aws-vpc

AWS VPC includes best-practice AWS reference architecture for VPCs and subnets.

Design

For detailed information, check out our Operator Guide for this bundle.

Usage

Our bundles aren't intended to be used locally, outside of testing. Instead, our bundles are designed to be configured, connected, deployed and monitored in the Massdriver platform.

What are Bundles?

Bundles are the basic building blocks of infrastructure, applications, and architectures in Massdriver. Read more here.

Bundle

Params

Form input parameters for configuring a bundle for deployment.

View

Properties

aws_region (string): AWS Region to provision in.

Examples:
```
"us-west-2"
```
enable_flow_logs (boolean): Enable sending VPC traffic logs to Cloudwatch logs for auditing. Default: False.
high_availability (boolean): Provision NAT Gateways in all availability zones so private subnets stay up in the event of a zonal failure. Default: True.
monitoring (object)
- mode (string): Enable and customize CloudWatch metric alarms. Default: AUTOMATED.
  - One of
    - Automated
    - Custom
    - Disabled
network (object)
- automatic (boolean): Automatically select CIDR range that doesn't conflict with other VPCs in the region. Default: True.

Examples

{
    "__name": "Wizard",
    "aws_region": "us-west-2",
    "enable_flow_logs": false,
    "high_availability": false,
    "monitoring": {
        "mode": "AUTOMATED"
    },
    "network": {
        "automatic": true,
        "mask": 20
    }
}

{
    "__name": "Small Development Network (4K IPs)",
    "enable_flow_logs": false,
    "high_availability": false,
    "network": {
        "automatic": true,
        "mask": 20
    }
}

{
    "__name": "Large Production Network (65K IPs)",
    "enable_flow_logs": true,
    "high_availability": true,
    "network": {
        "automatic": true,
        "mask": 16
    }
}

Connections

Connections from other bundles that this bundle depends on.

View

Properties

aws_authentication (object): . Cannot contain additional properties.
- data (object)
  - arn (string): Amazon Resource Name.
    
    Examples:
```
"arn:aws:rds::ACCOUNT_NUMBER:db/prod"
```
```
"arn:aws:ec2::ACCOUNT_NUMBER:vpc/vpc-foo"
```
  - external_id (string): An external ID is a piece of data that can be passed to the AssumeRole API of the Security Token Service (STS). You can then use the external ID in the condition element in a role's trust policy, allowing the role to be assumed only when a certain value is present in the external ID.
- specs (object)
  - aws (object): .
    - region (string): AWS Region to provision in.
      
      Examples:
      "us-west-2"

Artifacts

Resources created by this bundle that can be connected to other bundles.

View

Properties

vpc (object): . Cannot contain additional properties.
- data (object)
  - infrastructure (object)
    - arn (string): Amazon Resource Name.
      
      Examples:
      "arn:aws:rds::ACCOUNT_NUMBER:db/prod"
      "arn:aws:ec2::ACCOUNT_NUMBER:vpc/vpc-foo"
    - cidr (string)
      
      Examples:
      "10.100.0.0/16"
      "192.24.12.0/22"
    - internal_subnets (array)
      - Items (object): AWS VCP Subnet.
        
        arn (string): Amazon Resource Name.
        
        Examples:
        
        "arn:aws:rds::ACCOUNT_NUMBER:db/prod"
        
        "arn:aws:ec2::ACCOUNT_NUMBER:vpc/vpc-foo"
        
        Examples:
    - private_subnets (array)
      - Items (object): AWS VCP Subnet.
        
        arn (string): Amazon Resource Name.
        
        Examples:
        
        "arn:aws:rds::ACCOUNT_NUMBER:db/prod"
        
        "arn:aws:ec2::ACCOUNT_NUMBER:vpc/vpc-foo"
        
        Examples:
    - public_subnets (array)
      - Items (object): AWS VCP Subnet.
        
        arn (string): Amazon Resource Name.
        
        Examples:
        
        "arn:aws:rds::ACCOUNT_NUMBER:db/prod"
        
        "arn:aws:ec2::ACCOUNT_NUMBER:vpc/vpc-foo"
        
        Examples:
- specs (object)
  - aws (object): .
    - region (string): AWS Region to provision in.
      
      Examples:
      "us-west-2"

Contributing

Bug Reports & Feature Requests

Did we miss something? Please submit an issue to report any bugs or request additional features.

Developing

Note: Massdriver bundles are intended to be tightly use-case scoped, intention-based, reusable pieces of IaC for use in the Massdriver platform. For this reason, major feature additions that broaden the scope of an existing bundle are likely to be rejected by the community.

Still want to get involved? First check out our contribution guidelines.

Fix or Fork

If your use-case isn't covered by this bundle, you can still get involved! Massdriver is designed to be an extensible platform. Fork this bundle, or create your own bundle from scratch!