AWS Key Pair SSM

Terraform Module to create an AWS Key Pair and store credentials on Parameter Store.

Features

This Terraform module creates the following AWS resources:

• Key Pair: Key Pair;
• Parameter Store
  • TLS Private Key;
  • TLS Public Key (OpenSSH - RSA);
  • TLS Public Key;

The credentials will be saved to the SSM Parameter Store as follows:

• /ec2/key-pair/name/private-rsa-key-pem
• /ec2/key-pair/name/public-rsa-key-pem
• /ec2/key-pair/name/public-rsa-key-openssh

The name is sent in the parameter to the module.

Requirements

• This module is meant for use with Terraform 1.3+. It has not been tested with previous versions of Terraform.
• An AWS account and your credentials (aws_access_key_id and aws_secret_access_key) configured. There are several ways to do this (environment variables, shared credentials file, etc.): my preference is to store them in a credential file. More information in the AWS Provider documentation.

Usage

terraform {
  required_version = ">= 1.3"

  required_providers {
    aws = {
      source  = "hashicorp/aws"
      version = "~> 4.0"
    }
    tls = {
      source  = "hashicorp/tls"
      version = "~> 4.0"
    }
  }
}

provider "aws" {
  region                  = "sa-east-1"
  shared_credentials_file = "~/.aws/credentials"
}

module "aws_rds_postgres" {
  source  = "victorcechinel/key-pair-ssm/aws"
  version = "1.0.4"
  
  name = "key-pair-name"
}

Inputs

Name	Description	Type	Default	Required
name	Key Pair name	string	-	yes
tags	Tags	array	-	no

Outputs

Name	Description
key_pair_name	Name key pair
tls_private_ssm	TLS Private Key SSM name
tls_public_rsa_ssm	TLS Public Key (OpenSSH - RSA) name
tls_public_ssm	TLS Public Key name

Download credentials

To download credentials via aws-cli, you need to have it previously downloaded and installed.

To install, go the official tutorial.

After installed and configured, run the command:

aws ssm get-parameter --name "/ec2/key-pair/name/private-rsa-key-pem" --output text --query Parameter.Value >> "~/my-key-pair.pem"

The name is sent in the parameter to the ssm module.

Now you have the pem downloaded.

Author

Module written by @victorcechinel. Linkedin. Module Support: terraform-aws-key-pair-ssm. Contributions and comments are welcomed.