Security News
Research
Data Theft Repackaged: A Case Study in Malicious Wrapper Packages on npm
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
terraform-generator
Advanced tools
Use Node.js to generate Terraform plan.
You do not need to have Terraform installed to use this module.
The end result of using this module is Terraform plan in plain text, you will need to write the text into a file and execute it yourself.
Currently support generating plan for Terraform version 0.11 and 0.12.
This module is still in development and testing phase, it might not work fully correctly. Feel free to report issues/bugs, make requests or give suggesstions in GitHub page.
Make use of all Javascript programming features (some of which is not available in Terraform), e.g. functions, array, loops, if-else, map, etc. to generate a plain Terraform plan.
You can easily maintain your infra in Javascript/Typescript.
You don't need to use Terraform variables, you can use your own Javascript/JSON variables or use dot env.
You don't need to use Terraform modules for reusable resource creations, you can make use of Javascript functions.
The generated plan is unformatted and its validity is not verified, use terraform fmt
and terraform plan
to format it and check its validity yourself.
npm install terraform-generator
import TerraformGenerator, { Resource, Map, Argument, Utils } from 'terraform-generator';
const tfg = new TerraformGenerator({ version: '0.12' });
Block's arguments are not typed, please refer to official Terraform documentation on what arguments can be supplied.
tfg.addProvider('aws', {
region: 'ap-southeast-1',
profile: 'example'
});
const vpc = tfg.addResource('aws_vpc', 'vpc', {
cidr_block: '172.88.0.0/16'
});
{
string: 'str',
number: 123,
boolean: true,
stringList: ['str1', 'str2', 'str3'],
numberList: [111, 222, 333],
booleanList: [true, false, true],
tuple: ['str', 123, true],
object: {
arg1: 'str',
arg2: 123,
arg3: true
},
objectList: [
{
arg1: 'str'
},
{
arg1: 'str'
}
],
map: new Map({
arg1: 'str',
arg2: 123,
arg3: true
}),
block: block,
blockAttribute: block.getAttribute('attrName'),
heredoc: new Heredoc(`line1
line2
line3`);
custom1: new Argument('max(5, 12, 9)'),
custom2: new Argument('sort("a", ', block.getAttribute('attrName'), ', "c")')
}
block.getAttribute('id') // block id, string
block.getAttribute('subnets') // subnet objects, object list
block.getAttribute('subnets.*.id') // subnet ids, string list
block.getAttribute('subnets.*.id[0]') // first subnet id, string
tfg.generate();
// Write Terraform plan to a file
// Default filename is terraform.tf
// Default format is false, if format is true, Terraform needs to be installed
Utils.writePlan(tfg.generate(), 'output', { filename: 'output.tf', format: true });
import TerraformGenerator, { Map, Utils } from 'terraform-generator';
import fs from 'fs';
import path from 'path';
// Constants
const project = 'example';
// Environment variables
const configs = {
env: 'dev',
tiers: [
{
name: 'web',
cidr: '172.88.100.0/22',
subnetCidrs: ['172.88.100.0/24', '172.88.101.0/24', '172.88.102.0/24']
},
{
name: 'app',
cidr: '172.88.104.0/22',
subnetCidrs: ['172.88.104.0/24', '172.88.105.0/24', '172.88.106.0/24']
},
{
name: 'db',
cidr: '172.88.108.0/22',
subnetCidrs: ['172.88.108.0/24', '172.88.109.0/24', '172.88.110.0/24']
}
]
};
// Utility functions
const getAvailabilityZone = (i: number): string => {
if (i === 0) {
return 'ap-southeast-1a';
} else if (i === 1) {
return 'ap-southeast-1b';
} else {
return 'ap-southeast-1c';
}
};
const getTagName = (type: string, name?: string): string =>
`${type}-${project}-${configs.env}${name ? `-${name}` : ''}`;
const getTags = (type: string, name?: string): Map => new Map({
Name: getTagName(type, name),
Project: project,
Env: configs.env
});
// Start writing Terraform plan
const tfg = new TerraformGenerator({ version: '0.12' });
// Configure provider
tfg.addProvider('aws', {
region: 'ap-southeast-1',
profile: 'example'
});
// Find VPC by name
const vpc = tfg.addDataSource('aws_vpc', 'vpc', {
filter: [{
name: 'tag:Name',
values: [getTagName('vpc')]
}]
});
const subnets = {
web: [],
app: [],
db: []
};
// Create 3-tiers, each tier has 3 subnets spread across availabilty zones
configs.tiers.forEach(tier => {
tier.subnetCidrs.forEach((cidr, i) => {
const name = `${tier.name}${i}`;
const subnet = tfg.addResource('aws_subnet', `subnet_${name}`, {
vpc_id: vpc.getAttribute('id'),
cidr_block: cidr,
availability_zone: getAvailabilityZone(i),
tags: getTags('subnet', name)
});
subnets[tier.name].push(subnet);
});
});
// Output all subnet ids
tfg.addOutput('subnets', {
value: new Map({
webSubnets: subnets.web.map(subnet => subnet.getAttribute('id')),
appSubnets: subnets.app.map(subnet => subnet.getAttribute('id')),
dbSubnets: subnets.db.map(subnet => subnet.getAttribute('id'))
})
});
// Write the plan into a terraform.tf file
const outputDir = path.join('output', configs.env, 'subnets');
Utils.writePlan(tfg.generate(), outputDir, { format: true });
FAQs
Generate Terraform configurations with Node.js.
The npm package terraform-generator receives a total of 3,143 weekly downloads. As such, terraform-generator popularity was classified as popular.
We found that terraform-generator demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Research
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
Research
Security News
Attackers used a malicious npm package typosquatting a popular ESLint plugin to steal sensitive data, execute commands, and exploit developer systems.
Security News
The Ultralytics' PyPI Package was compromised four times in one weekend through GitHub Actions cache poisoning and failure to rotate previously compromised API tokens.