locals {
  common_env_secrets = [
    "ses_creds",
    "snowflake",
    "sf_fullcopy",
  ]
}

resource "aws_secretsmanager_secret" "common_env_secrets" {
  for_each   = toset(local.common_env_secrets)
  name       = "${local.secrets_name_prefix}/${each.value}"
  kms_key_id = data.aws_kms_key.secrets_general_key.id

  tags = merge(
    local.common_tags,
    {
      project                  = "Infrastructure",
      service                  = "Secrets Manager",
      plat_env_project_service = "${local.aggregated_tag}_INFRA_SCRT"
    }
  )
  lifecycle {
    ignore_changes = [description]
  }
}