Add variables in the Parameter Store

Variables, such as parameters and secrets, are used for multiple purposes, like storing mail server details or providing Composer authentication details to the build and deploy process securely.

Naming convention for variables

Variables must follow this naming convention: /{project}/{environment}/{type}/{bucket}/{grant}/{variable_name}.

Placeholder description:

• type: defines the type of a variable. Possible values:

  • config: parameter
  • secret: secret

• bucket: defines what services a variable is used for. Possible values:

  • common: used by all the buckets.
  • app: used only by application services.
  • scheduler: used by the scheduler.

• grant: Defines access permissions to variables. Possible values:

  • public: readable and writable
  • limited: readable
  • internal: hidden

Path examples:

• /fashion_club_store/staging/config/common/limited/composer_pass

• /deans_jeans/prod/config/app/public/mail_host

Variable path hierarchy

Path hierarchy is needed to cover the cases when several variables with the same name are declared. If several variables with the same name are declared, the variable with a higher priority applies. The following rules define the priority of variables:

1. For any type and bucket, the priority is public > limited > internal.
2. Foy any bucket, the priority is bucket > common.
3. For any variable with the same name, the priority is secret > config.

The following variables are arranged from lower to higher priority:

• /{project}/{environment}/config/common/internal/{variable_name}

• /{project}/{environment}/config/common/limited/{variable_name}

• /{project}/{environment}/config/common/public/{variable_name}

• /{project}/{environment}/config/{app | scheduler}/internal/{variable_name}

• /{project}/{environment}/config/{app | scheduler}/limited/{variable_name}

• /{project}/{environment}/config/{app | scheduler}/public/{variable_name}

• /{project}/{environment}/secret/common/internal/{variable_name}

• /{project}/{environment}/secret/common/limited/{variable_name}

• /{project}/{environment}/secret/common/public/{variable_name}

• /{project}/{environment}/secret/{app | scheduler}/internal/{variable_name}

• /{project}/{environment}/secret/{app | scheduler}/limited/{variable_name}

• /{project}/{environment}/secret/{app | scheduler}/public/{variable_name}

Add variables

The following sections describe how to add parameters and secrets for different resources.

Add parameters to all resource types

1. In the AWS Management Console, go to Services > Parameter Store.
2. In the My parameters pane, click Create parameter. This opens the Create parameter page.
3. For Name, enter /{project}/{environment}/config/common/public/{variable_name}. Make sure to replace the placeholders based on your requirements.
4. Optional: For Description, enter a description of the variable. This may be a note about what this variable is used for.
5. For Type, select a type of the variable based on your requirements.
6. For Value, enter the value of the variable.
7. Click Create parameter. This opens the Parameter Store page with a success message displayed.
8. Go to Services > CodePipeline.
9. On the Pipelines page, select the NORMAL_Deploy_Spryker_{project}-{environemt} pipeline.
10. On the pipeline’s page, click Release change.
11. In the Release change window, click Release. After the pipeline finishes running, the variable gets available for your application.

Add secrets to all resource types

1. In the AWS Management Console, go to Services > Parameter Store.
2. In the My parameters pane, click Create parameter. This opens the Create parameter page.
3. For Name, enter /{project}/{environment}/secret/common/public/{variable_name}. Make sure to replace the placeholders based on your requirements.
4. Optional: For Description, enter a description of the variable. This may be a note about what this variable is used for. This may be a note about what this variable is used for.
5. For Type, select SecureString.
6. For Value, enter the value of the variable.
7. Click Create parameter. This opens the Parameter Store page with a success message displayed.
8. Go to Services > CodePipeline.
9. On the Pipelines page, select the NORMAL_Deploy_Spryker_{project}-{environemt} pipeline.
10. On the pipeline’s page, click Release change.
11. In the Release change window, click Release. After the pipeline finishes running, the variable gets available for your application.

Add parameters to ECS applications

1. In the AWS Management Console, go to Services > Parameter Store.
2. In the My parameters pane, click Create parameter. This opens the Create parameter page.
3. For Name, enter /{project}/{environment}/config/app/public/{variable_name}. Make sure to replace the placeholders based on your requirements.
4. Optional: For Description, enter a description of the variable. This may be a note about what this variable is used for. This may be a note about what this variable is used for.
5. For Type, select a type of the variable based on your requirements.
6. For Value, enter the value of the variable.
7. Click Create parameter. This opens the Parameter Store page with a success message displayed.
8. Go to Services > CodePipeline.
9. On the Pipelines page, select the ECS-updater-{project}-{environemt} pipeline.
10. On the pipeline’s page, click Release change.
11. In the Release change window, click Release. After the pipeline finishes running, the variable gets available for your application.

Adding secrets to ECS applications

1. In the AWS Management Console, go to Services > Parameter Store.
2. In the My parameters pane, click Create parameter. This opens the Create parameter page.
3. For Name, enter /{project}/{environment}/secret/app/public/{variable_name}. Make sure to replace the placeholders based on your requirements.
4. Optional: For Description, enter a description of the variable. This may be a note about what this variable is used for. This may be a note about what this variable is used for.
5. For Type, select SecureString.
6. For Value, enter the value of the variable.
7. Click Create parameter. This opens the Parameter Store page with a success message displayed.
8. Go to Services > CodePipeline.
9. On the Pipelines page, select the ECS-updater-{project}-{environemt} pipeline.
10. On the pipeline’s page, click Release change.
11. In the Release change window, click Release. After the pipeline finishes running, the variable gets available for your application.

Add parameters and secrets to Scheduler

1. In the AWS Management Console, go to Services > Parameter Store.
2. In the My parameters pane, click Create parameter. This opens the Create parameter page.
3. For Name, enter one of the following:
   • Variable: /{project}/{environment}/config/scheduler/public/{variable_name}
   • Secret: /{project}/{environment}/secret/scheduler/public/{variable_name} Make sure to replace the placeholders based on your requirements.
4. Optional: For Description, enter a description of the variable. This may be a note about what this variable is used for. This may be a note about what this variable is used for.
5. For Type, select SecureString.
6. For Value, enter the value of the variable.
7. Click Create parameter. This opens the Parameter Store page with a success message displayed.
8. Go to Services > CodePipeline.
9. On the Pipelines page, select the Rollout_Scheduler_{project}-{environemt} pipeline.
10. On the pipeline’s page, click Release change.
11. In the Release change window, click Release. After the pipeline finishes running, the variable gets available for your application.