Skip to main content

Module: elastic-beanstalk-environment

Terraform module to provision AWS Elastic Beanstalk environment

Searching for Maintainer!

The Cloud Posse team no longer utilizes Beanstalk all that much, but this module is still fairly popular. In an effort to give it the attention it deserves, we're searching for a volunteer maintainer to manage this specific repository's issues and pull requests (of which a number are already stacked up). This is a great opportunity for anyone who is looking to solidify and strengthen their Terraform skillset while also giving back to the SweetOps open source community!

You can learn more about being a SweetOps contributor on our docs site here.

If you're interested, reach out to us via the #terraform channel in the SweetOps Slack or directly via email @ [email protected]

Usage

For a complete example, see examples/complete

  provider "aws" {
region = var.region
}

module "vpc" {
source = "cloudposse/vpc/aws"
# Cloud Posse recommends pinning every module to a specific version
version = "x.x.x"

cidr_block = "172.16.0.0/16"

context = module.this.context
}

module "subnets" {
source = "cloudposse/dynamic-subnets/aws"
# Cloud Posse recommends pinning every module to a specific version
version = "x.x.x"

availability_zones = var.availability_zones
vpc_id = module.vpc.vpc_id
igw_id = module.vpc.igw_id
cidr_block = module.vpc.vpc_cidr_block
nat_gateway_enabled = true
nat_instance_enabled = false

context = module.this.context
}

module "elastic_beanstalk_application" {
source = "cloudposse/elastic-beanstalk-application/aws"
# Cloud Posse recommends pinning every module to a specific version
version = "x.x.x"

description = "Test Elastic Beanstalk application"

context = module.this.context
}

module "elastic_beanstalk_environment" {
source = "../../"

description = var.description
region = var.region
availability_zone_selector = var.availability_zone_selector
dns_zone_id = var.dns_zone_id

wait_for_ready_timeout = var.wait_for_ready_timeout
elastic_beanstalk_application_name = module.elastic_beanstalk_application.elastic_beanstalk_application_name
environment_type = var.environment_type
loadbalancer_type = var.loadbalancer_type
elb_scheme = var.elb_scheme
tier = var.tier
version_label = var.version_label
force_destroy = var.force_destroy

instance_type = var.instance_type
root_volume_size = var.root_volume_size
root_volume_type = var.root_volume_type

autoscale_min = var.autoscale_min
autoscale_max = var.autoscale_max
autoscale_measure_name = var.autoscale_measure_name
autoscale_statistic = var.autoscale_statistic
autoscale_unit = var.autoscale_unit
autoscale_lower_bound = var.autoscale_lower_bound
autoscale_lower_increment = var.autoscale_lower_increment
autoscale_upper_bound = var.autoscale_upper_bound
autoscale_upper_increment = var.autoscale_upper_increment

vpc_id = module.vpc.vpc_id
loadbalancer_subnets = module.subnets.public_subnet_ids
application_subnets = module.subnets.private_subnet_ids

allow_all_egress = true

additional_security_group_rules = [
{
type = "ingress"
from_port = 0
to_port = 65535
protocol = "-1"
source_security_group_id = module.vpc.vpc_default_security_group_id
description = "Allow all inbound traffic from trusted Security Groups"
}
]

rolling_update_enabled = var.rolling_update_enabled
rolling_update_type = var.rolling_update_type
updating_min_in_service = var.updating_min_in_service
updating_max_batch = var.updating_max_batch

healthcheck_url = var.healthcheck_url
application_port = var.application_port

solution_stack_name = var.solution_stack_name
additional_settings = var.additional_settings
env_vars = var.env_vars

extended_ec2_policy_document = data.aws_iam_policy_document.minimal_s3_permissions.json
prefer_legacy_ssm_policy = false
prefer_legacy_service_policy = false
scheduled_actions = var.scheduled_actions

context = module.this.context
}

data "aws_iam_policy_document" "minimal_s3_permissions" {
statement {
sid = "AllowS3OperationsOnElasticBeanstalkBuckets"
actions = [
"s3:ListAllMyBuckets",
"s3:GetBucketLocation"
]
resources = ["*"]
}
}

