aws_vpc_endpoint_ssm.tf

resource "aws_vpc_endpoint" "ssm" {
  count             = var.vpc_endpoint_ssm_enabled
  vpc_id            = aws_vpc.main.id
  service_name      = "com.amazonaws.${data.aws_region.current.name}.ssm"
  vpc_endpoint_type = "Interface"
  subnet_ids        = aws_subnet.private.*.id

  security_group_ids = [aws_security_group.vpc_endpoints.id]

  private_dns_enabled = true
}