Files
acdl/modules/l1/rds/terraform/main.tf
T
Jon Chery fad6765b9e
acdl-ci / Lint (pull_request) Successful in 8s
acdl-ci / Test (pull_request) Successful in 4m7s
acdl-ci / Platform check-only (offline) (pull_request) Successful in 20s
acdl-modules-lifecycle / CI VPC apply (pull_request) Successful in 37s
acdl-modules-lifecycle / L1 lifecycle (cloudfront) (pull_request) Has been cancelled
acdl-modules-lifecycle / L1 lifecycle (ecr) (pull_request) Has been cancelled
acdl-modules-lifecycle / L1 lifecycle (ecs-cluster) (pull_request) Has been cancelled
acdl-modules-lifecycle / L1 lifecycle (ecs-service) (pull_request) Has been cancelled
acdl-modules-lifecycle / L1 lifecycle (iam-role) (pull_request) Has been cancelled
acdl-modules-lifecycle / L1 lifecycle (kms-key) (pull_request) Has been cancelled
acdl-modules-lifecycle / L1 lifecycle (rds) (pull_request) Has been cancelled
acdl-modules-lifecycle / L1 lifecycle (s3) (pull_request) Has been cancelled
acdl-modules-lifecycle / L1 lifecycle (uptime) (pull_request) Has been cancelled
acdl-modules-lifecycle / L1 lifecycle (vpc) (pull_request) Has been cancelled
acdl-modules-lifecycle / L1 lifecycle (waf) (pull_request) Has been cancelled
acdl-modules-lifecycle / CI VPC destroy (pull_request) Has been cancelled
acdl-modules-lifecycle / L1 lifecycle (alb) (pull_request) Has been cancelled
fix: kms-key deletion window range + rds password policy
- kms-key: complex example had deletion_window_days=90 (max is 30).
  Fixed to 30.
- rds: AWS rejected 'db_admin' as invalid password (needs upper+lower+
  special). Added password variable (default 'ACdlcI2026!') to the RDS
  module + interface + both example contracts.

---ci---
project: acdl
phase: P59
milestone: v1.11
status: execute
---/ci---
2026-07-28 18:40:04 +00:00

22 lines
768 B
Terraform

resource "aws_db_subnet_group" "this" {
count = var.subnet_ids != "" ? 1 : 0
name = "acdl-ci-rds-subnet-group"
subnet_ids = split(",", var.subnet_ids)
}
resource "aws_db_instance" "this" {
engine = var.engine
engine_version = var.engine_version
instance_class = var.instance_class
allocated_storage = var.allocated_storage
db_name = var.db_name
username = var.username
password = var.password
multi_az = var.multi_az
storage_encrypted = var.storage_encrypted
kms_key_id = var.kms_key_arn
skip_final_snapshot = true
publicly_accessible = false
db_subnet_group_name = var.subnet_ids != "" ? aws_db_subnet_group.this[0].name : null
}