AWS Secrets Manager + Aurora RDS module about terraform-aws-rds-aurora HOT 3 CLOSED

Hi marcincuber,

i do not have exactly what you asked for, but i can show you my way of storing the aurora db master password with secrets manager with this aurora-module. (keep in mind, that it won't rotate. For that find more information at Terraform-documentation or maybe another person can complete my answer.

Prerequisites:

1. do not set password in module-call
2. ${module.label.id} is my way of forcing naming-convention throughout every resource. (not obligatory)

### store db credentials in secrets manager

resource "aws_secretsmanager_secret" "db_master_password" {
  name = "${module.label.id}-db-master-password"
  recovery_window_in_days = 0

  tags = module.label.tags
}

resource "aws_secretsmanager_secret_version" "db_master_password" {
  secret_id      = aws_secretsmanager_secret.db_master_password.id
  secret_string  = local.master_password
  version_stages = ["AWSCURRENT"]
}

### retrieve secret 

data "aws_secretsmanager_secret" "db_master_password" {
  arn = aws_secretsmanager_secret.db_master_password.arn
}

data "aws_secretsmanager_secret_version" "db_master_password" {
  secret_id = data.aws_secretsmanager_secret.db_master_password.id
}

Feel free to correct any mistakes or mention improvements.

from terraform-aws-rds-aurora.

Here is the solution
https://blog.gruntwork.io/a-comprehensive-guide-to-managing-secrets-in-your-terraform-code-1d586955ace1

from terraform-aws-rds-aurora.

I'm going to lock this issue because it has been closed for 30 days ⏳. This helps our maintainers find and focus on the active issues. If you have found a problem that seems similar to this, please open a new issue and complete the issue template so we can capture all the details necessary to investigate further.

from terraform-aws-rds-aurora.