adam/payments-dashboard
1
0
Fork 0
mirror of https://github.com/Sea-Haven-Industries/payments-dashboard.git synced 2026-09-30 05:23:12 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions
payments-dashboard/terraform/secrets.tf

3 lines
145 B
Terraform
Raw Normal View History

feat(infra): migrate payments-dashboard to HCP Terraform (PLAT-79) (#109) * feat(infra): migrate payments-dashboard to HCP Terraform (PLAT-79) Replace the mgmt SAM stack with a prod-only HCP workspace using the afterhours stub-plus-zip-CD seam so GitHub Actions owns function code and Terraform owns infrastructure. * fix(infra): pin secret and CMK ARNs for bootstrap-plan hcptf-bootstrap-plan cannot ssm:GetParameter or DescribeSecret, so the first plan must not data-source those values. * fix(infra): add EIP describe and DynamoDB CMK grants for first apply Scoped apply missed ec2:DescribeAddressesAttribute and kms Encrypt/Decrypt/GenerateDataKey on the table CMK.
2026-09-16 18:29:01 +00:00
# Secret values stay in Secrets Manager. ARNs are pinned in locals.tf so the
# first bootstrap-plan does not need secretsmanager:DescribeSecret.
Reference in a new issue Copy permalink