[NDR-344] Use the global environment to get SSM param.

Author: jameslinnell

lambdas/enums/environment.py

@@ -0,0 +1,17 @@
+import os
+from enum import Enum
+
+
+class Environment(str, Enum):
+    PROD = "prod"
+    PRE_PROD = "pre-prod"
+    NDR_TEST = "ndr-test"
+    NDR_DEV = "ndr-dev"
+
+    @classmethod
+    def from_env(cls) -> "Environment":
+        value = os.getenv("WORKSPACE")
+        if not value:
+            return cls.NDR_DEV
+
+        return cls._value2member_map_.get(value.lower(), cls.NDR_DEV)

lambdas/enums/mtls.py

@@ -5,6 +5,7 @@
 from functools import lru_cache
 
 from enums.lambda_error import LambdaError
+from enums.environment import Environment
 from utils.audit_logging_setup import LoggingService
 from utils.lambda_exceptions import InvalidDocTypeException
 
@@ -31,8 +32,9 @@ def from_common_name(cls, common_name: str) -> "MtlsCommonNames | None":
     @lru_cache(maxsize=1)
     def _get_mtls_common_names(cls) -> dict[str, list[str]]:
         ssm = boto3.client("ssm")
+        environment = Environment.from_env().value
         response = ssm.get_parameter(
-            Name="/ndr/ndr344/mtls_common_names",
+            Name=f"/ndr/{environment}/mtls_common_names",
             WithDecryption=True,
         )
         return json.loads(response["Parameter"]["Value"])

lambdas/tests/unit/enums/test_environment.py

@@ -0,0 +1,46 @@
+import pytest
+
+from enums.environment import Environment
+
+
+@pytest.mark.parametrize(
+    "env_value, expected",
+    [
+        ("prod", Environment.PROD),
+        ("pre-prod", Environment.PRE_PROD),
+        ("ndr-test", Environment.NDR_TEST),
+        ("ndr-dev", Environment.NDR_DEV),
+    ],
+)
+def test_valid_workspace_values(monkeypatch, env_value, expected):
+    monkeypatch.setenv("WORKSPACE", env_value)
+    assert Environment.from_env() == expected
+
+
+@pytest.mark.parametrize(
+    "env_value",
+    [
+        "abcd1",
+        "ndr000",
+        "prmp000",
+        "foobar",
+    ],
+)
+def test_invalid_workspace_defaults_to_ndr_dev(monkeypatch, env_value):
+    monkeypatch.setenv("WORKSPACE", env_value)
+    assert Environment.from_env() == Environment.NDR_DEV
+
+
+def test_workspace_is_case_insensitive(monkeypatch):
+    monkeypatch.setenv("WORKSPACE", "PRE-PROD")
+    assert Environment.from_env() == Environment.PRE_PROD
+
+
+def test_workspace_not_set_defaults_to_ndr_dev(monkeypatch):
+    monkeypatch.delenv("WORKSPACE", raising=False)
+    assert Environment.from_env() == Environment.NDR_DEV
+
+
+def test_workspace_empty_string_defaults_to_ndr_dev(monkeypatch):
+    monkeypatch.setenv("WORKSPACE", "")
+    assert Environment.from_env() == Environment.NDR_DEV