account.hcl 1.5 KB

1234567891011121314151617181920212223242526272829303132333435363738394041
  1. # Set account-wide variables. These are automatically pulled in to configure the remote state bucket in the root
  2. # terragrunt.hcl configuration.
  3. locals {
  4. account_name = "afs-mdr-test-c2"
  5. account_alias = "afs-mdr-test-c2"
  6. aws_account_id = "816914342178"
  7. instance_termination_protection = false # set to true for production!
  8. splunk_prefix = "moose"
  9. account_tags = {
  10. "Client" : local.splunk_prefix
  11. }
  12. c2_account_standards_path = "../../mdr-test-c2/005-account-standards-c2"
  13. # For CIDR assignment, see https://github.mdr.defpoint.com/mdr-engineering/msoc-infrastructure/wiki/IP-Address-Allocation
  14. vpc_info = {
  15. "vpc-system-services" = {
  16. "name" = "vpc-system-services",
  17. "purpose" = "Internal Services for Systems",
  18. "cidr" = "10.16.0.0/22",
  19. "tgw_attached" = false, # Attached via transit gateway creation
  20. }
  21. }
  22. # DNS Resolver
  23. resolver_instance_type = "t3a.micro"
  24. # AS Number used for various resources, but not every account needs one.
  25. asn = 64700
  26. security_vpc_cidr = "10.179.132.0/22"
  27. # Interconnects
  28. interconnect_asn = 64777
  29. interconnects_instance_type = "t3a.micro"
  30. interconnects_key_name = "fdamstra" # DO NOT CHANGE
  31. interconnects_count = 2
  32. interconnect_instances_path = "../../../aws-us-gov/mdr-test-c2/018-interconnect-instances"
  33. # Qualys Connector
  34. qualys_connector_externalid = "1606009953377" # Needs to come from the qualys console
  35. }