generated from clowdhaus/terraform-aws-module-template
-
-
Notifications
You must be signed in to change notification settings - Fork 38
/
variables.tf
201 lines (166 loc) · 6.5 KB
/
variables.tf
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
variable "create" {
description = "Determines whether resources will be created (affects all resources)"
type = bool
default = true
}
variable "name" {
description = "The name of the file system"
type = string
default = ""
}
variable "tags" {
description = "A map of tags to add to all resources"
type = map(string)
default = {}
}
################################################################################
# File System
################################################################################
variable "availability_zone_name" {
description = "The AWS Availability Zone in which to create the file system. Used to create a file system that uses One Zone storage classes"
type = string
default = null
}
variable "creation_token" {
description = "A unique name (a maximum of 64 characters are allowed) used as reference when creating the Elastic File System to ensure idempotent file system creation. By default generated by Terraform"
type = string
default = null
}
variable "performance_mode" {
description = "The file system performance mode. Can be either `generalPurpose` or `maxIO`. Default is `generalPurpose`"
type = string
default = null
}
variable "encrypted" {
description = "If `true`, the disk will be encrypted"
type = bool
default = true
}
variable "kms_key_arn" {
description = "The ARN for the KMS encryption key. When specifying `kms_key_arn`, encrypted needs to be set to `true`"
type = string
default = null
}
variable "provisioned_throughput_in_mibps" {
description = "The throughput, measured in MiB/s, that you want to provision for the file system. Only applicable with `throughput_mode` set to `provisioned`"
type = number
default = null
}
variable "throughput_mode" {
description = "Throughput mode for the file system. Defaults to `bursting`. Valid values: `bursting`, `elastic`, and `provisioned`. When using `provisioned`, also set `provisioned_throughput_in_mibps`"
type = string
default = null
}
variable "lifecycle_policy" {
description = "A file system [lifecycle policy](https://docs.aws.amazon.com/efs/latest/ug/API_LifecyclePolicy.html) object"
type = any
default = {}
}
################################################################################
# File System Policy
################################################################################
variable "attach_policy" {
description = "Determines whether a policy is attached to the file system"
type = bool
default = true
}
variable "bypass_policy_lockout_safety_check" {
description = "A flag to indicate whether to bypass the `aws_efs_file_system_policy` lockout safety check. Defaults to `false`"
type = bool
default = null
}
variable "source_policy_documents" {
description = "List of IAM policy documents that are merged together into the exported document. Statements must have unique `sid`s"
type = list(string)
default = []
}
variable "override_policy_documents" {
description = "List of IAM policy documents that are merged together into the exported document. In merging, statements with non-blank `sid`s will override statements with the same `sid`"
type = list(string)
default = []
}
variable "policy_statements" {
description = "A list of IAM policy [statements](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/data-sources/iam_policy_document#statement) for custom permission usage"
type = any
default = []
}
variable "deny_nonsecure_transport" {
description = "Determines whether `aws:SecureTransport` is required when connecting to elastic file system"
type = bool
default = true
}
################################################################################
# Mount Target(s)
################################################################################
variable "mount_targets" {
description = "A map of mount target definitions to create"
type = any
default = {}
}
################################################################################
# Security Group
################################################################################
variable "create_security_group" {
description = "Determines whether a security group is created"
type = bool
default = true
}
variable "security_group_name" {
description = "Name to assign to the security group. If omitted, Terraform will assign a random, unique name"
type = string
default = null
}
variable "security_group_description" {
description = "Security group description. Defaults to Managed by Terraform"
type = string
default = null
}
variable "security_group_use_name_prefix" {
description = "Determines whether to use a name prefix for the security group. If `true`, the `security_group_name` value will be used as a prefix"
type = bool
default = false
}
variable "security_group_vpc_id" {
description = "The VPC ID where the security group will be created"
type = string
default = null
}
variable "security_group_rules" {
description = "Map of security group rule definitions to create"
type = any
default = {}
}
################################################################################
# Access Point(s)
################################################################################
variable "access_points" {
description = "A map of access point definitions to create"
type = any
default = {}
}
################################################################################
# Backup Policy
################################################################################
variable "create_backup_policy" {
description = "Determines whether a backup policy is created"
type = bool
default = true
}
variable "enable_backup_policy" {
description = "Determines whether a backup policy is `ENABLED` or `DISABLED`"
type = bool
default = true
}
################################################################################
# Replication Configuration
################################################################################
variable "create_replication_configuration" {
description = "Determines whether a replication configuration is created"
type = bool
default = false
}
variable "replication_configuration_destination" {
description = "A destination configuration block"
type = any
default = {}
}