terraform-aws-cloudcheckr

Terraform module that provisions the CloudCheckr IAM roles and policies, the Ingram Micro billing role, and an optional AWS Cost and Usage Report bucket.

Compatibility

This module requires Terraform 1.6.0 or later and supports AWS provider versions from 5.40.0 up to, but not including, 7.0.0.

Requirements

Name	Version
terraform	>= 1.6.0
aws	>= 5.40.0, < 7.0.0

Providers

Name	Version
aws	>= 5.40.0, < 7.0.0

Modules

No modules.

Resources

Name	Type
aws_cur_report_definition.this	resource
aws_iam_policy.cloudwatchflowlogs	resource
aws_iam_policy.cost	resource
aws_iam_policy.cur	resource
aws_iam_policy.immasterbilling	resource
aws_iam_policy.inventory	resource
aws_iam_policy.security	resource
aws_iam_role.cloudcheckr	resource
aws_iam_role.imbillingrole	resource
aws_iam_role_policy_attachment.cloudcheckr-cloudwatchflowlogs	resource
aws_iam_role_policy_attachment.cloudcheckr-cost	resource
aws_iam_role_policy_attachment.cloudcheckr-cur	resource
aws_iam_role_policy_attachment.cloudcheckr-inventory	resource
aws_iam_role_policy_attachment.cloudcheckr-security	resource
aws_iam_role_policy_attachment.imbillingrole-awssupportaccess	resource
aws_iam_role_policy_attachment.imbillingrole-iammasterbilling	resource
aws_iam_role_policy_attachment.imbillingrole-readonlyaccess	resource
aws_iam_role_policy_attachment.imbillingrole-savingplansfullaccess	resource
aws_s3_bucket.cur	resource
aws_s3_bucket_public_access_block.cur	resource
aws_s3_bucket_server_side_encryption_configuration.cur	resource
aws_iam_policy_document.cloudcheckr	data source
aws_iam_policy_document.imbillingrole	data source

Inputs

Name	Description	Type	Default	Required
cloudcheckr_role_name	(Required) CloudCheckr iam role name.	string	"CloudCheckr"	no
cloudcheckr_role_sts_externalid	(Required) CloudCheckr STS ExternalId condition values to use with a role (when MFA is not required)	list(string)	[]	no
cloudcheckr_trusted_role_arns	(Required) CloudCheckr ARNs of AWS entities who can assume these roles	list(string)	n/a	yes
create_cloudcheckr_role	(Required) Whether to create a IngraMicro iam role.	bool	true	no
create_cur_report	(Required) Whether to create bucket s3 and Cost and Usage report.	bool	false	no
create_ingrammicro_role	(Required) Whether to create a IngraMicro iam role.	bool	false	no
cur_report_bucket_name	(Required) Report bucket name.	string	null	no
cur_report_name	(Required) Unique name for the report. Must start with a number/letter and is case sensitive. Limited to 256 characters.	string	"cost-and-usage"	no
ingrammicro_payer_account	(Optional) IngramMicro payer account id	number	111111111111	no
tags	(Optional) A map of tags to add to resources	map(string)	{}	no

Outputs

No outputs.

Example

See examples/complete.