Terraform resource for managing an Amazon Inspector Organization Configuration.
resource "aws_inspector2_organization_configuration" "example" {
auto_enable {
ec2 = true
ecr = false
lambda = true
lambda_code = true
}
}
The following arguments are required:
auto_enable
- (Required) Configuration block for auto enabling. See below.auto_enable
ec2
- (Required) Whether Amazon EC2 scans are automatically enabled for new members of your Amazon Inspector organization.ecr
- (Required) Whether Amazon ECR scans are automatically enabled for new members of your Amazon Inspector organization.lambda
- (Optional) Whether Lambda Function scans are automatically enabled for new members of your Amazon Inspector organization.lambda_code
- (Optional) Whether AWS Lambda code scans are automatically enabled for new members of your Amazon Inspector organization. Note: Lambda code scanning requires Lambda standard scanning to be activated. Consequently, if you are setting this argument to true
, you must also set the lambda
argument to true
. See Scanning AWS Lambda functions with Amazon Inspector for more information.This resource exports the following attributes in addition to the arguments above:
max_account_limit_reached
- Whether your configuration reached the max account limit.create
- (Default 5m
)update
- (Default 5m
)delete
- (Default 5m
)