README.md

terraform-aws-tardigrade-inspector

Testing

At the moment, testing is manual:

# Replace "xxx" with an actual AWS profile, then execute the integration tests.
export AWS_PROFILE=xxx 
make terraform/pytest PYTEST_ARGS="-v --nomock"

Requirements

Name	Version
terraform	>= 0.12

Providers

Name	Version
aws	n/a
random	n/a

Resources

Name	Type
aws_iam_policy_document.assume_role	data source
aws_iam_policy_document.start_inspector	data source
aws_inspector_rules_packages.this	data source

Inputs

Name	Description	Type	Default	Required
name	String to prefix resource names with	string	n/a	yes
duration	Maximum time the Inspector assessment will run for (in seconds)	string	"3600"	no
event_pattern	JSON object describing an event to capture. Required if not setting a schedule. See AWS documentation for more details - https://docs.aws.amazon.com/AmazonCloudWatch/latest/events/CloudWatchEventsandEventPatterns.html	string	null	no
iam_role_arn	Controls whether to create the Inspector role	any	null	no
schedule	Rate expression for CloudWatch event. Required if not setting an event_pattern	string	null	no
tags	Map of tags to apply to the resources	map(string)	{}	no

Outputs

Name	Description
assessment_target_arn	Assessment target ARN
assessment_template_arn	Assessment template ARN