Model/deployment/terraform/lambda/abri_api/main.tf

data "aws_secretsmanager_secret_version" "db_credentials" {
  secret_id = "${var.stage}/assessment_model/db_credentials"
}

locals {
  db_credentials = jsondecode(data.aws_secretsmanager_secret_version.db_credentials.secret_string)
}

module "lambda" {
  source = "../../modules/lambda_with_sqs"

  name  = "abri_api"
  stage = var.stage

  image_uri = local.image_uri

  maximum_concurrency            = var.maximum_concurrency
  reserved_concurrent_executions = var.reserved_concurrent_executions
  batch_size                     = var.batch_size

  environment = {
    STAGE     = var.stage
    LOG_LEVEL = "info"

    # Abri relay credentials are per-stage: the dev/staging stage points at
    # Abri's UAT relay endpoint; production values are pending from Abri.
    ABRI_RELAY_URL              = var.abri_relay_url
    ABRI_RELAY_USERNAME         = var.abri_relay_username
    ABRI_RELAY_PASSWORD         = var.abri_relay_password
    ABRI_RELAY_DEFAULT_RESOURCE = var.abri_relay_default_resource

    HUBSPOT_API_KEY = var.hubspot_api_key

    POSTGRES_USERNAME = local.db_credentials.db_assessment_model_username
    POSTGRES_PASSWORD = local.db_credentials.db_assessment_model_password
    POSTGRES_HOST     = var.db_host
    POSTGRES_DATABASE = var.db_name
    POSTGRES_PORT     = var.db_port
  }
}