|
1 | 1 | resource "aws_s3_bucket" "logs" { |
2 | | - bucket = "${var.bucket}" |
| 2 | + bucket = var.bucket |
3 | 3 | acl = "private" |
4 | 4 | } |
5 | 5 |
|
|
24 | 24 | } |
25 | 25 |
|
26 | 26 | resource "aws_iam_policy" "firehose_delivery_policy" { |
27 | | - name = "firehose-delivery-policy" |
28 | | - path = "/" |
| 27 | + name = "firehose-delivery-policy" |
| 28 | + path = "/" |
29 | 29 | description = "Kinesis Firehose delivery policy" |
30 | 30 |
|
31 | 31 | policy = <<POLICY |
@@ -101,50 +101,50 @@ POLICY |
101 | 101 | } |
102 | 102 |
|
103 | 103 | resource "aws_iam_role_policy_attachment" "attach_delivery_policy" { |
104 | | - role = "${aws_iam_role.firehose_delivery_role.name}" |
105 | | - policy_arn = "${aws_iam_policy.firehose_delivery_policy.arn}" |
| 104 | + role = aws_iam_role.firehose_delivery_role.name |
| 105 | + policy_arn = aws_iam_policy.firehose_delivery_policy.arn |
106 | 106 | } |
107 | 107 |
|
108 | 108 | data "aws_iam_policy_document" "assume_kinesis_firehose" { |
109 | 109 | statement { |
110 | 110 | actions = ["sts:AssumeRole"] |
111 | 111 |
|
112 | | - principals = { |
| 112 | + principals { |
113 | 113 | type = "AWS" |
114 | | - identifiers = "${var.whitelisted_aws_account_arns}" |
| 114 | + identifiers = var.whitelisted_aws_account_arns |
115 | 115 | } |
116 | 116 | } |
117 | 117 | } |
118 | 118 |
|
119 | 119 | resource "aws_iam_role" "assume_kinesis_firehose" { |
120 | 120 | name = "KinesisFirehose" |
121 | | - assume_role_policy = "${data.aws_iam_policy_document.assume_kinesis_firehose.json}" |
| 121 | + assume_role_policy = data.aws_iam_policy_document.assume_kinesis_firehose.json |
122 | 122 | } |
123 | 123 |
|
124 | 124 | resource "aws_iam_role_policy_attachment" "attach_kinesis_firehose" { |
125 | | - role = "${aws_iam_role.assume_kinesis_firehose.name}" |
| 125 | + role = aws_iam_role.assume_kinesis_firehose.name |
126 | 126 | policy_arn = "arn:aws:iam::aws:policy/AmazonKinesisFirehoseFullAccess" |
127 | 127 | } |
128 | 128 |
|
129 | 129 | resource "aws_kinesis_firehose_delivery_stream" "cxcloud" { |
130 | | - name = "${var.stream_name}" |
| 130 | + name = var.stream_name |
131 | 131 | destination = "elasticsearch" |
132 | 132 |
|
133 | 133 | s3_configuration { |
134 | | - role_arn = "${aws_iam_role.firehose_delivery_role.arn}" |
135 | | - bucket_arn = "${aws_s3_bucket.logs.arn}" |
136 | | - buffer_size = "${var.s3_buffer_size}" |
137 | | - buffer_interval = "${var.s3_buffer_interval}" |
138 | | - compression_format = "${var.s3_compression_format}" |
| 134 | + role_arn = aws_iam_role.firehose_delivery_role.arn |
| 135 | + bucket_arn = aws_s3_bucket.logs.arn |
| 136 | + buffer_size = var.s3_buffer_size |
| 137 | + buffer_interval = var.s3_buffer_interval |
| 138 | + compression_format = var.s3_compression_format |
139 | 139 | } |
140 | 140 |
|
141 | 141 | elasticsearch_configuration { |
142 | | - domain_arn = "${var.es_arn}" |
143 | | - role_arn = "${aws_iam_role.firehose_delivery_role.arn}" |
144 | | - index_name = "${var.es_index_name}" |
145 | | - type_name = "${var.es_type_name}" |
146 | | - buffering_size = "${var.es_buffering_size}" |
147 | | - buffering_interval = "${var.es_buffering_interval}" |
148 | | - s3_backup_mode = "${var.s3_backup_mode}" |
| 142 | + domain_arn = var.es_arn |
| 143 | + role_arn = aws_iam_role.firehose_delivery_role.arn |
| 144 | + index_name = var.es_index_name |
| 145 | + type_name = var.es_type_name |
| 146 | + buffering_size = var.es_buffering_size |
| 147 | + buffering_interval = var.es_buffering_interval |
| 148 | + s3_backup_mode = var.s3_backup_mode |
149 | 149 | } |
150 | 150 | } |
0 commit comments