Corelight Fleet Manager on AWS (ALB + EC2 + Route53).
module "fleet" {
source = "github.com/corelight/terraform//modules/aws/fleet?ref=v28.4.0-1"
vpc_id = "vpc-12345abc"
public_subnets = ["subnet-aaa", "subnet-bbb"]
private_subnet = "subnet-ccc"
route53_zone_name = "example.com"
aws_key_pair_name = "your-key-pair"
community_string = "your-community-string"
fleet_username = "admin"
fleet_password = "your-fleet-password"
fleet_certificate_file_path = "/path/to/cert.pem"
fleet_sensor_license_file_path = "/path/to/license.txt"
}| Name | Version |
|---|---|
| terraform | >= 1.3.2 |
| aws | >= 5.0 |
| Name | Version |
|---|---|
| aws | >= 5.0 |
| Name | Description | Type | Default | Required |
|---|---|---|---|---|
| aws_key_pair_name | The name of the AWS key pair for accessing Fleet instances. | string |
n/a | yes |
| community_string | Fleet community string for sensor pairing. | string |
n/a | yes |
| fleet_certificate_file_path | Path to the Fleet certificate file. | string |
n/a | yes |
| fleet_password | Fleet admin password. | string |
n/a | yes |
| fleet_sensor_license_file_path | Path to the Fleet sensor license file. | string |
n/a | yes |
| fleet_username | Fleet admin username. | string |
n/a | yes |
| private_subnet | The ID of the subnet where Fleet instance will be deployed. | string |
n/a | yes |
| public_subnets | List of subnet IDs where the ALB will be deployed. | list(string) |
n/a | yes |
| route53_zone_name | The Route53 hosted zone name (e.g., example.com.). | string |
n/a | yes |
| vpc_id | The ID of the VPC where resources will be deployed. | string |
n/a | yes |
| admin_cidr_blocks | List of CIDR blocks for admin access to Fleet instance (e.g., your home or office IP). | list(string) |
[] |
no |
| alb_api_ingress_cidr_blocks | List of CIDR blocks allowed to access Fleet API on port 1443 | list(string) |
[ |
no |
| alb_https_ingress_cidr_blocks | List of CIDR blocks allowed to access ALB on HTTPS (443) | list(string) |
[ |
no |
| alb_security_group_id | Optional: Existing ALB security group ID to use | string |
null |
no |
| aws_ec2_size | EC2 instance type/size. Follow documentation for Fleet to determine the appropriate size. | string |
"t3.large" |
no |
| aws_volume_size | Root EBS volume size (GB). | number |
50 |
no |
| certificate_arn | ACM certificate ARN for HTTPS. Optional; if not provided, users will see a browser warning when accessing Fleet. | string |
"" |
no |
| fleet_alb_name | The name of the Fleet ALB. | string |
"corelight-fleet-alb" |
no |
| fleet_alb_security_group_name | Name of the security group used by the ALB. | string |
"corelight-fleet-alb-security-group" |
no |
| fleet_ami_id | Optional: AMI ID to use for Fleet instance. If not provided, the latest Ubuntu 22.04 LTS AMI will be used. | string |
null |
no |
| fleet_instance_name | The Fleet instance name. | string |
"corelight-fleet" |
no |
| fleet_instance_security_group_name | Name of the security group used by the Fleet instance. | string |
"corelight-fleet-instance-security-group" |
no |
| fleet_lb_target_group_name | The name of the Fleet ALB target group. | string |
"corelight-fleet-tg" |
no |
| fleet_version | The version of Fleet to deploy. | string |
"28.2.2" |
no |
| instance_security_group_id | Optional: Existing instance security group ID to use | string |
null |
no |
| radius_address | RADIUS server address and port (e.g., 1.2.3.4:1812). If RADIUS is enabled, this must be set. | string |
"" |
no |
| radius_enable | Enable RADIUS authentication. Optional; if not set, RADIUS will not be configured. | bool |
false |
no |
| radius_shared_secret | RADIUS shared secret. If RADIUS is enabled, this must be set. | string |
"" |
no |
| subdomain | Subdomain for Fleet to be prefixed to the hosted zone name (e.g., fleet). | string |
"fleet" |
no |
No outputs.
For deployment guidance, sizing recommendations, troubleshooting, and architecture details, see the official Corelight documentation.