VIA-591 MD/AS: Move AUTH_SECRET from lambda to SSM for the rest of all envs

(cherry picked from commit 49357ff)

Author: marie-dedikova-nhs

infrastructure/environments/preprod/locals.tf

@@ -45,7 +45,6 @@ locals {
     APIM_KEY_ID              = "test-1"
 
     AUTH_TRUST_HOST = "true"
-    AUTH_SECRET     = random_password.auth_secret.result
     APP_VERSION     = local.app_version
 
     NBS_URL          = "https://www.nhswebsite-staging.nhs.uk/nbs"
@@ -62,12 +61,6 @@ locals {
   }
 }
 
-resource "random_password" "auth_secret" {
-  length           = 64
-  special          = true
-  override_special = "/+"
-}
-
 resource "null_resource" "check_workspace" {
   lifecycle {
     precondition {

infrastructure/environments/preprod/ssm.tf

@@ -32,3 +32,16 @@ resource "aws_ssm_parameter" "apim_private_key" {
   value_wo         = "to-be-replaced-manually"
   value_wo_version = 0
 }
+
+resource "aws_ssm_parameter" "auth_secret" {
+  name             = "/${local.prefix}/AUTH_SECRET"
+  type             = "SecureString"
+  value_wo         = random_password.auth_secret.result
+  value_wo_version = 0
+}
+
+resource "random_password" "auth_secret" {
+  length           = 64
+  special          = true
+  override_special = "/+"
+}

infrastructure/environments/prod/locals.tf

@@ -45,7 +45,6 @@ locals {
     APIM_KEY_ID              = "prod-1"
 
     AUTH_TRUST_HOST = "true"
-    AUTH_SECRET     = random_password.auth_secret.result
     APP_VERSION     = local.app_version
 
     NBS_URL          = "https://www.nhs.uk/nbs"
@@ -62,12 +61,6 @@ locals {
   }
 }
 
-resource "random_password" "auth_secret" {
-  length           = 64
-  special          = true
-  override_special = "/+"
-}
-
 resource "null_resource" "check_workspace" {
   lifecycle {
     precondition {

infrastructure/environments/prod/ssm.tf

@@ -32,3 +32,16 @@ resource "aws_ssm_parameter" "apim_private_key" {
   value_wo         = "to-be-replaced-manually"
   value_wo_version = 0
 }
+
+resource "aws_ssm_parameter" "auth_secret" {
+  name             = "/${local.prefix}/AUTH_SECRET"
+  type             = "SecureString"
+  value_wo         = random_password.auth_secret.result
+  value_wo_version = 0
+}
+
+resource "random_password" "auth_secret" {
+  length           = 64
+  special          = true
+  override_special = "/+"
+}

infrastructure/environments/test/locals.tf

@@ -43,7 +43,6 @@ locals {
     APIM_KEY_ID          = "test-1"
 
     AUTH_TRUST_HOST = "true"
-    AUTH_SECRET     = random_password.auth_secret.result
     APP_VERSION     = local.app_version
 
     NBS_URL          = "https://www.nhswebsite-staging.nhs.uk/nbs"
@@ -60,12 +59,6 @@ locals {
   }
 }
 
-resource "random_password" "auth_secret" {
-  length           = 64
-  special          = true
-  override_special = "/+"
-}
-
 resource "null_resource" "check_workspace" {
   lifecycle {
     precondition {

infrastructure/environments/test/ssm.tf

@@ -32,3 +32,16 @@ resource "aws_ssm_parameter" "apim_private_key" {
   value_wo         = "to-be-replaced-manually"
   value_wo_version = 0
 }
+
+resource "aws_ssm_parameter" "auth_secret" {
+  name             = "/${local.prefix}/AUTH_SECRET"
+  type             = "SecureString"
+  value_wo         = random_password.auth_secret.result
+  value_wo_version = 0
+}
+
+resource "random_password" "auth_secret" {
+  length           = 64
+  special          = true
+  override_special = "/+"
+}