Use variable for client_secret

nullstone-modules · Dec 3, 2024 · b06633b · b06633b
1 parent 6786520
commit b06633b
Show file tree

Hide file tree

Showing 3 changed files with 8 additions and 9 deletions.
diff --git a/app_client.tf b/app_client.tf
diff --git a/client_secret.tf b/client_secret.tf
@@ -5,5 +5,5 @@ resource "aws_secretsmanager_secret" "client_secret" {
 
 resource "aws_secretsmanager_secret_version" "client_secret" {
   secret_id     = aws_secretsmanager_secret.client_secret.id
-  secret_string = local.client_secret
+  secret_string = var.client_secret
 }
diff --git a/variables.tf b/variables.tf
@@ -8,6 +8,13 @@ variable "client_id" {
   description = "The id of the existing user pool client. e.g. abcdefabcdef1234567890123"
 }
 
+variable "client_secret" {
+  type        = string
+  default     = ""
+  sensitive   = true
+  description = "The client secret of the existing user pool app client."
+}
+
 variable "identity_pool_id" {
   type        = string
   description = "The id of the existing identity pool. e.g. us-east-1:abcd01234-ab01-cd23-ef45-abcd012345678"