Managed Grafana
Terraform module to create AWS Managed Service for Grafana (AMG) resources
Inputs
40 / 56
account_access_typeoptionalstringThe type of account access for the workspace. Valid values are `CURRENT_ACCOUNT` and `ORGANIZATION`
CURRENT_ACCOUNTassociate_licenseoptionalboolDetermines whether a license will be associated with the workspace
trueauthentication_providersoptionallist(string)The authentication providers for the workspace. Valid values are `AWS_SSO`, `SAML`, or both
[…]configurationoptionalstringThe configuration string for the workspace
nullcreateoptionalboolDetermines whether a resources will be created
truecreate_iam_roleoptionalboolDetermines whether a an IAM role is created or to use an existing IAM role
truecreate_saml_configurationoptionalboolDetermines whether the SAML configuration will be created
truecreate_security_groupoptionalboolDetermines if a security group is created
truecreate_workspaceoptionalboolDetermines whether a workspace will be created or to use an existing workspace
truedata_sourcesoptionallist(string)The data sources for the workspace. Valid values are `AMAZON_OPENSEARCH_SERVICE`, `ATHENA`, `CLOUDWATCH`, `PROMETHEUS`, `REDSHIFT`, `SITEWISE`, `TIMESTREAM`, `XRAY`
[]descriptionoptionalstringThe workspace description
nullenable_alertsoptionalboolDetermines whether IAM permissions for alerting are enabled for the workspace IAM role
falsegrafana_tokenoptionalstringA token from Grafana Labs that ties your AWS account with a Grafana Labs account
nullgrafana_versionoptionalstringSpecifies the version of Grafana to support in the new workspace. If not specified, the default version for the `aws_grafana_workspace` resource will be used. See `aws_grafana_workspace` documentation for available options.
nulliam_role_arnoptionalstringExisting IAM role ARN for the workspace. Required if `create_iam_role` is set to `false`
nulliam_role_descriptionoptionalstringThe description of the workspace IAM role
nulliam_role_force_detach_policiesoptionalboolDetermines whether the workspace IAM role policies will be forced to detach
trueiam_role_max_session_durationoptionalnumberMaximum session duration (in seconds) that you want to set for the IAM role
nulliam_role_nameoptionalstringName to use on workspace IAM role created
nulliam_role_pathoptionalstringWorkspace IAM role path
nulliam_role_permissions_boundaryoptionalstringARN of the policy that is used to set the permissions boundary for the IAM role
nulliam_role_policy_arnsoptionallist(string)List of ARNs of IAM policies to attach to the workspace IAM role
[]iam_role_tagsoptionalmap(string)A map of additional tags to add to the IAM role created
{}license_typeoptionalstringThe type of license for the workspace license association. Valid values are `ENTERPRISE` and `ENTERPRISE_FREE_TRIAL`
ENTERPRISEnameoptionalstringThe Grafana workspace name
nullnetwork_access_controloptionalanyConfiguration for network access to your workspace
{}notification_destinationsoptionallist(string)The notification destinations. If a data source is specified here, Amazon Managed Grafana will create IAM roles and permissions needed to use these destinations. Must be set to `SNS`
[]organization_role_nameoptionalstringThe role name that the workspace uses to access resources through Amazon Organizations
nullorganizational_unitsoptionallist(string)The Amazon Organizations organizational units that the workspace is authorized to use data sources from
[]permission_typeoptionalstringThe permission type of the workspace. If `SERVICE_MANAGED` is specified, the IAM roles and IAM policy attachments are generated automatically. If `CUSTOMER_MANAGED` is specified, the IAM roles and IAM policy attachments will not be created
SERVICE_MANAGEDrole_associationsoptionalanyMap of maps to assocaite user/group IDs to a role. Map key can be used as the `role`
{}saml_admin_role_valuesoptionallist(string)SAML authentication admin role values
[]saml_allowed_organizationsoptionallist(string)SAML authentication allowed organizations
[]saml_editor_role_valuesoptionallist(string)SAML authentication editor role values
[]saml_email_assertionoptionalstringSAML authentication email assertion
nullsaml_groups_assertionoptionalstringSAML authentication groups assertion
nullsaml_idp_metadata_urloptionalstringSAML authentication IDP Metadata URL. Note that either `saml_idp_metadata_url` or `saml_idp_metadata_xml`
nullsaml_idp_metadata_xmloptionalstringSAML authentication IDP Metadata XML. Note that either `saml_idp_metadata_url` or `saml_idp_metadata_xml`
nullsaml_login_assertionoptionalstringSAML authentication email assertion
nullsaml_login_validity_durationoptionalnumberSAML authentication login validity duration
nullAll 56 are optional — the module deploys with none of them set. Showing 40, so the site stays a static download — the remaining 16 are in the source.
Outputs
18
license_expirationIf `license_type` is set to `ENTERPRISE`, this is the expiration date of the enterprise license
license_free_trial_expirationIf `license_type` is set to `ENTERPRISE_FREE_TRIAL`, this is the expiration date of the free trial
saml_configuration_statusStatus of the SAML configuration
security_group_arnAmazon Resource Name (ARN) of the security group
security_group_idID of the security group
workspace_api_keysThe workspace API keys created including their attributes
workspace_arnThe Amazon Resource Name (ARN) of the Grafana workspace
workspace_endpointThe endpoint of the Grafana workspace
workspace_grafana_versionThe version of Grafana running on the workspace
workspace_iam_role_arnIAM role ARN of the Grafana workspace
workspace_iam_role_nameIAM role name of the Grafana workspace
workspace_iam_role_policy_arnIAM Policy ARN of the Grafana workspace IAM role
workspace_iam_role_policy_idStable and unique string identifying the IAM Policy
workspace_iam_role_policy_nameIAM Policy name of the Grafana workspace IAM role
workspace_iam_role_unique_idStable and unique string identifying the IAM role
workspace_idThe ID of the Grafana workspace
workspace_service_account_tokensThe workspace service account tokens created including their attributes
workspace_service_accountsThe workspace service accounts created including their attributes
What the agent wires into the next module. An edge on the architecture diagram is one of these consumed by something else.