terraform-aws-inspector

Configures AWS Inspector. Optionally configures a CloudWatch scheduled event to trigger assessments based on a specified schedule.

module "inspector" {
  source = "git::ssh://git@github.com/rhythmictech/terraform-aws-inspector"
  match_tags = {
    "AWSInspector": "enabled"
  }
}

Inputs

Name	Description	Type	Default	Required
inspector_cron_schedule	Cron schedule to use (see https://docs.aws.amazon.com/AmazonCloudWatch/latest/events/ScheduledEvents.html for formatting)	string	"cron(0 20 23 * ? *)"	no
match_tags	Map of tags and corresponding values to match against for AWS Inspector	map(string)	n/a	yes
name	Name of the assessment template/targets	string	"Inspector"	no
schedule_inspector	Indicate whether a cloudwatch rule should be created to trigger inspector automatically	bool	"true"	no
tags	Tags to apply to resources that support tagging	map(string)	{}	no

Outputs

Name	Description
inspector_assessment_target_arn
inspector_assessment_template_arn