Skip to content

umotif-public/terraform-aws-ssm-parameters

Repository files navigation

GitHub release (latest SemVer)

terraform-aws-ssm-parameters

Terraform module creating encrypted and non-encrypted AWS SSM parameters

Terraform versions

Terraform 0.14.5. Pin module version to ~> v2.0. Terraform 0.12 - 0.14.4. Pin module version to ~> v1.0. Submit pull-requests to master branch.

Usage

module "ssm-parameters" {
  source = "umotif-public/ssm-parameters/aws"
  version = "~> 3.0.0"

  name_prefix = "test/example-path"

  parameters = {
    "audit" = "cloudwatch"
  }

  secure_parameters = {
    "secure-audit" = "cloudwatch"
  }

  advanced_tier = [
    "secure-audit"
  ]

  prevent_overwrite = [
    "audit"
  ]

  kms_key_id = module.kms.key_id

  tags = {
    "Environment" = "test"
  }
}

Assumptions

Module v1.0 is to be used with Terraform > 0.12. Module v2.0 is to be used with Terraform > 0.14.5. Module v3.0+ is to be used with Terraform > 1.0.11.

Examples

Authors

Requirements

Name Version
terraform >= 1.0.11
aws >= 3.53

Providers

Name Version
aws >= 3.53

Modules

No modules.

Resources

Name Type
aws_ssm_parameter.parameters resource
aws_ssm_parameter.secure_parameters resource

Inputs

Name Description Type Default Required
advanced_tier List of parameter names that should have tier set to Advanced list(string) [] no
kms_key_id The KMS key to use for encryption string "" no
name_prefix Path used for each SSM parameter created by the module string n/a yes
parameters Non-encrypted parameters map(any) {} no
prevent_overwrite [Deprecated - will be removed properly in 6.x] List of parameter names to prevent overwrite for list(string) [] no
secure_parameters Secure parameters map(any) {} no
tags n/a map(any) {} no

Outputs

Name Description
parameter_path n/a
parameters n/a
secure_parameters n/a

License

See LICENSE for full details.

Pre-commit hooks

Install dependencies

MacOS

brew install pre-commit terraform-docs tflint

brew tap git-chglog/git-chglog
brew install git-chglog