sync

infra/lake.ts

@@ -198,6 +198,11 @@ export const lakeCatalog = $interpolate`${glueCatalogName}/${tableBucket.name}`
 export const lakeAthenaWorkgroup = athenaWorkgroup
 
 const ingestSecret = new random.RandomPassword("LakeIngestSecret", { length: 32 })
+export const ingestSecretSsm = new aws.ssm.Parameter("LakeIngestSecretSsm", {
+  name: $interpolate`/${$app.name}/${$app.stage}/lake/ingest/secret`,
+  type: "SecureString",
+  value: ingestSecret.result,
+})
 
 const ingestConfig = new sst.Linkable("LakeIngestConfig", {
   properties: {
@@ -268,7 +273,6 @@ export const lakeIngest = new sst.Linkable("LakeIngest", {
     secret: ingestSecret.result,
   },
 })
-export const lakeIngestSecret = new sst.Secret("LakeIngestSecret", ingestSecret.result)
 
 export const lakeQueryPermissions = [
   {

sst.config.ts

@@ -44,7 +44,7 @@ export default $config({
       ...(lake
         ? {
             LakeUrl: lake.lakeIngest.properties.url,
-            LakeSecretName: lake.lakeIngestSecret.name,
+            LakeSecretSsm: lake.ingestSecretSsm.name,
           }
         : {}),
       AwsStage: stage.awsStage,