Change back to apply. Add deletion protection to all DDB tables.

Author: mfjarvis

azure/templates/post-prod-deploy.yml

@@ -38,7 +38,7 @@ steps:
           cd terraform
 
         make init environment=${{ parameters.aws_account_type }} sub_environment=$workspace
-        make plan environment=${{ parameters.aws_account_type }} sub_environment=$workspace
+        make apply environment=${{ parameters.aws_account_type }} sub_environment=$workspace
       fi
     displayName: Apply Terraform
     workingDirectory: "$(Pipeline.Workspace)/s/$(SERVICE_NAME)"

terraform/dynamodb.tf

@@ -1,7 +1,8 @@
 resource "aws_dynamodb_table" "audit-table" {
-  name         = "immunisation-batch-${local.resource_scope}-audit-table"
-  billing_mode = "PAY_PER_REQUEST"
-  hash_key     = "message_id"
+  name                        = "immunisation-batch-${local.resource_scope}-audit-table"
+  billing_mode                = "PAY_PER_REQUEST"
+  hash_key                    = "message_id"
+  deletion_protection_enabled = true
 
   attribute {
     name = "message_id"
@@ -47,9 +48,10 @@ resource "aws_dynamodb_table" "audit-table" {
 }
 
 resource "aws_dynamodb_table" "delta-dynamodb-table" {
-  name         = "imms-${local.resource_scope}-delta"
-  billing_mode = "PAY_PER_REQUEST"
-  hash_key     = "PK"
+  name                        = "imms-${local.resource_scope}-delta"
+  billing_mode                = "PAY_PER_REQUEST"
+  hash_key                    = "PK"
+  deletion_protection_enabled = true
 
   attribute {
     name = "PK"
@@ -106,11 +108,12 @@ resource "aws_dynamodb_table" "delta-dynamodb-table" {
 }
 
 resource "aws_dynamodb_table" "events-dynamodb-table" {
-  name             = "imms-${local.resource_scope}-imms-events"
-  billing_mode     = "PAY_PER_REQUEST"
-  hash_key         = "PK"
-  stream_enabled   = true
-  stream_view_type = "NEW_IMAGE"
+  name                        = "imms-${local.resource_scope}-imms-events"
+  billing_mode                = "PAY_PER_REQUEST"
+  hash_key                    = "PK"
+  stream_enabled              = true
+  stream_view_type            = "NEW_IMAGE"
+  deletion_protection_enabled = true
 
   attribute {
     name = "PK"