forked from snyk-labs/terraform-goof
-
Notifications
You must be signed in to change notification settings - Fork 0
/
main.tf
62 lines (51 loc) · 1.49 KB
/
main.tf
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
provider "aws" {
region = var.region
skip_credentials_validation = true
skip_requesting_account_id = true
skip_metadata_api_check = true
access_key = var.access_key
secret_key = var.secret_key
}
resource "aws_iam_account_password_policy" "strict" {
minimum_password_length = 8
#require_lowercase_characters = true
#require_numbers = true
#require_uppercase_characters = true
#require_symbols = true
#allow_users_to_change_password = true
#password_reuse_prevention = 24
max_password_age = 3
}
module "vpc" {
source = "./modules/vpc"
}
module "subnet" {
source = "./modules/subnet"
vpc_id = module.vpc.vpc_id
region = var.region
}
module "storage" {
source = "./modules/storage"
acl = var.s3_acl
db_password = "supersecret"
db_username = "snyk"
environment = var.env
vpc_id = module.vpc.vpc_id
private_subnet = [module.subnet.subnet_id_main, module.subnet.subnet_id_secondary]
}
module "iam" {
source = "./modules/iam"
environment = var.env
}
module "instance" {
source = "terraform-aws-modules/ec2-instance/aws"
ami = var.ami
instance_type = "t2.micro"
name = "example-server"
vpc_security_group_ids = [module.vpc.vpc_sg_id]
subnet_id = module.subnet.subnet_id_main
tags = {
Terraform = "true"
Environment = var.env
}
}