terraform-aws-tardigrade-transit-gateway

KO | EN

gitlite — search

#javascript #python #hacktoberfest #react #ai #typescript #llm #go #golang #android #machine-learning #rust #deep-learning #linux

terraform-aws-tardigrade-transit-gateway

★ 8 Open GitHub ↗

Terraform module to create a transit gateway attachment in one account and accept the attachment in the owner account

// repository documentation

Was this content helpful?

★ 0 (0 ratings)

# terraform-aws-tardigrade-transit-gateway

This module will manage a Transit Gateway, as well as its Route Tables, Routes, VPC attachments, Route
Table associations and propagations, and VPC routes associated with the VPC attachments.

## Submodules

This module includes several submodules for different workflows and use cases.

- [`cross-account-vpc-attachment`](modules/cross-account-vpc-attachment): Creates a cross-account Transit
  Gateway VPC Attachment by managing the invite/accept interaction between two accounts. Requires two
  providers, one for each account. The providers must be different accounts, and must be using the same
  region. The Transit Gateway must be shared using the AWS Resource Access Manager.
- [`cross-region-peering-attachment`](modules/cross-region-peering-attachment):: Creates a cross-region
  Peering Attachment, managing the invite/accept workflow between the two regions. Requires two providers,
  one for each region. The providers may be the same or different account, but **must** be different
  regions.
- [`peering-accepter`](modules/peering-accepter): Accepts a peering attachment request. Used by the
  cross-region-peering-attachment module.
- [`peering-attachment`](modules/peering-attachment): Sends a peering attachment invite. Used by the
  cross-region-peering-attachment module.
- [`route`](modules/route): Creates a Transit Gateway Route.
- [`route-table`](modules/route-table): Creates a Transit Gateway Route Table.
- [`vpc-accepter`](modules/vpc-accepter): Accepts a VPC attachment request. Used by the cross-account-vpc-attachment
  module. Will also the create Transit Gateway Route Table association and propagations for the attachment,
  and will manage VPC routes associated with the attachment.
- [`vpc-attachment`](modules/vpc-attachment): Sends a VPC attachment invite. Used by the cross-account-vpc-attachment
  module. Will also the create Transit Gateway Route Table association and propagations for the attachment,
  and will manage VPC routes associated with the attachment.

## Requirements

| Name | Version |
|------|---------|
| <a name="requirement_terraform"></a> [terraform](#requirement\_terraform) | >= 0.13 |
| <a name="requirement_aws"></a> [aws](#requirement\_aws) | >= 6.0 |

## Providers

| Name | Version |
|------|---------|
| <a name="provider_aws"></a> [aws](#provider\_aws) | >= 6.0 |

## Resources

| Name | Type |
|------|------|

## Inputs

| Name | Description | Type | Default | Required |
|------|-------------|------|---------|:--------:|
| <a name="input_amazon_side_asn"></a> [amazon\_side\_asn](#input\_amazon\_side\_asn) | Private Autonomous System Number (ASN) for the Amazon side of a BGP session (range is 64512 to 65534 for 16-bit ASNs and 4200000000 to 4294967294 for 32-bit ASN) | `number` | `64512` | no |
| <a name="input_auto_accept_shared_attachments"></a> [auto\_accept\_shared\_attachments](#input\_auto\_accept\_shared\_attachments) | Whether resource attachment requests are automatically accepted (valid values: disable, enable) | `string` | `"disable"` | no |
| <a name="input_default_route_table_association"></a> [default\_route\_table\_association](#input\_default\_route\_table\_association) | Whether resource attachments are automatically associated with the default association route table (valid values: disable, enable) | `string` | `"enable"` | no |
| <a name="input_default_route_table_propagation"></a> [default\_route\_table\_propagation](#input\_default\_route\_table\_propagation) | Whether resource attachments automatically propagate routes to the default propagation route table (valid values: disable, enable) | `string` | `"enable"` | no |
| <a name="input_description"></a> [description](#input\_description) | Description of the EC2 Transit Gateway | `string` | `null` | no |
| <a name="input_dns_support"></a> [dns\_support](#input\_dns\_support) | Whether DNS support is enabled (valid values: disable, enable) | `string` | `"enable"` | no |
| <a name="input_prefix_list_references"></a> [prefix\_list\_references](#input\_prefix\_list\_references) | List of TGW prefix list references to add to TGW route tables | <pre>list(object({ # `name` used as for_each key name = string prefix_list_id = string # name from `route_tables` or id of a pre-existing route table transit_gateway_route_table = string blackhole = optional(bool, false) default_route_table = optional(bool, false) # name from `vpc_attachments` or id of a pre-existing tgw attachment transit_gateway_attachment = optional(string) }))</pre> | `[]` | no |
| <a name="input_region"></a> [region](#input\_region) | AWS region where the Transit Gateway is located (if different from the provider region) | `string` | `null` | no |
| <a name="input_route_tables"></a> [route\_tables](#input\_route\_tables) | List of TGW route tables to create with the transit gateway | <pre>list(object({ # `name` used as for_each key name = string tags = map(string) }))</pre> | `[]` | no |
| <a name="input_routes"></a> [routes](#input\_routes) | List of TGW routes to add to TGW route tables | <pre>list(object({ # `name` used as for_each key name = string blackhole = bool default_route_table = bool destination_cidr_block = string # name from `vpc_attachments` or id of a pre-existing tgw attachment transit_gateway_attachment = string # name from `route_tables` or id of a pre-existing route table transit_gateway_route_table = string }))</pre> | `[]` | no |
| <a name="input_security_group_referencing_support"></a> [security\_group\_referencing\_support](#input\_security\_group\_referencing\_support) | Whether Security Group Referencing Support is enabled. Valid values: disable, enable | `string` | `"enable"` | no |
| <a name="input_tags"></a> [tags](#input\_tags) | Map of tags to apply to the TGW and associated resources | `map(string)` | `{}` | no |
| <a name="input_vpc_attachments"></a> [vpc\_attachments](#input\_vpc\_attachments) | List of VPC attachments to create with the transit gateway | <pre>list(object({ # `name` used as for_each key name = string subnet_ids = list(string) appliance_mode_support = string dns_support = string ipv6_support = string tags = map(string) vpc_routes = optional(list(object({ # `name` is used as for_each key name = string route_table_id = string destination_cidr_block = optional(string) destination_ipv6_cidr_block = optional(string) destination_prefix_list_id = optional(string) })), []) transit_gateway_default_route_table_association = bool transit_gateway_default_route_table_propagation = bool # name from `route_tables` or id of a pre-existing route table transit_gateway_route_table_association = string # list of route table names from `route_tables` or ids of pre-existing route tables transit_gateway_route_table_propagations = list(string) }))</pre> | `[]` | no |
| <a name="input_vpn_ecmp_support"></a> [vpn\_ecmp\_support](#input\_vpn\_ecmp\_support) | Whether VPN Equal Cost Multipath Protocol support is enabled (valid values: disable, enable) | `string` | `"disable"` | no |

## Outputs

| Name | Description |
|------|-------------|
| <a name="output_prefix_list_references"></a> [prefix\_list\_references](#output\_prefix\_list\_references) | Map of TGW prefix list reference objects |
| <a name="output_route_tables"></a> [route\_tables](#output\_route\_tables) | Map of TGW route table objects |
| <a name="output_routes"></a> [routes](#output\_routes) | Map of TGW route objects |
| <a name="output_transit_gateway"></a> [transit\_gateway](#output\_transit\_gateway) | Object with attributes of the Transit Gateway |
| <a name="output_vpc_attachments"></a> [vpc\_attachments](#output\_vpc\_attachments) | Map of TGW peering attachment objects |

## Testing

This module has tests that require multiple providers. In order to simplify the provider config, it
assumes you have AWS Profiles named `aws` and `awsalternate`. These profiles should
resolve a credential for two different accounts.

terraform-aws-tardigrade-transit-gateway

Explore Similar Repositories

Was this content helpful?

Recent Feedback

Download README