ELI 546 - ignore secret changes

Karthikeyannhs · Karthikeyannhs · commit 95045b2f0a3c · 2025-11-24T15:49:43.000Z
diff --git a/infrastructure/modules/secrets_manager/secrets_manager.tf b/infrastructure/modules/secrets_manager/secrets_manager.tf
@@ -14,6 +14,9 @@ resource "aws_secretsmanager_secret" "hashing_secret" {
 resource "aws_secretsmanager_secret_version" "hashing_secrets_test" {
   secret_id = aws_secretsmanager_secret.hashing_secret.id
   secret_string = "initial_secret"
+  lifecycle {
+    ignore_changes = [secret_string]
+  }
 }
 
 # Resource-based policy attached to the secret

Original file line number	Diff line number	Diff line change
`@@ -14,6 +14,9 @@ resource "aws_secretsmanager_secret" "hashing_secret" {`
`14`	`14`	`resource "aws_secretsmanager_secret_version" "hashing_secrets_test" {`
`15`	`15`	`secret_id = aws_secretsmanager_secret.hashing_secret.id`
`16`	`16`	`secret_string = "initial_secret"`
	`17`	`+ lifecycle {`
	`18`	`+ ignore_changes = [secret_string]`
	`19`	`+ }`
`17`	`20`	`}`
`18`	`21`
`19`	`22`	`# Resource-based policy attached to the secret`