terraform-aws-transit-gateway/transit-gateway.tf at master · DNXLabs/terraform-aws-transit-gateway · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
resource "aws_ec2_transit_gateway" "default" {
  count = var.transit_gateway_enabled ? 1 : 0

  description                        = "${var.name}-transit-gateway"
  amazon_side_asn                    = var.transit_gateway_asn
  auto_accept_shared_attachments     = "enable"
  default_route_table_association    = var.default_route_table_association
  default_route_table_propagation    = var.default_route_table_propagation
  dns_support                        = var.dns_support
  security_group_referencing_support = var.security_group_referencing_support

  tags = merge(
    var.tags,
    {
      "Name"    = "${var.name}-transit-gateway"
      "EnvName" = var.name
    },
  )
}

resource "aws_ec2_transit_gateway_vpc_attachment" "default" {
  count = try(var.attachment, false) ? 1 : 0

  subnet_ids                         = var.subnet_ids
  transit_gateway_id                 = data.aws_ec2_transit_gateway.default[0].id
  vpc_id                             = var.vpc_id
  dns_support                        = var.dns_support
  security_group_referencing_support = var.security_group_referencing_support

  transit_gateway_default_route_table_association = true
  transit_gateway_default_route_table_propagation = true

  tags = merge(
    var.tags,
    {
      "Name"    = "${var.name}-${var.account_name}-tgw-vpc"
      "EnvName" = var.account_name
    },
  )
}

resource "aws_ec2_transit_gateway_route" "blackhole" {
  count = var.transit_gateway_enabled ? 1 : 0

  destination_cidr_block         = "0.0.0.0/0"
  blackhole                      = length(var.public_route) > 0 ? false : true
  transit_gateway_route_table_id = aws_ec2_transit_gateway.default[0].association_default_route_table_id
  transit_gateway_attachment_id  = length(var.public_route) > 0 ? aws_ec2_transit_gateway_vpc_attachment.default[0].id : null
}