/
ssm.tf
50 lines (43 loc) · 1.57 KB
/
ssm.tf
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
locals {
datadog_api_key_name = (
var.datadog_api_secret_key_target_pattern == replace(var.datadog_api_secret_key_target_pattern, "%v", "") ?
var.datadog_api_secret_key_target_pattern : format(var.datadog_api_secret_key_target_pattern, var.datadog_api_secret_key)
)
datadog_app_key_name = (
var.datadog_app_secret_key_target_pattern == replace(var.datadog_app_secret_key_target_pattern, "%v", "") ?
var.datadog_app_secret_key_target_pattern : format(var.datadog_app_secret_key_target_pattern, var.datadog_api_secret_key)
)
}
data "aws_ssm_parameter" "datadog_api_key" {
count = local.ssm_enabled ? 1 : 0
name = format(var.datadog_api_secret_key_source_pattern, var.datadog_api_secret_key)
with_decryption = true
provider = aws.api_keys
}
data "aws_ssm_parameter" "datadog_app_key" {
count = local.ssm_enabled ? 1 : 0
name = format(var.datadog_app_secret_key_source_pattern, var.datadog_app_secret_key)
with_decryption = true
provider = aws.api_keys
}
module "store_write" {
source = "cloudposse/ssm-parameter-store/aws"
version = "0.10.0"
parameter_write = [
{
name = local.datadog_api_key_name
value = local.datadog_api_key
type = "SecureString"
overwrite = "true"
description = "Datadog API key"
},
{
name = local.datadog_app_key_name
value = local.datadog_app_key
type = "SecureString"
overwrite = "true"
description = "Datadog APP key"
},
]
context = module.this.context
}