forked from evanshay/terraform-goof
-
Notifications
You must be signed in to change notification settings - Fork 1
/
main.tf
79 lines (65 loc) · 1.71 KB
/
main.tf
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
terraform {
cloud {
organization = "partner-snyk"
workspaces {
name = "terraform-goof-CLI"
}
}
required_providers {
aws = {
source = "hashicorp/aws"
version = "~> 3.0"
}
}
}
provider "aws" {
region = var.region
skip_credentials_validation = true
skip_requesting_account_id = true
skip_metadata_api_check = true
access_key = var.access_key
secret_key = var.secret_key
}
resource "aws_iam_account_password_policy" "strict" {
minimum_password_length = 8
#require_lowercase_characters = true
#require_numbers = true
#require_uppercase_characters = true
#require_symbols = true
#allow_users_to_change_password = true
#password_reuse_prevention = 24
max_password_age = 3
}
module "vpc" {
source = "./modules/vpc"
}
module "subnet" {
source = "./modules/subnet"
vpc_id = module.vpc.vpc_id
region = var.region
}
module "storage" {
source = "./modules/storage"
acl = var.s3_acl
db_password = "supersecret"
db_username = "snyk"
environment = var.env
vpc_id = module.vpc.vpc_id
private_subnet = [module.subnet.subnet_id_main, module.subnet.subnet_id_secondary]
}
module "iam" {
source = "./modules/iam"
environment = var.env
}
module "instance" {
source = "terraform-aws-modules/ec2-instance/aws"
ami = var.ami
instance_type = "t2.micro"
name = "example-server"
vpc_security_group_ids = [module.vpc.vpc_sg_id]
subnet_id = module.subnet.subnet_id_main
tags = {
Terraform = "true"
Environment = var.env
}
}