Skip to content
This repository has been archived by the owner on Oct 17, 2023. It is now read-only.

chore: tear down service infrastructure #28

Merged
merged 3 commits into from
Oct 17, 2023
Merged

Conversation

patheard
Copy link
Member

Summary

Add an empty Terraform module to trigger the removal of all service resources.

Add an empty Terraform module to trigger the removal
of all service resources.
@patheard patheard self-assigned this Oct 17, 2023
@github-actions
Copy link

Plan for empty

✅   Terraform Init: success
✅   Terraform Validate: success
✅   Terraform Format: success
✅   Terraform Plan: success
✅   Conftest: success

⚠️   Warning: resources will be destroyed by this change!

Plan: 0 to add, 0 to change, 83 to destroy
Show summary
CHANGE NAME
delete aws_acm_certificate.share_files_securely
aws_acm_certificate_validation.share_files_securely
aws_cloudfront_distribution.share_files_securely
aws_cloudfront_origin_access_identity.origin_access_identity
aws_db_subnet_group.share_files_securely
aws_ecr_repository.share_files_securely
aws_lambda_alias.share_files_securely
aws_lambda_function_url.share_files_securely_url
aws_lambda_function_url.share_files_securely_url_alias
aws_rds_cluster.share_files_securely
aws_rds_cluster_instance.share_files_securely
aws_route53_health_check.share_files_securely_A
aws_route53_record.share_files_securely_A
aws_route53_record.share_files_securely_certificate_validation["*.share-files.cdssandbox.xyz"]
aws_route53_record.share_files_securely_certificate_validation["share-files.cdssandbox.xyz"]
aws_route53_zone.share_files_securely
aws_s3_bucket_cors_configuration.share_files_securely_bucket
aws_s3_bucket_cors_configuration.share_files_securely_bucket_dev
aws_security_group.share_files_securely_lambda
aws_security_group_rule.lambda_port_443_egress
aws_security_group_rule.lambda_port_443_ingress
aws_security_group_rule.lambda_port_5432_egress
aws_security_group_rule.lambda_port_5432_ingress
module.s3_scan_objects.aws_iam_policy.scan_files[0]
module.s3_scan_objects.aws_iam_role.scan_files[0]
module.s3_scan_objects.aws_iam_role_policy_attachment.scan_files[0]
module.s3_scan_objects.aws_kms_alias.s3_scan_object_queue
module.s3_scan_objects.aws_kms_key.s3_scan_object_queue
module.s3_scan_objects.aws_s3_bucket_notification.s3_scan_object[0]
module.s3_scan_objects.aws_s3_bucket_notification.s3_scan_object[1]
module.s3_scan_objects.aws_s3_bucket_policy.upload_bucket[0]
module.s3_scan_objects.aws_s3_bucket_policy.upload_bucket[1]
module.s3_scan_objects.aws_sqs_queue.s3_scan_object
module.s3_scan_objects.aws_sqs_queue_policy.s3_scan_object
module.share_files_securely_bucket.aws_s3_bucket.this
module.share_files_securely_bucket.aws_s3_bucket_public_access_block.this
module.share_files_securely_bucket_dev.aws_s3_bucket.this
module.share_files_securely_bucket_dev.aws_s3_bucket_public_access_block.this
module.share_files_securely_lambda.aws_cloudwatch_log_group.this
module.share_files_securely_lambda.aws_cloudwatch_query_definition.lambda_statistics
module.share_files_securely_lambda.aws_iam_policy.policies[0]
module.share_files_securely_lambda.aws_iam_policy.vpc_policies[0]
module.share_files_securely_lambda.aws_iam_role.this
module.share_files_securely_lambda.aws_iam_role_policy_attachment.AWSLambdaVPCAccessExecutionRole[0]
module.share_files_securely_lambda.aws_iam_role_policy_attachment.attachments[0]
module.share_files_securely_lambda.aws_iam_role_policy_attachment.lambda_insights[0]
module.share_files_securely_lambda.aws_iam_role_policy_attachment.vpc_policies[0]
module.share_files_securely_lambda.aws_lambda_function.this
module.vpc.aws_default_network_acl.default
module.vpc.aws_default_route_table.default
module.vpc.aws_default_security_group.default
module.vpc.aws_eip.nat[0]
module.vpc.aws_internet_gateway.gw
module.vpc.aws_nat_gateway.nat_gw[0]
module.vpc.aws_network_acl.main
module.vpc.aws_network_acl_rule.block_rdp[0]
module.vpc.aws_network_acl_rule.block_ssh[0]
module.vpc.aws_network_acl_rule.https_request_egress_443[0]
module.vpc.aws_network_acl_rule.https_request_in_ingress_443[0]
module.vpc.aws_network_acl_rule.https_request_in_ingress_ephemeral[0]
module.vpc.aws_network_acl_rule.https_request_in_response_egress_443[0]
module.vpc.aws_network_acl_rule.https_request_in_response_egress_ephemeral[0]
module.vpc.aws_network_acl_rule.https_request_out_egress_ephemeral[0]
module.vpc.aws_network_acl_rule.https_request_out_response_ingress_443[0]
module.vpc.aws_network_acl_rule.https_request_out_response_ingress_ephemeral[0]
module.vpc.aws_route.private_nat_gateway[0]
module.vpc.aws_route.public_internet_gateway
module.vpc.aws_route_table.private[0]
module.vpc.aws_route_table.public
module.vpc.aws_route_table_association.private[0]
module.vpc.aws_route_table_association.private[1]
module.vpc.aws_route_table_association.private[2]
module.vpc.aws_route_table_association.public[0]
module.vpc.aws_route_table_association.public[1]
module.vpc.aws_route_table_association.public[2]
module.vpc.aws_subnet.private[0]
module.vpc.aws_subnet.private[1]
module.vpc.aws_subnet.private[2]
module.vpc.aws_subnet.public[0]
module.vpc.aws_subnet.public[1]
module.vpc.aws_subnet.public[2]
module.vpc.aws_vpc.main
random_password.password

