Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

new data source: aws_ssm_service_setting #25170

Open
gdavison opened this issue Jun 3, 2022 · 4 comments
Open

new data source: aws_ssm_service_setting #25170

gdavison opened this issue Jun 3, 2022 · 4 comments
Labels
enhancement Requests to existing resources that expand the functionality or scope. new-data-source Introduces a new data source. service/ssm Issues and PRs that pertain to the ssm service.

Comments

@gdavison
Copy link
Contributor

gdavison commented Jun 3, 2022 •
edited
Loading

Description

The AWS Systems Manager uses UpdateServiceSetting, GetServiceSetting, and ResetServiceSetting to manage various SSM parameters:

  • /ssm/automation/customer-script-log-destination
  • /ssm/automation/customer-script-log-group-name
  • /ssm/documents/console/public-sharing-permission
  • /ssm/parameter-store/default-parameter-tier
  • /ssm/parameter-store/high-throughput-enabled
  • /ssm/managed-instance/activation-tier

Add a new resource aws_ssm_service_setting and new data source aws_ssm_service_setting.

New Resources

  • aws_ssm_service_setting
  • data. aws_ssm_service_setting

Potential Terraform Configuration

resource "aws_ssm_service_setting" "example" {
  setting_id = "..." # string, enum
  value      =  "..." # string, valid values depend on setting_id
}

Output values:

  • arn
  • last_modified_date
  • last_modified_user
  • status: Status values are one of Default, Customized or PendingUpdate. To confirm: Can we wait until the update is done? If so, only return Default or Customized

References

Relates #25037
@gdavison gdavison added the enhancement Requests to existing resources that expand the functionality or scope. label Jun 3, 2022
@github-actions github-actions bot added the service/ssm Issues and PRs that pertain to the ssm service. label Jun 3, 2022
@DrFaust92 DrFaust92 added new-resource Introduces a new resource. new-data-source Introduces a new data source. labels Jun 4, 2022
@ewbankkit
Copy link
Contributor

aws_ssm_service_setting resource added via #13018.

@ewbankkit ewbankkit removed the new-resource Introduces a new resource. label Oct 14, 2022
@ewbankkit ewbankkit changed the title new resource and data source: aws_ssm_service_setting new data source: aws_ssm_service_setting Oct 14, 2022
@upegnasrame
Copy link

Is this available in latest aws provider ?
/ssm/automation/customer-script-log-destination

