resource "aws_secretsmanager_secret" "secrets" {
  for_each = toset(var.secrets)

  name       = "${var.secrets_env}/${var.secrets_group}/${each.value}"
  kms_key_id = var.secrets_kms_key_id

  tags = merge(
    var.tags,
    {
      service                  = "Secrets Manager",
      plat_env_project_service = "${var.tag_plat_env_project}_INFRA_SCRT"
    }
  )
}