✂   Warning: plan has been truncated! See the full plan in the logs.

Show plan
Resource actions are indicated with the following symbols:
  - destroy

Terraform will perform the following actions:

  # aws_acm_certificate.share_files_securely will be destroyed
  - resource "aws_acm_certificate" "share_files_securely" {
      - arn                       = "arn:aws:acm:us-east-1:283582579564:certificate/1f07b6d0-0b15-4dae-9725-9a1870723c7f" -> null
      - domain_name               = "share-files.cdssandbox.xyz" -> null
      - domain_validation_options = [
          - {
              - domain_name           = "*.share-files.cdssandbox.xyz"
              - resource_record_name  = "_c3a9471e725d8fcfe050c9d83a4c71ab.share-files.cdssandbox.xyz."
              - resource_record_type  = "CNAME"
              - resource_record_value = "_17421245c4825d70e058603cbc8643aa.tjztrygkxr.acm-validations.aws."
            },
          - {
              - domain_name           = "share-files.cdssandbox.xyz"
              - resource_record_name  = "_c3a9471e725d8fcfe050c9d83a4c71ab.share-files.cdssandbox.xyz."
              - resource_record_type  = "CNAME"
              - resource_record_value = "_17421245c4825d70e058603cbc8643aa.tjztrygkxr.acm-validations.aws."
            },
        ] -> null
      - id                        = "arn:aws:acm:us-east-1:283582579564:certificate/1f07b6d0-0b15-4dae-9725-9a1870723c7f" -> null
      - key_algorithm             = "RSA_2048" -> null
      - not_after                 = "2024-07-07T23:59:59Z" -> null
      - not_before                = "2023-06-08T00:00:00Z" -> null
      - pending_renewal           = false -> null
      - renewal_eligibility       = "ELIGIBLE" -> null
      - renewal_summary           = [
          - {
              - renewal_status        = "SUCCESS"
              - renewal_status_reason = ""
              - updated_at            = "2023-06-08T02:34:52Z"
            },
        ] -> null
      - status                    = "ISSUED" -> null
      - subject_alternative_names = [
          - "*.share-files.cdssandbox.xyz",
          - "share-files.cdssandbox.xyz",
        ] -> null
      - tags                      = {
          - "CostCentre" = "share-files-securely"
        } -> null
      - tags_all                  = {
          - "CostCentre" = "share-files-securely"
        } -> null
      - type                      = "AMAZON_ISSUED" -> null
      - validation_emails         = [] -> null
      - validation_method         = "DNS" -> null

