provider "aws" {
  region = var.aws_region
}

provider "aws" {
  region = "us-east-1"
  alias  = "us_east_1"
}

# Terraform backends cannot contain interpolations
terraform {
  backend "s3" {
    bucket  = "prod-dc-terraform-state"
    key     = "prod/datadog/terraform.tfstate"
    region  = "us-east-1"
    encrypt = "true"
  }
}

module "datadog_secrets" {
  source   = "git@github.com:theorchard/terraform-secrets-manager.git//?ref=1.6.1"
  for_each = toset(var.secrets_manager_secret_names)

  providers = {
    aws = aws.us_east_1
  }

  environment                    = var.environment
  service_name                   = var.service_name
  secret_name                    = each.value
  application_family             = var.application_family
  secret_recovery_window_in_days = 30
}