Skip to content

Latest commit

 

History

History
68 lines (57 loc) · 6.63 KB

README.md

File metadata and controls

68 lines (57 loc) · 6.63 KB

AWS VPC with subnets

Features

  • Supply your own availability zones or create subnets in all available in a given region
  • Optional public and private subnets with auto-calculated CIDR ranges
  • Automatic NAT gateway creation in each AZ if both public and private subnets enabled.
  • Optional ACLs for subnets separated by public/private and ingress/egress
  • Optional global and resource-specific tags

CIDR logic

  • The given CIDR range will be split in two for private and public subnets
  • The public and private ranges will be split into the minimum number of ranges to allow distinct CIDR ranges for each subnet

Input Variables

Variable Description Type Required Default
name_prefix Prefix to attach to the name of every resource. string yes
vpc_cidr CIDR range for the created VPC. string yes
dedicated_instances Whether instances in the VPC are dedicated by default or not. bool no false
enable_dns_support Flag to enable/disable an AWS-provided DNS server within the VPC. bool no true
enable_dns_hostnames Flag to enable/disable public DNS hostnames for public IP addresses of instances in the VPC. bool no false
availability_zones Availability zones for subnets. Defaults to all availability zones in the current region. list(string) no See description
create_public Creates public subnets in the given availability zones. Will create a NAT gateway per availability zone if private subnets enabled. bool no true
map_public_subnet_public_ips Maps public subnets with public IPv4 addresses on launch. bool no false
create_private Creates private subnets in the given availability zones. Will connect to public NAT gateways if public subnets also enabled. bool no true
acl_ingress_private Ingress ACL rules for all private subnets. map no See below
acl_egress_private Egress ACL rules for all private subnets. map no See below
acl_ingress_public Ingress ACL rules for all public subnets. map no See below
acl_egress_public Egress ACL rules for all public subnets. map no See below
tags_default Tags to apply to all resources. map no {}
tags_subnets Tags to apply to all subnets. map no {}
tags_route_table Tags to apply to all route tables. map no {}
tags_ngw Tags to apply to all NAT gateways. map no {}
tags_igw Tags to apply to the internet gateway. map no {}
tags_acl Tags to apply to any ACL rules created. map no {}

Default ACL rule

Default ACL default rules allow all traffic:

[
    {
      rule_no    = 100
      from_port  = 0
      to_port    = 0
      cidr_block = "0.0.0.0/0"
      action     = "ALLOW"
      protocol   = -1
    }
  ]

Outputs

Variable Description
vpc_id ID of the created VPC
private_subnet_ids IDs of the created private subnets. Empty list if create_private = false
public_subnet_ids IDs of the created public subnets. Empty list if create_public = false
private_cidr_blocks CIDR blocks of the created private subnets. Empty list if create_private = false
public_cidr_blocks CIDR blocks of the created public subnets. Empty list if create_public = false
availability_zone_ids IDs of the availability zones in use. See availability_zones input for info.
nat_gateway_public_eips Public IPs of the EIPs associated with the NGW
default_network_acl_id Default network ACL ID of the created VPC