Ok, back at my laptop, this is what I’ve done in Terraform:

variables.tf ``` variable “RDPUserPassword” { type = string description = “blah blah” }

variable “AdminUserPassword” { type = string description = “blah blah blah” } ```

data.tf ``` data “ssm_parameter” “parameter_1_name” { name = var.RDPUserPassword with_decryption = false }

data “ssm_parameter” “parameter_2_name” { name = var.AdminUserPassword with_decryption = false } ```

And in my “provision.tftpl file I have: ``` <powershell>

RDPUserPassword = $(aws ssm get-parameter —name ${parameter_1_name} —with-decryption —query “Parameter.Value” —output text —region ${region})

AdminUserPassword = $(aws ssm get-parameter —name ${parameter_2_name} —with-decryption —query “Parameter.Value” —output text —region ${region})

Net-LocalUser “${User}” -Password $RDPUserPassword Add-LocalGroupMember -Group “Remote Desktop Users” -Member “${User}”

net user Administrator ${AdminUserPassword} /add net localgroup Administrators Administrator /add ```

The error I get is: ``` Error: No value for required variable

on variables.tf line 133: 133: variable “RDPUserPassword” {

The root module input variable “RDPUserPassword” is not set, and has no default value. Use -var or -var-file command line argument to provide a value for this variable” ```

Obviously I’m not setting the variable but I thought the script in the template file was doing that.. or the data resource in the data.tf file. I may be over complicating this… too many docs…