diff --git a/.env b/.env index c0cac7fca..12d5e66e2 100644 --- a/.env +++ b/.env @@ -24,7 +24,7 @@ VALIDATION_URL= # to the submission validation API. SUBMISSION_API_TOKEN= -# A cookie that may be needed for Implementation environment, for local testing +# A cookie that may be needed for Implementation environment, for local testing (Cookie is needed only in IMPL env). IMPL_ACA_COOKIE= # Sets the license key for New Relic monitoring in a real deployment scenario. diff --git a/infrastructure/terraform/modules/templates/conversion_tool_task_def.tpl b/infrastructure/terraform/modules/templates/conversion_tool_task_def.tpl index dbcb915ac..f962b05dd 100644 --- a/infrastructure/terraform/modules/templates/conversion_tool_task_def.tpl +++ b/infrastructure/terraform/modules/templates/conversion_tool_task_def.tpl @@ -74,6 +74,10 @@ "valueFrom": "arn:aws:ssm:us-east-1:003384571330:parameter/qppar-sf/${env}/conversion_tool/NEWRELIC_API_KEY", "name": "NEWRELIC_API_KEY" }, + { + "valueFrom": "arn:aws:ssm:us-east-1:003384571330:parameter/qppar-sf/${env}/conversion_tool/IMPL_ACA_COOKIE", + "name": "IMPL_ACA_COOKIE" + }, { "valueFrom": "arn:aws:ssm:us-east-1:003384571330:parameter/qppar-sf/${env}/conversion_tool/NEXUS_CREDS", "name": "NEXUS_CREDS" diff --git a/infrastructure/terraform/secure/secret-template.tf b/infrastructure/terraform/secure/secret-template.tf index 60b869d92..113bfe76f 100644 --- a/infrastructure/terraform/secure/secret-template.tf +++ b/infrastructure/terraform/secure/secret-template.tf @@ -94,6 +94,30 @@ resource "aws_ssm_parameter" "newrelic_api_key" { } } +resource "aws_ssm_parameter" "impl_aca_cookie" { + name = "/qppar-sf/${var.environment}/conversion_tool/IMPL_ACA_COOKIE" + description = "IMPL_ACA_COOKIE" + type = "SecureString" + value = "secret" + overwrite = false + + lifecycle { + ignore_changes = [ + value + ] + } + tags = { + Name = "${var.project_name}-ssm-${var.environment}", + owner = var.owner, + project = var.project_name + terraform = "true" + pagerduty-email = var.pagerduty_email + application = var.application + sensitivity = var.sensitivity + git-origin = var.git-origin + } +} + resource "aws_ssm_parameter" "nexus_creds" { name = "/qppar-sf/${var.environment}/conversion_tool/NEXUS_CREDS" description = "NEXUS_CREDS"