Module ec2

Modules

• ami
  The AMI resource allows the creation and management of a completely-custom Amazon Machine Image (AMI).
• ami_copy
  The “AMI copy” resource allows duplication of an Amazon Machine Image (AMI), including cross-region copies.
• ami_from_instance
  The “AMI from instance” resource allows the creation of an Amazon Machine Image (AMI) modeled after an existing EBS-backed EC2 instance.
• ami_launch_permission
  Adds a launch permission to an Amazon Machine Image (AMI).
• availability_zone_group
  Manages an EC2 Availability Zone Group, such as updating its opt-in status.
• capacity_block_reservation
  Provides an EC2 Capacity Block Reservation. This allows you to purchase capacity block for your Amazon EC2 instances in a specific Availability Zone for machine learning (ML) Workloads.
• capacity_reservation
  Provides an EC2 Capacity Reservation. This allows you to reserve capacity for your Amazon EC2 instances in a specific Availability Zone for any duration.
• carrier_gateway
  Manages an EC2 Carrier Gateway. See the AWS documentation for more information.
• customer_gateway
  Provides a customer gateway inside a VPC. These objects can be connected to VPN gateways via VPN connections, and allow you to establish tunnels between your network and the VPC.
• dedicated_host
  Provides an EC2 Host resource. This allows Dedicated Hosts to be allocated, modified, and released.
• default_network_acl
  Provides a resource to manage a VPC’s default network ACL. This resource can manage the default network ACL of the default or a non-default VPC.
• default_route_table
  Provides a resource to manage a default route table of a VPC. This resource can manage the default route table of the default or a non-default VPC.
• default_security_group
  Provides a resource to manage a default security group. This resource can manage the default security group of the default or a non-default VPC.
• default_subnet
  Provides a resource to manage a default subnet in the current region.
• default_vpc
  Provides a resource to manage the default AWS VPC in the current AWS Region.
• default_vpc_dhcp_options
  Provides a resource to manage the default AWS DHCP Options Set in the current region.
• egress_only_internet_gateway
  [IPv6 only] Creates an egress-only Internet gateway for your VPC. An egress-only Internet gateway is used to enable outbound communication over IPv6 from instances in your VPC to the Internet, and prevents hosts outside of your VPC from initiating an IPv6 connection with your instance.
• eip
  Provides an Elastic IP resource.
• eip_association
  Provides an AWS EIP Association as a top level resource, to associate and disassociate Elastic IPs from AWS Instances and Network Interfaces.
• eip_domain_name
  Assigns a static reverse DNS record to an Elastic IP addresses. See Using reverse DNS for email applications.
• fleet
  Provides a resource to manage EC2 Fleets.
• flow_log
  Provides a VPC/Subnet/ENI/Transit Gateway/Transit Gateway Attachment Flow Log to capture IP traffic for a specific network interface, subnet, or VPC. Logs are sent to a CloudWatch Log Group, a S3 Bucket, or Amazon Kinesis Data Firehose
• image_block_public_access
  Provides a regional public access block for AMIs. This prevents AMIs from being made publicly accessible. If you already have public AMIs, they will remain publicly available.
• instance
  Provides an EC2 instance resource. This allows instances to be created, updated, and deleted.
• instance_metadata_defaults
  Manages regional EC2 instance metadata default settings. More information can be found in the Configure instance metadata options for new instances user guide.
• internet_gateway
  Provides a resource to create a VPC Internet Gateway.
• internet_gateway_attachment
  Provides a resource to create a VPC Internet Gateway Attachment.
• key_pair
  Provides an EC2 key pair resource. A key pair is used to control login access to EC2 instances.
• launch_configuration
  Provides a resource to create a new launch configuration, used for autoscaling groups.
• launch_template
  Provides an EC2 launch template resource. Can be used to create instances or auto scaling groups.
• local_gateway_route
  Manages an EC2 Local Gateway Route. More information can be found in the Outposts User Guide.
