diff --git a/terraform/ecs.tf b/terraform/ecs.tf index 566d3bb4da624bade01204dd66d83a4936b6dcff..aab9b33453965247f37b8c756954d8a30e2fdc87 100644 --- a/terraform/ecs.tf +++ b/terraform/ecs.tf @@ -1,6 +1,9 @@ -locals { - informatica_username = format("arn:aws:ssm:%s:%s:parameter%s", var.aws_region, var.aws_account_id[0], "/iics/cicd_username") - informatica_password = format("arn:aws:ssm:%s:%s:parameter%s", var.aws_region, var.aws_account_id[0], "/iics/cicd_password") +data "aws_ssm_parameter" "informatica-username" { + name = "/iics/cicd_username" +} + +data "aws_ssm_parameter" "informatica-password" { + name = "/iics/cicd_password" } data "template_file" "container" { @@ -13,8 +16,8 @@ data "template_file" "container" { app_port1 = var.container_app_port[0] app_port2 = var.container_app_port[1] app_port3 = var.container_app_port[2] - informatica_username = local.informatica_username - informatica_password = local.informatica_password + informatica_username = data.aws_ssm_parameter.informatica-username.arn + informatica_password = data.aws_ssm_parameter.informatica-password.arn secure_agent_mount_path = var.secure_agent_mount_path } } @@ -59,8 +62,8 @@ resource "aws_iam_policy" "iics-ssm-policy" { "ssm:GetParameters" ], "Resource": [ - "${local.informatica_username}", - "${local.informatica_password}" + "${data.aws_ssm_parameter.informatica-username.arn}", + "${data.aws_ssm_parameter.informatica-password.arn}" ] } ]