AWS EventBridge Terraform module

Upstream version 4.3.2

0 controls from ACSC ISM March 2023 requirements

Terraform Module Source

acscism2023.compliance.tf/terraform-aws-modules/eventbridge/aws

Compliance Inputs Outputs Resources Rules Diff (0)README

83 unique

Name	Type	Default	Description
Optional
api_destinations	map(any)	{}	A map of objects with EventBridge Destination definitions.
append_connection_postfix	bool	true	Controls whether to append '-connection' to the name of the connection
append_destination_postfix	bool	true	Controls whether to append '-destination' to the name of the destination
append_pipe_postfix	bool	true	Controls whether to append '-pipe' to the name of the pipe
append_rule_postfix	bool	true	Controls whether to append '-rule' to the name of the rule
append_schedule_group_postfix	bool	true	Controls whether to append '-group' to the name of the schedule group
append_schedule_postfix	bool	true	Controls whether to append '-schedule' to the name of the schedule
archives	map(any)	{}	A map of objects with the EventBridge Archive definitions.
attach_api_destination_policy	bool	false	Controls whether the API Destination policy should be added to IAM role for EventBridge Target
attach_cloudwatch_policy	bool	false	Controls whether the Cloudwatch policy should be added to IAM role for EventBridge Target
attach_ecs_policy	bool	false	Controls whether the ECS policy should be added to IAM role for EventBridge Target
attach_kinesis_firehose_policy	bool	false	Controls whether the Kinesis Firehose policy should be added to IAM role for EventBridge Target
attach_kinesis_policy	bool	false	Controls whether the Kinesis policy should be added to IAM role for EventBridge Target
attach_lambda_policy	bool	false	Controls whether the Lambda Function policy should be added to IAM role for EventBridge Target
attach_policies	bool	false	Controls whether list of policies should be added to IAM role
attach_policy	bool	false	Controls whether policy should be added to IAM role
attach_policy_json	bool	false	Controls whether policy_json should be added to IAM role
attach_policy_jsons	bool	false	Controls whether policy_jsons should be added to IAM role
attach_policy_statements	bool	false	Controls whether policy_statements should be added to IAM role
attach_sfn_policy	bool	false	Controls whether the StepFunction policy should be added to IAM role for EventBridge Target
attach_sns_policy	bool	false	Controls whether the SNS policy should be added to IAM role for EventBridge Target
attach_sqs_policy	bool	false	Controls whether the SQS policy should be added to IAM role for EventBridge Target
attach_tracing_policy	bool	false	Controls whether X-Ray tracing policy should be added to IAM role for EventBridge
bus_description	string	null	Event bus description
bus_name	string	"default"	A unique name for your EventBridge Bus
cloudwatch_target_arns	list(string)	[]	The Amazon Resource Name (ARN) of the Cloudwatch Log Streams you want to use as EventBridge targets
connections	any	{}	A map of objects with EventBridge Connection definitions.
create	bool	true	Controls whether resources should be created
create_api_destinations	bool	false	Controls whether EventBridge Destination resources should be created
create_archives	bool	false	Controls whether EventBridge Archive resources should be created
create_bus	bool	true	Controls whether EventBridge Bus resource should be created
create_connections	bool	false	Controls whether EventBridge Connection resources should be created
create_log_delivery	bool	true	Controls whether EventBridge log delivery resources should be created
create_log_delivery_source	bool	true	Controls whether EventBridge log delivery source resource should be created
create_permissions	bool	true	Controls whether EventBridge Permission resources should be created
create_pipe_role_only	bool	false	Controls whether an IAM role should be created for the pipes only
create_pipes	bool	true	Controls whether EventBridge Pipes resources should be created
create_role	bool	true	Controls whether IAM roles should be created
create_rules	bool	true	Controls whether EventBridge Rule resources should be created
create_schedule_groups	bool	true	Controls whether EventBridge Schedule Group resources should be created
