![](https://camo.githubusercontent.com/858959a8b2c212573068010fde297b767e07a10ad900a222ca32b415f21f0d13/68747470733a2f2f74656368616c6c792d636f6e74656e742e73332d75732d776573742d312e616d617a6f6e6177732e636f6d2f7075626c69632d636f6e74656e742f6c616365776f726b5f6c6f676f5f66756c6c2e706e67)
![Codefresh build status](https://camo.githubusercontent.com/d37665143626d74ae478529f739a785463a4dc47dc4a4258febd96d5e655f48a/68747470733a2f2f672e636f646566726573682e696f2f6170692f6261646765732f706970656c696e652f6c616365776f726b2f7465727261666f726d2d6d6f64756c6573253246746573742d636f6d7061746962696c6974793f747970653d63662d31266b65793d65794a68624763694f694a49557a49314e694a392e4e57566d4e5441784f4755345932466a4f47517a59546b78596a67335a4445782e524a3344457a576d4258724a58376d33386945784a5f6e744776345f4970385654612d616e38674277426f)
A Terraform Module to create an ECS Task Definition and Daemon Service for deploying the Lacework Datacollector Agent in an Elastic Container Service (ECS) cluster.
The main.tf
file will configure an ECS Task Definition which will then be used to run the Lacework Datacollector container.
The main.tf
file will configure a daemon Service within the specified ECS Cluster which will run the Task Definition above.
Name |
Description |
Type |
Default |
Required |
ecs_cluster_arn |
The ARN of the ECS cluster in which to deploy the Lacework agent |
string |
n/a |
yes |
ecs_launch_type |
The desired launch type for the Lacework agent ECS Service |
string |
"EC2" |
no |
ecs_service_name |
The desired name for the Lacework agent ECS Service |
string |
"" |
no |
ecs_task_family_name |
The desired name for the Lacework agent ECS Task Definition |
string |
"" |
no |
iam_role_arn |
The IAM role ARN to use when use_existing_iam_role is true |
string |
"" |
no |
iam_role_name |
The IAM role name to use when use_existing_iam_role is false |
string |
"" |
no |
iam_role_tags |
The tags to apply to a created IAM role |
map(string) |
{} |
no |
lacework_access_token |
The access token for the Lacework agent |
string |
n/a |
yes |
lacework_datacollector_image |
The image used to deploy the Lacework datacollector. |
string |
"lacework/datacollector:latest" |
no |
lacework_server_url |
The server URL for the Lacework agent |
string |
"" |
no |
lacework_task_cpu |
The quantity of CPU units to assign to the task |
string |
"512" |
no |
lacework_task_mem |
The quantity of Memory (MiB) to assign to the task |
string |
"512" |
no |
resource_prefix |
A prefix that will be use at the beginning of every generated resource |
string |
"lacework-ecs" |
no |
ssm_parameter_arn |
An existing SSM parameter ARN. Can be used when use_ssm_parameter_store is true |
string |
"" |
no |
ssm_parameter_encrypted |
Set this to true if the SSM parameter is/should be encrypted |
bool |
false |
no |
ssm_parameter_kms_arn |
The ARN of the KMS key to use when ssm_parameter_encrypted is true |
string |
"" |
no |
ssm_parameter_name |
The name to use for the Lacework agent access token when using SSM |
string |
"/lacework/access_token" |
no |
use_existing_iam_role |
Set this to true to use an existing IAM role |
bool |
false |
no |
use_ssm_parameter_store |
Set this to true to use SSM to store the Lacework agent access token |
bool |
false |
no |
Name |
Description |
iam_role_arn |
ARN of the IAM Role |
lacework_datacollector_service_arn |
ARN of the created Service |
lacework_datacollector_task_definition_arn |
ARN of the created Task Definition |
ssm_parameter_arn |
The ARN of the SSM Parameter |