm/main.tf b/wrappers/storm/main.tf index bf49d857..2b18e84a 100644 --- a/wrappers/storm/main.tf +++ b/wrappers/storm/main.tf @@ -3,77 +3,77 @@ module "wrapper" { for_each = var.items - auto_computed_egress_rules = try(each.value.auto_computed_egress_rules, var.defaults.auto_computed_egress_rules, []) - auto_computed_egress_with_self = try(each.value.auto_computed_egress_with_self, var.defaults.auto_computed_egress_with_self, []) - auto_computed_ingress_rules = try(each.value.auto_computed_ingress_rules, var.defaults.auto_computed_ingress_rules, []) - auto_computed_ingress_with_self = try(each.value.auto_computed_ingress_with_self, var.defaults.auto_computed_ingress_with_self, []) - auto_egress_rules = try(each.value.auto_egress_rules, var.defaults.auto_egress_rules, ["all-all"]) - auto_egress_with_self = try(each.value.auto_egress_with_self, var.defaults.auto_egress_with_self, []) - auto_ingress_rules = try(each.value.auto_ingress_rules, var.defaults.auto_ingress_rules, ["storm-nimbus-tcp", "storm-ui-tcp", "storm-supervisor-tcp"]) - auto_ingress_with_self = try(each.value.auto_ingress_with_self, var.defaults.auto_ingress_with_self, [{ "rule" = "all-all" }]) - auto_number_of_computed_egress_rules = try(each.value.auto_number_of_computed_egress_rules, var.defaults.auto_number_of_computed_egress_rules, 0) - auto_number_of_computed_egress_with_self = try(each.value.auto_number_of_computed_egress_with_self, var.defaults.auto_number_of_computed_egress_with_self, 0) - auto_number_of_computed_ingress_rules = try(each.value.auto_number_of_computed_ingress_rules, var.defaults.auto_number_of_computed_ingress_rules, 0) - auto_number_of_computed_ingress_with_self = try(each.value.auto_number_of_computed_ingress_with_self, var.defaults.auto_number_of_computed_ingress_with_self, 0) - computed_egress_cidr_blocks = try(each.value.computed_egress_cidr_blocks, var.defaults.computed_egress_cidr_blocks, ["0.0.0.0/0"]) - computed_egress_ipv6_cidr_blocks = try(each.value.computed_egress_ipv6_cidr_blocks, var.defaults.computed_egress_ipv6_cidr_blocks, ["::/0"]) - computed_egress_prefix_list_ids = try(each.value.computed_egress_prefix_list_ids, var.defaults.computed_egress_prefix_list_ids, []) - computed_egress_rules = try(each.value.computed_egress_rules, var.defaults.computed_egress_rules, []) - computed_egress_with_cidr_blocks = try(each.value.computed_egress_with_cidr_blocks, var.defaults.computed_egress_with_cidr_blocks, []) - computed_egress_with_ipv6_cidr_blocks = try(each.value.computed_egress_with_ipv6_cidr_blocks, var.defaults.computed_egress_with_ipv6_cidr_blocks, []) - computed_egress_with_prefix_list_ids = try(each.value.computed_egress_with_prefix_list_ids, var.defaults.computed_egress_with_prefix_list_ids, []) - computed_egress_with_self = try(each.value.computed_egress_with_self, var.defaults.computed_egress_with_self, []) - computed_egress_with_source_security_group_id = try(each.value.computed_egress_with_source_security_group_id, var.defaults.computed_egress_with_source_security_group_id, []) - computed_ingress_cidr_blocks = try(each.value.computed_ingress_cidr_blocks, var.defaults.computed_ingress_cidr_blocks, []) - computed_ingress_ipv6_cidr_blocks = try(each.value.computed_ingress_ipv6_cidr_blocks, var.defaults.computed_ingress_ipv6_cidr_blocks, []) - computed_ingress_prefix_list_ids = try(each.value.computed_ingress_prefix_list_ids, var.defaults.computed_ingress_prefix_list_ids, []) - computed_ingress_rules = try(each.value.computed_ingress_rules, var.defaults.computed_ingress_rules, []) - computed_ingress_with_cidr_blocks = try(each.value.computed_ingress_with_cidr_blocks, var.defaults.computed_ingress_with_cidr_blocks, []) - computed_ingress_with_ipv6_cidr_blocks = try(each.value.computed_ingress_with_ipv6_cidr_blocks, var.defaults.computed_ingress_with_ipv6_cidr_blocks, []) - computed_ingress_with_prefix_list_ids = try(each.value.computed_ingress_with_prefix_list_ids, var.defaults.computed_ingress_with_prefix_list_ids, []) - computed_ingress_with_self = try(each.value.computed_ingress_with_self, var.defaults.computed_ingress_with_self, []) - computed_ingress_with_source_security_group_id = try(each.value.computed_ingress_with_source_security_group_id, var.defaults.computed_ingress_with_source_security_group_id, []) - create = try(each.value.create, var.defaults.create, true) - description = try(each.value.description, var.defaults.description, "Security Group managed by Terraform") - egress_cidr_blocks = try(each.value.egress_cidr_blocks, var.defaults.egress_cidr_blocks, ["0.0.0.0/0"]) - egress_ipv6_cidr_blocks = try(each.value.egress_ipv6_cidr_blocks, var.defaults.egress_ipv6_cidr_blocks, ["::/0"]) - egress_prefix_list_ids = try(each.value.egress_prefix_list_ids, var.defaults.egress_prefix_list_ids, []) - egress_rules = try(each.value.egress_rules, var.defaults.egress_rules, []) - egress_with_cidr_blocks = try(each.value.egress_with_cidr_blocks, var.defaults.egress_with_cidr_blocks, []) - egress_with_ipv6_cidr_blocks = try(each.value.egress_with_ipv6_cidr_blocks, var.defaults.egress_with_ipv6_cidr_blocks, []) - egress_with_prefix_list_ids = try(each.value.egress_with_prefix_list_ids, var.defaults.egress_with_prefix_list_ids, []) - egress_with_self = try(each.value.egress_with_self, var.defaults.egress_with_self, []) - egress_with_source_security_group_id = try(each.value.egress_with_source_security_group_id, var.defaults.egress_with_source_security_group_id, []) - ingress_cidr_blocks = try(each.value.ingress_cidr_blocks, var.defaults.ingress_cidr_blocks, []) - ingress_ipv6_cidr_blocks = try(each.value.ingress_ipv6_cidr_blocks, var.defaults.ingress_ipv6_cidr_blocks, []) - ingress_prefix_list_ids = try(each.value.ingress_prefix_list_ids, var.defaults.ingress_prefix_list_ids, []) - ingress_rules = try(each.value.ingress_rules, var.defaults.ingress_rules, []) - ingress_with_cidr_blocks = try(each.value.ingress_with_cidr_blocks, var.defaults.ingress_with_cidr_blocks, []) - ingress_with_ipv6_cidr_blocks = try(each.value.ingress_with_ipv6_cidr_blocks, var.defaults.ingress_with_ipv6_cidr_blocks, []) - ingress_with_prefix_list_ids = try(each.value.ingress_with_prefix_list_ids, var.defaults.ingress_with_prefix_list_ids, []) - ingress_with_self = try(each.value.ingress_with_self, var.defaults.ingress_with_self, []) - ingress_with_source_security_group_id = try(each.value.ingress_with_source_security_group_id, var.defaults.ingress_with_source_security_group_id, []) - name = try(each.value.name, var.defaults.name) - number_of_computed_egress_cidr_blocks = try(each.value.number_of_computed_egress_cidr_blocks, var.defaults.number_of_computed_egress_cidr_blocks, 0) - number_of_computed_egress_ipv6_cidr_blocks = try(each.value.number_of_computed_egress_ipv6_cidr_blocks, var.defaults.number_of_computed_egress_ipv6_cidr_blocks, 0) - number_of_computed_egress_prefix_list_ids = try(each.value.number_of_computed_egress_prefix_list_ids, var.defaults.number_of_computed_egress_prefix_list_ids, 0) - number_of_computed_egress_rules = try(each.value.number_of_computed_egress_rules, var.defaults.number_of_computed_egress_rules, 0) - number_of_computed_egress_with_cidr_blocks = try(each.value.number_of_computed_egress_with_cidr_blocks, var.defaults.number_of_computed_egress_with_cidr_blocks, 0) - number_of_computed_egress_with_ipv6_cidr_blocks = try(each.value.number_of_computed_egress_with_ipv6_cidr_blocks, var.defaults.number_of_computed_egress_with_ipv6_cidr_blocks, 0) - number_of_computed_egress_with_prefix_list_ids = try(each.value.number_of_computed_egress_with_prefix_list_ids, var.defaults.number_of_computed_egress_with_prefix_list_ids, 0) - number_of_computed_egress_with_self = try(each.value.number_of_computed_egress_with_self, var.defaults.number_of_computed_egress_with_self, 0) - number_of_computed_egress_with_source_security_group_id = try(each.value.number_of_computed_egress_with_source_security_group_id, var.defaults.number_of_computed_egress_with_source_security_group_id, 0) - number_of_computed_ingress_cidr_blocks = try(each.value.number_of_computed_ingress_cidr_blocks, var.defaults.number_of_computed_ingress_cidr_blocks, 0) - number_of_computed_ingress_ipv6_cidr_blocks = try(each.value.number_of_computed_ingress_ipv6_cidr_blocks, var.defaults.number_of_computed_ingress_ipv6_cidr_blocks, 0) - number_of_computed_ingress_prefix_list_ids = try(each.value.number_of_computed_ingress_prefix_list_ids, var.defaults.number_of_computed_ingress_prefix_list_ids, 0) - number_of_computed_ingress_rules = try(each.value.number_of_computed_ingress_rules, var.defaults.number_of_computed_ingress_rules, 0) - number_of_computed_ingress_with_cidr_blocks = try(each.value.number_of_computed_ingress_with_cidr_blocks, var.defaults.number_of_computed_ingress_with_cidr_blocks, 0) - number_of_computed_ingress_with_ipv6_cidr_blocks = try(each.value.number_of_computed_ingress_with_ipv6_cidr_blocks, var.defaults.number_of_computed_ingress_with_ipv6_cidr_blocks, 0) - number_of_computed_ingress_with_prefix_list_ids = try(each.value.number_of_computed_ingress_with_prefix_list_ids, var.defaults.number_of_computed_ingress_with_prefix_list_ids, 0) - number_of_computed_ingress_with_self = try(each.value.number_of_computed_ingress_with_self, var.defaults.number_of_computed_ingress_with_self, 0) - number_of_computed_ingress_with_source_security_group_id = try(each.value.number_of_computed_ingress_with_source_security_group_id, var.defaults.number_of_computed_ingress_with_source_security_group_id, 0) - revoke_rules_on_delete = try(each.value.revoke_rules_on_delete, var.defaults.revoke_rules_on_delete, false) - tags = try(each.value.tags, var.defaults.tags, {}) - use_name_prefix = try(each.value.use_name_prefix, var.defaults.use_name_prefix, true) - vpc_id = try(each.value.vpc_id, var.defaults.vpc_id) + auto_computed_egress_rules = try(each.value.auto_computed_egress_rules, var.defaults.auto_computed_egress_rules, []) + auto_computed_egress_with_self = try(each.value.auto_computed_egress_with_self, var.defaults.auto_computed_egress_with_self, []) + auto_computed_ingress_rules = try(each.value.auto_computed_ingress_rules, var.defaults.auto_computed_ingress_rules, []) + auto_computed_ingress_with_self = try(each.value.auto_computed_ingress_with_self, var.defaults.auto_computed_ingress_with_self, []) + auto_egress_rules = try(each.value.auto_egress_rules, var.defaults.auto_egress_rules, ["all-all"]) + auto_egress_with_self = try(each.value.auto_egress_with_self, var.defaults.auto_egress_with_self, []) + auto_ingress_rules = try(each.value.auto_ingress_rules, var.defaults.auto_ingress_rules, ["storm-nimbus-tcp", "storm-ui-tcp", "storm-supervisor-tcp"]) + auto_ingress_with_self = try(each.value.auto_ingress_with_self, var.defaults.auto_ingress_with_self, [{ "rule" = "all-all" }]) + auto_number_of_computed_egress_rules = try(each.value.auto_number_of_computed_egress_rules, var.defaults.auto_number_of_computed_egress_rules, 0) + auto_number_of_computed_egress_with_self = try(each.value.auto_number_of_computed_egress_with_self, var.defaults.auto_number_of_computed_egress_with_self, 0) + auto_number_of_computed_ingress_rules = try(each.value.auto_number_of_computed_ingress_rules, var.defaults.auto_number_of_computed_ingress_rules, 0) + auto_number_of_computed_ingress_with_self = try(each.value.auto_number_of_computed_ingress_with_self, var.defaults.auto_number_of_computed_ingress_with_self, 0) + computed_egress_cidr_blocks = try(each.value.computed_egress_cidr_blocks, var.defaults.computed_egress_cidr_blocks, ["0.0.0.0/0"]) + computed_egress_ipv6_cidr_blocks = try(each.value.computed_egress_ipv6_cidr_blocks, var.defaults.computed_egress_ipv6_cidr_blocks, ["::/0"]) + computed_egress_prefix_list_ids = try(each.value.computed_egress_prefix_list_ids, var.defaults.computed_egress_prefix_list_ids, []) + computed_egress_rules = try(each.value.computed_egress_rules, var.defaults.computed_egress_rules, []) + computed_egress_with_cidr_ipv4 = try(each.value.computed_egress_with_cidr_ipv4, var.defaults.computed_egress_with_cidr_ipv4, []) + computed_egress_with_cidr_ipv6 = try(each.value.computed_egress_with_cidr_ipv6, var.defaults.computed_egress_with_cidr_ipv6, []) + computed_egress_with_prefix_list_id = try(each.value.computed_egress_with_prefix_list_id, var.defaults.computed_egress_with_prefix_list_id, []) + computed_egress_with_referenced_security_group_id = try(each.value.computed_egress_with_referenced_security_group_id, var.defaults.computed_egress_with_referenced_security_group_id, []) + computed_egress_with_self = try(each.value.computed_egress_with_self, var.defaults.computed_egress_with_self, []) + computed_ingress_cidr_blocks = try(each.value.computed_ingress_cidr_blocks, var.defaults.computed_ingress_cidr_blocks, []) + computed_ingress_ipv6_cidr_blocks = try(each.value.computed_ingress_ipv6_cidr_blocks, var.defaults.computed_ingress_ipv6_cidr_blocks, []) + computed_ingress_prefix_list_ids = try(each.value.computed_ingress_prefix_list_ids, var.defaults.computed_ingress_prefix_list_ids, []) + computed_ingress_rules = try(each.value.computed_ingress_rules, var.defaults.computed_ingress_rules, []) + computed_ingress_with_cidr_ipv4 = try(each.value.computed_ingress_with_cidr_ipv4, var.defaults.computed_ingress_with_cidr_ipv4, []) + computed_ingress_with_cidr_ipv6 = try(each.value.computed_ingress_with_cidr_ipv6, var.defaults.computed_ingress_with_cidr_ipv6, []) + computed_ingress_with_prefix_list_id = try(each.value.computed_ingress_with_prefix_list_id, var.defaults.computed_ingress_with_prefix_list_id, []) + computed_ingress_with_referenced_security_group_id = try(each.value.computed_ingress_with_referenced_security_group_id, var.defaults.computed_ingress_with_referenced_security_group_id, []) + computed_ingress_with_self = try(each.value.computed_ingress_with_self, var.defaults.computed_ingress_with_self, []) + create = try(each.value.create, var.defaults.create, true) + description = try(each.value.description, var.defaults.description, "Security Group managed by Terraform") + egress_cidr_ipv4 = try(each.value.egress_cidr_ipv4, var.defaults.egress_cidr_ipv4, ["0.0.0.0/0"]) + egress_cidr_ipv6 = try(each.value.egress_cidr_ipv6, var.defaults.egress_cidr_ipv6, ["::/0"]) + egress_prefix_list_ids = try(each.value.egress_prefix_list_ids, var.defaults.egress_prefix_list_ids, []) + egress_rules = try(each.value.egress_rules, var.defaults.egress_rules, []) + egress_with_cidr_ipv4 = try(each.value.egress_with_cidr_ipv4, var.defaults.egress_with_cidr_ipv4, []) + egress_with_cidr_ipv6 = try(each.value.egress_with_cidr_ipv6, var.defaults.egress_with_cidr_ipv6, []) + egress_with_prefix_list_id = try(each.value.egress_with_prefix_list_id, var.defaults.egress_with_prefix_list_id, []) + egress_with_referenced_security_group_id = try(each.value.egress_with_referenced_security_group_id, var.defaults.egress_with_referenced_security_group_id, []) + egress_with_self = try(each.value.egress_with_self, var.defaults.egress_with_self, []) + ingress_cidr_ipv4 = try(each.value.ingress_cidr_ipv4, var.defaults.ingress_cidr_ipv4, []) + ingress_cidr_ipv6 = try(each.value.ingress_cidr_ipv6, var.defaults.ingress_cidr_ipv6, []) + ingress_prefix_list_ids = try(each.value.ingress_prefix_list_ids, var.defaults.ingress_prefix_list_ids, []) + ingress_rules = try(each.value.ingress_rules, var.defaults.ingress_rules, []) + ingress_with_cidr_ipv4 = try(each.value.ingress_with_cidr_ipv4, var.defaults.ingress_with_cidr_ipv4, []) + ingress_with_cidr_ipv6 = try(each.value.ingress_with_cidr_ipv6, var.defaults.ingress_with_cidr_ipv6, []) + ingress_with_prefix_list_id = try(each.value.ingress_with_prefix_list_id, var.defaults.ingress_with_prefix_list_id, []) + ingress_with_referenced_security_group_id = try(each.value.ingress_with_referenced_security_group_id, var.defaults.ingress_with_referenced_security_group_id, []) + ingress_with_self = try(each.value.ingress_with_self, var.defaults.ingress_with_self, []) + name = try(each.value.name, var.defaults.name) + number_of_computed_egress_cidr_blocks = try(each.value.number_of_computed_egress_cidr_blocks, var.defaults.number_of_computed_egress_cidr_blocks, 0) + number_of_computed_egress_ipv6_cidr_blocks = try(each.value.number_of_computed_egress_ipv6_cidr_blocks, var.defaults.number_of_computed_egress_ipv6_cidr_blocks, 0) + number_of_computed_egress_prefix_list_ids = try(each.value.number_of_computed_egress_prefix_list_ids, var.defaults.number_of_computed_egress_prefix_list_ids, 0) + number_of_computed_egress_rules = try(each.value.number_of_computed_egress_rules, var.defaults.number_of_computed_egress_rules, 0) + number_of_computed_egress_with_cidr_ipv4 = try(each.value.number_of_computed_egress_with_cidr_ipv4, var.defaults.number_of_computed_egress_with_cidr_ipv4, 0) + number_of_computed_egress_with_cidr_ipv6 = try(each.value.number_of_computed_egress_with_cidr_ipv6, var.defaults.number_of_computed_egress_with_cidr_ipv6, 0) + number_of_computed_egress_with_prefix_list_id = try(each.value.number_of_computed_egress_with_prefix_list_id, var.defaults.number_of_computed_egress_with_prefix_list_id, 0) + number_of_computed_egress_with_referenced_security_group_id = try(each.value.number_of_computed_egress_with_referenced_security_group_id, var.defaults.number_of_computed_egress_with_referenced_security_group_id, 0) + number_of_computed_egress_with_self = try(each.value.number_of_computed_egress_with_self, var.defaults.number_of_computed_egress_with_self, 0) + number_of_computed_ingress_cidr_blocks = try(each.value.number_of_computed_ingress_cidr_blocks, var.defaults.number_of_computed_ingress_cidr_blocks, 0) + number_of_computed_ingress_ipv6_cidr_blocks = try(each.value.number_of_computed_ingress_ipv6_cidr_blocks, var.defaults.number_of_computed_ingress_ipv6_cidr_blocks, 0) + number_of_computed_ingress_prefix_list_ids = try(each.value.number_of_computed_ingress_prefix_list_ids, var.defaults.number_of_computed_ingress_prefix_list_ids, 0) + number_of_computed_ingress_rules = try(each.value.number_of_computed_ingress_rules, var.defaults.number_of_computed_ingress_rules, 0) + number_of_computed_ingress_with_cidr_ipv4 = try(each.value.number_of_computed_ingress_with_cidr_ipv4, var.defaults.number_of_computed_ingress_with_cidr_ipv4, 0) + number_of_computed_ingress_with_cidr_ipv6 = try(each.value.number_of_computed_ingress_with_cidr_ipv6, var.defaults.number_of_computed_ingress_with_cidr_ipv6, 0) + number_of_computed_ingress_with_prefix_list_id = try(each.value.number_of_computed_ingress_with_prefix_list_id, var.defaults.number_of_computed_ingress_with_prefix_list_id, 0) + number_of_computed_ingress_with_referenced_security_group_id = try(each.value.number_of_computed_ingress_with_referenced_security_group_id, var.defaults.number_of_computed_ingress_with_referenced_security_group_id, 0) + number_of_computed_ingress_with_self = try(each.value.number_of_computed_ingress_with_self, var.defaults.number_of_computed_ingress_with_self, 0) + revoke_rules_on_delete = try(each.value.revoke_rules_on_delete, var.defaults.revoke_rules_on_delete, false) + tags = try(each.value.tags, var.defaults.tags, {}) + use_name_prefix = try(each.value.use_name_prefix, var.defaults.use_name_prefix, true) + vpc_id = try(each.value.vpc_id, var.defaults.vpc_id) } diff --git a/wrappers/vault/main.tf b/wrappers/vault/main.tf index 35bbf6fa..38615e67 