{"id":20453302,"url":"https://github.com/umihico/terraform-aws-stateless-ssm-parameter","last_synced_at":"2026-06-24T17:31:03.898Z","repository":{"id":43357909,"uuid":"451037973","full_name":"umihico/terraform-aws-stateless-ssm-parameter","owner":"umihico","description":"Terraform module which creates ssm paratemers without leaking raw values on git and tfstates","archived":false,"fork":false,"pushed_at":"2022-03-13T10:20:21.000Z","size":12,"stargazers_count":0,"open_issues_count":0,"forks_count":0,"subscribers_count":1,"default_branch":"main","last_synced_at":"2026-04-01T10:19:01.851Z","etag":null,"topics":["aws","aws-ss","ssm","terraform","terraform-module","terraform-modules"],"latest_commit_sha":null,"homepage":"https://registry.terraform.io/modules/umihico/stateless-ssm-parameter/","language":"HCL","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":null,"status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/umihico.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":null,"code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null}},"created_at":"2022-01-23T07:49:30.000Z","updated_at":"2022-02-14T10:18:49.000Z","dependencies_parsed_at":"2022-09-19T06:50:19.935Z","dependency_job_id":null,"html_url":"https://github.com/umihico/terraform-aws-stateless-ssm-parameter","commit_stats":null,"previous_names":[],"tags_count":2,"template":false,"template_full_name":null,"purl":"pkg:github/umihico/terraform-aws-stateless-ssm-parameter","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/umihico%2Fterraform-aws-stateless-ssm-parameter","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/umihico%2Fterraform-aws-stateless-ssm-parameter/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/umihico%2Fterraform-aws-stateless-ssm-parameter/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/umihico%2Fterraform-aws-stateless-ssm-parameter/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/umihico","download_url":"https://codeload.github.com/umihico/terraform-aws-stateless-ssm-parameter/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/umihico%2Fterraform-aws-stateless-ssm-parameter/sbom","scorecard":null,"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":34743465,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-05-26T15:22:16.424Z","status":"online","status_checked_at":"2026-06-24T02:00:07.484Z","response_time":106,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["aws","aws-ss","ssm","terraform","terraform-module","terraform-modules"],"created_at":"2024-11-15T11:12:24.631Z","updated_at":"2026-06-24T17:31:03.876Z","avatar_url":"https://github.com/umihico.png","language":"HCL","funding_links":[],"categories":[],"sub_categories":[],"readme":"# stateless-ssm-parameter\n\nTerraform module which creates ssm paratemers without leaking raw values on git and tfstates\n\n## Usage\n\n```hcl\nmodule \"ssm_parameters\" {\n  source = \"umihico/stateless-ssm-parameter/aws\"\n  parameters = [\n    {\n      name            = \"stateless-ssm-parameters-demo-aws-access-key-id\"\n      encrypted_value = \"AQICAHhknPcMN2mPQjlgkKH9EhrUk79o+4j1nUtJMmNPXkAKWgHMyR2vUsqH8wKITgQmgvysAAAAcjBwBgkqhkiG9w0BBwagYzBhAgEAMFwGCSqGSIb3DQEHATAeBglghkgBZQMEAS4wEQQMGIi7bRe0nfMJk4LHAgEQgC+8pD0sNt3aXQ97B7mAenZLWSTa9xrUYxEObS0c6M5PcJsUY96yPqpWR8d11rkk1w==\"\n      # plain text is AKIAIOSFODNN7EXAMPLE\n    },\n    {\n      name            = \"stateless-ssm-parameters-demo-aws-access-secret-key\"\n      encrypted_value = \"AQICAHhknPcMN2mPQjlgkKH9EhrUk79o+4j1nUtJMmNPXkAKWgFJO3StxQSrfvTKupiSxQ9fAAAAhzCBhAYJKoZIhvcNAQcGoHcwdQIBADBwBgkqhkiG9w0BBwEwHgYJYIZIAWUDBAEuMBEEDA+oQzzMdeJwKG35QwIBEIBD14aLRt9gKfEBZjiCL1/QfbmhPqknTM3lo7MCoj7vKHWxqir4x0Gafylx/piwspv40i+3523obtUfWiN0dxhJXdsG5g==\"\n      # plain text is wJalrXUtnFEMI/K7MDENG/bPxRfiCYEXAMPLEKEY\n    },\n  ]\n}\n```\n\n## Benefits\n\n- Parameters are encrypted and version controllable by git\n- **Original values will be never contained and leak from tfstate**\n- Only ARNs and names, such insensitive values are referenceable for [ECS enviroment variable reference](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/specifying-sensitive-data-parameters.html).\n\n## How to encrypt\n\n```bash\n# encrypting value 'AKIAIOSFODNN7EXAMPLE'\naws kms encrypt \\\n --key-id alias/stateless-ssm-parameter-sample \\\n --plaintext \"$(echo -n 'AKIAIOSFODNN7EXAMPLE' | base64)\" \\\n --output text \\\n --query CiphertextBlob\n```\n\nIf you don't have kms key or alias yet, please create like below.\n\n```bash\n# with terraform\nresource \"aws_kms_key\" \"sample\" {\n  description         = \"stateless-ssm-parameter-sample-master-key\"\n  enable_key_rotation = true\n  is_enabled          = true\n}\n\nresource \"aws_kms_alias\" \"sample\" {\n  name          = \"alias/stateless-ssm-parameter-sample\"\n  target_key_id = aws_kms_key.sample.key_id\n}\n\n# with aws cli\naws kms create-alias --alias-name \"alias/stateless-ssm-parameter-sample2\" --target-key-id $(aws kms create-key --output text --query \"KeyMetadata.KeyId\" --description \"stateless-ssm-parameter-sample2-master-key\")\n```\n\n## Inputs\n\n| Name       | Description                                                                                                                                                                                                                | Type                                                                              | Default     | Required |\n| ---------- | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | --------------------------------------------------------------------------------- | ----------- | :------: |\n| parameters | Takes name(s) and encrypted_value(s) as same as [aws_ssm_parameter](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/ssm_parameter) takes name and value                                        | `\u003cpre\u003elist(object({\u003cbr\u003e name = string\u003cbr\u003e encrypted_value = string\u003cbr\u003e }))\u003c/pre\u003e` | -           |   yes    |\n| region     | Optional, and detected region by terraform will be used without this                                                                                                                                                       | `string`                                                                          | `null`      |    no    |\n| profile    | If terraform works with named profile, you need to specify same one here, or if the name is personal, you can overwrite by TF_VARS without commiting it like this. `TF_VAR_STATELESS_SSM_PROFILE=profile2 terraform apply` | `string`                                                                          | `\"default\"` |    no    |\n\n## Outputs\n\n| Name               |                                                                                      Description                                                                                       |\n| ------------------ | :------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------: |\n| aws_ssm_parameters | Returns list of arn, name, type and value(encrypted) as same as [aws_ssm_parameter](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/ssm_parameter) returns |\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fumihico%2Fterraform-aws-stateless-ssm-parameter","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fumihico%2Fterraform-aws-stateless-ssm-parameter","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fumihico%2Fterraform-aws-stateless-ssm-parameter/lists"}