hashicorp / terraform-provider-aws

The AWS Provider enables Terraform to manage AWS resources.
https://registry.terraform.io/providers/hashicorp/aws
Mozilla Public License 2.0
9.8k stars 9.15k forks source link

[Enhancement]: aws_ecs_cluster setting block enhancement request #35796

Open mackeyaj opened 8 months ago

mackeyaj commented 8 months ago

Description

AWS has a few other ECS Cluster settings that are able to be configured at a cluster level. At this time, it seems that only container Insights is able to be configured using the setting block in the aws_ecs_cluster resource. I am requesting the fargate FIPS Mode(This is supported in govcloud) be added if able. According to this document it looks like it may be possible to add a few other settings as well, such as guard duty integration and task retirement wait time. Here is the doc https://docs.aws.amazon.com/AmazonECS/latest/developerguide/ecs-account-settings.html#fips-setting

Affected Resource(s) and/or Data Source(s)

aws_ecs_cluster

Potential Terraform Configuration

resource "aws_ecs_cluster" "new_ecs_cluster" {
## Omitted other arguments for brevity
  setting {
            name = "fargateFIPSMode"
            value = "enabled"
      }
  setting {
            name = "fargateTaskRetirementWaitPeriod"
            value = 14
          }
  setting {
            name = "guardDutyActivate"
            value = on
          }
}

References

Whole Document

https://docs.aws.amazon.com/AmazonECS/latest/developerguide/ecs-account-settings.html#fips-setting

FIPS Section for fargate

AWS Fargate Federal Information Processing Standard (FIPS-140) compliance

Task retirement section

https://docs.aws.amazon.com/AmazonECS/latest/developerguide/ecs-account-settings.html#fargate-retirement-wait-time

Guard duty section

https://docs.aws.amazon.com/AmazonECS/latest/developerguide/ecs-account-settings.html#guard-duty-integration

Would you like to implement a fix?

None

github-actions[bot] commented 8 months ago

Community Note

Voting for Prioritization

Volunteering to Work on This Issue

mackeyaj commented 8 months ago

👍