shoc-backend/.ebextensions/02_webhook_config.config

# Sets the non-secret pointer the work-order webhook receiver reads to locate
# the producer HMAC keyset; the keyset itself is fetched at runtime through
# the instance role's cross-account grant. Do not set this property directly
# with update-environment: directly set values take precedence over
# .ebextensions and would silently turn this file into dead text.
option_settings:
  aws:elasticbeanstalk:application:environment:
    WorkOrderWebhook__SecretId: arn:aws:secretsmanager:us-east-1:011934824531:secret:workorder-ingest/shoc-webhook-hmac-puYTcB
fix(eb): configure work-order webhook HMAC secret source Add WorkOrderWebhook__SecretId as a codified environment property so the webhook receiver can load the producer keyset instead of failing closed. Signed-off-by: Adam Moussa <adam@seahavenind.com> 2026-07-28 13:51:04 -04:00			`# Sets the non-secret pointer the work-order webhook receiver reads to locate`
			`# the producer HMAC keyset; the keyset itself is fetched at runtime through`
			`# the instance role's cross-account grant. Do not set this property directly`
			`# with update-environment: directly set values take precedence over`
			`# .ebextensions and would silently turn this file into dead text.`
			`option_settings:`
			`aws:elasticbeanstalk:application:environment:`
			`WorkOrderWebhook__SecretId: arn:aws:secretsmanager:us-east-1:011934824531:secret:workorder-ingest/shoc-webhook-hmac-puYTcB`