From 30e5ec7b19f78d9c671efb0a8f32e84028818a55 Mon Sep 17 00:00:00 2001
From: Radek Simko <radek.simko@timeinc.com>
Date: Fri, 5 Feb 2016 13:11:11 +0000
Subject: [PATCH] examples: Add examples for CloudWatch Events

---
 .../aws-cloudwatch-events/kinesis/README.md   | 14 ++++
 .../aws-cloudwatch-events/kinesis/main.tf     | 72 +++++++++++++++++++
 .../aws-cloudwatch-events/kinesis/outputs.tf  |  7 ++
 .../kinesis/variables.tf                      | 24 +++++++
 examples/aws-cloudwatch-events/sns/README.md  | 15 ++++
 examples/aws-cloudwatch-events/sns/main.tf    | 29 ++++++++
 examples/aws-cloudwatch-events/sns/outputs.tf |  7 ++
 .../aws-cloudwatch-events/sns/variables.tf    | 19 +++++
 8 files changed, 187 insertions(+)
 create mode 100644 examples/aws-cloudwatch-events/kinesis/README.md
 create mode 100644 examples/aws-cloudwatch-events/kinesis/main.tf
 create mode 100644 examples/aws-cloudwatch-events/kinesis/outputs.tf
 create mode 100644 examples/aws-cloudwatch-events/kinesis/variables.tf
 create mode 100644 examples/aws-cloudwatch-events/sns/README.md
 create mode 100644 examples/aws-cloudwatch-events/sns/main.tf
 create mode 100644 examples/aws-cloudwatch-events/sns/outputs.tf
 create mode 100644 examples/aws-cloudwatch-events/sns/variables.tf

diff --git a/examples/aws-cloudwatch-events/kinesis/README.md b/examples/aws-cloudwatch-events/kinesis/README.md
new file mode 100644
index 000000000..2dcb829cc
--- /dev/null
+++ b/examples/aws-cloudwatch-events/kinesis/README.md
@@ -0,0 +1,14 @@
+# CloudWatch Event sent to Kinesis Stream
+
+This example sets up a CloudWatch Event Rule with a Target and IAM Role & Policy
+to send all autoscaling events into Kinesis stream for further examination.
+
+See more details about [CloudWatch Events](http://docs.aws.amazon.com/AmazonCloudWatch/latest/DeveloperGuide/WhatIsCloudWatchEvents.html)
+in the official AWS docs.
+
+## How to run the example
+
+```
+terraform apply \
+	-var=aws_region=us-west-2
+```
diff --git a/examples/aws-cloudwatch-events/kinesis/main.tf b/examples/aws-cloudwatch-events/kinesis/main.tf
new file mode 100644
index 000000000..0e7a22052
--- /dev/null
+++ b/examples/aws-cloudwatch-events/kinesis/main.tf
@@ -0,0 +1,72 @@
+provider "aws" {
+  region = "${var.aws_region}"
+}
+
+resource "aws_cloudwatch_event_rule" "foo" {
+  name = "${var.rule_name}"
+  event_pattern = <<PATTERN
+{
+  "detail-type": [
+    "AWS API Call via CloudTrail"
+  ],
+  "detail": {
+    "eventSource": [
+      "autoscaling.amazonaws.com"
+    ]
+  }
+}
+PATTERN
+  role_arn = "${aws_iam_role.role.arn}"
+}
+
+resource "aws_iam_role" "role" {
+	name = "${var.iam_role_name}"
+	assume_role_policy = <<POLICY
+{
+  "Version": "2012-10-17",
+  "Statement": [
+    {
+      "Action": "sts:AssumeRole",
+      "Principal": {
+        "Service": "events.amazonaws.com"
+      },
+      "Effect": "Allow",
+      "Sid": ""
+    }
+  ]
+}
+POLICY
+}
+
+resource "aws_iam_role_policy" "policy" {
+  name = "tf-example-policy"
+  role = "${aws_iam_role.role.id}"
+  policy = <<POLICY
+{
+  "Version": "2012-10-17",
+  "Statement": [
+    {
+      "Action": [
+        "kinesis:PutRecord",
+        "kinesis:PutRecords"
+      ],
+      "Resource": [
+        "*"
+      ],
+      "Effect": "Allow"
+    }
+  ]
+}
+POLICY
+}
+
+resource "aws_cloudwatch_event_target" "foobar" {
+	rule = "${aws_cloudwatch_event_rule.foo.name}"
+	target_id = "${var.target_name}"
+	arn = "${aws_kinesis_stream.foo.arn}"
+}
+
+resource "aws_kinesis_stream" "foo" {
+  name = "${var.stream_name}"
+  shard_count = 1
+}
diff --git a/examples/aws-cloudwatch-events/kinesis/outputs.tf b/examples/aws-cloudwatch-events/kinesis/outputs.tf
new file mode 100644
index 000000000..b92e76145
--- /dev/null
+++ b/examples/aws-cloudwatch-events/kinesis/outputs.tf
@@ -0,0 +1,7 @@
+output "rule_arn" {
+  value = "${aws_cloudwatch_event_rule.foo.arn}"
+}
+
+output "kinesis_stream_arn" {
+  value = "${aws_kinesis_stream.foo.arn}"
+}
diff --git a/examples/aws-cloudwatch-events/kinesis/variables.tf b/examples/aws-cloudwatch-events/kinesis/variables.tf
new file mode 100644
index 000000000..b93fc1e34
--- /dev/null
+++ b/examples/aws-cloudwatch-events/kinesis/variables.tf
@@ -0,0 +1,24 @@
+variable "aws_region" {
+  description = "The AWS region to create resources in."
+  default = "us-east-1"
+}
+
+variable "rule_name" {
+  description = "The name of the CloudWatch Event Rule"
+  default = "tf-example-cloudwatch-event-rule-for-kinesis"
+}
+
+variable "iam_role_name" {
+  description = "The name of the IAM Role"
+  default = "tf-example-iam-role-for-kinesis"
+}
+
+variable "target_name" {
+  description = "The name of the CloudWatch Event Target"
+  default = "tf-example-cloudwatch-event-target-for-kinesis"
+}
+
+variable "stream_name" {
+  description = "The name of the Kinesis Stream to send events to"
+  default = "tf-example-kinesis-stream"
+}
diff --git a/examples/aws-cloudwatch-events/sns/README.md b/examples/aws-cloudwatch-events/sns/README.md
new file mode 100644
index 000000000..17c133688
--- /dev/null
+++ b/examples/aws-cloudwatch-events/sns/README.md
@@ -0,0 +1,15 @@
+# CloudWatch Event sent to SNS Topic
+
+This example sets up a CloudWatch Event Rule with a Target and SNS Topic
+to send any CloudTrail API operation into that SNS topic. This allows you
+to add SNS subscriptions which may notify you about suspicious activity.
+
+See more details about [CloudWatch Events](http://docs.aws.amazon.com/AmazonCloudWatch/latest/DeveloperGuide/WhatIsCloudWatchEvents.html)
+in the official AWS docs.
+
+## How to run the example
+
+```
+terraform apply \
+	-var=aws_region=us-west-2
+```
diff --git a/examples/aws-cloudwatch-events/sns/main.tf b/examples/aws-cloudwatch-events/sns/main.tf
new file mode 100644
index 000000000..ca269546f
--- /dev/null
+++ b/examples/aws-cloudwatch-events/sns/main.tf
@@ -0,0 +1,29 @@
+provider "aws" {
+  region = "${var.aws_region}"
+}
+
+resource "aws_cloudwatch_event_rule" "foo" {
+  name = "${var.rule_name}"
+  event_pattern = <<PATTERN
+{
+  "detail-type": [
+    "AWS API Call via CloudTrail"
+  ],
+  "detail": {
+    "eventSource": [
+      "cloudtrail.amazonaws.com"
+    ]
+  }
+}
+PATTERN
+}
+
+resource "aws_cloudwatch_event_target" "bar" {
+  rule = "${aws_cloudwatch_event_rule.foo.name}"
+  target_id = "${var.target_name}"
+  arn = "${aws_sns_topic.foo.arn}"
+}
+
+resource "aws_sns_topic" "foo" {
+  name = "${var.sns_topic_name}"
+}
diff --git a/examples/aws-cloudwatch-events/sns/outputs.tf b/examples/aws-cloudwatch-events/sns/outputs.tf
new file mode 100644
index 000000000..9e666efa7
--- /dev/null
+++ b/examples/aws-cloudwatch-events/sns/outputs.tf
@@ -0,0 +1,7 @@
+output "rule_arn" {
+  value = "${aws_cloudwatch_event_rule.foo.arn}"
+}
+
+output "sns_topic_arn" {
+  value = "${aws_sns_topic.foo.arn}"
+}
diff --git a/examples/aws-cloudwatch-events/sns/variables.tf b/examples/aws-cloudwatch-events/sns/variables.tf
new file mode 100644
index 000000000..f8c993c57
--- /dev/null
+++ b/examples/aws-cloudwatch-events/sns/variables.tf
@@ -0,0 +1,19 @@
+variable "aws_region" {
+  description = "The AWS region to create resources in."
+  default = "us-east-1"
+}
+
+variable "rule_name" {
+  description = "The name of the CloudWatch Event Rule"
+  default = "tf-example-cloudwatch-event-rule-for-sns"
+}
+
+variable "target_name" {
+  description = "The name of the CloudWatch Event Target"
+  default = "tf-example-cloudwatch-event-target-for-sns"
+}
+
+variable "sns_topic_name" {
+  description = "The name of the SNS Topic to send events to"
+  default = "tf-example-sns-topic"
+}