mirror of
https://github.com/Sea-Haven-Industries/meal-order-manager.git
synced 2026-09-30 07:43:13 +00:00
26a92a2f62
Some checks failed
Build Lambda Layer / build (push) Has been cancelled
* feat(auth): accept portal Cognito ID tokens * fix(auth): distinguish portal verification outages * docs(auth): document Cognito workspace variables
62 lines
2.4 KiB
HCL
62 lines
2.4 KiB
HCL
# Parameter Store entries.
|
|
#
|
|
# /meal-order-manager/google-client-id is deliberately NOT declared here. It is
|
|
# created and rotated out-of-band because it varies per environment; data.tf
|
|
# reads it. Do not turn that lookup into a resource.
|
|
|
|
resource "aws_ssm_parameter" "slack_channel_id" {
|
|
name = local.slack_channel_param
|
|
type = "String"
|
|
value = var.slack_channel_id
|
|
description = "Slack channel ID for meal order notifications"
|
|
}
|
|
|
|
resource "aws_ssm_parameter" "portal_cognito_issuer" {
|
|
name = local.portal_cognito_issuer_param
|
|
type = "String"
|
|
value = var.portal_cognito_issuer
|
|
description = "Trusted portal Cognito user-pool issuer for ID-token verification"
|
|
}
|
|
|
|
resource "aws_ssm_parameter" "portal_cognito_audience" {
|
|
name = local.portal_cognito_audience_param
|
|
type = "String"
|
|
value = var.portal_cognito_audience
|
|
description = "Trusted portal Cognito app client ID for ID-token verification"
|
|
}
|
|
|
|
# ---------------------------------------------------------------------------
|
|
# Deploy-time lookups
|
|
# ---------------------------------------------------------------------------
|
|
#
|
|
# These replace the CloudFormation stack outputs that
|
|
# .github/workflows/weekly-menu.yml used to read, so the job can resolve its
|
|
# deploy targets without a CloudFormation stack.
|
|
|
|
resource "aws_ssm_parameter" "deploy_api_url" {
|
|
name = "${local.ssm_prefix}/deploy/api-url"
|
|
type = "String"
|
|
value = aws_apigatewayv2_api.order_api.api_endpoint
|
|
description = "API Gateway endpoint URL; read by the weekly-menu deploy job"
|
|
}
|
|
|
|
resource "aws_ssm_parameter" "deploy_form_bucket" {
|
|
name = "${local.ssm_prefix}/deploy/form-bucket"
|
|
type = "String"
|
|
value = aws_s3_bucket.form.id
|
|
description = "S3 bucket holding the order form; sync target for the weekly-menu deploy job"
|
|
}
|
|
|
|
resource "aws_ssm_parameter" "deploy_distribution_id" {
|
|
name = "${local.ssm_prefix}/deploy/distribution-id"
|
|
type = "String"
|
|
value = aws_cloudfront_distribution.form.id
|
|
description = "CloudFront distribution ID; cache-invalidation target for the weekly-menu deploy job"
|
|
}
|
|
|
|
resource "aws_ssm_parameter" "deploy_form_url" {
|
|
name = "${local.ssm_prefix}/deploy/form-url"
|
|
type = "String"
|
|
value = local.form_url
|
|
description = "Public order form URL; reported by the weekly-menu deploy job"
|
|
}
|