account.hcl 1.7 KB

1234567891011121314151617181920212223242526272829303132333435363738394041424344454647484950515253
  1. # Set account-wide variables. These are automatically pulled in to configure the remote state bucket in the root
  2. # terragrunt.hcl configuration.
  3. locals {
  4. account_name = "afs-mdr-prod-c2"
  5. account_alias = "afs-mdr-prod-c2"
  6. aws_account_id = "045312110490"
  7. instance_termination_protection = true # set to true for production!
  8. account_tags = { }
  9. c2_account_standards_path = "../../mdr-prod-c2/005-account-standards-c2"
  10. # For CIDR assignment, see https://github.mdr.defpoint.com/mdr-engineering/msoc-infrastructure/wiki/IP-Address-Allocation
  11. vpc_info = {
  12. "vpc-system-services" = {
  13. "name" = "vpc-system-services",
  14. "purpose" = "Internal Services for Systems",
  15. "cidr" = "10.32.0.0/22",
  16. "tgw_attached" = false, # Attached via tgw creation
  17. },
  18. "vpc-qualys" = {
  19. "name" = "vpc-qualys",
  20. "purpose" = "Security Scanning",
  21. "cidr" = "10.32.12.0/22",
  22. "tgw_attached" = true,
  23. },
  24. "vpc-security" = {
  25. "name" = "vpc-interconnects",
  26. "purpose" = "Interconnections between AWS partitions",
  27. "cidr" = "10.179.4.0/22",
  28. "tgw_attached" = true,
  29. }
  30. }
  31. # DNS Resolver
  32. resolver_instance_type = "t3a.micro"
  33. resolver_instance_key_name = "fdamstra"
  34. # For testing
  35. create_test_instance = false
  36. test_instance_key_name = "fdamstra" # They with which to provision the test instance
  37. # AS Number used for various resources, but not every account needs one.
  38. asn = 64800
  39. security_vpc_cidr = "10.179.4.0/22"
  40. # Interconnects
  41. interconnect_asn = 64888
  42. interconnects_instance_type = "t3a.micro"
  43. interconnects_key_name = "fdamstra" # DO NOT CHANGE
  44. interconnects_count = 2
  45. interconnect_instances_path = "../../../aws-us-gov/mdr-prod-c2/018-interconnect-instances"
  46. }