Set by controls 8

Active controls fix these values.

• associate_public_ip_addressbool, set to falseWhether to associate a public IP address with an instance in a VPC
• ebs_volumesmap({...}), set to nullAdditional EBS volumes to attach to the instance
• iam_instance_profilestring, set to nullIAM Instance Profile to launch the instance with. Specified as the name of the Instance Profile
• key_namestring, set to nullKey name of the Key Pair to use for the instance; which can be managed using the aws_key_pair resource
• metadata_optionsobject({...}), set to {...}Customize the metadata options of the instance
• monitoringbool, set to trueIf true, the launched EC2 instance will have detailed monitoring enabled
• security_group_ingress_rulesmap({...}), set to nullIngress rules to add to the security group
• subnet_idstring, set to nullThe VPC Subnet ID to launch in

Optional 75

• amistring, default nullID of AMI to use for the instance
• ami_ssm_parameterstring, default "/aws/service/ami-amazon-linux-latest/al2023-ami-kernel-default-x86_64"SSM parameter name for the AMI ID. For Amazon Linux AMI SSM parameters see [reference](https://docs.aws.amazon.com/systems-manager/latest/userguide/parameter-store-public-parameters-ami.html)
• availability_zonestring, default nullAZ to start the instance in
• capacity_reservation_specificationobject({...}), default nullDescribes an instance's Capacity Reservation targeting option
• cpu_creditsstring, default nullThe credit option for CPU usage (unlimited or standard)
• cpu_optionsobject({...}), default nullDefines CPU options to apply to the instance at launch time.
• createbool, default trueWhether to create an instance
• create_eipbool, default falseDetermines whether a public EIP will be created and associated with the instance.
• create_iam_instance_profilebool, default falseDetermines whether an IAM instance profile is created or to use an existing IAM instance profile
• create_security_groupbool, default trueDetermines whether a security group will be created
• create_spot_instancebool, default falseDepicts if the instance is a spot instance
• disable_api_stopbool, default nullIf true, enables EC2 Instance Stop Protection
• disable_api_terminationbool, default nullIf true, enables EC2 Instance Termination Protection
• ebs_optimizedbool, default nullIf true, the launched EC2 instance will be EBS-optimized
• eip_domainstring, default "vpc"Indicates if this EIP is for use in VPC
• eip_tagsmap(string), default {}A map of additional tags to add to the eip
• enable_primary_ipv6bool, default nullWhether to assign a primary IPv6 Global Unicast Address (GUA) to the instance when launched in a dual-stack or IPv6-only subnet
• enable_volume_tagsbool, default trueWhether to enable volume tags (if enabled it conflicts with root_block_device tags)
• enclave_options_enabledbool, default nullWhether Nitro Enclaves will be enabled on the instance. Defaults to false
• ephemeral_block_devicemap({...}), default nullCustomize Ephemeral (also known as Instance Store) volumes on the instance
• force_destroybool, default nullDestroys instance even if disable_api_termination or disable_api_stop is set to true. Once this parameter is set to true, a successful terraform apply run before a destroy is required to update this value in the resource state. Without a successful terraform apply after this parameter is set, this flag will have no effect. If setting this field in the same operation that would require replacing the instance or destroying the instance, this flag will not work. Additionally when importing an instance, a successful terraform apply is required to set this value in state before it will take effect on a destroy operation.
• get_password_databool, default nullIf true, wait for password data to become available and retrieve it
• hibernationbool, default nullIf true, the launched EC2 instance will support hibernation
• host_idstring, default nullID of a dedicated host that the instance will be assigned to. Use when an instance is to be launched on a specific dedicated host
• host_resource_group_arnstring, default nullARN of the host resource group in which to launch the instances. If you specify an ARN, omit the tenancy parameter or set it to host
• iam_role_descriptionstring, default nullDescription of the role
• iam_role_namestring, default nullName to use on IAM role created
• iam_role_pathstring, default nullIAM role path
• iam_role_permissions_boundarystring, default nullARN of the policy that is used to set the permissions boundary for the IAM role
• iam_role_policiesmap(string), default {}Policies attached to the IAM role
• iam_role_tagsmap(string), default {}A map of additional tags to add to the IAM role/profile created
• iam_role_use_name_prefixbool, default trueDetermines whether the IAM role name (iam_role_name or name) is used as a prefix
• ignore_ami_changesbool, default falseWhether changes to the AMI ID changes should be ignored by Terraform. Note - changing this value will result in the replacement of the instance
• instance_initiated_shutdown_behaviorstring, default nullShutdown behavior for the instance. Amazon defaults this to stop for EBS-backed instances and terminate for instance-store instances. Cannot be set on instance-store instance
• instance_market_optionsobject({...}), default nullThe market (purchasing) option for the instance. If set, overrides the create_spot_instance variable
