TBD
https://registry.terraform.io/providers/hashicorp/random/latest/docs/resources/password
resource "aws_ssm_parameter" "db_mydb_password" {
# lifecycle {
# ignore_changes = [value]
# }
# (Required)
name = "/${local.env}/${local.ci}/terraform/db_mydb_password"
type = "SecureString"
# (Optional)
description = "Master password for db mydb"
value = random_password.db_mydb_random.result
}
#RDS: >=8 printable ASCII chars. Can't contain any of the following: / ' " @
resource "random_password" "db_mydb_random" {
length = 16
special = true
override_special = "!#$%&*()-_=+[]{}<>:?"
keepers = { #Arbitrary map of values that, when changed, will trigger recreation of resource
version = "v1"
}
}