Requirements

NameVersion
terraform>= 1.3.0
aws>= 4.0
random>= 3.5.1

Providers

NameVersion
aws>= 4.0
random>= 3.5.1

Modules

NameSourceVersion
aws_security_groupcloudposse/security-group/aws1.0.1
dns_hostnamecloudposse/route53-cluster-hostname/aws0.12.2
elb_logscloudposse/lb-s3-bucket/aws0.19.0
thiscloudposse/label/null0.25.0

Resources

NameType
aws_elastic_beanstalk_environment.defaultresource
aws_iam_instance_profile.ec2resource
aws_iam_role.ec2resource
aws_iam_role.serviceresource
aws_iam_role_policy.defaultresource
aws_iam_role_policy_attachment.ecr_readonlyresource
aws_iam_role_policy_attachment.elastic_beanstalk_multi_container_dockerresource
aws_iam_role_policy_attachment.enhanced_healthresource
aws_iam_role_policy_attachment.serviceresource
aws_iam_role_policy_attachment.ssm_automationresource
aws_iam_role_policy_attachment.ssm_ec2resource
aws_iam_role_policy_attachment.web_tierresource
aws_iam_role_policy_attachment.worker_tierresource
aws_lb_listener_rule.redirect_http_to_httpsresource
aws_ssm_activation.ec2resource
random_string.elb_logs_suffixresource
aws_iam_policy_document.defaultdata source
aws_iam_policy_document.ec2data source
aws_iam_policy_document.extendeddata source
aws_iam_policy_document.servicedata source
aws_lb_listener.httpdata source
aws_partition.currentdata source

Inputs

NameDescriptionTypeDefaultRequired
additional_security_group_rulesA list of Security Group rule objects to add to the created security group, in addition to the ones
this module normally creates. (To suppress the module's rules, set create_security_group to false
and supply your own security group via associated_security_group_ids.)
The keys and values of the objects are fully compatible with the aws_security_group_rule resource, except
for security_group_id which will be ignored, and the optional "key" which, if provided, must be unique and known at "plan" time.
To get more info see https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/security_group_rule .
list(any)[]no
additional_settingsAdditional Elastic Beanstalk setttings. For full list of options, see https://docs.aws.amazon.com/elasticbeanstalk/latest/dg/command-options-general.html
list(object({
namespace = string
name = string
value = string
}))
[]no
additional_tag_mapAdditional key-value pairs to add to each map in tags_as_list_of_maps. Not added to tags or id.
This is for some rare cases where resources want additional configuration of tags
and therefore take a list of maps with tag key, value, and additional configuration.
map(string){}no
alb_zone_idALB zone idmap(string)
{
"af-south-1": "Z1EI3BVKMKK4AM",
"ap-east-1": "ZPWYUBWRU171A",
"ap-northeast-1": "Z1R25G3KIG2GBW",
"ap-northeast-2": "Z3JE5OI70TWKCP",
"ap-south-1": "Z18NTBI3Y7N9TZ",
"ap-southeast-1": "Z16FZ9L249IFLT",
"ap-southeast-2": "Z2PCDNR3VC2G1N",
"ca-central-1": "ZJFCZL7SSZB5I",
"eu-central-1": "Z1FRNW7UH4DEZJ",
"eu-north-1": "Z23GO28BZ5AETM",
"eu-south-1": "Z10VDYYOA2JFKM",
"eu-west-1": "Z2NYPWQ7DFZAZH",
"eu-west-2": "Z1GKAAAUGATPF1",
"eu-west-3": "Z3Q77PNBQS71R4",
"me-south-1": "Z2BBTEKR2I36N2",
"sa-east-1": "Z10X7K2B4QSOFV",
"us-east-1": "Z117KPS5GTRQ2G",
"us-east-2": "Z14LCN19Q5QHIC",
"us-gov-east-1": "Z2NIFVYYW2VKV1",
"us-gov-west-1": "Z31GFT0UA1I2HV",
"us-west-1": "Z1LQECGX5PH1X",
"us-west-2": "Z38NKT9BP95V3O"
}
no
allow_all_egressIf true, the created security group will allow egress on all ports and protocols to all IP addresses.
If this is false and no egress rules are otherwise specified, then no egress will be allowed.
booltrueno
ami_idThe id of the AMI to associate with the Amazon EC2 instancesstringnullno
application_portPort application is listening onnumber80no
application_subnetsList of subnets to place EC2 instanceslist(string)n/ayes
associate_public_ip_addressWhether to associate public IP addresses to the instancesboolfalseno
associated_security_group_idsA list of IDs of Security Groups to associate the created resource with, in addition to the created security group.
These security groups will not be modified and, if create_security_group is false, must have rules providing the desired access.
list(string)[]no
attributesID element. Additional attributes (e.g. workers or cluster) to add to id,
in the order they appear in the list. New attributes are appended to the
end of the list. The elements of the list are joined by the delimiter
and treated as a single ID element.
list(string)[]no
autoscale_lower_boundMinimum level of autoscale metric to remove an instancenumber20no
autoscale_lower_incrementHow many Amazon EC2 instances to remove when performing a scaling activity.number-1no
autoscale_maxMaximum instances to launchnumber3no
autoscale_measure_nameMetric used for your Auto Scaling triggerstring"CPUUtilization"no
autoscale_minMinumum instances to launchnumber2no
autoscale_statisticStatistic the trigger should use, such as Averagestring"Average"no
autoscale_unitUnit for the trigger measurement, such as Bytesstring"Percent"no
autoscale_upper_boundMaximum level of autoscale metric to add an instancenumber80no
autoscale_upper_incrementHow many Amazon EC2 instances to add when performing a scaling activitynumber1no
availability_zone_selectorAvailability Zone selectorstring"Any 2"no
contextSingle object for setting entire context at once.
See description of individual variables for details.
Leave string and numeric variables as null to use default value.
Individual variable settings (non-null) override settings in context object,
except for attributes, tags, and additional_tag_map, which are merged.
any
{
"additional_tag_map": {},
"attributes": [],
"delimiter": null,
"descriptor_formats": {},
"enabled": true,
"environment": null,
"id_length_limit": null,
"label_key_case": null,
"label_order": [],
"label_value_case": null,
"labels_as_tags": [
"unset"
],
"name": null,
"namespace": null,
"regex_replace_chars": null,
"stage": null,
"tags": {},
"tenant": null
}
no
create_security_groupSet true to create and configure a Security Group for the cluster.booltrueno
delimiterDelimiter to be used between ID elements.
Defaults to - (hyphen). Set to "" to use no delimiter at all.
stringnullno
deployment_batch_sizePercentage or fixed number of Amazon EC2 instances in the Auto Scaling group on which to simultaneously perform deployments. Valid values vary per deployment_batch_size_type settingnumber1no
deployment_batch_size_typeThe type of number that is specified in deployment_batch_size_typestring"Fixed"no
deployment_ignore_health_checkDo not cancel a deployment due to failed health checksboolfalseno
