forked from cloudposse/terraform-aws-cloudwatch-flow-logs
-
Notifications
You must be signed in to change notification settings - Fork 1
/
variables.tf
103 lines (83 loc) · 2.38 KB
/
variables.tf
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
variable "name" {
default = ""
description = "Name (e.g. `bastion` or `db`)"
}
variable "namespace" {
description = "Namespace (e.g. `cp` or `cloudposse`)"
type = string
}
variable "stage" {
description = "Stage (e.g. `prod`, `dev`, `staging`)"
type = string
}
variable "delimiter" {
type = string
default = "-"
description = "Delimiter to be used between `name`, `namespace`, `stage`, etc."
}
variable "attributes" {
type = list(string)
default = []
description = "Additional attributes (e.g. `policy` or `role`)"
}
variable "tags" {
type = map(string)
default = {}
description = "Additional tags (e.g. map(`BusinessUnit`,`XYZ`)"
}
variable "region" {
description = "AWS region"
default = ""
}
variable "retention_in_days" {
description = "Number of days you want to retain log events in the log group"
default = "30"
}
variable "traffic_type" {
description = "Type of traffic to capture. Valid values: ACCEPT,REJECT, ALL"
default = "ALL"
}
variable "vpc_id" {
description = "ID of VPC"
}
variable "subnet_ids" {
description = "IDs of subnets"
type = list(string)
default = []
}
variable "eni_ids" {
description = "IDs of ENIs"
type = list(string)
default = []
}
variable "shard_count" {
description = "Number of shards that the stream will use"
default = "1"
}
variable "retention_period" {
description = "Length of time data records are accessible after they are added to the stream"
default = "48"
}
variable "shard_level_metrics" {
description = "List of shard-level CloudWatch metrics which can be enabled for the stream"
default = [
"IncomingBytes",
"OutgoingBytes",
]
}
variable "encryption_type" {
description = "GUID for the customer-managed KMS key to use for encryption. The only acceptable values are NONE or KMS"
default = "NONE"
}
variable "filter_pattern" {
description = "Valid CloudWatch Logs filter pattern for subscribing to a filtered stream of log events"
default = "[version, account, eni, source, destination, srcport, destport, protocol, packets, bytes, windowstart, windowend, action, flowlogstatus]"
}
variable "kms_key_id" {
description = "ID of KMS key"
default = ""
}
variable "enabled" {
default = "true"
description = "Set to false to prevent the module from creating anything"
}