create_schedules	bool	true	Controls whether EventBridge Schedule resources should be created
create_schemas_discoverer	bool	false	Controls whether default schemas discoverer should be created
create_targets	bool	true	Controls whether EventBridge Target resources should be created
dead_letter_config	any	{}	Configuration details of the Amazon SQS queue for EventBridge to use as a dead-letter queue (DLQ)
ecs_pass_role_resources	list(string)	[]	List of approved roles to be passed
ecs_target_arns	list(string)	[]	The Amazon Resource Name (ARN) of the AWS ECS Tasks you want to use as EventBridge targets
event_source_name	string	null	The partner event source that the new event bus will be matched with. Must match name.
kinesis_firehose_target_arns	list(string)	[]	The Amazon Resource Name (ARN) of the Kinesis Firehose Delivery Streams you want to use as EventBridge targets
kinesis_target_arns	list(string)	[]	The Amazon Resource Name (ARN) of the Kinesis Streams you want to use as EventBridge targets
kms_key_identifier	string	null	The identifier of the AWS KMS customer managed key for EventBridge to use, if you choose to use a customer managed key to encrypt events on this event bus. The identifier can be the key Amazon Resource Name (ARN), KeyId, key alias, or key alias ARN.
lambda_target_arns	list(string)	[]	The Amazon Resource Name (ARN) of the Lambda Functions you want to use as EventBridge targets
log_config	object({...})	null	The configuration block for the EventBridge bus log config settings
log_delivery	map({...})	{}	Map of the configuration block for the EventBridge bus log delivery settings (key is the type of log delivery: cloudwatch_logs, s3, firehose)
log_delivery_source_name	string	null	Name of log delivery source
number_of_policies	number	0	Number of policies to attach to IAM role
number_of_policy_jsons	number	0	Number of policies JSON to attach to IAM role
permissions	map(any)	{}	A map of objects with EventBridge Permission definitions.
pipes	any	{}	A map of objects with EventBridge Pipe definitions.
policies	list(string)	[]	List of policy statements ARN to attach to IAM role
policy	string	null	An additional policy document ARN to attach to IAM role
policy_json	string	null	An additional policy document as JSON to attach to IAM role
policy_jsons	list(string)	[]	List of additional policy documents as JSON to attach to IAM role
policy_path	string	null	Path of IAM policy to use for EventBridge
policy_statements	any	{}	Map of dynamic policy statements to attach to IAM role
region	string	null	Region where the resource(s) will be managed. Defaults to the region set in the provider configuration
role_description	string	null	Description of IAM role to use for EventBridge
role_force_detach_policies	bool	true	Specifies to force detaching any policies the IAM role has before destroying it.
role_name	string	null	Name of IAM role to use for EventBridge
role_path	string	null	Path of IAM role to use for EventBridge
role_permissions_boundary	string	null	The ARN of the policy that is used to set the permissions boundary for the IAM role used by EventBridge
role_tags	map(string)	{}	A map of tags to assign to IAM role
rules	map(any)	{}	A map of objects with EventBridge Rule definitions.
schedule_group_timeouts	map(string)	{}	A map of objects with EventBridge Schedule Group create and delete timeouts.
schedule_groups	any	{}	A map of objects with EventBridge Schedule Group definitions.
schedules	map(any)	{}	A map of objects with EventBridge Schedule definitions.
schemas_discoverer_description	string	"Auto schemas discoverer event"	Default schemas discoverer description
sfn_target_arns	list(string)	[]	The Amazon Resource Name (ARN) of the StepFunctions you want to use as EventBridge targets
sns_kms_arns	list(string)	["*"]	The Amazon Resource Name (ARN) of the AWS KMS's configured for AWS SNS you want Decrypt/GenerateDataKey for
sns_target_arns	list(string)	[]	The Amazon Resource Name (ARN) of the AWS SNS's you want to use as EventBridge targets
sqs_target_arns	list(string)	[]	The Amazon Resource Name (ARN) of the AWS SQS Queues you want to use as EventBridge targets
tags	map(string)	{}	A map of tags to assign to resources.
targets	any	{}	A map of objects with EventBridge Target definitions.
trusted_entities	list(string)	[]	Additional trusted entities for assuming roles (trust relationship)