deployment_policyUse the DeploymentPolicy option to set the deployment type. The following values are supported: AllAtOnce, Rolling, RollingWithAdditionalBatch, Immutable, TrafficSplittingstring"Rolling"no
deployment_timeoutNumber of seconds to wait for an instance to complete executing commandsnumber600no
descriptionShort description of the Environmentstring""no
descriptor_formatsDescribe additional descriptors to be output in the descriptors output map.
Map of maps. Keys are names of descriptors. Values are maps of the form
{<br/> format = string<br/> labels = list(string)<br/>}
(Type is any so the map values can later be enhanced to provide additional options.)
format is a Terraform format string to be passed to the format() function.
labels is a list of labels, in order, to pass to format() function.
Label values will be normalized before being passed to format() so they will be
identical to how they appear in id.
Default is {} (descriptors output will be empty).
any{}no
dns_subdomainThe subdomain to create on Route53 for the EB environment. For the subdomain to be created, the dns_zone_id variable must be set as wellstring""no
dns_zone_idRoute53 parent zone ID. The module will create sub-domain DNS record in the parent zone for the EB environmentstring""no
elastic_beanstalk_application_nameElastic Beanstalk application namestringn/ayes
elb_schemeSpecify internal if you want to create an internal load balancer in your Amazon VPC so that your Elastic Beanstalk application cannot be accessed from outside your Amazon VPCstring"public"no
enable_capacity_rebalancingSpecifies whether to enable the Capacity Rebalancing feature for Spot Instances in your Auto Scaling Groupboolfalseno
enable_loadbalancer_logsWhether to enable Load Balancer Logging to the S3 bucket.booltrueno
enable_log_publication_controlCopy the log files for your application's Amazon EC2 instances to the Amazon S3 bucket associated with your applicationboolfalseno
enable_spot_instancesEnable Spot Instance requests for your environmentboolfalseno
enable_stream_logsWhether to create groups in CloudWatch Logs for proxy and deployment logs, and stream logs from each instance in your environmentboolfalseno
enabledSet to false to prevent the module from creating any resourcesboolnullno
enhanced_reporting_enabledWhether to enable "enhanced" health reporting for this environment. If false, "basic" reporting is used. When you set this to false, you must also set enable_managed_actions to falsebooltrueno
env_varsMap of custom ENV variables to be provided to the application running on Elastic Beanstalk, e.g. env_vars = { DB_USER = 'admin' DB_PASS = 'xxxxxx' }map(string){}no
environmentID element. Usually used for region e.g. 'uw2', 'us-west-2', OR role 'prod', 'staging', 'dev', 'UAT'stringnullno
environment_typeEnvironment type, e.g. 'LoadBalanced' or 'SingleInstance'. If setting to 'SingleInstance', rolling_update_type must be set to 'Time', updating_min_in_service must be set to 0, and loadbalancer_subnets will be unused (it applies to the ELB, which does not exist in SingleInstance environments)string"LoadBalanced"no
extended_ec2_policy_documentExtensions or overrides for the IAM role assigned to EC2 instancesstring""no
force_destroyForce destroy the S3 bucket for load balancer logsboolfalseno
health_streaming_delete_on_terminateWhether to delete the log group when the environment is terminated. If false, the health data is kept RetentionInDays days.boolfalseno
health_streaming_enabledFor environments with enhanced health reporting enabled, whether to create a group in CloudWatch Logs for environment health and archive Elastic Beanstalk environment health data. For information about enabling enhanced health, see aws:elasticbeanstalk:healthreporting:system.boolfalseno
health_streaming_retention_in_daysThe number of days to keep the archived health data before it expires.number7no
healthcheck_healthy_threshold_countThe number of consecutive successful requests before Elastic Load Balancing changes the instance health statusnumber3no
healthcheck_httpcodes_to_matchList of HTTP codes that indicate that an instance is healthy. Note that this option is only applicable to environments with a network or application load balancerlist(string)
[
"200"
]
no
healthcheck_intervalThe interval of time, in seconds, that Elastic Load Balancing checks the health of the Amazon EC2 instances of your applicationnumber10no
healthcheck_timeoutThe amount of time, in seconds, to wait for a response during a health check. Note that this option is only applicable to environments with an application load balancernumber5no
healthcheck_unhealthy_threshold_countThe number of consecutive unsuccessful requests before Elastic Load Balancing changes the instance health statusnumber3no
healthcheck_urlApplication Health Check URL. Elastic Beanstalk will call this URL to check the health of the application running on EC2 instancesstring"/"no
http_listener_enabledEnable port 80 (http)booltrueno
id_length_limitLimit id to this many characters (minimum 6).
Set to 0 for unlimited length.
Set to null for keep the existing setting, which defaults to 0.
Does not affect id_full.
numbernullno
instance_refresh_enabledEnable weekly instance replacement.booltrueno
