locals {
  common_env_secrets = [
    "slz/apollo_mysql",
    "api/apollo_mysql",
    "autotests_config",
    "snowflake_reader",
    "snowflake/exploration_sys_user",
    "snowflake_rw",
    "sentry_config",
    "ae/creds",
    "common/DD_API_KEY",
    "apd/spotify_400",
    "apd/spotify_2",
    "apd/spotify_plus_dev",
    "apd/apple-music",
    "test/automation/snowflake",
    "dae/apollo-api-creds",
    "scuba_image_service",
  ]
}

resource "aws_secretsmanager_secret" "common_env_secrets" {
  for_each   = toset(local.common_env_secrets)
  name       = "${local.secrets_name_prefix}/${each.value}"
  kms_key_id = data.aws_kms_key.secrets_general_key.id

  tags = merge(
    local.common_tags,
    {
      project                  = "Infrastructure",
      service                  = "Secrets Manager",
      plat_env_project_service = "${local.aggregated_tag}_INFRA_SCRT"
    }
  )
  lifecycle {
    ignore_changes = [description]
  }
}