Hi,
i am have created
resource "aws_iam_user" "ses_smtp_user_nonprd" {
name = "smtp_user"
}
creating access key
resource "aws_iam_access_key" "ses_user_key_nonprd" {
user = aws_iam_user.ses_smtp_user_nonprd.name
}
i have secrets in two regions and i want proper ses value per regions. since ses_smtp_password_v4 is encrypting it per region so i am using different provider per region…
resource "aws_secretsmanager_secret_version" "sversion_nonprd" {
secret_id = aws_secretsmanager_secret.secret-ses-smtp-user-nonprd.id
secret_string = <<EOF
{
"username": "${aws_iam_access_key.ses_user_key_nonprd.id}",
"password": "${aws_iam_access_key.ses_user_key_nonprd.ses_smtp_password_v4}"
}
EOF
}
resource "aws_secretsmanager_secret_version" "sversion_nonprd-replica" {
provider = aws.replica
secret_id = aws_secretsmanager_secret.secret-ses-smtp-user-nonprd-replica.id
secret_string = <<EOF
{
"username": "${aws_iam_access_key.ses_user_key_nonprd.id}",
"password": "${aws_iam_access_key.ses_user_key_nonprd.ses_smtp_password_v4}"
}
EOF
}
result is password 1 and password replica have same value and region replica cannot send emails with password for region one. Any idea why it is not working as expected?