Merge pull request #61 from pablo19sc/transit_gateway

include tgw appliance mode and dns support

Author: drewmullen

examples/transit_gateway/main.tf

@@ -29,6 +29,8 @@ module "vpc" {
       route_to_nat                                    = false
       transit_gateway_default_route_table_association = true
       transit_gateway_default_route_table_propagation = true
+      transit_gateway_appliance_mode_support          = "enable"
+      transit_gateway_dns_support                     = "disable"
     }
   }
 }

main.tf

@@ -222,6 +222,8 @@ resource "aws_ec2_transit_gateway_vpc_attachment" "tgw" {
 
   transit_gateway_default_route_table_association = try(var.subnets.transit_gateway.transit_gateway_default_route_table_association, null)
   transit_gateway_default_route_table_propagation = try(var.subnets.transit_gateway.transit_gateway_default_route_table_propagation, null)
+  appliance_mode_support                          = try(var.subnets.transit_gateway.transit_gateway_appliance_mode_support, "disable")
+  dns_support                                     = try(var.subnets.transit_gateway.transit_gateway_dns_support, "enable")
 }
 
 resource "aws_ec2_transit_gateway_route_table_association" "tgw" {

variables.tf

@@ -93,6 +93,8 @@ variable "subnets" {
   - `transit_gateway_id`                              = (Required|string) Transit gateway to attach VPC to.
   - `transit_gateway_default_route_table_association` = (Optional|bool) Boolean whether the VPC Attachment should be associated with the EC2 Transit Gateway association default route table. This cannot be configured or perform drift detection with Resource Access Manager shared EC2 Transit Gateways.
   - `transit_gateway_default_route_table_propagation` = (Optional|bool) Boolean whether the VPC Attachment should propagate routes with the EC2 Transit Gateway propagation default route table. This cannot be configured or perform drift detection with Resource Access Manager shared EC2 Transit Gateways.
+  - `transit_gateway_appliance_mode_support`          = (Optional|string) Whether Appliance Mode is enabled. If enabled, a traffic flow between a source and a destination uses the same Availability Zone for the VPC attachment for the lifetime of that flow. Valid values: `disable` (default) and `enable`.
+  - `transit_gateway_dns_support`                     = (Optional|string) DNS Support is used if you need the VPC to resolve public IPv4 DNS host names to private IPv4 addresses when queried from instances in another VPC attached to the transit gateway. Valid values: `enable` (default) and `disable`.
 
   Example:
   ```
@@ -159,7 +161,7 @@ EOF
 
   # All var.subnets.transit_gateway valid keys
   validation {
-    error_message = "Invalid key in transit_gateway subnets. Valid options include: \"cidrs\", \"netmask\", \"name_prefix\", \"transit_gateway_id\", \"transit_gateway_default_route_table_association\", \"transit_gateway_default_route_table_propagation\", \"tags\"."
+    error_message = "Invalid key in transit_gateway subnets. Valid options include: \"cidrs\", \"netmask\", \"name_prefix\", \"transit_gateway_id\", \"transit_gateway_default_route_table_association\", \"transit_gateway_default_route_table_propagation\", \"transit_gateway_appliance_mode_support\", \"transit_gateway_dns_support\", \"tags\"."
     condition = length(setsubtract(keys(try(var.subnets.transit_gateway, {})), [
       "cidrs",
       "netmask",
@@ -168,6 +170,8 @@ EOF
       "transit_gateway_id",
       "transit_gateway_default_route_table_association",
       "transit_gateway_default_route_table_propagation",
+      "transit_gateway_appliance_mode_support",
+      "transit_gateway_dns_support",
       "tags"
     ])) == 0
   }