ssm-parameters: support tiers (#705)

Co-authored-by: cloudpossebot <[email protected]>

Author: johncblandii

modules/ssm-parameters/README.md

@@ -30,7 +30,7 @@ components:
 
 | Name | Version |
 |------|---------|
-| <a name="requirement_terraform"></a> [terraform](#requirement\_terraform) | >= 1.2.5 |
+| <a name="requirement_terraform"></a> [terraform](#requirement\_terraform) | >= 1.3.0 |
 | <a name="requirement_aws"></a> [aws](#requirement\_aws) | >= 4.0 |
 | <a name="requirement_sops"></a> [sops](#requirement\_sops) | >= 0.5, < 1.0 |
 
@@ -76,7 +76,7 @@ components:
 | <a name="input_labels_as_tags"></a> [labels\_as\_tags](#input\_labels\_as\_tags) | Set of labels (ID elements) to include as tags in the `tags` output.<br>Default is to include all labels.<br>Tags with empty values will not be included in the `tags` output.<br>Set to `[]` to suppress all generated tags.<br>**Notes:**<br>  The value of the `name` tag, if included, will be the `id`, not the `name`.<br>  Unlike other `null-label` inputs, the initial setting of `labels_as_tags` cannot be<br>  changed in later chained modules. Attempts to change it will be silently ignored. | `set(string)` | <pre>[<br>  "default"<br>]</pre> | no |
 | <a name="input_name"></a> [name](#input\_name) | ID element. Usually the component or solution name, e.g. 'app' or 'jenkins'.<br>This is the only ID element not also included as a `tag`.<br>The "name" tag is set to the full `id` string. There is no tag with the value of the `name` input. | `string` | `null` | no |
 | <a name="input_namespace"></a> [namespace](#input\_namespace) | ID element. Usually an abbreviation of your organization name, e.g. 'eg' or 'cp', to help ensure generated IDs are globally unique | `string` | `null` | no |
-| <a name="input_params"></a> [params](#input\_params) | n/a | <pre>map(object({<br>    value       = string<br>    description = string<br>    overwrite   = bool<br>    type        = string<br>  }))</pre> | n/a | yes |
+| <a name="input_params"></a> [params](#input\_params) | A map of parameter values to write to SSM Parameter Store | <pre>map(object({<br>    value       = string<br>    description = string<br>    overwrite   = optional(bool, false)<br>    tier        = optional(string, "Standard")<br>    type        = string<br>  }))</pre> | n/a | yes |
 | <a name="input_regex_replace_chars"></a> [regex\_replace\_chars](#input\_regex\_replace\_chars) | Terraform regular expression (regex) string.<br>Characters matching the regex will be removed from the ID elements.<br>If not set, `"/[^a-zA-Z0-9-]/"` is used to remove all characters other than hyphens, letters and digits. | `string` | `null` | no |
 | <a name="input_region"></a> [region](#input\_region) | AWS Region | `string` | n/a | yes |
 | <a name="input_sops_source_file"></a> [sops\_source\_file](#input\_sops\_source\_file) | The relative path to the SOPS file which is consumed as the source for creating parameter resources. | `string` | n/a | yes |

modules/ssm-parameters/main.tf

@@ -26,6 +26,7 @@ resource "aws_ssm_parameter" "destination" {
 
   name        = each.key
   description = each.value.description
+  tier        = each.value.tier
   type        = each.value.type
   key_id      = var.kms_arn
   value       = each.value.value

modules/ssm-parameters/variables.tf

@@ -23,7 +23,9 @@ variable "params" {
   type = map(object({
     value       = string
     description = string
-    overwrite   = bool
+    overwrite   = optional(bool, false)
+    tier        = optional(string, "Standard")
     type        = string
   }))
+  description = "A map of parameter values to write to SSM Parameter Store"
 }

modules/ssm-parameters/versions.tf

@@ -1,5 +1,5 @@
 terraform {
-  required_version = ">= 1.2.5"
+  required_version = ">= 1.3.0"
 
   required_providers {
     aws = {