Updated to use protected admin user name (#1566)

department-of-veterans-affairs · Dec 8, 2023 · 7773f65 · 7773f65
1 parent 2bb0693
commit 7773f65
Show file tree

Hide file tree

Showing 5 changed files with 17 additions and 1 deletion.
diff --git a/app/config.py b/app/config.py
@@ -161,7 +161,7 @@ class Config(object):
     ###########################
 
     NOTIFY_ENVIRONMENT = os.getenv("NOTIFY_ENVIRONMENT", "development")
-    ADMIN_CLIENT_USER_NAME = 'notify-admin'
+    ADMIN_CLIENT_USER_NAME = os.getenv("ADMIN_CLIENT_USER_NAME", "test")
     AWS_REGION = os.getenv("AWS_REGION", "us-gov-west-1")
     AWS_ROUTE53_ZONE = os.getenv("AWS_ROUTE53_ZONE", "Z2OW036USASMAK")
     AWS_SES_REGION = os.getenv("AWS_SES_REGION", AWS_REGION)

diff --git a/cd/application-deployment/dev/vaec-api-task-definition.json b/cd/application-deployment/dev/vaec-api-task-definition.json
@@ -244,6 +244,10 @@
         }
       ],
       "secrets": [
+        {
+          "name": "ADMIN_CLIENT_USER_NAME",
+          "valueFrom": "arn:aws-us-gov:ssm:us-gov-west-1:171875617347:parameter/dev/notification-api/admin-client-user"
+        },
         {
           "name": "ADMIN_CLIENT_SECRET",
           "valueFrom": "arn:aws-us-gov:ssm:us-gov-west-1:171875617347:parameter/dev/notification-api/admin-client-secret"

diff --git a/cd/application-deployment/perf/vaec-api-task-definition.json b/cd/application-deployment/perf/vaec-api-task-definition.json
@@ -228,6 +228,10 @@
           "name": "SQLALCHEMY_DATABASE_URI_READ",
           "valueFrom": "arn:aws-us-gov:ssm:us-gov-west-1:171875617347:parameter/perf/notification-api/database/uri_read"
         },
+        {
+          "name": "ADMIN_CLIENT_USER_NAME",
+          "valueFrom": "arn:aws-us-gov:ssm:us-gov-west-1:171875617347:parameter/perf/notification-api/admin-client-user"
+        },
         {
           "name": "ADMIN_CLIENT_SECRET",
           "valueFrom": "arn:aws-us-gov:ssm:us-gov-west-1:171875617347:parameter/perf/notification-api/admin-client-secret"

diff --git a/cd/application-deployment/prod/vaec-api-task-definition.json b/cd/application-deployment/prod/vaec-api-task-definition.json
@@ -244,6 +244,10 @@
           "name": "SQLALCHEMY_DATABASE_URI_READ",
           "valueFrom": "arn:aws-us-gov:ssm:us-gov-west-1:171875617347:parameter/prod/notification-api/database/uri_read"
         },
+        {
+          "name": "ADMIN_CLIENT_USER_NAME",
+          "valueFrom": "arn:aws-us-gov:ssm:us-gov-west-1:171875617347:parameter/prod/notification-api/admin-client-user"
+        },
         {
           "name": "ADMIN_CLIENT_SECRET",
           "valueFrom": "arn:aws-us-gov:ssm:us-gov-west-1:171875617347:parameter/prod/notification-api/admin-client-secret"

diff --git a/cd/application-deployment/staging/vaec-api-task-definition.json b/cd/application-deployment/staging/vaec-api-task-definition.json
@@ -260,6 +260,10 @@
           "name": "SQLALCHEMY_DATABASE_URI_READ",
           "valueFrom": "arn:aws-us-gov:ssm:us-gov-west-1:171875617347:parameter/staging/notification-api/database/uri_read"
         },
+        {
+          "name": "ADMIN_CLIENT_USER_NAME",
+          "valueFrom": "arn:aws-us-gov:ssm:us-gov-west-1:171875617347:parameter/staging/notification-api/admin-client-user"
+        },
         {
           "name": "ADMIN_CLIENT_SECRET",
           "valueFrom": "arn:aws-us-gov:ssm:us-gov-west-1:171875617347:parameter/staging/notification-api/admin-client-secret"