/terraform-unclassifier

Primary LanguagePythonApache License 2.0Apache-2.0

N|Solid

Teraform Unclassifier is an automatic solution for hiding classified data from state files

Deploy Terraform Unclassifier to your AWS account

N|Solid]
Unclassifier is now supported in N.Virginia (us-east-1), if you have any question, you can contact Sefi Genis.

Follow these steps:

  1. Click .
  2. In the Select Template, click Next (no need to make a selection)
  3. In the Parameters section input your existing S3 Bucket with .tfstate files, InputS3Bucket, then click Next
  4. In the Options page, click Next (no need to make any selections)
  5. In the Review page, select the options: I acknowledge that AWS CloudFormation might create IAM resources with custom names.
  6. Click Create Stack

Arguments

You can control terraform-unclassifier with these parameters:

Parameter Description Optional/Mandatory
INPUT_BUCKET Existing S3 Bucket contains sensitive terraform files Mandatory
OUTPUT_BUCKET terraform-unclassifier save unclassified state to this bucket Mandatory
CLASSIFIED_TYPES terraform resources to unclassify (multi resources split by , )
Default value is aws_acm_certificate		 Optional
OUTPUT_DELIMITER Controlling the output delimiter in Output S3 Bucket Optional
TERRAFORM_STATE_SUFFIX Controlling terraform state files sufix
Default value is .tfstate		 Optional
INFRALIGHT_STATE_PATH terraform-unclassifier saves internal state file
Default value is unclassifier.infl		 Optional
HARD_REFRESH unclassifing all .tfstate files no matter if they already unclassified
Default value is false		 Optional

Supported Terraform Versions

  • 0.11.X
  • 0.12.X
  • 0.13.X
  • 0.14.X

License

Apache 2.0