moved cognito screts from background worker (#345)

ministryofjustice · Dec 19, 2024 · b4ba3fc · b4ba3fc
1 parent 7dc9234
commit b4ba3fc
Showing 1 changed file with 12 additions and 11 deletions.
diff --git a/modules/admin/ecs.tf b/modules/admin/ecs.tf
@@ -257,22 +257,11 @@ resource "aws_ecs_task_definition" "admin_background_worker" {
         },{
           "name": "RAILS_SERVE_STATIC_FILES",
           "value": "1"
-        },{
-          "name": "COGNITO_CLIENT_ID",
-          "value": "${var.cognito_user_pool_client_id}"
-        },
-        {
-          "name": "COGNITO_CLIENT_SECRET",
-          "value": "${var.cognito_user_pool_client_secret}"
         },
         {
           "name": "COGNITO_USER_POOL_SITE",
           "value": "https://${var.cognito_user_pool_domain}.auth.${var.region}.amazoncognito.com"
         },
-        {
-          "name": "COGNITO_USER_POOL_ID",
-          "value": "${var.cognito_user_pool_id}"
-        },
         {
           "name": "RADIUS_CLUSTER_NAME",
           "value": "${var.radius_cluster_name}"
@@ -310,6 +299,18 @@ resource "aws_ecs_task_definition" "admin_background_worker" {
         {
           "name": "SENTRY_DSN",
           "valueFrom": "${var.secret_arns["moj_network_access_control_env_admin_sentry_dsn"]}"
+        },
+        {
+          "name": "COGNITO_USER_POOL_ID",
+          "valueFrom": "${var.secret_arns["moj_network_access_control_env_cognito_userpool_id"]}"
+        },
+        {
+          "name": "COGNITO_CLIENT_SECRET",
+          "valueFrom": "${var.secret_arns["moj_network_access_control_env_cognito_client_secret"]}"
+        },
+        {
+          "name": "COGNITO_CLIENT_ID",
+          "valueFrom": "${var.secret_arns["moj_network_access_control_env_cognito_client_id"]}"
         }
     ],
       "image": "${aws_ecr_repository.admin.repository_url}",