Extended aws_vpn_gateway use case.

main.tf

@@ -57,7 +57,6 @@ resource "aws_route_table" "public" {
   count = "${length(var.public_subnets) > 0 ? 1 : 0}"
 
   vpc_id           = "${aws_vpc.this.id}"
-  propagating_vgws = ["${var.public_propagating_vgws}"]
 
   tags = "${merge(var.tags, var.public_route_table_tags, map("Name", format("%s-public", var.name)))}"
 }
@@ -78,7 +77,6 @@ resource "aws_route_table" "private" {
   count = "${max(length(var.private_subnets), length(var.elasticache_subnets), length(var.database_subnets), length(var.redshift_subnets))}"
 
   vpc_id           = "${aws_vpc.this.id}"
-  propagating_vgws = ["${var.private_propagating_vgws}"]
 
   tags = "${merge(var.tags, var.private_route_table_tags, map("Name", format("%s-private-%s", var.name, element(var.azs, count.index))))}"
 
@@ -333,3 +331,24 @@ resource "aws_vpn_gateway" "this" {
 
   tags = "${merge(var.tags, map("Name", format("%s", var.name)))}"
 }
+
+resource "aws_vpn_gateway_attachment" "vgw" {
+  count = "${var.attach_vpn_gateway != "default" ? 1 : 0}"
+
+  vpc_id         = "${aws_vpc.this.id}"
+  vpn_gateway_id = "${var.attach_vpn_gateway}"
+}
+
+resource "aws_vpn_gateway_route_propagation" "public" {
+  count = "${var.public_propagating_vgws && var.enable_vpn_gateway || var.public_propagating_vgws && var.attach_vpn_gateway != "default " ? length(var.public_subnets) : 0}"
+
+  route_table_id = "${element(aws_route_table.public.*.id, count.index)}"
+  vpn_gateway_id = "${element(concat(aws_vpn_gateway.this.*.id, aws_vpn_gateway_attachment.vgw.*.vpn_gateway_id), count.index)}"
+}
+
+resource "aws_vpn_gateway_route_propagation" "private" {
+  count = "${var.private_propagating_vgws && var.enable_vpn_gateway || var.private_propagating_vgws && var.attach_vpn_gateway != "default" ? length(var.private_subnets) : 0}"
+
+  route_table_id = "${element(aws_route_table.private.*.id, count.index)}"
+  vpn_gateway_id = "${element(concat(aws_vpn_gateway.this.*.id, aws_vpn_gateway_attachment.vgw.*.vpn_gateway_id), count.index)}"
+}

outputs.tf

@@ -146,7 +146,7 @@ output "vpc_endpoint_dynamodb_id" {
 # VPN Gateway
 output "vgw_id" {
   description = "The ID of the VPN Gateway"
-  value       = "${element(concat(aws_vpn_gateway.this.*.id, list("")), 0)}"
+  value       = "${element(concat(aws_vpn_gateway.this.*.id, aws_vpn_gateway_attachment.vgw.*.vpn_gateway_id, list("")), 0)}"
 }
 
 output "vpc_endpoint_dynamodb_pl_id" {

variables.tf

@@ -102,14 +102,19 @@ variable "enable_vpn_gateway" {
   default     = false
 }
 
+variable "attach_vpn_gateway" {
+  description = "ID of VPN Gateway to attach to the VPC"
+  default     = "default"
+}
+
 variable "private_propagating_vgws" {
-  description = "A list of VGWs the private route table should propagate"
-  default     = []
+  description = "Should be true if you want route table propagation"
+  default     = false
 }
 
 variable "public_propagating_vgws" {
-  description = "A list of VGWs the public route table should propagate"
-  default     = []
+  description = "Should be true if you want route table propagation"
+  default     = false
 }
 
 variable "tags" {