Skip to content

Terraform AWS FSx

Amazon FSx file systems for Windows, Lustre, NetApp ONTAP, or OpenZFS with storage capacity, throughput, backups, encryption, and deployment in private subnets.

5 controls enforced4 frameworks

Controls Enforced

The following compliance controls are enforced by this module at terraform plan time.

Quick Start

module "fsx" {
  source  = "acscessentialeight.compliance.tf/terraform-aws-modules/fsx/aws"
  version = "<version>"

  # ... your arguments here
}

module "fsx" {
  source  = "acscism2023.compliance.tf/terraform-aws-modules/fsx/aws"
  version = "<version>"

  # ... your arguments here
}

module "fsx" {
  source  = "awscontroltower.compliance.tf/terraform-aws-modules/fsx/aws"
  version = "<version>"

  # ... your arguments here
}

module "fsx" {
  source  = "awsgenai.compliance.tf/terraform-aws-modules/fsx/aws"
  version = "<version>"

  # ... your arguments here
}

module "fsx" {
  source  = "awswellarchitected.compliance.tf/terraform-aws-modules/fsx/aws"
  version = "<version>"

  # ... your arguments here
}

module "fsx" {
  source  = "cccsmedium.compliance.tf/terraform-aws-modules/fsx/aws"
  version = "<version>"

  # ... your arguments here
}

module "fsx" {
  source  = "cfrpart11.compliance.tf/terraform-aws-modules/fsx/aws"
  version = "<version>"

  # ... your arguments here
}

module "fsx" {
  source  = "cisv140.compliance.tf/terraform-aws-modules/fsx/aws"
  version = "<version>"

  # ... your arguments here
}

module "fsx" {
  source  = "cisv500.compliance.tf/terraform-aws-modules/fsx/aws"
  version = "<version>"

  # ... your arguments here
}

module "fsx" {
  source  = "cis.compliance.tf/terraform-aws-modules/fsx/aws"
  version = "<version>"

  # ... your arguments here
}

module "fsx" {
  source  = "cisv80ig1.compliance.tf/terraform-aws-modules/fsx/aws"
  version = "<version>"

  # ... your arguments here
}

module "fsx" {
  source  = "cisacyberessentials.compliance.tf/terraform-aws-modules/fsx/aws"
  version = "<version>"

  # ... your arguments here
}

module "fsx" {
  source  = "eugmpannex11.compliance.tf/terraform-aws-modules/fsx/aws"
  version = "<version>"

  # ... your arguments here
}

module "fsx" {
  source  = "fedramplow.compliance.tf/terraform-aws-modules/fsx/aws"
  version = "<version>"

  # ... your arguments here
}

module "fsx" {
  source  = "fedrampmoderate.compliance.tf/terraform-aws-modules/fsx/aws"
  version = "<version>"

  # ... your arguments here
}

module "fsx" {
  source  = "ffiec.compliance.tf/terraform-aws-modules/fsx/aws"
  version = "<version>"

  # ... your arguments here
}

module "fsx" {
  source  = "gdpr.compliance.tf/terraform-aws-modules/fsx/aws"
  version = "<version>"

  # ... your arguments here
}

module "fsx" {
  source  = "hipaa.compliance.tf/terraform-aws-modules/fsx/aws"
  version = "<version>"

  # ... your arguments here
}

module "fsx" {
  source  = "iso27001.compliance.tf/terraform-aws-modules/fsx/aws"
  version = "<version>"

  # ... your arguments here
}

module "fsx" {
  source  = "nis2.compliance.tf/terraform-aws-modules/fsx/aws"
  version = "<version>"

  # ... your arguments here
}

module "fsx" {
  source  = "nist800171.compliance.tf/terraform-aws-modules/fsx/aws"
  version = "<version>"

  # ... your arguments here
}

module "fsx" {
  source  = "nist80053.compliance.tf/terraform-aws-modules/fsx/aws"
  version = "<version>"

  # ... your arguments here
}

module "fsx" {
  source  = "nistcsf.compliance.tf/terraform-aws-modules/fsx/aws"
  version = "<version>"

  # ... your arguments here
}

module "fsx" {
  source  = "nydfs23.compliance.tf/terraform-aws-modules/fsx/aws"
  version = "<version>"

  # ... your arguments here
}

module "fsx" {
  source  = "pcidss.compliance.tf/terraform-aws-modules/fsx/aws"
  version = "<version>"

  # ... your arguments here
}

module "fsx" {
  source  = "rbicybersecurity.compliance.tf/terraform-aws-modules/fsx/aws"
  version = "<version>"

  # ... your arguments here
}

module "fsx" {
  source  = "rbiitfnbfc.compliance.tf/terraform-aws-modules/fsx/aws"
  version = "<version>"

  # ... your arguments here
}

module "fsx" {
  source  = "soc2.compliance.tf/terraform-aws-modules/fsx/aws"
  version = "<version>"

  # ... your arguments here
}

See the Get Started guide to get started and read the Features section for more details on how to customize the module for your requirements.

Migration from Upstream

Already using terraform-aws-modules? Change only the source URL:

module "fsx" {
  source  = "terraform-aws-modules/fsx/aws"
  version = "1.0"
}

module "fsx" {
  source  = "soc2.compliance.tf/terraform-aws-modules/fsx/aws"
  version = "1.0"
}

Same arguments. Same outputs. Compliance controls are enforced automatically at terraform plan. If a required value is missing, you get a clear validation error telling you what to set.

See the Migration Guide for step-by-step instructions.

Reversibility

No lock-in. Switch back by reverting the source URL to the upstream path:

module "fsx" {
  source  = "terraform-aws-modules/fsx/aws"
}

Run terraform init -upgrade. Terraform state is unchanged — same resource addresses, same provider, no compliance.tf-specific resources. Controls you already applied remain in AWS.

Mapped compliance frameworks

A.5.13 Labelling of information

A.8.14 Redundancy of information processing facilities

3 Incident handling

4 Business continuity and crisis management

11 Access control

PR.IP-4

RC.RP-1

10.3.3: Audit log files, including those for externalfacing technologies, are promptly backed up to a secure, central, internal log server(s) or other media that is difficult to modify

10.3.3: Audit logs are protected from destruction and unauthorized modifications.

Framework Coverage

Which controls from this module are active under each framework endpoint. ● enforced by default · ○ not activated by this endpoint

ControlISO/IEC 27001:2022NIS2 Directive (EU 2022/2555)NIST Cybersecurity Framework v2.0PCI DSS v4.0
FSx for OpenZFS file systems should be configured to copy tags to backups and volumes●●●●
FSx for Lustre file systems should be configured to copy tags to backups●●●●
FSx for NetApp ONTAP file systems should be configured for Multi-AZ deployment○○○○
FSx for OpenZFS file systems should be configured for Multi-AZ deployment○○○○
FSx for Windows File Server file systems should be configured for Multi-AZ deployment●○○○

Showing top 4 frameworks by coverage. All framework endpoints →