You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: README.md
+5-1Lines changed: 5 additions & 1 deletion
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -78,9 +78,11 @@ module "ecs_apps" {
78
78
| alb\_internal | Deploys a second internal ALB for private APIs. |`bool`|`false`| no |
79
79
| alb\_internal\_ssl\_policy | The name of the SSL Policy for the listener. Required if protocol is HTTPS or TLS. |`string`|`"ELBSecurityPolicy-TLS-1-2-Ext-2018-06"`| no |
80
80
| alb\_only | Whether to deploy only an alb and no cloudFront or not with the cluster. |`bool`|`false`| no |
81
+
| alb\_sg\_allow\_egress\_https\_world | Whether to allow ALB to access HTTPS endpoints - needed when using OIDC authentication |`bool`|`true`| no |
81
82
| alb\_sg\_allow\_test\_listener | Whether to allow world access to the test listeners |`bool`|`true`| no |
82
83
| alb\_ssl\_policy | The name of the SSL Policy for the listener. Required if protocol is HTTPS or TLS. |`string`|`"ELBSecurityPolicy-2016-08"`| no |
83
84
| architecture | Architecture to select the AMI, x86\_64 or arm64 |`string`|`"x86_64"`| no |
85
+
| asg\_capacity\_rebalance | Indicates whether capacity rebalance is enabled |`bool`|`false`| no |
84
86
| asg\_max | Max number of instances for autoscaling group. |`number`|`4`| no |
85
87
| asg\_min | Min number of instances for autoscaling group. |`number`|`1`| no |
86
88
| asg\_protect\_from\_scale\_in | (Optional) Allows setting instance protection. The autoscaling group will not select instances with this setting for termination during scale in events. |`bool`|`false`| no |
@@ -119,7 +121,9 @@ module "ecs_apps" {
119
121
| vpc\_id | VPC ID to deploy the ECS cluster. |`any`| n/a | yes |
120
122
| vpn\_cidr | Cidr of VPN to grant ssh access to ECS nodes |`list`| <pre>[<br> "10.37.0.0/16"<br>]</pre> | no |
121
123
| wafv2\_enable | Deploys WAF V2 with Managed rule groups |`bool`|`false`| no |
122
-
| wafv2\_managed\_rule\_groups | List of WAF V2 managed rule groups |`list(string)`| <pre>[<br> "AWSManagedRulesCommonRuleSet"<br>]</pre> | no |
124
+
| wafv2\_managed\_block\_rule\_groups | List of WAF V2 managed rule groups, set to block |`list(string)`|`[]`| no |
125
+
| wafv2\_managed\_rule\_groups | List of WAF V2 managed rule groups, set to count |`list(string)`| <pre>[<br> "AWSManagedRulesCommonRuleSet"<br>]</pre> | no |
126
+
| wafv2\_rate\_limit\_rule | The limit on requests per 5-minute period for a single originating IP address (leave 0 to disable) |`number`|`0`| no |
0 commit comments