resource "aws_secretsmanager_secret" "msi-ondemand-watermarking-iam-user-credentials" {
  name        = "PROD/MsiOnDemandWatermarkingIamUserCredentials"
  description = "IAM user creds for delp-msi-ondemand-watermarking"
}

resource "aws_secretsmanager_secret_version" "msi-ondemand-watermarking-iam-user-credentials" {
  secret_id     = aws_secretsmanager_secret.msi-ondemand-watermarking-iam-user-credentials.id
  secret_string = jsonencode({ accessKeyId = "accessKeyId", secretAccessKey = "secretAccessKey" })

  lifecycle {
    ignore_changes = [secret_string]
  }
}