psenv.tf

variable "ssm_path" {}

data "external" "ssm_parameters" {
  program = ["sh", "-c", <<EOT
raw_json=$(aws ssm get-parameters-by-path --no-with-decryption --path ${var.ssm_path})
encoded_json=$(echo $raw_json | sed 's/"/\\"/g')
echo "{\"json\": \"$encoded_json\"}"
EOT
  ]
}

locals {
  parameters = jsondecode(data.external.ssm_parameters.result.json).Parameters
  environment_variables = jsonencode([
    for parameter in local.parameters : {
      name = reverse(split("/", parameter.Name))[0]
      valueFrom = parameter.ARN
    }
  ])
}

output "environment_variables" {
  value = local.environment_variables
}