Skip to content

Commit 966aef3

Browse files
committed
fix: Remove secret rotation_rules for TF v5.0+
Fixes #18 Previously we specified `rotation_rules` in our Secrets with an intended frequency but didn't actually provide a Lambda to perform the update. Terraform 5.0 (released 2023) removed this deprecated parameter, and the replacement `aws_secretsmanager_secret_rotation` resource doesn't seem able to apply specifying only a schedule but not a Lambda ARN. Therefore, simply removed our old rotation_rules blocks for forward compatibility with Terraform v5.0+
1 parent 09436d6 commit 966aef3

File tree

1 file changed

+0
-9
lines changed

1 file changed

+0
-9
lines changed

infra/modules/secrets/main.tf

Lines changed: 0 additions & 9 deletions
Original file line numberDiff line numberDiff line change
@@ -9,11 +9,6 @@ resource "aws_secretsmanager_secret_version" "cognito_client_secret" {
99

1010
resource "aws_secretsmanager_secret" "zendesk_credentials" {
1111
name = "zendesk_credentials"
12-
13-
# Basic rotation schedule only - no managed rotation function
14-
rotation_rules {
15-
automatically_after_days = 90
16-
}
1712
}
1813

1914
resource "aws_secretsmanager_secret_version" "zendesk_credentials" {
@@ -40,10 +35,6 @@ resource "aws_secretsmanager_secret_version" "langfuse_credentials" {
4035

4136
resource "aws_secretsmanager_secret" "gateway_credentials" {
4237
name = "gateway_credentials"
43-
44-
rotation_rules {
45-
automatically_after_days = 90
46-
}
4738
}
4839

4940
resource "aws_secretsmanager_secret_version" "gateway_credentials" {

0 commit comments

Comments
 (0)