resource "random_password" "backup_key" {
  length  = 48
  special = false
}

resource "vault_kv_secret_v2" "backup_writer" {
  mount = vault_mount.secret.path
  name  = "versitygw/users/backup-writer"

  data_json_wo_version = 1
  data_json_wo = jsonencode({
    access_key_id     = "backup-writer"
    secret_access_key = random_password.backup_key.result
  })
}