Stretch96 added a commit to dxw/terraform-dxw-dalmatian-infrastructure that referenced this issue Dec 22, 2023
@Stretch96
Conditionally add ECS cluster SSM policies
4fdf84f 
* This conditionally adds the policies with permissions required to use
  SSM default host management configuration.
* It checks for the value of the service setting to ensure dhcm has been
  enabled to decide wether to add the policies. `aws_ssm_service_setting`
  doesn't yet have a data source (hashicorp/terraform-provider-aws#25170),
  so it uses a script along with the `external` provider instead to get
  the service setting parameters.
@Stretch96 Stretch96 mentioned this issue Dec 22, 2023
Merged
Stretch96 added a commit to dxw/terraform-dxw-dalmatian-infrastructure that referenced this issue Dec 22, 2023
@Stretch96
Conditionally add ECS cluster SSM policies
4e3d1dd 
* This conditionally adds the policies with permissions required to use
  SSM default host management configuration.
* It checks for the value of the service setting to ensure dhcm has been
  enabled to decide wether to add the policies. `aws_ssm_service_setting`
  doesn't yet have a data source (hashicorp/terraform-provider-aws#25170),
  so it uses a script along with the `external` provider instead to get
  the service setting parameters.
Stretch96 added a commit to dxw/terraform-dxw-dalmatian-infrastructure that referenced this issue Dec 22, 2023
@Stretch96
Conditionally add ECS cluster SSM policies
2704a34 
* This conditionally adds the policies with permissions required to use
  SSM default host management configuration.
* It checks for the value of the service setting to ensure dhcm has been
  enabled to decide wether to add the policies. `aws_ssm_service_setting`
  doesn't yet have a data source (hashicorp/terraform-provider-aws#25170),
  so it uses a script along with the `external` provider instead to get
  the service setting parameters.
Stretch96 added a commit to dxw/terraform-dxw-dalmatian-infrastructure that referenced this issue Dec 22, 2023
@Stretch96
Conditionally add ECS cluster SSM policies
c167707 
* This conditionally adds the policies with permissions required to use
  SSM default host management configuration.
* It checks for the value of the service setting to ensure dhcm has been
  enabled to decide wether to add the policies. `aws_ssm_service_setting`
  doesn't yet have a data source (hashicorp/terraform-provider-aws#25170),
  so it uses a script along with the `external` provider instead to get
  the service setting parameters.
Stretch96 added a commit to dxw/terraform-dxw-dalmatian-infrastructure that referenced this issue Dec 22, 2023
@Stretch96
Conditionally add ECS cluster SSM policies
06ee7fb 
* This conditionally adds the policies with permissions required to use
  SSM default host management configuration.
* It checks for the value of the service setting to ensure dhcm has been
  enabled to decide wether to add the policies. `aws_ssm_service_setting`
  doesn't yet have a data source (hashicorp/terraform-provider-aws#25170),
  so it uses a script along with the `external` provider instead to get
  the service setting parameters.
Stretch96 added a commit to dxw/terraform-dxw-dalmatian-infrastructure that referenced this issue Dec 22, 2023
@Stretch96
Conditionally add ECS cluster SSM policies
c253c1b 
* This conditionally adds the policies with permissions required to use
  SSM default host management configuration.
* It checks for the value of the service setting to ensure dhcm has been
  enabled to decide wether to add the policies. `aws_ssm_service_setting`
  doesn't yet have a data source (hashicorp/terraform-provider-aws#25170),
  so it uses a script along with the `external` provider instead, to get
  the service setting parameters.
Stretch96 added a commit to dxw/terraform-dxw-dalmatian-infrastructure that referenced this issue Dec 22, 2023
@Stretch96
Conditionally add ECS cluster SSM policies
7e6bc0b 
* This conditionally adds the policies with permissions required to use
  SSM default host management configuration.
* It checks for the value of the service setting to ensure dhcm has been
  enabled to decide wether to add the policies. `aws_ssm_service_setting`
  doesn't yet have a data source (hashicorp/terraform-provider-aws#25170),
  so it uses a script along with the `external` provider instead, to get
  the service setting parameters.
Stretch96 added a commit to dxw/terraform-dxw-dalmatian-infrastructure that referenced this issue Dec 22, 2023
@Stretch96
Conditionally add ECS cluster SSM policies
5dc6053 
* This conditionally adds the policies with permissions required to use
  SSM default host management configuration.
* It checks for the value of the service setting to ensure dhcm has been
  enabled to decide wether to add the policies. `aws_ssm_service_setting`
  doesn't yet have a data source (hashicorp/terraform-provider-aws#25170),
  so it uses a script along with the `external` provider instead, to get
  the service setting parameters.
Stretch96 added a commit to dxw/terraform-dxw-dalmatian-infrastructure that referenced this issue Jan 2, 2024
@Stretch96
Conditionally add ECS cluster SSM policies
3e32ccc 
* This conditionally adds the policies with permissions required to use
  SSM default host management configuration.
* It checks for the value of the service setting to ensure dhcm has been
  enabled to decide wether to add the policies. `aws_ssm_service_setting`
  doesn't yet have a data source (hashicorp/terraform-provider-aws#25170),
  so it uses a script along with the `external` provider instead, to get
  the service setting parameters.
Stretch96 added a commit to dxw/terraform-dxw-dalmatian-infrastructure that referenced this issue Jan 2, 2024
@Stretch96
Conditionally add ECS cluster SSM policies
a0fd78f 
* This conditionally adds the policies with permissions required to use
  SSM default host management configuration.
* It checks for the value of the service setting to ensure dhcm has been
  enabled to decide wether to add the policies. `aws_ssm_service_setting`
  doesn't yet have a data source (hashicorp/terraform-provider-aws#25170),
  so it uses a script along with the `external` provider instead, to get
  the service setting parameters.
@github-actions GitHub Actions
Copy link

Marking this issue as stale due to inactivity. This helps our maintainers find and focus on the active issues. If this issue receives no comments in the next 30 days it will automatically be closed. Maintainers can also remove the stale label.

If this issue was automatically closed and you feel this issue should be reopened, we encourage creating a new issue linking back to this one for added context. Thank you!

@github-actions github-actions bot added the stale Old or inactive issues managed by automation, if no further action taken these will get closed. label Nov 21, 2024
@arianvp
Copy link
Contributor

arianvp commented Dec 18, 2024

This is really needed because with AWS SSM Unified Console Experience enabled, AWS automatically sets this setting with a predefined role. If you want to attach extra policies to this role, a data source would be very useful

https://docs.aws.amazon.com/systems-manager/latest/userguide/systems-manager-setting-up-single-account-region.html

@github-actions github-actions bot removed the stale Old or inactive issues managed by automation, if no further action taken these will get closed. label Dec 18, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
enhancement Requests to existing resources that expand the functionality or scope. new-data-source Introduces a new data source. service/ssm Issues and PRs that pertain to the ssm service.
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
5 participants
@arianvp @gdavison @ewbankkit @upegnasrame @DrFaust92