aws_cloudhsm_cluster

account_id

Type: STRING

backup_policy

Type: STRING
Provider name: BackupPolicy
Description: The cluster’s backup policy.

backup_retention_policy

Type: STRUCT
Provider name: BackupRetentionPolicy
Description: A policy that defines how the service retains backups.

• type
  Type: STRING
  Provider name: Type
  Description: The type of backup retention policy. For the DAYS type, the value is the number of days to retain backups.
  
• value
  Type: STRING
  Provider name: Value
  Description: Use a value between 7 - 379.
  

certificates

Type: STRUCT
Provider name: Certificates
Description: Contains one or more certificates or a certificate signing request (CSR).

• aws_hardware_certificate
  Type: STRING
  Provider name: AwsHardwareCertificate
  Description: The HSM hardware certificate issued (signed) by CloudHSM.
  
• cluster_certificate
  Type: STRING
  Provider name: ClusterCertificate
  Description: The cluster certificate issued (signed) by the issuing certificate authority (CA) of the cluster’s owner.
  
• cluster_csr
  Type: STRING
  Provider name: ClusterCsr
  Description: The cluster’s certificate signing request (CSR). The CSR exists only when the cluster’s state is UNINITIALIZED.
  
• hsm_certificate
  Type: STRING
  Provider name: HsmCertificate
  Description: The HSM certificate issued (signed) by the HSM hardware.
  
• manufacturer_hardware_certificate
  Type: STRING
  Provider name: ManufacturerHardwareCertificate
  Description: The HSM hardware certificate issued (signed) by the hardware manufacturer.
  

cluster_id

Type: STRING
Provider name: ClusterId
Description: The cluster’s identifier (ID).

create_timestamp

Type: TIMESTAMP
Provider name: CreateTimestamp
Description: The date and time when the cluster was created.

hsm_type

Type: STRING
Provider name: HsmType
Description: The type of HSM that the cluster contains.

hsm_type_rollback_expiration

Type: TIMESTAMP
Provider name: HsmTypeRollbackExpiration
Description: The timestamp until when the cluster can be rolled back to its original HSM type.

hsms

Type: UNORDERED_LIST_STRUCT
Provider name: Hsms
Description: Contains information about the HSMs in the cluster.

• availability_zone
  Type: STRING
  Provider name: AvailabilityZone
  Description: The Availability Zone that contains the HSM.
  
• cluster_id
  Type: STRING
  Provider name: ClusterId
  Description: The identifier (ID) of the cluster that contains the HSM.
  
• eni_id
  Type: STRING
  Provider name: EniId
  Description: The identifier (ID) of the HSM’s elastic network interface (ENI).
  
• eni_ip
  Type: STRING
  Provider name: EniIp
  Description: The IP address of the HSM’s elastic network interface (ENI).
  
• eni_ip_v6
  Type: STRING
  Provider name: EniIpV6
  Description: The IPv6 address (if any) of the HSM’s elastic network interface (ENI).
  
• hsm_id
  Type: STRING
  Provider name: HsmId
  Description: The HSM’s identifier (ID).
  
• hsm_type
  Type: STRING
  Provider name: HsmType
  Description: The type of HSM.
  
• state
  Type: STRING
  Provider name: State
  Description: The HSM’s state.
  
• state_message
  Type: STRING
  Provider name: StateMessage
  Description: A description of the HSM’s state.
  
• subnet_id
  Type: STRING
  Provider name: SubnetId
  Description: The subnet that contains the HSM’s elastic network interface (ENI).
  

mode

Type: STRING
Provider name: Mode
Description: The mode of the cluster.

network_type

Type: STRING
Provider name: NetworkType
Description: The cluster’s NetworkType can be IPv4 (the default) or DUALSTACK. The IPv4 NetworkType restricts communication between your application and the hardware security modules (HSMs) to the IPv4 protocol only. The DUALSTACK NetworkType enables communication over both IPv4 and IPv6 protocols. To use DUALSTACK, configure your virtual private cloud (VPC) and subnets to support both IPv4 and IPv6. This configuration involves adding IPv6 Classless Inter-Domain Routing (CIDR) blocks to the existing IPv4 CIDR blocks in your subnets. The NetworkType you choose affects the network addressing options for your cluster. DUALSTACK provides more flexibility by supporting both IPv4 and IPv6 communication.

pre_co_password

Type: STRING
Provider name: PreCoPassword
Description: The default password for the cluster’s Pre-Crypto Officer (PRECO) user.

security_group

Type: STRING
Provider name: SecurityGroup
Description: The identifier (ID) of the cluster’s security group.

source_backup_id

Type: STRING
Provider name: SourceBackupId
Description: The identifier (ID) of the backup used to create the cluster. This value exists only when the cluster was created from a backup.

state

Type: STRING
Provider name: State
Description: The cluster’s state.

state_message

Type: STRING
Provider name: StateMessage
Description: A description of the cluster’s state.

subnet_mapping

Type: MAP_STRING_STRING
Provider name: SubnetMapping
Description: A map from availability zone to the cluster’s subnet in that availability zone.

tags

Type: UNORDERED_LIST_STRING

vpc_id

Type: STRING
Provider name: VpcId
Description: The identifier (ID) of the virtual private cloud (VPC) that contains the cluster.