100644 --- a/wrappers/vault/main.tf +++ b/wrappers/vault/main.tf @@ -3,77 +3,77 @@ module "wrapper" { for_each = var.items - auto_computed_egress_rules = try(each.value.auto_computed_egress_rules, var.defaults.auto_computed_egress_rules, []) - auto_computed_egress_with_self = try(each.value.auto_computed_egress_with_self, var.defaults.auto_computed_egress_with_self, []) - auto_computed_ingress_rules = try(each.value.auto_computed_ingress_rules, var.defaults.auto_computed_ingress_rules, []) - auto_computed_ingress_with_self = try(each.value.auto_computed_ingress_with_self, var.defaults.auto_computed_ingress_with_self, []) - auto_egress_rules = try(each.value.auto_egress_rules, var.defaults.auto_egress_rules, ["all-all"]) - auto_egress_with_self = try(each.value.auto_egress_with_self, var.defaults.auto_egress_with_self, []) - auto_ingress_rules = try(each.value.auto_ingress_rules, var.defaults.auto_ingress_rules, ["vault-tcp"]) - auto_ingress_with_self = try(each.value.auto_ingress_with_self, var.defaults.auto_ingress_with_self, [{ "rule" = "all-all" }]) - auto_number_of_computed_egress_rules = try(each.value.auto_number_of_computed_egress_rules, var.defaults.auto_number_of_computed_egress_rules, 0) - auto_number_of_computed_egress_with_self = try(each.value.auto_number_of_computed_egress_with_self, var.defaults.auto_number_of_computed_egress_with_self, 0) - auto_number_of_computed_ingress_rules = try(each.value.auto_number_of_computed_ingress_rules, var.defaults.auto_number_of_computed_ingress_rules, 0) - auto_number_of_computed_ingress_with_self = try(each.value.auto_number_of_computed_ingress_with_self, var.defaults.auto_number_of_computed_ingress_with_self, 0) - computed_egress_cidr_blocks = try(each.value.computed_egress_cidr_blocks, var.defaults.computed_egress_cidr_blocks, ["0.0.0.0/0"]) - computed_egress_ipv6_cidr_blocks = try(each.value.computed_egress_ipv6_cidr_blocks, var.defaults.computed_egress_ipv6_cidr_blocks, ["::/0"]) - computed_egress_prefix_list_ids = try(each.value.computed_egress_prefix_list_ids, var.defaults.computed_egress_prefix_list_ids, []) - computed_egress_rules = try(each.value.computed_egress_rules, var.defaults.computed_egress_rules, []) - computed_egress_with_cidr_blocks = try(each.value.computed_egress_with_cidr_blocks, var.defaults.computed_egress_with_cidr_blocks, []) - computed_egress_with_ipv6_cidr_blocks = try(each.value.computed_egress_with_ipv6_cidr_blocks, var.defaults.computed_egress_with_ipv6_cidr_blocks, []) - computed_egress_with_prefix_list_ids = try(each.value.computed_egress_with_prefix_list_ids, var.defaults.computed_egress_with_prefix_list_ids, []) - computed_egress_with_self = try(each.value.computed_egress_with_self, var.defaults.computed_egress_with_self, []) - computed_egress_with_source_security_group_id = try(each.value.computed_egress_with_source_security_group_id, var.defaults.computed_egress_with_source_security_group_id, []) - computed_ingress_cidr_blocks = try(each.value.computed_ingress_cidr_blocks, var.defaults.computed_ingress_cidr_blocks, []) - computed_ingress_ipv6_cidr_blocks = try(each.value.computed_ingress_ipv6_cidr_blocks, var.defaults.computed_ingress_ipv6_cidr_blocks, []) - computed_ingress_prefix_list_ids = try(each.value.computed_ingress_prefix_list_ids, var.defaults.computed_ingress_prefix_list_ids, []) - computed_ingress_rules = try(each.value.computed_ingress_rules, var.defaults.computed_ingress_rules, []) - computed_ingress_with_cidr_blocks = try(each.value.computed_ingress_with_cidr_blocks, var.defaults.computed_ingress_with_cidr_blocks, []) - computed_ingress_with_ipv6_cidr_blocks = try(each.value.computed_ingress_with_ipv6_cidr_blocks, var.defaults.computed_ingress_with_ipv6_cidr_blocks, []) - computed_ingress_with_prefix_list_ids = try(each.value.computed_ingress_with_prefix_list_ids, var.defaults.computed_ingress_with_prefix_list_ids, []) - computed_ingress_with_self = try(each.value.computed_ingress_with_self, var.defaults.computed_ingress_with_self, []) - computed_ingress_with_source_security_group_id = try(each.value.computed_ingress_with_source_security_group_id, var.defaults.computed_ingress_with_source_security_group_id, []) - create = try(each.value.create, var.defaults.create, true) - description = try(each.value.description, var.defaults.description, "Security Group managed by Terraform") - egress_cidr_blocks = try(each.value.egress_cidr_blocks, var.defaults.egress_cidr_blocks, ["0.0.0.0/0"]) - egress_ipv6_cidr_blocks = try(each.value.egress_ipv6_cidr_blocks, var.defaults.egress_ipv6_cidr_blocks, ["::/0"]) - egress_prefix_list_ids = try(each.value.egress_prefix_list_ids, var.defaults.egress_prefix_list_ids, []) - egress_rules = try(each.value.egress_rules, var.defaults.egress_rules, []) - egress_with_cidr_blocks = try(each.value.egress_with_cidr_blocks, var.defaults.egress_with_cidr_blocks, []) - egress_with_ipv6_cidr_blocks = try(each.value.egress_with_ipv6_cidr_blocks, var.defaults.egress_with_ipv6_cidr_blocks, []) - egress_with_prefix_list_ids = try(each.value.egress_with_prefix_list_ids, var.defaults.egress_with_prefix_list_ids, []) - egress_with_self = try(each.value.egress_with_self, var.defaults.egress_with_self, []) - egress_with_source_security_group_id = try(each.value.egress_with_source_security_group_id, var.defaults.egress_with_source_security_group_id, []) - ingress_cidr_blocks = try(each.value.ingress_cidr_blocks, var.defaults.ingress_cidr_blocks, []) - ingress_ipv6_cidr_blocks = try(each.value.ingress_ipv6_cidr_blocks, var.defaults.ingress_ipv6_cidr_blocks, []) - ingress_prefix_list_ids = try(each.value.ingress_prefix_list_ids, var.defaults.ingress_prefix_list_ids, []) - ingress_rules = try(each.value.ingress_rules, var.defaults.ingress_rules, []) - ingress_with_cidr_blocks = try(each.value.ingress_with_cidr_blocks, var.defaults.ingress_with_cidr_blocks, []) - ingress_with_ipv6_cidr_blocks = try(each.value.ingress_with_ipv6_cidr_blocks, var.defaults.ingress_with_ipv6_cidr_blocks, []) - ingress_with_prefix_list_ids = try(each.value.ingress_with_prefix_list_ids, var.defaults.ingress_with_prefix_list_ids, []) - ingress_with_self = try(each.value.ingress_with_self, var.defaults.ingress_with_self, []) - ingress_with_source_security_group_id = try(each.value.ingress_with_source_security_group_id, var.defaults.ingress_with_source_security_group_id, []) - name = try(each.value.name, var.defaults.name) - number_of_computed_egress_cidr_blocks = try(each.value.number_of_computed_egress_cidr_blocks, var.defaults.number_of_computed_egress_cidr_blocks, 0) - number_of_computed_egress_ipv6_cidr_blocks = try(each.value.number_of_computed_egress_ipv6_cidr_blocks, var.defaults.number_of_computed_egress_ipv6_cidr_blocks, 0) - number_of_computed_egress_prefix_list_ids = try(each.value.number_of_computed_egress_prefix_list_ids, var.defaults.number_of_computed_egress_prefix_list_ids, 0) - number_of_computed_egress_rules = try(each.value.number_of_computed_egress_rules, var.defaults.number_of_computed_egress_rules, 0) - number_of_computed_egress_with_cidr_blocks = try(each.value.number_of_computed_egress_with_cidr_blocks, var.defaults.number_of_computed_egress_with_cidr_blocks, 0) - number_of_computed_egress_with_ipv6_cidr_blocks = try(each.value.number_of_computed_egress_with_ipv6_cidr_blocks, var.defaults.number_of_computed_egress_with_ipv6_cidr_blocks, 0) - number_of_computed_egress_with_prefix_list_ids = try(each.value.number_of_computed_egress_with_prefix_list_ids, var.defaults.number_of_computed_egress_with_prefix_list_ids, 0) - number_of_computed_egress_with_self = try(each.value.number_of_computed_egress_with_self, var.defaults.number_of_computed_egress_with_self, 0) - number_of_computed_egress_with_source_security_group_id = try(each.value.number_of_computed_egress_with_source_security_group_id, var.defaults.number_of_computed_egress_with_source_security_group_id, 0) - number_of_computed_ingress_cidr_blocks = try(each.value.number_of_computed_ingress_cidr_blocks, var.defaults.number_of_computed_ingress_cidr_blocks, 0) - number_of_computed_ingress_ipv6_cidr_blocks = try(each.value.number_of_computed_ingress_ipv6_cidr_blocks, var.defaults.number_of_computed_ingress_ipv6_cidr_blocks, 0) - number_of_computed_ingress_prefix_list_ids = try(each.value.number_of_computed_ingress_prefix_list_ids, var.defaults.number_of_computed_ingress_prefix_list_ids, 0) - number_of_computed_ingress_rules = try(each.value.number_of_computed_ingress_rules, var.defaults.number_of_computed_ingress_rules, 0) - number_of_computed_ingress_with_cidr_blocks = try(each.value.number_of_computed_ingress_with_cidr_blocks, var.defaults.number_of_computed_ingress_with_cidr_blocks, 0) - number_of_computed_ingress_with_ipv6_cidr_blocks = try(each.value.number_of_computed_ingress_with_ipv6_cidr_blocks, var.defaults.number_of_computed_ingress_with_ipv6_cidr_blocks, 0) - number_of_computed_ingress_with_prefix_list_ids = try(each.value.number_of_computed_ingress_with_prefix_list_ids, var.defaults.number_of_computed_ingress_with_prefix_list_ids, 0) - number_of_computed_ingress_with_self = try(each.value.number_of_computed_ingress_with_self, var.defaults.number_of_computed_ingress_with_self, 0) - number_of_computed_ingress_with_source_security_group_id = try(each.value.number_of_computed_ingress_with_source_security_group_id, var.defaults.number_of_computed_ingress_with_source_security_group_id, 0) - revoke_rules_on_delete = try(each.value.revoke_rules_on_delete, var.defaults.revoke_rules_on_delete, false) - tags = try(each.value.tags, var.defaults.tags, {}) - use_name_prefix = try(each.value.use_name_prefix, var.defaults.use_name_prefix, true) - vpc_id = try(each.value.vpc_id, var.defaults.vpc_id) + auto_computed_egress_rules = try(each.value.auto_computed_egress_rules, var.defaults.auto_computed_egress_rules, []) + auto_computed_egress_with_self = try(each.value.auto_computed_egress_with_self, var.defaults.auto_computed_egress_with_self, []) + auto_computed_ingress_rules = try(each.value.auto_computed_ingress_rules, var.defaults.auto_computed_ingress_rules, []) + auto_computed_ingress_with_self = try(each.value.auto_computed_ingress_with_self, var.defaults.auto_computed_ingress_with_self, []) + auto_egress_rules = try(each.value.auto_egress_rules, var.defaults.auto_egress_rules, ["all-all"]) + auto_egress_with_self = try(each.value.auto_egress_with_self, var.defaults.auto_egress_with_self, []) + auto_ingress_rules = try(each.value.auto_ingress_rules, var.defaults.auto_ingress_rules, ["vault-tcp"]) + auto_ingress_with_self = try(each.value.auto_ingress_with_self, var.defaults.auto_ingress_with_self, [{ "rule" = "all-all" }]) + auto_number_of_computed_egress_rules = try(each.value.auto_number_of_computed_egress_rules, var.defaults.auto_number_of_computed_egress_rules, 0) + auto_number_of_computed_egress_with_self = try(each.value.auto_number_of_computed_egress_with_self, var.defaults.auto_number_of_computed_egress_with_self, 0) + auto_number_of_computed_ingress_rules = try(each.value.auto_number_of_computed_ingress_rules, var.defaults.auto_number_of_computed_ingress_rules, 0) + auto_number_of_computed_ingress_with_self = try(each.value.auto_number_of_computed_ingress_with_self, var.defaults.auto_number_of_computed_ingress_with_self, 0) + computed_egress_cidr_blocks = try(each.value.computed_egress_cidr_blocks, var.defaults.computed_egress_cidr_blocks, ["0.0.0.0/0"]) + computed_egress_ipv6_cidr_blocks = try(each.value.computed_egress_ipv6_cidr_blocks, var.defaults.computed_egress_ipv6_cidr_blocks, ["::/0"]) + computed_egress_prefix_list_ids = try(each.value.computed_egress_prefix_list_ids, var.defaults.computed_egress_prefix_list_ids, []) + computed_egress_rules = try(each.value.computed_egress_rules, var.defaults.computed_egress_rules, []) + computed_egress_with_cidr_ipv4 = try(each.value.computed_egress_with_cidr_ipv4, var.defaults.computed_egress_with_cidr_ipv4, []) + computed_egress_with_cidr_ipv6 = try(each.value.computed_egress_with_cidr_ipv6, var.defaults.computed_egress_with_cidr_ipv6, []) + computed_egress_with_prefix_list_id = try(each.value.computed_egress_with_prefix_list_id, var.defaults.computed_egress_with_prefix_list_id, []) + computed_egress_with_referenced_security_group_id = try(each.value.computed_egress_with_referenced_security_group_id, var.defaults.computed_egress_with_referenced_security_group_id, []) + computed_egress_with_self = try(each.value.computed_egress_with_self, var.defaults.computed_egress_with_self, []) + computed_ingress_cidr_blocks = try(each.value.computed_ingress_cidr_blocks, var.defaults.computed_ingress_cidr_blocks, []) + computed_ingress_ipv6_cidr_blocks = try(each.value.computed_ingress_ipv6_cidr_blocks, var.defaults.computed_ingress_ipv6_cidr_blocks, []) + computed_ingress_prefix_list_ids = try(each.value.computed_ingress_prefix_list_ids, var.defaults.computed_ingress_prefix_list_ids, []) + computed_ingress_rules = try(each.value.computed_ingress_rules, var.defaults.computed_ingress_rules, []) + computed_ingress_with_cidr_ipv4 = try(each.value.computed_ingress_with_cidr_ipv4, var.defaults.computed_ingress_with_cidr_ipv4, []) + computed_ingress_with_cidr_ipv6 = try(each.value.computed_ingress_with_cidr_ipv6, var.defaults.computed_ingress_with_cidr_ipv6, []) + computed_ingress_with_prefix_list_id = try(each.value.computed_ingress_with_prefix_list_id, var.defaults.computed_ingress_with_prefix_list_id, []) + computed_ingress_with_referenced_security_group_id = try(each.value.computed_ingress_with_referenced_security_group_id, var.defaults.computed_ingress_with_referenced_security_group_id, []) + computed_ingress_with_self = try(each.value.computed_ingress_with_self, var.defaults.computed_ingress_with_self, []) + create = try(each.value.create, var.defaults.create, true) + description = try(each.value.description, var.defaults.description, "Security Group managed by Terraform") + egress_cidr_ipv4 = try(each.value.egress_cidr_ipv4, var.defaults.egress_cidr_ipv4, ["0.0.0.0/0"]) + egress_cidr_ipv6 = try(each.value.egress_cidr_ipv6, var.defaults.egress_cidr_ipv6, ["::/0"]) + egress_prefix_list_ids = try(each.value.egress_prefix_list_ids, var.defaults.egress_prefix_list_ids, []) + egress_rules = try(each.value.egress_rules, var.defaults.egress_rules, []) + egress_with_cidr_ipv4 = try(each.value.egress_with_cidr_ipv4, var.defaults.egress_with_cidr_ipv4, []) + egress_with_cidr_ipv6 = try(each.value.egress_with_cidr_ipv6, var.defaults.egress_with_cidr_ipv6, []) + egress_with_prefix_list_id = try(each.value.egress_with_prefix_list_id, var.defaults.egress_with_prefix_list_id, []) + egress_with_referenced_security_group_id = try(each.value.egress_with_referenced_security_group_id, var.defaults.egress_with_referenced_security_group_id, []) + egress_with_self = try(each.value.egress_with_self, var.defaults.egress_with_self, []) + ingress_cidr_ipv4 = try(each.value.ingress_cidr_ipv4, var.defaults.ingress_cidr_ipv4, []) + ingress_cidr_ipv6 = try(each.value.ingress_cidr_ipv6, var.defaults.ingress_cidr_ipv6, []) + ingress_prefix_list_ids = try(each.value.ingress_prefix_list_ids, var.defaults.ingress_prefix_list_ids, []) + ingress_rules = try(each.value.ingress_rules, var.defaults.ingress_rules, []) + ingress_with_cidr_ipv4 = try(each.value.ingress_with_cidr_ipv4, var.defaults.ingress_with_cidr_ipv4, []) + ingress_with_cidr_ipv6 = try(each.value.ingress_with_cidr_ipv6, var.defaults.ingress_with_cidr_ipv6, []) + ingress_with_prefix_list_id = try(each.value.ingress_with_prefix_list_id, var.defaults.ingress_with_prefix_list_id, []) + ingress_with_referenced_security_group_id = try(each.value.ingress_with_referenced_security_group_id, var.defaults.ingress_with_referenced_security_group_id, []) + ingress_with_self = try(each.value.ingress_with_self, var.defaults.ingress_with_self, []) + name = try(each.value.name, var.defaults.name) + number_of_computed_egress_cidr_blocks = try(each.value.number_of_computed_egress_cidr_blocks, var.defaults.number_of_computed_egress_cidr_blocks, 0) + number_of_computed_egress_ipv6_cidr_blocks = try(each.value.number_of_computed_egress_ipv6_cidr_blocks, var.defaults.number_of_computed_egress_ipv6_cidr_blocks, 0) + number_of_computed_egress_prefix_list_ids = try(each.value.number_of_computed_egress_prefix_list_ids, var.defaults.number_of_computed_egress_prefix_list_ids, 0) + number_of_computed_egress_rules = try(each.value.number_of_computed_egress_rules, var.defaults.number_of_computed_egress_rules, 0) + number_of_computed_egress_with_cidr_ipv4 = try(each.value.number_of_computed_egress_with_cidr_ipv4, var.defaults.number_of_computed_egress_with_cidr_ipv4, 0) + number_of_computed_egress_with_cidr_ipv6 = try(each.value.number_of_computed_egress_with_cidr_ipv6, var.defaults.number_of_computed_egress_with_cidr_ipv6, 0) + number_of_computed_egress_with_prefix_list_id = try(each.value.number_of_computed_egress_with_prefix_list_id, var.defaults.number_of_computed_egress_with_prefix_list_id, 0) + number_of_computed_egress_with_referenced_security_group_id = try(each.value.number_of_computed_egress_with_referenced_security_group_id, var.defaults.number_of_computed_egress_with_referenced_security_group_id, 0) + number_of_computed_egress_with_self = try(each.value.number_of_computed_egress_with_self, var.defaults.number_of_computed_egress_with_self, 0) + number_of_computed_ingress_cidr_blocks = try(each.value.number_of_computed_ingress_cidr_blocks, var.defaults.number_of_computed_ingress_cidr_blocks, 0) + number_of_computed_ingress_ipv6_cidr_blocks = try(each.value.number_of_computed_ingress_ipv6_cidr_blocks, var.defaults.number_of_computed_ingress_ipv6_cidr_blocks, 0) + number_of_computed_ingress_prefix_list_ids = try(each.value.number_of_computed_ingress_prefix_list_ids, var.defaults.number_of_computed_ingress_prefix_list_ids, 0) + number_of_computed_ingress_rules = try(each.value.number_of_computed_ingress_rules, var.defaults.number_of_computed_ingress_rules, 0) + number_of_computed_ingress_with_cidr_ipv4 = try(each.value.number_of_computed_ingress_with_cidr_ipv4, var.defaults.number_of_computed_ingress_with_cidr_ipv4, 0) + number_of_computed_ingress_with_cidr_ipv6 = try(each.value.number_of_computed_ingress_with_cidr_ipv6, var.defaults.number_of_computed_ingress_with_cidr_ipv6, 0) + number_of_computed_ingress_with_prefix_list_id = try(each.value.number_of_computed_ingress_with_prefix_list_id, var.defaults.number_of_computed_ingress_with_prefix_list_id, 0) + number_of_computed_ingress_with_referenced_security_group_id = try(each.value.number_of_computed_ingress_with_referenced_security_group_id, var.defaults.number_of_computed_ingress_with_referenced_security_group_id, 0) + number_of_computed_ingress_with_self = try(each.value.number_of_computed_ingress_with_self, var.defaults.number_of_computed_ingress_with_self, 0) + revoke_rules_on_delete = try(each.value.revoke_rules_on_delete, var.defaults.revoke_rules_on_delete, false) + tags = try(each.value.tags, var.defaults.tags, {}) + use_name_prefix = try(each.value.use_name_prefix, var.defaults.use_name_prefix, true) + vpc_id = try(each.value.vpc_id, var.defaults.vpc_id) } diff --git a/wrappers/wazuh/main.tf b/wrappers/wazuh/main.tf index a9d76b0f..45d7c09f 100644 --- a/wrappers/wazuh/main.tf +++ b/wrappers/wazuh/main.tf @@ -3,77 +3,77 @@ module "wrapper" { for_each = var.items - auto_computed_egress_rules = try(each.value.auto_computed_egress_rules, var.defaults.auto_computed_egress_rules, []) - auto_computed_egress_with_self = try(each.value.auto_computed_egress_with_self, var.defaults.auto_computed_egress_with_self, []) - auto_computed_ingress_rules = try(each.value.auto_computed_ingress_rules, var.defaults.auto_computed_ingress_rules, []) - auto_computed_ingress_with_self = try(each.value.auto_computed_ingress_with_self, var.defaults.auto_computed_ingress_with_self, []) - auto_egress_rules = try(each.value.auto_egress_rules, var.defaults.auto_egress_rules, ["all-all"]) - auto_egress_with_self = try(each.value.auto_egress_with_self, var.defaults.auto_egress_with_self, []) - auto_ingress_rules = try(each.value.auto_ingress_rules, var.defaults.auto_ingress_rules, ["wazuh-server-agent-connection-tcp", "wazuh-server-agent-connection-udp", "wazuh-server-agent-enrollment", "wazuh-server-agent-cluster-daemon", "wazuh-server-syslog-collector-tcp", "wazuh-server-syslog-collector-udp", "wazuh-server-restful-api", "wazuh-indexer-restful-api", "wazuh-dashboard"]) - auto_ingress_with_self = try(each.value.auto_ingress_with_self, var.defaults.auto_ingress_with_self, [{ "rule" = "all-all" }]) - auto_number_of_computed_egress_rules = try(each.value.auto_number_of_computed_egress_rules, var.defaults.auto_number_of_computed_egress_rules, 0) - auto_number_of_computed_egress_with_self = try(each.value.auto_number_of_computed_egress_with_self, var.defaults.auto_number_of_computed_egress_with_self, 0) - auto_number_of_computed_ingress_rules = try(each.value.auto_number_of_computed_ingress_rules, var.defaults.auto_number_of_computed_ingress_rules, 0) - auto_number_of_computed_ingress_with_self = try(each.value.auto_number_of_computed_ingress_with_self, var.defaults.auto_number_of_computed_ingress_with_self, 0) - computed_egress_cidr_blocks = try(each.value.computed_egress_cidr_blocks, var.defaults.computed_egress_cidr_blocks, ["0.0.0.0/0"]) - computed_egress_ipv6_cidr_blocks = try(each.value.computed_egress_ipv6_cidr_blocks, var.defaults.computed_egress_ipv6_cidr_blocks, ["::/0"]) - computed_egress_prefix_list_ids = try(each.value.computed_egress_prefix_list_ids, var.defaults.computed_egress_prefix_list_ids, []) - computed_egress_rules = try(each.value.computed_egress_rules, var.defaults.computed_egress_rules, []) - computed_egress_with_cidr_blocks = try(each.value.computed_egress_with_cidr_blocks, var.defaults.computed_egress_with_cidr_blocks, []) - computed_egress_with_ipv6_cidr_blocks = try(each.value.computed_egress_with_ipv6_cidr_blocks, var.defaults.computed_egress_with_ipv6_cidr_blocks, []) - computed_egress_with_prefix_list_ids = try(each.value.computed_egress_with_prefix_list_ids, var.defaults.computed_egress_with_prefix_list_ids, []) - computed_egress_with_self = try(each.value.computed_egress_with_self, var.defaults.computed_egress_with_self, []) - computed_egress_with_source_security_group_id = try(each.value.computed_egress_with_source_security_group_id, var.defaults.computed_egress_with_source_security_group_id, []) - computed_ingress_cidr_blocks = try(each.value.computed_ingress_cidr_blocks, var.defaults.computed_ingress_cidr_blocks, []) - computed_ingress_ipv6_cidr_blocks = try(each.value.computed_ingress_ipv6_cidr_blocks, var.defaults.computed_ingress_ipv6_cidr_blocks, []) - computed_ingress_prefix_list_ids = try(each.value.computed_ingress_prefix_list_ids, var.defaults.computed_ingress_prefix_list_ids, []) - computed_ingress_rules = try(each.value.computed_ingress_rules, var.defaults.computed_ingress_rules, []) - computed_ingress_with_cidr_blocks = try(each.value.computed_ingress_with_cidr_blocks, var.defaults.computed_ingress_with_cidr_blocks, []) - computed_ingress_with_ipv6_cidr_blocks = try(each.value.computed_ingress_with_ipv6_cidr_blocks, var.defaults.computed_ingress_with_ipv6_cidr_blocks, []) - computed_ingress_with_prefix_list_ids = try(each.value.computed_ingress_with_prefix_list_ids, var.defaults.computed_ingress_with_prefix_list_ids, []) - computed_ingress_with_self = try(each.value.computed_ingress_with_self, var.defaults.computed_ingress_with_self, []) - computed_ingress_with_source_security_group_id = try(each.value.computed_ingress_with_source_security_group_id, var.defaults.computed_ingress_with_source_security_group_id, []) - create = try(each.value.create, var.defaults.create, true) - description = try(each.value.description, var.defaults.description, "Security Group managed by Terraform") - egress_cidr_blocks = try(each.value.egress_cidr_blocks, var.defaults.egress_cidr_blocks, ["0.0.0.0/0"]) - egress_ipv6_cidr_blocks = try(each.value.egress_ipv6_cidr_blocks, var.defaults.egress_ipv6_cidr_blocks, ["::/0"]) - egress_prefix_list_ids = try(each.value.egress_prefix_list_ids, var.defaults.egress_prefix_list_ids, []) - egress_rules = try(each.value.egress_rules, var.defaults.egress_rules, []) - egress_with_cidr_blocks = try(each.value.egress_with_cidr_blocks, var.defaults.egress_with_cidr_blocks, []) - egress_with_ipv6_cidr_blocks = try(each.value.egress_with_ipv6_cidr_blocks, var.defaults.egress_with_ipv6_cidr_blocks, []) - egress_with_prefix_list_ids = try(each.value.egress_with_prefix_list_ids, var.defaults.egress_with_prefix_list_ids, []) - egress_with_self = try(each.value.egress_with_self, var.defaults.egress_with_self, []) - egress_with_source_security_group_id = try(each.value.egress_with_source_security_group_id, var.defaults.egress_with_source_security_group_id, []) - ingress_cidr_blocks = try(each.value.ingress_cidr_blocks, var.defaults.ingress_cidr_blocks, []) - ingress_ipv6_cidr_blocks = try(each.value.ingress_ipv6_cidr_blocks, var.defaults.ingress_ipv6_cidr_blocks, []) - ingress_prefix_list_ids = try(each.value.ingress_prefix_list_ids, var.defaults.ingress_prefix_list_ids, []) - ingress_rules = try(each.value.ingress_rules, var.defaults.ingress_rules, []) - ingress_with_cidr_blocks = try(each.value.ingress_with_cidr_blocks, var.defaults.ingress_with_cidr_blocks, []) - ingress_with_ipv6_cidr_blocks = try(each.value.ingress_with_ipv6_cidr_blocks, var.defaults.ingress_with_ipv6_cidr_blocks, []) - ingress_with_prefix_list_ids = try(each.value.ingress_with_prefix_list_ids, var.defaults.ingress_with_prefix_list_ids, []) - ingress_with_self = try(each.value.ingress_with_self, var.defaults.ingress_with_self, []) - ingress_with_source_security_group_id = try(each.value.ingress_with_source_security_group_id, var.defaults.ingress_with_source_security_group_id, []) - name = try(each.value.name, var.defaults.name) - number_of_computed_egress_cidr_blocks = try(each.value.number_of_computed_egress_cidr_blocks, var.defaults.number_of_computed_egress_cidr_blocks, 0) - number_of_computed_egress_ipv6_cidr_blocks = try(each.value.number_of_computed_egress_ipv6_cidr_blocks, var.defaults.number_of_computed_egress_ipv6_cidr_blocks, 0) - number_of_computed_egress_prefix_list_ids = try(each.value.number_of_computed_egress_prefix_list_ids, var.defaults.number_of_computed_egress_prefix_list_ids, 0) - number_of_computed_egress_rules = try(each.value.number_of_computed_egress_rules, var.defaults.number_of_computed_egress_rules, 0) - number_of_computed_egress_with_cidr_blocks = try(each.value.number_of_computed_egress_with_cidr_blocks, var.defaults.number_of_computed_egress_with_cidr_blocks, 0) - number_of_computed_egress_with_ipv6_cidr_blocks = try(each.value.number_of_computed_egress_with_ipv6_cidr_blocks, var.defaults.number_of_computed_egress_with_ipv6_cidr_blocks, 0) - number_of_computed_egress_with_prefix_list_ids = try(each.value.number_of_computed_egress_with_prefix_list_ids, var.defaults.number_of_computed_egress_with_prefix_list_ids, 0) - number_of_computed_egress_with_self = try(each.value.number_of_computed_egress_with_self, var.defaults.number_of_computed_egress_with_self, 0) - number_of_computed_egress_with_source_security_group_id = try(each.value.number_of_computed_egress_with_source_security_group_id, var.defaults.number_of_computed_egress_with_source_security_group_id, 0) - number_of_computed_ingress_cidr_blocks = try(each.value.number_of_computed_ingress_cidr_blocks, var.defaults.number_of_computed_ingress_cidr_blocks, 0) - number_of_computed_ingress_ipv6_cidr_blocks = try(each.value.number_of_computed_ingress_ipv6_cidr_blocks, var.defaults.number_of_computed_ingress_ipv6_cidr_blocks, 0) - number_of_computed_ingress_prefix_list_ids = try(each.value.number_of_computed_ingress_prefix_list_ids, var.defaults.number_of_computed_ingress_prefix_list_ids, 0) - number_of_computed_ingress_rules = try(each.value.number_of_computed_ingress_rules, var.defaults.number_of_computed_ingress_rules, 0) - number_of_computed_ingress_with_cidr_blocks = try(each.value.number_of_computed_ingress_with_cidr_blocks, var.defaults.number_of_computed_ingress_with_cidr_blocks, 0) - number_of_computed_ingress_with_ipv6_cidr_blocks = try(each.value.number_of_computed_ingress_with_ipv6_cidr_blocks, var.defaults.number_of_computed_ingress_with_ipv6_cidr_blocks, 0) - number_of_computed_ingress_with_prefix_list_ids = try(each.value.number_of_computed_ingress_with_prefix_list_ids, var.defaults.number_of_computed_ingress_with_prefix_list_ids, 0) - number_of_computed_ingress_with_self = try(each.value.number_of_computed_ingress_with_self, var.defaults.number_of_computed_ingress_with_self, 0) - number_of_computed_ingress_with_source_security_group_id = try(each.value.number_of_computed_ingress_with_source_security_group_id, var.defaults.number_of_computed_ingress_with_source_security_group_id, 0) - revoke_rules_on_delete = try(each.value.revoke_rules_on_delete, var.defaults.revoke_rules_on_delete, false) - tags = try(each.value.tags, var.defaults.tags, {}) - use_name_prefix = try(each.value.use_name_prefix, var.defaults.use_name_prefix, true) - vpc_id = try(each.value.vpc_id, var.defaults.vpc_id) + auto_computed_egress_rules = try(each.value.auto_computed_egress_rules, var.defaults.auto_computed_egress_rules, []) + auto_computed_egress_with_self = try(each.value.auto_computed_egress_with_self, var.defaults.auto_computed_egress_with_self, []) + auto_computed_ingress_rules = try(each.value.auto_computed_ingress_rules, var.defaults.auto_computed_ingress_rules, []) + auto_computed_ingress_with_self = try(each.value.auto_computed_ingress_with_self, var.defaults.auto_computed_ingress_with_self, []) + auto_egress_rules = try(each.value.auto_egress_rules, var.defaults.auto_egress_rules, ["all-all"]) + auto_egress_with_self = try(each.value.auto_egress_with_self, var.defaults.auto_egress_with_self, []) + auto_ingress_rules = try(each.value.auto_ingress_rules, var.defaults.auto_ingress_rules, ["wazuh-server-agent-connection-tcp", "wazuh-server-agent-connection-udp", "wazuh-server-agent-enrollment", "wazuh-server-agent-cluster-daemon", "wazuh-server-syslog-collector-tcp", "wazuh-server-syslog-collector-udp", "wazuh-server-restful-api", "wazuh-indexer-restful-api", "wazuh-dashboard"]) + auto_ingress_with_self = try(each.value.auto_ingress_with_self, var.defaults.auto_ingress_with_self, [{ "rule" = "all-all" }]) + auto_number_of_computed_egress_rules = try(each.value.auto_number_of_computed_egress_rules, var.defaults.auto_number_of_computed_egress_rules, 0) + auto_number_of_computed_egress_with_self = try(each.value.auto_number_of_computed_egress_with_self, var.defaults.auto_number_of_computed_egress_with_self, 0) + auto_number_of_computed_ingress_rules = try(each.value.auto_number_of_computed_ingress_rules, var.defaults.auto_number_of_computed_ingress_rules, 0) + auto_number_of_computed_ingress_with_self = try(each.value.auto_number_of_computed_ingress_with_self, var.defaults.auto_number_of_computed_ingress_with_self, 0) + computed_egress_cidr_blocks = try(each.value.computed_egress_cidr_blocks, var.defaults.computed_egress_cidr_blocks, ["0.0.0.0/0"]) + computed_egress_ipv6_cidr_blocks = try(each.value.computed_egress_ipv6_cidr_blocks, var.defaults.computed_egress_ipv6_cidr_blocks, ["::/0"]) + computed_egress_prefix_list_ids = try(each.value.computed_egress_prefix_list_ids, var.defaults.computed_egress_prefix_list_ids, []) + computed_egress_rules = try(each.value.computed_egress_rules, var.defaults.computed_egress_rules, []) + computed_egress_with_cidr_ipv4 = try(each.value.computed_egress_with_cidr_ipv4, var.defaults.computed_egress_with_cidr_ipv4, []) + computed_egress_with_cidr_ipv6 = try(each.value.computed_egress_with_cidr_ipv6, var.defaults.computed_egress_with_cidr_ipv6, []) + computed_egress_with_prefix_list_id = try(each.value.computed_egress_with_prefix_list_id, var.defaults.computed_egress_with_prefix_list_id, []) + computed_egress_with_referenced_security_group_id = try(each.value.computed_egress_with_referenced_security_group_id, var.defaults.computed_egress_with_referenced_security_group_id, []) + computed_egress_with_self = try(each.value.computed_egress_with_self, var.defaults.computed_egress_with_self, []) + computed_ingress_cidr_blocks = try(each.value.computed_ingress_cidr_blocks, var.defaults.computed_ingress_cidr_blocks, []) + computed_ingress_ipv6_cidr_blocks = try(each.value.computed_ingress_ipv6_cidr_blocks, var.defaults.computed_ingress_ipv6_cidr_blocks, []) + computed_ingress_prefix_list_ids = try(each.value.computed_ingress_prefix_list_ids, var.defaults.computed_ingress_prefix_list_ids, []) + computed_ingress_rules = try(each.value.computed_ingress_rules, var.defaults.computed_ingress_rules, []) + computed_ingress_with_cidr_ipv4 = try(each.value.computed_ingress_with_cidr_ipv4, var.defaults.computed_ingress_with_cidr_ipv4, []) + computed_ingress_with_cidr_ipv6 = try(each.value.computed_ingress_with_cidr_ipv6, var.defaults.computed_ingress_with_cidr_ipv6, []) + computed_ingress_with_prefix_list_id = try(each.value.computed_ingress_with_prefix_list_id, var.defaults.computed_ingress_with_prefix_list_id, []) + computed_ingress_with_referenced_security_group_id = try(each.value.computed_ingress_with_referenced_security_group_id, var.defaults.computed_ingress_with_referenced_security_group_id, []) + computed_ingress_with_self = try(each.value.computed_ingress_with_self, var.defaults.computed_ingress_with_self, []) + create = try(each.value.create, var.defaults.create, true) + description = try(each.value.description, var.defaults.description, "Security Group managed by Terraform") + egress_cidr_ipv4 = try(each.value.egress_cidr_ipv4, var.defaults.egress_cidr_ipv4, ["0.0.0.0/0"]) + egress_cidr_ipv6 = try(each.value.egress_cidr_ipv6, var.defaults.egress_cidr_ipv6, ["::/0"]) + egress_prefix_list_ids = try(each.value.egress_prefix_list_ids, var.defaults.egress_prefix_list_ids, []) + egress_rules = try(each.value.egress_rules, var.defaults.egress_rules, []) + egress_with_cidr_ipv4 = try(each.value.egress_with_cidr_ipv4, var.defaults.egress_with_cidr_ipv4, []) + egress_with_cidr_ipv6 = try(each.value.egress_with_cidr_ipv6, var.defaults.egress_with_cidr_ipv6, []) + egress_with_prefix_list_id = try(each.value.egress_with_prefix_list_id, var.defaults.egress_with_prefix_list_id, []) + egress_with_referenced_security_group_id = try(each.value.egress_with_referenced_security_group_id, var.defaults.egress_with_referenced_security_group_id, []) + egress_with_self = try(each.value.egress_with_self, var.defaults.egress_with_self, []) + ingress_cidr_ipv4 = try(each.value.ingress_cidr_ipv4, var.defaults.ingress_cidr_ipv4, []) + ingress_cidr_ipv6 = try(each.value.ingress_cidr_ipv6, var.defaults.ingress_cidr_ipv6, []) + ingress_prefix_list_ids = try(each.value.ingress_prefix_list_ids, var.defaults.ingress_prefix_list_ids, []) + ingress_rules = try(each.value.ingress_rules, var.defaults.ingress_rules, []) + ingress_with_cidr_ipv4 = try(each.value.ingress_with_cidr_ipv4, var.defaults.ingress_with_cidr_ipv4, []) + ingress_with_cidr_ipv6 = try(each.value.ingress_with_cidr_ipv6, var.defaults.ingress_with_cidr_ipv6, []) + ingress_with_prefix_list_id = try(each.value.ingress_with_prefix_list_id, var.defaults.ingress_with_prefix_list_id, []) + ingress_with_referenced_security_group_id = try(each.value.ingress_with_referenced_security_group_id, var.defaults.ingress_with_referenced_security_group_id, []) + ingress_with_self = try(each.value.ingress_with_self, var.defaults.ingress_with_self, []) + name = try(each.value.name, var.defaults.name) + number_of_computed_egress_cidr_blocks = try(each.value.number_of_computed_egress_cidr_blocks, var.defaults.number_of_computed_egress_cidr_blocks, 0) + number_of_computed_egress_ipv6_cidr_blocks = try(each.value.number_of_computed_egress_ipv6_cidr_blocks, var.defaults.number_of_computed_egress_ipv6_cidr_blocks, 0) + number_of_computed_egress_prefix_list_ids = try(each.value.number_of_computed_egress_prefix_list_ids, var.defaults.number_of_computed_egress_prefix_list_ids, 0) + number_of_computed_egress_rules = try(each.value.number_of_computed_egress_rules, var.defaults.number_of_computed_egress_rules, 0) + number_of_computed_egress_with_cidr_ipv4 = try(each.value.number_of_computed_egress_with_cidr_ipv4, var.defaults.number_of_computed_egress_with_cidr_ipv4, 0) + number_of_computed_egress_with_cidr_ipv6 = try(each.value.number_of_computed_egress_with_cidr_ipv6, var.defaults.number_of_computed_egress_with_cidr_ipv6, 0) + number_of_computed_egress_with_prefix_list_id = try(each.value.number_of_computed_egress_with_prefix_list_id, var.defaults.number_of_computed_egress_with_prefix_list_id, 0) + number_of_computed_egress_with_referenced_security_group_id = try(each.value.number_of_computed_egress_with_referenced_security_group_id, var.defaults.number_of_computed_egress_with_referenced_security_group_id, 0) + number_of_computed_egress_with_self = try(each.value.number_of_computed_egress_with_self, var.defaults.number_of_computed_egress_with_self, 0) + number_of_computed_ingress_cidr_blocks = try(each.value.number_of_computed_ingress_cidr_blocks, var.defaults.number_of_computed_ingress_cidr_blocks, 0) + number_of_computed_ingress_ipv6_cidr_blocks = try(each.value.number_of_computed_ingress_ipv6_cidr_blocks, var.defaults.number_of_computed_ingress_ipv6_cidr_blocks, 0) + number_of_computed_ingress_prefix_list_ids = try(each.value.number_of_computed_ingress_prefix_list_ids, var.defaults.number_of_computed_ingress_prefix_list_ids, 0) + number_of_computed_ingress_rules = try(each.value.number_of_computed_ingress_rules, var.defaults.number_of_computed_ingress_rules, 0) + number_of_computed_ingress_with_cidr_ipv4 = try(each.value.number_of_computed_ingress_with_cidr_ipv4, var.defaults.number_of_computed_ingress_with_cidr_ipv4, 0) + number_of_computed_ingress_with_cidr_ipv6 = try(each.value.number_of_computed_ingress_with_cidr_ipv6, var.defaults.number_of_computed_ingress_with_cidr_ipv6, 0) + number_of_computed_ingress_with_prefix_list_id = try(each.value.number_of_computed_ingress_with_prefix_list_id, var.defaults.number_of_computed_ingress_with_prefix_list_id, 0) + number_of_computed_ingress_with_referenced_security_group_id = try(each.value.number_of_computed_ingress_with_referenced_security_group_id, var.defaults.number_of_computed_ingress_with_referenced_security_group_id, 0) + number_of_computed_ingress_with_self = try(each.value.number_of_computed_ingress_with_self, var.defaults.number_of_computed_ingress_with_self, 0) + revoke_rules_on_delete = try(each.value.revoke_rules_on_delete, var.defaults.revoke_rules_on_delete, false) + tags = try(each.value.tags, var.defaults.tags, {}) + use_name_prefix = try(each.value.use_name_prefix, var.defaults.use_name_prefix, true) + vpc_id = try(each.value.vpc_id, var.defaults.vpc_id) } diff --git a/wrappers/web/main.tf b/wrappers/web/main.tf index 7a3b94de..aba1b7dc 100644 --- a/wrappers/web/main.tf +++ b/wrappers/web/main.tf @@ -3,77 +3,77 @@ module "wrapper" { for_each = var.items - auto_computed_egress_rules = try(each.value.auto_computed_egress_rules, var.defaults.auto_computed_egress_rules, []) - auto_computed_egress_with_self = try(each.value.auto_computed_egress_with_self, var.defaults.auto_computed_egress_with_self, []) - auto_computed_ingress_rules = try(each.value.auto_computed_ingress_rules, var.defaults.auto_computed_ingress_rules, []) - auto_computed_ingress_with_self = try(each.value.auto_computed_ingress_with_self, var.defaults.auto_computed_ingress_with_self, []) - auto_egress_rules = try(each.value.auto_egress_rules, var.defaults.auto_egress_rules, ["all-all"]) - auto_egress_with_self = try(each.value.auto_egress_with_self, var.defaults.auto_egress_with_self, []) - auto_ingress_rules = try(each.value.auto_ingress_rules, var.defaults.auto_ingress_rules, ["http-80-tcp", "http-8080-tcp", "https-443-tcp", "web-jmx-tcp"]) - auto_ingress_with_self = try(each.value.auto_ingress_with_self, var.defaults.auto_ingress_with_self, [{ "rule" = "all-all" }]) - auto_number_of_computed_egress_rules = try(each.value.auto_number_of_computed_egress_rules, var.defaults.auto_number_of_computed_egress_rules, 0) - auto_number_of_computed_egress_with_self = try(each.value.auto_number_of_computed_egress_with_self, var.defaults.auto_number_of_computed_egress_with_self, 0) - auto_number_of_computed_ingress_rules = try(each.value.auto_number_of_computed_ingress_rules, var.defaults.auto_number_of_computed_ingress_rules, 0) - auto_number_of_computed_ingress_with_self = try(each.value.auto_number_of_computed_ingress_with_self, var.defaults.auto_number_of_computed_ingress_with_self, 0) - computed_egress_cidr_blocks = try(each.value.computed_egress_cidr_blocks, var.defaults.computed_egress_cidr_blocks, ["0.0.0.0/0"]) - computed_egress_ipv6_cidr_blocks = try(each.value.computed_egress_ipv6_cidr_blocks, var.defaults.computed_egress_ipv6_cidr_blocks, ["::/0"]) - computed_egress_prefix_list_ids = try(each.value.computed_egress_prefix_list_ids, var.defaults.computed_egress_prefix_list_ids, []) - computed_egress_rules = try(each.value.computed_egress_rules, var.defaults.computed_egress_rules, []) - computed_egress_with_cidr_blocks = try(each.value.computed_egress_with_cidr_blocks, var.defaults.computed_egress_with_cidr_blocks, []) - computed_egress_with_ipv6_cidr_blocks = try(each.value.computed_egress_with_ipv6_cidr_blocks, var.defaults.computed_egress_with_ipv6_cidr_blocks, []) - computed_egress_with_prefix_list_ids = try(each.value.computed_egress_with_prefix_list_ids, var.defaults.computed_egress_with_prefix_list_ids, []) - computed_egress_with_self = try(each.value.computed_egress_with_self, var.defaults.computed_egress_with_self, []) - computed_egress_with_source_security_group_id = try(each.value.computed_egress_with_source_security_group_id, var.defaults.computed_egress_with_source_security_group_id, []) - computed_ingress_cidr_blocks = try(each.value.computed_ingress_cidr_blocks, var.defaults.computed_ingress_cidr_blocks, []) - computed_ingress_ipv6_cidr_blocks = try(each.value.computed_ingress_ipv6_cidr_blocks, var.defaults.computed_ingress_ipv6_cidr_blocks, []) - computed_ingress_prefix_list_ids = try(each.value.computed_ingress_prefix_list_ids, var.defaults.computed_ingress_prefix_list_ids, []) - computed_ingress_rules = try(each.value.computed_ingress_rules, var.defaults.computed_ingress_rules, []) - computed_ingress_with_cidr_blocks = try(each.value.computed_ingress_with_cidr_blocks, var.defaults.computed_ingress_with_cidr_blocks, []) - computed_ingress_with_ipv6_cidr_blocks = try(each.value.computed_ingress_with_ipv6_cidr_blocks, var.defaults.computed_ingress_with_ipv6_cidr_blocks, []) - computed_ingress_with_prefix_list_ids = try(each.value.computed_ingress_with_prefix_list_ids, var.defaults.computed_ingress_with_prefix_list_ids, []) - computed_ingress_with_self = try(each.value.computed_ingress_with_self, var.defaults.computed_ingress_with_self, []) - computed_ingress_with_source_security_group_id = try(each.value.computed_ingress_with_source_security_group_id, var.defaults.computed_ingress_with_source_security_group_id, []) - create = try(each.value.create, var.defaults.create, true) - description = try(each.value.description, var.defaults.description, "Security Group managed by Terraform") - egress_cidr_blocks = try(each.value.egress_cidr_blocks, var.defaults.egress_cidr_blocks, ["0.0.0.0/0"]) - egress_ipv6_cidr_blocks = try(each.value.egress_ipv6_cidr_blocks, var.defaults.egress_ipv6_cidr_blocks, ["::/0"]) - egress_prefix_list_ids = try(each.value.egress_prefix_list_ids, var.defaults.egress_prefix_list_ids, []) - egress_rules = try(each.value.egress_rules, var.defaults.egress_rules, []) - egress_with_cidr_blocks = try(each.value.egress_with_cidr_blocks, var.defaults.egress_with_cidr_blocks, []) - egress_with_ipv6_cidr_blocks = try(each.value.egress_with_ipv6_cidr_blocks, var.defaults.egress_with_ipv6_cidr_blocks, []) - egress_with_prefix_list_ids = try(each.value.egress_with_prefix_list_ids, var.defaults.egress_with_prefix_list_ids, []) - egress_with_self = try(each.value.egress_with_self, var.defaults.egress_with_self, []) - egress_with_source_security_group_id = try(each.value.egress_with_source_security_group_id, var.defaults.egress_with_source_security_group_id, []) - ingress_cidr_blocks = try(each.value.ingress_cidr_blocks, var.defaults.ingress_cidr_blocks, []) - ingress_ipv6_cidr_blocks = try(each.value.ingress_ipv6_cidr_blocks, var.defaults.ingress_ipv6_cidr_blocks, []) - ingress_prefix_list_ids = try(each.value.ingress_prefix_list_ids, var.defaults.ingress_prefix_list_ids, []) - ingress_rules = try(each.value.ingress_rules, var.defaults.ingress_rules, []) - ingress_with_cidr_blocks = try(each.value.ingress_with_cidr_blocks, var.defaults.ingress_with_cidr_blocks, []) - ingress_with_ipv6_cidr_blocks = try(each.value.ingress_with_ipv6_cidr_blocks, var.defaults.ingress_with_ipv6_cidr_blocks, []) - ingress_with_prefix_list_ids = try(each.value.ingress_with_prefix_list_ids, var.defaults.ingress_with_prefix_list_ids, []) - ingress_with_self = try(each.value.ingress_with_self, var.defaults.ingress_with_self, []) - ingress_with_source_security_group_id = try(each.value.ingress_with_source_security_group_id, var.defaults.ingress_with_source_security_group_id, []) - name = try(each.value.name, var.defaults.name) - number_of_computed_egress_cidr_blocks = try(each.value.number_of_computed_egress_cidr_blocks, var.defaults.number_of_computed_egress_cidr_blocks, 0) - number_of_computed_egress_ipv6_cidr_blocks = try(each.value.number_of_computed_egress_ipv6_cidr_blocks, var.defaults.number_of_computed_egress_ipv6_cidr_blocks, 0) - number_of_computed_egress_prefix_list_ids = try(each.value.number_of_computed_egress_prefix_list_ids, var.defaults.number_of_computed_egress_prefix_list_ids, 0) - number_of_computed_egress_rules = try(each.value.number_of_computed_egress_rules, var.defaults.number_of_computed_egress_rules, 0) - number_of_computed_egress_with_cidr_blocks = try(each.value.number_of_computed_egress_with_cidr_blocks, var.defaults.number_of_computed_egress_with_cidr_blocks, 0) - number_of_computed_egress_with_ipv6_cidr_blocks = try(each.value.number_of_computed_egress_with_ipv6_cidr_blocks, var.defaults.number_of_computed_egress_with_ipv6_cidr_blocks, 0) - number_of_computed_egress_with_prefix_list_ids = try(each.value.number_of_computed_egress_with_prefix_list_ids, var.defaults.number_of_computed_egress_with_prefix_list_ids, 0) - number_of_computed_egress_with_self = try(each.value.number_of_computed_egress_with_self, var.defaults.number_of_computed_egress_with_self, 0) - number_of_computed_egress_with_source_security_group_id = try(each.value.number_of_computed_egress_with_source_security_group_id, var.defaults.number_of_computed_egress_with_source_security_group_id, 0) - number_of_computed_ingress_cidr_blocks = try(each.value.number_of_computed_ingress_cidr_blocks, var.defaults.number_of_computed_ingress_cidr_blocks, 0) - number_of_computed_ingress_ipv6_cidr_blocks = try(each.value.number_of_computed_ingress_ipv6_cidr_blocks, var.defaults.number_of_computed_ingress_ipv6_cidr_blocks, 0) - number_of_computed_ingress_prefix_list_ids = try(each.value.number_of_computed_ingress_prefix_list_ids, var.defaults.number_of_computed_ingress_prefix_list_ids, 0) - number_of_computed_ingress_rules = try(each.value.number_of_computed_ingress_rules, var.defaults.number_of_computed_ingress_rules, 0) - number_of_computed_ingress_with_cidr_blocks = try(each.value.number_of_computed_ingress_with_cidr_blocks, var.defaults.number_of_computed_ingress_with_cidr_blocks, 0) - number_of_computed_ingress_with_ipv6_cidr_blocks = try(each.value.number_of_computed_ingress_with_ipv6_cidr_blocks, var.defaults.number_of_computed_ingress_with_ipv6_cidr_blocks, 0) - number_of_computed_ingress_with_prefix_list_ids = try(each.value.number_of_computed_ingress_with_prefix_list_ids, var.defaults.number_of_computed_ingress_with_prefix_list_ids, 0) - number_of_computed_ingress_with_self = try(each.value.number_of_computed_ingress_with_self, var.defaults.number_of_computed_ingress_with_self, 0) - number_of_computed_ingress_with_source_security_group_id = try(each.value.number_of_computed_ingress_with_source_security_group_id, var.defaults.number_of_computed_ingress_with_source_security_group_id, 0) - revoke_rules_on_delete = try(each.value.revoke_rules_on_delete, var.defaults.revoke_rules_on_delete, false) - tags = try(each.value.tags, var.defaults.tags, {}) - use_name_prefix = try(each.value.use_name_prefix, var.defaults.use_name_prefix, true) - vpc_id = try(each.value.vpc_id, var.defaults.vpc_id) + auto_computed_egress_rules = try(each.value.auto_computed_egress_rules, var.defaults.auto_computed_egress_rules, []) + auto_computed_egress_with_self = try(each.value.auto_computed_egress_with_self, var.defaults.auto_computed_egress_with_self, []) + auto_computed_ingress_rules = try(each.value.auto_computed_ingress_rules, var.defaults.auto_computed_ingress_rules, []) + auto_computed_ingress_with_self = try(each.value.auto_computed_ingress_with_self, var.defaults.auto_computed_ingress_with_self, []) + auto_egress_rules = try(each.value.auto_egress_rules, var.defaults.auto_egress_rules, ["all-all"]) + auto_egress_with_self = try(each.value.auto_egress_with_self, var.defaults.auto_egress_with_self, []) + auto_ingress_rules = try(each.value.auto_ingress_rules, var.defaults.auto_ingress_rules, ["http-80-tcp", "http-8080-tcp", "https-443-tcp", "web-jmx-tcp"]) + auto_ingress_with_self = try(each.value.auto_ingress_with_self, var.defaults.auto_ingress_with_self, [{ "rule" = "all-all" }]) + auto_number_of_computed_egress_rules = try(each.value.auto_number_of_computed_egress_rules, var.defaults.auto_number_of_computed_egress_rules, 0) + auto_number_of_computed_egress_with_self = try(each.value.auto_number_of_computed_egress_with_self, var.defaults.auto_number_of_computed_egress_with_self, 0) + auto_number_of_computed_ingress_rules = try(each.value.auto_number_of_computed_ingress_rules, var.defaults.auto_number_of_computed_ingress_rules, 0) + auto_number_of_computed_ingress_with_self = try(each.value.auto_number_of_computed_ingress_with_self, var.defaults.auto_number_of_computed_ingress_with_self, 0) + computed_egress_cidr_blocks = try(each.value.computed_egress_cidr_blocks, var.defaults.computed_egress_cidr_blocks, ["0.0.0.0/0"]) + computed_egress_ipv6_cidr_blocks = try(each.value.computed_egress_ipv6_cidr_blocks, var.defaults.computed_egress_ipv6_cidr_blocks, ["::/0"]) + computed_egress_prefix_list_ids = try(each.value.computed_egress_prefix_list_ids, var.defaults.computed_egress_prefix_list_ids, []) + computed_egress_rules = try(each.value.computed_egress_rules, var.defaults.computed_egress_rules, []) + computed_egress_with_cidr_ipv4 = try(each.value.computed_egress_with_cidr_ipv4, var.defaults.computed_egress_with_cidr_ipv4, []) + computed_egress_with_cidr_ipv6 = try(each.value.computed_egress_with_cidr_ipv6, var.defaults.computed_egress_with_cidr_ipv6, []) + computed_egress_with_prefix_list_id = try(each.value.computed_egress_with_prefix_list_id, var.defaults.computed_egress_with_prefix_list_id, []) + computed_egress_with_referenced_security_group_id = try(each.value.computed_egress_with_referenced_security_group_id, var.defaults.computed_egress_with_referenced_security_group_id, []) + computed_egress_with_self = try(each.value.computed_egress_with_self, var.defaults.computed_egress_with_self, []) + computed_ingress_cidr_blocks = try(each.value.computed_ingress_cidr_blocks, var.defaults.computed_ingress_cidr_blocks, []) + computed_ingress_ipv6_cidr_blocks = try(each.value.computed_ingress_ipv6_cidr_blocks, var.defaults.computed_ingress_ipv6_cidr_blocks, []) + computed_ingress_prefix_list_ids = try(each.value.computed_ingress_prefix_list_ids, var.defaults.computed_ingress_prefix_list_ids, []) + computed_ingress_rules = try(each.value.computed_ingress_rules, var.defaults.computed_ingress_rules, []) + computed_ingress_with_cidr_ipv4 = try(each.value.computed_ingress_with_cidr_ipv4, var.defaults.computed_ingress_with_cidr_ipv4, []) + computed_ingress_with_cidr_ipv6 = try(each.value.computed_ingress_with_cidr_ipv6, var.defaults.computed_ingress_with_cidr_ipv6, []) + computed_ingress_with_prefix_list_id = try(each.value.computed_ingress_with_prefix_list_id, var.defaults.computed_ingress_with_prefix_list_id, []) + computed_ingress_with_referenced_security_group_id = try(each.value.computed_ingress_with_referenced_security_group_id, var.defaults.computed_ingress_with_referenced_security_group_id, []) + computed_ingress_with_self = try(each.value.computed_ingress_with_self, var.defaults.computed_ingress_with_self, []) + create = try(each.value.create, var.defaults.create, true) + description = try(each.value.description, var.defaults.description, "Security Group managed by Terraform") + egress_cidr_ipv4 = try(each.value.egress_cidr_ipv4, var.defaults.egress_cidr_ipv4, ["0.0.0.0/0"]) + egress_cidr_ipv6 = try(each.value.egress_cidr_ipv6, var.defaults.egress_cidr_ipv6, ["::/0"]) + egress_prefix_list_ids = try(each.value.egress_prefix_list_ids, var.defaults.egress_prefix_list_ids, []) + egress_rules = try(each.value.egress_rules, var.defaults.egress_rules, []) + egress_with_cidr_ipv4 = try(each.value.egress_with_cidr_ipv4, var.defaults.egress_with_cidr_ipv4, []) + egress_with_cidr_ipv6 = try(each.value.egress_with_cidr_ipv6, var.defaults.egress_with_cidr_ipv6, []) + egress_with_prefix_list_id = try(each.value.egress_with_prefix_list_id, var.defaults.egress_with_prefix_list_id, []) + egress_with_referenced_security_group_id = try(each.value.egress_with_referenced_security_group_id, var.defaults.egress_with_referenced_security_group_id, []) + egress_with_self = try(each.value.egress_with_self, var.defaults.egress_with_self, []) + ingress_cidr_ipv4 = try(each.value.ingress_cidr_ipv4, var.defaults.ingress_cidr_ipv4, []) + ingress_cidr_ipv6 = try(each.value.ingress_cidr_ipv6, var.defaults.ingress_cidr_ipv6, []) + ingress_prefix_list_ids = try(each.value.ingress_prefix_list_ids, var.defaults.ingress_prefix_list_ids, []) + ingress_rules = try(each.value.ingress_rules, var.defaults.ingress_rules, []) + ingress_with_cidr_ipv4 = try(each.value.ingress_with_cidr_ipv4, var.defaults.ingress_with_cidr_ipv4, []) + ingress_with_cidr_ipv6 = try(each.value.ingress_with_cidr_ipv6, var.defaults.ingress_with_cidr_ipv6, []) + ingress_with_prefix_list_id = try(each.value.ingress_with_prefix_list_id, var.defaults.ingress_with_prefix_list_id, []) + ingress_with_referenced_security_group_id = try(each.value.ingress_with_referenced_security_group_id, var.defaults.ingress_with_referenced_security_group_id, []) + ingress_with_self = try(each.value.ingress_with_self, var.defaults.ingress_with_self, []) + name = try(each.value.name, var.defaults.name) + number_of_computed_egress_cidr_blocks = try(each.value.number_of_computed_egress_cidr_blocks, var.defaults.number_of_computed_egress_cidr_blocks, 0) + number_of_computed_egress_ipv6_cidr_blocks = try(each.value.number_of_computed_egress_ipv6_cidr_blocks, var.defaults.number_of_computed_egress_ipv6_cidr_blocks, 0) + number_of_computed_egress_prefix_list_ids = try(each.value.number_of_computed_egress_prefix_list_ids, var.defaults.number_of_computed_egress_prefix_list_ids, 0) + number_of_computed_egress_rules = try(each.value.number_of_computed_egress_rules, var.defaults.number_of_computed_egress_rules, 0) + number_of_computed_egress_with_cidr_ipv4 = try(each.value.number_of_computed_egress_with_cidr_ipv4, var.defaults.number_of_computed_egress_with_cidr_ipv4, 0) + number_of_computed_egress_with_cidr_ipv6 = try(each.value.number_of_computed_egress_with_cidr_ipv6, var.defaults.number_of_computed_egress_with_cidr_ipv6, 0) + number_of_computed_egress_with_prefix_list_id = try(each.value.number_of_computed_egress_with_prefix_list_id, var.defaults.number_of_computed_egress_with_prefix_list_id, 0) + number_of_computed_egress_with_referenced_security_group_id = try(each.value.number_of_computed_egress_with_referenced_security_group_id, var.defaults.number_of_computed_egress_with_referenced_security_group_id, 0) + number_of_computed_egress_with_self = try(each.value.number_of_computed_egress_with_self, var.defaults.number_of_computed_egress_with_self, 0) + number_of_computed_ingress_cidr_blocks = try(each.value.number_of_computed_ingress_cidr_blocks, var.defaults.number_of_computed_ingress_cidr_blocks, 0) + number_of_computed_ingress_ipv6_cidr_blocks = try(each.value.number_of_computed_ingress_ipv6_cidr_blocks, var.defaults.number_of_computed_ingress_ipv6_cidr_blocks, 0) + number_of_computed_ingress_prefix_list_ids = try(each.value.number_of_computed_ingress_prefix_list_ids, var.defaults.number_of_computed_ingress_prefix_list_ids, 0) + number_of_computed_ingress_rules = try(each.value.number_of_computed_ingress_rules, var.defaults.number_of_computed_ingress_rules, 0) + number_of_computed_ingress_with_cidr_ipv4 = try(each.value.number_of_computed_ingress_with_cidr_ipv4, var.defaults.number_of_computed_ingress_with_cidr_ipv4, 0) + number_of_computed_ingress_with_cidr_ipv6 = try(each.value.number_of_computed_ingress_with_cidr_ipv6, var.defaults.number_of_computed_ingress_with_cidr_ipv6, 0) + number_of_computed_ingress_with_prefix_list_id = try(each.value.number_of_computed_ingress_with_prefix_list_id, var.defaults.number_of_computed_ingress_with_prefix_list_id, 0) + number_of_computed_ingress_with_referenced_security_group_id = try(each.value.number_of_computed_ingress_with_referenced_security_group_id, var.defaults.number_of_computed_ingress_with_referenced_security_group_id, 0) + number_of_computed_ingress_with_self = try(each.value.number_of_computed_ingress_with_self, var.defaults.number_of_computed_ingress_with_self, 0) + revoke_rules_on_delete = try(each.value.revoke_rules_on_delete, var.defaults.revoke_rules_on_delete, false) + tags = try(each.value.tags, var.defaults.tags, {}) + use_name_prefix = try(each.value.use_name_prefix, var.defaults.use_name_prefix, true) + vpc_id = try(each.value.vpc_id, var.defaults.vpc_id) } diff --git a/wrappers/winrm/main.tf b/wrappers/winrm/main.tf index 1ec169d3..68fb1c8d 100644 --- a/wrappers/winrm/main.tf +++ b/wrappers/winrm/main.tf @@ -3,77 +3,77 @@ module "wrapper" { for_each = var.items - auto_computed_egress_rules = try(each.value.auto_computed_egress_rules, var.defaults.auto_computed_egress_rules, []) - auto_computed_egress_with_self = try(each.value.auto_computed_egress_with_self, var.defaults.auto_computed_egress_with_self, []) - auto_computed_ingress_rules = try(each.value.auto_computed_ingress_rules, var.defaults.auto_computed_ingress_rules, []) - auto_computed_ingress_with_self = try(each.value.auto_computed_ingress_with_self, var.defaults.auto_computed_ingress_with_self, []) - auto_egress_rules = try(each.value.auto_egress_rules, var.defaults.auto_egress_rules, ["all-all"]) - auto_egress_with_self = try(each.value.auto_egress_with_self, var.defaults.auto_egress_with_self, []) - auto_ingress_rules = try(each.value.auto_ingress_rules, var.defaults.auto_ingress_rules, ["winrm-http-tcp", "winrm-https-tcp"]) - auto_ingress_with_self = try(each.value.auto_ingress_with_self, var.defaults.auto_ingress_with_self, [{ "rule" = "all-all" }]) - auto_number_of_computed_egress_rules = try(each.value.auto_number_of_computed_egress_rules, var.defaults.auto_number_of_computed_egress_rules, 0) - auto_number_of_computed_egress_with_self = try(each.value.auto_number_of_computed_egress_with_self, var.defaults.auto_number_of_computed_egress_with_self, 0) - auto_number_of_computed_ingress_rules = try(each.value.auto_number_of_computed_ingress_rules, var.defaults.auto_number_of_computed_ingress_rules, 0) - auto_number_of_computed_ingress_with_self = try(each.value.auto_number_of_computed_ingress_with_self, var.defaults.auto_number_of_computed_ingress_with_self, 0) - computed_egress_cidr_blocks = try(each.value.computed_egress_cidr_blocks, var.defaults.computed_egress_cidr_blocks, ["0.0.0.0/0"]) - computed_egress_ipv6_cidr_blocks = try(each.value.computed_egress_ipv6_cidr_blocks, var.defaults.computed_egress_ipv6_cidr_blocks, ["::/0"]) - computed_egress_prefix_list_ids = try(each.value.computed_egress_prefix_list_ids, var.defaults.computed_egress_prefix_list_ids, []) - computed_egress_rules = try(each.value.computed_egress_rules, var.defaults.computed_egress_rules, []) - computed_egress_with_cidr_blocks = try(each.value.computed_egress_with_cidr_blocks, var.defaults.computed_egress_with_cidr_blocks, []) - computed_egress_with_ipv6_cidr_blocks = try(each.value.computed_egress_with_ipv6_cidr_blocks, var.defaults.computed_egress_with_ipv6_cidr_blocks, []) - computed_egress_with_prefix_list_ids = try(each.value.computed_egress_with_prefix_list_ids, var.defaults.computed_egress_with_prefix_list_ids, []) - computed_egress_with_self = try(each.value.computed_egress_with_self, var.defaults.computed_egress_with_self, []) - computed_egress_with_source_security_group_id = try(each.value.computed_egress_with_source_security_group_id, var.defaults.computed_egress_with_source_security_group_id, []) - computed_ingress_cidr_blocks = try(each.value.computed_ingress_cidr_blocks, var.defaults.computed_ingress_cidr_blocks, []) - computed_ingress_ipv6_cidr_blocks = try(each.value.computed_ingress_ipv6_cidr_blocks, var.defaults.computed_ingress_ipv6_cidr_blocks, []) - computed_ingress_prefix_list_ids = try(each.value.computed_ingress_prefix_list_ids, var.defaults.computed_ingress_prefix_list_ids, []) - computed_ingress_rules = try(each.value.computed_ingress_rules, var.defaults.computed_ingress_rules, []) - computed_ingress_with_cidr_blocks = try(each.value.computed_ingress_with_cidr_blocks, var.defaults.computed_ingress_with_cidr_blocks, []) - computed_ingress_with_ipv6_cidr_blocks = try(each.value.computed_ingress_with_ipv6_cidr_blocks, var.defaults.computed_ingress_with_ipv6_cidr_blocks, []) - computed_ingress_with_prefix_list_ids = try(each.value.computed_ingress_with_prefix_list_ids, var.defaults.computed_ingress_with_prefix_list_ids, []) - computed_ingress_with_self = try(each.value.computed_ingress_with_self, var.defaults.computed_ingress_with_self, []) - computed_ingress_with_source_security_group_id = try(each.value.computed_ingress_with_source_security_group_id, var.defaults.computed_ingress_with_source_security_group_id, []) - create = try(each.value.create, var.defaults.create, true) - description = try(each.value.description, var.defaults.description, "Security Group managed by Terraform") - egress_cidr_blocks = try(each.value.egress_cidr_blocks, var.defaults.egress_cidr_blocks, ["0.0.0.0/0"]) - egress_ipv6_cidr_blocks = try(each.value.egress_ipv6_cidr_blocks, var.defaults.egress_ipv6_cidr_blocks, ["::/0"]) - egress_prefix_list_ids = try(each.value.egress_prefix_list_ids, var.defaults.egress_prefix_list_ids, []) - egress_rules = try(each.value.egress_rules, var.defaults.egress_rules, []) - egress_with_cidr_blocks = try(each.value.egress_with_cidr_blocks, var.defaults.egress_with_cidr_blocks, []) - egress_with_ipv6_cidr_blocks = try(each.value.egress_with_ipv6_cidr_blocks, var.defaults.egress_with_ipv6_cidr_blocks, []) - egress_with_prefix_list_ids = try(each.value.egress_with_prefix_list_ids, var.defaults.egress_with_prefix_list_ids, []) - egress_with_self = try(each.value.egress_with_self, var.defaults.egress_with_self, []) - egress_with_source_security_group_id = try(each.value.egress_with_source_security_group_id, var.defaults.egress_with_source_security_group_id, []) - ingress_cidr_blocks = try(each.value.ingress_cidr_blocks, var.defaults.ingress_cidr_blocks, []) - ingress_ipv6_cidr_blocks = try(each.value.ingress_ipv6_cidr_blocks, var.defaults.ingress_ipv6_cidr_blocks, []) - ingress_prefix_list_ids = try(each.value.ingress_prefix_list_ids, var.defaults.ingress_prefix_list_ids, []) - ingress_rules = try(each.value.ingress_rules, var.defaults.ingress_rules, []) - ingress_with_cidr_blocks = try(each.value.ingress_with_cidr_blocks, var.defaults.ingress_with_cidr_blocks, []) - ingress_with_ipv6_cidr_blocks = try(each.value.ingress_with_ipv6_cidr_blocks, var.defaults.ingress_with_ipv6_cidr_blocks, []) - ingress_with_prefix_list_ids = try(each.value.ingress_with_prefix_list_ids, var.defaults.ingress_with_prefix_list_ids, []) - ingress_with_self = try(each.value.ingress_with_self, var.defaults.ingress_with_self, []) - ingress_with_source_security_group_id = try(each.value.ingress_with_source_security_group_id, var.defaults.ingress_with_source_security_group_id, []) - name = try(each.value.name, var.defaults.name) - number_of_computed_egress_cidr_blocks = try(each.value.number_of_computed_egress_cidr_blocks, var.defaults.number_of_computed_egress_cidr_blocks, 0) - number_of_computed_egress_ipv6_cidr_blocks = try(each.value.number_of_computed_egress_ipv6_cidr_blocks, var.defaults.number_of_computed_egress_ipv6_cidr_blocks, 0) - number_of_computed_egress_prefix_list_ids = try(each.value.number_of_computed_egress_prefix_list_ids, var.defaults.number_of_computed_egress_prefix_list_ids, 0) - number_of_computed_egress_rules = try(each.value.number_of_computed_egress_rules, var.defaults.number_of_computed_egress_rules, 0) - number_of_computed_egress_with_cidr_blocks = try(each.value.number_of_computed_egress_with_cidr_blocks, var.defaults.number_of_computed_egress_with_cidr_blocks, 0) - number_of_computed_egress_with_ipv6_cidr_blocks = try(each.value.number_of_computed_egress_with_ipv6_cidr_blocks, var.defaults.number_of_computed_egress_with_ipv6_cidr_blocks, 0) - number_of_computed_egress_with_prefix_list_ids = try(each.value.number_of_computed_egress_with_prefix_list_ids, var.defaults.number_of_computed_egress_with_prefix_list_ids, 0) - number_of_computed_egress_with_self = try(each.value.number_of_computed_egress_with_self, var.defaults.number_of_computed_egress_with_self, 0) - number_of_computed_egress_with_source_security_group_id = try(each.value.number_of_computed_egress_with_source_security_group_id, var.defaults.number_of_computed_egress_with_source_security_group_id, 0) - number_of_computed_ingress_cidr_blocks = try(each.value.number_of_computed_ingress_cidr_blocks, var.defaults.number_of_computed_ingress_cidr_blocks, 0) - number_of_computed_ingress_ipv6_cidr_blocks = try(each.value.number_of_computed_ingress_ipv6_cidr_blocks, var.defaults.number_of_computed_ingress_ipv6_cidr_blocks, 0) - number_of_computed_ingress_prefix_list_ids = try(each.value.number_of_computed_ingress_prefix_list_ids, var.defaults.number_of_computed_ingress_prefix_list_ids, 0) - number_of_computed_ingress_rules = try(each.value.number_of_computed_ingress_rules, var.defaults.number_of_computed_ingress_rules, 0) - number_of_computed_ingress_with_cidr_blocks = try(each.value.number_of_computed_ingress_with_cidr_blocks, var.defaults.number_of_computed_ingress_with_cidr_blocks, 0) - number_of_computed_ingress_with_ipv6_cidr_blocks = try(each.value.number_of_computed_ingress_with_ipv6_cidr_blocks, var.defaults.number_of_computed_ingress_with_ipv6_cidr_blocks, 0) - number_of_computed_ingress_with_prefix_list_ids = try(each.value.number_of_computed_ingress_with_prefix_list_ids, var.defaults.number_of_computed_ingress_with_prefix_list_ids, 0) - number_of_computed_ingress_with_self = try(each.value.number_of_computed_ingress_with_self, var.defaults.number_of_computed_ingress_with_self, 0) - number_of_computed_ingress_with_source_security_group_id = try(each.value.number_of_computed_ingress_with_source_security_group_id, var.defaults.number_of_computed_ingress_with_source_security_group_id, 0) - revoke_rules_on_delete = try(each.value.revoke_rules_on_delete, var.defaults.revoke_rules_on_delete, false) - tags = try(each.value.tags, var.defaults.tags, {}) - use_name_prefix = try(each.value.use_name_prefix, var.defaults.use_name_prefix, true) - vpc_id = try(each.value.vpc_id, var.defaults.vpc_id) + auto_computed_egress_rules = try(each.value.auto_computed_egress_rules, var.defaults.auto_computed_egress_rules, []) + auto_computed_egress_with_self = try(each.value.auto_computed_egress_with_self, var.defaults.auto_computed_egress_with_self, []) + auto_computed_ingress_rules = try(each.value.auto_computed_ingress_rules, var.defaults.auto_computed_ingress_rules, []) + auto_computed_ingress_with_self = try(each.value.auto_computed_ingress_with_self, var.defaults.auto_computed_ingress_with_self, []) + auto_egress_rules = try(each.value.auto_egress_rules, var.defaults.auto_egress_rules, ["all-all"]) + auto_egress_with_self = try(each.value.auto_egress_with_self, var.defaults.auto_egress_with_self, []) + auto_ingress_rules = try(each.value.auto_ingress_rules, var.defaults.auto_ingress_rules, ["winrm-http-tcp", "winrm-https-tcp"]) + auto_ingress_with_self = try(each.value.auto_ingress_with_self, var.defaults.auto_ingress_with_self, [{ "rule" = "all-all" }]) + auto_number_of_computed_egress_rules = try(each.value.auto_number_of_computed_egress_rules, var.defaults.auto_number_of_computed_egress_rules, 0) + auto_number_of_computed_egress_with_self = try(each.value.auto_number_of_computed_egress_with_self, var.defaults.auto_number_of_computed_egress_with_self, 0) + auto_number_of_computed_ingress_rules = try(each.value.auto_number_of_computed_ingress_rules, var.defaults.auto_number_of_computed_ingress_rules, 0) + auto_number_of_computed_ingress_with_self = try(each.value.auto_number_of_computed_ingress_with_self, var.defaults.auto_number_of_computed_ingress_with_self, 0) + computed_egress_cidr_blocks = try(each.value.computed_egress_cidr_blocks, var.defaults.computed_egress_cidr_blocks, ["0.0.0.0/0"]) + computed_egress_ipv6_cidr_blocks = try(each.value.computed_egress_ipv6_cidr_blocks, var.defaults.computed_egress_ipv6_cidr_blocks, ["::/0"]) + computed_egress_prefix_list_ids = try(each.value.computed_egress_prefix_list_ids, var.defaults.computed_egress_prefix_list_ids, []) + computed_egress_rules = try(each.value.computed_egress_rules, var.defaults.computed_egress_rules, []) + computed_egress_with_cidr_ipv4 = try(each.value.computed_egress_with_cidr_ipv4, var.defaults.computed_egress_with_cidr_ipv4, []) + computed_egress_with_cidr_ipv6 = try(each.value.computed_egress_with_cidr_ipv6, var.defaults.computed_egress_with_cidr_ipv6, []) + computed_egress_with_prefix_list_id = try(each.value.computed_egress_with_prefix_list_id, var.defaults.computed_egress_with_prefix_list_id, []) + computed_egress_with_referenced_security_group_id = try(each.value.computed_egress_with_referenced_security_group_id, var.defaults.computed_egress_with_referenced_security_group_id, []) + computed_egress_with_self = try(each.value.computed_egress_with_self, var.defaults.computed_egress_with_self, []) + computed_ingress_cidr_blocks = try(each.value.computed_ingress_cidr_blocks, var.defaults.computed_ingress_cidr_blocks, []) + computed_ingress_ipv6_cidr_blocks = try(each.value.computed_ingress_ipv6_cidr_blocks, var.defaults.computed_ingress_ipv6_cidr_blocks, []) + computed_ingress_prefix_list_ids = try(each.value.computed_ingress_prefix_list_ids, var.defaults.computed_ingress_prefix_list_ids, []) + computed_ingress_rules = try(each.value.computed_ingress_rules, var.defaults.computed_ingress_rules, []) + computed_ingress_with_cidr_ipv4 = try(each.value.computed_ingress_with_cidr_ipv4, var.defaults.computed_ingress_with_cidr_ipv4, []) + computed_ingress_with_cidr_ipv6 = try(each.value.computed_ingress_with_cidr_ipv6, var.defaults.computed_ingress_with_cidr_ipv6, []) + computed_ingress_with_prefix_list_id = try(each.value.computed_ingress_with_prefix_list_id, var.defaults.computed_ingress_with_prefix_list_id, []) + computed_ingress_with_referenced_security_group_id = try(each.value.computed_ingress_with_referenced_security_group_id, var.defaults.computed_ingress_with_referenced_security_group_id, []) + computed_ingress_with_self = try(each.value.computed_ingress_with_self, var.defaults.computed_ingress_with_self, []) + create = try(each.value.create, var.defaults.create, true) + description = try(each.value.description, var.defaults.description, "Security Group managed by Terraform") + egress_cidr_ipv4 = try(each.value.egress_cidr_ipv4, var.defaults.egress_cidr_ipv4, ["0.0.0.0/0"]) + egress_cidr_ipv6 = try(each.value.egress_cidr_ipv6, var.defaults.egress_cidr_ipv6, ["::/0"]) + egress_prefix_list_ids = try(each.value.egress_prefix_list_ids, var.defaults.egress_prefix_list_ids, []) + egress_rules = try(each.value.egress_rules, var.defaults.egress_rules, []) + egress_with_cidr_ipv4 = try(each.value.egress_with_cidr_ipv4, var.defaults.egress_with_cidr_ipv4, []) + egress_with_cidr_ipv6 = try(each.value.egress_with_cidr_ipv6, var.defaults.egress_with_cidr_ipv6, []) + egress_with_prefix_list_id = try(each.value.egress_with_prefix_list_id, var.defaults.egress_with_prefix_list_id, []) + egress_with_referenced_security_group_id = try(each.value.egress_with_referenced_security_group_id, var.defaults.egress_with_referenced_security_group_id, []) + egress_with_self = try(each.value.egress_with_self, var.defaults.egress_with_self, []) + ingress_cidr_ipv4 = try(each.value.ingress_cidr_ipv4, var.defaults.ingress_cidr_ipv4, []) + ingress_cidr_ipv6 = try(each.value.ingress_cidr_ipv6, var.defaults.ingress_cidr_ipv6, []) + ingress_prefix_list_ids = try(each.value.ingress_prefix_list_ids, var.defaults.ingress_prefix_list_ids, []) + ingress_rules = try(each.value.ingress_rules, var.defaults.ingress_rules, []) + ingress_with_cidr_ipv4 = try(each.value.ingress_with_cidr_ipv4, var.defaults.ingress_with_cidr_ipv4, []) + ingress_with_cidr_ipv6 = try(each.value.ingress_with_cidr_ipv6, var.defaults.ingress_with_cidr_ipv6, []) + ingress_with_prefix_list_id = try(each.value.ingress_with_prefix_list_id, var.defaults.ingress_with_prefix_list_id, []) + ingress_with_referenced_security_group_id = try(each.value.ingress_with_referenced_security_group_id, var.defaults.ingress_with_referenced_security_group_id, []) + ingress_with_self = try(each.value.ingress_with_self, var.defaults.ingress_with_self, []) + name = try(each.value.name, var.defaults.name) + number_of_computed_egress_cidr_blocks = try(each.value.number_of_computed_egress_cidr_blocks, var.defaults.number_of_computed_egress_cidr_blocks, 0) + number_of_computed_egress_ipv6_cidr_blocks = try(each.value.number_of_computed_egress_ipv6_cidr_blocks, var.defaults.number_of_computed_egress_ipv6_cidr_blocks, 0) + number_of_computed_egress_prefix_list_ids = try(each.value.number_of_computed_egress_prefix_list_ids, var.defaults.number_of_computed_egress_prefix_list_ids, 0) + number_of_computed_egress_rules = try(each.value.number_of_computed_egress_rules, var.defaults.number_of_computed_egress_rules, 0) + number_of_computed_egress_with_cidr_ipv4 = try(each.value.number_of_computed_egress_with_cidr_ipv4, var.defaults.number_of_computed_egress_with_cidr_ipv4, 0) + number_of_computed_egress_with_cidr_ipv6 = try(each.value.number_of_computed_egress_with_cidr_ipv6, var.defaults.number_of_computed_egress_with_cidr_ipv6, 0) + number_of_computed_egress_with_prefix_list_id = try(each.value.number_of_computed_egress_with_prefix_list_id, var.defaults.number_of_computed_egress_with_prefix_list_id, 0) + number_of_computed_egress_with_referenced_security_group_id = try(each.value.number_of_computed_egress_with_referenced_security_group_id, var.defaults.number_of_computed_egress_with_referenced_security_group_id, 0) + number_of_computed_egress_with_self = try(each.value.number_of_computed_egress_with_self, var.defaults.number_of_computed_egress_with_self, 0) + number_of_computed_ingress_cidr_blocks = try(each.value.number_of_computed_ingress_cidr_blocks, var.defaults.number_of_computed_ingress_cidr_blocks, 0) + number_of_computed_ingress_ipv6_cidr_blocks = try(each.value.number_of_computed_ingress_ipv6_cidr_blocks, var.defaults.number_of_computed_ingress_ipv6_cidr_blocks, 0) + number_of_computed_ingress_prefix_list_ids = try(each.value.number_of_computed_ingress_prefix_list_ids, var.defaults.number_of_computed_ingress_prefix_list_ids, 0) + number_of_computed_ingress_rules = try(each.value.number_of_computed_ingress_rules, var.defaults.number_of_computed_ingress_rules, 0) + number_of_computed_ingress_with_cidr_ipv4 = try(each.value.number_of_computed_ingress_with_cidr_ipv4, var.defaults.number_of_computed_ingress_with_cidr_ipv4, 0) + number_of_computed_ingress_with_cidr_ipv6 = try(each.value.number_of_computed_ingress_with_cidr_ipv6, var.defaults.number_of_computed_ingress_with_cidr_ipv6, 0) + number_of_computed_ingress_with_prefix_list_id = try(each.value.number_of_computed_ingress_with_prefix_list_id, var.defaults.number_of_computed_ingress_with_prefix_list_id, 0) + number_of_computed_ingress_with_referenced_security_group_id = try(each.value.number_of_computed_ingress_with_referenced_security_group_id, var.defaults.number_of_computed_ingress_with_referenced_security_group_id, 0) + number_of_computed_ingress_with_self = try(each.value.number_of_computed_ingress_with_self, var.defaults.number_of_computed_ingress_with_self, 0) + revoke_rules_on_delete = try(each.value.revoke_rules_on_delete, var.defaults.revoke_rules_on_delete, false) + tags = try(each.value.tags, var.defaults.tags, {}) + use_name_prefix = try(each.value.use_name_prefix, var.defaults.use_name_prefix, true) + vpc_id = try(each.value.vpc_id, var.defaults.vpc_id) } diff --git