Terraform with aw-vault template

Makefile

account := acc
VARS_ENV="variables/$(TF_WORKSPACE).tfvars"
VARS_SECRETS="variables/$(TF_WORKSPACE)-secrets.tfvars"

fmt:
        terraform fmt

workspace:
        aws-vault exec $(account) -- terraform workspace list

init:
        aws-vault exec $(account) -- terraform init

plan: check-env
        aws-vault exec $(account) -- \
                terraform plan \
                -var-file=$(VARS_ENV) \
                -var-file=$(VARS_SECRETS)

apply: check-env
        aws-vault exec $(account) -- \
                terraform apply \
                -var-file=$(VARS_ENV) \
                -var-file=$(VARS_SECRETS)


check-env:
ifndef TF_WORKSPACE
        $(error TF_WORKSPACE is undefined)
endif