Data Source: awsNetworkmanagerCoreNetworkPolicyDocument

Generates a Core Network policy document in JSON format for use with resources that expect core network policy documents such as awsccNetworkmanagerCoreNetwork. It follows the API definition from the core-network-policy documentation.

Using this data source to generate policy documents is optional. It is also valid to use literal JSON strings in your configuration or to use the file interpolation function to read a raw JSON policy document from a file.

-> For more information about building AWS Core Network policy documents with Terraform, see the Using AWS & AWSCC Provider Together Guide

Example Usage

Basic Example

/*Provider bindings are generated by running cdktf get.
See https://cdk.tf/provider-generation for more details.*/
import * as aws from "./.gen/providers/aws";
new aws.dataAwsNetworkmanagerCoreNetworkPolicyDocument.DataAwsNetworkmanagerCoreNetworkPolicyDocument(
  this,
  "test",
  {
    attachmentPolicies: [
      {
        action: {
          associationMethod: "constant",
          segment: "shared",
        },
        conditionLogic: "or",
        conditions: [
          {
            key: "segment",
            operator: "equals",
            type: "tag-value",
            value: "shared",
          },
        ],
        ruleNumber: 100,
      },
      {
        action: {
          associationMethod: "constant",
          segment: "prod",
        },
        conditionLogic: "or",
        conditions: [
          {
            key: "segment",
            operator: "equals",
            type: "tag-value",
            value: "prod",
          },
        ],
        ruleNumber: 200,
      },
    ],
    coreNetworkConfiguration: [
      {
        asnRanges: ["64512-64555"],
        edgeLocations: [
          {
            asn: 64512,
            location: "us-east-1",
          },
          {
            asn: 64513,
            location: "eu-central-1",
          },
        ],
        vpnEcmpSupport: false,
      },
    ],
    segmentActions: [
      {
        action: "share",
        mode: "attachment-route",
        segment: "shared",
        shareWith: ["*"],
      },
    ],
    segments: [
      {
        description: "Segment for shared services",
        name: "shared",
        requireAttachmentAcceptance: true,
      },
      {
        description: "Segment for prod services",
        name: "prod",
        requireAttachmentAcceptance: true,
      },
    ],
  }
);

dataAwsNetworkmanagerCoreNetworkPolicyDocumentTestJson will evaluate to:

{
  "version": "2021.12",
  "core-network-configuration": {
    "asn-ranges": [
      "64512-64555"
    ],
    "vpn-ecmp-support": false,
    "edge-locations": [
      {
        "location": "us-east-1",
        "asn": 64512
      },
      {
        "location": "eu-central-1",
        "asn": 64513
      }
    ]
  },
  "segments": [
    {
      "name": "shared",
      "description": "Segment for shared services",
      "require-attachment-acceptance": true
    },
    {
      "name": "prod",
      "description": "Segment for prod services",
      "require-attachment-acceptance": true
    }
  ],
  "attachment-policies": [
    {
      "rule-number": 100,
      "action": {
        "association-method": "constant",
        "segment": "shared"
      },
      "conditions": [
        {
          "type": "tag-value",
          "operator": "equals",
          "key": "segment",
          "value": "shared"
        }
      ],
      "condition-logic": "or"
    },
    {
      "rule-number": 200,
      "action": {
        "association-method": "constant",
        "segment": "prod"
      },
      "conditions": [
        {
          "type": "tag-value",
          "operator": "equals",
          "key": "segment",
          "value": "prod"
        }
      ],
      "condition-logic": "or"
    }
  ],
  "segment-actions": [
    {
      "action": "share",
      "mode": "attachment-route",
      "segment": "shared",
      "share-with": "*"
    }
  ]
}