| bitops_code_only | Will run only the generation phase of BitOps, where the Terraform and Ansible code is built. | no | — |
| bitops_code_store | Store BitOps code as a GitHub artifact | no | false |
| aws_access_key_id | AWS access key ID | yes | — |
| aws_secret_access_key | AWS secret access key | yes | — |
| aws_session_token | AWS session token | no | — |
| aws_default_region | AWS default region | no | us-east-1 |
| aws_resource_identifier | Set to override the AWS resource identifier for the deployment. Defaults to `${org}-{repo}-{branch}`. Use with destroy to destroy specific resources. | no | — |
| aws_additional_tags | A JSON object of additional tags that will be included on created resources. Example: `{"key1": "value1", "key2": "value2"}` | no | — |
| tf_stack_destroy | Set to "true" to Destroy the stack through Terraform. | no | — |
| tf_state_file_name | Change this to be anything you want to. Carefull to be consistent here. A missing file could trigger recreation, or stepping over destruction of non-defined objects. | no | — |
| tf_state_file_name_append | Append a string to the tf-state-file. Setting this to `unique` will generate `tf-state-aws-unique`. Can co-exist with the tf_state_file_name variable. | no | — |
| tf_state_bucket | AWS S3 bucket to use for Terraform state. Defaults to `${org}-${repo}-{branch}-tf-state` | no | — |
| tf_state_bucket_destroy | Force purge and deletion of S3 bucket defined. Any file contained there will be destroyed. `tf_stack_destroy` must also be `true` | no | — |
| aws_redis_enable | Enables the creation of a Redis instance | no | true |
| aws_redis_user | Redis username. Defaults to redisuser | no | — |
| aws_redis_user_access_string | String expression for user access. Defaults to on ~* +@all | no | — |
| aws_redis_user_group_name | User group name. Defaults to aws_resource_identifier-redis | no | — |
| aws_redis_security_group_name | Redis security group name. Defaults to SG for aws_resource_identifier - Redis | no | — |
| aws_redis_ingress_allow_all | Allow access from 0.0.0.0/0 in the same VPC | no | — |
| aws_redis_allowed_security_groups | Comma separated list of security groups to be added to the Redis SG. | no | — |
| aws_redis_subnets | Define a list of specific subnets where Redis will live. Defaults to all of the VPC ones. If not defined, default VPC. | no | — |
| aws_redis_port | Redis port. Defaults to 6379 | no | — |
| aws_redis_at_rest_encryption | Encryption at rest. Defaults to true. | no | — |
| aws_redis_in_transit_encryption | In-transit encryption. Defaults to true. | no | — |
| aws_redis_replication_group_id | Name of the Redis replication group. Defaults to aws_resource_identifier-redis | no | — |
| aws_redis_node_type | Node type of the Redis instance. Defaults to cache.t2.small | no | — |
| aws_redis_num_cache_clusters | Amount of Redis nodes. Defaults to 1 | no | — |
| aws_redis_parameter_group_name | Redis parameters groups name. If cluster wanted, set it to something that includes .cluster.on. Defaults to default.redis7 | no | — |
| aws_redis_num_node_groups | Number of node groups. Defaults to 0. | no | — |
| aws_redis_replicas_per_node_group | Number of replicas per node group. Defaults to 0 | no | — |
| aws_redis_multi_az_enabled | Enables multi-availability-zone redis. Defaults to false | no | — |
| aws_redis_automatic_failover | Allows overriding the automatic configuration of this value, only needed when playing with resources in a non-conventional way. | no | — |
| aws_redis_apply_immediately | Specifies whether any modifications are applied immediately, or during the next maintenance window. Default is false. | no | — |
| aws_redis_auto_minor_upgrade | Specifies whether minor version engine upgrades will be applied automatically to the underlying Cache Cluster instances during the maintenance window. Defaults to true. | no | — |
| aws_redis_maintenance_window | Specifies the weekly time range for when maintenance on the cache cluster is performed. Example:sun:05:00-sun:06:00. Defaults to null. | no | — |
| aws_redis_snapshot_window | Daily time range (in UTC) when to start taking a daily snapshot. Minimum is a 60 minute period. Example: 05:00-09:00. Defaults to null. | no | — |
| aws_redis_final_snapshot | Change name to define a final snapshot. | no | — |
| aws_redis_snapshot_restore_name | Set name to restore a snapshot to the cluster. The default behaviour is to restore it each time this action runs. | no | — |
| aws_redis_cloudwatch_enabled | Enable or disables Cloudwatch logging. | no | — |
| aws_redis_cloudwatch_lg_name | Cloudwatch log group name. Defaults to /aws/redis/aws_resource_identifier. Will append log_type to it. | no | — |
| aws_redis_cloudwatch_log_format | Define log format between json (default) and text. | no | — |
| aws_redis_cloudwatch_log_type | Log type. Older Redis engines need slow-log. Newer support engine-log (default) | no | — |
| aws_redis_cloudwatch_retention_days | Number of days to retain logs. 0 to never expire. Default '14' | — | — |
| aws_redis_single_line_url_secret | Creates an AWS secret containing the connection string containing protocol://user@pass:endpoint:port | no | — |
| aws_redis_additional_tags | Additional tags to be added to every Redis related resource | no | — |
| aws_vpc_create | Define if a VPC should be created | no | — |
| aws_vpc_name | Set a specific name for the VPC | no | — |
| aws_vpc_cidr_block | Define Base CIDR block which is divided into subnet CIDR blocks. Defaults to 10.0.0.0/16. | no | — |
| aws_vpc_public_subnets | Comma separated list of public subnets. Defaults to 10.10.110.0/24 | no | — |
| aws_vpc_private_subnets | Comma separated list of private subnets. If none, none will be created. | no | — |
| aws_vpc_availability_zones | Comma separated list of availability zones. Defaults to `aws_default_region. | no | — |
| aws_vpc_id | AWS VPC ID. Accepts `vpc-###` values. | no | — |
| aws_vpc_subnet_id | Specify a Subnet to be used with the instance. If none provided, will pick one. | no | — |
| aws_vpc_enable_nat_gateway | Enables NAT gateway | no | — |
| aws_vpc_single_nat_gateway | Creates only one NAT gateway | no | — |
| aws_vpc_external_nat_ip_ids | Comma separated list of IP IDS to reuse in the NAT gateways | no | — |
| aws_vpc_additional_tags | A JSON object of additional tags that will be included on created resources. Example: `{"key1": "value1", "key2": "value2"}` | no | — |