      - options {
          - certificate_transparency_logging_preference = "ENABLED" -> null
        }
    }

  # aws_acm_certificate_validation.share_files_securely will be destroyed
  - resource "aws_acm_certificate_validation" "share_files_securely" {
      - certificate_arn         = "arn:aws:acm:us-east-1:283582579564:certificate/1f07b6d0-0b15-4dae-9725-9a1870723c7f" -> null
      - id                      = "2022-07-08 18:42:49.293 +0000 UTC" -> null
      - validation_record_fqdns = [
          - "_c3a9471e725d8fcfe050c9d83a4c71ab.share-files.cdssandbox.xyz",
        ] -> null
    }

  # aws_cloudfront_distribution.share_files_securely will be destroyed
  - resource "aws_cloudfront_distribution" "share_files_securely" {
      - aliases                        = [
          - "share-files.cdssandbox.xyz",
        ] -> null
      - arn                            = "arn:aws:cloudfront::283582579564:distribution/E2DT9JFRD8ZV5B" -> null
      - caller_reference               = "terraform-20220708184323001300000001" -> null
      - domain_name                    = "d3c1n3macrjyzg.cloudfront.net" -> null
      - enabled                        = true -> null
      - etag                           = "E1SLPD3W9BNNJ1" -> null
      - hosted_zone_id                 = "Z2FDTNDATAQYW2" -> null
      - http_version                   = "http2" -> null
      - id                             = "E2DT9JFRD8ZV5B" -> null
      - in_progress_validation_batches = 0 -> null
      - is_ipv6_enabled                = false -> null
      - last_modified_time             = "2022-09-27 13:51:41.74 +0000 UTC" -> null
      - price_class                    = "PriceClass_100" -> null
      - retain_on_delete               = false -> null
      - staging                        = false -> null
      - status                         = "Deployed" -> null
      - tags                           = {
          - "CostCentre" = "share-files-securely"
          - "Terraform"  = "true"
        } -> null
      - tags_all                       = {
          - "CostCentre" = "share-files-securely"
          - "Terraform"  = "true"
        } -> null
      - trusted_key_groups             = [
          - {
              - enabled = false
              - items   = []
            },
        ] -> null
      - trusted_signers                = [
          - {
              - enabled = false
              - items   = []
            },
        ] -> null
      - wait_for_deployment            = true -> null

      - default_cache_behavior {
          - allowed_methods        = [
              - "DELETE",
              - "GET",
              - "HEAD",
              - "OPTIONS",
              - "PATCH",
              - "POST",
              - "PUT",
            ] -> null
          - cached_methods         = [
              - "GET",
              - "HEAD",
            ] -> null
          - compress               = false -> null
          - default_ttl            = 0 -> null
          - max_ttl                = 0 -> null
          - min_ttl                = 0 -> null
          - smooth_streaming       = false -> null
          - target_origin_id       = "share_files_securely:latest" -> null
          - trusted_key_groups     = [] -> null
          - trusted_signers        = [] -> null
          - viewer_protocol_policy = "redirect-to-https" -> null

          - forwarded_values {
              - headers                 = [
                  - "Authorization",
                  - "Referer",
                ] -> null
              - query_string            = true -> null
              - query_string_cache_keys = [] -> null

              - cookies {
                  - forward           = "all" -> null
                  - whitelisted_names = [] -> null
                }
            }
        }

      - ordered_cache_behavior {
          - allowed_methods        = [
              - "GET",
              - "HEAD",
            ] -> null
          - cached_methods         = [
              - "GET",
              - "HEAD",
            ] -> null
          - compress               = true -> null
          - default_ttl            = 0 -> null
          - max_ttl                = 0 -> null
          - min_ttl                = 0 -> null
          - path_pattern           = "/healthcheck" -> null
          - smooth_streaming       = false -> null
          - target_origin_id       = "share_files_securely:latest" -> null
          - trusted_key_groups     = [] -> null
          - trusted_signers        = [] -> null
          - viewer_protocol_policy = "redirect-to-https" -> null

          - forwarded_values {
              - headers                 = [] -> null
              - query_string            = true -> null
              - query_string_cache_keys = [] -> null

