Using AWS secrets manager

[yeseniamolinab]

Overview

• Integrating AWS secrets manager into the codebase.
  • For the secrets that had their initializer file, I added the fetching of secrets only if the env is production to avoid using the secrets manager for the test environment.
  • created a applications_secrets.rb initializer to set the env variables with the secrets from aws sm
    • I use this approach to avoid many changes in different places of the code.
    • Query the secrets multiple times (AWS will charge us every time we fetch a secret. If we set up the secrets when the application is initialized, that will lower our costs).

Ticket

https://app.asana.com/0/1119304937718815/1202224736831777/f

Notes for reviewers

The sentry DNS is different from Champaign and Pronto. I used pronto's value on the secrets manager. Therefore, Champaign will use the same; is that ok?
I noticed that we don't have any logs for Champaign on sentry; I guess that using pronto's DSN here will fix that problem, but let me know if that is not the case.

[osahyoun]

🔥