locals {
  fivetran_secrets_set = toset([
    "snowflake_fivetran_reader"
  ])
}

resource "aws_secretsmanager_secret" "fivetran_secrets" {
  for_each   = local.fivetran_secrets_set
  name       = "${local.secrets_name_prefix}/fivetran/${each.value}"
  kms_key_id = data.aws_kms_key.secrets_general_key.id
  tags = merge(
    local.common_tags,
    {
      project                  = "Infrastructure",
      service                  = "Secrets Manager",
      plat_env_project_service = "${local.aggregated_tag}_INFRA_SCRT"
    }
  )
  lifecycle {
    ignore_changes = [description]
  }
}