AWS Managed Service for Prometheus (AMP) Terraform module
Upstream version 4.3.1
2 controls from SOC 2 requirements
Terraform Module Source
soc2.compliance.tf/terraform-aws-modules/managed-service-prometheus/aws20 unique
| Name | Type | Default | Description |
|---|---|---|---|
| Enforced · locked by active controls | |||
cloudwatch_log_group_kms_key_idlog_group_encryption_at_rest_enabled | string | null | If a KMS Key ARN is set, this key will be used to encrypt the corresponding log group. Please be sure that the KMS Key has an appropriate key policy (https://docs.aws.amazon.com/AmazonCloudWatch/latest/logs/encrypt-log-data-kms.html) |
cloudwatch_log_group_retention_in_dayscloudwatch_log_group_retention_period_365 | number | 365 | Number of days to retain log events. Set to `0` to keep logs indefinitely |
| Optional | |||
alert_manager_definition | string | "alertmanager_config: | route: receiver: 'default' receivers: - name: 'default' " | The alert manager definition that you want to be applied. See more in the [AWS Docs](https://docs.aws.amazon.com/prometheus/latest/userguide/AMP-alert-manager.html) |
cloudwatch_log_group_class | string | null | Specified the log class of the log group. Possible values are: `STANDARD` or `INFREQUENT_ACCESS` |
cloudwatch_log_group_name | string | null | Custom name of CloudWatch log group for a service associated with the container definition |
cloudwatch_log_group_use_name_prefix | bool | false | Determines whether the log group name should be used as a prefix |
create | bool | true | Determines whether a resources will be created |
create_alert_manager | bool | true | Controls whether an Alert Manager definition is created along with the AMP workspace |
create_resource_policy | bool | true | Controls whether a resource policy is created along with the AMP workspace |
create_workspace | bool | true | Determines whether a workspace will be created or to use an existing workspace |
kms_key_arn | string | null | The ARN of the KMS Key to for encryption at rest |
limits_per_label_set | list({...}) | null | Configuration block for setting limits on metrics with specific label sets |
logging_configuration | object({...}) | null | The logging configuration of the prometheus workspace. |
region | string | null | Region where the resource(s) will be managed. Defaults to the Region set in the provider configuration |
resource_policy_statements | map({...}) | null | A map of IAM policy [statements](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/data-sources/iam_policy_document#statement) for custom permission usage |
retention_period_in_days | number | null | Number of days to retain metric data in the workspace |
rule_group_namespaces | map({...}) | null | A map of one or more rule group namespace definitions |
tags | map(string) | {} | A map of tags to add to all resources |
workspace_alias | string | null | The alias of the prometheus workspace. See more in the [AWS Docs](https://docs.aws.amazon.com/prometheus/latest/userguide/AMP-onboard-create-workspace.html) |
workspace_id | string | "" | The ID of an existing workspace to use when `create_workspace` is `false` |