Set by controls 3

Active controls fix these values.

• flow_log_cloudwatch_log_group_kms_key_idstring, set to nullThe ARN of the KMS Key to use when encrypting log data for VPC flow logs
• flow_log_cloudwatch_log_group_retention_in_daysnumber, set to 365Specifies the number of days you want to retain log events in the specified log group for VPC flow logs
• map_public_ip_on_launchbool, set to falseSpecify true to indicate that instances launched into the subnet should be assigned a public IP address. Default is false

Optional 233

• amazon_side_asnstring, default "64512"The Autonomous System Number (ASN) for the Amazon side of the gateway. By default the virtual private gateway is created with the current default Amazon ASN
• azslist(string), default []A list of availability zones names or ids in the region
• cidrstring, default "10.0.0.0/16"(Optional) The IPv4 CIDR block for the VPC. CIDR can be explicitly set or it can be derived from IPAM using ipv4_netmask_length & ipv4_ipam_pool_id
• create_database_internet_gateway_routebool, default falseControls if an internet gateway route for public database access should be created
• create_database_nat_gateway_routebool, default falseControls if a nat gateway route should be created to give internet access to the database subnets
• create_database_subnet_groupbool, default trueControls if database subnet group should be created (n.b. database_subnets must also be set)
• create_database_subnet_route_tablebool, default falseControls if separate route table for database should be created
• create_egress_only_igwbool, default trueControls if an Egress Only Internet Gateway is created and its related routes
• create_elasticache_subnet_groupbool, default trueControls if elasticache subnet group should be created
• create_elasticache_subnet_route_tablebool, default falseControls if separate route table for elasticache should be created
• create_flow_log_cloudwatch_iam_rolebool, default falseWhether to create IAM role for VPC Flow Logs
• create_flow_log_cloudwatch_log_groupbool, default falseWhether to create CloudWatch log group for VPC Flow Logs
• create_igwbool, default trueControls if an Internet Gateway is created for public subnets and the related routes that connect them
• create_multiple_intra_route_tablesbool, default falseIndicates whether to create a separate route table for each intra subnet. Default: false
• create_multiple_public_route_tablesbool, default falseIndicates whether to create a separate route table for each public subnet. Default: false
• create_private_nat_gateway_routebool, default trueControls if a nat gateway route should be created to give internet access to the private subnets
• create_redshift_subnet_groupbool, default trueControls if redshift subnet group should be created
• create_redshift_subnet_route_tablebool, default falseControls if separate route table for redshift should be created
• create_vpcbool, default trueControls if VPC should be created (it affects almost all resources)
• customer_gateway_tagsmap(string), default {}Additional tags for the Customer Gateway
• customer_gatewaysmap(map(any)), default {}Maps of Customer Gateway's attributes (BGP ASN and Gateway's Internet-routable external IP address)
• customer_owned_ipv4_poolstring, default nullThe customer owned IPv4 address pool. Typically used with the map_customer_owned_ip_on_launch argument. The outpost_arn argument must be specified when configured
• database_acl_tagsmap(string), default {}Additional tags for the database subnets network ACL
• database_dedicated_network_aclbool, default falseWhether to use dedicated network ACL (not default) and custom rules for database subnets
• database_inbound_acl_ruleslist(map(string)), default [...]Database subnets inbound network ACL rules
• database_outbound_acl_ruleslist(map(string)), default [...]Database subnets outbound network ACL rules
• database_route_table_tagsmap(string), default {}Additional tags for the database route tables