              - cookies {
                  - forward           = "none" -> null
                  - whitelisted_names = [] -> null
                }
            }
        }
      - ordered_cache_behavior {
          - allowed_methods        = [
              - "GET",
              - "HEAD",
            ] -> null
          - cached_methods         = [
              - "GET",
              - "HEAD",
            ] -> null
          - compress               = true -> null
          - default_ttl            = 0 -> null
          - max_ttl                = 0 -> null
          - min_ttl                = 0 -> null
          - path_pattern           = "/*@cds-snc.ca/*" -> null
          - smooth_streaming       = false -> null
          - target_origin_id       = "share-files-securely-bucket" -> null
          - trusted_key_groups     = [] -> null
          - trusted_signers        = [] -> null
          - viewer_protocol_policy = "https-only" -> null

          - forwarded_values {
              - headers                 = [
                  - "Origin",
                ] -> null
              - query_string            = true -> null
              - query_string_cache_keys = [] -> null

              - cookies {
                  - forward           = "none" -> null
                  - whitelisted_names = [] -> null
                }
            }
        }

      - origin {
          - connection_attempts = 3 -> null
          - connection_timeout  = 10 -> null
          - domain_name         = "5wrlntzrh6g3nwvgbf4e7rz5j40hrpvu.lambda-url.ca-central-1.on.aws" -> null
          - origin_id           = "share_files_securely:latest" -> null

          - custom_origin_config {
              - http_port                = 80 -> null
              - https_port               = 443 -> null
              - origin_keepalive_timeout = 5 -> null
              - origin_protocol_policy   = "https-only" -> null
              - origin_read_timeout      = 30 -> null
              - origin_ssl_protocols     = [
                  - "TLSv1.2",
                ] -> null
            }
        }
      - origin {
          - connection_attempts = 3 -> null
          - connection_timeout  = 10 -> null
          - domain_name         = "share-files-securely.s3.ca-central-1.amazonaws.com" -> null
          - origin_id           = "share-files-securely-bucket" -> null

          - s3_origin_config {
              - origin_access_identity = "origin-access-identity/cloudfront/E2SE170G2TC1O6" -> null
            }
        }

      - restrictions {
          - geo_restriction {
              - locations        = [] -> null
              - restriction_type = "none" -> null
            }
        }

      - viewer_certificate {
          - acm_certificate_arn            = "arn:aws:acm:us-east-1:283582579564:certificate/1f07b6d0-0b15-4dae-9725-9a1870723c7f" -> null
          - cloudfront_default_certificate = false -> null
          - minimum_protocol_version       = "TLSv1.2_2021" -> null
          - ssl_support_method             = "sni-only" -> null
        }
    }

  # aws_cloudfront_origin_access_identity.origin_access_identity will be destroyed
  - resource "aws_cloudfront_origin_access_identity" "origin_access_identity" {
      - caller_reference                = "terraform-20220715163837926700000001" -> null
      - cloudfront_access_identity_path = "origin-access-identity/cloudfront/E2SE170G2TC1O6" -> null
      - comment                         = "cloudfront origin access identity" -> null
      - etag                            = "E1D9FKT937KUIA" -> null
      - iam_arn                         = "arn:aws:iam::cloudfront:user/CloudFront Origin Access Identity E2SE170G2TC1O6" -> null
      - id                              = "E2SE170G2TC1O6" -> null
      - s3_canonical_user_id            = "14aa8ff85c80b78290952e71cbdab54e3c8f07d14b76e08c6cbe52a56fbf6741eaaa0a1f34454829e86b6921ef0aa29a" -> null
    }

  # aws_db_subnet_group.share_files_securely will be destroyed
  - resource "aws_db_subnet_group" "share_files_securely" {
      - arn                     = "arn:aws:rds:ca-central-1:283582579564:subgrp:share-files-securely-subnet-group" -> null
      - description             = "Managed by Terraform" -> null
      - id                      = "share-files-securely-subnet-group" -> null
      - name                    = "share-files-securely-subnet-group" -> null
      - subnet_ids              = [
          - "subnet-010a47a35dd110de8",
          - "subnet-0443b551ec730e49d",
          - "subnet-0c95c356856904012",
        ] -> null
      - supported_network_types = [
          - "IPV4",
        ] -> null
      - tags                    = {
          - "Name" = "share-files-securely-subnet-group"
        } -> null
      - tags_all                = {
          - "Name" = "share-files-securely-subnet-group"
        } -> null
      - vpc_id                  = "vpc-000491f008e3201d2" -> null
    }

