Do we can disable VPC endpoints creation?

[devopscaxsol]

Hello Team,

Do we have options to pass arguments and VPC endpoints will not created?

[v-rosa]

Yes, check here:

• https://github.com/search?q=repo%3Aaws-ia%2Fterraform-aws-control_tower_account_factory%20aft_vpc_endpoints%20&type=code

• https://github.com/aws-ia/terraform-aws-control_tower_account_factory/blob/main/README.md#input_aft_vpc_endpoints

[devopscaxsol]

Thanks @v-rosa .

I will definitely look into this.

Thanks for info.

[devopscaxsol]

@v-rosa

If we set false in variable.tf , vpc endpoints for all resource will not created RIGHT?

after set false, is there any files need to modify?

[v-rosa]

You need to set false in the module invocation.

I.e.

module "aft" {
  source = "github.com/aws-ia/terraform-aws-control_tower_account_factory"
  .....
  input_aft_vpc_endpoints = false
  ....

[devopscaxsol]

like as below RIGHT?

module "aft" { source = "github.com/aws-ia/terraform-aws-control_tower_account_factory" //Required Vars ct_management_account_id = "" log_archive_account_id = "" audit_account_id = "" aft_management_account_id = "" ct_home_region = "" tf_backend_secondary_region = ""

terraform_version = "1.2.3" input_aft_vpc_endpoints = false

}

Thank You

[v-rosa]

yes, something like that. Give it a try with a terraform plan and check what is changing.

[devopscaxsol]

If we pass as false for vpc endpoint, then how connectivity will occur for few lambda who are in VPC?

[Veevaete]

@devopscaxsol That depends on what you put in your VPC.