AWS SSM Parameter Store to Environment Variables

aws_ssm_env.sh

#!/bin/sh

# Usage:
# eval $(/dir/to/file/aws_ssm_env.sh PRODUCTION/POSTGRES)
# PRODUCTION/POSTGRES can be changed to the need path, and the script will truncate that path

# AWS Systems Manager -> Parameter Store will be stored like this
# /PRODUCTION/POSTGRES/POSTGRES_DATABASE_HOST = 10.10.10.10
# /PRODUCTION/POSTGRES/POSTGRES_DATABASE_PORT = 0000


PARAMETER_PATH=$1

ROLE=$(curl http://169.254.169.254/latest/meta-data/iam/security-credentials)
CRED=$(curl http://169.254.169.254/latest/meta-data/iam/security-credentials/$ROLE)
# export AWS_ACCESS_KEY_ID=$(echo $CRED | jq -r '.AccessKeyId')
# export AWS_SECRET_ACCESS_KEY=$(echo $CRED | jq -r '.SecretAccessKey')
# export AWS_SESSION_TOKEN=$(echo $CRED | jq -r '.Token')

PARAMETERS_PATH=$(AWS_ACCESS_KEY_ID=$(echo $CRED | jq -r '.AccessKeyId') AWS_SECRET_ACCESS_KEY=$(echo $CRED | jq -r '.SecretAccessKey') AWS_SESSION_TOKEN=$(echo $CRED | jq -r '.Token') aws ssm get-parameters-by-path --with-decryption --path /$PARAMETER_PATH | sed -e "s~/$PARAMETER_PATH/~~")

echo $(jq -r '.Parameters| .[] | "export " + .Name + "=" + .Value + ""' <<< $PARAMETERS_PATH)

ec2-role-inline-policy

{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Sid": "VisualEditor0",
            "Effect": "Allow",
            "Action": [
                "ssm:GetParametersByPath",
                "ssm:GetParameters",
                "ssm:GetParameter"
            ],
            "Resource": "*"
        }
    ]
}