xpk/terraform.examples
SHA256
1
0
Fork 0
Code Pull Requests Activity

feat: updated secertsmanager-secret to use emphemeral resource

Browse Source
This commit is contained in:
xpk
2026-02-19 22:16:09 +08:00
parent d87e5dcc1f
commit 133c3cca12
4 changed files with 84 additions and 28 deletions
Download Patch File Download Diff File Expand all files Collapse all files
modules/security_identity_compliance/secretsmanager-secret/main.tf
+14 -3
View File
@@ -1,3 +1,13 @@
/**
* # secretsmanager-secret
*
* Create secretsmanager secret. Specify secret_version if you do not want
* terraform to recreate the secret everytime terraform applies. Otherwise,
* becuase this module uses emphemeral resource, the secret will be regenerated
* and replaced every time.
*/
data "aws_caller_identity" "this" {}
resource "random_id" "rid" {
@@ -11,11 +21,12 @@ resource "aws_secretsmanager_secret" "secret1" {
}
resource "aws_secretsmanager_secret_version" "this" {
secret_id = aws_secretsmanager_secret.secret1.id
secret_string = var.generate_secret ? data.aws_secretsmanager_random_password.this.random_password : var.secret_value
secret_id = aws_secretsmanager_secret.secret1.id
secret_string_wo = var.generate_secret ? ephemeral.aws_secretsmanager_random_password.this.random_password : var.secret_value
secret_string_wo_version = coalesce(var.secret_version, formatdate("YYYYMMDDhhmmss", timestamp()))
}
data "aws_secretsmanager_random_password" "this" {
ephemeral "aws_secretsmanager_random_password" "this" {
password_length = 22
exclude_numbers = false
exclude_characters = "o![]\\"