Skip to content

Terraform Secrets Manager: SimFin API key placeholder #109

Description

@cursor

Parent

#105

Spec

spec/features/014-cicd-infrastructure/spec.md

What to build

Add infra/terraform/modules/secrets/ creating AWS Secrets Manager secret smartwealthai/simfin-api-key with placeholder value or empty secret version. Document manual post-apply step to set the real SIMFIN_API_KEY via AWS Console/CLI (never in git or Terraform variables).

Grant dev/prod GitHub OIDC roles secretsmanager:GetSecretValue on the appropriate secret ARN only.

Acceptance criteria

  • Secret resource exists after apply; no plaintext API key in Terraform code or state
  • Operator README documents secret value injection workflow
  • IAM policies allow runtime/task roles to read secret (scoped to dev or prod as designed)

Blocked by

#106

Type

AFK

Metadata

Metadata

Assignees

No one assigned

    Labels

    ci-cdCI/CD and AWS infrastructure slicesready-for-agentAFK agent can pick up

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions