AWS Amazon S3 Cached Iscsi Volume

aws_storagegateway_cached_iscsi_volume (Terraform)

The Cached Iscsi Volume in Amazon S3 can be configured in Terraform with the resource name aws_storagegateway_cached_iscsi_volume. The following sections describe 1 example of how to use the resource and its parameters.

Example Usage from GitHub

niveklabs/aws

resource "aws_storagegateway_cached_iscsi_volume" "this" {
  gateway_arn          = var.gateway_arn
  kms_encrypted        = var.kms_encrypted
  kms_key              = var.kms_key
  network_interface_id = var.network_interface_id
  snapshot_id          = var.snapshot_id

Parameters

• arn optional computed - string
• chap_enabled optional computed - bool
• gateway_arn required - string
• id optional computed - string
• kms_encrypted optional - bool
• kms_key optional - string
• lun_number optional computed - number
• network_interface_id required - string
• network_interface_port optional computed - number
• snapshot_id optional - string
• source_volume_arn optional - string
• tags optional - map from string to string
• target_arn optional computed - string
• target_name required - string
• volume_arn optional computed - string
• volume_id optional computed - string
• volume_size_in_bytes required - number

Explanation in Terraform Registry

Manages an AWS Storage Gateway cached iSCSI volume.

NOTE: The gateway must have cache added (e.g., via the aws_storagegateway_cache resource) before creating volumes otherwise the Storage Gateway API will return an error. NOTE: The gateway must have an upload buffer added (e.g., via the aws_storagegateway_upload_buffer resource) before the volume is operational to clients, however the Storage Gateway API will allow volume creation without error in that case and return volume status as UPLOAD BUFFER NOT CONFIGURED.

Tips: Best Practices for The Other AWS Amazon S3 Resources

In addition to the aws_s3_bucket_public_access_block, AWS Amazon S3 has the other resources that should be configured for security reasons. Please check some examples of those resources and precautions.

aws_s3_bucket_public_access_block

Ensure S3 bucket-level Public Access Block restricts public bucket policies

It is better to enable S3 bucket-level Public Access Block if you don't need public buckets.

aws_s3_bucket

Ensure S3 bucket access policy is well configured

It is better to configure the S3 bucket access policy properly to limit it unless explicitly required.