generated from clouddrove/terraform-module-template
-
Notifications
You must be signed in to change notification settings - Fork 4
/
variables.tf
77 lines (69 loc) · 2.13 KB
/
variables.tf
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
variable "enable_default_standards" {
description = "Flag to indicate whether default standards should be enabled"
type = bool
default = true
}
variable "control_finding_generator" {
description = <<-DOC
Updates whether the calling account has consolidated control findings turned on.
If the value for this field is set to SECURITY_CONTROL,
Security Hub generates a single finding for a control check even when the check applies to multiple enabled standards.
If the value for this field is set to STANDARD_CONTROL,
Security Hub generates separate findings for a control check when the check applies to multiple enabled standards.
For accounts that are part of an organization,
this value can only be updated in the administrator account.
DOC
type = string
default = null
}
variable "auto_enable_controls" {
description = <<-DOC
Whether to automatically enable new controls when they are added to standards that are enabled.
By default, this is set to true, and new controls are enabled automatically.
To not automatically enable new controls, set this to false.
DOC
type = bool
default = true
}
variable "enabled_standards" {
description = <<-DOC
The possible values are:
- standards/aws-foundational-security-best-practices/v/1.0.0
- ruleset/cis-aws-foundations-benchmark/v/1.2.0
- standards/pci-dss/v/3.2.1
DOC
type = list(any)
default = []
}
variable "enabled_products" {
description = <<-DOC
The possible values are:
- product/aws/guardduty
- product/aws/inspector
- product/aws/macie
DOC
type = list(any)
default = []
}
variable "security_hub_enabled" {
type = bool
default = true
description = "To Enable seucirty-hub in aws account"
}
variable "member_details" {
type = list(object({
account_id = string
mail_id = string
invite = bool
}))
default = []
}
variable "enable" {
type = bool
default = true
description = "Set to false to prevent the module from creating any resources."
}
variable "name" {
type = string
default = ""
}