AWS EventBridge Terraform module
Upstream version 4.3.2
0 controls from Registry requirements
Terraform Module Source
registry.compliance.tf/terraform-aws-modules/eventbridge/aws83 unique
| Name | Type | Default | Description |
|---|---|---|---|
| Optional | |||
api_destinations | map(any) | {} | A map of objects with EventBridge Destination definitions. |
append_connection_postfix | bool | true | Controls whether to append '-connection' to the name of the connection |
append_destination_postfix | bool | true | Controls whether to append '-destination' to the name of the destination |
append_pipe_postfix | bool | true | Controls whether to append '-pipe' to the name of the pipe |
append_rule_postfix | bool | true | Controls whether to append '-rule' to the name of the rule |
append_schedule_group_postfix | bool | true | Controls whether to append '-group' to the name of the schedule group |
append_schedule_postfix | bool | true | Controls whether to append '-schedule' to the name of the schedule |
archives | map(any) | {} | A map of objects with the EventBridge Archive definitions. |
attach_api_destination_policy | bool | false | Controls whether the API Destination policy should be added to IAM role for EventBridge Target |
attach_cloudwatch_policy | bool | false | Controls whether the Cloudwatch policy should be added to IAM role for EventBridge Target |
attach_ecs_policy | bool | false | Controls whether the ECS policy should be added to IAM role for EventBridge Target |
attach_kinesis_firehose_policy | bool | false | Controls whether the Kinesis Firehose policy should be added to IAM role for EventBridge Target |
attach_kinesis_policy | bool | false | Controls whether the Kinesis policy should be added to IAM role for EventBridge Target |
attach_lambda_policy | bool | false | Controls whether the Lambda Function policy should be added to IAM role for EventBridge Target |
attach_policies | bool | false | Controls whether list of policies should be added to IAM role |
attach_policy | bool | false | Controls whether policy should be added to IAM role |
attach_policy_json | bool | false | Controls whether policy_json should be added to IAM role |
attach_policy_jsons | bool | false | Controls whether policy_jsons should be added to IAM role |
attach_policy_statements | bool | false | Controls whether policy_statements should be added to IAM role |
attach_sfn_policy | bool | false | Controls whether the StepFunction policy should be added to IAM role for EventBridge Target |
attach_sns_policy | bool | false | Controls whether the SNS policy should be added to IAM role for EventBridge Target |
attach_sqs_policy | bool | false | Controls whether the SQS policy should be added to IAM role for EventBridge Target |
attach_tracing_policy | bool | false | Controls whether X-Ray tracing policy should be added to IAM role for EventBridge |
bus_description | string | null | Event bus description |
bus_name | string | "default" | A unique name for your EventBridge Bus |
cloudwatch_target_arns | list(string) | [] | The Amazon Resource Name (ARN) of the Cloudwatch Log Streams you want to use as EventBridge targets |
connections | any | {} | A map of objects with EventBridge Connection definitions. |
create | bool | true | Controls whether resources should be created |
create_api_destinations | bool | false | Controls whether EventBridge Destination resources should be created |
create_archives | bool | false | Controls whether EventBridge Archive resources should be created |
create_bus | bool | true | Controls whether EventBridge Bus resource should be created |
create_connections | bool | false | Controls whether EventBridge Connection resources should be created |
create_log_delivery | bool | true | Controls whether EventBridge log delivery resources should be created |
create_log_delivery_source | bool | true | Controls whether EventBridge log delivery source resource should be created |
create_permissions | bool | true | Controls whether EventBridge Permission resources should be created |
create_pipe_role_only | bool | false | Controls whether an IAM role should be created for the pipes only |
create_pipes | bool | true | Controls whether EventBridge Pipes resources should be created |
create_role | bool | true | Controls whether IAM roles should be created |
create_rules | bool | true | Controls whether EventBridge Rule resources should be created |
create_schedule_groups | bool | true | Controls whether EventBridge Schedule Group resources should be created |
create_schedules | bool | true | Controls whether EventBridge Schedule resources should be created |
