chore(ci): incorporate SSM update workflow into release pipeline (#6914)

Author: leandrodamascena

.github/workflows/release-v3.yml

@@ -383,3 +383,15 @@ jobs:
           script: |
             const post_release = require('.github/scripts/post_release.js')
             await post_release({github, context, core})
+
+  update_ssm:
+    needs: [seal, release, publish_layer]
+    permissions:
+      id-token: write
+      contents: read
+    uses: ./.github/workflows/update_ssm.yml
+    with:
+      environment: "Prod"
+      write_latest: true
+      package_version: ${{ needs.seal.outputs.RELEASE_VERSION }}
+      layer_version: ${{ inputs.layer_documentation_version }}

.github/workflows/update_ssm.yml

@@ -1,5 +1,4 @@
 name: SSM Parameters
-run-name: SSM Parameters - Python
 
 # SSM Parameters update
 #
@@ -41,6 +40,31 @@ on:
         type: string
         required: true
 
+  workflow_call:
+    inputs:
+      environment:
+        description: Environment to deploy to, one of `Prod` or `Beta`
+        type: string
+        required: true
+
+      write_latest:
+        description: Write to the latest path
+        type: boolean
+        required: false
+        default: true
+
+      package_version:
+        description: Semantic Version of published layer
+        type: string
+        required: true
+
+      layer_version:
+        description: Layer version
+        type: string
+        required: true
+
+run-name: SSM Parameters - Python - Layer version ${{ inputs.layer_version }} - v${{ inputs.package_version }}
+
 permissions:
   contents: read