intro ssm patch manager module - #102
Merged
Pira-nhs merged 7 commits intoJul 31, 2026
Merged
Conversation
Pira-nhs
force-pushed
the
feature/BCSS-23630-create-terraform-module-ssm-patch-manager
branch
from
June 30, 2026 16:52
8899d49 to
6294fdb
Compare
…terraform-module-ssm-patch-manager
nhs-oliverslater
previously approved these changes
Jul 31, 2026
There was a problem hiding this comment.
Pull request overview
Introduces a new Terraform wrapper module for AWS SSM Patch Manager, and registers it across the repo’s module listings and automation so it can be discovered and kept up to date.
Changes:
- Added
infrastructure/modules/ssm-patch-managerwrapper aroundcloudposse/ssm-patch-manager/aws(with variables, outputs, docs, and provider lockfile). - Updated module catalogue generation config and the root README “Available modules” table to include
ssm-patch-manager. - Updated Dependabot config to track the new module directory.
Reviewed changes
Copilot reviewed 10 out of 11 changed files in this pull request and generated 5 comments.
Show a summary per file
| File | Description |
|---|---|
| scripts/config/generate-available-modules.yaml | Registers the new module for module-list generation. |
| README.md | Adds ssm-patch-manager to the root “Available modules” table. |
| infrastructure/modules/ssm-patch-manager/versions.tf | Declares Terraform/AWS provider version constraints for the new module. |
| infrastructure/modules/ssm-patch-manager/variables.tf | Adds module inputs for patch baselines, maintenance windows, execution, and logging. |
| infrastructure/modules/ssm-patch-manager/main.tf | Wires the wrapper to cloudposse/ssm-patch-manager/aws and forwards inputs/context. |
| infrastructure/modules/ssm-patch-manager/locals.tf | Maps repo context fields into a Cloud Posse-compatible context object. |
| infrastructure/modules/ssm-patch-manager/outputs.tf | Exposes key upstream outputs (maintenance window IDs, patch baseline ARN, log bucket outputs). |
| infrastructure/modules/ssm-patch-manager/context.tf | Adds the standard copied context.tf to integrate tagging/naming via module.this. |
| infrastructure/modules/ssm-patch-manager/README.md | Adds module-level documentation and usage examples (plus terraform-docs section). |
| infrastructure/modules/ssm-patch-manager/.terraform.lock.hcl | Adds provider lockfile for the new module directory. |
| .github/dependabot.yaml | Ensures Dependabot tracks updates for the new module directory. |
Files not reviewed (1)
- infrastructure/modules/ssm-patch-manager/.terraform.lock.hcl: Generated file
… context mapping updates
…r SSM agent and IAM profiles
nhs-oliverslater
approved these changes
Jul 31, 2026
Pira-nhs
deleted the
feature/BCSS-23630-create-terraform-module-ssm-patch-manager
branch
July 31, 2026 16:07
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Description
Context
Type of changes
Checklist
Sensitive Information Declaration
To ensure the utmost confidentiality and protect your and others privacy, we kindly ask you to NOT including PII (Personal Identifiable Information) / PID (Personal Identifiable Data) or any other sensitive data in this PR (Pull Request) and the codebase changes. We will remove any PR that do contain any sensitive information. We really appreciate your cooperation in this matter.