From 3d1691035ac21b894809cc10effbbad2f95ad333 Mon Sep 17 00:00:00 2001
From: ingalls <nick@ingalls.ca>
Date: Thu, 22 Aug 2024 14:46:14 -0600
Subject: [PATCH] Update CHANGELOG

---
 CHANGELOG.md              |  4 ++++
 cloudformation/lib/api.js | 12 ++++++++++++
 2 files changed, 16 insertions(+)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 82c342b..004342f 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -12,6 +12,10 @@
 
 ### Pending Release
 
+### v2.2.0
+
+- :tada: Add Secret for future API Access
+
 ### v2.1.0
 
 - :tada: Add TLS Certificate for API
diff --git a/cloudformation/lib/api.js b/cloudformation/lib/api.js
index 78412ed..62e92e4 100644
--- a/cloudformation/lib/api.js
+++ b/cloudformation/lib/api.js
@@ -39,6 +39,18 @@ export default cf.merge(
             }
         },
         Resources: {
+            MasterSecret: {
+                Type: 'AWS::SecretsManager::Secret',
+                Properties: {
+                    Description: cf.join([cf.stackName, ' API Password']),
+                    GenerateSecretString: {
+                        ExcludePunctuation: true,
+                        PasswordLength: 32
+                    },
+                    Name: cf.join([cf.stackName, '/api/password']),
+                    KmsKeyId: cf.ref('KMS')
+                }
+            },
             Logs: {
                 Type: 'AWS::Logs::LogGroup',
                 Properties: {