Terraform module to install the Clumio required AWS resources in the customer AWS account.
This module is to be used along with the resource clumio_aws_connection as some of the inputs for the module are obtained from the output of clumio_aws_connection resource. Below is an example of using the module:
data aws_caller_identity current {
}
data aws_region current {
}
resource "clumio_aws_connection" "test_conn" {
account_native_id = data.aws_caller_identity.current.account_id
aws_region = data.aws_region.current.name
description = data.aws_caller_identity.current.account_id
protect_asset_types_enabled = ["EBS", "RDS", "DynamoDB", "EC2MSSQL", "S3"]
services_enabled = ["discover", "protect"]
}
################################################################################
# Clumio AWS Connection Module
################################################################################
module clumio_aws_connection_module {
providers = {
aws = aws
clumio = clumio
}
source = "../../"
clumio_token = clumio_aws_connection.test_conn.token
role_external_id = "RoleExternalId_${clumio_aws_connection.test_conn.token}"
aws_region = clumio_aws_connection.test_conn.aws_region
aws_account_id = data.aws_caller_identity.current.account_id
clumio_aws_account_id = clumio_aws_connection.test_conn.clumio_aws_account_id
is_ebs_enabled = true
is_rds_enabled = true
is_ec2_mssql_enabled = true
is_s3_enabled = true
is_dynamodb_enabled = true
}| Name | Version |
|---|---|
| terraform | >=0.14.0 |
| clumio | ~>0.2.2 |
| Name | Version |
|---|---|
| aws | n/a |
| clumio | ~>0.2.2 |
| time | n/a |
No modules.
| Name | Description | Type | Default | Required |
|---|---|---|---|---|
| aws_account_id | Client AWS Account Id | string |
n/a | yes |
| aws_region | AWS Region | string |
n/a | yes |
| clumio_aws_account_id | Clumio Control Plane Account Id | string |
n/a | yes |
| clumio_token | The AWS integration ID token. | string |
n/a | yes |
| is_dynamodb_enabled | Flag to indicate if Clumio Protect for dynamodb is enabled | bool |
false |
no |
| is_ebs_enabled | Flag to indicate if Clumio Protect for ebs is enabled | bool |
false |
no |
| is_ec2_mssql_enabled | Flag to indicate if Clumio Protect for ec2_mssql is enabled | bool |
false |
no |
| is_protect_enabled | Flag to indicate if Clumio Protect for ebs is enabled | bool |
true |
no |
| is_rds_enabled | Flag to indicate if Clumio Protect for rds is enabled | bool |
false |
no |
| is_s3_enabled | Flag to indicate if Clumio Protect for S3 is enabled | bool |
false |
no |
| path | Value of path set on the AWS IAM roles, policies and instance_profile resources of the module. If not specified the default value is /clumio/. | string |
"/clumio/" |
no |
| role_external_id | A key that must be used by Clumio to assume the service role in your account. This should be a secure string, like a password, but it does not need to be remembered (random characters are best). | string |
n/a | yes |
| wait_time_before_create | Time in seconds to wait before creation of resources. This will be required to be set to a value above 45s in the case of shifting from old terraform template to the module based template. | string |
"60s" |
no |
The following inputs are deprecated and will be removed in the next version of the module. Instead of these two deprecated inputs, use is_dynamodb_enabled.
| Name | Description | Type | Default | Required |
|---|---|---|---|---|
| is_warmtier_dynamodb_enabled | Flag to indicate if Clumio Protect for warmtier dynamodb is enabled | bool |
false |
no |
| is_warmtier_enabled | Flag to indicate if Clumio Protect for warmtier is enabled | bool |
false |
no |
No outputs.