feat(security): add Secrets Manager module

Author: jubskan3ki

terraform/aws/main.tf

@@ -59,3 +59,9 @@ module "waf" {
 
   project_name = var.project_name
 }
+
+module "secrets" {
+  source = "./modules/secrets"
+
+  project_name = var.project_name
+}

terraform/aws/modules/secrets/main.tf

@@ -0,0 +1,18 @@
+# Secret pour le mot de passe Redis
+resource "aws_secretsmanager_secret" "redis_password" {
+  name = "${var.project_name}/redis-password"
+}
+
+# Generer un mot de passe aleatoire
+resource "random_password" "redis" {
+  length  = 32
+  special = false
+}
+
+# Stocker le mot de passe dans le secret
+resource "aws_secretsmanager_secret_version" "redis_password" {
+  secret_id = aws_secretsmanager_secret.redis_password.id
+  secret_string = jsonencode({
+    password = random_password.redis.result
+  })
+}

terraform/aws/modules/secrets/outputs.tf

@@ -0,0 +1,3 @@
+output "redis_secret_arn" {
+  value = aws_secretsmanager_secret.redis_password.arn
+}

terraform/aws/modules/secrets/variables.tf

@@ -0,0 +1,3 @@
+variable "project_name" {
+  type = string
+}