| acm_certificate_tags |
(Optional, Default:{}) Map of Resources Tags to attach to the resource. |
map(string) |
{} |
no |
| acm_grafana_domain_name |
(Required) Grafana domain name for which the certificate should be issued. |
string |
n/a |
yes |
| acm_record_zone_id |
(Required) Canonical hosted zone ID of the Load Balancer. |
string |
n/a |
yes |
| alb_listener_tags |
(Optional, Default:{}) Map of Resources Tags to attach to the resource. |
map(string) |
{} |
no |
| alb_name |
(Optional, Default:"grafana-alb") Name of the LB. |
string |
"grafana-alb" |
no |
| alb_subnet_ids |
(Required) List of public VPC subnet IDs where the Application Load Balancer will be configured. |
list(string) |
n/a |
yes |
| alb_tags |
(Optional, Default:{}) Map of Resources Tags to attach to the resource. |
map(string) |
{} |
no |
| alb_target_group_name |
(Optional, Default:"grafana-services", Forces new resource) Name of the target group. |
string |
"grafana-services" |
no |
| alb_target_group_tags |
(Optional, Default:{}) Map of Resources Tags to attach to the resource. |
map(string) |
{} |
no |
| cluster_name |
(Required) Name of the cluster. |
string |
n/a |
yes |
| grafana_execution_role_description |
(Optional, Default:"Managed By Terraform") Description of the IAM role for Grafana task execution. |
string |
"Managed By Terraform" |
no |
| grafana_execution_role_name |
(Optional, Default:"grafana-task-execution-iam-role", Forces new resource) Friendly name of the IAM role for Grafana task execution. |
string |
"grafana-task-execution-iam-role" |
no |
| grafana_execution_role_policies |
(Optional, Default:secrets-manager) Map of IAM policies to create and attach to the Grafana Execution IAM Role. |
map(
object({
name = string
description = optional(string, null)
policy = object({
Version = optional(string, "2012-10-17")
Statement = list(
object({
Sid = optional(string)
Effect = string
Resource = string
Action = optional(list(string), [])
})
)
})
tags = optional(map(string), {})
})
) |
{
"secrets-manager": {
"description": "Allow access to Secrets Manager",
"name": "grafana-execution-role-secrets-manager",
"policy": {
"Statement": [
{
"Action": [
"secretsmanager:"
],
"Effect": "Allow",
"Resource": "",
"Sid": "AllowSecretsManagerFullAccess"
}
]
}
}
} |
no |
| grafana_execution_role_tags |
(Optional, Default:{}) Map of Resources Tags to attach to the resource. |
map(string) |
{} |
no |
| grafana_task_role_description |
(Optional, Default:"Managed By Terraform") Description of the IAM role for Grafana tasks. |
string |
"Managed By Terraform" |
no |
| grafana_task_role_name |
(Optional, Default:"grafana-task-iam-role", Forces new resource) Friendly name of the IAM role for Grafana tasks. |
string |
"grafana-task-iam-role" |
no |
| grafana_task_role_policies |
(Optional, Default:rds,athena) Map of IAM policies to create and attach to the Grafana IAM Role. |
map(
object({
name = string
description = optional(string, null)
policy = object({
Version = optional(string, "2012-10-17")
Statement = list(
object({
Sid = optional(string)
Effect = string
Resource = string
Action = optional(list(string), [])
})
)
})
tags = optional(map(string), {})
})
) |
{
"athena": {
"description": "Allow access to Athena",
"name": "grafana-task-iam-role-athena",
"policy": {
"Statement": [
{
"Action": [
"athena:"
],
"Effect": "Allow",
"Resource": "",
"Sid": "AllowAthenaFullAccess"
},
{
"Action": [
"glue:CreateDatabase",
"glue:DeleteDatabase",
"glue:GetDatabase",
"glue:GetDatabases",
"glue:UpdateDatabase",
"glue:CreateTable",
"glue:DeleteTable",
"glue:BatchDeleteTable",
"glue:UpdateTable",
"glue:GetTable",
"glue:GetTables",
"glue:BatchCreatePartition",
"glue:CreatePartition",
"glue:DeletePartition",
"glue:BatchDeletePartition",
"glue:UpdatePartition",
"glue:GetPartition",
"glue:GetPartitions",
"glue:BatchGetPartition",
"glue:StartColumnStatisticsTaskRun",
"glue:GetColumnStatisticsTaskRun",