  # aws_ecr_repository.share_files_securely will be destroyed
  - resource "aws_ecr_repository" "share_files_securely" {
      - arn                  = "arn:aws:ecr:ca-central-1:283582579564:repository/share-files-securely" -> null
      - id                   = "share-files-securely" -> null
      - image_tag_mutability = "MUTABLE" -> null
      - name                 = "share-files-securely" -> null
      - registry_id          = "283582579564" -> null
      - repository_url       = "283582579564.dkr.ecr.ca-central-1.amazonaws.com/share-files-securely" -> null
      - tags                 = {} -> null
      - tags_all             = {} -> null

      - encryption_configuration {
          - encryption_type = "AES256" -> null
        }

      - image_scanning_configuration {
          - scan_on_push = true -> null
        }
    }

  # aws_lambda_alias.share_files_securely will be destroyed
  - resource "aws_lambda_alias" "share_files_securely" {
      - arn              = "arn:aws:lambda:ca-central-1:283582579564:function:share_files_securely:latest" -> null
      - description      = "Alias for traffic shifting" -> null
      - function_name    = "arn:aws:lambda:ca-central-1:283582579564:function:share_files_securely" -> null
      - function_version = "12" -> null
      - id               = "arn:aws:lambda:ca-central-1:283582579564:function:share_files_securely:latest" -> null
      - invoke_arn       = "arn:aws:apigateway:ca-central-1:lambda:path/2015-03-31/functions/arn:aws:lambda:ca-central-1:283582579564:function:share_files_securely:latest/invocations" -> null
      - name             = "latest" -> null
    }

  # aws_lambda_function_url.share_files_securely_url will be destroyed
  - resource "aws_lambda_function_url" "share_files_securely_url" {
      - authorization_type = "NONE" -> null
      - function_arn       = "arn:aws:lambda:ca-central-1:283582579564:function:share_files_securely" -> null
      - function_name      = "share_files_securely" -> null
      - function_url       = "https://n462tr2bl2ysvhefgrumzgccum0phzhk.lambda-url.ca-central-1.on.aws/" -> null
      - id                 = "share_files_securely" -> null
      - invoke_mode        = "BUFFERED" -> null
      - url_id             = "n462tr2bl2ysvhefgrumzgccum0phzhk" -> null

      - cors {
          - allow_credentials = true -> null
          - allow_headers     = [] -> null
          - allow_methods     = [
              - "*",
            ] -> null
          - allow_origins     = [
              - "*",
            ] -> null
          - expose_headers    = [] -> null
          - max_age           = 86400 -> null
        }
    }

  # aws_lambda_function_url.share_files_securely_url_alias will be destroyed
  - resource "aws_lambda_function_url" "share_files_securely_url_alias" {
      - authorization_type = "NONE" -> null
      - function_arn       = "arn:aws:lambda:ca-central-1:283582579564:function:share_files_securely:latest" -> null
      - function_name      = "share_files_securely:latest" -> null
      - function_url       = "https://5wrlntzrh6g3nwvgbf4e7rz5j40hrpvu.lambda-url.ca-central-1.on.aws/" -> null
      - id                 = "share_files_securely:latest" -> null
      - invoke_mode        = "BUFFERED" -> null
      - url_id             = "5wrlntzrh6g3nwvgbf4e7rz5j40hrpvu" -> null

      - cors {
          - allow_credentials = true -> null
          - allow_headers     = [] -> null
          - allow_methods     = [
              - "*",
            ] -> null
          - allow_origins     = [
              - "*",
            ] -> null
          - expose_headers    = [] -> null
          - max_age           = 86400 -> null
        }
    }

