jdb/personal-measure
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

api: Consolidate AWS Secret usage to one secret per environment.

Browse Source
This commit is contained in:
Jonathan Bernard 2021-07-05 15:19:04 -05:00
parent 16c7852972
commit 3c9c24f30b
2 changed files with 10 additions and 11 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

18
operations/terraform/deployed_env/ecs.tf
View File

@ -1,10 +1,5 @@
resource "aws_secretsmanager_secret" "pmapi_auth" {
name = "${local.environment_name}-AuthSecret"
tags = { Environment = local.environment_name }
}
resource "aws_secretsmanager_secret" "pmapi_db_conn_string" {
name = "${local.environment_name}-DbConnString"
resource "aws_secretsmanager_secret" "pmapi" {
name = "${local.environment_name}-Config"
tags = { Environment = local.environment_name }
}
@ -38,12 +33,17 @@ resource "aws_ecs_task_definition" "pmapi" {
{
name = "AUTH_SECRET"
description = "Auth secret used to hash and salt passwords."
valueFrom = aws_secretsmanager_secret.pmapi_auth.arn
valueFrom = "${aws_secretsmanager_secret.pmapi.arn}:authSecret::"
},
{
name = "DB_CONN_STRING"
description = "Connection string with user credentials."
valueFrom = aws_secretsmanager_secret.pmapi_db_conn_string.arn
valueFrom = "${aws_secretsmanager_secret.pmapi.arn}:dbConnString::"
},
{
name = "KNOWN_ORIGINS"
description = "Connection string with user credentials."
valueFrom = "${aws_secretsmanager_secret.pmapi.arn}:knownOrigins::"
}
]
}

3
operations/terraform/deployed_env/iam.tf
View File

@ -27,8 +27,7 @@ resource "aws_iam_role" "ecs_task" {
"kms:Decrypt"
]
Resource = [
aws_secretsmanager_secret.pmapi_auth.arn,
aws_secretsmanager_secret.pmapi_db_conn_string.arn
aws_secretsmanager_secret.pmapi.arn
]
}
]