Create IaC for EventBridge trigger and SSM Policy in Instance Profile

nswarner commented 3 years ago

In order to connect GitHub Actions push image to ECR with updating the new image on the mud host, an EventBridge trigger was created on successful ECR push. This EventBridge uses SSM run command to stop, remove, pull, and start the just-pushed image. This required three things,

[x] A new IAM Policy associated to the EC2 instance profile to allow for SSM
[x] A new IAM Role, Amazon_EventBridge_Invoke_Run_Command_506570835
[x] An EventBridge resource to connect this altogether

There may also be other resources (IAM Policy associated to the IAM Role) to document as well.

nswarner commented 3 years ago

Reference: https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/cloudwatch_event_rule

EventBridge was formerly known as CloudWatch Events. The functionality is identical.

nswarner commented 3 years ago

Done.

mudmuseum / terraform-stacks

Create IaC for EventBridge trigger and SSM Policy in Instance Profile #26