The webhook URL was passed as a NoEcho CF parameter but still
ended up as a plaintext Lambda environment variable. Now reads
from Secrets Manager at cold start and caches in a module-level
global, matching the pattern used for the Afi API key.
Two Lambda functions that integrate Afi.ai backup API with Slack:
- Auto-protect: weekly scan for unprotected users, applies backup policy
- Health digest: weekly backup task stats, quotas, and coverage report
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>