2023-07-12 20:37:30 +08:00
|
|
|
# Overview
|
2023-07-12 20:38:20 +08:00
|
|
|
This module uses provider default_tags!
|
2023-07-12 20:37:30 +08:00
|
|
|
|
|
|
|
This module performs the following tasks:
|
|
|
|
|
|
|
|
- Create VPC, vpcflow log
|
|
|
|
- Create subnets in every AZ
|
|
|
|
- Create IGW, NGW
|
|
|
|
- Create s3 and ddb endpoints which are free
|
|
|
|
|
|
|
|
## Subnet addressing
|
|
|
|
|
|
|
|
Subnet cidrs needs to be specified manually
|
|
|
|
|
|
|
|
## Inputs:
|
|
|
|
|
|
|
|
| Name | Description | Type | Default | Required |
|
|
|
|
|---------------------------------|---------------------------------------------------|---------------|---------|----------|
|
|
|
|
| private-subnet-cidrs | private subnets | list | [] | yes |
|
|
|
|
| public-subnet-cidrs | public subnets | list | [] | yes |
|
|
|
|
| create-nat-gateway | whether to deploy NAT gateway for private subnets | bool | true | yes |
|
|
|
|
| vpc-cidr | VPC cidr | string | none | yes |
|
|
|
|
| enable-flowlog | whether to enable vpc flowlog | bool | true | yes |
|
|
|
|
| vpcflowlog-retain-days | number of days to retain vpc cloudwatch log | number | 90 | yes |
|
|
|
|
| vpcflowlog-cwl-loggroup-key-arn | kms key alias arn for log group encryption | string | none | yes |
|
|
|
|
| secondary_cidr_blocks | Additional CIDR blocks to be associated with VPC | list(string) | none | no |
|
|
|
|
| resource-prefix | Prefix of resource name | string | "" | yes |
|
|
|
|
|
|
|
|
|
|
|
|
## Outputs:
|
|
|
|
|
|
|
|
| Name | Description | Type |
|
|
|
|
|-----------------------|-------------------------|---------|
|
|
|
|
| vpc_id | vpc id | string |
|
|
|
|
| public_subnets | list of cidr blocks | list |
|
|
|
|
| private_subnets | list of cidr blocks | list |
|
|
|
|
| secondary_cidr_blocks | list of secondary cidrs | list |
|