From 26d30e19cf7098535fd2070b24130f6a689ee436 Mon Sep 17 00:00:00 2001 From: katebygrace Date: Fri, 21 Jun 2024 10:59:27 -0400 Subject: [PATCH] chore: fix secrets JIRA:CLOUDSEC-12 --- dataeng/resources/amplitude-properties-backfill.sh | 4 ++-- dataeng/resources/snowflake-collect-metrics.sh | 4 ++-- dataeng/resources/snowflake-demographics-cleanup.sh | 4 ++-- dataeng/resources/snowflake-expire-individual-password.sh | 4 ++-- dataeng/resources/snowflake-expire-passwords.sh | 4 ++-- dataeng/resources/snowflake-public-grants-cleaner.sh | 4 ++-- dataeng/resources/snowflake-refresh-snowpipe.sh | 4 ++-- dataeng/resources/stitch-snowflake-lag-monitor.sh | 4 ++-- 8 files changed, 16 insertions(+), 16 deletions(-) diff --git a/dataeng/resources/amplitude-properties-backfill.sh b/dataeng/resources/amplitude-properties-backfill.sh index f5ac8d174..1d7a38891 100644 --- a/dataeng/resources/amplitude-properties-backfill.sh +++ b/dataeng/resources/amplitude-properties-backfill.sh @@ -40,8 +40,8 @@ python amplitude_user_properties_update.py \ --response_table $RESPONSE_TABLE \ --amplitude_operation_name $AMPLITUDE_OPERATION_NAME \ --amplitude_api_key $API_KEY \ - --key_file "$(cat "rsa_key_snowflake_task_automation_user")" \ - --passphrase_file "$(cat "rsa_key_passphrase_snowflake_task_automation_user")" + --key_file rsa_key_snowflake_task_automation_user \ + --passphrase_file rsa_key_passphrase_snowflake_task_automation_user rm rsa_key_snowflake_task_automation_user rm rsa_key_passphrase_snowflake_task_automation_user diff --git a/dataeng/resources/snowflake-collect-metrics.sh b/dataeng/resources/snowflake-collect-metrics.sh index 74967defb..3798fdb53 100644 --- a/dataeng/resources/snowflake-collect-metrics.sh +++ b/dataeng/resources/snowflake-collect-metrics.sh @@ -20,8 +20,8 @@ python collect-metrics.py \ --automation_user $SNOWFLAKE_USER \ --account $SNOWFLAKE_ACCOUNT \ --warehouse $SNOWFLAKE_WAREHOUSE \ - --key_file "$(cat "rsa_key_snowflake_task_automation_user")" \ - --passphrase_file "$(cat "rsa_key_passphrase_snowflake_task_automation_user")" + --key_file rsa_key_snowflake_task_automation_user \ + --passphrase_file rsa_key_passphrase_snowflake_task_automation_user rm rsa_key_snowflake_task_automation_user diff --git a/dataeng/resources/snowflake-demographics-cleanup.sh b/dataeng/resources/snowflake-demographics-cleanup.sh index 2f728c92c..a1ff1046c 100644 --- a/dataeng/resources/snowflake-demographics-cleanup.sh +++ b/dataeng/resources/snowflake-demographics-cleanup.sh @@ -20,8 +20,8 @@ unset PASSPHRASE_PATH python demographics_cleanup.py \ --user "STITCH_LOADER" \ --account "edx.us-east-1" \ - --key_file "$(cat "rsa_key_stitch_loader")" \ - --passphrase_file "$(cat "rsa_key_passphrase_stitch_loader")" + --key_file rsa_key_stitch_loader \ + --passphrase_file rsa_key_passphrase_stitch_loader rm rsa_key_stitch_loader diff --git a/dataeng/resources/snowflake-expire-individual-password.sh b/dataeng/resources/snowflake-expire-individual-password.sh index 55dd54eca..4a43aa2e1 100644 --- a/dataeng/resources/snowflake-expire-individual-password.sh +++ b/dataeng/resources/snowflake-expire-individual-password.sh @@ -18,8 +18,8 @@ python expire_user_passwords.py \ --automation_user 'SNOWFLAKE_TASK_AUTOMATION_USER' \ --account 'edx.us-east-1' \ --user_to_expire $USER_TO_EXPIRE \ - --key_file "$(cat "rsa_key_snowflake_task_automation_user")" \ - --pass_file "$(cat "rsa_key_passphrase_snowflake_task_automation_user")" + --key_file rsa_key_snowflake_task_automation_user \ + --pass_file rsa_key_passphrase_snowflake_task_automation_user rm rsa_key_snowflake_task_automation_user diff --git a/dataeng/resources/snowflake-expire-passwords.sh b/dataeng/resources/snowflake-expire-passwords.sh index a5726b745..6cd0e42a6 100644 --- a/dataeng/resources/snowflake-expire-passwords.sh +++ b/dataeng/resources/snowflake-expire-passwords.sh @@ -17,8 +17,8 @@ python3 secrets-manager.py -w -n analytics-secure/snowflake/rsa_key_passphrase_s python expire_user_passwords.py \ --automation_user 'SNOWFLAKE_TASK_AUTOMATION_USER' \ --account 'edx.us-east-1' \ - --key_file "$(cat "rsa_key_snowflake_task_automation_user")" \ - --pass_file "$(cat "rsa_key_passphrase_snowflake_task_automation_user")" + --key_file rsa_key_snowflake_task_automation_user \ + --pass_file rsa_key_passphrase_snowflake_task_automation_user rm rsa_key_snowflake_task_automation_user rm rsa_key_passphrase_snowflake_task_automation_user diff --git a/dataeng/resources/snowflake-public-grants-cleaner.sh b/dataeng/resources/snowflake-public-grants-cleaner.sh index 5ed8acf90..ebeec54b1 100644 --- a/dataeng/resources/snowflake-public-grants-cleaner.sh +++ b/dataeng/resources/snowflake-public-grants-cleaner.sh @@ -19,8 +19,8 @@ unset PASSPHRASE_PATH python snowflake_public_grants_cleaner.py \ --user "STITCH_LOADER" \ --account "edx.us-east-1" \ - --key_file "$(cat "rsa_key_stitch_loader")" \ - --passphrase_file "$(cat "rsa_key_passphrase_stitch_loader")" + --key_file rsa_key_stitch_loader \ + --passphrase_file rsa_key_passphrase_stitch_loader rm rsa_key_stitch_loader diff --git a/dataeng/resources/snowflake-refresh-snowpipe.sh b/dataeng/resources/snowflake-refresh-snowpipe.sh index 543c0c97f..1de2b83fe 100644 --- a/dataeng/resources/snowflake-refresh-snowpipe.sh +++ b/dataeng/resources/snowflake-refresh-snowpipe.sh @@ -27,8 +27,8 @@ python refresh_snowpipe.py \ --table_name $TABLE_NAME \ --delay $DELAY \ --limit $LIMIT \ - --key_file "$(cat "rsa_key_snowpipe_user")" \ - --passphrase_file "$(cat "rsa_key_passphrase_snowpipe_user")" + --key_file rsa_key_snowpipe_user \ + --passphrase_file rsa_key_passphrase_snowpipe_user rm rsa_key_snowpipe_user rm rsa_key_passphrase_snowpipe_user diff --git a/dataeng/resources/stitch-snowflake-lag-monitor.sh b/dataeng/resources/stitch-snowflake-lag-monitor.sh index a685b2555..f1d56b5e1 100644 --- a/dataeng/resources/stitch-snowflake-lag-monitor.sh +++ b/dataeng/resources/stitch-snowflake-lag-monitor.sh @@ -18,8 +18,8 @@ python3 secrets-manager.py -w -n analytics-secure/snowflake/rsa_key_passphrase_s python stitch-snowflake-monitoring.py \ --user "STITCH_LOADER" \ --account "edx.us-east-1" \ - --key_file "$(cat "rsa_key_stitch_loader")" \ - --passphrase_file "$(cat "rsa_key_passphrase_stitch_loader")" + --key_file rsa_key_stitch_loader \ + --passphrase_file rsa_key_passphrase_stitch_loader rm rsa_key_stitch_loader rm rsa_key_passphrase_stitch_loader