Datadog Upstreams and Account Settings (cloudposse/terraform-aws-components#533)

Author: Benbentwo

src/README.md

@@ -2,9 +2,6 @@
 
 This component is responsible for provisioning Datadog AWS integrations. 
 
-It's required that the DataDog API and APP secret keys are available in the `var.datadog_secrets_source_store_account` account
-in AWS SSM Parameter Store at the `/datadog/%v/datadog_app_key` paths (where `%v` are the corresponding account names).
-
 See Datadog's [documentation about provisioning keys](https://docs.datadoghq.com/account_management/api-app-keys) for more information.
 
 ## Usage
@@ -44,6 +41,7 @@ No providers.
 | <a name="module_datadog_configuration"></a> [datadog\_configuration](#module\_datadog\_configuration) | ../datadog-configuration/modules/datadog_keys | n/a |
 | <a name="module_datadog_integration"></a> [datadog\_integration](#module\_datadog\_integration) | cloudposse/datadog-integration/aws | 1.0.0 |
 | <a name="module_iam_roles"></a> [iam\_roles](#module\_iam\_roles) | ../account-map/modules/iam-roles | n/a |
+| <a name="module_store_write"></a> [store\_write](#module\_store\_write) | cloudposse/ssm-parameter-store/aws | 0.9.1 |
 | <a name="module_this"></a> [this](#module\_this) | cloudposse/label/null | 0.25.0 |
 
 ## Resources

src/main.tf

@@ -20,7 +20,33 @@ locals {
   # Get the context tags and skip tags that we don't want applied to every resource.
   # i.e. we don't want name since each metric would be called something other than this component's name.
   # i.e. we don't want environment since each metric would come from gbl or a region and this component is deployed in gbl.
-  context_tags = [for k, v in module.this.tags : "${lower(k)}:${v}" if contains(var.context_host_and_filter_tags, lower(k))]
-  filter_tags  = distinct(concat(var.filter_tags, local.context_tags))
-  host_tags    = distinct(concat(var.host_tags, local.context_tags))
+  context_tags = [
+    for k, v in module.this.tags : "${lower(k)}:${v}" if contains(var.context_host_and_filter_tags, lower(k))
+  ]
+  filter_tags = distinct(concat(var.filter_tags, local.context_tags))
+  host_tags   = distinct(concat(var.host_tags, local.context_tags))
+}
+
+module "store_write" {
+  count   = local.enabled ? 1 : 0
+  source  = "cloudposse/ssm-parameter-store/aws"
+  version = "0.9.1"
+  parameter_write = [
+    {
+      name        = "/datadog/datadog_external_id"
+      value       = join("", module.datadog_integration[*].datadog_external_id)
+      type        = "String"
+      overwrite   = "true"
+      description = "External identifier for our dd integration"
+    },
+    {
+      name        = "/datadog/aws_role_name"
+      value       = join("", module.datadog_integration[*].aws_role_name)
+      type        = "String"
+      overwrite   = "true"
+      description = "Name of the AWS IAM role used by our dd integration"
+    }
+  ]
+
+  context = module.this.context
 }

src/variables.tf

@@ -44,3 +44,4 @@ variable "context_host_and_filter_tags" {
   description = "Automatically add host and filter tags for these context keys"
   default     = ["namespace", "tenant", "stage"]
 }
+