terraform-gravicore-modules

This is a collection of reusable Terraform modules for Gravicore's cloud automation platform.

Modules

AWS

Module	Description
Account	A set of IAM policies to set the password policy and alias for an account. Also allows for optional access to Gravicore through SSO.
Account Roles	A collection of IAM policies, groups and roles for providing access to any accounts in the Organization.
ACM	A module for deploying environment based auto-rotating wildcard certificates using AWS Certificate Manager.
ALB	A module enabling the deployment of AWS Elastic Load Balancing (Application Load Balancer) solutions. Best suited for HTTP/HTTPS traffic or microservice/container applications.
Aurora Serverless PostgreSQL	A module for deploying PostgreSQL focused Amazon Aurora Serverless.
Aviatrix	A collection of modules for deploying Aviatrix's Next-Gen Transit Network for AWS, User VPN and Site to Cloud VPN solutions.
Backup	A modules for deploying AWS Backup resources.
Camunda	A module to deploy the API or WebApp for the Camunda Workflow Engine.
Central Logging	A collection of modules for deploying resources for centralized logging.
Cerberus FTP	A module for deploying the infrastructure resources needed for Cerberus FTP.
CI/CD	A module for deploying an IAM user with access keys to be used as a service account for CICD pipelines.
CloudTrail	A module for deploying all global CloudTrail Events to regional buckets.
CodeCommit	A module for deploying the infrastructure resources needed for an AWS CodeCommit repository.
Cognito	A module for deploying the infrastructure resources needed for an Amazon Cognito user and identity pool.
Data Transfer	A module for deploying a data transfer solution utilizing AWS DataSync and AWS Snowball.
Datadog Agent	A module for deploying a centralized logging solution leveraging Datadog.
Datadog Agent for ECS	A module for deploying a centralized logging solution leveraging Datadog with ECS Fargate containers.
DFS	A module for deploying EC2 instances so that Microsoft Distributed File System (DFS) can be manually configured.
Directory Service	A module for deploying directory services (https://aws.amazon.com/directoryservice/).
DNS	A module for deploying parent DNS services and optional delegated subdomains utilizing Route53.
ECS	A module for deploying fargate containers using AWS Elastic Container Service (ECS) service.
ElastiCache (Redis)	A module for deploying an in-memory data store utilizing Amazon ElastiCache for Redis instance.
FSX	A module for deploying Amazon FSx for Windows File Server.
Instance Scheduler	A module enabling the configuration of custom start and stop schedules for Amazon EC2 and RDS instances through the deployment of the AWS Instance Scheduler solution.
KMS	A module enabling default encryption keys for securing different types of data using the AWS Key Management Service (KMS).
MAP Server IDs	A module for deploying "map35" AWS CloudFormation template to upload an on-premise server list to AWS Migration Hub for the AWS Migration Acceleration Program (MAP).
NLB	A module enabling the deployment of AWS Network Load Balancing (Network Load Balancer) solutions. Best suited for high network requests TCP/UDP traffic or microservice/container applications.
Organization	A module providing central governance and managenent of a multi-account setup using AWS Organizations.
RDS	A collection of modules for deploying Amazon Relational Database Service (RDS) resources.
RDS (PostgreSQL)	A module for deploying Amazon RDS for PostgreSQL resources.
RDS Replica (PostgreSQL)	A module for deploying PostgreSQL focused Amazon RDS Read Replicas resources.
S3	A module that supports the creation of buckets using AWS Simple Storage Service (S3) service.
S3 Log Storage	A module for deploying a S3 bucket for storing logs
Security Defaults	A module for deploying default security group settings across multiple VPCs and regions.
Security Defaults EC2	A module for applying default security settings for EC2 Instances.
Security Defaults Lambda	A module for applying default security and default VPC across lambda functions
Security Defaults S3	A module for applying recommended default security on S3 resources
SSM Parameters	A module that supports reading and writing of key/value pairs from the AWS Systems Manager (SSM) Parameter Store service.
VPC	A secure, multi-AZ VPC with public subnets, private subnets, Internet Gateway, optional NAT and optional VPC Endpoints utilizing Amazon Virtual Private Cloud.
VPC DNS	A module for deploying environment based delegated DNS zones utilizing Route53.
Workspace Cost Optimizer	A module for deploying Amazon WorkSpaces Cost Optimizer Amazon WorkSpaces Cost Optimizer.
Workspaces	A module for deploying Amazon WorkSpaces Amazon WorkSpaces.
Web Applciation Firewall	A module for deploying Amazon WorkSpaces Web ACL Amazon WorkSpaces Cost Optimizer.

Contributing

Bug Reports & Feature Requests

Please use the issue tracker to report any bugs or file feature requests.

Copyright

License

See LICENSE for full details.

Licensed to the Apache Software Foundation (ASF) under one
or more contributor license agreements.  See the NOTICE file
distributed with this work for additional information
regarding copyright ownership.  The ASF licenses this file
to you under the Apache License, Version 2.0 (the
"License"); you may not use this file except in compliance
with the License.  You may obtain a copy of the License at

  https://www.apache.org/licenses/LICENSE-2.0

Unless required by applicable law or agreed to in writing,
software distributed under the License is distributed on an
"AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
KIND, either express or implied.  See the License for the
specific language governing permissions and limitations
under the License.

Trademarks

All other trademarks referenced herein are the property of their respective owners.

gravicore / terraform-gravicore-modules

readme