hgn/devpod-terraform
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

adding flow logs
Some checks failed
build / tfsec (push) Failing after 25s
Details

Browse Source
This commit is contained in:
hgn
2025-01-17 00:54:02 +01:00
parent 187525f3ed
commit c25f858d89
1 changed files with 8 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files

13
main.tf
View File

@@ -1,5 +1,5 @@
provider "aws" { provider "aws" {
region = local.region region = local.region
} }
locals { locals {
@@ -28,12 +28,15 @@ module "vpc" {
private_subnets = ["10.0.1.0/24", "10.0.2.0/24", "10.0.3.0/24"] private_subnets = ["10.0.1.0/24", "10.0.2.0/24", "10.0.3.0/24"]
public_subnets = ["10.0.101.0/24", "10.0.102.0/24", "10.0.103.0/24"] public_subnets = ["10.0.101.0/24", "10.0.102.0/24", "10.0.103.0/24"]
enable_nat_gateway = true enable_nat_gateway = true
single_nat_gateway = true single_nat_gateway = true
enable_dns_hostnames = true enable_dns_hostnames = true
enable_dns_support = true enable_dns_support = true
enable_flow_log = true
tags = { tags = {
terraform = "true" terraform = "true"
environment = "test" environment = "test"
@@ -45,7 +48,7 @@ module "vpc" {
module "web_server_sg" { module "web_server_sg" {
source = "terraform-aws-modules/security-group/aws//modules/http-80" source = "terraform-aws-modules/security-group/aws//modules/http-80"
name = "${local.name}-web-server-sg" name = "${local.name}-web-server-sg"
description = "Security group for web server of ${local.name}" description = "Security group for web server of ${local.name}"
vpc_id = module.vpc.vpc_id vpc_id = module.vpc.vpc_id
ingress_cidr_blocks = ["0.0.0.0/0"] ingress_cidr_blocks = ["0.0.0.0/0"]
ingress_rules = ["http-80-tcp", "https-443-tcp", "ssh-tcp"] ingress_rules = ["http-80-tcp", "https-443-tcp", "ssh-tcp"]
@@ -56,14 +59,14 @@ module "web_server_sg" {
### create an ec2 instance ### create an ec2 instance
module "ec2_instance" { module "ec2_instance" {
source = "terraform-aws-modules/ec2-instance/aws" source = "terraform-aws-modules/ec2-instance/aws"
name = "${local.name}-web-server" name = "${local.name}-web-server"
instance_type = "t2.micro" instance_type = "t2.micro"
key_name = module.key_pair.key_pair_name key_name = module.key_pair.key_pair_name
monitoring = true monitoring = true
vpc_security_group_ids = [ module.web_server_sg.security_group_id ] vpc_security_group_ids = [module.web_server_sg.security_group_id]
subnet_id = module.vpc.public_subnets[0] subnet_id = module.vpc.public_subnets[0]
user_data = file("userdata.sh") user_data = file("userdata.sh")
tags = { tags = {
Terraform = "true" Terraform = "true"