instance_typeInstances typestring"t2.micro"no
keypairName of SSH key that will be deployed on Elastic Beanstalk and DataPipeline instance. The key should be present in AWSstring""no
label_key_caseControls the letter case of the tags keys (label names) for tags generated by this module.
Does not affect keys of tags passed in via the tags input.
Possible values: lower, title, upper.
Default value: title.
stringnullno
label_orderThe order in which the labels (ID elements) appear in the id.
Defaults to ["namespace", "environment", "stage", "name", "attributes"].
You can omit any of the 6 labels ("tenant" is the 6th), but at least one must be present.
list(string)nullno
label_value_caseControls the letter case of ID elements (labels) as included in id,
set as tag values, and output by this module individually.
Does not affect values of tags passed in via the tags input.
Possible values: lower, title, upper and none (no transformation).
Set this to title and set delimiter to "" to yield Pascal Case IDs.
Default value: lower.
stringnullno
labels_as_tagsSet of labels (ID elements) to include as tags in the tags output.
Default is to include all labels.
Tags with empty values will not be included in the tags output.
Set to [] to suppress all generated tags.
Notes:
The value of the name tag, if included, will be the id, not the name.
Unlike other null-label inputs, the initial setting of labels_as_tags cannot be
changed in later chained modules. Attempts to change it will be silently ignored.
set(string)
[
"default"
]
no
loadbalancer_certificate_arnLoad Balancer SSL certificate ARN. The certificate must be present in AWS Certificate Managerstring""no
loadbalancer_connection_idle_timeoutClassic load balancer only: Number of seconds that the load balancer waits for any data to be sent or received over the connection. If no data has been sent or received after this time period elapses, the load balancer closes the connection.number60no
loadbalancer_crosszoneConfigure the classic load balancer to route traffic evenly across all instances in all Availability Zones rather than only within each zone.booltrueno
loadbalancer_is_sharedFlag to create a shared application loadbalancer. Only when loadbalancer_type = "application" https://docs.aws.amazon.com/elasticbeanstalk/latest/dg/environments-cfg-alb-shared.htmlboolfalseno
loadbalancer_managed_security_groupLoad balancer managed security groupstring""no
loadbalancer_redirect_http_to_httpsRedirect HTTP traffic to HTTPS listenerboolfalseno
loadbalancer_redirect_http_to_https_hostDefines the host for the HTTP to HTTPS redirection rulestring"#{host}"no
loadbalancer_redirect_http_to_https_path_patternDefines the path pattern for the HTTP to HTTPS redirection rulelist(string)
[
"*"
]
no
loadbalancer_redirect_http_to_https_portDefines the port for the HTTP to HTTPS redirection rulestring"443"no
loadbalancer_redirect_http_to_https_priorityDefines the priority for the HTTP to HTTPS redirection rulenumber1no
loadbalancer_redirect_http_to_https_status_codeThe redirect status codestring"HTTP_301"no
loadbalancer_security_groupsLoad balancer security groupslist(string)[]no
loadbalancer_ssl_policySpecify a security policy to apply to the listener. This option is only applicable to environments with an application load balancerstring""no
loadbalancer_subnetsList of subnets to place Elastic Load Balancerlist(string)[]no
loadbalancer_typeLoad Balancer type, e.g. 'application' or 'classic'string"classic"no
logs_delete_on_terminateWhether to delete the log groups when the environment is terminated. If false, the logs are kept RetentionInDays daysboolfalseno
logs_retention_in_daysThe number of days to keep log events before they expire.number7no
managed_actions_enabledEnable managed platform updates. When you set this to true, you must also specify a PreferredStartTime and UpdateLevelbooltrueno
nameID element. Usually the component or solution name, e.g. 'app' or 'jenkins'.
This is the only ID element not also included as a tag.
The "name" tag is set to the full id string. There is no tag with the value of the name input.
stringnullno
namespaceID element. Usually an abbreviation of your organization name, e.g. 'eg' or 'cp', to help ensure generated IDs are globally uniquestringnullno
prefer_legacy_service_policyWhether to use AWSElasticBeanstalkService (deprecated) or AWSElasticBeanstalkManagedUpdatesCustomerRolePolicy policybooltrueno
prefer_legacy_ssm_policyWhether to use AmazonEC2RoleforSSM (will soon be deprecated) or AmazonSSMManagedInstanceCore policybooltrueno
preferred_start_timeConfigure a maintenance window for managed actions in UTCstring"Sun:10:00"no
regex_replace_charsTerraform regular expression (regex) string.
Characters matching the regex will be removed from the ID elements.
If not set, "/[^a-zA-Z0-9-]/" is used to remove all characters other than hyphens, letters and digits.
stringnullno
regionAWS regionstringn/ayes
rolling_update_enabledWhether to enable rolling updatebooltrueno
rolling_update_typeHealth or Immutable. Set it to Immutable to apply the configuration change to a fresh group of instancesstring"Health"no
root_volume_iopsThe IOPS of the EBS root volume (only applies for gp3 and io1 types)numbernullno
