populate secrets from ddb

serverless.yml

@@ -32,6 +32,11 @@ provider:
         - dynamodb:BatchGetItem
       Resource:
         - "Fn::GetAtt": [DynamoTable, Arn]
+    - Effect: "Allow"
+      Action:
+        - dynamodb:GetItem
+      Resource:
+        - "arn:aws:dynamodb:eu-central-1:856461987125:table/secrets"
     - Effect: Allow # Lambda logs on cloudwatch
       Action:
         - logs:CreateLogGroup

src/peggedAssets/storePeggedAssets/storePegged.ts

@@ -4,6 +4,7 @@ import peggedAssets from "../../peggedData/peggedData";
 import { importAdapter } from "../utils/importAdapter";
 import { executeAndIgnoreErrors } from "./errorDb";
 import { getCurrentUnixTimestamp } from "../../utils/date";
+import dynamodb from "../../utils/shared/dynamodb";
 
 const maxRetries = 4;
 const chainBlocks = undefined; // not needed by any adapters
@@ -52,6 +53,18 @@ async function iteratePeggedAssets(peggedIndexes: number[]) {
   return;
 }
 
+async function setEnvSecrets() {
+  try {
+    const { Item } = await dynamodb.getEnvSecrets()
+    Object.entries((Item as any)).forEach(([key, value]: any) => {
+      if (key !== 'PK' && key !== 'SK') process.env[key] = value
+    })
+  } catch (e) {
+    console.log('Unable to get env secrets: ', e)
+  }
+}
+
 export default async (peggedIndexes: number[]) => {
+  await setEnvSecrets()
   await iteratePeggedAssets(peggedIndexes);
 };

src/utils/shared/dynamodb.ts

@@ -34,6 +34,7 @@ const dynamodb = {
       })
       .promise(),
   scan: () => client.scan({ TableName }).promise(),
+  getEnvSecrets: (key: AWS.DynamoDB.DocumentClient.Key = { PK: 'lambda-secrets' }) => client.get({ TableName: 'secrets', Key: key }).promise()
 };
 export default dynamodb;