Update CHANGELOG

dfpc-coe · Aug 22, 2024 · 3d16910 · 3d16910
1 parent f62042b
commit 3d16910
Show file tree

Hide file tree

Showing 2 changed files with 16 additions and 0 deletions.
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -12,6 +12,10 @@
 
 ### Pending Release
 
+### v2.2.0
+
+- :tada: Add Secret for future API Access
+
 ### v2.1.0
 
 - :tada: Add TLS Certificate for API

diff --git a/cloudformation/lib/api.js b/cloudformation/lib/api.js
@@ -39,6 +39,18 @@ export default cf.merge(
             }
         },
         Resources: {
+            MasterSecret: {
+                Type: 'AWS::SecretsManager::Secret',
+                Properties: {
+                    Description: cf.join([cf.stackName, ' API Password']),
+                    GenerateSecretString: {
+                        ExcludePunctuation: true,
+                        PasswordLength: 32
+                    },
+                    Name: cf.join([cf.stackName, '/api/password']),
+                    KmsKeyId: cf.ref('KMS')
+                }
+            },
             Logs: {
                 Type: 'AWS::Logs::LogGroup',
                 Properties: {