Provision either a new enterprise grade PostgreSQL RDS database or create a clone of another database from its snapshot. In this context enterprise grade means

• a 48 long password chosen from a set of 70 characters
• a non predictable master database username string
• a high redundancy multi-availability zone database
• private subnet residency in a non-default VPC (if you so wish)
• behind the scenes encryption at rest
• robust options for backup (maintenance) windows and retention period
• sensible descriptive resource tags

This module will conditionally instantiate from a snapshot depending on whether var.in_clone_snapshot is true or false. If true the RDS ID of the database to clone must be provided. This last available snapshot is chosen as the baseline for creating the cloned database.

    module fresh_db {

        source                 = "devops4me/postgres-rds/aws"
        version                = "1.0.1"

        in_security_group_id = module.security-group.out_security_group_id
        in_db_subnet_ids     = module.vpc-network.out_private_subnet_ids
        in_database_name     = "fresh_db"
    }

    module clone_db {

        source                 = "devops4me/postgres-rds/aws"
        version                = "1.0.1"

        in_clone_snapshot    = true
        in_id_of_db_to_clone = var.in_id_of_db_to_clone

        in_security_group_id = module.security-group.out_security_group_id
        in_db_subnet_ids     = module.vpc-network.out_private_subnet_ids
        in_database_name     = "cloned_db"
    }

The important outputs are the out_database_hostname, out_database_username and the out_database_password.

Look at the integration test for the bells and whistles that terraform demands.

This AWS PostgreSQL database terraform module requires these input variables. Important - the database name must start with a letter (not a digit) and can only contain alphanumerics.

Most organisations have a mandatory set of tags that must be placed on AWS resources for cost and billing reports. Typically they denote owners and specify whether environments are prod or non-prod.

Try echo $(date +%y%m%d%H%M%S) to check your timestamp and echo "was created by $USER@$HOSTNAME on $(date)." to check your description. Here is how you can send these values to terraform.

$ export TF_VAR_in_timestamp=$(date +%y%m%d%H%M%S)
$ export TF_VAR_in_description="was created by $USER@$HOSTNAME on $(date)."