Skip to content
This repository was archived by the owner on Dec 2, 2022. It is now read-only.

Latest commit

 

History

History
55 lines (44 loc) · 4.52 KB

README.md

File metadata and controls

55 lines (44 loc) · 4.52 KB

Requirements

Name Version
terraform ~> 1.1.2
aws ~> 4.0

Providers

Name Version
aws 4.2.0

Modules

No modules.

Resources

Name Type
aws_instance.kali resource
aws_key_pair.kali resource
aws_security_group.kali_defaults resource
aws_security_group.ssh resource
aws_ami.kali data source
aws_kms_key.default_ebs data source
aws_subnet.default_vpc_subnet data source
aws_vpc.default_vpc data source

Inputs

Name Description Type Default Required
ebs_kms_key KMS key alias to use for KMS key data source. Defaults to the default AWS-managed EBS key. string "aws/ebs" no
kali_instance_type The EC2 instance size to use for the Kali server. string "t3.medium" no
kali_pubkey The public key to a private key under your control. You will SSH onto the server using this keypair. string "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIG7f8bbM9qGo5bFnofB8n7YiVC94uvoJe2En+m1Hvu8y [email protected]" no
kali_spot_type Whether to launch the Kali spot instance as a 'persistent' request or a 'one-time' request. string "one-time" no
kali_volume_size The volume size for the Kali EC2 instance, GiB. number 25 no
metadata_enabled Whether EC2 instance medata is enabled. 'enabled' or 'disabled'. Use 'metadat_tokens' to decide between v1 or v2 of instance metadata. string "enabled" no
metadata_hop_limit The desired HTTP PUT response hop limit for instance metadata requests. The larger the number, the further instance metadata requests can travel. It is recommended to leave this at '1'. number 1 no
metadata_tokens Whether EC2 instance metadata is v1 or v2. 'required' means v2. 'optional' means v1. Use 'metadata_enabled' to disable instance metadata alltogether. string "required" no
ssh_cidr_range The CIDR range to allow SSH access from to your provisioned server. Can be a single IP address or a full CIDR range. string "0.0.0.0/0" no
ssh_port Port at which SSH is running on the server. Must match the sshd_port from the Ansible playbook. number 22 no
target_cidr_range The CIDR range you would like to accept traffic from. You can leave at the default, or optionally scope traffic exclusively from your target network. Use ssh_cidr_range to configure SSH connectivity. string "0.0.0.0/0" no
vpc_az Availability zone in the default VPC to create resources. string "us-east-1a" no

Outputs

Name Description
kali_id n/a
kali_ip n/a