| certificate_arn |
The TLS certificate ARN for the Helix Authentication Service load balancer. |
string |
n/a |
yes |
| cluster_name |
The name of the cluster to deploy the Helix Authentication Service into. Defaults to null and a cluster will be created. |
string |
null |
no |
| container_cpu |
The CPU allotment for the Helix Authentication Service container. |
number |
1024 |
no |
| container_memory |
The memory allotment for the Helix Authentication Service container. |
number |
4096 |
no |
| container_name |
The name of the Helix Authentication Service container. |
string |
"helix-auth-container" |
no |
| container_port |
The container port that Helix Authentication Service runs on. |
number |
3000 |
no |
| create_helix_authentication_service_default_policy |
Optional creation of Helix Authentication Service default IAM Policy. Default is set to true. |
bool |
true |
no |
| create_helix_authentication_service_default_role |
Optional creation of Helix Authentication Service default IAM Role. Default is set to true. |
bool |
true |
no |
| custom_helix_authentication_service_role |
ARN of the custom IAM Role you wish to use with Helix Authentication Service. |
string |
null |
no |
| debug |
Set this flag to enable execute command on service containers and force redeploys. |
bool |
false |
no |
| desired_container_count |
The desired number of containers running the Helix Authentication Service. |
number |
1 |
no |
| enable_helix_authentication_service_alb_access_logs |
Enables access logging for the Helix Authentication Service ALB. Defaults to true. |
bool |
true |
no |
| enable_helix_authentication_service_alb_deletion_protection |
Enables deletion protection for the Helix Authentication Service ALB. Defaults to true. |
bool |
true |
no |
| enable_web_based_administration |
Flag for enabling web based administration of Helix Authentication Service. |
bool |
false |
no |
| environment |
The current environment (e.g. dev, prod, etc.) |
string |
"dev" |
no |
| existing_security_groups |
A list of existing security group IDs to attach to the Helix Authentication Service load balancer. |
list(string) |
[] |
no |
| fully_qualified_domain_name |
The fully qualified domain name where Helix Authentication Service will be available. |
string |
"localhost" |
no |
| helix_authentication_service_admin_password_secret_arn |
Optionally provide the ARN of an AWS Secret for the Helix Authentication Service Administrator password. |
string |
null |
no |
| helix_authentication_service_admin_username_secret_arn |
Optionally provide the ARN of an AWS Secret for the Helix Authentication Service Administrator username. |
string |
null |
no |
| helix_authentication_service_alb_access_logs_bucket |
ID of the S3 bucket for Helix Authentication Service ALB access log storage. If access logging is enabled and this is null the module creates a bucket. |
string |
null |
no |
| helix_authentication_service_alb_access_logs_prefix |
Log prefix for Helix Authentication Service ALB access logs. If null the project prefix and module name are used. |
string |
null |
no |
| helix_authentication_service_alb_subnets |
A list of subnets to deploy the Helix Authentication Service load balancer into. Public subnets are recommended. |
list(string) |
n/a |
yes |
| helix_authentication_service_cloudwatch_log_retention_in_days |
The log retention in days of the cloudwatch log group for Helix Authentication Service. |
string |
365 |
no |
| helix_authentication_service_subnets |
A list of subnets to deploy the Helix Authentication Service into. Private subnets are recommended. |
list(string) |
n/a |
yes |
| internal |
Set this flag to true if you do not want the Helix Authentication Service load balancer to have a public IP. |
bool |
false |
no |
| name |
The name attached to Helix Authentication Service module resources. |
string |
"helix-auth-svc" |
no |
| project_prefix |
The project prefix for this workload. This is appeneded to the beginning of most resource names. |
string |
"cgd" |
no |
| tags |
Tags to apply to resources. |
map(any) |
{
"iac-management": "CGD-Toolkit",
"iac-module": "helix-authentication-service",
"iac-provider": "Terraform"
} |
no |
| vpc_id |
The ID of the existing VPC you would like to deploy Helix Authentication Service into. |
string |
n/a |
yes |