locals {
  chartmetric_secrets_set = toset([
    "chartmetric_api",
    "ama/cm_access_key",
    "chartmetric_snowflake",
    "chartmetricslack",
    "chartmetric_constants",
  ])
  chartmetric_rotated_secrets_set = toset([
    "storage/pg_proxy/reader",
    "storage/pg_proxy/user",
  ])
}

resource "aws_secretsmanager_secret" "chartmetric_secrets" {
  for_each   = local.chartmetric_secrets_set
  name       = "${local.secrets_name_prefix}/${each.value}"
  kms_key_id = data.aws_kms_key.secrets_general_key.id

  tags = merge(
    local.common_tags,
    {
      project                  = "Infrastructure",
      service                  = "Secrets Manager",
      plat_env_project_service = "${local.aggregated_tag}_INFRA_SCRT"
    }
  )

  lifecycle {
    ignore_changes = [description]
  }
}

resource "aws_secretsmanager_secret" "chartmetric_rotated_secrets" {
  for_each   = local.chartmetric_rotated_secrets_set
  name       = "${local.secrets_name_prefix}/chartmetric/${each.value}"
  kms_key_id = data.aws_kms_key.secrets_general_key.id

  tags = merge(
    local.common_tags,
    {
      project                  = "Infrastructure",
      service                  = "Secrets Manager",
      plat_env_project_service = "${local.aggregated_tag}_INFRA_SCRT"
    }
  )

  lifecycle {
    ignore_changes = [description]
  }
}

/* resource "aws_secretsmanager_secret_rotation" "chartmetric_rotated_secrets" {
  for_each            = local.chartmetric_rotated_secrets_set
  secret_id           = aws_secretsmanager_secret.chartmetric_rotated_secrets[each.value].id
  rotation_lambda_arn = local.rotation_lambda_arn

  rotation_rules {
    automatically_after_days = 90
  }
} */