shoc-backend/.ebextensions/02_webhook_config.config
Adam Moussa 53c2484775
fix(eb): configure work-order webhook HMAC secret source
Add WorkOrderWebhook__SecretId as a codified environment property so the webhook receiver can load the producer keyset instead of failing closed.

Signed-off-by: Adam Moussa <adam@seahavenind.com>
2026-07-28 14:06:35 -04:00

8 lines
No EOL
556 B
Text

# Sets the non-secret pointer the work-order webhook receiver reads to locate
# the producer HMAC keyset; the keyset itself is fetched at runtime through
# the instance role's cross-account grant. Do not set this property directly
# with update-environment: directly set values take precedence over
# .ebextensions and would silently turn this file into dead text.
option_settings:
aws:elasticbeanstalk:application:environment:
WorkOrderWebhook__SecretId: arn:aws:secretsmanager:us-east-1:011934824531:secret:workorder-ingest/shoc-webhook-hmac-puYTcB