Terraform AWS ACM¶
Terraform module which creates and validates ACM (AWS Certificate Manager) certificates on AWS with support for DNS and email validation, SANs, and Route53 integration.
Implemented Controls¶
The following compliance controls are implemented in this module.
- ACM certificates should not use wildcard certificates
- RSA certificates managed by ACM should use a key length of at least 2,048 bits
- ACM certificates should have transparency logging enabled
Compliance.tf registry endpoints¶
module "acm" {
source = "acscessentialeight.compliance.tf/terraform-aws-modules/acm/aws"
version = "<version>"
# ... your arguments here
}
module "acm" {
source = "acscism2023.compliance.tf/terraform-aws-modules/acm/aws"
version = "<version>"
# ... your arguments here
}
module "acm" {
source = "awscontroltower.compliance.tf/terraform-aws-modules/acm/aws"
version = "<version>"
# ... your arguments here
}
module "acm" {
source = "awsgenai.compliance.tf/terraform-aws-modules/acm/aws"
version = "<version>"
# ... your arguments here
}
module "acm" {
source = "awswellarchitected.compliance.tf/terraform-aws-modules/acm/aws"
version = "<version>"
# ... your arguments here
}
module "acm" {
source = "cccsmedium.compliance.tf/terraform-aws-modules/acm/aws"
version = "<version>"
# ... your arguments here
}
module "acm" {
source = "cfrpart11.compliance.tf/terraform-aws-modules/acm/aws"
version = "<version>"
# ... your arguments here
}
module "acm" {
source = "cis.compliance.tf/terraform-aws-modules/acm/aws"
version = "<version>"
# ... your arguments here
}
module "acm" {
source = "cisv500.compliance.tf/terraform-aws-modules/acm/aws"
version = "<version>"
# ... your arguments here
}
module "acm" {
source = "cisv600.compliance.tf/terraform-aws-modules/acm/aws"
version = "<version>"
# ... your arguments here
}
module "acm" {
source = "cisv80ig1.compliance.tf/terraform-aws-modules/acm/aws"
version = "<version>"
# ... your arguments here
}
module "acm" {
source = "cisacyberessentials.compliance.tf/terraform-aws-modules/acm/aws"
version = "<version>"
# ... your arguments here
}
module "acm" {
source = "eugmpannex11.compliance.tf/terraform-aws-modules/acm/aws"
version = "<version>"
# ... your arguments here
}
module "acm" {
source = "fedramplow.compliance.tf/terraform-aws-modules/acm/aws"
version = "<version>"
# ... your arguments here
}
module "acm" {
source = "fedrampmoderate.compliance.tf/terraform-aws-modules/acm/aws"
version = "<version>"
# ... your arguments here
}
module "acm" {
source = "ffiec.compliance.tf/terraform-aws-modules/acm/aws"
version = "<version>"
# ... your arguments here
}
module "acm" {
source = "gdpr.compliance.tf/terraform-aws-modules/acm/aws"
version = "<version>"
# ... your arguments here
}
module "acm" {
source = "hipaa.compliance.tf/terraform-aws-modules/acm/aws"
version = "<version>"
# ... your arguments here
}
module "acm" {
source = "iso27001.compliance.tf/terraform-aws-modules/acm/aws"
version = "<version>"
# ... your arguments here
}
module "acm" {
source = "nist800171.compliance.tf/terraform-aws-modules/acm/aws"
version = "<version>"
# ... your arguments here
}
module "acm" {
source = "nist80053.compliance.tf/terraform-aws-modules/acm/aws"
version = "<version>"
# ... your arguments here
}
module "acm" {
source = "nistcsf.compliance.tf/terraform-aws-modules/acm/aws"
version = "<version>"
# ... your arguments here
}
module "acm" {
source = "nydfs23.compliance.tf/terraform-aws-modules/acm/aws"
version = "<version>"
# ... your arguments here
}
module "acm" {
source = "pcidss.compliance.tf/terraform-aws-modules/acm/aws"
version = "<version>"
# ... your arguments here
}
module "acm" {
source = "rbicybersecurity.compliance.tf/terraform-aws-modules/acm/aws"
version = "<version>"
# ... your arguments here
}
module "acm" {
source = "rbiitfnbfc.compliance.tf/terraform-aws-modules/acm/aws"
version = "<version>"
# ... your arguments here
}
module "acm" {
source = "soc2.compliance.tf/terraform-aws-modules/acm/aws"
version = "<version>"
# ... your arguments here
}
See the Technical Usage Guide to get started and read the Features section for more details on how to customize the module for your requirements.
Mapped compliance frameworks¶
ISM-1327: Generating and issuing certificates for authentication