[PRMT-32] - Disable data collection ECS task on sandboxes

Author: MohammadIqbalAD-NHS

infrastructure/ecr.tf

@@ -7,7 +7,7 @@ module "ndr-docker-ecr-ui" {
   owner       = var.owner
 }
 module "ndr-docker-ecr-data-collection" {
-  count              = 1
+  count              = local.is_sandbox ? 0 : 1
   source             = "./modules/ecr/"
   app_name           = "${terraform.workspace}-data-collection"
   current_account_id = data.aws_caller_identity.current.account_id

infrastructure/ecs.tf

@@ -33,7 +33,7 @@ module "ndr-ecs-container-port-ssm-parameter" {
 }
 
 module "ndr-ecs-fargate-data-collection" {
-  count                    = 1
+  count                    = local.is_sandbox ? 0 : 1
   source                   = "./modules/ecs"
   ecs_cluster_name         = "data-collection"
   vpc_id                   = module.ndr-vpc-ui.vpc_id
@@ -93,7 +93,7 @@ module "ndr-ecs-fargate-data-collection" {
 }
 
 resource "aws_iam_role" "data_collection_task_role" {
-  count = 1
+  count = local.is_sandbox ? 0 : 1
   name  = "${terraform.workspace}_data_collection_task_role"
   assume_role_policy = jsonencode(
     {
@@ -115,55 +115,55 @@ resource "aws_iam_role" "data_collection_task_role" {
 }
 
 resource "aws_iam_role_policy_attachment" "data_collection_lloyd_george_reference_dynamodb_table" {
-  count      = 1
+  count      = local.is_sandbox ? 0 : 1
   role       = aws_iam_role.data_collection_task_role[0].name
   policy_arn = module.lloyd_george_reference_dynamodb_table.dynamodb_policy
 }
 
 resource "aws_iam_role_policy_attachment" "data_collection_ssm_access_policy" {
-  count      = 1
+  count      = local.is_sandbox ? 0 : 1
   role       = aws_iam_role.data_collection_task_role[0].name
   policy_arn = aws_iam_policy.ssm_access_policy.arn
 }
 
 resource "aws_iam_role_policy_attachment" "data_collection_statistics_dynamodb_table" {
-  count      = 1
+  count      = local.is_sandbox ? 0 : 1
   role       = aws_iam_role.data_collection_task_role[0].name
   policy_arn = module.statistics_dynamodb_table.dynamodb_policy
 }
 
 resource "aws_iam_role_policy_attachment" "data_collection_statistical_reports_store" {
-  count      = 1
+  count      = local.is_sandbox ? 0 : 1
   role       = aws_iam_role.data_collection_task_role[0].name
   policy_arn = module.statistical-reports-store.s3_object_access_policy
 }
 
 resource "aws_iam_role_policy_attachment" "data_collection_app_config" {
-  count      = 1
+  count      = local.is_sandbox ? 0 : 1
   role       = aws_iam_role.data_collection_task_role[0].name
   policy_arn = module.ndr-app-config.app_config_policy_arn
 }
 
 resource "aws_iam_role_policy_attachment" "data_collection_lloyd_george_store" {
-  count      = 1
+  count      = local.is_sandbox ? 0 : 1
   role       = aws_iam_role.data_collection_task_role[0].name
   policy_arn = module.ndr-lloyd-george-store.s3_list_object_policy
 }
 
 resource "aws_iam_role_policy_attachment" "data_collection_document_store" {
-  count      = 1
+  count      = local.is_sandbox ? 0 : 1
   role       = aws_iam_role.data_collection_task_role[0].name
   policy_arn = module.ndr-document-store.s3_list_object_policy
 }
 
 resource "aws_iam_role_policy_attachment" "data_collection_document_reference_dynamodb_table" {
-  count      = 1
+  count      = local.is_sandbox ? 0 : 1
   role       = aws_iam_role.data_collection_task_role[0].name
   policy_arn = module.document_reference_dynamodb_table.dynamodb_policy
 }
 
 resource "aws_iam_role_policy_attachment" "data_collection_cloudwatch_log_query_policy" {
-  count      = 1
+  count      = local.is_sandbox ? 0 : 1
   role       = aws_iam_role.data_collection_task_role[0].name
   policy_arn = aws_iam_policy.cloudwatch_log_query_policy.arn
 }

infrastructure/schedules.tf

@@ -116,7 +116,7 @@ resource "aws_lambda_permission" "statistical_report_schedule_permission" {
 }
 
 resource "aws_scheduler_schedule" "data_collection_ecs" {
-  count       = 1
+  count       = local.is_sandbox ? 0 : 1
   name_prefix = "${terraform.workspace}_data_collection_ecs"
   description = "A weekly trigger for the data collection run"
 
@@ -143,7 +143,7 @@ resource "aws_scheduler_schedule" "data_collection_ecs" {
 }
 
 resource "aws_iam_role" "data_collection_ecs_execution" {
-  count = 1
+  count = local.is_sandbox ? 0 : 1
   name  = "${terraform.workspace}_data_collection_scheduler_role"
   assume_role_policy = jsonencode({
     Version = "2012-10-17"
@@ -160,7 +160,7 @@ resource "aws_iam_role" "data_collection_ecs_execution" {
 }
 
 resource "aws_iam_role_policy_attachment" "data_collection_ecs_execution" {
-  count      = 1
+  count      = local.is_sandbox ? 0 : 1
   role       = aws_iam_role.data_collection_ecs_execution[0].name
   policy_arn = "arn:aws:iam::aws:policy/service-role/AmazonEC2ContainerServiceEventsRole"
 }