account.hcl 1.7 KB

12345678910111213141516171819202122232425262728293031323334353637383940414243444546474849505152
  1. # Set account-wide variables. These are automatically pulled in to configure the remote state bucket in the root
  2. # terragrunt.hcl configuration.
  3. locals {
  4. account_name = "afs-mdr-test-c2-gov"
  5. account_alias = "afs-mdr-test-c2-gov"
  6. aws_account_id = "738800754746"
  7. instance_termination_protection = false # set to true for production!
  8. account_tags = { }
  9. c2_account_standards_path = "../../mdr-test-c2/005-account-standards-c2"
  10. # For CIDR assignment, see https://github.mdr.defpoint.com/mdr-engineering/msoc-infrastructure/wiki/IP-Address-Allocation
  11. standard_vpc_cidr = "10.20.0.0/22"
  12. vpc_cidrs = {
  13. "standard_vpc" = "10.20.0.0/22",
  14. "qualys_vpc" = "10.20.12.0/22",
  15. "security_vpc" = "10.179.128.0/22"
  16. }
  17. # DNS Resolver
  18. resolver_instance_type = "t3a.micro"
  19. resolver_instance_key_name = "fdamstra"
  20. # For testing
  21. create_test_instance = false
  22. test_instance_key_name = "fdamstra" # They with which to provision the test instance
  23. # Extra customization if you want it
  24. test_instance_ami = "base" # default = minion
  25. test_instance_type = "t3a.micro" # default = t3a.micro
  26. # AS Number used for various resources, but not every account needs one.
  27. asn = 64710 # changing this replaces the gateway
  28. security_vpc_cidr = "10.179.128.0/22"
  29. # Interconnects
  30. interconnect_asn = 64777
  31. interconnects_instance_type = "t3a.micro"
  32. interconnects_key_name = "fdamstra" # DO NOT CHANGE
  33. interconnects_count = 2
  34. interconnect_instances_path = "../018-interconnect-instances"
  35. # Qualys Scanners
  36. qualys_personalization_codes = {
  37. standard = "21009597903247"
  38. preauthorized = "21005906078774"
  39. }
  40. # Qualys Connector
  41. qualys_connector_externalid = "1601148045651" # Needs to come from the qualys console
  42. }