You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
| <aname="input_ip_allocations"></a> [ip\_allocations](#input\_ip\_allocations)| (Required) A list of IP allocations which include `subnet_id`and `ip`. `ip` is a private IP from `subnet`. | <pre>list(object({<br> subnet_id = string<br> ip = string<br> }))</pre> | n/a | yes |
42
+
| <aname="input_ip_allocations"></a> [ip\_allocations](#input\_ip\_allocations)| (Optional) The configuration for IP allocations of the Route53 Resolver Inbound Endpoint. Select at least two Availability Zone and one subnet for each zone. Each item of `ip_allocations` block as defined below.<br/> (Required) `subnet` - The ID of the subnet that contains the IP address. You can specify only one subnet per Availability Zone.<br/> (Optional) `ipv4_address` - IPv4 address from the provided subnet. Defaults to be randomly configured by Amazon.<br/> (Optional) `ipv6_address` - IPv6 address from the provided subnet. Defaults to be randomly configured by Amazon. | <pre>list(object({<br/> subnet = string<br/> ipv4_address = optional(string)<br/>ipv6_address = optional(string)<br/> }))</pre> | n/a | yes |
42
43
| <aname="input_name"></a> [name](#input\_name)| (Required) The name of the Route53 Resolver Inbound Endpoint. |`string`| n/a | yes |
43
-
| <aname="input_allowed_ingress_cidrs"></a> [allowed\_ingress\_cidrs](#input\_allowed\_ingress\_cidrs)| (Optional) A list of CIDR for Route53 Resolver Inbound Endpoint ingress access. |`list(string)`| <pre>[<br> "0.0.0.0/0"<br>]</pre> | no |
44
+
| <a name="input_default_security_group"></a> [default\_security\_group](#input\_default\_security\_group) | (Optional) The configuration of the default security group for the Route53 Resolver Inbound Endpoint. `default_security_group` block as defined below.<br/> (Optional) `enabled` - Whether to use the default security group. Defaults to `true`.<br/> (Optional) `name` - The name of the default security group. If not provided, the Route53 Resolver Inbound Endpoint name is used for the name of security group.<br/> (Optional) `description` - The description of the default security group.<br/> (Optional) `ingress_rules` - A list of ingress rules in a security group. Defaults to `[]`. Each block of `ingress_rules` as defined below.<br/> (Required) `id` - The ID of the ingress rule. This value is only used internally within Terraform code.<br/> (Optional) `description` - The description of the rule.<br/> (Required) `protocol` - The protocol to match. Note that if `protocol` is set to `-1`, it translates to all protocols, all port ranges, and `from_port` and `to_port` values should not be defined.<br/> (Required) `from_port` - The start of port range for the protocols.<br/> (Required) `to_port` - The end of port range for the protocols.<br/> (Optional) `ipv4_cidrs` - The IPv4 network ranges to allow, in CIDR notation.<br/> (Optional) `ipv6_cidrs` - The IPv6 network ranges to allow, in CIDR notation.<br/> (Optional) `prefix_lists` - The prefix list IDs to allow.<br/> (Optional) `security_groups` - The source security group IDs to allow.<br/> (Optional) `self` - Whether the security group itself will be added as a source to this ingress rule.<br/> (Optional) `egress_rules` - A list of egress rules in a security group. Defaults to `[]`. Each block of `egress_rules` as defined below.<br/> (Required) `id` - The ID of the egress rule. This value is only used internally within Terraform code.<br/> (Optional) `description` - The description of the rule.<br/> (Required) `protocol` - The protocol to match. Note that if `protocol` is set to `-1`, it translates to all protocols, all port ranges, and `from_port` and `to_port` values should not be defined.<br/> (Required) `from_port` - The start of port range for the protocols.<br/> (Required) `to_port` - The end of port range for the protocols.<br/> (Optional) `ipv4_cidrs` - The IPv4 network ranges to allow, in CIDR notation.