dominis / terraform-aws-transfer

Terraform Module for a custom identity provider for the AWS Transfer for SFTP service.

terraform-aws-transfer

This is a Terraform module to create a custom identity provider for the AWS Transfer for SFTP service.

This module aims to set up an identity provider built on:

• API Gateway
• Lambda
• AWS Secrets

This module will output the URL for the API Gateway which should be used as the url argument for the aws_transfer_server resource

Credential Store

The credentials can be stored as AWS Secrets.

The infrastructure code is based on the example provided (in the CF template) in the AWS Storage Blog article https://aws.amazon.com/blogs/storage/enable-password-authentication-for-aws-transfer-family-using-aws-secrets-manager-updated//.

WARNING: AWS Secrets Manager costs $0.40 per Secret

Inputs

Name	Description	Type	Default	Required
stage	The stage name for the deployment	string	dev	yes

Outputs

Name	Description
invoke_url	The URL which the SFTP service will use to send authentication requests to
rest_api_id	The ARN of the REST service created. This should be used in the IAM role for SFTP to invoke the service
rest_api_stage_name	The stage name of the REST service created. This should be used in the IAM role for SFTP to invoke the service

Usage

module "sftp-idp" {
  source                = "../.."
}

Examples

• Public with AWS Secrets

Terraform Versions

This module supports Terraform v1.0.