Add secrets back in to update deletion window

ministryofjustice · Dec 1, 2023 · 7e971f2 · 7e971f2
1 parent ea5b0d7
commit 7e971f2
Show file tree

Hide file tree

Showing 2 changed files with 4 additions and 0 deletions.
diff --git a/terraform/environments/performance-hub/data.tf b/terraform/environments/performance-hub/data.tf
@@ -26,6 +26,8 @@ data "template_file" "task_definition" {
     storage_bucket                   = "${aws_s3_bucket.upload_files.id}"
     friendly_name                    = local.app_data.accounts[local.environment].friendly_name
     hub_wwwroot                      = local.app_data.accounts[local.environment].hub_wwwroot
+    pecs_basm_prod_access_key_id     = aws_secretsmanager_secret_version.pecs_basm_prod_access_key_id.arn
+    pecs_basm_prod_secret_access_key = aws_secretsmanager_secret_version.pecs_basm_prod_secret_access_key.arn
     ap_import_access_key_id          = aws_secretsmanager_secret_version.ap_import_access_key_id.arn
     ap_import_secret_access_key      = aws_secretsmanager_secret_version.ap_import_secret_access_key.arn
     ap_export_access_key_id          = aws_secretsmanager_secret_version.ap_export_access_key_id.arn

diff --git a/terraform/environments/performance-hub/secrets.tf b/terraform/environments/performance-hub/secrets.tf
@@ -140,6 +140,7 @@ resource "aws_secretsmanager_secret_version" "ap_export_secret_access_key" {
 resource "aws_secretsmanager_secret" "pecs_basm_prod_access_key_id" {
   #checkov:skip=CKV_AWS_149
   name = "pecs_basm_prod_access_key_id"
+  recovery_window_in_days = 0
   tags = merge(
     local.tags,
     {
@@ -156,6 +157,7 @@ resource "aws_secretsmanager_secret_version" "pecs_basm_prod_access_key_id" {
 resource "aws_secretsmanager_secret" "pecs_basm_prod_secret_access_key" {
   #checkov:skip=CKV_AWS_149
   name = "pecs_basm_prod_secret_access_key"
+  recovery_window_in_days = 0
   tags = merge(
     local.tags,
     {