terraform-aws-ssm-parameters

Terraform module creating encrypted and non-encrypted AWS SSM parameters

Terraform versions

Terraform 0.14.5. Pin module version to ~> v2.0.
Terraform 0.12 - 0.14.4. Pin module version to ~> v1.0.
Submit pull-requests to master branch.

Usage

module "ssm-parameters" {
  source = "umotif-public/ssm-parameters/aws"
  version = "~> 3.0.0"
  name_prefix = "test/example-path"
  parameters = {
    "audit" = "cloudwatch"
  }
  secure_parameters = {
    "secure-audit" = "cloudwatch"
  }
  advanced_tier = [
    "secure-audit"
  ]
  prevent_overwrite = [
    "audit"
  ]
  kms_key_id = module.kms.key_id
  tags = {
    "Environment" = "test"
  }
}

Assumptions

Module v1.0 is to be used with Terraform > 0.12.
Module v2.0 is to be used with Terraform > 0.14.5.
Module v3.0+ is to be used with Terraform > 1.0.11.

Examples

SSM Parameters

Authors

uMotif

Requirements

Name	Version
terraform	>= 1.0.11
aws	>= 3.53

Providers

Name	Version
aws	>= 3.53

Modules

No modules.

Resources

Name	Type
aws_ssm_parameter.parameters	resource
aws_ssm_parameter.secure_parameters	resource

Inputs

Name	Description	Type	Default	Required
advanced_tier	List of parameter names that should have tier set to Advanced	`list(string)`	`[]`	no
kms_key_id	The KMS key to use for encryption	`string`	`""`	no
name_prefix	Path used for each SSM parameter created by the module	`string`	n/a	yes
parameters	Non-encrypted parameters	`map(any)`	`{}`	no
prevent_overwrite	[Deprecated - will be removed properly in 6.x] List of parameter names to prevent overwrite for	`list(string)`	`[]`	no
secure_parameters	Secure parameters	`map(any)`	`{}`	no
tags	n/a	`map(any)`	`{}`	no

Outputs

Name	Description
parameter_path	n/a
parameters	n/a
secure_parameters	n/a

License

See LICENSE for full details.

Pre-commit hooks

Install dependencies

pre-commit
terraform-docs required for terraform_docs hooks.
TFLint required for terraform_tflint hook.

MacOS

brew install pre-commit terraform-docs tflint
brew tap git-chglog/git-chglog
brew install git-chglog