fix(terraform): pin SSM deploy parameter tier and data_type

HCP tried to replace the live parameters on refresh because those
attributes were computed. The apply role cannot DeleteParameter.
This commit is contained in:
Adam Moussa 2026-09-18 15:09:43 -04:00
parent bd79617aa2
commit 7ed0743b90
No known key found for this signature in database

View file

@ -389,6 +389,8 @@ resource "aws_iam_role_policy" "github_deploy" {
resource "aws_ssm_parameter" "deploy_bucket" { resource "aws_ssm_parameter" "deploy_bucket" {
name = "${local.ssm_prefix}/deploy/bucket" name = "${local.ssm_prefix}/deploy/bucket"
type = "String" type = "String"
data_type = "text"
tier = "Standard"
value = aws_s3_bucket.site.id value = aws_s3_bucket.site.id
description = "SPA origin bucket; deploy-web syncs dist/ to the bucket root" description = "SPA origin bucket; deploy-web syncs dist/ to the bucket root"
tags = local.resource_tags tags = local.resource_tags
@ -397,6 +399,8 @@ resource "aws_ssm_parameter" "deploy_bucket" {
resource "aws_ssm_parameter" "deploy_distribution_id" { resource "aws_ssm_parameter" "deploy_distribution_id" {
name = "${local.ssm_prefix}/deploy/distribution-id" name = "${local.ssm_prefix}/deploy/distribution-id"
type = "String" type = "String"
data_type = "text"
tier = "Standard"
value = aws_cloudfront_distribution.site.id value = aws_cloudfront_distribution.site.id
description = "CloudFront distribution ID; deploy-web invalidates /* after sync" description = "CloudFront distribution ID; deploy-web invalidates /* after sync"
tags = local.resource_tags tags = local.resource_tags