Major clean up and alpha.1 release.

serverless/serverless.yml

@@ -12,6 +12,7 @@ stages:
             domain: es.imex.online
             es_user: Imex2
             es_password: Patrick
+            hasura_url: https://es.db.imex.online/v1/graphql
     beta:
         # Enables observability in the prod stage
         observability: false
@@ -22,6 +23,7 @@ stages:
             domain: beta.es.imex.online
             es_user: Imex2
             es_password: Patrick
+            hasura_url: https://es.db.imex.online/v1/graphql
     alpha:
         # Enables observability in the prod stage
         observability: false
@@ -31,6 +33,7 @@ stages:
             domain: alpha.es.imex.online
             es_user: Imex2
             es_password: Patrick
+            hasura_url: https://es.db.imex.online/v1/graphql
     dev:
         # Enables observability in the prod stage
         observability: false
@@ -40,6 +43,7 @@ stages:
             domain: dev.es.imex.online
             es_user: Imex2
             es_password: Patrick
+            hasura_url: https://es.db.imex.online/v1/graphql
 
 # params:
 #   dev:
@@ -82,6 +86,10 @@ functions:
             ES_ENDPOINT: ${param:es_endpoint}
             ES_USER: ${param:es_user}
             ES_PASSWORD: ${param:es_password}
+            HASURA_URL: ${param:hasura_url}
+            # Resolve at deploy-time from AWS Secrets Manager (value is not stored in this file).
+            # This secret is expected to be JSON; we pull the `admin_secret` field.
+            HASURA_SECRET: '{{resolve:secretsmanager:arn:aws:secretsmanager:ca-central-1:714144183158:secret:esdp-hasura-credentials-s81i1u-BDFgPi:SecretString:admin_secret::}}'
         events:
             - httpApi:
                   path: /scrub