1234567891011121314151617181920212223242526272829303132333435363738394041424344454647484950515253545556575859606162 |
- # Set account-wide variables. These are automatically pulled in to configure the remote state bucket in the root
- # terragrunt.hcl configuration.
- locals {
- account_name = "afs-mdr-test-c2-gov"
- account_alias = "afs-mdr-test-c2-gov"
- aws_account_id = "738800754746"
- instance_termination_protection = false # set to true for production!
-
- account_tags = { }
- c2_account_standards_path = "../../mdr-test-c2/005-account-standards-c2"
- # For CIDR assignment, see https://github.mdr.defpoint.com/mdr-engineering/msoc-infrastructure/wiki/IP-Address-Allocation
- vpc_info = {
- "vpc-system-services" = {
- "name" = "vpc-system-services",
- "purpose" = "Internal Services for Systems",
- "cidr" = "10.20.0.0/22",
- },
- "vpc-qualys" = {
- "name" = "vpc-qualys",
- "purpose" = "Security Scanning",
- "cidr" = "10.20.12.0/22",
- },
- "vpc-interconnects" = {
- "name" = "vpc-interconnects",
- "purpose" = "Interconnections between AWS partitions",
- "cidr" = "10.179.128.0/22",
- },
- }
- # DNS Resolver
- resolver_instance_type = "t3a.micro"
- resolver_instance_key_name = "fdamstra"
- # For testing
- create_test_instance = false
- test_instance_key_name = "fdamstra" # They with which to provision the test instance
- # Extra customization if you want it
- test_instance_ami = "base" # default = minion
- test_instance_type = "t3a.micro" # default = t3a.micro
- # AS Number used for various resources, but not every account needs one.
- asn = 64710 # changing this replaces the gateway
- security_vpc_cidr = "10.179.128.0/22"
- # Interconnects
- interconnect_asn = 64777
- interconnects_instance_type = "t3a.micro"
- interconnects_key_name = "fdamstra" # DO NOT CHANGE
- interconnects_count = 2
- interconnect_instances_path = "../018-interconnect-instances"
- # Qualys Scanners
- qualys_personalization_codes = {
- standard = "21009597903247"
- preauthorized = "21005906078774"
- }
- # Qualys Connector
- qualys_connector_externalid = "1601148045651" # Needs to come from the qualys console
- }
|