shoc-backend/scripts/terraform_import_plan_resources.py

"""Canonical managed-resource addresses for Terraform environment imports."""

COMMON_RESOURCES = {
    "module.environment.aws_elastic_beanstalk_environment.this": "aws_elastic_beanstalk_environment",
    "module.environment.aws_iam_instance_profile.runtime": "aws_iam_instance_profile",
    "module.environment.aws_iam_role.github_deploy": "aws_iam_role",
    "module.environment.aws_iam_role.runtime": "aws_iam_role",
    "module.environment.aws_iam_role_policy.github_deploy": "aws_iam_role_policy",
    "module.environment.aws_iam_role_policy.runtime_app_config": "aws_iam_role_policy",
    "module.environment.aws_iam_role_policy_attachment.web_tier": "aws_iam_role_policy_attachment",
    "module.environment.aws_secretsmanager_secret.app_config": "aws_secretsmanager_secret",
    "module.environment.aws_ssm_parameter.deploy_application_name": "aws_ssm_parameter",
    "module.environment.aws_ssm_parameter.deploy_artifacts_bucket": "aws_ssm_parameter",
    "module.environment.aws_ssm_parameter.deploy_environment_name": "aws_ssm_parameter",
    "module.environment.aws_ssm_parameter.deploy_smoke_url": "aws_ssm_parameter",
}

REQUIRED_RESOURCES = {
    "dev": {
        **COMMON_RESOURCES,
        "module.environment.aws_iam_role_policy.runtime_dynamo[0]": "aws_iam_role_policy",
        "module.environment.aws_iam_role_policy.runtime_webhook[0]": "aws_iam_role_policy",
        "module.environment.aws_route53_record.api_alias[0]": "aws_route53_record",
    },
    "staging": {
        **COMMON_RESOURCES,
        "module.environment.aws_iam_role_policy.runtime_webhook[0]": "aws_iam_role_policy",
        "module.environment.aws_route53_record.api_cname[0]": "aws_route53_record",
    },
}

DEV_IMPORT_IDS = {
    "module.environment.aws_elastic_beanstalk_environment.this": "e-hehnrqjjrt",
    "module.environment.aws_iam_instance_profile.runtime": "shoc-backend-dev",
    "module.environment.aws_iam_role.github_deploy": "githubdeploy-shoc-backend-dev",
    "module.environment.aws_iam_role.runtime": "shoc-backend-dev",
    "module.environment.aws_iam_role_policy.github_deploy": (
        "githubdeploy-shoc-backend-dev:GithubDeployRoleDefaultPolicyE8F540D1"
    ),
    "module.environment.aws_iam_role_policy.runtime_app_config": (
        "shoc-backend-dev:shoc-dev-secrets-read"
    ),
    "module.environment.aws_iam_role_policy.runtime_dynamo[0]": (
        "shoc-backend-dev:shoc-assume-dynamo-reader"
    ),
    "module.environment.aws_iam_role_policy.runtime_webhook[0]": (
        "shoc-backend-dev:shoc-procurement-webhook-hmac-read"
    ),
    "module.environment.aws_iam_role_policy_attachment.web_tier": (
        "shoc-backend-dev/arn:aws:iam::aws:policy/AWSElasticBeanstalkWebTier"
    ),
    "module.environment.aws_secretsmanager_secret.app_config": (
        "arn:aws:secretsmanager:us-east-1:396287094661:secret:"
        "shoc/dev/app-config-jLRBiw"
    ),
    "module.environment.aws_route53_record.api_alias[0]": (
        "Z07671212N75U4YLPWZR8_api.dev.seahaven.com_A"
    ),
    "module.environment.aws_ssm_parameter.deploy_application_name": (
        "/shoc-backend/dev/deploy/application-name"
    ),
    "module.environment.aws_ssm_parameter.deploy_artifacts_bucket": (
        "/shoc-backend/dev/deploy/artifacts-bucket"
    ),
    "module.environment.aws_ssm_parameter.deploy_environment_name": (
        "/shoc-backend/dev/deploy/environment-name"
    ),
    "module.environment.aws_ssm_parameter.deploy_smoke_url": (
        "/shoc-backend/dev/deploy/smoke-url"
    ),
}

DEV_IMPORT_BASELINE = {
    "environment_tags": {
        "env": "dev",
        "project": "shoc",
    },
    "api_alias": {
        "name": "awseb--awseb-cmpb3ypfib53-1654918745.us-east-1.elb.amazonaws.com",
        "zone_id": "Z35SXDOTRQ7X7K",
        "evaluate_target_health": True,
    },
}

STAGING_IMPORT_IDS = {
    "module.environment.aws_elastic_beanstalk_environment.this": "e-6c9m4vb62z",
    "module.environment.aws_iam_instance_profile.runtime": "shoc-backend-staging",
    "module.environment.aws_iam_role.github_deploy": (
        "githubdeploy-shoc-backend-staging"
    ),
    "module.environment.aws_iam_role.runtime": "shoc-backend-staging",
    "module.environment.aws_iam_role_policy.github_deploy": (
        "githubdeploy-shoc-backend-staging:GithubDeployRoleDefaultPolicyE8F540D1"
    ),
    "module.environment.aws_iam_role_policy.runtime_app_config": (
        "shoc-backend-staging:shoc-staging-secrets-read"
    ),
    "module.environment.aws_iam_role_policy.runtime_webhook[0]": (
        "shoc-backend-staging:shoc-backend-staging-webhook-secret-access"
    ),
    "module.environment.aws_iam_role_policy_attachment.web_tier": (
        "shoc-backend-staging/arn:aws:iam::aws:policy/AWSElasticBeanstalkWebTier"
    ),
    "module.environment.aws_secretsmanager_secret.app_config": (
        "arn:aws:secretsmanager:us-east-1:396287094661:secret:"
        "shoc/staging/app-config-CVV99L"
    ),
    "module.environment.aws_route53_record.api_cname[0]": (
        "Z02602739VQWBWCAGXP4_api.staging.seahaven.com_CNAME"
    ),
    "module.environment.aws_ssm_parameter.deploy_application_name": (
        "/shoc-backend/staging/deploy/application-name"
    ),
    "module.environment.aws_ssm_parameter.deploy_artifacts_bucket": (
        "/shoc-backend/staging/deploy/artifacts-bucket"
    ),
    "module.environment.aws_ssm_parameter.deploy_environment_name": (
        "/shoc-backend/staging/deploy/environment-name"
    ),
    "module.environment.aws_ssm_parameter.deploy_smoke_url": (
        "/shoc-backend/staging/deploy/smoke-url"
    ),
}

STAGING_IMPORT_BASELINE = {
    "environment_tags": {
        "env": "staging",
        "project": "shoc",
    },
    "api_cname": {
        "records": [
            "awseb--AWSEB-pPXqiRgNnZe8-16996010.us-east-1.elb.amazonaws.com"
        ],
        "ttl": 60,
    },
}

IMPORT_IDS = {
    "dev": DEV_IMPORT_IDS,
    "staging": STAGING_IMPORT_IDS,
}

IMPORT_BASELINES = {
    "dev": DEV_IMPORT_BASELINE,
    "staging": STAGING_IMPORT_BASELINE,
}