fix: change macie to global config

nozaq · willfarrell · Sep 5, 2021 · Sep 5, 2021 · Sep 5, 2021 · Sep 11, 2021
commit 0947e935f142dd18ab126cea18f667be0bbbcb3d
diff --git a/macie_baselines.tf → macie_baselines.tf_ b/macie_baselines.tf → macie_baselines.tf_
diff --git a/main.tf b/main.tf
@@ -114,6 +114,23 @@ module "alarm_baseline" {
   tags = var.tags
 }
 
+# --------------------------------------------------------------------------------------------------
+# Macie Baseline
+# --------------------------------------------------------------------------------------------------
+
+module "macie_baseline" {
+  source = "./modules/macie-baseline"
+
+  enabled                      = contains(var.target_regions, "ap-northeast-1") && var.macie_enabled
+  disable_email_notification   = var.macie_disable_email_notification
+  finding_publishing_frequency = var.macie_finding_publishing_frequency
+  invitation_message           = var.macie_invitation_message
+  master_account_id            = var.master_account_id
+  member_accounts              = var.member_accounts
+
+  tags = var.tags
+}
+
 # --------------------------------------------------------------------------------------------------
 # S3 Baseline
 # --------------------------------------------------------------------------------------------------

diff --git a/modules/macie-baseline/main.tf b/modules/macie-baseline/main.tf
@@ -7,8 +7,6 @@ resource "aws_macie2_account" "default" {
 
   status                       = "ENABLED"
   finding_publishing_frequency = var.finding_publishing_frequency
-
-  tags = var.tags
 }
 
 resource "aws_macie2_member" "members" {