rds.tf

resource "aws_db_instance" "kong" {
  #  count      = local.enable_rds ? 1 : 0
  count      = var.enable_rds ? 1 : 0
  identifier = format("%s-%s", var.service, var.environment)

  engine            = "postgres"
  engine_version    = var.db_engine_version
  instance_class    = var.db_instance_class
  allocated_storage = var.db_storage_size
  storage_type      = "gp2"

  storage_encrypted = var.db_storage_encrypted
  kms_key_id        = var.db_kms_key_id #tfsec:ignore:AWS051

  backup_retention_period = var.db_backup_retention_period
  db_subnet_group_name    = var.db_subnets
  multi_az                = var.db_multi_az
  parameter_group_name    = format("%s-%s", var.service, var.environment)

  username = "root"
  password = random_string.master_password.result

  vpc_security_group_ids = [aws_security_group.postgresql.id]

  skip_final_snapshot       = var.db_final_snapshot_identifier == "" ? true : false
  final_snapshot_identifier = var.db_final_snapshot_identifier == "" ? null : var.db_final_snapshot_identifier

  tags = merge(
    {
      "Name"        = format("%s-%s", var.service, var.environment),
      "Environment" = var.environment,
      "Description" = var.description,
      "Service"     = var.service,
    },
    var.tags
  )
  depends_on = [aws_db_parameter_group.kong]
}

resource "aws_db_parameter_group" "kong" {
  #count = var.db_instance_count > 0 ? 1 : 0
  count = var.enable_rds ? 1 : 0

  name        = format("%s-%s", var.service, var.environment)
  family      = var.db_family
  description = var.description

  tags = merge(
    {
      "Name"        = format("%s-%s", var.service, var.environment),
      "Environment" = var.environment,
      "Description" = var.description,
      "Service"     = var.service,
    },
    var.tags
  )
}