• instance_tagsmap(string), default {}Additional tags for the instance
• instance_typestring, default "t3.micro"The type of instance to start
• ipv6_address_countnumber, default nullA number of IPv6 addresses to associate with the primary network interface. Amazon EC2 chooses the IPv6 addresses from the range of your subnet
• ipv6_addresseslist(string), default nullSpecify one or more IPv6 addresses from the range of the subnet to associate with the primary network interface
• launch_templateobject({...}), default nullSpecifies a Launch Template to configure the instance. Parameters configured on this resource will override the corresponding parameters in the Launch Template
• maintenance_optionsobject({...}), default nullThe maintenance options for the instance
• namestring, default ""Name to be used on EC2 instance created
• network_interfacemap({...}), default nullCustomize network interfaces to be attached at instance boot time
• placement_groupstring, default nullThe Placement Group to start the instance in
• placement_group_idstring, default nullPlacement Group ID to start the instance in
• placement_partition_numbernumber, default nullNumber of the partition the instance is in. Valid only if the aws_placement_group resource's strategy argument is set to partition
• private_dns_name_optionsobject({...}), default nullCustomize the private DNS name options of the instance
• private_ipstring, default nullPrivate IP address to associate with the instance in a VPC
• putin_khuylobool, default trueDo you agree that Putin doesn't respect Ukrainian sovereignty and territorial integrity? More info: https://en.wikipedia.org/wiki/Putin_khuylo!
• regionstring, default nullRegion where the resource(s) will be managed. Defaults to the Region set in the provider configuration
• root_block_deviceobject({...}), default nullCustomize details about the root block device of the instance. See Block Devices below for details
• secondary_network_interfacemap({...}), default nullCustomize secondary network interfaces to be attached to the EC2 instance
• secondary_private_ipslist(string), default nullA list of secondary private IPv4 addresses to assign to the instance's primary network interface (eth0) in a VPC. Can only be assigned to the primary network interface (eth0) attached at instance creation, not a pre-existing network interface i.e. referenced in a network_interface block
• security_group_descriptionstring, default nullDescription of the security group
• security_group_egress_rulesmap({...}), default {...}Egress rules to add to the security group
• security_group_namestring, default nullName to use on security group created
• security_group_tagsmap(string), default {}A map of additional tags to add to the security group created
• security_group_use_name_prefixbool, default trueDetermines whether the security group name (security_group_name or name) is used as a prefix
• security_group_vpc_idstring, default nullVPC ID to create the security group in. If not set, the security group will be created in the default VPC
• source_dest_checkbool, default nullControls if traffic is routed to the instance when the destination address does not match the instance. Used for NAT or VPNs
• spot_instance_interruption_behaviorstring, default nullIndicates Spot instance behavior when it is interrupted. Valid values are terminate, stop, or hibernate
• spot_launch_groupstring, default nullA launch group is a group of spot instances that launch together and terminate together. If left empty instances are launched and terminated individually
• spot_pricestring, default nullThe maximum price to request on the spot market. Defaults to on-demand price
• spot_typestring, default nullIf set to one-time, after the instance is terminated, the spot request will be closed. Default persistent
• spot_valid_fromstring, default nullThe start date and time of the request, in UTC RFC3339 format(for example, YYYY-MM-DDTHH:MM:SSZ)
• spot_valid_untilstring, default nullThe end date and time of the request, in UTC RFC3339 format(for example, YYYY-MM-DDTHH:MM:SSZ)
• spot_wait_for_fulfillmentbool, default nullIf set, Terraform will wait for the Spot Request to be fulfilled, and will throw an error if the timeout of 10m is reached
• tagsmap(string), default {}A mapping of tags to assign to the resource
• tenancystring, default nullThe tenancy of the instance (if the instance is running in a VPC). Available values: default, dedicated, host
• timeoutsobject({...}), default nullDefine maximum timeout for creating, updating, and deleting EC2 instance resources
• user_datastring, default nullThe user data to provide when launching the instance. Do not pass gzip-compressed data via this argument; see user_data_base64 instead
• user_data_base64string, default nullCan be used instead of user_data to pass base64-encoded binary data directly. Use this instead of user_data whenever the value is not a valid UTF-8 string. For example, gzip-encoded user data must be base64-encoded and passed via this argument to avoid corruption
• user_data_replace_on_changebool, default nullWhen used in combination with user_data or user_data_base64 will trigger a destroy and recreate when set to true. Defaults to false if not set
• volume_tagsmap(string), default {}A mapping of tags to assign to the devices created by the instance at launch time
• vpc_security_group_idslist(string), default []A list of security group IDs to associate with