teleport/examples/aws/terraform/data.tf

37 lines
885 B
HCL

// Base AMI is found by name, users can (and should) supply own AMIs
// the only requirement is systemd installed as all scripts
// are relying on systemd
data "aws_ami" "base" {
most_recent = true
owners = [126027368216]
filter {
name = "name"
values = [var.ami_name]
}
}
// This is to figure account_id used in some IAM rules
data "aws_caller_identity" "current" {
}
// Use current region of the credentials in some parts of the script,
// could be as well hardcoded.
data "aws_region" "current" {
name = var.region
}
data "aws_availability_zones" "available" {
}
// Pick first two availability zones in the region
locals {
azs = [data.aws_availability_zones.available.names[0], data.aws_availability_zones.available.names[1]]
}
// SSM is picking alias for key to use for encryption in SSM
data "aws_kms_alias" "ssm" {
name = var.kms_alias_name
}