• local_gateway_route_table_vpc_association
  Manages an EC2 Local Gateway Route Table VPC Association. More information can be found in the Outposts User Guide.
• main_route_table_association
  Provides a resource for managing the main routing table of a VPC.
• managed_prefix_list
  Provides a managed prefix list resource.
• managed_prefix_list_entry
  Use the aws_prefix_list_entry resource to manage a managed prefix list entry.
• nat_gateway
  Provides a resource to create a VPC NAT Gateway.
• network_acl
  Provides an network ACL resource. You might set up network ACLs with rules similar to your security groups in order to add an additional layer of security to your VPC.
• network_acl_association
  Provides an network ACL association resource which allows you to associate your network ACL with any subnet(s).
• network_acl_rule
  Creates an entry (a rule) in a network ACL with the specified rule number.
• network_insights_analysis
  Provides a Network Insights Analysis resource. Part of the “Reachability Analyzer” service in the AWS VPC console.
• network_insights_path
  Provides a Network Insights Path resource. Part of the “Reachability Analyzer” service in the AWS VPC console.
• network_interface
  Provides an Elastic network interface (ENI) resource.
• network_interface_attachment
  Attach an Elastic network interface (ENI) resource with EC2 instance.
• network_interface_security_group_attachment
  This resource attaches a security group to an Elastic Network Interface (ENI). It can be used to attach a security group to any existing ENI, be it a secondary ENI or one attached as the primary interface on an instance.
• peering_connection_options
  Provides a resource to manage VPC peering connection options.
• placement_group
  Provides an EC2 placement group. Read more about placement groups in AWS Docs.
• proxy_protocol_policy
  Provides a proxy protocol policy, which allows an ELB to carry a client connection information to a backend.
• route
  Provides a resource to create a routing table entry (a route) in a VPC routing table.
• route_table
  Provides a resource to create a VPC routing table.
• route_table_association
  Provides a resource to create an association between a route table and a subnet or a route table and an internet gateway or virtual private gateway.
• security_group
  Provides a security group resource.
• security_group_association
  Provides a resource to create an association between a VPC endpoint and a security group.
• security_group_rule
  Provides a security group rule resource. Represents a single ingress or egress group rule, which can be added to external Security Groups.
• serial_console_access
  Provides a resource to manage whether serial console access is enabled for your AWS account in the current AWS region.
• snapshot_create_volume_permission
  Adds permission to create volumes off of a given EBS Snapshot.
• spot_datafeed_subscription

  Note: There is only a single subscription allowed per account.

• spot_fleet_request
  Provides an EC2 Spot Fleet Request resource. This allows a fleet of Spot instances to be requested on the Spot market.
• spot_instance_request
  Provides an EC2 Spot Instance Request resource. This allows instances to be requested on the spot market.
• subnet
  Provides an VPC subnet resource.
• subnet_cidr_reservation
  Provides a subnet CIDR reservation resource.
• tag
  Manages an individual EC2 resource tag. This resource should only be used in cases where EC2 resources are created outside the provider (e.g. AMIs), being shared via Resource Access Manager (RAM), or implicitly created by other means (e.g. Transit Gateway VPN Attachments).
• traffic_mirror_filter
  Provides an Traffic mirror filter. Read limits and considerations for traffic mirroring
• traffic_mirror_filter_rule
  Provides an Traffic mirror filter rule. Read limits and considerations for traffic mirroring
• traffic_mirror_session
  Provides an Traffic mirror session. Read limits and considerations for traffic mirroring
• traffic_mirror_target
  Provides a Traffic mirror target. Read limits and considerations for traffic mirroring
• volume_attachment
  Provides an AWS EBS Volume Attachment as a top level resource, to attach and detach volumes from AWS Instances.
• vpc
  Provides a VPC resource.
• vpc_block_public_access_exclusion
  Resource for managing an AWS EC2 (Elastic Compute Cloud) VPC Block Public Access Exclusion.
