module "kms_secrets_manager" {
  source = "../../../modules/kms/secrets_kms_v2"

  env_prefix    = lower(var.platform["prefix"])
  project_group = lower(var.platform["name"])
  region        = var.aws_region_id

  common_tags = merge(
    local.common_tags,
    {
      project                  = "Infrastructure",
      service                  = "Secrets Manager",
      plat_env_project_service = "${local.aggregated_tag}_INFRA_SCRT"
    }
  )
}

data "aws_kms_key" "default_sqs_key" {
  key_id = "arn:aws:kms:${var.aws_region_id}:${local.account_id}:alias/default_sqs"
}

data "aws_kms_key" "default_sns_key" {
  key_id = "arn:aws:kms:${var.aws_region_id}:${local.account_id}:alias/default_sns"
}

data "aws_kms_key" "default_sqs_key_delphi" {
  key_id   = "arn:aws:kms:${var.aws_region_id}:${module.aws_accounts_list.accounts["gdb-delphi-prod"]}:alias/default_sqs"
  provider = aws.gdb-delphi-prod
}

data "aws_kms_alias" "default_ebs_key" {
  name = "alias/default_ebs"
}

data "aws_kms_alias" "default_rds" {
  name = "alias/default_rds"
}