  # aws_rds_cluster.share_files_securely will be destroyed
  - resource "aws_rds_cluster" "share_files_securely" {
      - allocated_storage                   = 1 -> null
      - arn                                 = "arn:aws:rds:ca-central-1:283582579564:cluster:share-files-securely" -> null
      - availability_zones                  = [
          - "ca-central-1a",
          - "ca-central-1b",
          - "ca-central-1d",
        ] -> null
      - backtrack_window                    = 0 -> null
      - backup_retention_period             = 1 -> null
      - cluster_identifier                  = "share-files-securely" -> null
      - cluster_members                     = [
          - "tf-20220708133628162500000001",
        ] -> null
      - cluster_resource_id                 = "cluster-2RAU7W6IW4SZLFRN7P5WECXSJY" -> null
      - copy_tags_to_snapshot               = false -> null
      - database_name                       = "share_files_securely" -> null
      - db_cluster_instance_class           = "" -> null
      - db_cluster_parameter_group_name     = "default.aurora-postgresql13" -> null
      - db_subnet_group_name                = "share-files-securely-subnet-group" -> null
      - db_system_id                        = "" -> null
      - deletion_protection                 = false -> null
      - enable_global_write_forwarding      = false -> null
      - enable_http_endpoint                = false -> null
      - enabled_cloudwatch_logs_exports     = [] -> null
      - endpoint                            = "share-files-securely.cluster-cdxmw3bs3xsi.ca-central-1.rds.amazonaws.com" -> null
      - engine                              = "aurora-postgresql" -> null
      - engine_mode                         = "provisioned" -> null
      - engine_version                      = "13.8" -> null
      - engine_version_actual               = "13.8" -> null
      - global_cluster_identifier           = "" -> null
      - hosted_zone_id                      = "Z1JG78A3UK1DU3" -> null
      - iam_database_authentication_enabled = false -> null
      - iam_roles                           = [] -> null
      - id                                  = "share-files-securely" -> null
      - iops                                = 0 -> null
      - kms_key_id                          = "" -> null
      - master_password                     = (sensitive value)
      - master_user_secret                  = [] -> null
      - master_username                     = "share_files" -> null
      - network_type                        = "IPV4" -> null
      - port                                = 5432 -> null
      - preferred_backup_window             = "08:25-08:55" -> null
      - preferred_maintenance_window        = "thu:03:29-thu:03:59" -> null
      - reader_endpoint                     = "share-files-securely.cluster-ro-cdxmw3bs3xsi.ca-central-1.rds.amazonaws.com" -> null
      - replication_source_identifier       = "" -> null
      - skip_final_snapshot                 = false -> null
      - storage_encrypted                   = false -> null
      - storage_type                        = "" -> null
      - tags                                = {} -> null
      - tags_all                            = {} -> null
      - vpc_security_group_ids              = [
          - "sg-006fa429d2d64ea1b",
        ] -> null

      - serverlessv2_scaling_configuration {
          - max_capacity = 1 -> null
          - min_capacity = 0.5 -> null
        }
    }

  # aws_rds_cluster_instance.share_files_securely will be destroyed
  - resource "aws_rds_cluster_instance" "share_files_securely" {
      - arn                                   = "arn:aws:rds:ca-central-1:283582579564:db:tf-20220708133628162500000001" -> null
      - auto_minor_version_upgrade            = true -> null
      - availability_zone                     = "ca-central-1d" -> null
      - ca_cert_identifier                    = "rds-ca-2019" -> null
      - cluster_identifier                    = "share-files-securely" -> null
      - copy_tags_to_snapshot                 = false -> null
      - db_parameter_group_name               = "default.aurora-postgresql13" -> null
      - db_subnet_group_name                  = "share-files-securely-subnet-group" -> null
      - dbi_resource_id                       = "db-4LX34VEFAJCX4R36ZZQNB5SEWA" -> null
      - endpoint                              = "tf-20220708133628162500000001.cdxmw3bs3xsi.ca-central-1.rds.amazonaws.com" -> null
      - engine                                = "aurora-postgresql" -> null
      - engine_version                        = "13.8" -> null
      - engine_version_actual                 = "13.8" -> null
      - id                                    = "tf-20220708133628162500000001" -> null
      - identifier                            = "tf-20220708133628162500000001" -> null
      - instance_class                        = "db.serverless" -> null
      - monitoring_interval                   = 0 -> null
      - network_type                          = "IPV4" -> null
      - performance_insights_enabled          = false -> null
      - performance_insights_retention_period = 0 -> null
      - port                                  = 5432 -> null
      - preferred_backup_window               = "08:25-08:55" -> null
      - preferred_maintenance_window          = "wed:08:28-wed:08:58" -> null
      - promotion_tier                        = 0 -> null
      - publicly_accessible                   = false -> null
      - storage_encrypted                     = false -> null
      - tags                                  = {} -> null
      - tags_all                              = {} -> null
      - writer                                = true -> null
    }