"glue:GetColumnStatisticsTaskRuns",
"glue:GetCatalogImportStatus"
],
"Effect": "Allow",
"Resource": "",
"Sid": "AllowGlueFullAccess"
}
]
}
},
"rds": {
"description": "Allow access to RDS",
"name": "grafana-task-iam-role-rds",
"policy": {
"Statement": [
{
"Action": [
"rds:"
],
"Effect": "Allow",
"Resource": "*",
"Sid": "AllowRDSFullAccess"
}
]
}
}
} |
no |
| grafana_task_role_tags |
(Optional, Default:{}) Map of Resources Tags to attach to the resource. |
map(string) |
{} |
no |
| rds_allocated_storage |
(Optional, Default:10) The allocated storage in gibibytes. |
number |
10 |
no |
| rds_db_parameter_group_description |
(Optional, Default:"Managed By Terraform", Forces new resource) The description of the DB parameter group. |
string |
"Managed By Terraform" |
no |
| rds_db_parameter_group_family |
(Optional, Default:"postgres16", Forces new resource) The description of the DB parameter group. |
string |
"postgres16" |
no |
| rds_db_parameter_group_name |
(Optional, Default:"grafana-rds-parameter-group", Forces new resource) The name of the DB parameter group. |
string |
"grafana-rds-parameter-group" |
no |
| rds_db_parameter_group_parameters |
(Optional) The DB parameters to apply. |
list(
object({
name = string
value = string
apply_method = optional(string)
})
) |
[
{
"apply_method": "immediate",
"name": "rds.force_ssl",
"value": "0"
}
] |
no |
| rds_db_parameter_group_tags |
(Optional, Default:{}) Map of Resources Tags to attach to the resource. |
map(string) |
{} |
no |
| rds_db_subnet_group_description |
(Optional, Default:"Managed By Terraform", Forces new resource) The description of the DB subnet group. |
string |
"Managed By Terraform" |
no |
| rds_db_subnet_group_name |
(Optional, Default:"grafana-rds-subnet-group", Forces new resource) The name of the DB subnet group. |
string |
"grafana-rds-subnet-group" |
no |
| rds_db_subnet_group_subnet_ids |
(Required) A list of VPC subnet IDs. |
list(string) |
n/a |
yes |
| rds_db_subnet_group_tags |
(Optional, Default:{}) Map of Resources Tags to attach to the resource. |
map(string) |
{} |
no |
| rds_identifier |
(Optional, Default:"grafana-backend") The name of the Postgres RDS instance. |
string |
"grafana-backend" |
no |
| rds_instance_class |
(Optional, Default:"db.t3.micro") The instance type of the Postgres RDS instance. |
string |
"db.t3.micro" |
no |
| rds_postgres_engine_version |
(Optional, Default:"16.3") The Postgres engine version to use. |
string |
"16.3" |
no |
| rds_tags |
(Optional, Default:{}) Map of Resources Tags to attach to the resource. |
map(string) |
{} |
no |
| rds_username |
(Optional, Default:"grafana_admin") Username for the master DB user. |
string |
"grafana_admin" |
no |
| s3_bucket_name |
(Optional, Default:"grafana-services-alb-logs", Forces new resource) Name of the bucket where the Grafana ALB logs will be stored. |
string |
"grafana-services-alb-logs" |
no |
| s3_bucket_tags |
(Optional, Default:{}) Map of Resources Tags to attach to the resource. |
map(string) |
{} |
no |
| service_desired_count |
(Optional, Default:3) Desired number of tasks to run in the ECS Service. |
number |
3 |
no |
| service_name |
(Optional, Default:grafana) Name of the ECS Service. |
string |
"grafana" |
no |
| service_subnet_ids |
(Required) List of VPC subnet IDs where the infrastructure will be configured. |
list(string) |
n/a |
yes |
| service_tags |
(Optional, Default:{}) Map of Resources Tags to attach to the resource. |
map(string) |
{} |
no |
| task_definition_family |
(Optional, Default:"grafana") A unique name for your task definition. |
string |
"grafana" |
no |
| task_definition_grafana_image_version |
(Optional, Default:11.1.2) Version tag to use with the Grafana docker image. |
string |
"11.1.2" |
no |
| task_definition_tags |
(Optional, Default:{}) Map of Resources Tags to attach to the resource. |
map(string) |
{} |
no |
| vpc_id |
(Required) The ID of the VPC. |
string |
n/a |
yes |
