AWS SNS Topic Terraform module

Upstream version 7.1.0

1 control from PCI DSS v4.0 requirements

Terraform Module Source

pcidss.compliance.tf/terraform-aws-modules/sns/aws

Compliance Inputs Outputs Resources Diff (0)README

28 unique

Name	Type	Default	Description
Enforced · locked by active controls
kms_master_key_idsns_topic_encrypted_at_rest	string	null	The ID of an AWS-managed customer master key (CMK) for Amazon SNS or a custom CMK
Optional
application_feedback	object({...})	{}	Map of IAM role ARNs and sample rate for success and failure feedback
archive_policy	string	null	The message archive policy for FIFO topics
content_based_deduplication	bool	false	Boolean indicating whether or not to enable content-based deduplication for FIFO topics
create	bool	true	Determines whether resources will be created (affects all resources)
create_subscription	bool	true	Determines whether an SNS subscription is created
create_topic_policy	bool	true	Determines whether an SNS topic policy is created
data_protection_policy	string	null	A map of data protection policy statements
delivery_policy	string	null	The SNS delivery policy
display_name	string	null	The display name for the SNS topic
enable_default_topic_policy	bool	true	Specifies whether to enable the default topic policy. Defaults to `true`
fifo_throughput_scope	string	null	Enables higher throughput for FIFO topics by adjusting the scope of deduplication. This attribute has two possible values, Topic and MessageGroup
fifo_topic	bool	false	Boolean indicating whether or not to create a FIFO (first-in-first-out) topic
firehose_feedback	object({...})	{}	Map of IAM role ARNs and sample rate for success and failure feedback
http_feedback	object({...})	{}	Map of IAM role ARNs and sample rate for success and failure feedback
lambda_feedback	object({...})	{}	Map of IAM role ARNs and sample rate for success and failure feedback
name	string	null	The name of the SNS topic to create
override_topic_policy_documents	list(string)	[]	List of IAM policy documents that are merged together into the exported document. In merging, statements with non-blank `sid`s will override statements with the same `sid`
region	string	null	Region where the resource(s) will be managed. Defaults to the Region set in the provider configuration
signature_version	number	null	If SignatureVersion should be `1` (`SHA1`) or `2` (`SHA256`). The signature version corresponds to the hashing algorithm used while creating the signature of the notifications, subscription confirmations, or unsubscribe confirmation messages sent by Amazon SNS
source_topic_policy_documents	list(string)	[]	List of IAM policy documents that are merged together into the exported document. Statements must have unique `sid`s
sqs_feedback	object({...})	{}	Map of IAM role ARNs and sample rate for success and failure feedback
subscriptions	map({...})	{}	A map of subscription definitions to create
tags	map(string)	{}	A map of tags to add to all resources
topic_policy	string	null	An externally created fully-formed AWS policy as JSON
topic_policy_statements	map({...})	null	A map of IAM policy [statements](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/data-sources/iam_policy_document#statement) for custom permission usage
tracing_config	string	null	Tracing mode of an Amazon SNS topic. Valid values: `PassThrough`, `Active`
use_name_prefix	bool	false	Determines whether `name` is used as a prefix