# AWS RAM share SSM parameter to get the account IDs and roles name
# to assume in the source and destination accounts.
AWS_ACCOUNT_IDS_SSM = (
    "arn:aws:ssm:us-east-1:086679231553:parameter/shared/aws" "-account-ids/"
)

# Account where backup is stored and from where IAM role is assume to create the secrets.json file
SOURCE_AWS_ACCOUNT = "backup"

# Account where the secrets are
# restored to the Secrets Manager and where the IAM role is assumed
DESTINATION_AWS_ACCOUNT = "dev"

# S3 bucket location where the secrets are stored
BACKUP_SECRETS_BUCKET = "backup-orcd-secrets-manager-secrets"

# S3 bucket prefix where the secrets are stored as objects
BUCKET_SECRETS_PREFIX = "437795906767/qa/ows-collaborator/"

# Account ID of the AWS Account which secrets are originally belong to
BUCKET_SECRETS_ACCOUNT = "437795906767"

AWS_REGION = "us-east-1"

# File where the secrets are stored temporarily, so they can be
# restored to the Secrets Manager in the destination account
SECRET_FILE = "secrets.json"