create_schemas_discoverer | bool | false | Controls whether default schemas discoverer should be created |
create_targets | bool | true | Controls whether EventBridge Target resources should be created |
dead_letter_config | any | {} | Configuration details of the Amazon SQS queue for EventBridge to use as a dead-letter queue (DLQ) |
ecs_pass_role_resources | list(string) | [] | List of approved roles to be passed |
ecs_target_arns | list(string) | [] | The Amazon Resource Name (ARN) of the AWS ECS Tasks you want to use as EventBridge targets |
event_source_name | string | null | The partner event source that the new event bus will be matched with. Must match name. |
kinesis_firehose_target_arns | list(string) | [] | The Amazon Resource Name (ARN) of the Kinesis Firehose Delivery Streams you want to use as EventBridge targets |
kinesis_target_arns | list(string) | [] | The Amazon Resource Name (ARN) of the Kinesis Streams you want to use as EventBridge targets |
kms_key_identifier | string | null | The identifier of the AWS KMS customer managed key for EventBridge to use, if you choose to use a customer managed key to encrypt events on this event bus. The identifier can be the key Amazon Resource Name (ARN), KeyId, key alias, or key alias ARN. |
lambda_target_arns | list(string) | [] | The Amazon Resource Name (ARN) of the Lambda Functions you want to use as EventBridge targets |
log_config | object({...}) | null | The configuration block for the EventBridge bus log config settings |
log_delivery | map({...}) | {} | Map of the configuration block for the EventBridge bus log delivery settings (key is the type of log delivery: cloudwatch_logs, s3, firehose) |
log_delivery_source_name | string | null | Name of log delivery source |
number_of_policies | number | 0 | Number of policies to attach to IAM role |
number_of_policy_jsons | number | 0 | Number of policies JSON to attach to IAM role |
permissions | map(any) | {} | A map of objects with EventBridge Permission definitions. |
pipes | any | {} | A map of objects with EventBridge Pipe definitions. |
policies | list(string) | [] | List of policy statements ARN to attach to IAM role |
policy | string | null | An additional policy document ARN to attach to IAM role |
policy_json | string | null | An additional policy document as JSON to attach to IAM role |
policy_jsons | list(string) | [] | List of additional policy documents as JSON to attach to IAM role |
policy_path | string | null | Path of IAM policy to use for EventBridge |
policy_statements | any | {} | Map of dynamic policy statements to attach to IAM role |
region | string | null | Region where the resource(s) will be managed. Defaults to the region set in the provider configuration |
role_description | string | null | Description of IAM role to use for EventBridge |
role_force_detach_policies | bool | true | Specifies to force detaching any policies the IAM role has before destroying it. |
role_name | string | null | Name of IAM role to use for EventBridge |
role_path | string | null | Path of IAM role to use for EventBridge |
role_permissions_boundary | string | null | The ARN of the policy that is used to set the permissions boundary for the IAM role used by EventBridge |
role_tags | map(string) | {} | A map of tags to assign to IAM role |
rules | map(any) | {} | A map of objects with EventBridge Rule definitions. |
schedule_group_timeouts | map(string) | {} | A map of objects with EventBridge Schedule Group create and delete timeouts. |
schedule_groups | any | {} | A map of objects with EventBridge Schedule Group definitions. |
schedules | map(any) | {} | A map of objects with EventBridge Schedule definitions. |
schemas_discoverer_description | string | "Auto schemas discoverer event" | Default schemas discoverer description |
sfn_target_arns | list(string) | [] | The Amazon Resource Name (ARN) of the StepFunctions you want to use as EventBridge targets |
sns_kms_arns | list(string) | ["*"] | The Amazon Resource Name (ARN) of the AWS KMS's configured for AWS SNS you want Decrypt/GenerateDataKey for |
sns_target_arns | list(string) | [] | The Amazon Resource Name (ARN) of the AWS SNS's you want to use as EventBridge targets |
sqs_target_arns | list(string) | [] | The Amazon Resource Name (ARN) of the AWS SQS Queues you want to use as EventBridge targets |
tags | map(string) | {} | A map of tags to assign to resources. |
targets | any | {} | A map of objects with EventBridge Target definitions. |
trusted_entities | list(string) | [] | Additional trusted entities for assuming roles (trust relationship) |