ce7cb702218693d08ea6d83464d2457c9250027c

terraform/internal/vault/backups.tf

@@ -0,0 +1,15 @@
+resource "random_password" "backup_key" {
+  length  = 48
+  special = false
+}
+
+resource "vault_kv_secret_v2" "backup_writer" {
+  mount = vault_mount.secret.path
+  name  = "versitygw/users/backup-writer"
+
+  data_json_wo_version = 1
+  data_json_wo = jsonencode({
+    access_key_id     = "backup-writer"
+    secret_access_key = random_password.backup_key.result
+  })
+}