feat: added the sharing of resource tagging information

Author: gambol99

modules/shared/parameters.tf

@@ -0,0 +1,45 @@
+
+locals {
+  ## A map of the subnets and their tagging
+  subnet_map = merge({
+    for k, v in aws_subnet.subnets : v.id => v.tags
+  })
+}
+
+## Provision the SSM parameter to store the JSON data
+resource "aws_ssm_parameter" "current" {
+  name        = format("%s/%s/%s", var.parameter_store_prefix, var.vpc_id, var.name)
+  description = "Used to share resource related tags with other accounts"
+  type        = "String"
+  value       = jsonencode(local.subnet_map)
+  tags        = local.tags
+}
+
+## Provision the RAM share to distribute the SSM parameter
+resource "aws_ram_resource_share" "ssm_parameter_share" {
+  allow_external_principals = false
+  name                      = format("ssm-parameter-share-%s", var.name)
+  tags                      = local.tags
+}
+
+## Associate the Parameter Store value with the RAM resource share
+resource "aws_ram_resource_association" "ssm_parameter_association" {
+  resource_share_arn = aws_ram_resource_share.ssm_parameter_share.arn
+  resource_arn       = aws_ssm_parameter.current.arn
+}
+
+## Associate the principals with the RAM share
+resource "aws_ram_principal_association" "ssm_parameter_accounts" {
+  for_each = toset(var.share.accounts)
+
+  principal          = each.value
+  resource_share_arn = aws_ram_resource_share.this.arn
+}
+
+## Associate the principals with the RAM share
+resource "aws_ram_principal_association" "ssm_parameter_organizational_units" {
+  for_each = toset(var.share.organizational_units)
+
+  principal          = each.value
+  resource_share_arn = aws_ram_resource_share.this.arn
+}

modules/shared/variables.tf

@@ -20,6 +20,12 @@ variable "share" {
   default = {}
 }
 
+variable "parameter_store_prefix" {
+  description = "The prefix to use for the SSM parameter store"
+  type        = string
+  default     = "/lz/network/shared"
+}
+
 variable "permitted_subnets" {
   description = "A collection of additional subnets to allow access to"
   type        = list(string)