stack.template

AWSTemplateFormatVersion: 2010-09-09
Description: Terraform remote state stack
Parameters:
  StateBucketNamePrefix:
    Description: Name prefix of the state bucket
    Type: String
    Default: terraform-state
  LockTableName:
    Description: Name of the lock table
    Type: String
    Default: terraform-state

Resources:
  StateBucket:
    Type: AWS::S3::Bucket
    Properties:
      BucketName: !Sub "${StateBucketNamePrefix}-${AWS::AccountId}"
      VersioningConfiguration:
        Status: Enabled
      BucketEncryption:
        ServerSideEncryptionConfiguration:
        - ServerSideEncryptionByDefault:
            SSEAlgorithm: aws:kms
      PublicAccessBlockConfiguration:
        BlockPublicAcls: true
        BlockPublicPolicy: true
        IgnorePublicAcls: true
        RestrictPublicBuckets: true

  LockTable:
    Type: AWS::DynamoDB::Table
    Properties:
      TableName: !Ref LockTableName
      AttributeDefinitions:
      - AttributeName: LockID
        AttributeType: S
      KeySchema:
      - AttributeName: LockID
        KeyType: HASH
      BillingMode: PROVISIONED
      ProvisionedThroughput:
        ReadCapacityUnits: 1
        WriteCapacityUnits: 1

Outputs:
  StateBucket:
    Description: Name of the state bucket
    Value: !Ref StateBucket
  StateBucketArn:
    Description: ARN of the state bucket
    Value: !GetAtt
      - StateBucket
      - Arn
  DynamoDbArn:
    Description: ARN of the Dynamo Table
    Value: !GetAtt
      - LockTable
      - Arn