Crosszone Failover Module for AWS
A Terraform module for deploying a Crosszone Failover for VM-Series firewalls.
Reference
Requirements
| Name | Version |
|---|---|
| terraform | >= 1.5.0, < 2.0.0 |
| aws | ~> 5.17 |
Providers
| Name | Version |
|---|---|
| aws | ~> 5.17 |
Modules
No modules.
Resources
| Name | Type |
|---|---|
| aws_api_gateway_deployment.pan_failover | resource |
| aws_api_gateway_integration.pan_failover | resource |
| aws_api_gateway_integration_response.pan_failover | resource |
| aws_api_gateway_method.pan_failover | resource |
| aws_api_gateway_method_response.pan_failover | resource |
| aws_api_gateway_resource.pan_failover | resource |
| aws_api_gateway_rest_api.pan_failover | resource |
| aws_iam_role.lambda_exec | resource |
| aws_iam_role_policy.lambda_exec | resource |
| aws_iam_role_policy_attachment.test_attach | resource |
| aws_lambda_function.rt_failover | resource |
| aws_lambda_permission.apigw | resource |
| aws_s3_bucket.this | resource |
| aws_s3_bucket_public_access_block.this | resource |
| aws_s3_bucket_server_side_encryption_configuration.example | resource |
| aws_s3_bucket_versioning.this | resource |
| aws_s3_object.this | resource |
| aws_vpc_endpoint.api | resource |
| aws_caller_identity.current | data source |
| aws_caller_identity.this | data source |
| aws_partition.this | data source |
Inputs
| Name | Description | Type | Default | Required |
|---|---|---|---|---|
| lambda_file_location | Name of folder where lambda package is stored in this workspace. | string | "lambda-package" | no |
| lambda_file_name | File name of lambda package. | string | "crosszone_ha_instance_id.zip" | no |
| lambda_s3_bucket | Name of bucket with lambda zip package to deploy. | string | "" | no |
| prefix_name_tag | Prefix used to build name tags for resources. | string | "" | no |
| region | AWS Region. | any | n/a | yes |
| reserved_concurrent_executions | Amount of reserved concurrent execussions for lambda function. | number | 100 | no |
| sg_state | Exported state from base infra workspace to make SG names to IDs. | any | n/a | yes |
| subnet_state | Exported state from base VPC workspace to map resource names to IDs. | any | n/a | yes |
| tags | Map of additional tags to apply to all resources. | map(any) | {} | no |
| vpc_id | VPC ID. | any | n/a | yes |
Outputs
No outputs.