mirror of
https://github.com/ghndrx/terraform-foundation.git
synced 2026-02-10 06:45:06 +00:00
Greg Hendrickson
6136cde9bb
Enterprise-grade multi-tenant AWS cloud foundation. Modules: - GitHub OIDC for keyless CI/CD authentication - IAM account settings and security baseline - AWS Config Rules for compliance - ABAC (Attribute-Based Access Control) - SCPs (Service Control Policies) Features: - Multi-account architecture - Cost optimization patterns - Security best practices - Comprehensive documentation Tech: Terraform, AWS Organizations, IAM Identity Center
58 lines
1.4 KiB
HCL
58 lines
1.4 KiB
HCL
################################################################################
|
|
# Tenant VPC - Outputs
|
|
################################################################################
|
|
|
|
output "vpc_id" {
|
|
value = aws_vpc.this.id
|
|
description = "VPC ID"
|
|
}
|
|
|
|
output "vpc_cidr" {
|
|
value = aws_vpc.this.cidr_block
|
|
description = "VPC CIDR block"
|
|
}
|
|
|
|
output "public_subnet_ids" {
|
|
value = aws_subnet.public[*].id
|
|
description = "Public subnet IDs"
|
|
}
|
|
|
|
output "private_subnet_ids" {
|
|
value = aws_subnet.private[*].id
|
|
description = "Private subnet IDs"
|
|
}
|
|
|
|
output "public_route_table_id" {
|
|
value = try(aws_route_table.public[0].id, null)
|
|
description = "Public route table ID"
|
|
}
|
|
|
|
output "private_route_table_id" {
|
|
value = try(aws_route_table.private[0].id, null)
|
|
description = "Private route table ID"
|
|
}
|
|
|
|
output "nat_public_ip" {
|
|
value = var.nat_mode == "gateway" ? (
|
|
try(aws_eip.nat[0].public_ip, null)
|
|
) : (
|
|
try(aws_instance.nat[0].public_ip, null)
|
|
)
|
|
description = "NAT Gateway/Instance public IP"
|
|
}
|
|
|
|
output "tgw_attachment_id" {
|
|
value = try(aws_ec2_transit_gateway_vpc_attachment.this[0].id, null)
|
|
description = "Transit Gateway attachment ID"
|
|
}
|
|
|
|
output "flow_log_group" {
|
|
value = try(aws_cloudwatch_log_group.flow_logs[0].name, null)
|
|
description = "Flow log CloudWatch log group"
|
|
}
|
|
|
|
output "azs" {
|
|
value = local.azs
|
|
description = "Availability zones used"
|
|
}
|