DD-AWS/main.tf at master · DefendableDesign/DD-AWS · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
provider "aws" {
  region  = "${var.region}"
  version = "~> 1.11"
}

provider "archive" {
  version = "~> 1.0"
}

terraform {
  backend "s3" {
    encrypt = true
    key     = "DD_Terraform/terraform.tfstate"
  }
}

module "kms" {
  source = "./modules/setup_kms"
}

module "best_practice" {
  source                    = "./modules/best_practice"
  kms_key_id                = "${module.kms.kms_key_id}"
  enable_cis_level_2_alerts = "${var.enable_cis_level_2_alerts}"
}

module "config" {
  source     = "./modules/aws_config/setup_config"
  kms_key_id = "${module.kms.kms_key_id}"
}

module "remediation" {
  source               = "./modules/aws_config/remediation_coordinator"
  enable_auto_response = "${var.enable_auto_response}"
}

module "rules" {
  source                             = "./modules/aws_config/rules"
  config_is_setup                    = "${module.config.is_complete}"
  remediation_queue_url              = "${module.remediation.remediation_queue_url}"
  remediation_queue_arn              = "${module.remediation.remediation_queue_arn}"
  remediation_coordinator_lambda_arn = "${module.remediation.remediation_coordinator_lambda_arn}"
  notifier_enabled                   = "${var.slack_webhook_url == "" ? "false" : "true"}"
}

module "notifier" {
  source             = "./modules/notifier"
  slack_webhook_url  = "${var.slack_webhook_url}"
  slack_channel      = "${var.slack_channel}"
  kms_key_id         = "${module.kms.kms_key_id}"
  kms_arn            = "${module.kms.kms_arn}"
  monitoring_sns_arn = "${module.best_practice.sns_topic_arn}"
  config_sns_arn     = "${module.config.sns_topic_arn}"
}