a/wrappers/zabbix/main.tf b/wrappers/zabbix/main.tf index c16af085..2af194c6 100644 --- a/wrappers/zabbix/main.tf +++ b/wrappers/zabbix/main.tf @@ -3,77 +3,77 @@ module "wrapper" { for_each = var.items - auto_computed_egress_rules = try(each.value.auto_computed_egress_rules, var.defaults.auto_computed_egress_rules, []) - auto_computed_egress_with_self = try(each.value.auto_computed_egress_with_self, var.defaults.auto_computed_egress_with_self, []) - auto_computed_ingress_rules = try(each.value.auto_computed_ingress_rules, var.defaults.auto_computed_ingress_rules, []) - auto_computed_ingress_with_self = try(each.value.auto_computed_ingress_with_self, var.defaults.auto_computed_ingress_with_self, []) - auto_egress_rules = try(each.value.auto_egress_rules, var.defaults.auto_egress_rules, ["all-all"]) - auto_egress_with_self = try(each.value.auto_egress_with_self, var.defaults.auto_egress_with_self, []) - auto_ingress_rules = try(each.value.auto_ingress_rules, var.defaults.auto_ingress_rules, ["zabbix-server", "zabbix-proxy", "zabbix-agent"]) - auto_ingress_with_self = try(each.value.auto_ingress_with_self, var.defaults.auto_ingress_with_self, [{ "rule" = "all-all" }]) - auto_number_of_computed_egress_rules = try(each.value.auto_number_of_computed_egress_rules, var.defaults.auto_number_of_computed_egress_rules, 0) - auto_number_of_computed_egress_with_self = try(each.value.auto_number_of_computed_egress_with_self, var.defaults.auto_number_of_computed_egress_with_self, 0) - auto_number_of_computed_ingress_rules = try(each.value.auto_number_of_computed_ingress_rules, var.defaults.auto_number_of_computed_ingress_rules, 0) - auto_number_of_computed_ingress_with_self = try(each.value.auto_number_of_computed_ingress_with_self, var.defaults.auto_number_of_computed_ingress_with_self, 0) - computed_egress_cidr_blocks = try(each.value.computed_egress_cidr_blocks, var.defaults.computed_egress_cidr_blocks, ["0.0.0.0/0"]) - computed_egress_ipv6_cidr_blocks = try(each.value.computed_egress_ipv6_cidr_blocks, var.defaults.computed_egress_ipv6_cidr_blocks, ["::/0"]) - computed_egress_prefix_list_ids = try(each.value.computed_egress_prefix_list_ids, var.defaults.computed_egress_prefix_list_ids, []) - computed_egress_rules = try(each.value.computed_egress_rules, var.defaults.computed_egress_rules, []) - computed_egress_with_cidr_blocks = try(each.value.computed_egress_with_cidr_blocks, var.defaults.computed_egress_with_cidr_blocks, []) - computed_egress_with_ipv6_cidr_blocks = try(each.value.computed_egress_with_ipv6_cidr_blocks, var.defaults.computed_egress_with_ipv6_cidr_blocks, []) - computed_egress_with_prefix_list_ids = try(each.value.computed_egress_with_prefix_list_ids, var.defaults.computed_egress_with_prefix_list_ids, []) - computed_egress_with_self = try(each.value.computed_egress_with_self, var.defaults.computed_egress_with_self, []) - computed_egress_with_source_security_group_id = try(each.value.computed_egress_with_source_security_group_id, var.defaults.computed_egress_with_source_security_group_id, []) - computed_ingress_cidr_blocks = try(each.value.computed_ingress_cidr_blocks, var.defaults.computed_ingress_cidr_blocks, []) - computed_ingress_ipv6_cidr_blocks = try(each.value.computed_ingress_ipv6_cidr_blocks, var.defaults.computed_ingress_ipv6_cidr_blocks, []) - computed_ingress_prefix_list_ids = try(each.value.computed_ingress_prefix_list_ids, var.defaults.computed_ingress_prefix_list_ids, []) - computed_ingress_rules = try(each.value.computed_ingress_rules, var.defaults.computed_ingress_rules, []) - computed_ingress_with_cidr_blocks = try(each.value.computed_ingress_with_cidr_blocks, var.defaults.computed_ingress_with_cidr_blocks, []) - computed_ingress_with_ipv6_cidr_blocks = try(each.value.computed_ingress_with_ipv6_cidr_blocks, var.defaults.computed_ingress_with_ipv6_cidr_blocks, []) - computed_ingress_with_prefix_list_ids = try(each.value.computed_ingress_with_prefix_list_ids, var.defaults.computed_ingress_with_prefix_list_ids, []) - computed_ingress_with_self = try(each.value.computed_ingress_with_self, var.defaults.computed_ingress_with_self, []) - computed_ingress_with_source_security_group_id = try(each.value.computed_ingress_with_source_security_group_id, var.defaults.computed_ingress_with_source_security_group_id, []) - create = try(each.value.create, var.defaults.create, true) - description = try(each.value.description, var.defaults.description, "Security Group managed by Terraform") - egress_cidr_blocks = try(each.value.egress_cidr_blocks, var.defaults.egress_cidr_blocks, ["0.0.0.0/0"]) - egress_ipv6_cidr_blocks = try(each.value.egress_ipv6_cidr_blocks, var.defaults.egress_ipv6_cidr_blocks, ["::/0"]) - egress_prefix_list_ids = try(each.value.egress_prefix_list_ids, var.defaults.egress_prefix_list_ids, []) - egress_rules = try(each.value.egress_rules, var.defaults.egress_rules, []) - egress_with_cidr_blocks = try(each.value.egress_with_cidr_blocks, var.defaults.egress_with_cidr_blocks, []) - egress_with_ipv6_cidr_blocks = try(each.value.egress_with_ipv6_cidr_blocks, var.defaults.egress_with_ipv6_cidr_blocks, []) - egress_with_prefix_list_ids = try(each.value.egress_with_prefix_list_ids, var.defaults.egress_with_prefix_list_ids, []) - egress_with_self = try(each.value.egress_with_self, var.defaults.egress_with_self, []) - egress_with_source_security_group_id = try(each.value.egress_with_source_security_group_id, var.defaults.egress_with_source_security_group_id, []) - ingress_cidr_blocks = try(each.value.ingress_cidr_blocks, var.defaults.ingress_cidr_blocks, []) - ingress_ipv6_cidr_blocks = try(each.value.ingress_ipv6_cidr_blocks, var.defaults.ingress_ipv6_cidr_blocks, []) - ingress_prefix_list_ids = try(each.value.ingress_prefix_list_ids, var.defaults.ingress_prefix_list_ids, []) - ingress_rules = try(each.value.ingress_rules, var.defaults.ingress_rules, []) - ingress_with_cidr_blocks = try(each.value.ingress_with_cidr_blocks, var.defaults.ingress_with_cidr_blocks, []) - ingress_with_ipv6_cidr_blocks = try(each.value.ingress_with_ipv6_cidr_blocks, var.defaults.ingress_with_ipv6_cidr_blocks, []) - ingress_with_prefix_list_ids = try(each.value.ingress_with_prefix_list_ids, var.defaults.ingress_with_prefix_list_ids, []) - ingress_with_self = try(each.value.ingress_with_self, var.defaults.ingress_with_self, []) - ingress_with_source_security_group_id = try(each.value.ingress_with_source_security_group_id, var.defaults.ingress_with_source_security_group_id, []) - name = try(each.value.name, var.defaults.name) - number_of_computed_egress_cidr_blocks = try(each.value.number_of_computed_egress_cidr_blocks, var.defaults.number_of_computed_egress_cidr_blocks, 0) - number_of_computed_egress_ipv6_cidr_blocks = try(each.value.number_of_computed_egress_ipv6_cidr_blocks, var.defaults.number_of_computed_egress_ipv6_cidr_blocks, 0) - number_of_computed_egress_prefix_list_ids = try(each.value.number_of_computed_egress_prefix_list_ids, var.defaults.number_of_computed_egress_prefix_list_ids, 0) - number_of_computed_egress_rules = try(each.value.number_of_computed_egress_rules, var.defaults.number_of_computed_egress_rules, 0) - number_of_computed_egress_with_cidr_blocks = try(each.value.number_of_computed_egress_with_cidr_blocks, var.defaults.number_of_computed_egress_with_cidr_blocks, 0) - number_of_computed_egress_with_ipv6_cidr_blocks = try(each.value.number_of_computed_egress_with_ipv6_cidr_blocks, var.defaults.number_of_computed_egress_with_ipv6_cidr_blocks, 0) - number_of_computed_egress_with_prefix_list_ids = try(each.value.number_of_computed_egress_with_prefix_list_ids, var.defaults.number_of_computed_egress_with_prefix_list_ids, 0) - number_of_computed_egress_with_self = try(each.value.number_of_computed_egress_with_self, var.defaults.number_of_computed_egress_with_self, 0) - number_of_computed_egress_with_source_security_group_id = try(each.value.number_of_computed_egress_with_source_security_group_id, var.defaults.number_of_computed_egress_with_source_security_group_id, 0) - number_of_computed_ingress_cidr_blocks = try(each.value.number_of_computed_ingress_cidr_blocks, var.defaults.number_of_computed_ingress_cidr_blocks, 0) - number_of_computed_ingress_ipv6_cidr_blocks = try(each.value.number_of_computed_ingress_ipv6_cidr_blocks, var.defaults.number_of_computed_ingress_ipv6_cidr_blocks, 0) - number_of_computed_ingress_prefix_list_ids = try(each.value.number_of_computed_ingress_prefix_list_ids, var.defaults.number_of_computed_ingress_prefix_list_ids, 0) - number_of_computed_ingress_rules = try(each.value.number_of_computed_ingress_rules, var.defaults.number_of_computed_ingress_rules, 0) - number_of_computed_ingress_with_cidr_blocks = try(each.value.number_of_computed_ingress_with_cidr_blocks, var.defaults.number_of_computed_ingress_with_cidr_blocks, 0) - number_of_computed_ingress_with_ipv6_cidr_blocks = try(each.value.number_of_computed_ingress_with_ipv6_cidr_blocks, var.defaults.number_of_computed_ingress_with_ipv6_cidr_blocks, 0) - number_of_computed_ingress_with_prefix_list_ids = try(each.value.number_of_computed_ingress_with_prefix_list_ids, var.defaults.number_of_computed_ingress_with_prefix_list_ids, 0) - number_of_computed_ingress_with_self = try(each.value.number_of_computed_ingress_with_self, var.defaults.number_of_computed_ingress_with_self, 0) - number_of_computed_ingress_with_source_security_group_id = try(each.value.number_of_computed_ingress_with_source_security_group_id, var.defaults.number_of_computed_ingress_with_source_security_group_id, 0) - revoke_rules_on_delete = try(each.value.revoke_rules_on_delete, var.defaults.revoke_rules_on_delete, false) - tags = try(each.value.tags, var.defaults.tags, {}) - use_name_prefix = try(each.value.use_name_prefix, var.defaults.use_name_prefix, true) - vpc_id = try(each.value.vpc_id, var.defaults.vpc_id) + auto_computed_egress_rules = try(each.value.auto_computed_egress_rules, var.defaults.auto_computed_egress_rules, []) + auto_computed_egress_with_self = try(each.value.auto_computed_egress_with_self, var.defaults.auto_computed_egress_with_self, []) + auto_computed_ingress_rules = try(each.value.auto_computed_ingress_rules, var.defaults.auto_computed_ingress_rules, []) + auto_computed_ingress_with_self = try(each.value.auto_computed_ingress_with_self, var.defaults.auto_computed_ingress_with_self, []) + auto_egress_rules = try(each.value.auto_egress_rules, var.defaults.auto_egress_rules, ["all-all"]) + auto_egress_with_self = try(each.value.auto_egress_with_self, var.defaults.auto_egress_with_self, []) + auto_ingress_rules = try(each.value.auto_ingress_rules, var.defaults.auto_ingress_rules, ["zabbix-server", "zabbix-proxy", "zabbix-agent"]) + auto_ingress_with_self = try(each.value.auto_ingress_with_self, var.defaults.auto_ingress_with_self, [{ "rule" = "all-all" }]) + auto_number_of_computed_egress_rules = try(each.value.auto_number_of_computed_egress_rules, var.defaults.auto_number_of_computed_egress_rules, 0) + auto_number_of_computed_egress_with_self = try(each.value.auto_number_of_computed_egress_with_self, var.defaults.auto_number_of_computed_egress_with_self, 0) + auto_number_of_computed_ingress_rules = try(each.value.auto_number_of_computed_ingress_rules, var.defaults.auto_number_of_computed_ingress_rules, 0) + auto_number_of_computed_ingress_with_self = try(each.value.auto_number_of_computed_ingress_with_self, var.defaults.auto_number_of_computed_ingress_with_self, 0) + computed_egress_cidr_blocks = try(each.value.computed_egress_cidr_blocks, var.defaults.computed_egress_cidr_blocks, ["0.0.0.0/0"]) + computed_egress_ipv6_cidr_blocks = try(each.value.computed_egress_ipv6_cidr_blocks, var.defaults.computed_egress_ipv6_cidr_blocks, ["::/0"]) + computed_egress_prefix_list_ids = try(each.value.computed_egress_prefix_list_ids, var.defaults.computed_egress_prefix_list_ids, []) + computed_egress_rules = try(each.value.computed_egress_rules, var.defaults.computed_egress_rules, []) + computed_egress_with_cidr_ipv4 = try(each.value.computed_egress_with_cidr_ipv4, var.defaults.computed_egress_with_cidr_ipv4, []) + computed_egress_with_cidr_ipv6 = try(each.value.computed_egress_with_cidr_ipv6, var.defaults.computed_egress_with_cidr_ipv6, []) + computed_egress_with_prefix_list_id = try(each.value.computed_egress_with_prefix_list_id, var.defaults.computed_egress_with_prefix_list_id, []) + computed_egress_with_referenced_security_group_id = try(each.value.computed_egress_with_referenced_security_group_id, var.defaults.computed_egress_with_referenced_security_group_id, []) + computed_egress_with_self = try(each.value.computed_egress_with_self, var.defaults.computed_egress_with_self, []) + computed_ingress_cidr_blocks = try(each.value.computed_ingress_cidr_blocks, var.defaults.computed_ingress_cidr_blocks, []) + computed_ingress_ipv6_cidr_blocks = try(each.value.computed_ingress_ipv6_cidr_blocks, var.defaults.computed_ingress_ipv6_cidr_blocks, []) + computed_ingress_prefix_list_ids = try(each.value.computed_ingress_prefix_list_ids, var.defaults.computed_ingress_prefix_list_ids, []) + computed_ingress_rules = try(each.value.computed_ingress_rules, var.defaults.computed_ingress_rules, []) + computed_ingress_with_cidr_ipv4 = try(each.value.computed_ingress_with_cidr_ipv4, var.defaults.computed_ingress_with_cidr_ipv4, []) + computed_ingress_with_cidr_ipv6 = try(each.value.computed_ingress_with_cidr_ipv6, var.defaults.computed_ingress_with_cidr_ipv6, []) + computed_ingress_with_prefix_list_id = try(each.value.computed_ingress_with_prefix_list_id, var.defaults.computed_ingress_with_prefix_list_id, []) + computed_ingress_with_referenced_security_group_id = try(each.value.computed_ingress_with_referenced_security_group_id, var.defaults.computed_ingress_with_referenced_security_group_id, []) + computed_ingress_with_self = try(each.value.computed_ingress_with_self, var.defaults.computed_ingress_with_self, []) + create = try(each.value.create, var.defaults.create, true) + description = try(each.value.description, var.defaults.description, "Security Group managed by Terraform") + egress_cidr_ipv4 = try(each.value.egress_cidr_ipv4, var.defaults.egress_cidr_ipv4, ["0.0.0.0/0"]) + egress_cidr_ipv6 = try(each.value.egress_cidr_ipv6, var.defaults.egress_cidr_ipv6, ["::/0"]) + egress_prefix_list_ids = try(each.value.egress_prefix_list_ids, var.defaults.egress_prefix_list_ids, []) + egress_rules = try(each.value.egress_rules, var.defaults.egress_rules, []) + egress_with_cidr_ipv4 = try(each.value.egress_with_cidr_ipv4, var.defaults.egress_with_cidr_ipv4, []) + egress_with_cidr_ipv6 = try(each.value.egress_with_cidr_ipv6, var.defaults.egress_with_cidr_ipv6, []) + egress_with_prefix_list_id = try(each.value.egress_with_prefix_list_id, var.defaults.egress_with_prefix_list_id, []) + egress_with_referenced_security_group_id = try(each.value.egress_with_referenced_security_group_id, var.defaults.egress_with_referenced_security_group_id, []) + egress_with_self = try(each.value.egress_with_self, var.defaults.egress_with_self, []) + ingress_cidr_ipv4 = try(each.value.ingress_cidr_ipv4, var.defaults.ingress_cidr_ipv4, []) + ingress_cidr_ipv6 = try(each.value.ingress_cidr_ipv6, var.defaults.ingress_cidr_ipv6, []) + ingress_prefix_list_ids = try(each.value.ingress_prefix_list_ids, var.defaults.ingress_prefix_list_ids, []) + ingress_rules = try(each.value.ingress_rules, var.defaults.ingress_rules, []) + ingress_with_cidr_ipv4 = try(each.value.ingress_with_cidr_ipv4, var.defaults.ingress_with_cidr_ipv4, []) + ingress_with_cidr_ipv6 = try(each.value.ingress_with_cidr_ipv6, var.defaults.ingress_with_cidr_ipv6, []) + ingress_with_prefix_list_id = try(each.value.ingress_with_prefix_list_id, var.defaults.ingress_with_prefix_list_id, []) + ingress_with_referenced_security_group_id = try(each.value.ingress_with_referenced_security_group_id, var.defaults.ingress_with_referenced_security_group_id, []) + ingress_with_self = try(each.value.ingress_with_self, var.defaults.ingress_with_self, []) + name = try(each.value.name, var.defaults.name) + number_of_computed_egress_cidr_blocks = try(each.value.number_of_computed_egress_cidr_blocks, var.defaults.number_of_computed_egress_cidr_blocks, 0) + number_of_computed_egress_ipv6_cidr_blocks = try(each.value.number_of_computed_egress_ipv6_cidr_blocks, var.defaults.number_of_computed_egress_ipv6_cidr_blocks, 0) + number_of_computed_egress_prefix_list_ids = try(each.value.number_of_computed_egress_prefix_list_ids, var.defaults.number_of_computed_egress_prefix_list_ids, 0) + number_of_computed_egress_rules = try(each.value.number_of_computed_egress_rules, var.defaults.number_of_computed_egress_rules, 0) + number_of_computed_egress_with_cidr_ipv4 = try(each.value.number_of_computed_egress_with_cidr_ipv4, var.defaults.number_of_computed_egress_with_cidr_ipv4, 0) + number_of_computed_egress_with_cidr_ipv6 = try(each.value.number_of_computed_egress_with_cidr_ipv6, var.defaults.number_of_computed_egress_with_cidr_ipv6, 0) + number_of_computed_egress_with_prefix_list_id = try(each.value.number_of_computed_egress_with_prefix_list_id, var.defaults.number_of_computed_egress_with_prefix_list_id, 0) + number_of_computed_egress_with_referenced_security_group_id = try(each.value.number_of_computed_egress_with_referenced_security_group_id, var.defaults.number_of_computed_egress_with_referenced_security_group_id, 0) + number_of_computed_egress_with_self = try(each.value.number_of_computed_egress_with_self, var.defaults.number_of_computed_egress_with_self, 0) + number_of_computed_ingress_cidr_blocks = try(each.value.number_of_computed_ingress_cidr_blocks, var.defaults.number_of_computed_ingress_cidr_blocks, 0) + number_of_computed_ingress_ipv6_cidr_blocks = try(each.value.number_of_computed_ingress_ipv6_cidr_blocks, var.defaults.number_of_computed_ingress_ipv6_cidr_blocks, 0) + number_of_computed_ingress_prefix_list_ids = try(each.value.number_of_computed_ingress_prefix_list_ids, var.defaults.number_of_computed_ingress_prefix_list_ids, 0) + number_of_computed_ingress_rules = try(each.value.number_of_computed_ingress_rules, var.defaults.number_of_computed_ingress_rules, 0) + number_of_computed_ingress_with_cidr_ipv4 = try(each.value.number_of_computed_ingress_with_cidr_ipv4, var.defaults.number_of_computed_ingress_with_cidr_ipv4, 0) + number_of_computed_ingress_with_cidr_ipv6 = try(each.value.number_of_computed_ingress_with_cidr_ipv6, var.defaults.number_of_computed_ingress_with_cidr_ipv6, 0) + number_of_computed_ingress_with_prefix_list_id = try(each.value.number_of_computed_ingress_with_prefix_list_id, var.defaults.number_of_computed_ingress_with_prefix_list_id, 0) + number_of_computed_ingress_with_referenced_security_group_id = try(each.value.number_of_computed_ingress_with_referenced_security_group_id, var.defaults.number_of_computed_ingress_with_referenced_security_group_id, 0) + number_of_computed_ingress_with_self = try(each.value.number_of_computed_ingress_with_self, var.defaults.number_of_computed_ingress_with_self, 0) + revoke_rules_on_delete = try(each.value.revoke_rules_on_delete, var.defaults.revoke_rules_on_delete, false) + tags = try(each.value.tags, var.defaults.tags, {}) + use_name_prefix = try(each.value.use_name_prefix, var.defaults.use_name_prefix, true) + vpc_id = try(each.value.vpc_id, var.defaults.vpc_id) } diff --git a/wrappers/zipkin/main.tf b/wrappers/zipkin/main.tf index 48e2a098..f6cbb1e8 100644 --- a/wrappers/zipkin/main.tf +++ b/wrappers/zipkin/main.tf @@ -3,77 +3,77 @@ module "wrapper" { for_each = var.items - auto_computed_egress_rules = try(each.value.auto_computed_egress_rules, var.defaults.auto_computed_egress_rules, []) - auto_computed_egress_with_self = try(each.value.auto_computed_egress_with_self, var.defaults.auto_computed_egress_with_self, []) - auto_computed_ingress_rules = try(each.value.auto_computed_ingress_rules, var.defaults.auto_computed_ingress_rules, []) - auto_computed_ingress_with_self = try(each.value.auto_computed_ingress_with_self, var.defaults.auto_computed_ingress_with_self, []) - auto_egress_rules = try(each.value.auto_egress_rules, var.defaults.auto_egress_rules, ["all-all"]) - auto_egress_with_self = try(each.value.auto_egress_with_self, var.defaults.auto_egress_with_self, []) - auto_ingress_rules = try(each.value.auto_ingress_rules, var.defaults.auto_ingress_rules, ["zipkin-admin-tcp", "zipkin-admin-query-tcp", "zipkin-admin-web-tcp", "zipkin-query-tcp", "zipkin-web-tcp"]) - auto_ingress_with_self = try(each.value.auto_ingress_with_self, var.defaults.auto_ingress_with_self, [{ "rule" = "all-all" }]) - auto_number_of_computed_egress_rules = try(each.value.auto_number_of_computed_egress_rules, var.defaults.auto_number_of_computed_egress_rules, 0) - auto_number_of_computed_egress_with_self = try(each.value.auto_number_of_computed_egress_with_self, var.defaults.auto_number_of_computed_egress_with_self, 0) - auto_number_of_computed_ingress_rules = try(each.value.auto_number_of_computed_ingress_rules, var.defaults.auto_number_of_computed_ingress_rules, 0) - auto_number_of_computed_ingress_with_self = try(each.value.auto_number_of_computed_ingress_with_self, var.defaults.auto_number_of_computed_ingress_with_self, 0) - computed_egress_cidr_blocks = try(each.value.computed_egress_cidr_blocks, var.defaults.computed_egress_cidr_blocks, ["0.0.0.0/0"]) - computed_egress_ipv6_cidr_blocks = try(each.value.computed_egress_ipv6_cidr_blocks, var.defaults.computed_egress_ipv6_cidr_blocks, ["::/0"]) - computed_egress_prefix_list_ids = try(each.value.computed_egress_prefix_list_ids, var.defaults.computed_egress_prefix_list_ids, []) - computed_egress_rules = try(each.value.computed_egress_rules, var.defaults.computed_egress_rules, []) - computed_egress_with_cidr_blocks = try(each.value.computed_egress_with_cidr_blocks, var.defaults.computed_egress_with_cidr_blocks, []) - computed_egress_with_ipv6_cidr_blocks = try(each.value.computed_egress_with_ipv6_cidr_blocks, var.defaults.computed_egress_with_ipv6_cidr_blocks, []) - computed_egress_with_prefix_list_ids = try(each.value.computed_egress_with_prefix_list_ids, var.defaults.computed_egress_with_prefix_list_ids, []) - computed_egress_with_self = try(each.value.computed_egress_with_self, var.defaults.computed_egress_with_self, []) - computed_egress_with_source_security_group_id = try(each.value.computed_egress_with_source_security_group_id, var.defaults.computed_egress_with_source_security_group_id, []) - computed_ingress_cidr_blocks = try(each.value.computed_ingress_cidr_blocks, var.defaults.computed_ingress_cidr_blocks, []) - computed_ingress_ipv6_cidr_blocks = try(each.value.computed_ingress_ipv6_cidr_blocks, var.defaults.computed_ingress_ipv6_cidr_blocks, []) - computed_ingress_prefix_list_ids = try(each.value.computed_ingress_prefix_list_ids, var.defaults.computed_ingress_prefix_list_ids, []) - computed_ingress_rules = try(each.value.computed_ingress_rules, var.defaults.computed_ingress_rules, []) - computed_ingress_with_cidr_blocks = try(each.value.computed_ingress_with_cidr_blocks, var.defaults.computed_ingress_with_cidr_blocks, []) - computed_ingress_with_ipv6_cidr_blocks = try(each.value.computed_ingress_with_ipv6_cidr_blocks, var.defaults.computed_ingress_with_ipv6_cidr_blocks, []) - computed_ingress_with_prefix_list_ids = try(each.value.computed_ingress_with_prefix_list_ids, var.defaults.computed_ingress_with_prefix_list_ids, []) - computed_ingress_with_self = try(each.value.computed_ingress_with_self, var.defaults.computed_ingress_with_self, []) - computed_ingress_with_source_security_group_id = try(each.value.computed_ingress_with_source_security_group_id, var.defaults.computed_ingress_with_source_security_group_id, []) - create = try(each.value.create, var.defaults.create, true) - description = try(each.value.description, var.defaults.description, "Security Group managed by Terraform") - egress_cidr_blocks = try(each.value.egress_cidr_blocks, var.defaults.egress_cidr_blocks, ["0.0.0.0/0"]) - egress_ipv6_cidr_blocks = try(each.value.egress_ipv6_cidr_blocks, var.defaults.egress_ipv6_cidr_blocks, ["::/0"]) - egress_prefix_list_ids = try(each.value.egress_prefix_list_ids, var.defaults.egress_prefix_list_ids, []) - egress_rules = try(each.value.egress_rules, var.defaults.egress_rules, []) - egress_with_cidr_blocks = try(each.value.egress_with_cidr_blocks, var.defaults.egress_with_cidr_blocks, []) - egress_with_ipv6_cidr_blocks = try(each.value.egress_with_ipv6_cidr_blocks, var.defaults.egress_with_ipv6_cidr_blocks, []) - egress_with_prefix_list_ids = try(each.value.egress_with_prefix_list_ids, var.defaults.egress_with_prefix_list_ids, []) - egress_with_self = try(each.value.egress_with_self, var.defaults.egress_with_self, []) - egress_with_source_security_group_id = try(each.value.egress_with_source_security_group_id, var.defaults.egress_with_source_security_group_id, []) - ingress_cidr_blocks = try(each.value.ingress_cidr_blocks, var.defaults.ingress_cidr_blocks, []) - ingress_ipv6_cidr_blocks = try(each.value.ingress_ipv6_cidr_blocks, var.defaults.ingress_ipv6_cidr_blocks, []) - ingress_prefix_list_ids = try(each.value.ingress_prefix_list_ids, var.defaults.ingress_prefix_list_ids, []) - ingress_rules = try(each.value.ingress_rules, var.defaults.ingress_rules, []) - ingress_with_cidr_blocks = try(each.value.ingress_with_cidr_blocks, var.defaults.ingress_with_cidr_blocks, []) - ingress_with_ipv6_cidr_blocks = try(each.value.ingress_with_ipv6_cidr_blocks, var.defaults.ingress_with_ipv6_cidr_blocks, []) - ingress_with_prefix_list_ids = try(each.value.ingress_with_prefix_list_ids, var.defaults.ingress_with_prefix_list_ids, []) - ingress_with_self = try(each.value.ingress_with_self, var.defaults.ingress_with_self, []) - ingress_with_source_security_group_id = try(each.value.ingress_with_source_security_group_id, var.defaults.ingress_with_source_security_group_id, []) - name = try(each.value.name, var.defaults.name) - number_of_computed_egress_cidr_blocks = try(each.value.number_of_computed_egress_cidr_blocks, var.defaults.number_of_computed_egress_cidr_blocks, 0) - number_of_computed_egress_ipv6_cidr_blocks = try(each.value.number_of_computed_egress_ipv6_cidr_blocks, var.defaults.number_of_computed_egress_ipv6_cidr_blocks, 0) - number_of_computed_egress_prefix_list_ids = try(each.value.number_of_computed_egress_prefix_list_ids, var.defaults.number_of_computed_egress_prefix_list_ids, 0) - number_of_computed_egress_rules = try(each.value.number_of_computed_egress_rules, var.defaults.number_of_computed_egress_rules, 0) - number_of_computed_egress_with_cidr_blocks = try(each.value.number_of_computed_egress_with_cidr_blocks, var.defaults.number_of_computed_egress_with_cidr_blocks, 0) - number_of_computed_egress_with_ipv6_cidr_blocks = try(each.value.number_of_computed_egress_with_ipv6_cidr_blocks, var.defaults.number_of_computed_egress_with_ipv6_cidr_blocks, 0) - number_of_computed_egress_with_prefix_list_ids = try(each.value.number_of_computed_egress_with_prefix_list_ids, var.defaults.number_of_computed_egress_with_prefix_list_ids, 0) - number_of_computed_egress_with_self = try(each.value.number_of_computed_egress_with_self, var.defaults.number_of_computed_egress_with_self, 0) - number_of_computed_egress_with_source_security_group_id = try(each.value.number_of_computed_egress_with_source_security_group_id, var.defaults.number_of_computed_egress_with_source_security_group_id, 0) - number_of_computed_ingress_cidr_blocks = try(each.value.number_of_computed_ingress_cidr_blocks, var.defaults.number_of_computed_ingress_cidr_blocks, 0) - number_of_computed_ingress_ipv6_cidr_blocks = try(each.value.number_of_computed_ingress_ipv6_cidr_blocks, var.defaults.number_of_computed_ingress_ipv6_cidr_blocks, 0) - number_of_computed_ingress_prefix_list_ids = try(each.value.number_of_computed_ingress_prefix_list_ids, var.defaults.number_of_computed_ingress_prefix_list_ids, 0) - number_of_computed_ingress_rules = try(each.value.number_of_computed_ingress_rules, var.defaults.number_of_computed_ingress_rules, 0) - number_of_computed_ingress_with_cidr_blocks = try(each.value.number_of_computed_ingress_with_cidr_blocks, var.defaults.number_of_computed_ingress_with_cidr_blocks, 0) - number_of_computed_ingress_with_ipv6_cidr_blocks = try(each.value.number_of_computed_ingress_with_ipv6_cidr_blocks, var.defaults.number_of_computed_ingress_with_ipv6_cidr_blocks, 0) - number_of_computed_ingress_with_prefix_list_ids = try(each.value.number_of_computed_ingress_with_prefix_list_ids, var.defaults.number_of_computed_ingress_with_prefix_list_ids, 0) - number_of_computed_ingress_with_self = try(each.value.number_of_computed_ingress_with_self, var.defaults.number_of_computed_ingress_with_self, 0) - number_of_computed_ingress_with_source_security_group_id = try(each.value.number_of_computed_ingress_with_source_security_group_id, var.defaults.number_of_computed_ingress_with_source_security_group_id, 0) - revoke_rules_on_delete = try(each.value.revoke_rules_on_delete, var.defaults.revoke_rules_on_delete, false) - tags = try(each.value.tags, var.defaults.tags, {}) - use_name_prefix = try(each.value.use_name_prefix, var.defaults.use_name_prefix, true) - vpc_id = try(each.value.vpc_id, var.defaults.vpc_id) + auto_computed_egress_rules = try(each.value.auto_computed_egress_rules, var.defaults.auto_computed_egress_rules, []) + auto_computed_egress_with_self = try(each.value.auto_computed_egress_with_self, var.defaults.auto_computed_egress_with_self, []) + auto_computed_ingress_rules = try(each.value.auto_computed_ingress_rules, var.defaults.auto_computed_ingress_rules, []) + auto_computed_ingress_with_self = try(each.value.auto_computed_ingress_with_self, var.defaults.auto_computed_ingress_with_self, []) + auto_egress_rules = try(each.value.auto_egress_rules, var.defaults.auto_egress_rules, ["all-all"]) + auto_egress_with_self = try(each.value.auto_egress_with_self, var.defaults.auto_egress_with_self, []) + auto_ingress_rules = try(each.value.auto_ingress_rules, var.defaults.auto_ingress_rules, ["zipkin-admin-tcp", "zipkin-admin-query-tcp", "zipkin-admin-web-tcp", "zipkin-query-tcp", "zipkin-web-tcp"]) + auto_ingress_with_self = try(each.value.auto_ingress_with_self, var.defaults.auto_ingress_with_self, [{ "rule" = "all-all" }]) + auto_number_of_computed_egress_rules = try(each.value.auto_number_of_computed_egress_rules, var.defaults.auto_number_of_computed_egress_rules, 0) + auto_number_of_computed_egress_with_self = try(each.value.auto_number_of_computed_egress_with_self, var.defaults.auto_number_of_computed_egress_with_self, 0) + auto_number_of_computed_ingress_rules = try(each.value.auto_number_of_computed_ingress_rules, var.defaults.auto_number_of_computed_ingress_rules, 0) + auto_number_of_computed_ingress_with_self = try(each.value.auto_number_of_computed_ingress_with_self, var.defaults.auto_number_of_computed_ingress_with_self, 0) + computed_egress_cidr_blocks = try(each.value.computed_egress_cidr_blocks, var.defaults.computed_egress_cidr_blocks, ["0.0.0.0/0"]) + computed_egress_ipv6_cidr_blocks = try(each.value.computed_egress_ipv6_cidr_blocks, var.defaults.computed_egress_ipv6_cidr_blocks, ["::/0"]) + computed_egress_prefix_list_ids = try(each.value.computed_egress_prefix_list_ids, var.defaults.computed_egress_prefix_list_ids, []) + computed_egress_rules = try(each.value.computed_egress_rules, var.defaults.computed_egress_rules, []) + computed_egress_with_cidr_ipv4 = try(each.value.computed_egress_with_cidr_ipv4, var.defaults.computed_egress_with_cidr_ipv4, []) + computed_egress_with_cidr_ipv6 = try(each.value.computed_egress_with_cidr_ipv6, var.defaults.computed_egress_with_cidr_ipv6, []) + computed_egress_with_prefix_list_id = try(each.value.computed_egress_with_prefix_list_id, var.defaults.computed_egress_with_prefix_list_id, []) + computed_egress_with_referenced_security_group_id = try(each.value.computed_egress_with_referenced_security_group_id, var.defaults.computed_egress_with_referenced_security_group_id, []) + computed_egress_with_self = try(each.value.computed_egress_with_self, var.defaults.computed_egress_with_self, []) + computed_ingress_cidr_blocks = try(each.value.computed_ingress_cidr_blocks, var.defaults.computed_ingress_cidr_blocks, []) + computed_ingress_ipv6_cidr_blocks = try(each.value.computed_ingress_ipv6_cidr_blocks, var.defaults.computed_ingress_ipv6_cidr_blocks, []) + computed_ingress_prefix_list_ids = try(each.value.computed_ingress_prefix_list_ids, var.defaults.computed_ingress_prefix_list_ids, []) + computed_ingress_rules = try(each.value.computed_ingress_rules, var.defaults.computed_ingress_rules, []) + computed_ingress_with_cidr_ipv4 = try(each.value.computed_ingress_with_cidr_ipv4, var.defaults.computed_ingress_with_cidr_ipv4, []) + computed_ingress_with_cidr_ipv6 = try(each.value.computed_ingress_with_cidr_ipv6, var.defaults.computed_ingress_with_cidr_ipv6, []) + computed_ingress_with_prefix_list_id = try(each.value.computed_ingress_with_prefix_list_id, var.defaults.computed_ingress_with_prefix_list_id, []) + computed_ingress_with_referenced_security_group_id = try(each.value.computed_ingress_with_referenced_security_group_id, var.defaults.computed_ingress_with_referenced_security_group_id, []) + computed_ingress_with_self = try(each.value.computed_ingress_with_self, var.defaults.computed_ingress_with_self, []) + create = try(each.value.create, var.defaults.create, true) + description = try(each.value.description, var.defaults.description, "Security Group managed by Terraform") + egress_cidr_ipv4 = try(each.value.egress_cidr_ipv4, var.defaults.egress_cidr_ipv4, ["0.0.0.0/0"]) + egress_cidr_ipv6 = try(each.value.egress_cidr_ipv6, var.defaults.egress_cidr_ipv6, ["::/0"]) + egress_prefix_list_ids = try(each.value.egress_prefix_list_ids, var.defaults.egress_prefix_list_ids, []) + egress_rules = try(each.value.egress_rules, var.defaults.egress_rules, []) + egress_with_cidr_ipv4 = try(each.value.egress_with_cidr_ipv4, var.defaults.egress_with_cidr_ipv4, []) + egress_with_cidr_ipv6 = try(each.value.egress_with_cidr_ipv6, var.defaults.egress_with_cidr_ipv6, []) + egress_with_prefix_list_id = try(each.value.egress_with_prefix_list_id, var.defaults.egress_with_prefix_list_id, []) + egress_with_referenced_security_group_id = try(each.value.egress_with_referenced_security_group_id, var.defaults.egress_with_referenced_security_group_id, []) + egress_with_self = try(each.value.egress_with_self, var.defaults.egress_with_self, []) + ingress_cidr_ipv4 = try(each.value.ingress_cidr_ipv4, var.defaults.ingress_cidr_ipv4, []) + ingress_cidr_ipv6 = try(each.value.ingress_cidr_ipv6, var.defaults.ingress_cidr_ipv6, []) + ingress_prefix_list_ids = try(each.value.ingress_prefix_list_ids, var.defaults.ingress_prefix_list_ids, []) + ingress_rules = try(each.value.ingress_rules, var.defaults.ingress_rules, []) + ingress_with_cidr_ipv4 = try(each.value.ingress_with_cidr_ipv4, var.defaults.ingress_with_cidr_ipv4, []) + ingress_with_cidr_ipv6 = try(each.value.ingress_with_cidr_ipv6, var.defaults.ingress_with_cidr_ipv6, []) + ingress_with_prefix_list_id = try(each.value.ingress_with_prefix_list_id, var.defaults.ingress_with_prefix_list_id, []) + ingress_with_referenced_security_group_id = try(each.value.ingress_with_referenced_security_group_id, var.defaults.ingress_with_referenced_security_group_id, []) + ingress_with_self = try(each.value.ingress_with_self, var.defaults.ingress_with_self, []) + name = try(each.value.name, var.defaults.name) + number_of_computed_egress_cidr_blocks = try(each.value.number_of_computed_egress_cidr_blocks, var.defaults.number_of_computed_egress_cidr_blocks, 0) + number_of_computed_egress_ipv6_cidr_blocks = try(each.value.number_of_computed_egress_ipv6_cidr_blocks, var.defaults.number_of_computed_egress_ipv6_cidr_blocks, 0) + number_of_computed_egress_prefix_list_ids = try(each.value.number_of_computed_egress_prefix_list_ids, var.defaults.number_of_computed_egress_prefix_list_ids, 0) + number_of_computed_egress_rules = try(each.value.number_of_computed_egress_rules, var.defaults.number_of_computed_egress_rules, 0) + number_of_computed_egress_with_cidr_ipv4 = try(each.value.number_of_computed_egress_with_cidr_ipv4, var.defaults.number_of_computed_egress_with_cidr_ipv4, 0) + number_of_computed_egress_with_cidr_ipv6 = try(each.value.number_of_computed_egress_with_cidr_ipv6, var.defaults.number_of_computed_egress_with_cidr_ipv6, 0) + number_of_computed_egress_with_prefix_list_id = try(each.value.number_of_computed_egress_with_prefix_list_id, var.defaults.number_of_computed_egress_with_prefix_list_id, 0) + number_of_computed_egress_with_referenced_security_group_id = try(each.value.number_of_computed_egress_with_referenced_security_group_id, var.defaults.number_of_computed_egress_with_referenced_security_group_id, 0) + number_of_computed_egress_with_self = try(each.value.number_of_computed_egress_with_self, var.defaults.number_of_computed_egress_with_self, 0) + number_of_computed_ingress_cidr_blocks = try(each.value.number_of_computed_ingress_cidr_blocks, var.defaults.number_of_computed_ingress_cidr_blocks, 0) + number_of_computed_ingress_ipv6_cidr_blocks = try(each.value.number_of_computed_ingress_ipv6_cidr_blocks, var.defaults.number_of_computed_ingress_ipv6_cidr_blocks, 0) + number_of_computed_ingress_prefix_list_ids = try(each.value.number_of_computed_ingress_prefix_list_ids, var.defaults.number_of_computed_ingress_prefix_list_ids, 0) + number_of_computed_ingress_rules = try(each.value.number_of_computed_ingress_rules, var.defaults.number_of_computed_ingress_rules, 0) + number_of_computed_ingress_with_cidr_ipv4 = try(each.value.number_of_computed_ingress_with_cidr_ipv4, var.defaults.number_of_computed_ingress_with_cidr_ipv4, 0) + number_of_computed_ingress_with_cidr_ipv6 = try(each.value.number_of_computed_ingress_with_cidr_ipv6, var.defaults.number_of_computed_ingress_with_cidr_ipv6, 0) + number_of_computed_ingress_with_prefix_list_id = try(each.value.number_of_computed_ingress_with_prefix_list_id, var.defaults.number_of_computed_ingress_with_prefix_list_id, 0) + number_of_computed_ingress_with_referenced_security_group_id = try(each.value.number_of_computed_ingress_with_referenced_security_group_id, var.defaults.number_of_computed_ingress_with_referenced_security_group_id, 0) + number_of_computed_ingress_with_self = try(each.value.number_of_computed_ingress_with_self, var.defaults.number_of_computed_ingress_with_self, 0) + revoke_rules_on_delete = try(each.value.revoke_rules_on_delete, var.defaults.revoke_rules_on_delete, false) + tags = try(each.value.tags, var.defaults.tags, {}) + use_name_prefix = try(each.value.use_name_prefix, var.defaults.use_name_prefix, true) + vpc_id = try(each.value.vpc_id, var.defaults.vpc_id) } diff --git a/wrappers/zookeeper/main.tf b/wrappers/zookeeper/main.tf