chore: add ssm path outputs, validate with tests, and add additional

logic to avoid invalid count

Author: RoseSecurity

src/outputs.tf

@@ -97,3 +97,8 @@ output "security_group_name" {
   value       = module.kafka.security_group_name
   description = "The name of the created security group"
 }
+output "ssm_key_paths" {
+  value       = module.parameter_store_write.names
+  description = "Names (key paths) of all SSM parameters stored for this msk cluster"
+}
+

src/ssm.tf

@@ -75,7 +75,7 @@ module "parameter_store_write" {
 
   count = var.ssm_parameters_enabled && local.enabled ? 1 : 0
 
-  parameter_write = local.kafka_parameters
+  parameter_write = var.ssm_parameters_enabled && local.enabled ? local.kafka_parameters : []
 
   context = module.this.context
 }

test/component_test.go

@@ -24,7 +24,7 @@ func (s *ComponentSuite) TestBasic() {
 	const awsRegion = "us-east-2"
 
 	suffix := strings.ToLower(random.UniqueId())
-	inputs := map[string]interface{}{
+	inputs := map[string]any{
 		"name": "msk-" + suffix,
 	}
 
@@ -55,6 +55,9 @@ func (s *ComponentSuite) TestBasic() {
 	// Additional assertions for SASL and Zookeeper
 	// ...
 
+	ssmKeyPaths := atmos.OutputList(s.T(), options, "ssm_key_paths")
+	assert.Equal(s.T(), 5, len(ssmKeyPaths))
+
 	client := awshelper.NewMSKClient(s.T(), awsRegion)
 	describeClusterOutput, err := client.DescribeCluster(context.Background(), &kafka.DescribeClusterInput{
 		ClusterArn: &clusterArn,
@@ -100,4 +103,3 @@ func TestRunSuite(t *testing.T) {
 	suite.AddDependency(t, "dns-delegated", "default-test", &inputs)
 	helper.Run(t, suite)
 }
-

test/fixtures/stacks/catalog/usecase/basic.yaml

@@ -55,4 +55,4 @@ components:
         # A list of IPv4 CIDRs to allow access to the cluster security group
         allowed_cidr_blocks: []
         # Write connection strings to SSM
-      ssm_parameters_enabled: false
+      ssm_parameters_enabled: true

test/fixtures/stacks/catalog/usecase/disabled.yaml

@@ -55,4 +55,4 @@ components:
         # A list of IPv4 CIDRs to allow access to the cluster security group
         allowed_cidr_blocks: []
         # Write connection strings to SSM
-        ssm_parameters_enabled: false
+        ssm_parameters_enabled: true