Create Parameter store

.github/workflows/tf_apply_staging.yml

@@ -14,6 +14,8 @@ env:
   AWS_REGION: ca-central-1
   TERRAFORM_VERSION: 1.10.4
   TERRAGRUNT_VERSION: 0.72.3
+  TF_VAR_docdb_username: ${{ secrets.DOCDB_USERNAME}}
+  TF_VAR_docdb_password: ${{ secrets.DOCDB_PASSWORD}}
 
 permissions:
   id-token: write
@@ -40,6 +42,10 @@ jobs:
           role-session-name: TFApply
           aws-region: ${{ env.AWS_REGION }}
 
+      - name: Apply ssm
+        working-directory: terragrunt/env/staging/ssm
+        run: terragrunt apply --terragrunt-non-interactive -auto-approve
+
       - name: Apply network
         working-directory: terragrunt/env/staging/network
         run: terragrunt apply --terragrunt-non-interactive -auto-approve

.github/workflows/tf_plan_staging.yml

@@ -12,6 +12,8 @@ env:
   AWS_REGION: ca-central-1
   TERRAFORM_VERSION: 1.10.4
   TERRAGRUNT_VERSION: 0.72.3
+  TF_VAR_docdb_username: ${{ secrets.DOCDB_USERNAME}}
+  TF_VAR_docdb_password: ${{ secrets.DOCDB_PASSWORD}}
 
 permissions:
   id-token: write
@@ -28,6 +30,7 @@ jobs:
       matrix:
         include:
           - module: ecr
+          - module: ssm
           - module: network
           - module: hosted_zone
     runs-on: ubuntu-latest

terragrunt/aws/ssm/inputs.tf

@@ -0,0 +1,11 @@
+variable "docdb_username" {
+  description = "The username of the documentdb cluseter"
+  sensitive   = true
+  type        = string
+}
+
+variable "docdb_password" {
+  description = "The password of the documentdb cluster"
+  sensitive   = true
+  type        = string
+}

terragrunt/aws/ssm/outputs.tf

@@ -0,0 +1,9 @@
+output "docdb_username_arn" {
+  description = "Arn of the document db username parameter"
+  value       = aws_ssm_parameter.docdb_username.arn
+}
+
+output "docdb_password_arn" {
+  description = "Arn of the document db password parameter"
+  value       = aws_ssm_parameter.docdb_password.arn
+}

terragrunt/aws/ssm/ssm.tf

@@ -0,0 +1,21 @@
+resource "aws_ssm_parameter" "docdb_username" {
+  name  = "docdb_username"
+  type  = "SecureString"
+  value = var.docdb_username
+
+  tags = {
+    CostCentre = var.billing_code
+    Terraform  = true
+  }
+}
+
+resource "aws_ssm_parameter" "docdb_password" {
+  name  = "docdb_password"
+  type  = "SecureString"
+  value = var.docdb_password
+
+  tags = {
+    CostCentre = var.billing_code
+    Terraform  = true
+  }
+}

terragrunt/env/staging/ssm/terragrunt.hcl

@@ -0,0 +1,7 @@
+terraform {
+  source = "../../../aws//ssm"
+}
+
+include {
+  path = find_in_parent_folders("root.hcl")
+}