---
AWSTemplateFormatVersion: "2010-09-09"
Description: >
  Good Template for testing Dynamic References
Parameters:
  myPrefix:
    Type: String
Resources:
  MyDB:
    Type: AWS::RDS::DBInstance
    Properties:
      AllocatedStorage: '5'
      DBInstanceClass: db.m1.small
      Engine: MySQL
      MasterUsername: '{{resolve:ssm:MyUsername:1}}'
      MasterUserPassword: '{{resolve:ssm-secure:My-Secure-Password:1}}'
    DeletionPolicy: Snapshot
  MyIAMUser:
    Type: AWS::IAM::User
    Properties:
      UserName: myUser
      LoginProfile:
        Password: !Sub 'list-{{resolve:ssm-secure:MySecurePassword:1}}'
  OpsWorkStack:
    Type: AWS::OpsWorks::Stack
    Properties:
      Name: Test
      ServiceRoleArn: service:arn
      DefaultInstanceProfileArn: profile:arn
      RdsDbInstances:
      -
        DbPassword: '{{resolve:ssm-secure:MySecurePassword:1}}'
        DbUser: '{{resolve:ssm:DbUsername:1}}'
        RdsDbInstanceArn: String
      CustomCookbooksSource:
        Password:
          Fn::Sub:
          - '${prefix}-{{resolve:ssm-secure:MySecurePassword:1}}'
          - prefix: !Ref myPrefix