index e391c5df..197ee5ce 100644 --- a/wrappers/zookeeper/main.tf +++ b/wrappers/zookeeper/main.tf @@ -3,77 +3,77 @@ module "wrapper" { for_each = var.items - auto_computed_egress_rules = try(each.value.auto_computed_egress_rules, var.defaults.auto_computed_egress_rules, []) - auto_computed_egress_with_self = try(each.value.auto_computed_egress_with_self, var.defaults.auto_computed_egress_with_self, []) - auto_computed_ingress_rules = try(each.value.auto_computed_ingress_rules, var.defaults.auto_computed_ingress_rules, []) - auto_computed_ingress_with_self = try(each.value.auto_computed_ingress_with_self, var.defaults.auto_computed_ingress_with_self, []) - auto_egress_rules = try(each.value.auto_egress_rules, var.defaults.auto_egress_rules, ["all-all"]) - auto_egress_with_self = try(each.value.auto_egress_with_self, var.defaults.auto_egress_with_self, []) - auto_ingress_rules = try(each.value.auto_ingress_rules, var.defaults.auto_ingress_rules, ["zookeeper-2181-tcp", "zookeeper-2182-tls-tcp", "zookeeper-2888-tcp", "zookeeper-3888-tcp", "zookeeper-jmx-tcp"]) - auto_ingress_with_self = try(each.value.auto_ingress_with_self, var.defaults.auto_ingress_with_self, [{ "rule" = "all-all" }]) - auto_number_of_computed_egress_rules = try(each.value.auto_number_of_computed_egress_rules, var.defaults.auto_number_of_computed_egress_rules, 0) - auto_number_of_computed_egress_with_self = try(each.value.auto_number_of_computed_egress_with_self, var.defaults.auto_number_of_computed_egress_with_self, 0) - auto_number_of_computed_ingress_rules = try(each.value.auto_number_of_computed_ingress_rules, var.defaults.auto_number_of_computed_ingress_rules, 0) - auto_number_of_computed_ingress_with_self = try(each.value.auto_number_of_computed_ingress_with_self, var.defaults.auto_number_of_computed_ingress_with_self, 0) - computed_egress_cidr_blocks = try(each.value.computed_egress_cidr_blocks, var.defaults.computed_egress_cidr_blocks, ["0.0.0.0/0"]) - computed_egress_ipv6_cidr_blocks = try(each.value.computed_egress_ipv6_cidr_blocks, var.defaults.computed_egress_ipv6_cidr_blocks, ["::/0"]) - computed_egress_prefix_list_ids = try(each.value.computed_egress_prefix_list_ids, var.defaults.computed_egress_prefix_list_ids, []) - computed_egress_rules = try(each.value.computed_egress_rules, var.defaults.computed_egress_rules, []) - computed_egress_with_cidr_blocks = try(each.value.computed_egress_with_cidr_blocks, var.defaults.computed_egress_with_cidr_blocks, []) - computed_egress_with_ipv6_cidr_blocks = try(each.value.computed_egress_with_ipv6_cidr_blocks, var.defaults.computed_egress_with_ipv6_cidr_blocks, []) - computed_egress_with_prefix_list_ids = try(each.value.computed_egress_with_prefix_list_ids, var.defaults.computed_egress_with_prefix_list_ids, []) - computed_egress_with_self = try(each.value.computed_egress_with_self, var.defaults.computed_egress_with_self, []) - computed_egress_with_source_security_group_id = try(each.value.computed_egress_with_source_security_group_id, var.defaults.computed_egress_with_source_security_group_id, []) - computed_ingress_cidr_blocks = try(each.value.computed_ingress_cidr_blocks, var.defaults.computed_ingress_cidr_blocks, []) - computed_ingress_ipv6_cidr_blocks = try(each.value.computed_ingress_ipv6_cidr_blocks, var.defaults.computed_ingress_ipv6_cidr_blocks, []) - computed_ingress_prefix_list_ids = try(each.value.computed_ingress_prefix_list_ids, var.defaults.computed_ingress_prefix_list_ids, []) - computed_ingress_rules = try(each.value.computed_ingress_rules, var.defaults.computed_ingress_rules, []) - computed_ingress_with_cidr_blocks = try(each.value.computed_ingress_with_cidr_blocks, var.defaults.computed_ingress_with_cidr_blocks, []) - computed_ingress_with_ipv6_cidr_blocks = try(each.value.computed_ingress_with_ipv6_cidr_blocks, var.defaults.computed_ingress_with_ipv6_cidr_blocks, []) - computed_ingress_with_prefix_list_ids = try(each.value.computed_ingress_with_prefix_list_ids, var.defaults.computed_ingress_with_prefix_list_ids, []) - computed_ingress_with_self = try(each.value.computed_ingress_with_self, var.defaults.computed_ingress_with_self, []) - computed_ingress_with_source_security_group_id = try(each.value.computed_ingress_with_source_security_group_id, var.defaults.computed_ingress_with_source_security_group_id, []) - create = try(each.value.create, var.defaults.create, true) - description = try(each.value.description, var.defaults.description, "Security Group managed by Terraform") - egress_cidr_blocks = try(each.value.egress_cidr_blocks, var.defaults.egress_cidr_blocks, ["0.0.0.0/0"]) - egress_ipv6_cidr_blocks = try(each.value.egress_ipv6_cidr_blocks, var.defaults.egress_ipv6_cidr_blocks, ["::/0"]) - egress_prefix_list_ids = try(each.value.egress_prefix_list_ids, var.defaults.egress_prefix_list_ids, []) - egress_rules = try(each.value.egress_rules, var.defaults.egress_rules, []) - egress_with_cidr_blocks = try(each.value.egress_with_cidr_blocks, var.defaults.egress_with_cidr_blocks, []) - egress_with_ipv6_cidr_blocks = try(each.value.egress_with_ipv6_cidr_blocks, var.defaults.egress_with_ipv6_cidr_blocks, []) - egress_with_prefix_list_ids = try(each.value.egress_with_prefix_list_ids, var.defaults.egress_with_prefix_list_ids, []) - egress_with_self = try(each.value.egress_with_self, var.defaults.egress_with_self, []) - egress_with_source_security_group_id = try(each.value.egress_with_source_security_group_id, var.defaults.egress_with_source_security_group_id, []) - ingress_cidr_blocks = try(each.value.ingress_cidr_blocks, var.defaults.ingress_cidr_blocks, []) - ingress_ipv6_cidr_blocks = try(each.value.ingress_ipv6_cidr_blocks, var.defaults.ingress_ipv6_cidr_blocks, []) - ingress_prefix_list_ids = try(each.value.ingress_prefix_list_ids, var.defaults.ingress_prefix_list_ids, []) - ingress_rules = try(each.value.ingress_rules, var.defaults.ingress_rules, []) - ingress_with_cidr_blocks = try(each.value.ingress_with_cidr_blocks, var.defaults.ingress_with_cidr_blocks, []) - ingress_with_ipv6_cidr_blocks = try(each.value.ingress_with_ipv6_cidr_blocks, var.defaults.ingress_with_ipv6_cidr_blocks, []) - ingress_with_prefix_list_ids = try(each.value.ingress_with_prefix_list_ids, var.defaults.ingress_with_prefix_list_ids, []) - ingress_with_self = try(each.value.ingress_with_self, var.defaults.ingress_with_self, []) - ingress_with_source_security_group_id = try(each.value.ingress_with_source_security_group_id, var.defaults.ingress_with_source_security_group_id, []) - name = try(each.value.name, var.defaults.name) - number_of_computed_egress_cidr_blocks = try(each.value.number_of_computed_egress_cidr_blocks, var.defaults.number_of_computed_egress_cidr_blocks, 0) - number_of_computed_egress_ipv6_cidr_blocks = try(each.value.number_of_computed_egress_ipv6_cidr_blocks, var.defaults.number_of_computed_egress_ipv6_cidr_blocks, 0) - number_of_computed_egress_prefix_list_ids = try(each.value.number_of_computed_egress_prefix_list_ids, var.defaults.number_of_computed_egress_prefix_list_ids, 0) - number_of_computed_egress_rules = try(each.value.number_of_computed_egress_rules, var.defaults.number_of_computed_egress_rules, 0) - number_of_computed_egress_with_cidr_blocks = try(each.value.number_of_computed_egress_with_cidr_blocks, var.defaults.number_of_computed_egress_with_cidr_blocks, 0) - number_of_computed_egress_with_ipv6_cidr_blocks = try(each.value.number_of_computed_egress_with_ipv6_cidr_blocks, var.defaults.number_of_computed_egress_with_ipv6_cidr_blocks, 0) - number_of_computed_egress_with_prefix_list_ids = try(each.value.number_of_computed_egress_with_prefix_list_ids, var.defaults.number_of_computed_egress_with_prefix_list_ids, 0) - number_of_computed_egress_with_self = try(each.value.number_of_computed_egress_with_self, var.defaults.number_of_computed_egress_with_self, 0) - number_of_computed_egress_with_source_security_group_id = try(each.value.number_of_computed_egress_with_source_security_group_id, var.defaults.number_of_computed_egress_with_source_security_group_id, 0) - number_of_computed_ingress_cidr_blocks = try(each.value.number_of_computed_ingress_cidr_blocks, var.defaults.number_of_computed_ingress_cidr_blocks, 0) - number_of_computed_ingress_ipv6_cidr_blocks = try(each.value.number_of_computed_ingress_ipv6_cidr_blocks, var.defaults.number_of_computed_ingress_ipv6_cidr_blocks, 0) - number_of_computed_ingress_prefix_list_ids = try(each.value.number_of_computed_ingress_prefix_list_ids, var.defaults.number_of_computed_ingress_prefix_list_ids, 0) - number_of_computed_ingress_rules = try(each.value.number_of_computed_ingress_rules, var.defaults.number_of_computed_ingress_rules, 0) - number_of_computed_ingress_with_cidr_blocks = try(each.value.number_of_computed_ingress_with_cidr_blocks, var.defaults.number_of_computed_ingress_with_cidr_blocks, 0) - number_of_computed_ingress_with_ipv6_cidr_blocks = try(each.value.number_of_computed_ingress_with_ipv6_cidr_blocks, var.defaults.number_of_computed_ingress_with_ipv6_cidr_blocks, 0) - number_of_computed_ingress_with_prefix_list_ids = try(each.value.number_of_computed_ingress_with_prefix_list_ids, var.defaults.number_of_computed_ingress_with_prefix_list_ids, 0) - number_of_computed_ingress_with_self = try(each.value.number_of_computed_ingress_with_self, var.defaults.number_of_computed_ingress_with_self, 0) - number_of_computed_ingress_with_source_security_group_id = try(each.value.number_of_computed_ingress_with_source_security_group_id, var.defaults.number_of_computed_ingress_with_source_security_group_id, 0) - revoke_rules_on_delete = try(each.value.revoke_rules_on_delete, var.defaults.revoke_rules_on_delete, false) - tags = try(each.value.tags, var.defaults.tags, {}) - use_name_prefix = try(each.value.use_name_prefix, var.defaults.use_name_prefix, true) - vpc_id = try(each.value.vpc_id, var.defaults.vpc_id) + auto_computed_egress_rules = try(each.value.auto_computed_egress_rules, var.defaults.auto_computed_egress_rules, []) + auto_computed_egress_with_self = try(each.value.auto_computed_egress_with_self, var.defaults.auto_computed_egress_with_self, []) + auto_computed_ingress_rules = try(each.value.auto_computed_ingress_rules, var.defaults.auto_computed_ingress_rules, []) + auto_computed_ingress_with_self = try(each.value.auto_computed_ingress_with_self, var.defaults.auto_computed_ingress_with_self, []) + auto_egress_rules = try(each.value.auto_egress_rules, var.defaults.auto_egress_rules, ["all-all"]) + auto_egress_with_self = try(each.value.auto_egress_with_self, var.defaults.auto_egress_with_self, []) + auto_ingress_rules = try(each.value.auto_ingress_rules, var.defaults.auto_ingress_rules, ["zookeeper-2181-tcp", "zookeeper-2182-tls-tcp", "zookeeper-2888-tcp", "zookeeper-3888-tcp", "zookeeper-jmx-tcp"]) + auto_ingress_with_self = try(each.value.auto_ingress_with_self, var.defaults.auto_ingress_with_self, [{ "rule" = "all-all" }]) + auto_number_of_computed_egress_rules = try(each.value.auto_number_of_computed_egress_rules, var.defaults.auto_number_of_computed_egress_rules, 0) + auto_number_of_computed_egress_with_self = try(each.value.auto_number_of_computed_egress_with_self, var.defaults.auto_number_of_computed_egress_with_self, 0) + auto_number_of_computed_ingress_rules = try(each.value.auto_number_of_computed_ingress_rules, var.defaults.auto_number_of_computed_ingress_rules, 0) + auto_number_of_computed_ingress_with_self = try(each.value.auto_number_of_computed_ingress_with_self, var.defaults.auto_number_of_computed_ingress_with_self, 0) + computed_egress_cidr_blocks = try(each.value.computed_egress_cidr_blocks, var.defaults.computed_egress_cidr_blocks, ["0.0.0.0/0"]) + computed_egress_ipv6_cidr_blocks = try(each.value.computed_egress_ipv6_cidr_blocks, var.defaults.computed_egress_ipv6_cidr_blocks, ["::/0"]) + computed_egress_prefix_list_ids = try(each.value.computed_egress_prefix_list_ids, var.defaults.computed_egress_prefix_list_ids, []) + computed_egress_rules = try(each.value.computed_egress_rules, var.defaults.computed_egress_rules, []) + computed_egress_with_cidr_ipv4 = try(each.value.computed_egress_with_cidr_ipv4, var.defaults.computed_egress_with_cidr_ipv4, []) + computed_egress_with_cidr_ipv6 = try(each.value.computed_egress_with_cidr_ipv6, var.defaults.computed_egress_with_cidr_ipv6, []) + computed_egress_with_prefix_list_id = try(each.value.computed_egress_with_prefix_list_id, var.defaults.computed_egress_with_prefix_list_id, []) + computed_egress_with_referenced_security_group_id = try(each.value.computed_egress_with_referenced_security_group_id, var.defaults.computed_egress_with_referenced_security_group_id, []) + computed_egress_with_self = try(each.value.computed_egress_with_self, var.defaults.computed_egress_with_self, []) + computed_ingress_cidr_blocks = try(each.value.computed_ingress_cidr_blocks, var.defaults.computed_ingress_cidr_blocks, []) + computed_ingress_ipv6_cidr_blocks = try(each.value.computed_ingress_ipv6_cidr_blocks, var.defaults.computed_ingress_ipv6_cidr_blocks, []) + computed_ingress_prefix_list_ids = try(each.value.computed_ingress_prefix_list_ids, var.defaults.computed_ingress_prefix_list_ids, []) + computed_ingress_rules = try(each.value.computed_ingress_rules, var.defaults.computed_ingress_rules, []) + computed_ingress_with_cidr_ipv4 = try(each.value.computed_ingress_with_cidr_ipv4, var.defaults.computed_ingress_with_cidr_ipv4, []) + computed_ingress_with_cidr_ipv6 = try(each.value.computed_ingress_with_cidr_ipv6, var.defaults.computed_ingress_with_cidr_ipv6, []) + computed_ingress_with_prefix_list_id = try(each.value.computed_ingress_with_prefix_list_id, var.defaults.computed_ingress_with_prefix_list_id, []) + computed_ingress_with_referenced_security_group_id = try(each.value.computed_ingress_with_referenced_security_group_id, var.defaults.computed_ingress_with_referenced_security_group_id, []) + computed_ingress_with_self = try(each.value.computed_ingress_with_self, var.defaults.computed_ingress_with_self, []) + create = try(each.value.create, var.defaults.create, true) + description = try(each.value.description, var.defaults.description, "Security Group managed by Terraform") + egress_cidr_ipv4 = try(each.value.egress_cidr_ipv4, var.defaults.egress_cidr_ipv4, ["0.0.0.0/0"]) + egress_cidr_ipv6 = try(each.value.egress_cidr_ipv6, var.defaults.egress_cidr_ipv6, ["::/0"]) + egress_prefix_list_ids = try(each.value.egress_prefix_list_ids, var.defaults.egress_prefix_list_ids, []) + egress_rules = try(each.value.egress_rules, var.defaults.egress_rules, []) + egress_with_cidr_ipv4 = try(each.value.egress_with_cidr_ipv4, var.defaults.egress_with_cidr_ipv4, []) + egress_with_cidr_ipv6 = try(each.value.egress_with_cidr_ipv6, var.defaults.egress_with_cidr_ipv6, []) + egress_with_prefix_list_id = try(each.value.egress_with_prefix_list_id, var.defaults.egress_with_prefix_list_id, []) + egress_with_referenced_security_group_id = try(each.value.egress_with_referenced_security_group_id, var.defaults.egress_with_referenced_security_group_id, []) + egress_with_self = try(each.value.egress_with_self, var.defaults.egress_with_self, []) + ingress_cidr_ipv4 = try(each.value.ingress_cidr_ipv4, var.defaults.ingress_cidr_ipv4, []) + ingress_cidr_ipv6 = try(each.value.ingress_cidr_ipv6, var.defaults.ingress_cidr_ipv6, []) + ingress_prefix_list_ids = try(each.value.ingress_prefix_list_ids, var.defaults.ingress_prefix_list_ids, []) + ingress_rules = try(each.value.ingress_rules, var.defaults.ingress_rules, []) + ingress_with_cidr_ipv4 = try(each.value.ingress_with_cidr_ipv4, var.defaults.ingress_with_cidr_ipv4, []) + ingress_with_cidr_ipv6 = try(each.value.ingress_with_cidr_ipv6, var.defaults.ingress_with_cidr_ipv6, []) + ingress_with_prefix_list_id = try(each.value.ingress_with_prefix_list_id, var.defaults.ingress_with_prefix_list_id, []) + ingress_with_referenced_security_group_id = try(each.value.ingress_with_referenced_security_group_id, var.defaults.ingress_with_referenced_security_group_id, []) + ingress_with_self = try(each.value.ingress_with_self, var.defaults.ingress_with_self, []) + name = try(each.value.name, var.defaults.name) + number_of_computed_egress_cidr_blocks = try(each.value.number_of_computed_egress_cidr_blocks, var.defaults.number_of_computed_egress_cidr_blocks, 0) + number_of_computed_egress_ipv6_cidr_blocks = try(each.value.number_of_computed_egress_ipv6_cidr_blocks, var.defaults.number_of_computed_egress_ipv6_cidr_blocks, 0) + number_of_computed_egress_prefix_list_ids = try(each.value.number_of_computed_egress_prefix_list_ids, var.defaults.number_of_computed_egress_prefix_list_ids, 0) + number_of_computed_egress_rules = try(each.value.number_of_computed_egress_rules, var.defaults.number_of_computed_egress_rules, 0) + number_of_computed_egress_with_cidr_ipv4 = try(each.value.number_of_computed_egress_with_cidr_ipv4, var.defaults.number_of_computed_egress_with_cidr_ipv4, 0) + number_of_computed_egress_with_cidr_ipv6 = try(each.value.number_of_computed_egress_with_cidr_ipv6, var.defaults.number_of_computed_egress_with_cidr_ipv6, 0) + number_of_computed_egress_with_prefix_list_id = try(each.value.number_of_computed_egress_with_prefix_list_id, var.defaults.number_of_computed_egress_with_prefix_list_id, 0) + number_of_computed_egress_with_referenced_security_group_id = try(each.value.number_of_computed_egress_with_referenced_security_group_id, var.defaults.number_of_computed_egress_with_referenced_security_group_id, 0) + number_of_computed_egress_with_self = try(each.value.number_of_computed_egress_with_self, var.defaults.number_of_computed_egress_with_self, 0) + number_of_computed_ingress_cidr_blocks = try(each.value.number_of_computed_ingress_cidr_blocks, var.defaults.number_of_computed_ingress_cidr_blocks, 0) + number_of_computed_ingress_ipv6_cidr_blocks = try(each.value.number_of_computed_ingress_ipv6_cidr_blocks, var.defaults.number_of_computed_ingress_ipv6_cidr_blocks, 0) + number_of_computed_ingress_prefix_list_ids = try(each.value.number_of_computed_ingress_prefix_list_ids, var.defaults.number_of_computed_ingress_prefix_list_ids, 0) + number_of_computed_ingress_rules = try(each.value.number_of_computed_ingress_rules, var.defaults.number_of_computed_ingress_rules, 0) + number_of_computed_ingress_with_cidr_ipv4 = try(each.value.number_of_computed_ingress_with_cidr_ipv4, var.defaults.number_of_computed_ingress_with_cidr_ipv4, 0) + number_of_computed_ingress_with_cidr_ipv6 = try(each.value.number_of_computed_ingress_with_cidr_ipv6, var.defaults.number_of_computed_ingress_with_cidr_ipv6, 0) + number_of_computed_ingress_with_prefix_list_id = try(each.value.number_of_computed_ingress_with_prefix_list_id, var.defaults.number_of_computed_ingress_with_prefix_list_id, 0) + number_of_computed_ingress_with_referenced_security_group_id = try(each.value.number_of_computed_ingress_with_referenced_security_group_id, var.defaults.number_of_computed_ingress_with_referenced_security_group_id, 0) + number_of_computed_ingress_with_self = try(each.value.number_of_computed_ingress_with_self, var.defaults.number_of_computed_ingress_with_self, 0) + revoke_rules_on_delete = try(each.value.revoke_rules_on_delete, var.defaults.revoke_rules_on_delete, false) + tags = try(each.value.tags, var.defaults.tags, {}) + use_name_prefix = try(each.value.use_name_prefix, var.defaults.use_name_prefix, true) + vpc_id = try(each.value.vpc_id, var.defaults.vpc_id) }