Performance Insight API Access

Add Performance Insight API Access to the IAM role created so users can use query performance insights metrics. More information in: #73

Add a "namespace" tag to all RDS instances

Merge pull request #72 from ministryofjustice/namespace-tag

Add namespace tag

5.6

• Revert db_engine_version to 10 from 10.11 to avoid user's db_engine version changing.

5.5

• Add support for read replica DB instance
• Variable db_identifier and skip_final_snapshot can now be changed when using this module
• Change db_parameter default rds.force_ssl value from true to 1

5.4

• Introduce optional rds_name variable
• Allow custom_parameters to accept variables supporting all DB engines
  • use db_parameter [] variable

5.3

Updated RDS module to use resource "random_password", instead of resource "random_string" to generate the db password.
This will fix pipeline exposing the db password.

Also reverted dynamic "parameter" changes which were in the master branch, but have never been part of an official release.

resource "aws_db_parameter_group" "custom_parameters" {
  name = local.identifier
  family = var.rds_family
  dynamic "parameter" {
    for_each = var.db_parameter
    content {
      apply_method = lookup(parameter.value, "apply_method", null)
      name = parameter.value.name
      value = parameter.value.value
    }
  }
}

Added Performance Insights support

New variable available performance_insights_enabled in order to enable Performance Insights in RDS

5.1

This release is to add "ca_cert_identifier" which specifies the identifier of the CA certificate for the DB instance and default it to rds-ca-2019

5.0

This release is terraform 0.12 upgrade for RDS module

4.8

This version got a fix related to path found in version4.7

That is related to “path” in which IAM user is created, to have access to snap short for RDS.

In the module we set path using team_name path = "/system/rds-snapshots-user/${var.team_name}/"

where path must begin and end with / and contain only alphanumeric characters and/or / characters. , so team_name is not good option here, as team_name can contain any thing.

fix the module to not use “team_name” for path