Skip to content

Latest commit

 

History

History

resolver-query-logging

Folders and files

NameName
Last commit message
Last commit date

parent directory

..
README.md
README.md
 
 
main.tf
main.tf
 
 
outputs.tf
outputs.tf
 
 
ram-shares.tf
ram-shares.tf
 
 
resource-group.tf
resource-group.tf
 
 
variables.tf
variables.tf
 
 
versions.tf
versions.tf
 
 

README.md

resolver-query-logging

This module creates following resources.

  • aws_route53_resolver_query_log_config
  • aws_route53_resolver_query_log_config_association (optional)
  • aws_ram_resource_share (optional)
  • aws_ram_principal_association (optional)
  • aws_ram_resource_association (optional)

Requirements

Name Version
terraform >= 1.5
aws >= 4.27

Providers

Name Version
aws 5.19.0

Modules

Name Source Version
resource_group tedilabs/misc/aws//modules/resource-group ~> 0.10.0
share tedilabs/account/aws//modules/ram-share ~> 0.22.0

Resources

Name Type
aws_route53_resolver_query_log_config.this resource
aws_route53_resolver_query_log_config_association.this resource

Inputs

Name Description Type Default Required
destination (Required) The ARN of the resource that you want Route 53 Resolver to send query logs. You can send query logs to an S3 bucket, a CloudWatch Logs log group, or a Kinesis Data Firehose delivery stream. string n/a yes
name (Required) The name of the Route 53 Resolver query logging configuration. string n/a yes
module_tags_enabled (Optional) Whether to create AWS Resource Tags for the module informations. bool true no
resource_group_description (Optional) The description of Resource Group. string "Managed by Terraform." no
resource_group_enabled (Optional) Whether to create Resource Group to find and group AWS resources which are created by this module. bool true no
resource_group_name (Optional) The name of Resource Group. A Resource Group name can have a maximum of 127 characters, including letters, numbers, hyphens, dots, and underscores. The name cannot start with AWS or aws. string "" no
shares (Optional) A list of resource shares via RAM (Resource Access Manager). 
list(object({
    name = optional(string)

    permissions = optional(set(string), ["AWSRAMDefaultPermissionResolverQueryLogConfig"])

    external_principals_allowed = optional(bool, false)
    principals                  = optional(set(string), [])

    tags = optional(map(string), {})
  }))
 [] no
tags (Optional) A map of tags to add to all resources. map(string) {} no
vpc_associations (Optional) A list of VPC IDs that you want this query logging configuration to log queries for. list(string) [] no

Outputs

Name Description
arn The ARN of the Route 53 Resolver query logging configuration.
destination The ARN of the resource that Route 53 Resolver send query logs. This can be S3 bucket, CloudWatch Logs log group, or Kinesis Data Firehose delivery stream.
id The ID of the Route 53 Resolver query logging configuration.
name The name of the Route 53 Resolver query logging configuration.
owner_id The AWS Account ID the account that created the query logging configuration.
sharing The configuration for sharing of the Route53 Resolver query logging configuration.
status - An indication of whether the query logging configuration is shared with other AWS accounts, or was shared with the current account by another AWS account. Sharing is configured through AWS Resource Access Manager (AWS RAM). Values are NOT_SHARED, SHARED_BY_ME or SHARED_WITH_ME.
shares - The list of resource shares via RAM (Resource Access Manager).
vpc_associations A list of associated VPC IDs to query logging configuration.