inspector

cloudposse/inspector/aws

Terraform Module HCL AWS

Terraform module to provision AWS Inspector

Install

module "inspector" {

source = "cloudposse/inspector/aws"

version = "0.4.0"

}

plain text: /constructs/tfmod-cloudposse-inspector-aws/install.txt

⭐ Source on GitHub 📦 Registry page

README

terraform-aws-inspector ![Latest Release](https://github.com/cloudposse/terraform-aws-inspector/releases/latest) ![Slack Community](https://slack.cloudposse.com) ![Discourse Forum](https://ask.sweetops.com/) [![README Header][readme_header_img]][readme_header_link] [![Cloud Posse][logo]](https://cpco.io/homepage) This module enables AWS Inspector in one region of one account and optionally enables various rules packages provided by AWS. --- This project is part of our comprehensive "SweetOps" approach towards DevOps. [ ][share_email] [ ][share_googleplus] [ ][share_facebook] [ ][share_reddit] [ ][share_linkedin] [ ][share_twitter] ![Terraform Open Source Modules][terraform_modules] It's 100% Open Source and licensed under the APACHE2. We literally have [hundreds of terraform modules][terra

Inputs (25)

Name	Type	Description	Default
enabled_rules	list(string)	A list of AWS Inspector rules that should run on a periodic basis. Valid values	required
iam_role_arn	string	The ARN for an IAM Role AWS Config uses to make read or write requests to the de	`null`
context	any	Single object for setting entire context at once. See description of individual	`{ "additional_tag_map": {}, "attribu`
namespace	string	ID element. Usually an abbreviation of your organization name, e.g. 'eg' or 'cp'	`null`
name	string	ID element. Usually the component or solution name, e.g. 'app' or 'jenkins'. Thi	`null`
delimiter	string	Delimiter to be used between ID elements. Defaults to `-` (hyphen). Set to `""`	`null`
label_order	list(string)	The order in which the labels (ID elements) appear in the `id`. Defaults to ["na	`null`
event_rule_description	string	A description of the CloudWatch event rule	`"Trigger an AWS Inspector Assessment"`
tenant	string	ID element _(Rarely used, not included by default)_. A customer identifier, indi	`null`
stage	string	ID element. Usually used to indicate role, e.g. 'prod', 'staging', 'source', 'bu	`null`
enabled	bool	Set to false to prevent the module from creating any resources	`null`
attributes	list(string)	ID element. Additional attributes (e.g. `workers` or `cluster`) to add to `id`,	`[]`
label_key_case	string	Controls the letter case of the `tags` keys (label names) for tags generated by	`null`
create_iam_role	bool	Flag to indicate whether an IAM Role should be created to grant the proper permi	`false`
schedule_expression	string	An AWS Schedule Expression to indicate how often the scheduled event shoud run.	`"rate(7 days)"`
descriptor_formats	any	Describe additional descriptors to be output in the `descriptors` output map. Ma	`{}`
assessment_duration	string	The max duration of the Inspector assessment run in seconds	`"3600"`
assessment_event_subscription	map(object({ event = s	Configures sending notifications about a specified assessment template event to	`{}`
environment	string	ID element. Usually used for region e.g. 'uw2', 'us-west-2', OR role 'prod', 'st	`null`
labels_as_tags	set(string)	Set of labels (ID elements) to include as tags in the `tags` output. Default is	`[ "default" ]`
tags	map(string)	Additional tags (e.g. `{'BusinessUnit': 'XYZ'}`). Neither the tag keys nor the t	`{}`