  # aws_route53_health_check.share_files_securely_A will be destroyed
  - resource "aws_route53_health_check" "share_files_securely_A" {
      - arn                    = "arn:aws:route53:::healthcheck/a04f519e-d799-43b8-926e-2922728dab52" -> null
      - child_health_threshold = 0 -> null
      - child_healthchecks     = [] -> null
      - disabled               = false -> null
      - enable_sni             = true -> null
      - failure_threshold      = 5 -> null
      - fqdn                   = "share-files.cdssandbox.xyz" -> null
      - id                     = "a04f519e-d799-43b8-926e-2922728dab52" -> null
      - invert_healthcheck     = false -> null
      - measure_latency        = false -> null
      - port                   = 443 -> null
      - regions                = [] -> null
      - request_interval       = 30 -> null
      - resource_path          = "/healthcheck" -> null
      - tags                   = {
          - "CostCentre" = "share-files-securely"
          - "Terraform"  = "true"
        } -> null
      - tags_all               = {
          - "CostCentre" = "share-files-securely"
          - "Terraform"  = "true"
        } -> null
      - type                   = "HTTPS" -> null
    }

  # aws_route53_record.share_files_securely_A will be destroyed
  - resource "aws_route53_record" "share_files_securely_A" {
      - fqdn                             = "share-files.cdssandbox.xyz" -> null
      - id                               = "Z01209733HZPUHI200WFU_share-files.cdssandbox.xyz_A" -> null
      - multivalue_answer_routing_policy = false -> null
      - name                             = "share-files.cdssandbox.xyz" -> null
      - records                          = [] -> null
      - ttl                              = 0 -> null
      - type                             = "A" -> null
      - zone_id                          = "Z01209733HZPUHI200WFU" -> null

      - alias {
          - evaluate_target_health = false -> null
          - name                   = "d3c1n3macrjyzg.cloudfront.net" -> null
          - zone_id                = "Z2FDTNDATAQYW2" -> null
        }
    }

  # aws_route53_record.share_files_securely_certificate_validation["*.share-files.cdssandbox.xyz"] will be destroyed
  - resource "aws_route53_record" "share_files_securely_certificate_validation" {
      - allow_overwrite                  = true -> null
      - fqdn                             = "_c3a9471e725d8fcfe050c9d83a4c71ab.share-files.cdssandbox.xyz" -> null
      - id                               = "Z01209733HZPUHI200WFU__c3a9471e725d8fcfe050c9d83a4c71ab.share-files.cdssandbox.xyz._CNAME" -> null
      - multivalue_answer_routing_policy = false -> null
      - name                             = "_c3a9471e725d8fcfe050c9d83a4c71ab.share-files.cdssandbox.xyz" -> null
      - records                          = [
          - "_17421245c4825d70e058603cbc8643aa.tjztrygkxr.acm-validations.aws.",
        ] -> null
      - ttl                              = 60 -> null
      - type                             = "CNAME" -> null
      - zone_id                          = "Z01209733HZPUHI200WFU" -> null
    }

  # aws_route53_record.share_files_securely_certificate_validation["share-files.cdssandbox.xyz"] will be destroyed
  - resource "aws_route53_record" "share_files_securely_certificate_validation" {
      - allow_overwrite                  = true -> null
      - fqdn                             = "_c3a9471e725d8fcfe050c9d83a4c71ab.share-files.cdssandbox.xyz" -> null
      - id                               = "Z01209733HZPUHI200WFU__c3a9471e725d8fcfe050c9d83a4c71ab.share-files.cdssandbox.xyz._CNAME" -> null
      - multivalue_answer_routing_policy = false -> null
      - name                             = "_c3a9471e725d8fcfe050c9d83a4c71ab.share-files.cdssandbox.xyz" -> null
      - records                          = [
          - "_17421245c4825d70e058603cbc8643aa.tjztrygkxr.acm-validations.aws.",
        ] -> null
      - ttl                              = 60 -> null
      - type                             = "CNAME" -> null
      - zone_id                          = "Z01209733HZPUHI200WFU" -> null
    }

