You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
AWS accounts and organizational units are generated dynamically by the `terraform/account` component using the
315
319
configuration in the `gbl-root` stack.
316
320
317
-
:::info _**Special note:**_ \*\*\*\* In the rare case where you will need to be enabling non-default AWS Regions,
318
-
temporarily comment out the `DenyRootAccountAccess` service control policy setting in `gbl-root.yaml`. You will restore
319
-
it later, after enabling the optional Regions. See related:
321
+
:::info _**Special note:**_
322
+
323
+
In the rare case where you will need to be enabling non-default AWS Regions, temporarily comment out the
324
+
`DenyRootAccountAccess` service control policy setting in `gbl-root.yaml`. You will restore it later, after enabling the
325
+
optional Regions. See related:
320
326
[Decide on Opting Into Non-default Regions](https://docs.cloudposse.com/reference-architecture/design-decisions/cold-start/decide-on-opting-into-non-default-regions)
321
327
322
328
:::
323
329
324
-
:::caution **You must wait until your quota increase request has been granted.** If you try to create the accounts
325
-
before the quota increase is granted, you can expect to see failures like `ACCOUNT_NUMBER_LIMIT_EXCEEDED`.
330
+
:::caution You must wait until your quota increase request has been granted
331
+
332
+
If you try to create the accounts before the quota increase is granted, you can expect to see failures like
| <a name="input_additional_tag_map"></a> [additional\_tag\_map](#input\_additional\_tag\_map) | Additional key-value pairs to add to each map in `tags_as_list_of_maps`. Not added to `tags` or `id`.<br>This is for some rare cases where resources want additional configuration of tags<br>and therefore take a list of maps with tag key, value, and additional configuration. | `map(string)` | `{}` | no |
87
87
| <a name="input_attributes"></a> [attributes](#input\_attributes) | ID element. Additional attributes (e.g. `workers` or `cluster`) to add to `id`,<br>in the order they appear in the list. New attributes are appended to the<br>end of the list. The elements of the list are joined by the `delimiter`<br>and treated as a single ID element. | `list(string)` | `[]` | no |
88
-
| <a name="input_cloudwatch_forwarder_event_patterns"></a> [cloudwatch\_forwarder\_event\_patterns](#input\_cloudwatch\_forwarder\_event\_patterns) | Map of title => CloudWatch Event patterns to forward to Datadog. Event structure from here: <https://docs.aws.amazon.com/AmazonCloudWatch/latest/events/CloudWatchEventsandEventPatterns.html#CloudWatchEventsPatterns><br>Example:<pre>hcl<br>cloudwatch_forwarder_event_rules = {<br> "guardduty" = {<br> source = ["aws.guardduty"]<br> detail-type = ["GuardDuty Finding"]<br> }<br> "ec2-terminated" = {<br> source = ["aws.ec2"]<br> detail-type = ["EC2 Instance State-change Notification"]<br> detail = {<br> state = ["terminated"]<br> }<br> }<br>}</pre> | <pre>map(object({<br> version = optional(list(string))<br> id = optional(list(string))<br> detail-type = optional(list(string))<br> source = optional(list(string))<br> account = optional(list(string))<br> time = optional(list(string))<br> region = optional(list(string))<br> resources = optional(list(string))<br> detail = optional(map(list(string)))<br> }))</pre> | `{}` | no |
88
+
| <a name="input_cloudwatch_forwarder_event_patterns"></a> [cloudwatch\_forwarder\_event\_patterns](#input\_cloudwatch\_forwarder\_event\_patterns) | Map of title to CloudWatch Event patterns to forward to Datadog. Event structure from here: https://docs.aws.amazon.com/AmazonCloudWatch/latest/events/CloudWatchEventsandEventPatterns.html#CloudWatchEventsPatterns<br>Example:<pre>hcl<br>cloudwatch_forwarder_event_rules = {<br> "guardduty" = {<br> source = ["aws.guardduty"]<br> detail-type = ["GuardDuty Finding"]<br> }<br> "ec2-terminated" = {<br> source = ["aws.ec2"]<br> detail-type = ["EC2 Instance State-change Notification"]<br> detail = {<br> state = ["terminated"]<br> }<br> }<br>}</pre> | <pre>map(object({<br> version = optional(list(string))<br> id = optional(list(string))<br> detail-type = optional(list(string))<br> source = optional(list(string))<br> account = optional(list(string))<br> time = optional(list(string))<br> region = optional(list(string))<br> resources = optional(list(string))<br> detail = optional(map(list(string)))<br> }))</pre> | `{}` | no |
89
89
| <a name="input_cloudwatch_forwarder_log_groups"></a> [cloudwatch\_forwarder\_log\_groups](#input\_cloudwatch\_forwarder\_log\_groups) | Map of CloudWatch Log Groups with a filter pattern that the Lambda forwarder will send logs from. For example: { mysql1 = { name = "/aws/rds/maincluster", filter\_pattern = "" } | `map(map(string))` | `{}` | no |
90
90
| <a name="input_context"></a> [context](#input\_context) | Single object for setting entire context at once.<br>See description of individual variables for details.<br>Leave string and numeric variables as `null` to use default value.<br>Individual variable settings (non-null) override settings in context object,<br>except for attributes, tags, and additional\_tag\_map, which are merged. | `any` | <pre>{<br> "additional_tag_map": {},<br> "attributes": [],<br> "delimiter": null,<br> "descriptor_formats": {},<br> "enabled": true,<br> "environment": null,<br> "id_length_limit": null,<br> "label_key_case": null,<br> "label_order": [],<br> "label_value_case": null,<br> "labels_as_tags": [<br> "unset"<br> ],<br> "name": null,<br> "namespace": null,<br> "regex_replace_chars": null,<br> "stage": null,<br> "tags": {},<br> "tenant": null<br>}</pre> | no |
91
91
| <a name="input_context_tags"></a> [context\_tags](#input\_context\_tags) | List of context tags to add to each monitor | `set(string)` | <pre>[<br> "namespace",<br> "tenant",<br> "environment",<br> "stage"<br>]</pre> | no |
@@ -154,7 +154,7 @@ components:
154
154
155
155
## References
156
156
157
-
- Datadog's [documentation about provisioning keys](https://docs.datadoghq.com/account_management/api-app-keys
157
+
- Datadog's [documentation about provisioning keys](https://docs.datadoghq.com/account_management/api-app-keys)
Map of title => CloudWatch Event patterns to forward to Datadog. Event structure from here: <https://docs.aws.amazon.com/AmazonCloudWatch/latest/events/CloudWatchEventsandEventPatterns.html#CloudWatchEventsPatterns>
130
+
Map of title to CloudWatch Event patterns to forward to Datadog. Event structure from here: https://docs.aws.amazon.com/AmazonCloudWatch/latest/events/CloudWatchEventsandEventPatterns.html#CloudWatchEventsPatterns
Copy file name to clipboardExpand all lines: modules/ecr/README.md
+4-2Lines changed: 4 additions & 2 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -6,8 +6,10 @@ This utilizes
6
6
to assign accounts to various roles. It is also compatible with the
7
7
[GitHub Actions IAM Role mixin](https://github.com/cloudposse/terraform-aws-components/blob/master/mixins/github-actions-iam-role/README-github-action-iam-role.md).
8
8
9
-
:::caution Older versions of our reference architecture have an`eks-iam` component that needs to be updated to provide
10
-
sufficient IAM roles to allow pods to pull from ECR repos
9
+
:::caution
10
+
11
+
Older versions of our reference architecture have an`eks-iam` component that needs to be updated to provide sufficient
0 commit comments