• database_subnet_assign_ipv6_address_on_creationbool, default falseSpecify true to indicate that network interfaces created in the specified subnet should be assigned an IPv6 address. Default is false
• database_subnet_enable_dns64bool, default trueIndicates whether DNS queries made to the Amazon-provided DNS Resolver in this subnet should return synthetic IPv6 addresses for IPv4-only destinations. Default: true
• database_subnet_enable_resource_name_dns_a_record_on_launchbool, default falseIndicates whether to respond to DNS queries for instance hostnames with DNS A records. Default: false
• database_subnet_enable_resource_name_dns_aaaa_record_on_launchbool, default trueIndicates whether to respond to DNS queries for instance hostnames with DNS AAAA records. Default: true
• database_subnet_group_namestring, default nullName of database subnet group
• database_subnet_group_tagsmap(string), default {}Additional tags for the database subnet group
• database_subnet_ipv6_nativebool, default falseIndicates whether to create an IPv6-only subnet. Default: false
• database_subnet_ipv6_prefixeslist(string), default []Assigns IPv6 database subnet id based on the Amazon provided /56 prefix base 10 integer (0-256). Must be of equal length to the corresponding IPv4 subnet list
• database_subnet_nameslist(string), default []Explicit values to use in the Name tag on database subnets. If empty, Name tags are generated
• database_subnet_private_dns_hostname_type_on_launchstring, default nullThe type of hostnames to assign to instances in the subnet at launch. For IPv6-only subnets, an instance DNS name must be based on the instance ID. For dual-stack and IPv4-only subnets, you can specify whether DNS names use the instance IPv4 address or the instance ID. Valid values: ip-name, resource-name
• database_subnet_suffixstring, default "db"Suffix to append to database subnets name
• database_subnet_tagsmap(string), default {}Additional tags for the database subnets
• database_subnetslist(string), default []A list of database subnets inside the VPC
• default_network_acl_egresslist(map(string)), default [...]List of maps of egress rules to set on the Default Network ACL
• default_network_acl_ingresslist(map(string)), default [...]List of maps of ingress rules to set on the Default Network ACL
• default_network_acl_namestring, default nullName to be used on the Default Network ACL
• default_network_acl_tagsmap(string), default {}Additional tags for the Default Network ACL
• default_route_table_namestring, default nullName to be used on the default route table
• default_route_table_propagating_vgwslist(string), default []List of virtual gateways for propagation
• default_route_table_routeslist(map(string)), default []Configuration block of routes. See https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/default_route_table#route
• default_route_table_tagsmap(string), default {}Additional tags for the default route table
• default_security_group_egresslist(map(string)), default []List of maps of egress rules to set on the default security group
• default_security_group_ingresslist(map(string)), default []List of maps of ingress rules to set on the default security group
• default_security_group_namestring, default nullName to be used on the default security group
• default_security_group_tagsmap(string), default {}Additional tags for the default security group
• default_vpc_enable_dns_hostnamesbool, default trueShould be true to enable DNS hostnames in the Default VPC
• default_vpc_enable_dns_supportbool, default trueShould be true to enable DNS support in the Default VPC
• default_vpc_namestring, default nullName to be used on the Default VPC
• default_vpc_tagsmap(string), default {}Additional tags for the Default VPC
• dhcp_options_domain_namestring, default ""Specifies DNS name for DHCP options set (requires enable_dhcp_options set to true)
• dhcp_options_domain_name_serverslist(string), default ["AmazonProvidedDNS"]Specify a list of DNS server addresses for DHCP options set, default to AWS provided (requires enable_dhcp_options set to true)
• dhcp_options_ipv6_address_preferred_lease_timenumber, default nullHow frequently, in seconds, a running instance with an IPv6 assigned to it goes through DHCPv6 lease renewal (requires enable_dhcp_options set to true)
• dhcp_options_netbios_name_serverslist(string), default []Specify a list of netbios servers for DHCP options set (requires enable_dhcp_options set to true)
• dhcp_options_netbios_node_typestring, default ""Specify netbios node_type for DHCP options set (requires enable_dhcp_options set to true)
• dhcp_options_ntp_serverslist(string), default []Specify a list of NTP servers for DHCP options set (requires enable_dhcp_options set to true)
• dhcp_options_tagsmap(string), default {}Additional tags for the DHCP option set (requires enable_dhcp_options set to true)
• elasticache_acl_tagsmap(string), default {}Additional tags for the elasticache subnets network ACL
• elasticache_dedicated_network_aclbool, default falseWhether to use dedicated network ACL (not default) and custom rules for elasticache subnets
• elasticache_inbound_acl_ruleslist(map(string)), default [...]Elasticache subnets inbound network ACL rules
• elasticache_outbound_acl_ruleslist(map(string)), default [...]Elasticache subnets outbound network ACL rules
• elasticache_route_table_tagsmap(string), default {}Additional tags for the elasticache route tables
• elasticache_subnet_assign_ipv6_address_on_creationbool, default falseSpecify true to indicate that network interfaces created in the specified subnet should be assigned an IPv6 address. Default is false
• elasticache_subnet_enable_dns64bool, default trueIndicates whether DNS queries made to the Amazon-provided DNS Resolver in this subnet should return synthetic IPv6 addresses for IPv4-only destinations. Default: true
• elasticache_subnet_enable_resource_name_dns_a_record_on_launchbool, default falseIndicates whether to respond to DNS queries for instance hostnames with DNS A records. Default: false
• elasticache_subnet_enable_resource_name_dns_aaaa_record_on_launchbool, default trueIndicates whether to respond to DNS queries for instance hostnames with DNS AAAA records. Default: true
• elasticache_subnet_group_namestring, default nullName of elasticache subnet group
• elasticache_subnet_group_tagsmap(string), default {}Additional tags for the elasticache subnet group
• elasticache_subnet_ipv6_nativebool, default falseIndicates whether to create an IPv6-only subnet. Default: false
• elasticache_subnet_ipv6_prefixeslist(string), default []Assigns IPv6 elasticache subnet id based on the Amazon provided /56 prefix base 10 integer (0-256). Must be of equal length to the corresponding IPv4 subnet list
• elasticache_subnet_nameslist(string), default []Explicit values to use in the Name tag on elasticache subnets. If empty, Name tags are generated
• elasticache_subnet_private_dns_hostname_type_on_launchstring, default nullThe type of hostnames to assign to instances in the subnet at launch. For IPv6-only subnets, an instance DNS name must be based on the instance ID. For dual-stack and IPv4-only subnets, you can specify whether DNS names use the instance IPv4 address or the instance ID. Valid values: ip-name, resource-name
• elasticache_subnet_suffixstring, default "elasticache"Suffix to append to elasticache subnets name
• elasticache_subnet_tagsmap(string), default {}Additional tags for the elasticache subnets
• elasticache_subnetslist(string), default []A list of elasticache subnets inside the VPC
• enable_dhcp_optionsbool, default falseShould be true if you want to specify a DHCP options set with a custom domain name, DNS servers, NTP servers, netbios servers, and/or netbios server type
• enable_dns_hostnamesbool, default trueShould be true to enable DNS hostnames in the VPC
• enable_dns_supportbool, default trueShould be true to enable DNS support in the VPC
• enable_flow_logbool, default falseWhether or not to enable VPC Flow Logs
• enable_ipv6bool, default falseRequests an Amazon-provided IPv6 CIDR block with a /56 prefix length for the VPC. You cannot specify the range of IP addresses, or the size of the CIDR block
• enable_nat_gatewaybool, default falseShould be true if you want to provision NAT Gateways for each of your private networks
• enable_network_address_usage_metricsbool, default nullDetermines whether network address usage metrics are enabled for the VPC
• enable_public_redshiftbool, default falseControls if redshift should have public routing table
• enable_vpn_gatewaybool, default falseShould be true if you want to create a new VPN Gateway resource and attach it to the VPC
• external_nat_ip_idslist(string), default []List of EIP IDs to be assigned to the NAT Gateways (used in combination with reuse_nat_ips)
• external_nat_ipslist(string), default []List of EIPs to be used for nat_public_ips output (used in combination with reuse_nat_ips and external_nat_ip_ids)
• flow_log_cloudwatch_iam_role_arnstring, default ""The ARN for the IAM role that's used to post flow logs to a CloudWatch Logs log group. When flow_log_destination_arn is set to ARN of Cloudwatch Logs, this argument needs to be provided
• flow_log_cloudwatch_iam_role_conditionslist({...}), default []Additional conditions of the CloudWatch role assumption policy
• flow_log_cloudwatch_log_group_classstring, default nullSpecified the log class of the log group. Possible values are: STANDARD or INFREQUENT_ACCESS
• flow_log_cloudwatch_log_group_name_prefixstring, default "/aws/vpc-flow-log/"Specifies the name prefix of CloudWatch Log Group for VPC flow logs
• flow_log_cloudwatch_log_group_name_suffixstring, default ""Specifies the name suffix of CloudWatch Log Group for VPC flow logs
• flow_log_cloudwatch_log_group_skip_destroybool, default false Set to true if you do not wish the log group (and any logs it may contain) to be deleted at destroy time, and instead just remove the log group from the Terraform state
• flow_log_deliver_cross_account_rolestring, default null(Optional) ARN of the IAM role that allows Amazon EC2 to publish flow logs across accounts.
• flow_log_destination_arnstring, default ""The ARN of the CloudWatch log group or S3 bucket where VPC Flow Logs will be pushed. If this ARN is a S3 bucket the appropriate permissions need to be set on that bucket's policy. When create_flow_log_cloudwatch_log_group is set to false this argument must be provided
• flow_log_destination_typestring, default "cloud-watch-logs"Logging destination type. Valid values: cloud-watch-logs, s3, kinesis-data-firehose. Default: cloud-watch-logs
• flow_log_file_formatstring, default null(Optional) The format for the flow log. Valid values: plain-text, parquet
• flow_log_hive_compatible_partitionsbool, default false(Optional) Indicates whether to use Hive-compatible prefixes for flow logs stored in Amazon S3
• flow_log_log_formatstring, default nullThe fields to include in the flow log record, in the order in which they should appear
• flow_log_max_aggregation_intervalnumber, default 600The maximum interval of time during which a flow of packets is captured and aggregated into a flow log record. Valid Values: 60 seconds (1 minute) or 600 seconds (10 minutes). Default: 600
• flow_log_per_hour_partitionbool, default false(Optional) Indicates whether to partition the flow log per hour. This reduces the cost and response time for queries
• flow_log_traffic_typestring, default "ALL"The type of traffic to capture. Valid values: ACCEPT, REJECT, ALL
• igw_tagsmap(string), default {}Additional tags for the internet gateway
• instance_tenancystring, default "default"A tenancy option for instances launched into the VPC
• intra_acl_tagsmap(string), default {}Additional tags for the intra subnets network ACL
• intra_dedicated_network_aclbool, default falseWhether to use dedicated network ACL (not default) and custom rules for intra subnets
• intra_inbound_acl_ruleslist(map(string)), default [...]Intra subnets inbound network ACLs
• intra_outbound_acl_ruleslist(map(string)), default [...]Intra subnets outbound network ACLs
• intra_route_table_tagsmap(string), default {}Additional tags for the intra route tables
• intra_subnet_assign_ipv6_address_on_creationbool, default falseSpecify true to indicate that network interfaces created in the specified subnet should be assigned an IPv6 address. Default is false
• intra_subnet_enable_dns64bool, default trueIndicates whether DNS queries made to the Amazon-provided DNS Resolver in this subnet should return synthetic IPv6 addresses for IPv4-only destinations. Default: true
• intra_subnet_enable_resource_name_dns_a_record_on_launchbool, default falseIndicates whether to respond to DNS queries for instance hostnames with DNS A records. Default: false
• intra_subnet_enable_resource_name_dns_aaaa_record_on_launchbool, default trueIndicates whether to respond to DNS queries for instance hostnames with DNS AAAA records. Default: true
• intra_subnet_ipv6_nativebool, default falseIndicates whether to create an IPv6-only subnet. Default: false
• intra_subnet_ipv6_prefixeslist(string), default []Assigns IPv6 intra subnet id based on the Amazon provided /56 prefix base 10 integer (0-256). Must be of equal length to the corresponding IPv4 subnet list
• intra_subnet_nameslist(string), default []Explicit values to use in the Name tag on intra subnets. If empty, Name tags are generated
• intra_subnet_private_dns_hostname_type_on_launchstring, default nullThe type of hostnames to assign to instances in the subnet at launch. For IPv6-only subnets, an instance DNS name must be based on the instance ID. For dual-stack and IPv4-only subnets, you can specify whether DNS names use the instance IPv4 address or the instance ID. Valid values: ip-name, resource-name
• intra_subnet_suffixstring, default "intra"Suffix to append to intra subnets name
• intra_subnet_tagsmap(string), default {}Additional tags for the intra subnets
• intra_subnetslist(string), default []A list of intra subnets inside the VPC
• ipv4_ipam_pool_idstring, default null(Optional) The ID of an IPv4 IPAM pool you want to use for allocating this VPC's CIDR
• ipv4_netmask_lengthnumber, default null(Optional) The netmask length of the IPv4 CIDR you want to allocate to this VPC. Requires specifying a ipv4_ipam_pool_id
• ipv6_cidrstring, default null(Optional) IPv6 CIDR block to request from an IPAM Pool. Can be set explicitly or derived from IPAM using ipv6_netmask_length
• ipv6_cidr_block_network_border_groupstring, default nullBy default when an IPv6 CIDR is assigned to a VPC a default ipv6_cidr_block_network_border_group will be set to the region of the VPC. This can be changed to restrict advertisement of public addresses to specific Network Border Groups such as LocalZones
• ipv6_ipam_pool_idstring, default null(Optional) IPAM Pool ID for a IPv6 pool. Conflicts with assign_generated_ipv6_cidr_block
• ipv6_netmask_lengthnumber, default null(Optional) Netmask length to request from IPAM Pool. Conflicts with ipv6_cidr_block. This can be omitted if IPAM pool as a allocation_default_netmask_length set. Valid values: 56
• manage_default_network_aclbool, default trueShould be true to adopt and manage Default Network ACL
• manage_default_route_tablebool, default trueShould be true to manage default route table
• manage_default_security_groupbool, default trueShould be true to adopt and manage default security group
• manage_default_vpcbool, default falseShould be true to adopt and manage Default VPC
• map_customer_owned_ip_on_launchbool, default falseSpecify true to indicate that network interfaces created in the subnet should be assigned a customer owned IP address. The customer_owned_ipv4_pool and outpost_arn arguments must be specified when set to true. Default is false
• namestring, default ""Name to be used on all the resources as identifier
• nat_eip_tagsmap(string), default {}Additional tags for the NAT EIP
• nat_gateway_destination_cidr_blockstring, default "0.0.0.0/0"Used to pass a custom destination route for private NAT Gateway. If not specified, the default 0.0.0.0/0 is used as a destination route
• nat_gateway_tagsmap(string), default {}Additional tags for the NAT gateways
• one_nat_gateway_per_azbool, default falseShould be true if you want only one NAT Gateway per availability zone. Requires var.azs to be set, and the number of public_subnets created to be greater than or equal to the number of availability zones specified in var.azs
• outpost_acl_tagsmap(string), default {}Additional tags for the outpost subnets network ACL
• outpost_arnstring, default nullARN of Outpost you want to create a subnet in
• outpost_azstring, default nullAZ where Outpost is anchored
• outpost_dedicated_network_aclbool, default falseWhether to use dedicated network ACL (not default) and custom rules for outpost subnets
• outpost_inbound_acl_ruleslist(map(string)), default [...]Outpost subnets inbound network ACLs
• outpost_outbound_acl_ruleslist(map(string)), default [...]Outpost subnets outbound network ACLs
• outpost_subnet_assign_ipv6_address_on_creationbool, default falseSpecify true to indicate that network interfaces created in the specified subnet should be assigned an IPv6 address. Default is false
• outpost_subnet_enable_dns64bool, default trueIndicates whether DNS queries made to the Amazon-provided DNS Resolver in this subnet should return synthetic IPv6 addresses for IPv4-only destinations. Default: true
• outpost_subnet_enable_resource_name_dns_a_record_on_launchbool, default falseIndicates whether to respond to DNS queries for instance hostnames with DNS A records. Default: false
• outpost_subnet_enable_resource_name_dns_aaaa_record_on_launchbool, default trueIndicates whether to respond to DNS queries for instance hostnames with DNS AAAA records. Default: true
• outpost_subnet_ipv6_nativebool, default falseIndicates whether to create an IPv6-only subnet. Default: false
• outpost_subnet_ipv6_prefixeslist(string), default []Assigns IPv6 outpost subnet id based on the Amazon provided /56 prefix base 10 integer (0-256). Must be of equal length to the corresponding IPv4 subnet list
• outpost_subnet_nameslist(string), default []Explicit values to use in the Name tag on outpost subnets. If empty, Name tags are generated
• outpost_subnet_private_dns_hostname_type_on_launchstring, default nullThe type of hostnames to assign to instances in the subnet at launch. For IPv6-only subnets, an instance DNS name must be based on the instance ID. For dual-stack and IPv4-only subnets, you can specify whether DNS names use the instance IPv4 address or the instance ID. Valid values: ip-name, resource-name
• outpost_subnet_suffixstring, default "outpost"Suffix to append to outpost subnets name
• outpost_subnet_tagsmap(string), default {}Additional tags for the outpost subnets
• outpost_subnetslist(string), default []A list of outpost subnets inside the VPC
• private_acl_tagsmap(string), default {}Additional tags for the private subnets network ACL
• private_dedicated_network_aclbool, default falseWhether to use dedicated network ACL (not default) and custom rules for private subnets
• private_inbound_acl_ruleslist(map(string)), default [...]Private subnets inbound network ACLs
• private_outbound_acl_ruleslist(map(string)), default [...]Private subnets outbound network ACLs
• private_route_table_tagsmap(string), default {}Additional tags for the private route tables
• private_subnet_assign_ipv6_address_on_creationbool, default falseSpecify true to indicate that network interfaces created in the specified subnet should be assigned an IPv6 address. Default is false
• private_subnet_enable_dns64bool, default trueIndicates whether DNS queries made to the Amazon-provided DNS Resolver in this subnet should return synthetic IPv6 addresses for IPv4-only destinations. Default: true
• private_subnet_enable_resource_name_dns_a_record_on_launchbool, default falseIndicates whether to respond to DNS queries for instance hostnames with DNS A records. Default: false
• private_subnet_enable_resource_name_dns_aaaa_record_on_launchbool, default trueIndicates whether to respond to DNS queries for instance hostnames with DNS AAAA records. Default: true
• private_subnet_ipv6_nativebool, default falseIndicates whether to create an IPv6-only subnet. Default: false
• private_subnet_ipv6_prefixeslist(string), default []Assigns IPv6 private subnet id based on the Amazon provided /56 prefix base 10 integer (0-256). Must be of equal length to the corresponding IPv4 subnet list
• private_subnet_nameslist(string), default []Explicit values to use in the Name tag on private subnets. If empty, Name tags are generated
• private_subnet_private_dns_hostname_type_on_launchstring, default nullThe type of hostnames to assign to instances in the subnet at launch. For IPv6-only subnets, an instance DNS name must be based on the instance ID. For dual-stack and IPv4-only subnets, you can specify whether DNS names use the instance IPv4 address or the instance ID. Valid values: ip-name, resource-name
• private_subnet_suffixstring, default "private"Suffix to append to private subnets name
• private_subnet_tagsmap(string), default {}Additional tags for the private subnets
• private_subnet_tags_per_azmap(map(string)), default {}Additional tags for the private subnets where the primary key is the AZ
• private_subnetslist(string), default []A list of private subnets inside the VPC
• propagate_intra_route_tables_vgwbool, default falseShould be true if you want route table propagation
• propagate_private_route_tables_vgwbool, default falseShould be true if you want route table propagation
• propagate_public_route_tables_vgwbool, default falseShould be true if you want route table propagation
• public_acl_tagsmap(string), default {}Additional tags for the public subnets network ACL
• public_dedicated_network_aclbool, default falseWhether to use dedicated network ACL (not default) and custom rules for public subnets
• public_inbound_acl_ruleslist(map(string)), default [...]Public subnets inbound network ACLs
• public_outbound_acl_ruleslist(map(string)), default [...]Public subnets outbound network ACLs
• public_route_table_tagsmap(string), default {}Additional tags for the public route tables
• public_subnet_assign_ipv6_address_on_creationbool, default falseSpecify true to indicate that network interfaces created in the specified subnet should be assigned an IPv6 address. Default is false
• public_subnet_enable_dns64bool, default trueIndicates whether DNS queries made to the Amazon-provided DNS Resolver in this subnet should return synthetic IPv6 addresses for IPv4-only destinations. Default: true
• public_subnet_enable_resource_name_dns_a_record_on_launchbool, default falseIndicates whether to respond to DNS queries for instance hostnames with DNS A records. Default: false
• public_subnet_enable_resource_name_dns_aaaa_record_on_launchbool, default trueIndicates whether to respond to DNS queries for instance hostnames with DNS AAAA records. Default: true
• public_subnet_ipv6_nativebool, default falseIndicates whether to create an IPv6-only subnet. Default: false
• public_subnet_ipv6_prefixeslist(string), default []Assigns IPv6 public subnet id based on the Amazon provided /56 prefix base 10 integer (0-256). Must be of equal length to the corresponding IPv4 subnet list
• public_subnet_nameslist(string), default []Explicit values to use in the Name tag on public subnets. If empty, Name tags are generated
• public_subnet_private_dns_hostname_type_on_launchstring, default nullThe type of hostnames to assign to instances in the subnet at launch. For IPv6-only subnets, an instance DNS name must be based on the instance ID. For dual-stack and IPv4-only subnets, you can specify whether DNS names use the instance IPv4 address or the instance ID. Valid values: ip-name, resource-name
• public_subnet_suffixstring, default "public"Suffix to append to public subnets name
• public_subnet_tagsmap(string), default {}Additional tags for the public subnets
• public_subnet_tags_per_azmap(map(string)), default {}Additional tags for the public subnets where the primary key is the AZ
• public_subnetslist(string), default []A list of public subnets inside the VPC
• putin_khuylobool, default trueDo you agree that Putin doesn't respect Ukrainian sovereignty and territorial integrity? More info: https://en.wikipedia.org/wiki/Putin_khuylo!
• redshift_acl_tagsmap(string), default {}Additional tags for the redshift subnets network ACL
• redshift_dedicated_network_aclbool, default falseWhether to use dedicated network ACL (not default) and custom rules for redshift subnets
• redshift_inbound_acl_ruleslist(map(string)), default [...]Redshift subnets inbound network ACL rules
• redshift_outbound_acl_ruleslist(map(string)), default [...]Redshift subnets outbound network ACL rules
• redshift_route_table_tagsmap(string), default {}Additional tags for the redshift route tables
• redshift_subnet_assign_ipv6_address_on_creationbool, default falseSpecify true to indicate that network interfaces created in the specified subnet should be assigned an IPv6 address. Default is false
• redshift_subnet_enable_dns64bool, default trueIndicates whether DNS queries made to the Amazon-provided DNS Resolver in this subnet should return synthetic IPv6 addresses for IPv4-only destinations. Default: true
• redshift_subnet_enable_resource_name_dns_a_record_on_launchbool, default falseIndicates whether to respond to DNS queries for instance hostnames with DNS A records. Default: false
• redshift_subnet_enable_resource_name_dns_aaaa_record_on_launchbool, default trueIndicates whether to respond to DNS queries for instance hostnames with DNS AAAA records. Default: true
• redshift_subnet_group_namestring, default nullName of redshift subnet group
• redshift_subnet_group_tagsmap(string), default {}Additional tags for the redshift subnet group
• redshift_subnet_ipv6_nativebool, default falseIndicates whether to create an IPv6-only subnet. Default: false
• redshift_subnet_ipv6_prefixeslist(string), default []Assigns IPv6 redshift subnet id based on the Amazon provided /56 prefix base 10 integer (0-256). Must be of equal length to the corresponding IPv4 subnet list
• redshift_subnet_nameslist(string), default []Explicit values to use in the Name tag on redshift subnets. If empty, Name tags are generated
• redshift_subnet_private_dns_hostname_type_on_launchstring, default nullThe type of hostnames to assign to instances in the subnet at launch. For IPv6-only subnets, an instance DNS name must be based on the instance ID. For dual-stack and IPv4-only subnets, you can specify whether DNS names use the instance IPv4 address or the instance ID. Valid values: ip-name, resource-name
• redshift_subnet_suffixstring, default "redshift"Suffix to append to redshift subnets name
• redshift_subnet_tagsmap(string), default {}Additional tags for the redshift subnets
• redshift_subnetslist(string), default []A list of redshift subnets inside the VPC
• regionstring, default nullRegion where the resource(s) will be managed. Defaults to the Region set in the provider configuration
• reuse_nat_ipsbool, default falseShould be true if you don't want EIPs to be created for your NAT Gateways and will instead pass them in via the 'external_nat_ip_ids' variable
• secondary_cidr_blockslist(string), default []List of secondary CIDR blocks to associate with the VPC to extend the IP Address pool
• single_nat_gatewaybool, default falseShould be true if you want to provision a single shared NAT Gateway across all of your private networks
• tagsmap(string), default {}A map of tags to add to all resources
• use_ipam_poolbool, default falseDetermines whether IPAM pool is used for CIDR allocation
• vpc_block_public_access_exclusionsmap(any), default {}A map of VPC block public access exclusions
• vpc_block_public_access_optionsmap(string), default {}A map of VPC block public access options
• vpc_flow_log_iam_policy_namestring, default "vpc-flow-log-to-cloudwatch"Name of the IAM policy
• vpc_flow_log_iam_policy_use_name_prefixbool, default trueDetermines whether the name of the IAM policy (vpc_flow_log_iam_policy_name) is used as a prefix
• vpc_flow_log_iam_role_namestring, default "vpc-flow-log-role"Name to use on the VPC Flow Log IAM role created
• vpc_flow_log_iam_role_pathstring, default nullThe path for the VPC Flow Log IAM Role
• vpc_flow_log_iam_role_use_name_prefixbool, default trueDetermines whether the IAM role name (vpc_flow_log_iam_role_name_name) is used as a prefix
• vpc_flow_log_permissions_boundarystring, default nullThe ARN of the Permissions Boundary for the VPC Flow Log IAM Role
• vpc_flow_log_tagsmap(string), default {}Additional tags for the VPC Flow Logs
• vpc_tagsmap(string), default {}Additional tags for the VPC
• vpn_gateway_azstring, default nullThe Availability Zone for the VPN Gateway
• vpn_gateway_idstring, default ""ID of VPN Gateway to attach to the VPC
• vpn_gateway_tagsmap(string), default {}Additional tags for the VPN gateway