  # aws_route53_zone.share_files_securely will be destroyed
  - resource "aws_route53_zone" "share_files_securely" {
      - arn                 = "arn:aws:route53:::hostedzone/Z01209733HZPUHI200WFU" -> null
      - comment             = "Managed by Terraform" -> null
      - force_destroy       = false -> null
      - id                  = "Z01209733HZPUHI200WFU" -> null
      - name                = "share-files.cdssandbox.xyz" -> null
      - name_servers        = [
          - "ns-1211.awsdns-23.org",
          - "ns-1585.awsdns-06.co.uk",
          - "ns-250.awsdns-31.com",
          - "ns-679.awsdns-20.net",
        ] -> null
      - primary_name_server = "ns-679.awsdns-20.net" -> null
      - tags                = {
          - "CostCentre" = "share-files-securely"
        } -> null
      - tags_all            = {
          - "CostCentre" = "share-files-securely"
        } -> null
      - zone_id             = "Z01209733HZPUHI200WFU" -> null
    }

  # aws_s3_bucket_cors_configuration.share_files_securely_bucket will be destroyed
  - resource "aws_s3_bucket_cors_configuration" "share_files_securely_bucket" {
      - bucket = "share-files-securely" -> null
      - id     = "share-files-securely" -> null

      - cors_rule {
          - allowed_headers = [
              - "*",
            ] -> null
          - allowed_methods = [
              - "DELETE",
              - "GET",
              - "POST",
              - "PUT",
            ] -> null
          - allowed_origins = [
              - "*",
            ] -> null
          - expose_headers  = [] -> null
          - max_age_seconds = 0 -> null
        }
    }

  # aws_s3_bucket_cors_configuration.share_files_securely_bucket_dev will be destroyed
  - resource "aws_s3_bucket_cors_configuration" "share_files_securely_bucket_dev" {
      - bucket = "share-files-securely-dev" -> null
      - id     = "share-files-securely-dev" -> null

      - cors_rule {
          - allowed_headers = [
              - "*",
            ] -> null
          - allowed_methods = [
              - "DELETE",
              - "GET",
              - "POST",
              - "PUT",
            ] -> null
          - allowed_origins = [
              - "*",
            ] -> null
          - expose_headers  = [] -> null
          - max_age_seconds = 0 -> null
        }
    }

  # aws_security_group.share_files_securely_lambda will be destroyed
  - resource "aws_security_group" "share_files_securely_lambda" {
      - arn                    = "arn:aws:ec2:ca-central-1:283582579564:security-group/sg-006fa429d2d64ea1b" -> null
      - description            = "SG for the Share Files Securely lambda" -> null
      - egress                 = [
          - {
              - cidr_blocks      = [
                  - "0.0.0.0/0",
                ]
              - description      = "Security group rule for Lambda egress to port 443"
              - from_port        = 443
              - ipv6_cidr_blocks = []
              - prefix_list_ids  = []
              - protocol         = "tcp"
              - security_groups  = []
              - self             = false
              - to_port          = 443
            },
          - {
              - cidr_blocks      = []
              - description      = "Security group rule for Lambda egress to port 5432 (postgres)"
              - from_port        = 5432
              - ipv6_cidr_blocks = []
              - prefix_list_ids  = []
              - protocol         = "tcp"
              - security_groups  = []
              - self             = true
              - to_port          = 5432
            },
        ] -> null
      - id                     = "sg-006fa429d2d64ea1b" -> null
      - ingress                = [
          - {
              - cidr_blocks      = [
                  - "0.0.0.0/0",
                ]
              - description      = "Security group rule for Lambda ingress to port 443"
              - from_port        = 443
              - ipv6_cidr_blocks = []
              - prefix_list_ids  = []
              - protocol         = "tcp"
              - security_groups  = []
              - self       ...
Show Conftest results
18 tests, 18 passed, 0 warnings, 0 failures, 0 exceptions

@patheard patheard requested a review from maxneuvians October 17, 2023 14:13
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants