File tree Expand file tree Collapse file tree 6 files changed +8
-9
lines changed
Expand file tree Collapse file tree 6 files changed +8
-9
lines changed Original file line number Diff line number Diff line change @@ -14,4 +14,4 @@ apim_environment = "internal-dev."
1414kms_deletion_window = 7
1515
1616# SSH Key Management
17- ssh_key_management_dry_run = " true" # Enable dry-run for dev environment
17+ ssh_key_management_dry_run = true # Enable dry-run for dev environment
Original file line number Diff line number Diff line change @@ -3,8 +3,7 @@ module "transfer-key-manager-lambda" {
33 source = " ./modules/lambda"
44 name = " TransferKeyManagerLambda"
55 handler = " handlers.transfer_key_manager_handler.lambda_handler"
6- lambda_timeout = 300
7- memory_size = 512
6+ lambda_timeout = 300 # 5 minutes - needed for iterating through all Transfer Family servers/users
87
98 iam_role_policy_documents = [
109 data . aws_iam_policy_document . transfer_key_manager_policy . json ,
@@ -21,7 +20,7 @@ module "transfer-key-manager-lambda" {
2120 APPCONFIG_CONFIGURATION = module.ndr- app- config.app_config_configuration_profile_id
2221 WORKSPACE = terraform.workspace
2322 PRM_MAILBOX_EMAIL = data.aws_ssm_parameter.prm_mailbox_email.value
24- DRY_RUN = var.ssh_key_management_dry_run
23+ DRY_RUN = tostring ( var. ssh_key_management_dry_run )
2524 }
2625
2726 is_gateway_integration_needed = false
Original file line number Diff line number Diff line change @@ -12,6 +12,6 @@ cloud_security_email_param_environment = "pre-prod"
1212apim_environment = " int."
1313
1414# SSH Key Management
15- ssh_key_management_dry_run = " false" # Disable dry-run for preprod (test real deletion)
15+ ssh_key_management_dry_run = false # Disable dry-run for preprod (test real deletion)
1616
1717deletion_protection_enabled = true
Original file line number Diff line number Diff line change @@ -12,6 +12,6 @@ cloud_security_email_param_environment = "prod"
1212apim_environment = " "
1313
1414# SSH Key Management
15- ssh_key_management_dry_run = " false" # Disable dry-run for production
15+ ssh_key_management_dry_run = false # Disable dry-run for production
1616
1717deletion_protection_enabled = true
Original file line number Diff line number Diff line change @@ -12,4 +12,4 @@ cloud_security_email_param_environment = "ndr-test"
1212apim_environment = " internal-qa."
1313
1414# SSH Key Management
15- ssh_key_management_dry_run = " true" # Enable dry-run for test environment
15+ ssh_key_management_dry_run = true # Enable dry-run for test environment
Original file line number Diff line number Diff line change @@ -318,6 +318,6 @@ variable "kms_deletion_window" {
318318# SSH Key Management Variables
319319variable "ssh_key_management_dry_run" {
320320 description = " Enable dry-run mode for SSH key management (no keys will be deleted)"
321- type = string
322- default = " false"
321+ type = bool
322+ default = false
323323}
You can’t perform that action at this time.
0 commit comments