aws_transit_gateway resource

Use the aws_transit_gateway InSpec audit resource to test properties of a transit gateway.

For additional information, including details on parameters and properties, see the AWS documentation on Transit Gateways.

Syntax

An aws_transit_gateway resource block uses the parameter to select a transit gateway.

describe aws_transit_gateway(transit_gateway_id: 'tgw-1234567') do
  it { should exist }
end

transit_gateway_id (required): This resource accepts a single parameter, the Transit Gateway ID. This can be passed either as a string or as a transit_gateway_id: 'value' key-value entry in a hash.

transit_gateway_id: Provides the ID of the Transit Gateway.
transit_gateway_arn: Provides the ARN of the Transit Gateway.
transit_gateway_owner_id: Provides the id of the owner of the Transit Gateway.
default_route_table_id: Provides the id of the default route table of the Transit Gateway.
propagation_default_route_table_id: Provides the propagation default route table id for the Transit gateway.
dns_support: Provides the status of dns support for the Transit Gateway.
vpn_ecmp_support: Provides the status of vpn ecmp support for the Transit Gateway.

Check the owner id zone of the Transit Gateway:

describe aws_transit_gateway(transit_gateway_id: 'tgw-0e231ae7f5e5e7bd5') do
  its('transit_gateway_owner_id') { should eq 'owner_id' }
end

For a full list of available matchers, see our Universal Matchers page.

This resource has the following special matchers.

The exist matcher indicates that a transit gateway exists.

describe aws_transit_gateway(transit_gateway_id: 'tgw-0e231ae7f5e5e7bd5') do
      it { should exist }
end

Your AWS principal will need the EC2:Client:DescribeTransitGatewaysResult action with Effect set to Allow.