Amazon web services 地形：AWS检查员计划失败

我正在使用terraform管理AWS基础设施。我对AWS和terraform完全陌生，信息非常丰富

我尝试使用以下代码通过terraform启用AWS Inspector服务：

resource "aws_inspector_assessment_template" "example" {
  name       = "example"
#   target_arn = aws_inspector_assessment_target.example.arn
  duration   = 3600

#   rules_package_arns = [
#     "arn:aws:inspector:us-west-2:758058086616:rulespackage/0-9hgA516p",
#     "arn:aws:inspector:us-west-2:758058086616:rulespackage/0-H5hpSawc",
#     "arn:aws:inspector:us-west-2:758058086616:rulespackage/0-JJOtZiqQ",
#     "arn:aws:inspector:us-west-2:758058086616:rulespackage/0-vg5GGHSD",
#   ]
}

但我得到的只是以下错误：

Error: Missing required argument

  on aws_inspector.tf line 1, in resource "aws_inspector_assessment_template" "example":
   1: resource "aws_inspector_assessment_template" "example" {

The argument "rules_package_arns" is required, but no definition was found.


Error: Missing required argument

  on aws_inspector.tf line 1, in resource "aws_inspector_assessment_template" "example":
   1: resource "aws_inspector_assessment_template" "example" {

The argument "target_arn" is required, but no definition was found.

这显然是因为我注释掉了

target\u arn

和

rules\u package\u arns

---

问题是，我不明白这些变量是什么，以及这些变量的值是什么。你能帮我弄清楚吗？

你不应该注释掉所有需要的部分。这就是你的错误

您还必须创建并可以使用以获取所需的ARN。有了这些资源，您可以在您的

aws\u inspector\u assessment\u模板中引用它们

例如：

你不应该注释掉所有需要的部分。这就是你的错误

您还必须创建并可以使用以获取所需的ARN。有了这些资源，您可以在您的
aws\u inspector\u assessment\u模板中引用它们

例如：

把它们都用在一起，也许会有帮助。进展如何？这个问题还存在吗？您是否创建了丢失的资源？把它们都用在一起，也许会有帮助。进展如何？这个问题还存在吗？您是否创建了丢失的资源？
# Declare the data source
data "aws_inspector_rules_packages" "rules" {}

# e.g. Use in aws_inspector_assessment_template
resource "aws_inspector_resource_group" "group" {
  tags = {
    test = "test"
  }
}

resource "aws_inspector_assessment_target" "assessment" {
  name               = "test"
  resource_group_arn = aws_inspector_resource_group.group.arn
}

resource "aws_inspector_assessment_template" "assessment" {
  name       = "Test"
  target_arn = aws_inspector_assessment_target.assessment.arn
  duration   = "60"

  rules_package_arns = data.aws_inspector_rules_packages.rules.arns
}