AWS Transit Gateway Terraform module

Upstream version 3.3.1

1 control from PCI DSS v4.0 requirements

Terraform Module Source

pcidss.compliance.tf/terraform-aws-modules/transit-gateway/aws

Compliance Inputs Outputs Resources Rules Diff (1)README

29 unique

Name	Type	Default	Description
Enforced · locked by active controls
enable_auto_accept_shared_attachmentsec2_transit_gateway_auto_cross_account_attachment_disabled	bool	"disable"	Whether resource attachment requests are automatically accepted
Optional
amazon_side_asn	string	null	The Autonomous System Number (ASN) for the Amazon side of the gateway. By default the TGW is created with the current default Amazon ASN.
create_tgw	bool	true	Controls if TGW should be created (it affects almost all resources)
create_tgw_routes	bool	true	Controls if TGW Route Table / Routes should be created
description	string	null	Description of the EC2 Transit Gateway
enable_default_route_table_association	bool	true	Whether resource attachments are automatically associated with the default association route table
enable_default_route_table_propagation	bool	true	Whether resource attachments automatically propagate routes to the default propagation route table
enable_dns_support	bool	true	Should be true to enable DNS support in the TGW
enable_encryption_support	bool	false	Should be true to enable encryption support in the TGW
enable_multicast_support	bool	false	Whether multicast support is enabled
enable_sg_referencing_support	bool	true	Indicates whether to enable security group referencing support
enable_vpn_ecmp_support	bool	true	Whether VPN Equal Cost Multipath Protocol support is enabled
name	string	""	Name to be used on all the resources as identifier
ram_allow_external_principals	bool	false	Indicates whether principals outside your organization can be associated with a resource share.
ram_name	string	""	The name of the resource share of TGW
ram_principals	list(string)	[]	A list of principals to share TGW with. Possible values are an AWS account ID, an AWS Organizations Organization ARN, or an AWS Organizations Organization Unit ARN
ram_resource_share_arn	string	""	ARN of RAM resource share
ram_tags	map(string)	{}	Additional tags for the RAM
region	string	null	Region where the resource(s) will be managed. Defaults to the region set in the provider configuration
share_tgw	bool	true	Whether to share your transit gateway with other accounts
tags	map(string)	{}	A map of tags to add to all resources
tgw_default_route_table_tags	map(string)	{}	Additional tags for the Default TGW route table
tgw_route_table_tags	map(string)	{}	Additional tags for the TGW route table
tgw_tags	map(string)	{}	Additional tags for the TGW
tgw_vpc_attachment_tags	map(string)	{}	Additional tags for VPC attachments
timeouts	object({...})	null	Create, update, and delete timeout configurations for the transit gateway
transit_gateway_cidr_blocks	list(string)	[]	One or more IPv4 or IPv6 CIDR blocks for the transit gateway. Must be a size /24 CIDR block or larger for IPv4, or a size /64 CIDR block or larger for IPv6
transit_gateway_route_table_id	string	null	Identifier of EC2 Transit Gateway Route Table to use with the Target Gateway when reusing it between multiple TGWs
vpc_attachments	any	{}	Maps of maps of VPC details to attach to TGW. Type 'any' to disable type validation by Terraform.