Using Secrets per Environment with CoPilot CLI

README.md

Using Secrets per Environment with CoPilot CLI

This assumes that we have a CoPilot app called test-app and both a test & prod environment configured.

1. Start by uploading environment variables for our application's environments

   $ # Test Param
   $ aws ssm put-parameter \
       --name /copilot/apps/test-app/test/dbstring \
       --value 'psql://test:test@testdb.internal' \
       --type SecureString \
       --tags Key=copilot-environment,Value=prod Key=copilot-application,Value=test-app
       
   $ # Prod Param
   $ aws ssm put-parameter \
       --name /copilot/apps/test-app/prod/dbstring \
       --value 'psql://prod:prod@proddb.internal' \
       --type SecureString \
       --tags Key=copilot-environment,Value=prod Key=copilot-application,Value=test-app

2. Update the manifest.yaml to use environment which overrides per environment

secrets:
  DB_STRING: /copilot/apps/test-app/test/dbstring

environments:
  prod:
    secrets:
      DB_STRING: /copilot/apps/test-app/prod/dbstring

Here the default is to use the test variable but when deploying to prod it specifically uses a production variable.

Thank you! 💟 (Why this is not in docs of Copilot 🙈 )