Merge pull request #41 from ONS-Innovation/small-fix

hadiqur · web-flow · commit fb1c34cd3db4 · 2026-02-23T13:23:12.000Z
update: set recov window to 0 for secret deletion
diff --git a/terraform/lambda/secrets.tf b/terraform/lambda/secrets.tf
@@ -3,9 +3,13 @@
 resource "aws_secretsmanager_secret" "access_key" {
   name        = "${var.domain}-${var.service_subdomain}-access-key"
   description = "Access Key ID for tech audit tool API IAM user"
+  recovery_window_in_days        = 0    // Secret will be deleted immediately
+  force_overwrite_replica_secret = true // Allow overwriting the secret in case of changes
 }
 
 resource "aws_secretsmanager_secret" "secret_key" {
   name        = "${var.domain}-${var.service_subdomain}-secret-key"
   description = "Secret Access Key for tech audit tool API IAM user"
+  recovery_window_in_days        = 0    // Secret will be deleted immediately
+  force_overwrite_replica_secret = true // Allow overwriting the secret in case of changes
 }

Original file line number	Diff line number	Diff line change
`@@ -3,9 +3,13 @@`
`3`	`3`	`resource "aws_secretsmanager_secret" "access_key" {`
`4`	`4`	`name = "${var.domain}-${var.service_subdomain}-access-key"`
`5`	`5`	`description = "Access Key ID for tech audit tool API IAM user"`
	`6`	`+ recovery_window_in_days = 0 // Secret will be deleted immediately`
	`7`	`+ force_overwrite_replica_secret = true // Allow overwriting the secret in case of changes`
`6`	`8`	`}`
`7`	`9`
`8`	`10`	`resource "aws_secretsmanager_secret" "secret_key" {`
`9`	`11`	`name = "${var.domain}-${var.service_subdomain}-secret-key"`
`10`	`12`	`description = "Secret Access Key for tech audit tool API IAM user"`
	`13`	`+ recovery_window_in_days = 0 // Secret will be deleted immediately`
	`14`	`+ force_overwrite_replica_secret = true // Allow overwriting the secret in case of changes`
`11`	`15`	`}`