[NDH-583] Tracking Secret Rotation Lambda

[sachin-panayil]

Important

I did not run terraform apply on this yet. This is just to show the code that I've been working on. Not sure the best practices but I can run terraform apply when approved. Or does it run automatically in npd_ops builds?

Tracking Secret Rotation Lambda

Jira Ticket #583

Problem

We had a rotation lambda that handles the rotation of a postgres user secret. This was not tracked in source control since it was created via ClickOps

Solution

Use terraform import to import the actual states and write terraform code to match it so that as little changes as possible show up meaning that the terraform matches the actual AWS state.

Result

Terraform has been created that matches AWS state. We now track secret rotation within source

Some important notes regarding the summary line:

• Read the important section about terraform apply. Not sure the best way to handle this

Test Plan

• Run terraform -chdir=envs/dev plan on the infrastructure directory and check the drift

[wbprice]

This is partially my fault. We moved the infrastructure folder over to https://github.com/cms-Enterprise/npd-ops but didn't clean it up here. Please reopen this PR against https://github.com/cms-Enterprise/npd-ops