使用Terraform將ECS任務ARN注入AWS Cloudwatch事件規則

Question

我正在嘗試創建一個AWS Cloudwatch事件規則，以在運行特定任務的容器成功完成運行時發送SNS電子郵件通知。 我已經遍歷了Terraform文檔，但是找不到一種動態注入taskArn的好方法：

resource "aws_cloudwatch_event_rule" "important-task-complete-rule" {
  name = "reporting-task-completed"
  description = "Notification for when an important task finishes running successfully."

  event_pattern = <<PATTERN
{
  "source": [
    "aws.ecs"
    ],
  "detail-type": [
    "ECS Task State Change"
    ],
  "detail": {

    "lastStatus": [
      "STOPPED"
    ],
"stoppedReason" : [
    "Essential container in task exited"
  ],
"containers": {
  "exitCode": [
        0
      ],
  "taskArn": "arn:aws:ecs:us-east-1:MY_ACCOUNT:task/MY_TASK_ID_THAT_I_WANT_TO_INJECT"
    }
}
}
PATTERN
}

例如，這里的文檔示例提供了我上面使用的相同的硬編碼<<PATTERN示例。

是否有一種模板文件方式可以動態插入我的ARN中，而無需對其進行硬編碼？

Answer 1

正如@matt Schuchard所說，您是否使用terraform資源屬性進行管理？ （順便說一句，它不稱為variables ）。

resource "aws_ecs_task_definition" "service" {
   ...
}

resource "aws_cloudwatch_event_rule" "important-task-complete-rule" {
  name = "reporting-task-completed"
  description = "Notification for when an important task finishes running successfully."

  event_pattern = <<PATTERN
{
  "source": [
    "aws.ecs"
    ],
  "detail-type": [
    "ECS Task State Change"
    ],
  "detail": {

    "lastStatus": [
      "STOPPED"
    ],
"stoppedReason" : [
    "Essential container in task exited"
  ],
"containers": {
  "exitCode": [
        0
      ],
  "taskArn": "${aws_ecs_task_definition.service.arn}"
    }
}
}
PATTERN
}