HashiConf Our community conference is taking place in San Francisco and online October 10-12. Register now
Waypoint
Waypoint Integrations

AWS SSM

@hashicorp

The AWS SSM plugin reads configuration values from the AWS SSM Parameter Store.

  • Official
  • Built-in

Updated 2 months ago

AWS SSM Config Sourcer

Read configuration values from AWS SSM Parameter Store.

Examples

config {
  env = {
    PORT = dynamic("aws-ssm", {
      path = "port"
    })
  }
}

Parameters

18 Results

  • access_keyOptionalstring

    This is the AWS access key. It must be provided, but it can also be sourced from the AWS_ACCESS_KEY_ID environment variable, or via a shared credentials file if profile is specified

  • assume_role_arnOptionalstring

    Amazon Resource Name (ARN) of the IAM Role to assume.

  • assume_role_duration_secondsOptionalint

    Number of seconds to restrict the assume role session duration.

  • assume_role_external_idOptionalstring

    External identifier to use when assuming the role.

  • assume_role_policyOptionalstring

    IAM Policy JSON describing further restricting permissions for the IAM Role being assumed.

  • assume_role_session_nameOptionalstring

    Session name to use when assuming the role.

  • iam_endpointOptionalstring

    Custom endpoint address for the IAM service.

  • insecureOptionalbool

    Explicitly allow the provider to perform "insecure" SSL requests.

  • max_retriesOptionalint

    This is the maximum number of times an API call is retried, in the case where requests are being throttled or experiencing transient failures. The delay between the subsequent API calls increases exponentially.

  • profileOptionalstring

    This is the AWS profile name as set in the shared credentials file.

  • regionOptionalstring

    This is the AWS region. It must be provided, but it can also be sourced from the AWS_DEFAULT_REGION environment variables, or via a shared credentials file if profile is specified.

  • secret_keyOptionalstring

    This is the AWS secret key. It must be provided, but it can also be sourced from the AWS_SECRET_ACCESS_KEY environment variable, or via a shared credentials file if profile is specified.

  • shared_credentials_fileOptionalstring

    This is the path to the shared credentials file. If this is not set and a profile is specified, ~/.aws/credentials will be used.

  • skip_credentials_validationOptionalbool

    Skip the credentials validation via the STS API. Useful for AWS API implementations that do not have STS available or implemented.

  • skip_metadata_api_checkOptionalbool

    Skip the AWS Metadata API check. Useful for AWS API implementations that do not have a metadata API endpoint. Setting to true prevents Terraform from authenticating via the Metadata API. You may need to use other authentication methods like static credentials, configuration variables, or environment variables.

  • skip_requesting_account_idOptionalbool

    Skip requesting the account ID. Useful for AWS API implementations that do not have the IAM, STS API, or metadata API.

  • sts_endpointOptionalstring

    Custom endpoint for the STS service.

  • tokenOptionalstring