feat: enable multiple invocations of the module in a single account

Author: jim80net

main.tf

@@ -20,7 +20,7 @@ resource aws_lambda_permission slowlog_check {
 
 
 resource aws_iam_role slowlog_check {
-  name = "slowlog_check"
+  name_prefix = "slowlog_check"
 
   assume_role_policy = <<EOF
 {
@@ -40,7 +40,7 @@ EOF
 }
 
 resource aws_iam_policy slowlog_check {
-  name        = "slowlog_check"
+  name_prefix = "slowlog_check"
   path        = "/"
   description = "This IAM policy allows the slowlog_check to run"
 
@@ -95,15 +95,15 @@ resource aws_security_group egress {
 }
 
 resource aws_ssm_parameter datadog_api_key {
-  name        = "/${var.ssm_path}/DATADOG_API_KEY"
+  name        = "/${var.ssm_path}/${local.replication_group}/DATADOG_API_KEY"
   description = "Datadog API Key"
   tags        = var.tags
   type        = "SecureString"
   value       = var.datadog_api_key
 }
 
 resource aws_ssm_parameter datadog_app_key {
-  name        = "/${var.ssm_path}/DATADOG_APP_KEY"
+  name        = "/${var.ssm_path}/${local.replication_group}/DATADOG_APP_KEY"
   description = "Datadog App Key"
   tags        = var.tags
   type        = "SecureString"
@@ -112,7 +112,7 @@ resource aws_ssm_parameter datadog_app_key {
 
 
 resource "aws_lambda_function" "slowlog_check" {
-  function_name    = "slowlog_check"
+  function_name    = "slowlog_check_for_${local.replication_group}"
   filename         = local.slowlog_check_archive_path
   source_code_hash = local.slowlog_check_archive_hash
   role             = aws_iam_role.slowlog_check.arn
@@ -127,7 +127,7 @@ resource "aws_lambda_function" "slowlog_check" {
   environment {
     variables = {
       REDIS_HOST = var.elasticache_endpoint
-      SSM_PATH   = "${var.ssm_path}"
+      SSM_PATH   = "${var.ssm_path}/${local.replication_group}"
       NAMESPACE  = var.namespace
       ENV        = var.env
       METRICNAME = var.metric_name

vars.tf

@@ -39,7 +39,7 @@ variable metric_name {
 }
 
 variable ssm_path {
-  description = "Custom SSM path to provision Datadog access ID's in. Leading slash ommitted."
+  description = "Custom SSM path to provision Datadog access ID's in. Leading slash ommitted. The final SSM paths will look like: `/$ssm_path/$elasticache_endpoint/DATADOG_API_KEY`"
   default     = "slowlog_check"
 }