add AWS tags

.terraformignore

@@ -0,0 +1,6 @@
+# controls what directories get uploaded to TFC for remote runs
+#
+# deny by default
+*
+# explicitly list included directories
+!terraform/

terraform/cloud.tf

@@ -0,0 +1,9 @@
+terraform {
+  cloud {
+    organization = "gtis"
+
+    workspaces {
+      name = "serverless-mfa-api"
+    }
+  }
+}

terraform/main.tf

@@ -4,17 +4,9 @@
  */
 module "serverless-user" {
   source  = "silinternational/serverless-user/aws"
-  version = "0.1.2"
+  version = "0.1.3"
 
   app_name           = "mfa-api"
   aws_region         = var.aws_region
   enable_api_gateway = true
 }
-
-output "serverless-access-key-id" {
-  value = module.serverless-user.aws_access_key_id
-}
-output "serverless-secret-access-key" {
-  value     = module.serverless-user.aws_secret_access_key
-  sensitive = true
-}

terraform/outputs.tf

@@ -0,0 +1,9 @@
+
+output "serverless-access-key-id" {
+  value = module.serverless-user.aws_access_key_id
+}
+
+output "serverless-secret-access-key" {
+  value     = module.serverless-user.aws_secret_access_key
+  sensitive = true
+}

terraform/providers.tf

@@ -2,4 +2,14 @@ provider "aws" {
   region     = var.aws_region
   access_key = var.aws_access_key_id
   secret_key = var.aws_secret_access_key
+
+  default_tags {
+    tags = {
+      managed_by        = "terraform"
+      workspace         = terraform.workspace
+      itse_app_customer = var.app_customer
+      itse_app_env      = var.app_environment
+      itse_app_name     = var.app_name
+    }
+  }
 }

terraform/variables.tf

@@ -7,3 +7,25 @@ variable "aws_access_key_id" {
 
 variable "aws_secret_access_key" {
 }
+
+/*
+ * AWS tag values
+ */
+
+variable "app_customer" {
+  description = "customer name to use for the itse_app_customer tag"
+  type        = string
+  default     = "shared"
+}
+
+variable "app_environment" {
+  description = "environment name to use for the itse_app_environment tag, e.g. staging, production"
+  type        = string
+  default     = "production"
+}
+
+variable "app_name" {
+  description = "app name to use for the itse_app_name tag"
+  type        = string
+  default     = "idp"
+}