Parent
#105
Spec
spec/features/014-cicd-infrastructure/spec.md
What to build
Add infra/terraform/modules/secrets/ creating AWS Secrets Manager secret smartwealthai/simfin-api-key with placeholder value or empty secret version. Document manual post-apply step to set the real SIMFIN_API_KEY via AWS Console/CLI (never in git or Terraform variables).
Grant dev/prod GitHub OIDC roles secretsmanager:GetSecretValue on the appropriate secret ARN only.
Acceptance criteria
Blocked by
#106
Type
AFK
Parent
#105
Spec
spec/features/014-cicd-infrastructure/spec.md
What to build
Add
infra/terraform/modules/secrets/creating AWS Secrets Manager secretsmartwealthai/simfin-api-keywith placeholder value or empty secret version. Document manual post-apply step to set the realSIMFIN_API_KEYvia AWS Console/CLI (never in git or Terraform variables).Grant dev/prod GitHub OIDC roles
secretsmanager:GetSecretValueon the appropriate secret ARN only.Acceptance criteria
Blocked by
#106
Type
AFK