Terraform Provider AWS IP Ranges

Terraform provider for working with public AWS IP range data.

This provider offers the same functionality as the aws_ip_ranges data source in the AWS provider, but with some marginal benefits such as a smaller binary size and optional caching to reduce or eliminate network latency.

Requirements

• Terraform >= 1.0
• Go >= 1.22

Building the Provider

1. Clone the repository
2. Enter the repository directory
3. Build the provider using the Go install command:

go install

Using the Provider

The provider can be configured with no options to use the default caching location (.aws/ip-ranges.json in the calling user's home directory) and cache expiration (30 days). Failure to cache the file will not trigger an error, but will result in the provider fetching the file once during each new invocation of the provider.

provider "awsipranges" {}

Optional arguments are available to customize the cache file path and cache expiration.

provider "awsipranges" {
  # optional cache configuration
  cachefile  = "path/to/cache/ip-ranges.json"
  expiration = "240h"
}

Using the Data Source

This provider currently only exposes one data source for fetching and filtering IPv4 ranges published by AWS. The ranges can be filtered by IP address, region, network border group, or service. Example are included below.

Filterting by IP Address

data "awsipranges_ranges" "example" {
  filters = [
    {
      type   = "ip"
      values = ["3.5.12.4"]
    }
  ]
}

Filtering by Region

data "awsipranges_ranges" "example" {
  filters = [
    {
      type   = "region"
      values = ["us-east-1"]
    }
  ]
}

Filtering by Service

data "awsipranges_ranges" "example" {
  filters = [
    {
      type   = "service"
      values = ["S3"]
    }
  ]
}

Developing the Provider

If you wish to work on the provider, you'll first need Go installed on your machine (see Requirements above).

To compile the provider, run go install. This will build the provider and put the provider binary in the $GOPATH/bin directory.

To generate or update documentation, run make generate.

make generate

In order to run the full suite of Acceptance tests, run make testacc.

make testacc