test(terraform): add Terratest setup using Go

Author: nikhilk145

examples/data.tf

@@ -6,15 +6,20 @@ data "aws_vpc" "vpc" {
   }
 }
 
-## Network
+## Network - Public Subnets
 data "aws_subnets" "this" {
   filter {
     name = "tag:Name"
     values = [
-      "${var.project_name}-${var.environment}-subnet-${var.region}a",
-      "${var.project_name}-${var.environment}-subnet-${var.region}b"
+      "${var.project_name}-${var.environment}-public-subnet-public-${var.region}a",
+      "${var.project_name}-${var.environment}-public-subnet-public-${var.region}b"
     ]
   }
+
+  filter {
+    name   = "vpc-id"
+    values = [data.aws_vpc.vpc.id]
+  }
 }
 
 ## Security
@@ -32,9 +37,9 @@ data "aws_security_groups" "this" {
 
 ## Secrets Manager
 data "aws_secretsmanager_secret" "source-secret" {
-  name = "source-secret"
+  name = "arc-poc-rds-connection-details"
 }
 
 data "aws_secretsmanager_secret" "target-secret" {
-  name = "target-secret"
+  name = "arc-dev-target-database-connection"
 }

examples/main.tf

@@ -43,8 +43,8 @@ module "aws_dms" {
   instance_allocated_storage      = 5
   instance_apply_immediately      = true
   instance_network_type           = "IPV4"
-  instance_class                  = "dms.t2.micro"
-  instance_id                     = "DMS-POC"
+  instance_class                  = "dms.t3.micro"
+  instance_id                     = "dms-poc"
   instance_subnet_group_id        = "dms-poc-public-subnet-group"
   instance_publicly_accessible    = true
   instance_vpc_security_group_ids = data.aws_security_groups.this.ids #Security Group ID
@@ -54,7 +54,7 @@ module "aws_dms" {
       endpoint_id         = "dms-poc-endpoint-1"
       endpoint_type       = "source"
       engine_name         = "postgres"
-      database_name       = "poc"
+      database_name       = "poc_source"
       secrets_manager_arn = data.aws_secretsmanager_secret.source-secret.arn #Source endpoint secret arn
       ssl_mode            = "require"
 

examples/variables.tf

@@ -24,5 +24,5 @@ variable "environment" {
 variable "project_name" {
   description = "Name of the project the vpn resource belongs to."
   type        = string
-  default     = "arc-example"
+  default     = "arc"
 }

modules/dms/main.tf

@@ -40,6 +40,14 @@ resource "aws_iam_role_policy" "dms_secrets_manager_access_policy" {
         Effect   = "Allow",
         Action   = "iam:PassRole",
         Resource = aws_iam_role.dms_secrets_manager_access_role.arn
+      },
+      {
+        Effect = "Allow",
+        Action = [
+          "kms:Decrypt",
+          "kms:DescribeKey"
+        ],
+        Resource = "*"
       }
     ]
   })