# Secret shells only. Values are copied from mgmt out of band after create.

resource "aws_secretsmanager_secret" "this" {
  for_each = toset(local.secret_names)

  name                    = each.value
  recovery_window_in_days = 30

  tags = {
    Purpose = "apm-wo-analysis secret shell"
  }
}