README.md

terraform-aws-ssm-parameters

Terraform module creating encrypted and non-encrypted AWS SSM parameters

Terraform versions

Terraform 0.14.5. Pin module version to ~> v2.0. Terraform 0.12 - 0.14.4. Pin module version to ~> v1.0. Submit pull-requests to master branch.

Usage

module "ssm-parameters" {
  source = "umotif-public/ssm-parameters/aws"
  version = "~> 3.0.0"

  name_prefix = "test/example-path"

  parameters = {
    "audit" = "cloudwatch"
  }

  secure_parameters = {
    "secure-audit" = "cloudwatch"
  }

  advanced_tier = [
    "secure-audit"
  ]

  prevent_overwrite = [
    "audit"
  ]

  kms_key_id = module.kms.key_id

  tags = {
    "Environment" = "test"
  }
}

Assumptions

Module v1.0 is to be used with Terraform > 0.12. Module v2.0 is to be used with Terraform > 0.14.5. Module v3.0+ is to be used with Terraform > 1.0.11.

Examples

• SSM Parameters

Authors

• uMotif

Requirements

Name	Version
terraform	>= 1.0.11
aws	>= 3.53

Providers

Name	Version
aws	>= 3.53

Modules

No modules.

Resources

Name	Type
aws_ssm_parameter.parameters	resource
aws_ssm_parameter.secure_parameters	resource

Inputs

Name	Description	Type	Default	Required
advanced_tier	List of parameter names that should have tier set to Advanced	list(string)	[]	no
kms_key_id	The KMS key to use for encryption	string	""	no
name_prefix	Path used for each SSM parameter created by the module	string	n/a	yes
parameters	Non-encrypted parameters	map(any)	{}	no
prevent_overwrite	[Deprecated - will be removed properly in 6.x] List of parameter names to prevent overwrite for	list(string)	[]	no
secure_parameters	Secure parameters	map(any)	{}	no
tags	n/a	map(any)	{}	no

Outputs

Name	Description
parameter_path	n/a
parameters	n/a
secure_parameters	n/a

License

See LICENSE for full details.

Pre-commit hooks

Install dependencies

• pre-commit
• terraform-docs required for terraform_docs hooks.
• TFLint required for terraform_tflint hook.

MacOS

brew install pre-commit terraform-docs tflint

brew tap git-chglog/git-chglog
brew install git-chglog