provider "aws" {
  region = var.aws_region
}

terraform {
  backend "s3" {
    bucket  = "dev-orcd-terraform-state"
    key     = "dev/sagemaker-notebook-instance/terraform.tfstate"
    region  = "us-east-1"
    encrypt = "true"
  }
}

module "multiple_secrets" {
  source             = "git@github.com:theorchard/terraform-secrets-manager.git//?ref=1.0.6"
  for_each           = toset(var.secrets_names)
  environment        = var.environment
  service_name       = var.service_name
  secret_name        = each.value
  application_family = var.application_family
}


resource "aws_sagemaker_code_repository" "git_repo" {
  code_repository_name = var.default_code_repository

  git_config {
    repository_url = var.code_repository_url
    secret_arn     = module.multiple_secrets["GITHUB_PASSWORD"].secret_arn
  }
}