AWS App Runner Terraform module

Version1.2.3

Upstream version 1.2.3

0 controls from CIS Controls v8.0 IG1 requirements

Terraform Module Source

cisv80ig1.compliance.tf/terraform-aws-modules/app-runner/aws

Compliance Inputs Outputs Resources Rules Diff (0)README

40 unique

Name	Type	Default	Description
Optional
access_iam_role_description	string	null	Description of the role
access_iam_role_name	string	null	Name to use on IAM role created
access_iam_role_path	string	null	IAM role path
access_iam_role_permissions_boundary	string	null	ARN of the policy that is used to set the permissions boundary for the IAM role
access_iam_role_policies	map(string)	{}	IAM policies to attach to the IAM role
access_iam_role_use_name_prefix	bool	true	Determines whether the IAM role name (`iam_role_name`) is used as a prefix
auto_scaling_configuration_arn	string	null	ARN of an App Runner automatic scaling configuration resource that you want to associate with your service. If not provided, App Runner associates the latest revision of a default auto scaling configuration
auto_scaling_configurations	any	{}	Map of auto-scaling configuration definitions to create
connections	any	{}	Map of connection definitions to create
create	bool	true	Determines whether resources will be created (affects all resources)
create_access_iam_role	bool	false	Determines whether an IAM role is created or to use an existing IAM role
create_custom_domain_association	bool	false	Determines whether a Custom Domain Association will be created
create_ingress_vpc_connection	bool	false	Determines whether a VPC ingress configuration will be created
create_instance_iam_role	bool	true	Determines whether an IAM role is created or to use an existing IAM role
create_service	bool	true	Determines whether the service will be created
create_vpc_connector	bool	false	Determines whether a VPC Connector will be created
domain_name	string	""	The custom domain endpoint to association. Specify a base domain e.g., `example.com` or a subdomain e.g., `subdomain.example.com`
enable_observability_configuration	bool	true	Determines whether an X-Ray Observability Configuration will be created and assigned to the service
enable_www_subdomain	bool	null	Whether to associate the subdomain with the App Runner service in addition to the base domain. Defaults to `true`
encryption_configuration	any	{}	The encryption configuration for the service
health_check_configuration	any	{}	The health check configuration for the service
ingress_vpc_endpoint_id	string	""	The ID of the VPC endpoint that is used for the VPC ingress configuration
ingress_vpc_id	string	""	The ID of the VPC that is used for the VPC ingress configuration
instance_configuration	any	{}	The instance configuration for the service
instance_iam_role_description	string	null	Description of the role
instance_iam_role_name	string	null	Name to use on IAM role created
instance_iam_role_path	string	null	IAM role path
instance_iam_role_permissions_boundary	string	null	ARN of the policy that is used to set the permissions boundary for the IAM role
instance_iam_role_policies	map(string)	{}	IAM policies to attach to the IAM role
instance_iam_role_use_name_prefix	bool	true	Determines whether the IAM role name (`iam_role_name`) is used as a prefix
instance_policy_statements	any	{}	A map of IAM policy [statements](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/data-sources/iam_policy_document#statement) for custom permission usage
network_configuration	any	{}	The network configuration for the service
observability_configuration	any	{}	The observability configuration for the service
private_ecr_arn	string	null	The ARN of the private ECR repository that contains the service image to launch
service_name	string	""	The name of the service
source_configuration	any	{}	The source configuration for the service
tags	map(string)	{}	A map of tags to add to all resources
vpc_connector_name	string	""	The name of the VPC Connector
vpc_connector_security_groups	list(string)	[]	The security groups to use for the VPC Connector
vpc_connector_subnets	list(string)	[]	The subnets to use for the VPC Connector