from airflow.providers.amazon.aws.hooks.secrets_manager import SecretsManagerHook
from audience_common.auth.m2m import M2MTokenManager
from audience_common.aws.secretsmanager import SecretsManager
from audience_common.enums import Environment

from dmp_workflows import config

if config.OWS_ENV in [Environment.QA, Environment.PROD]:
    m2m_token_manager: M2MTokenManager | None = M2MTokenManager(
        secrets_manager=SecretsManager(region_name=config.AWS_REGION),
        secret_name_key=config.M2M_TOKEN_SECRET_KEY_NAME,
        secret_expire_name_key=config.M2M_TOKEN_SECRET_EXPIRY_KEY_NAME,
    )
else:
    m2m_token_manager = None

if config.OWS_ENV in [Environment.QA, Environment.PROD]:
    secrets_hook = SecretsManagerHook(
        region_name=config.AWS_REGION
    )  # type: ignore[no-untyped-call]
    snowflake_password: str | None = str(
        secrets_hook.get_secret(
            config.SNOWFLAKE_PASSWORD_SECRET_NAME  # type: ignore[arg-type]
        )
    )
else:
    snowflake_password = config.SNOWFLAKE_PASSWORD