Terraform module to create ASG bastion host using ssm session manager on top of golden bastion AMI baked by site-infra team. This module creates following resources:

• aws_autoscaling_group. To stop or start an instances, you can change the asg_capacity value.
• aws_launch_template.
• aws_security_group. Several security group will be created by this module, to give access from this bastion, you need to attach the share security group to your database.

• terraform-aws-tvlk-bastion
  • Description
  • Table of Content
  • Prerequisites
  • Dependencies
  • Terraform Versions
  • Requirements
  • Providers
  • Modules
  • Resources
  • Inputs
  • Outputs
  • Authors
  • Contributing
  • License

• An existing vpc.
• An existing subnet, recommended using private subnet.
• IAM Policy to grants access to use session manager and send logs to s3.

This Terraform module uses another Terraform module, here is the list of Terraform module dependencies:

• traveloka/terraform-aws-autoscaling
• traveloka/terraform-aws-iam-role

This module was created on 16/10/2018. The latest stable version of Terraform which this module tested working is Terraform 0.13.7 on 29/09/2021.

[
  {
    "instance_type": "t3a.nano"
  },
  {
    "instance_type": "t3.nano"
  }
]

{
  "on_demand_allocation_strategy": "prioritized",
  "on_demand_base_capacity": "0",
  "on_demand_percentage_above_base_capacity": "100",
  "spot_allocation_strategy": "lowest-price",
  "spot_instance_pools": "2",
  "spot_max_price": ""
}

• Bernard Siahaan

This module accepting or open for any contributions from anyone, please see the CONTRIBUTING.md for more detail about how to contribute to this module.

This module is under Apache License 2.0 - see the LICENSE file for details.