feat(braze): allowing braze content proxy to access lists

[bassrock]

Goal

Enable future work for digest emails

Accomplishes

• Moves JWT generation to it's own package
• Adds a digest endpoint that allows Braze to get a digest of data for a user for email or push. Right now its just the most recent 3 saves

https://mozilla-hub.atlassian.net/browse/POCKET-10480

[github-actions]

Plan Result (braze-content-proxy-cdk-production)

CI link

⚠️ Resource Deletion will happen ⚠️

This plan contains resource delete operation. Please check the plan result very carefully!

Plan: 1 to add, 0 to change, 1 to destroy.

• Replace
  • aws_ecs_task_definition.application_ecs_service_ecs-task_461CC9D4

Change Result (Click me)

  # aws_ecs_task_definition.application_ecs_service_ecs-task_461CC9D4 must be replaced
-/+ resource "aws_ecs_task_definition" "application_ecs_service_ecs-task_461CC9D4" {
      ~ arn                      = "arn:aws:ecs:us-east-1:996905175585:task-definition/BrazeContentProxy-Prod:254" -> (known after apply)
      ~ arn_without_revision     = "arn:aws:ecs:us-east-1:996905175585:task-definition/BrazeContentProxy-Prod" -> (known after apply)
      ~ container_definitions    = jsonencode(
          ~ [
              ~ {
                    name                   = "app"
                  ~ secrets                = [
                        {
                            name      = "BRAZE_API_KEY"
                            valueFrom = "arn:aws:secretsmanager:us-east-1:996905175585:secret:BrazeContentProxy/Prod/BRAZE_API_KEY:key::"
                        },
                      + {
                          + name      = "BRAZE_PRIVATE_KEY"
                          + valueFrom = "arn:aws:secretsmanager:us-east-1:996905175585:secret:BrazeContentProxy/Prod/PRIVATE_KEY:::"
                        },
                      + {
                          + name      = "CHARACTER_MAP"
                          + valueFrom = "arn:aws:secretsmanager:us-east-1:996905175585:secret:Shared/IntMask:characterMap::"
                        },
                      + {
                          + name      = "CONTACT_HASH"
                          + valueFrom = "arn:aws:secretsmanager:us-east-1:996905175585:secret:Shared/IntMask:contactHash::"
                        },
                      + {
                          + name      = "LETTER_INDEX"
                          + valueFrom = "arn:aws:secretsmanager:us-east-1:996905175585:secret:Shared/IntMask:letterIndex::"
                        },
                      + {
                          + name      = "MD5_RANDOMIZER"
                          + valueFrom = "arn:aws:secretsmanager:us-east-1:996905175585:secret:Shared/IntMask:md5Randomizer::"
                        },
                      + {
                          + name      = "POSITION_MAP"
                          + valueFrom = "arn:aws:secretsmanager:us-east-1:996905175585:secret:Shared/IntMask:positionMap::"
                        },
                      + {
                          + name      = "SALT_1"
                          + valueFrom = "arn:aws:secretsmanager:us-east-1:996905175585:secret:Shared/IntMask:salt1::"
                        },
                      + {
                          + name      = "SALT_2"
                          + valueFrom = "arn:aws:secretsmanager:us-east-1:996905175585:secret:Shared/IntMask:salt2::"
                        },
                        {
                            name      = "SENTRY_DSN"
                            valueFrom = "arn:aws:ssm:us-east-1:996905175585:parameter/BrazeContentProxy/Prod/SENTRY_DSN"
                        },
                    ]
                    # (10 unchanged attributes hidden)
                },
            ] # forces replacement
        )
      ~ id                       = "BrazeContentProxy-Prod" -> (known after apply)
      ~ revision                 = 254 -> (known after apply)
      - tags                     = {} -> null
        # (12 unchanged attributes hidden)
    }

Plan: 1 to add, 0 to change, 1 to destroy.

Changes to Outputs:
  ~ ecs-task-arn           = "arn:aws:ecs:us-east-1:996905175585:task-definition/BrazeContentProxy-Prod:254" -> (known after apply)

[kschelonka]

is the typescript compiler not inferring this?

[bassrock]

no its not. and its very annoying

[github-actions]

🎉 This issue has been resolved in version @pocket-tools/terraform-modules-v5.14.0 🎉

The release is available on:

• npm package (@latest dist-tag)
• GitHub release

Your semantic-release bot 📦🚀