@aws-amplify/amplify-category-api/src/provider-utils/awscloudformation/utils/rds-resources/multi-env-database-secrets.ts

Amplify CLI API Category Plugin

import { $TSContext } from '@aws-amplify/amplify-cli-core';
import { storeConnectionSecrets, getExistingConnectionSecrets } from '../../utils/rds-resources/database-resources';
import { printer } from '@aws-amplify/amplify-prompts';

type EnvironmentInfo = {
  isNewEnv: boolean;
  sourceEnv: string;
  yesFlagSet: boolean;
  envName: string;
};

export const configureMultiEnvDBSecrets = async (context: $TSContext, secretsKey: string, apiName: string, envInfo: EnvironmentInfo) => {
  // For existing environments, the secrets are already set in parameter store
  if (!envInfo.isNewEnv) {
    return;
  }

  // For new environments, the secrets are copied over from the source environment.
  const secrets = await getExistingConnectionSecrets(context, secretsKey, apiName, envInfo.sourceEnv);
  if (!secrets) {
    printer.warn(
      `Could not copy over the user secrets for imported database. Run "amplify api update-secrets" to set them for the current environment.`,
    );
    return;
  }

  await storeConnectionSecrets(context, secrets, apiName, secretsKey);
  return;
};