letgo_secrets

# aws --region <change-me> secretsmanager create-secret --name aurora/letgo-secret --secret-string '<change-me>' --profile <change-me>

provider "aws" {
  access_key = "<change-me>"
  secret_key = "<change-me>"
  region     = "<change-me>"
}

resource "aws_rds_cluster_instance" "cluster_instances" {
  count              = 1
  identifier         = "aurora-cluster-demo-${count.index}"
  cluster_identifier = "${aws_rds_cluster.default.id}"
  instance_class     = "db.t3.small"
}

resource "aws_rds_cluster" "default" {
  cluster_identifier = "aurora-cluster-demo"
  availability_zones = ["eu-west-1a", "eu-west-1b", "eu-west-1c"]
  database_name      = "mydb"
  master_username    = "foo"
  master_password    = "${data.aws_secretsmanager_secret_version.password.secret_string}"
}

data "aws_secretsmanager_secret" "password" {
  name = "aurora/letgo-secret"
}

data "aws_secretsmanager_secret_version" "password" {
  secret_id = "${data.aws_secretsmanager_secret.password.id}"
}