
data "aws_secretsmanager_secret" "stripe_api_key" {
  name = "stripe_api_key"
}
data "aws_secretsmanager_secret_version" "stripe_api_key" {
  secret_id = data.aws_secretsmanager_secret.stripe_api_key.id
}

data "aws_secretsmanager_secret" "nf_aws_marketplace" {
  name = "nf-aws-marketplace"
}
data "aws_secretsmanager_secret_version" "nf_aws_marketplace" {
  secret_id = data.aws_secretsmanager_secret.nf_aws_marketplace.id
}

data "aws_secretsmanager_secret" "aws_mailer_secret" {
  name = "aws_mailer_secret"
}
data "aws_secretsmanager_secret_version" "aws_mailer_secret" {
  secret_id = data.aws_secretsmanager_secret.aws_mailer_secret.id
}

data "aws_secretsmanager_secret" "mysql_pass_billing" {
  name = "mysql_pass_billing_server"
}
data "aws_secretsmanager_secret_version" "mysql_pass_billing" {
  secret_id = data.aws_secretsmanager_secret.mysql_pass_billing.id
}

locals {
  secrets = {
    // @TODO - review if this service even needs this key anymore
    "AWS_ACCESS_KEY" = "AKIAQB7OT4D2GJDPX7XW",
    "AWS_SECRET_KEY" = data.aws_secretsmanager_secret_version.nf_aws_marketplace.secret_string,
  }
}


resource "aws_secretsmanager_secret" "billing_secrets" {
  name = "/secret/billing"
  description = "All secret values which are managed by Terraform and used by Billing Service."
  recovery_window_in_days = 0
}
resource "aws_secretsmanager_secret_version" "billing_secrets" {
  secret_id     = aws_secretsmanager_secret.billing_secrets.id
  secret_string = jsonencode(local.secrets)
}
