CCM-9868: Adding oam ssm lookup

Author: sidnhs

infrastructure/terraform/components/acct/module_obs_datasource.tf

@@ -9,6 +9,6 @@ module "obs_datasource" {
   environment    = var.environment
   component      = var.component
 
-  oam_sink_id               = var.oam_sink_id
+  oam_sink_id               = data.aws_ssm_parameter.oam_sink_id.value
   observability_account_id  = var.observability_account_id
 }

infrastructure/terraform/components/acct/provider_aws.tf

@@ -22,3 +22,17 @@ provider "aws" {
     var.aws_account_id,
   ]
 }
+
+provider "aws" {
+  alias  = "obs"
+  region = var.region
+
+  assume_role {
+    role_arn     = "arn:aws:iam::${var.observability_account_id}:role/${local.bootstrap.iam_github_deploy_role["name"]}"
+    session_name = local.csi
+  }
+
+  default_tags {
+    tags = local.default_tags
+  }
+}

infrastructure/terraform/components/acct/ssm_parameter_github_pat.tf

@@ -9,6 +9,11 @@ resource "aws_ssm_parameter" "github_pat" {
   }
 }
 
+data "aws_ssm_parameter" "oam_sink_id" {
+  provider = aws.obs
+  name = "/oam/sink_id"
+}
+
 # This can be set at provision time like:
 # PARAM_OBJECT=$(jq -n \
 #   --arg github_pat "github_pat_123abc" \