root_volume_sizeThe size of the EBS root volumenumber8no
root_volume_throughputThe type of the EBS root volume (only applies for gp3 type)numbernullno
root_volume_typeThe type of the EBS root volumestring"gp2"no
s3_bucket_access_log_bucket_nameName of the S3 bucket where s3 access log will be sent tostring""no
s3_bucket_versioning_enabledWhen set to 'true' the s3 origin bucket will have versioning enabledbooltrueno
scheduled_actionsDefine a list of scheduled actions
list(object({
name = string
minsize = string
maxsize = string
desiredcapacity = string
starttime = string
endtime = string
recurrence = string
suspend = bool
}))
[]no
security_group_create_before_destroySet true to enable Terraform create_before_destroy behavior on the created security group.
We recommend setting this true on new security groups, but default it to false because true
will cause existing security groups to be replaced, possibly requiring the resource to be deleted and recreated.
Note that changing this value will always cause the security group to be replaced.
boolfalseno
security_group_create_timeoutHow long to wait for the security group to be created.string"10m"no
security_group_delete_timeoutHow long to retry on DependencyViolation errors during security group deletion from
lingering ENIs left by certain AWS services such as Elastic Load Balancing.
string"15m"no
security_group_descriptionThe description to assign to the created Security Group.
Warning: Changing the description causes the security group to be replaced.
string"Security Group for the EB environment"no
security_group_nameThe name to assign to the created security group. Must be unique within the VPC.
If not provided, will be derived from the null-label.context passed in.
If create_before_destroy is true, will be used as a name prefix.
list(string)[]no
shared_loadbalancer_arnARN of the shared application load balancer. Only when loadbalancer_type = "application".string""no
solution_stack_nameElastic Beanstalk stack, e.g. Docker, Go, Node, Java, IIS. For more info, see https://docs.aws.amazon.com/elasticbeanstalk/latest/platforms/platforms-supported.htmlstringn/ayes
spot_fleet_on_demand_above_base_percentageThe percentage of On-Demand Instances as part of additional capacity that your Auto Scaling group provisions beyond the SpotOnDemandBase instances. This option is relevant only when enable_spot_instances is true.number-1no
spot_fleet_on_demand_baseThe minimum number of On-Demand Instances that your Auto Scaling group provisions before considering Spot Instances as your environment scales up. This option is relevant only when enable_spot_instances is true.number0no
spot_max_priceThe maximum price per unit hour, in US$, that you're willing to pay for a Spot Instance. This option is relevant only when enable_spot_instances is true. Valid values are between 0.001 and 20.0number-1no
ssh_listener_enabledEnable SSH portboolfalseno
ssh_listener_portSSH portnumber22no
stageID element. Usually used to indicate role, e.g. 'prod', 'staging', 'source', 'build', 'test', 'deploy', 'release'stringnullno
tagsAdditional tags (e.g. {'BusinessUnit': 'XYZ'}).
Neither the tag keys nor the tag values will be modified by this module.
map(string){}no
tenantID element _(Rarely used, not included by default)_. A customer identifier, indicating who this instance of a resource is forstringnullno
tierElastic Beanstalk Environment tier, 'WebServer' or 'Worker'string"WebServer"no
update_levelThe highest level of update to apply with managed platform updatesstring"minor"no
updating_max_batchMaximum number of instances to update at oncenumber1no
updating_min_in_serviceMinimum number of instances in service during updatenumber1no
version_labelElastic Beanstalk Application version to deploystring""no
vpc_idID of the VPC in which to provision the AWS resourcesstringn/ayes
wait_for_ready_timeoutThe maximum duration to wait for the Elastic Beanstalk Environment to be in a ready state before timing outstring"20m"no

Outputs

NameDescription
all_settingsList of all option settings configured in the environment. These are a combination of default settings and their overrides from setting in the configuration
applicationThe Elastic Beanstalk Application for this environment
autoscaling_groupsThe autoscaling groups used by this environment
ec2_instance_profile_role_nameInstance IAM role name
elb_zone_idELB zone ID
endpointFully qualified DNS name for the environment
hostnameDNS hostname
idID of the Elastic Beanstalk environment
instancesInstances used by this environment
launch_configurationsLaunch configurations in use by this environment
load_balancer_log_bucketName of bucket where Load Balancer logs are stored (if enabled)
load_balancersElastic Load Balancers in use by this environment
nameName of the Elastic Beanstalk environment
queuesSQS queues in use by this environment
security_group_arnElastic Beanstalk environment Security Group ARN
security_group_idElastic Beanstalk environment Security Group ID
security_group_nameElastic Beanstalk environment Security Group name
settingSettings specifically set for this environment
tierThe environment tier
triggersAutoscaling triggers in use by this environment