AWS SSM
Note: Premium video content requires a subscription.
The aws_ssm helper fetches secret data from AWS SSM Parameter Store.
Example
config/stacks/demo/tfvars/dev.tfvars
user = "<%= aws_ssm("/demo/:ENV/user") %>"
pass = "<%= aws_ssm("/demo/:ENV/pass") %>"
For example if you have these secret values:
$ aws ssm get-parameter --name /demo/dev/user --with-decryption | jq '.Parameter.Value'
bob
$ aws ssm get-parameter --name /demo/dev/pass --with-decryption | jq '.Parameter.Value'
test
.terraspace-cache/us-west-2/dev/stacks/demo/1-dev.auto.tfvars
user = "bob"
pass = "test"
Automatic Expansion
Notice how :ENV is expanded in the example above. Support for this was automatically added in terraspace_plugin_aws 0.3.6.
To selectively disable expansion you can provide the expand: false option.
config/stacks/demo/tfvars/dev.tfvars
user = "<%= aws_ssm("/demo/:ENV/user", expand: false) %>"
pass = "<%= aws_ssm("/demo/:ENV/pass", expand: false) %>"
