nr-terraform-db-vault
Set of Terraform scripts intended for the creation of databases in AWS using Terraform and saving/getting secrets from Vault
Requisites:
- Installation of Hashicorp Vault locally
- Set up your local environment with the respective AWS credentials before running these modules
- Set up your local environment with your Vault Token credentials and Vault path (VAULT_ADDR and VAULT_TOKEN)
- Create a path "aws/db_secrets" in your local or remote Vault
Modules:
terraform-vault-cred-create : Creates a pair of key values, intended to be used by terraform-rds-db-create during the creation of a database.
terraform-rds-db-create : Retrieves credentials from Vault and creates an RDS Aurora Postgres DB. This module relies on credentials existing in Vault.