#terragrunt (2020-06)

  after_hook "after_hook" {
    commands     = ["apply"]
    execute      = ["aws", "s3 ls"]
  }

[terragrunt] 2020/06/01 10:03:21 Detected 1 Hooks
[terragrunt] 2020/06/01 10:03:21 Executing hook: after_hook
[terragrunt] 2020/06/01 10:03:21 Running command: aws s3 ls
usage: aws [options] <command> <subcommand> [<subcommand> ...] [parameters]
To see help text, you can run:

  aws help
  aws <command> help
  aws <command> <subcommand> help
aws: error: argument command: Invalid choice, valid choices are:

  after_hook "after_hook" {
    commands     = ["apply"]
    execute      = ["aws", "s3", "ls"]
  }

provider "aws" {
  region  = var.aws_region

  # Make it faster by skipping something
  skip_get_ec2_platforms      = true
  skip_metadata_api_check     = true
  skip_region_validation      = true
  skip_credentials_validation = true
}

terraform {
  backend "s3" {}
}

provider "aws" {
  region  = var.aws_region

  # Make it faster by skipping something
  skip_get_ec2_platforms      = true
  skip_metadata_api_check     = true
  skip_region_validation      = true
  skip_credentials_validation = true
}

provider "aws" {
  alias   = "virginia"
  region  = "us-east-1"
}

terraform {
  backend "s3" {}
  required_version = ">= 0.12.0"
}

variable "aws_region" {
  type        = string
  default     = "eu-central-1"
  description = "AWS region to use for all resources"
}

  custom_task_policy_statement = [
    {
      actions = [
        "s3:GetObject",
        "s3:ListBucketVersions",
        "s3:ListBucket",
        "s3:GetObjectTagging",
        "s3:GetBucketVersioning",
        "s3:GetBucketAcl",
        "s3:GetBucketCORS",
        "s3:GetBucketLocation",
        "s3:GetObjectVersion",
        "s3:PutObject",
        "s3:GetAccountPublicAccessBlock",
        "s3:ListAllMyBuckets",
        "s3:HeadBucket"
      ]
      effect = "Allow"
      resources = [
        dependency.s3.outputs.this_s3_bucket_arn,
        "${dependency.s3.outputs.this_s3_bucket_arn}/*"
      ]
    },
    {
      actions = [
        "kms:DescribeKey",
        "kms:GenerateDataKey*",
        "kms:Encrypt",
        "kms:ReEncrypt*",
        "kms:Decrypt"
      ]
      effect    = "Allow"
      resources = [dependency.kms.outputs.key_arn]
    }
  ]

locals {
  env           = element(split("/", local.relative_path), 1)
  base_tags = {
    "accountid"      = get_aws_account_id(),
    "environment"    = local.env,
  }
}

locals {
  # This loads base tags from parent hcl and adds additional ones

  # Ideally I want to do the opposite - define some tags here, and combine
  # them in the parent hcl so that we have access to the full set of tags there
  # to use for s3_bucket_tags and dynamodb_table_tags
  # I'm not sure if/how that's possible
  # See <https://terragrunt.gruntwork.io/docs/features/locals/>
  # Their solution with yaml doesn't help us because 2 of the 3 base tags are
  # dynamically computed

  base_config = read_terragrunt_config(find_in_parent_folders())

  tags = merge(local.base_config.locals.base_tags, {
    "abc" = "0123"
    "dept"  = "engineering"
  })
}

include {
  path = find_in_parent_folders("templates/aws.hcl")
}

terraform {}

remote_state {
    disable_init = tobool(get_env("TERRAGRUNT_DISABLE_INIT", "false"))
    backend = "s3"
      config = {
      bucket = "${local.bucket}"
      region = "${local.backend_region}"
      key    = "${get_env("PPATH")}/terraform.tfstate"
      encrypt = true
      dynamodb_table = "${local.dynamodb_table}"
    }
}

locals {
  bucket = "${get_env("bucket")}"
  backend_region = "${get_env("backend_region")}"
  dynamodb_table = "${get_env("dynamodb_table")}"
}

generate "provider" {
  path      = "provider.tf"
  if_exists = "overwrite"
  contents = <<EOF
provider "aws" {
  version = "2.67.0"
  region = ???
}
EOF
}

generate "backend" {
  path      = "backend.tf"
  if_exists = "overwrite"
  contents = <<EOF
terraform {
  backend "s3" {}
}
EOF

provider "aws" {
  version = "2.67.0"
  region = ${REGION}
}

generate "provider" {
  path      = "provider.tf"
  if_exists = "overwrite"
  contents  = templatefile("./provider.tf", {
    REGION = get_env("backend_region")
  })
}

include {
  path = find_in_parent_folders("templates/aws.hcl")
}

locals {
  region = "eu-central-0"
}

terraform {}

remote_state {
    disable_init = tobool(get_env("TERRAGRUNT_DISABLE_INIT", "false"))
    backend = "s3"
      config = {
      bucket = "${local.bucket}"
      region = "${local.backend_region}"
      key    = "${get_env("PPATH")}/terraform.tfstate"
      encrypt = true
      dynamodb_table = "${local.dynamodb_table}"
    }
}

locals {
  bucket = "hardcoded"
  backend_region = "hardcoded"
  dynamodb_table = "hardcoded"
}

generate "provider" {
  path      = "provider.tf"
  if_exists = "overwrite"
  contents = <<EOF
provider "aws" {
  version = "2.67.0"
  region = ${local.region}"
}
EOF
}

generate "backend" {
  path      = "backend.tf"
  if_exists = "overwrite"
  contents = <<EOF
terraform {
  backend "s3" {}
}
EOF