moved {
  from = aws_lambda_permission.payoneer_rotation_secret_invoke
  to   = module.ows_abacus_payee_payoneer_token_secret.aws_lambda_permission.allow_secrets_manager_invocation[0]
}