From 7ed0743b90e9e703d285ffe3cc87d2d583fec24d Mon Sep 17 00:00:00 2001
From: Adam Moussa <adam@seahavenind.com>
Date: Fri, 18 Sep 2026 15:09:43 -0400
Subject: [PATCH] fix(terraform): pin SSM deploy parameter tier and data_type

HCP tried to replace the live parameters on refresh because those
attributes were computed. The apply role cannot DeleteParameter.
---
 terraform/live/modules/environment-owned/main.tf | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/terraform/live/modules/environment-owned/main.tf b/terraform/live/modules/environment-owned/main.tf
index 42573c80..97de3317 100644
--- a/terraform/live/modules/environment-owned/main.tf
+++ b/terraform/live/modules/environment-owned/main.tf
@@ -389,6 +389,8 @@ resource "aws_iam_role_policy" "github_deploy" {
 resource "aws_ssm_parameter" "deploy_bucket" {
   name        = "${local.ssm_prefix}/deploy/bucket"
   type        = "String"
+  data_type   = "text"
+  tier        = "Standard"
   value       = aws_s3_bucket.site.id
   description = "SPA origin bucket; deploy-web syncs dist/ to the bucket root"
   tags        = local.resource_tags
@@ -397,6 +399,8 @@ resource "aws_ssm_parameter" "deploy_bucket" {
 resource "aws_ssm_parameter" "deploy_distribution_id" {
   name        = "${local.ssm_prefix}/deploy/distribution-id"
   type        = "String"
+  data_type   = "text"
+  tier        = "Standard"
   value       = aws_cloudfront_distribution.site.id
   description = "CloudFront distribution ID; deploy-web invalidates /* after sync"
   tags        = local.resource_tags