locals {
  secret_list = [
    "clinic-auto-deploy-token",
    "${var.env}-proxy-auth0-client",
    "${var.env}-o11y-auth0-client",
  ]
  secret_set  = toset(var.region == "us-west-2" ? [] : local.secret_list)
}

data "aws_secretsmanager_secret_version" "source" {
  for_each  = local.secret_set
  secret_id = each.key
  provider  = aws.source
}

resource "aws_secretsmanager_secret" "this" {
  for_each                = local.secret_set
  name                    = each.key
  description             = "Secret copied from us-west-2"
  recovery_window_in_days = 0
  tags = merge(
    local.tags,
    {
      ManagedBy = "Terraform"
    },
  )
}

resource "aws_secretsmanager_secret_version" "this" {
  for_each      = local.secret_set
  secret_id     = aws_secretsmanager_secret.this[each.key].id
  secret_string = data.aws_secretsmanager_secret_version.source[each.key].secret_string
}