Skip to content

Latest commit

 

History

History
65 lines (51 loc) · 5.77 KB

README.md

File metadata and controls

65 lines (51 loc) · 5.77 KB

resolver-query-logging

This module creates following resources.

  • aws_route53_resolver_query_log_config
  • aws_route53_resolver_query_log_config_association (optional)
  • aws_ram_resource_share (optional)
  • aws_ram_principal_association (optional)
  • aws_ram_resource_association (optional)

Requirements

Name Version
terraform >= 1.12
aws >= 6.12

Providers

Name Version
aws 6.20.0

Modules

Name Source Version
resource_group tedilabs/misc/aws//modules/resource-group ~> 0.12.0
share tedilabs/organization/aws//modules/ram-share ~> 0.5.0

Resources

Name Type
aws_route53_resolver_query_log_config.this resource
aws_route53_resolver_query_log_config_association.this resource

Inputs

Name Description Type Default Required
destination (Required) The ARN of the resource that you want Route 53 Resolver to send query logs. You can send query logs to an S3 bucket, a CloudWatch Logs log group, or a Kinesis Data Firehose delivery stream. string n/a yes
name (Required) The name of the Route 53 Resolver query logging configuration. string n/a yes
module_tags_enabled (Optional) Whether to create AWS Resource Tags for the module informations. bool true no
region (Optional) The region in which to create the module resources. If not provided, the module resources will be created in the provider's configured region. string null no
resource_group (Optional) A configurations of Resource Group for this module. resource_group as defined below.
(Optional) enabled - Whether to create Resource Group to find and group AWS resources which are created by this module. Defaults to true.
(Optional) name - The name of Resource Group. A Resource Group name can have a maximum of 127 characters, including letters, numbers, hyphens, dots, and underscores. The name cannot start with AWS or aws. If not provided, a name will be generated using the module name and instance name.
(Optional) description - The description of Resource Group. Defaults to Managed by Terraform..		 
object({
    enabled     = optional(bool, true)
    name        = optional(string, "")
    description = optional(string, "Managed by Terraform.")
  })
 {} no
shares (Optional) A list of resource shares via RAM (Resource Access Manager). 
list(object({
    name = optional(string)

    permissions = optional(set(string), ["AWSRAMDefaultPermissionResolverQueryLogConfig"])

    external_principals_allowed = optional(bool, false)
    principals                  = optional(set(string), [])

    tags = optional(map(string), {})
  }))
 [] no
tags (Optional) A map of tags to add to all resources. map(string) {} no
vpc_associations (Optional) A list of VPC IDs that you want this query logging configuration to log queries for. list(string) [] no

Outputs

Name Description
arn The ARN of the Route 53 Resolver query logging configuration.
destination The ARN of the resource that Route 53 Resolver send query logs. This can be S3 bucket, CloudWatch Logs log group, or Kinesis Data Firehose delivery stream.
id The ID of the Route 53 Resolver query logging configuration.
name The name of the Route 53 Resolver query logging configuration.
owner_id The AWS Account ID the account that created the query logging configuration.
region The AWS region this module resources resides in.
resource_group The resource group created to manage resources in this module.
sharing The configuration for sharing of the Route53 Resolver query logging configuration.
status - An indication of whether the query logging configuration is shared with other AWS accounts, or was shared with the current account by another AWS account. Sharing is configured through AWS Resource Access Manager (AWS RAM). Values are NOT_SHARED, SHARED_BY_ME or SHARED_WITH_ME.
shares - The list of resource shares via RAM (Resource Access Manager).
vpc_associations A list of associated VPC IDs to query logging configuration.