<br/> (Optional) `ipv6_cidrs` - The IPv6 network ranges to allow, in CIDR notation.<br/> (Optional) `prefix_lists` - The prefix list IDs to allow.<br/> (Optional) `security_groups` - The source security group IDs to allow.<br/> (Optional) `self` - Whether the security group itself will be added as a source to this ingress rule.<br/> (Optional) `ingress_ipv4_cidrs` - A list of IPv4 CIDR ranges to allow to query to the endpoint. Defaults to `[]`."<br/> (Optional) `istener_ingress_ipv6_cidrs` - A list of IPv6 CIDR ranges to allow to query to the endpoint. Defaults to `[]`."<br/> (Optional) `ingress_prefix_lists` - A list of prefix list IDs for AWS services to allow to query to the endpoint. Defaults to `[]`."<br/> (Optional) `ingress_security_groups` - A list of security group IDs to allow to query to the endpoint. Defaults to `[]`." | <pre>object({<br/> enabled = optional(bool, true)<br/> name = optional(string)<br/> description = optional(string, "Managed by Terraform.")<br/> ingress_rules = optional(<br/> list(object({<br/> id = string<br/> description = optional(string, "Managed by Terraform.")<br/> protocol = string<br/> from_port = number<br/> to_port = number<br/> ipv4_cidrs = optional(list(string), [])<br/> ipv6_cidrs = optional(list(string), [])<br/> prefix_lists = optional(list(string), [])<br/> security_groups = optional(list(string), [])<br/> self = optional(bool, false)<br/> })),<br/> []<br/> )<br/> egress_rules = optional(<br/> list(object({<br/> id = string<br/> description = optional(string, "Managed by Terraform.")<br/> protocol = string<br/> from_port = number<br/> to_port = number<br/> ipv4_cidrs = optional(list(string), [])<br/> ipv6_cidrs = optional(list(string), [])<br/> prefix_lists = optional(list(string), [])<br/> security_groups = optional(list(string), [])<br/> self = optional(bool, false)<br/> })),<br/> []<br/> )<br/> ingress_ipv4_cidrs = optional(list(string), [])<br/> ingress_ipv6_cidrs = optional(list(string), [])<br/> ingress_prefix_lists = optional(list(string), [])<br/> ingress_security_groups = optional(list(string), [])<br/> })</pre> | `{}` | no |
45
+
| <aname="input_ip_address_type"></a> [ip\_address\_type](#input\_ip\_address\_type)| (Optional) The type of IP addresses used by the Route53 Resolver Inbound Endpoint. Valid values are `IPV4`, `IPV6`, `DUALSTACK`. Defaults to `IPV4`. |`string`|`"IPV4"`| no |
44
46
| <aname="input_module_tags_enabled"></a> [module\_tags\_enabled](#input\_module\_tags\_enabled)| (Optional) Whether to create AWS Resource Tags for the module informations. |`bool`|`true`| no |
47
+
| <a name="input_protocols"></a> [protocols](#input\_protocols) | (Optional) A set of protocols to use for the Route53 Resolver Inbound Endpoint. The protocols determine how data is transmitted to this endpoint. Valid values are `DoH`, `Do53`, or `DoH-FIPS`. Defaults to `["Do53"]`.<br/> `Do53`: DNS over port 53. The data is relayed by using the Route 53 Resolver without additional encryption. While the data cannot be read by external parties, it can be viewed within the AWS networks. Uses either UDP or TCP to send the packets. Do53 is primarily used for traffic within and between Amazon VPCs.<br/> `DoH`: The data is transmitted over an encrypted HTTPS session. DoH adds an added level of security where data can't be decrypted by unauthorized users, and cannot be read by anyone except the intended recipient.<br/> `DoH-FIPS`: The data is transmitted over an encrypted HTTPS session that is compliant with the FIPS 140-2 cryptographic standard. Supported for inbound endpoints only. For more information, see FIPS PUB 140-2 | `set(string)` | <pre>[<br/> "Do53"<br/>]</pre> | no |
45
48
| <aname="input_resource_group_description"></a> [resource\_group\_description](#input\_resource\_group\_description)| (Optional) The description of Resource Group. |`string`|`"Managed by Terraform."`| no |
46
49
