afi-backup-monitor/terraform/locals.tf

locals {
  account_id   = "011934824531"
  boundary_arn = "arn:aws:iam::${local.account_id}:policy/seahaven-lambda-execution-boundary-afi-backup-monitor"

  common_env = {
    AFI_API_KEY_SECRET_ARN   = var.afi_api_key_secret_arn
    AFI_TENANT_ID            = var.afi_tenant_id
    SLACK_WEBHOOK_SECRET_ARN = var.slack_webhook_secret_arn
  }

  secrets_policy_json = jsonencode({
    Version = "2012-10-17"
    Statement = [
      {
        Effect = "Allow"
        Action = ["secretsmanager:GetSecretValue"]
        Resource = [
          var.afi_api_key_secret_arn,
          var.slack_webhook_secret_arn,
        ]
      }
    ]
  })
}