• vpc_block_public_access_options
  Resource for managing an AWS VPC Block Public Access Options.
• vpc_dhcp_options
  Provides a VPC DHCP Options resource.
• vpc_dhcp_options_association
  Provides a VPC DHCP Options Association resource.
• vpc_endpoint
  Provides a VPC Endpoint resource.
• vpc_endpoint_connection_accepter
  Provides a resource to accept a pending VPC Endpoint Connection accept request to VPC Endpoint Service.
• vpc_endpoint_connection_notification
  Provides a VPC Endpoint connection notification resource. Connection notifications notify subscribers of VPC Endpoint events.
• vpc_endpoint_policy
  Provides a VPC Endpoint Policy resource.
• vpc_endpoint_route_table_association
  Manages a VPC Endpoint Route Table Association
• vpc_endpoint_service
  Provides a VPC Endpoint Service resource. Service consumers can create an Interface VPC Endpoint to connect to the service.
• vpc_endpoint_service_allowed_principle
  Provides a resource to allow a principal to discover a VPC endpoint service.
• vpc_endpoint_subnet_association
  Provides a resource to create an association between a VPC endpoint and a subnet.
• vpc_ipam
  Provides an IPAM resource.
• vpc_ipam_organization_admin_account
  Enables the IPAM Service and promotes a delegated administrator.
• vpc_ipam_pool
  Provides an IP address pool resource for IPAM.
• vpc_ipam_pool_cidr
  Provisions a CIDR from an IPAM address pool.
• vpc_ipam_pool_cidr_allocation
  Allocates (reserves) a CIDR from an IPAM address pool, preventing usage by IPAM. Only works for private IPv4.
• vpc_ipam_preview_next_cidr
  Previews a CIDR from an IPAM address pool. Only works for private IPv4.
• vpc_ipam_resource_discovery
  Provides an IPAM Resource Discovery resource. IPAM Resource Discoveries are resources meant for multi-organization customers. If you wish to use a single IPAM across multiple orgs, a resource discovery can be created and shared from a subordinate organization to the management organizations IPAM delegated admin account. For a full deployment example, see aws.ec2.VpcIpamResourceDiscoveryAssociation resource.
• vpc_ipam_resource_discovery_association
  Provides an association between an Amazon IP Address Manager (IPAM) and a IPAM Resource Discovery. IPAM Resource Discoveries are resources meant for multi-organization customers. If you wish to use a single IPAM across multiple orgs, a resource discovery can be created and shared from a subordinate organization to the management organizations IPAM delegated admin account.
• vpc_ipam_scope
  Creates a scope for AWS IPAM.
• vpc_ipv_4_cidr_block_association
  Provides a resource to associate additional IPv4 CIDR blocks with a VPC.
• vpc_ipv_6_cidr_block_association
  Provides a resource to associate additional IPv6 CIDR blocks with a VPC.
• vpc_network_performance_metric_subscription
  Provides a resource to manage an Infrastructure Performance subscription.
• vpc_peering_connection
  Provides a resource to manage a VPC peering connection.
• vpc_peering_connection_accepter
  Provides a resource to manage the accepter’s side of a VPC Peering Connection.
• vpn_connection
  Manages a Site-to-Site VPN connection. A Site-to-Site VPN connection is an Internet Protocol security (IPsec) VPN connection between a VPC and an on-premises network. Any new Site-to-Site VPN connection that you create is an AWS VPN connection.
• vpn_connection_route
  Provides a static route between a VPN connection and a customer gateway.
• vpn_gateway
  Provides a resource to create a VPC VPN Gateway.
• vpn_gateway_attachment
  Provides a Virtual Private Gateway attachment resource, allowing for an existing hardware VPN gateway to be attached and/or detached from a VPC.
• vpn_gateway_route_propagation
  Requests automatic route propagation between a VPN gateway and a route table.