| <aname="input_resource_group_enabled"></a> [resource\_group\_enabled](#input\_resource\_group\_enabled)| (Optional) Whether to create Resource Group to find and group AWS resources which are created by this module. |`bool`|`true`| no |
47
50
| <aname="input_resource_group_name"></a> [resource\_group\_name](#input\_resource\_group\_name)| (Optional) The name of Resource Group. A Resource Group name can have a maximum of 127 characters, including letters, numbers, hyphens, dots, and underscores. The name cannot start with `AWS` or `aws`. |`string`|`""`| no |
48
-
| <aname="input_security_groups"></a> [security\_groups](#input\_security\_groups)| (Optional) A list of security groups for Route53 Resolver Inbound Endpoint. |`list(string)`|`[]`| no |
51
+
| <aname="input_security_groups"></a> [security\_groups](#input\_security\_groups)| (Optional) A list of security group IDs to assign to the Route53 Resolver Inbound Endpoint. |`list(string)`|`[]`| no |
49
52
| <aname="input_tags"></a> [tags](#input\_tags)| (Optional) A map of tags to add to all resources. |`map(string)`|`{}`| no |
50
53
51
54
## Outputs
52
55
53
56
| Name | Description |
54
57
|------|-------------|
55
-
| <aname="output_arn"></a> [arn](#output\_arn)| The ARN of the Route 53 Resolver Endpoint. |
56
-
| <aname="output_id"></a> [id](#output\_id)| The ID of the Route 53 Resolver Endpoint. |
57
-
| <aname="output_ip_addresses"></a> [ip\_addresses](#output\_ip\_addresses)| IP addresses in your VPC that you want DNS queries to pass through on the way from your network to your VPCs. |
58
-
| <aname="output_name"></a> [name](#output\_name)| The name of the Route 53 Resolver Endpoint. |
59
-
| <aname="output_security_group_ids"></a> [security\_group\_ids](#output\_security\_group\_ids)| A list of the ID of security groups that you want to use to control access to this VPC. |
60
-
| <aname="output_subnet_ids"></a> [subnet\_ids](#output\_subnet\_ids)| A list of the ID of subnets that IP addresses of resolver endpoint are allocated in. |
58
+
| <aname="output_arn"></a> [arn](#output\_arn)| The ARN of the Route53 Resolver Endpoint. |
59
+
| <aname="output_default_security_group"></a> [default\_security\_group](#output\_default\_security\_group)| The default security group ID of the Route53 Resolver Endpoint. |
60
+
| <aname="output_direction"></a> [direction](#output\_direction)| The direction of DNS queries to or from the Route 53 Resolver endpoint. |
61
+
| <aname="output_id"></a> [id](#output\_id)| The ID of the Route53 Resolver Endpoint. |
62
+
| <aname="output_ip_address_type"></a> [ip\_address\_type](#output\_ip\_address\_type)| The type of IP addresses used by the Route53 Resolver Inbound Endpoint. |
63
+
| <aname="output_ip_allocations"></a> [ip\_allocations](#output\_ip\_allocations)| The configuration for IP allocations of the Route53 Resolver Inbound Endpoint. |
64
+
| <aname="output_ipv4_addresses"></a> [ipv4\_addresses](#output\_ipv4\_addresses)| A set of IPv4 addresses in your VPC that you want DNS queries to pass through on the way from your network to your VPCs. |
65
+
| <aname="output_ipv6_addresses"></a> [ipv6\_addresses](#output\_ipv6\_addresses)| A set of IPv6 addresses in your VPC that you want DNS queries to pass through on the way from your network to your VPCs. |
66
+
| <aname="output_name"></a> [name](#output\_name)| The name of the Route53 Resolver Endpoint. |
67
+
| <aname="output_protocols"></a> [protocols](#output\_protocols)| A set of protocols to use for the Route53 Resolver Inbound Endpoint. |
68
+
| <aname="output_security_groups"></a> [security\_groups](#output\_security\_groups)| A set of security group IDs which is assigned to the Route53 Resolver Endpoint. |
69
+
| <aname="output_subnets"></a> [subnets](#output\_subnets)| A set of the ID of subnets that IP addresses of resolver endpoint are allocated in. |
61
70
| <aname="output_vpc_id"></a> [vpc\_id](#output\_vpc\_id)| The ID of the VPC that you want to create the resolver endpoint in. |
0 commit comments