AWS Amazon EC2 Transit Gateway VPC Attachment Accepter

aws_ec2_transit_gateway_vpc_attachment_accepter (Terraform)

The Transit Gateway VPC Attachment Accepter in Amazon EC2 can be configured in Terraform with the resource name aws_ec2_transit_gateway_vpc_attachment_accepter. The following sections describe 5 examples of how to use the resource and its parameters.

Example Usage from GitHub

Graham-M/terraform-transit-gw-example

resource "aws_ec2_transit_gateway_vpc_attachment_accepter" "vpc1" {
  provider                      = aws.apptest0
  transit_gateway_attachment_id = module.vpc1.tgw_attachment_id.0
}

#resource "aws_ram_resource_share_accepter" "accept_apptest1" {

nationalarchives/ds-tf-tgw

resource "aws_ec2_transit_gateway_vpc_attachment_accepter" "accept_tgw_attachment_in_intersite" {
  provider                      = aws.intersite
  transit_gateway_attachment_id = aws_ec2_transit_gateway_vpc_attachment.transit_gateway_attachment.id

  tags = {
    Name        = var.name

ucopacme/terraform-modules

resource "aws_ec2_transit_gateway_vpc_attachment_accepter" "this" {
  count                                           = local.enabled ? 1 : 0
  tags                                            = merge(var.tags, map("Name", var.name))
  transit_gateway_attachment_id                   = var.transit_gateway_attachment_id
  transit_gateway_default_route_table_association = var.transit_gateway_default_route_table_association
  transit_gateway_default_route_table_propagation = var.transit_gateway_default_route_table_propagation

ucopacme/terraform-aws-standard-vpc

resource "aws_ec2_transit_gateway_vpc_attachment_accepter" "this" {
  count                                           = var.enabled ? 1 : 0
  tags                                            = merge(var.tags, map("Name", var.name))
  transit_gateway_attachment_id                   = var.transit_gateway_attachment_id
  transit_gateway_default_route_table_association = var.transit_gateway_default_route_table_association
  transit_gateway_default_route_table_propagation = var.transit_gateway_default_route_table_propagation

FrequencyUnk/hcp-vault-vpc-demo

resource "aws_ec2_transit_gateway_vpc_attachment_accepter" "example" {
  transit_gateway_attachment_id = hcp_aws_transit_gateway_attachment.example.provider_transit_gateway_attachment_id
}

Parameters

• appliance_mode_support optional computed - string
• dns_support optional computed - string
• id optional computed - string
• ipv6_support optional computed - string
• subnet_ids optional computed - set of string
• tags optional - map from string to string
• transit_gateway_attachment_id required - string
• transit_gateway_default_route_table_association optional - bool
• transit_gateway_default_route_table_propagation optional - bool
• transit_gateway_id optional computed - string
• vpc_id optional computed - string
• vpc_owner_id optional computed - string

Explanation in Terraform Registry

Manages the accepter's side of an EC2 Transit Gateway VPC Attachment. When a cross-account (requester's AWS account differs from the accepter's AWS account) EC2 Transit Gateway VPC Attachment is created, an EC2 Transit Gateway VPC Attachment resource is automatically created in the accepter's account. The requester can use the aws_ec2_transit_gateway_vpc_attachment resource to manage its side of the connection and the accepter can use the aws_ec2_transit_gateway_vpc_attachment_accepter resource to "adopt" its side of the connection into management.

Tips: Best Practices for The Other AWS Amazon EC2 Resources

In addition to the aws_default_vpc, AWS Amazon EC2 has the other resources that should be configured for security reasons. Please check some examples of those resources and precautions.

aws_default_vpc

Ensure to avoid using default VPC

It is better to define the own VPC and use it.

aws_network_acl_rule

Ensure your network ACL rule blocks unwanted inbound traffic

It is better to block unwanted inbound traffic.

aws_ebs_volume

Ensure to use a customer-managed key for EBS volume encryption

It is better to use a customer-managed key for EBS volume encryption. It can be gain more control over the encryption by using customer-managed keys (CMK).

aws_instance

Ensure to avoid storing AWS access keys in user data

It is better to avoid storing AWS access keys in user data. `aws_iam_instance_profile` could be used instead.

aws_security_group

Ensure your security group blocks unwanted inbound traffic

It is better to block unwanted inbound traffic.