Terraform module for configuring an integration with Lacework and AWS for cloud resource configuration assessment.
Name | Version |
---|---|
terraform | >= 0.14 |
aws | >= 3.55.0 |
lacework | ~> 1.18 |
Name | Version |
---|---|
archive | n/a |
aws | >= 3.55.0 |
lacework | ~> 1.18 |
No modules.
Name | Description | Type | Default | Required |
---|---|---|---|---|
cf_resource_prefix | Prefix for resources created by Lacework stackset | string |
n/a | yes |
cf_s3_bucket | Enter the S3 bucket for Lacework Cloudformation assets. Use this if you want to customize your deployment. | string |
"lacework-alliances" |
no |
cf_s3_prefix | Enter the S3 key prefix for Lacework Cloudformation assets directory. Use this if you want to customize your deployment. | string |
"lacework-organization-cfn" |
no |
cf_stack_name | The stackset name | string |
"lacework-aws-org-configuration" |
no |
kms_key_arn | The ARN of an existing KMS encryption key to be used for SNS and Secrets | string |
"" |
no |
kms_key_deletion_days | The waiting period, specified in number of days | number |
30 |
no |
kms_key_multi_region | Whether the KMS key is a multi-region or regional key | bool |
true |
no |
kms_key_rotation | Enable KMS automatic key rotation | bool |
false |
no |
lacework_access_key_id | n/a | string |
n/a | yes |
lacework_account | Lacework account name. Do not include the '.lacework.net' at the end. | string |
n/a | yes |
lacework_secret_key | n/a | string |
n/a | yes |
lacework_subaccount | If Lacework Organizations is enabled, enter the sub-account. Leave blank if Lacework Organizations is not enabled. | string |
"" |
no |
organization_id | AWS Organization ID where these resources are being deployed into | string |
n/a | yes |
organization_unit | Organizational Unit ID that the stackset will be deployed into | list(string) |
n/a | yes |
stackset_failure_tolerance_count | The maxiumum number of failed AWS account integrations to tolerate | number |
5 |
no |
stackset_managed_execution | Allow StackSets to perform non-conflicting operations concurrently and queues conflicting operations. | bool |
true |
no |
stackset_max_concurrent_count | The maximum number of AWS accounts to deploy to concurrently | number |
50 |
no |
stackset_region_concurrency_type | Allow stackset instance deployment to run in parallel | string |
"PARALLEL" |
no |
tags | A map/dictionary of Tags to be assigned to created resources | map(string) |
{} |
no |
No outputs.