photo.jinwei.me/infra/rds.tf


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49

resource "aws_db_parameter_group" "jinwei-me" {
  name   = var.name
  family = var.rds_parameter_group
}

resource "aws_db_instance" "jinwei-me" {
  identifier             = var.name
  instance_class         = var.rds_instance_class
  allocated_storage      = var.rds_storage
  engine                 = var.rds_engine
  engine_version         = var.rds_engine_version
  username               = var.rds_username
  password               = random_password.rds_password.result
  port                   = var.rds_port
  db_subnet_group_name   = aws_db_subnet_group.jinwei-me.name
  vpc_security_group_ids = [aws_security_group.rds.id]
  parameter_group_name   = aws_db_parameter_group.jinwei-me.name
  publicly_accessible    = true
  skip_final_snapshot    = true
}

resource "random_password" "rds_password" {
  length  = 16
  special = false
}

resource "aws_ssm_parameter" "rds_host" {
  name  = "/${var.name}/mysql/host"
  type  = "String"
  value = aws_db_instance.jinwei-me.address
}

resource "aws_ssm_parameter" "rds_port" {
  name  = "/${var.name}/mysql/port"
  type  = "String"
  value = aws_db_instance.jinwei-me.port
}

resource "aws_ssm_parameter" "rds_user" {
  name  = "/${local.name}/mysql/username"
  type  = "String"
  value = aws_db_instance.jinwei-me.username
}

resource "aws_ssm_parameter" "rds_password" {
  name  = "/${local.name}/mysql/password"
  type  = "SecureString"
  value = random_password.rds_password.result
}