Terraform - 从参数存储中获取值并传递给资源 [英] Terraform - Get a value from parameter store and pass to resource

问题描述

我们将最新批准的 AMI 存储在 AWS 参数存储中.使用 Terraform 创建新实例时，我想以编程方式获取此 AMI ID.我有一个提取 AMI ID 的命令，但我不确定如何将它与 Terraform 一起使用.

We store our latest approved AMIs in AWS parameter store. When creating new instances with Terraform I would like to programatically get this AMI ID. I have a command to pull the AMI ID but I'm not sure how to use it with Terraform.

这是我用来提取 AMI ID 的命令:

Here is the command I use to pull the AMI ID:

$(aws ssm get-parameter --name /path/to/ami --query 'Parameter.Value' --output text)

这是我的 Terraform 脚本:

And here is my Terraform script:

resource "aws_instance" "nginx" {
  ami           = "ami-c58c1dd3" # pull value from parameter store
  instance_type = "t2.micro"
  #key_name        = "${var.key_name}"

  provisioner "remote-exec" {
    inline = [
      "sudo yum install nginx -y",
      "sudo service nginx start"
    ]
  }
}

如何使用命令在 Terraform 脚本中提取 AMI ID?

How can I use the command to pull the AMI ID in the Terraform script?

推荐答案

您可以使用 aws_ssm_parameter 数据源 在运行时获取参数的值:

You can use the aws_ssm_parameter data source to fetch the value of a parameter at runtime:

data "aws_ssm_parameter" "ami" {
  name = "/path/to/ami"
}

resource "aws_instance" "nginx" {
  ami           = data.aws_ssm_parameter.ami.value # pull value from parameter store
  instance_type = "t2.micro"

  provisioner "remote-exec" {
    inline = [
      "sudo yum install nginx -y",
      "sudo service nginx start"
    ]
  }
}

但是，更好的方法可能是使用 aws_ami 数据源 以更直接地过滤您想要的 AMI，而不是将 AMI ID 推送到 SSM 参数存储，然后稍后再查找.您可以过滤许多条件，包括名称、帐户所有者和标签.这是 aws_instance 资源文档中的示例 正在寻找最新的 Ubuntu 20.04 AMI:

However, a better approach might be to use the aws_ami data source to filter for the AMI you want more directly instead of pushing the AMI ID to SSM parameter store and then looking it up later. You can filter on a number of criteria including name, account owner and tags. Here's the example from the aws_instance resource documentation that is looking for the latest Ubuntu 20.04 AMI:

data "aws_ami" "ubuntu" {
  most_recent = true

  filter {
    name   = "name"
    values = ["ubuntu/images/hvm-ssd/ubuntu-focal-20.04-amd64-server-*"]
  }

  filter {
    name   = "virtualization-type"
    values = ["hvm"]
  }

  owners = ["099720109477"] # Canonical
}

resource "aws_instance" "web" {
  ami           = data.aws_ami.ubuntu.id
  instance_type = "t2.micro"

  tags = {
    Name = "HelloWorld"
  }
}

这篇关于Terraform - 从参数存储中获取值并传递给资源的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！