Terraform Service Catalog Engine - Core

This modules deploys the core engine components needed to support EXTERNAL AWS Service Catalog products.

Architecture Diagram

Requirements

Name	Version
terraform	>= 1.3.0
aws	>= 5.0.0

Providers

Name	Version
aws	>= 5.0.0

Modules

Name	Source	Version
label	git::https://github.com/aws-ia/terraform-aws-label.git	9595b11aadf520f5ee3c210848802c414441236f

Resources

Name	Type
aws_cloudwatch_log_group.sce_lambda_terraform_parameter_parser	resource
aws_iam_policy.aws_lambda_basic_execution	resource
aws_iam_policy.aws_lambda_vpc_access_execution	resource
aws_iam_policy.aws_lambda_xray_write_only_access	resource
aws_iam_role.sce_parameter_parser	resource
aws_iam_role_policy.sce_parameter_parser	resource
aws_iam_role_policy_attachment.sce_parameter_parser	resource
aws_kms_alias.sce	resource
aws_kms_key.sce	resource
aws_lambda_function.sce_parameter_parser	resource
aws_lambda_permission.sce_parameter_parser	resource
aws_sqs_queue.sce_dlq	resource
aws_sqs_queue.sce_provision_queue	resource
aws_sqs_queue.sce_termination_queue	resource
aws_sqs_queue.sce_update_queue	resource
aws_sqs_queue_policy.sce_provision_queue	resource
aws_sqs_queue_policy.sce_termination_queue	resource
aws_sqs_queue_policy.sce_update_queue	resource
aws_caller_identity.current	data source
aws_iam_policy.AWSLambdaBasicExecutionRole	data source
aws_iam_policy.AWSLambdaVPCAccessExecutionRole	data source
aws_iam_policy.AWSXrayWriteOnlyAccess	data source
aws_partition.current	data source
aws_region.current	data source
aws_s3_object.sce_parameter_parser	data source

Inputs

Name	Description	Type	Default	Required
lambda_sce_parameter_parser_architectures	Instruction set architecture for your Lambda function.	list(string)	n/a	yes
lambda_sce_parameter_parser_handler	Function entrypoint in your code.	string	n/a	yes
lambda_sce_parameter_parser_runtime	Identifier of the function's runtime.	string	n/a	yes
lambda_sce_parameter_parser_s3_bucket	S3 bucket name containting the Lambda source code .zip file	string	n/a	yes
lambda_sce_parameter_parser_s3_key	S3 bucket key of the Lambda source code .zip file	string	n/a	yes
cloudwatch_log_group_retention	Amount of days to keep CloudWatch Log Groups for Lambda functions. 0 = Never Expire	string	"0"	no
label_id_order	ID element. Usually an abbreviation of your organization name, e.g. 'eg' or 'cp', to help ensure generated IDs are globally unique	list(string)	[ "name", "namespace", "stage" ]	no
lambda_sce_parameter_parser_description	Description of what your Lambda Function does	string	"Parses parameters - Invoked by Service Catalog"	no
lambda_sce_parameter_parser_memory_size	Amount of memory in MB your Lambda Function can use at runtime	number	1024	no
lambda_sce_parameter_parser_timeout	Amount of time your Lambda Function has to run in seconds.	number	100	no
lambda_sce_parameter_tracing_config_mode	Whether to sample and trace a subset of incoming requests with AWS X-Ray. Valid values are PassThrough and Active.	string	"Active"	no
stage	Stage, e.g. 'prod', 'staging', 'dev', OR 'source', 'build', 'test', 'deploy', 'release'.	string	null	no
tags	Map of tags to apply to resources deployed by this solution.	map(any)	null	no
vpc_id	VPC ID to use if leveraging an existing VPC for the solution.	string	null	no
vpc_private_subnet_ids	Required if vpc_id is specified. List of private subnets to use in the provided vpc_id	list(string)	null	no
vpc_security_group_ids	Required if vpc_id is specified. List of security groups to use in the provided vpc_id	list(string)	null	no

Outputs

Name	Description
kms_key_arn	KMS key for Service Catalog Engine Core
sce_parameter_parser_role_arn	IAM role ARN used by Lambda parameter parser
sqs_dlq_arn	SQS queue for death letter queue
sqs_provision_queue_arn	SQS queue for product provisioning requests
sqs_termination_queue_arn	SQS queue for product termination requests
sqs_update_queue_arn	SQS queue for product update requests