terraform-aws-paramstore-with-json

Since it took me a while to get this syntax sorted I am noting this for future use.

NOTE: This is non-sensitive parameters not secrets. You are probably better of using secrets manager for secrets. And I did not try but the Param Store SecureString type will probably not work for below.

I stored below json in Param Store as StringList with Value

1
{"email":"riaan@email.com","engine_version":"3.11.20","host_instance_type":"mq.t3.micro"}

test

1
❯ aws ssm get-parameter --name "/microservice/blah/development" --region us-east-1 | jq
2
{
3
  "Parameter": {
4
    "Name": "/microservice/blah/development",
5
    "Type": "StringList",
6
    "Value": "{\"email\":\"riaan@email.com\",\"engine_version\":\"3.11.20\",\"host_instance_type\":\"mq.t3.micro\"}",
7
    "Version": 6,
8
    "LastModifiedDate": "2023-12-01T08:53:33.920000-06:00",
9
    "ARN": "arn:aws:ssm:us-east-1:xxx:parameter/microservice/blah/development",
10
    "DataType": "text"
11
  }
12
}

get it to a local var

1
data "aws_ssm_parameter" "cfg" {
2
  provider = aws.target1
3
  name = "/microservice/blah/development"
4
}
5

6
locals {
7
  cfg = jsondecode(data.aws_ssm_parameter.cfg.value)
8
}

in terraform reference like this

1
  #engine_version = "3.11.20"
2
  engine_version = local.cfg.engine_version