Rename Tenable secrets

Because there's another secret scheduled for deletion with the same name.
guardian · Dec 9, 2024 · 8f8dc09 · 8f8dc09
1 parent 6f15302
commit 8f8dc09
Show file tree

Hide file tree

Showing 2 changed files with 12 additions and 8 deletions.
diff --git a/packages/cdk/lib/__snapshots__/service-catalogue.test.ts.snap b/packages/cdk/lib/__snapshots__/service-catalogue.test.ts.snap
@@ -18970,7 +18970,7 @@ spec:
                     "",
                     [
                       {
-                        "Ref": "tenablecredentialsF2FF9557",
+                        "Ref": "tenableaccesscredentials362C8D64",
                       },
                       ":access_key::",
                     ],
@@ -18984,7 +18984,7 @@ spec:
                     "",
                     [
                       {
-                        "Ref": "tenablecredentialsF2FF9557",
+                        "Ref": "tenableaccesscredentials362C8D64",
                       },
                       ":secret_key::",
                     ],
@@ -19464,7 +19464,7 @@ spec:
               ],
               "Effect": "Allow",
               "Resource": {
-                "Ref": "tenablecredentialsF2FF9557",
+                "Ref": "tenableaccesscredentials362C8D64",
               },
             },
             {
@@ -29089,11 +29089,11 @@ spec:
       "Type": "AWS::SecretsManager::Secret",
       "UpdateReplacePolicy": "Delete",
     },
-    "tenablecredentialsF2FF9557": {
+    "tenableaccesscredentials362C8D64": {
       "DeletionPolicy": "Delete",
       "Properties": {
         "GenerateSecretString": {},
-        "Name": "/TEST/deploy/service-catalogue/tenable-credentials",
+        "Name": "/TEST/deploy/service-catalogue/tenable-access-credentials",
         "Tags": [
           {
             "Key": "gu:cdk:version",

diff --git a/packages/cdk/lib/cloudquery/index.ts b/packages/cdk/lib/cloudquery/index.ts
@@ -647,9 +647,13 @@ export function addCloudqueryEcsCluster(
 		],
 	};
 
-	const tenableCredentials = new SecretsManager(scope, 'tenable-credentials', {
-		secretName: `/${stage}/${stack}/${app}/tenable-credentials`,
-	});
+	const tenableCredentials = new SecretsManager(
+		scope,
+		'tenable-access-credentials',
+		{
+			secretName: `/${stage}/${stack}/${app}/tenable-access-credentials`,
+		},
+	);
 
 	const tenableSource: CloudquerySource = {
 		name: 'Tenable',