forked from davinerd/tf_security_monkey
-
Notifications
You must be signed in to change notification settings - Fork 0
/
load_balancer.tf
43 lines (36 loc) · 1.32 KB
/
load_balancer.tf
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
#
# Load Balancer
#
resource "aws_alb" "security_monkey_alb" {
name = "${data.template_file.name.rendered}-alb"
internal = false
security_groups = ["${aws_security_group.security_monkey_alb_security_group.id}"]
subnets = ["${var.public_subnets}"]
enable_deletion_protection = false
access_logs {
bucket = "${module.s3_alb_log.bucket_name}"
enabled = true
}
tags = "${merge(map("Name", "${data.template_file.name.rendered}-alb"), var.extra_tags)}"
}
resource "aws_alb_target_group" "security_monkey_alb_target_group" {
name = "${data.template_file.name.rendered}"
port = 443
protocol = "HTTPS"
vpc_id = "${var.vpc_id}"
lifecycle {
create_before_destroy = true
}
tags = "${merge(map("Name", "${data.template_file.name.rendered}-target-group"), var.extra_tags)}"
}
resource "aws_alb_listener" "security_monkey_alb_listener" {
load_balancer_arn = "${aws_alb.security_monkey_alb.arn}"
port = "443"
protocol = "HTTPS"
ssl_policy = "ELBSecurityPolicy-TLS-1-2-2017-01"
certificate_arn = "${aws_acm_certificate_validation.cert.certificate_arn}"
default_action {
target_group_arn = "${aws_alb_target_group.security_monkey_alb_target_group.arn}"
type = "forward"
}
}