config-baseline

config-baseline

Enable AWS Config in all regions to automatically take configuration snapshots.

Requirements

Name	Version
terraform	>= 0.13
aws	>= 3.50.0

Providers

Name	Version
aws	3.60.0

Modules

No modules.

Resources

Name	Type
aws_config_configuration_recorder.recorder	resource
aws_config_configuration_recorder_status.recorder	resource
aws_config_delivery_channel.bucket	resource
aws_sns_topic.config	resource
aws_sns_topic_policy.config	resource
aws_caller_identity.current	data source
aws_iam_policy_document.config-sns-policy	data source
aws_region.current	data source

Inputs

Name	Description	Type	Default	Required
delivery_channel_name	The name of the delivery channel.	string	"default"	no
delivery_frequency	The frequency which AWS Config sends a snapshot into the S3 bucket.	string	"One_Hour"	no
enabled	The boolean flag whether this module is enabled or not. No resources are created when set to false.	bool	true	no
iam_role_arn	The ARN of the IAM Role which AWS Config will use.	any	n/a	yes
include_global_resource_types	Specifies whether AWS Config includes all supported types of global resources with the resources that it records.	bool	true	no
recorder_name	The name of the configuration recorder.	string	"default"	no
s3_bucket_name	The name of the S3 bucket which will store configuration snapshots.	any	n/a	yes
s3_key_prefix	The prefix for the specified S3 bucket.	string	""	no
sns_topic_kms_master_key_id	To enable SNS Topic encryption enter value with the ID of a custom master KMS key that is used for encryption	any	null	no
sns_topic_name	The name of the SNS Topic to be used to notify configuration changes.	string	"ConfigChanges"	no
tags	Specifies object tags key and value. This applies to all resources created by this module.	map	{ "Terraform": true }	no

Outputs

Name	Description
config_sns_topic	The SNS topic that AWS Config delivers notifications to.
configuration_recorder	The configuration recorder.