aws-devops/variable.tf at main · 88hours/aws-devops · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167

variable "main_organisation_account" {
  description = "The main AWS account ID for the organization"
  type        = string

}
variable "aws_profile" {
  description = "The AWS credentials profile name"
  type        = string
}
variable "aws_region" {
  description = "The AWS region to deploy resources in"
  type        = string

}
variable "aws_billing_region" {
  description = "The name of aws organisation admin"
  type        = string
}
variable "billing_alert_name" {
  description = "Custom prefix for the billing alarm name"
  type        = string
  default     = "org-billing-alert"
}
variable "org_admin" {
  description = "The name of the IAM user"
  type        = string
}

variable "email_recipients" {
  description = "A list of email addresses to send billing alerts to."
  type        = list(string)
}

variable "billing_alert_threshold_usd" {
  description = "The estimated cost threshold in USD to trigger the billing alarm."
  type        = number
}

variable "alarm_name_prefix" {
  description = "Prefix for the alarm and SNS topic names."
  type        = string
}
variable "org_admin_profile" {
  description = "The AWS profile to use for the organization admin"
  type        = string

}
variable "org_admin_policy" {
  description = "The name of the IAM policy for the Organization Admin"
  type        = string
}
variable "dev_users" {
  description = "List of SSO users to create"
  type = list(object({
    user_name    = string
    display_name = string
    email        = string
  }))

}

variable "organisation_id" {
  description = "The ID of the AWS Organization"
  type        = string
}
variable "permission_set_name" {
  description = "Name of the permission set"
  type        = string
}

variable "cloudtrail_log_group_name" {
  description = "Name of the CloudTrail log group"
  type        = string
  default     = "/aws/cloudtrail/cloudtrail-logs"

}

variable "cloudtrail_name" {
  description = "Name of the CloudTrail"
  type        = string
}

variable "cloudtrail_bucket_name" {
  description = "Name of the S3 bucket for CloudTrail logs"
  type        = string
}
variable "cloudtrail_global_region" {
  description = "AWS region for the CloudTrail"
  type        = string
}
variable "cloudtrail_versioning_enabled" {
  description = "Enable versioning for the CloudTrail S3 bucket"
  type        = bool
  default     = true

}
variable "cloudtrail_cloudwatchlogs_role" {
  description = "Name of the IAM role for CloudTrail to write logs to CloudWatch"
  type        = string
  default     = "CloudTrail_CloudWatchLogs_Role"
}
variable "cloudtrail_cloudwatchlogs_policy" {
  description = "Name of the IAM policy for CloudTrail to write logs to CloudWatch"
  type        = string
  default     = "CloudTrail_CloudWatchLogs_Policy"
}
variable "ecr_repo_name" {
  description = "Name of the ECR repository"
  type        = string
  default     = "ecr-app-repo"
}

variable "ecs_cluster_name" {
  description = "ECS cluster name"
  type        = string
  default     = "ecs-cluster"
}
variable "ecs_service_name" {
  description = "Name of the ECS service"
  type        = string
  default     = "app-service"
}


variable "eks_master_cluster_name" {
  description = "EKS master cluster name"
  type        = string
}
variable "eks_master_cluster_k8s_version" {
  description = "Kubernetes version for the EKS Master cluster"
  type        = string
}
variable "eks_master_cluster_azs" {
  description = "Availability Zones for the EKS Master cluster"
  type        = list(string)
}

variable "vault_address" {
  type      = string
  sensitive = true
}

variable "vault_token" {
  type      = string
  sensitive = true
}

variable "skip_tls_verify" {
  type    = bool
  default = true
}

variable "db_password" {
  type      = string
  sensitive = true
}

# Other root variables
variable "static_secret_data" {
  type      = map(string)
  sensitive = true
}

variable "db_creation_statements" {
  type = list(string)
}