Code

Add VPC endpoints#93

Code

Merged

jsf9k merged 23 commits intodevelopcisagov/cool-assessment-terraform:developfrom improvement/vpc-endpointscisagov/cool-assessment-terraform:improvement/vpc-endpointsCopy head branch name to clipboardJan 26, 2021

+646-49

Commits

Commits on Jan 21, 2021

• Remove NAT gateway and associated route

  jsf9k

  committed
  6b091f0

• Use a single route table for all private subnets

  Show description for a16b36a
  jsf9k

  committed
  a16b36a

• Add permissions for creating, modifying, and deleting VPC endpoints

  jsf9k

  committed
  da4cf75

• Add security groups for instances using VPC endpoints to access the STS and SSM services

  jsf9k

  committed
  6e68e6d

• Add VPC endpoints requires to use the STS, SSM, and S3 services

  jsf9k

  committed
  b1e39fa

• Add a route for S3 access via the S3 VPC gateway endpoint

  jsf9k

  committed
  1464d41

• Modify desktop gateway SG rules to use VPC endpoints

  Show description for 1941acd
  jsf9k

  committed
  1941acd

• Add some CloudWatch VPC interface endpoints

  Show description for f108ee6
  jsf9k

  committed
  f108ee6

• Allow operations subnet to use the VPC endpoints in private subnet

  Show description for 62be561
  jsf9k

  committed
  62be561

• Add a route so the operations subnet can use the S3 gateway endpoint

  Show description for d3ee217
  jsf9k

  committed
  d3ee217

• Revert "Remove NAT gateway and associated route"

  Show description for 597a541
  jsf9k

  committed
  597a541

• Add SG and ACL rules to allow guacamole to use the NAT GW for HTTPS

  Show description for a8ec8bb
  jsf9k

  committed
  a8ec8bb

Commits on Jan 22, 2021

• Improve some ACL rule comments

  jsf9k

  committed
  7095452

• Allow the operations subnet to use the STS VPC endpoint

  jsf9k

  committed
  24d3c09

• Specify the region name and region-specific endpoint URL for boto3 STS calls

  Show description for 6bc7a6a
  jsf9k

  committed
  6bc7a6a

• Specify the region name and region-specific endpoint URL for AWS CLI STS calls

  Show description for 864048c
  jsf9k

  committed
  864048c

• Consistently name AWS region variable

  Show description for 93fa57e
  jsf9k

  committed
  93fa57e

• Add issue link to a comment

  Show description for 5c087ea
  

  jsf9k

  and

  hillaryj

  authored
  5c087ea

• Update comment to agree with reality

  Show description for 5a40a3a
  

  jsf9k

  and

  dav3r

  committed
  5a40a3a

Commits on Jan 26, 2021

• Capitalize "Guacamole" and "Docker" in comments

  Show description for 02d26ca
  

  jsf9k

  and

  mcdonnnj

  authored
  02d26ca

• Add comments to clearly separate VPC interface and gateway endpoints

  Show description for 2d42f57
  

  jsf9k

  and

  mcdonnnj

  committed
  2d42f57

• Clean up comment formatting

  jsf9k

  committed
  9ad872d

• Reword comment for consistency with similar comments made elsewhere

  Show description for d9efdca
  

  jsf9k

  and

  mcdonnnj

  committed
  d9efdca