CP-8108: Use AWS Secrets Manager to store envs

[atn4z7]

Description

Ticket: CP-8108

Local flow:
run this command whenever you need to update/set up envs
yarn envs

• will call aws configure sso if aws profile is not set up
• will call aws sso login if session has expired
• will call aws secretsmanager get-secret-value to retrieve all envs and create .env files

CI flow:
trigger bitrise-envs-sync github workflow whenever envs are updated on AWS secrets manager

• will retrieve all envs from AWS, zip them up and upload to Bitrise
• uses https://github.com/aws-actions/configure-aws-credentials to authenticate with AWS via OIDC and https://github.com/aws-actions/aws-secretsmanager-get-secrets actions to retrieve secrets by ID

References:

• more details on the workflows: https://ava-labs.atlassian.net/wiki/spaces/EN/pages/2500493313/Env+Workflows
• how INFRA sets up Github - AWS OIDC: https://docs.github.com/en/actions/deployment/security-hardening-your-deployments/configuring-openid-connect-in-amazon-web-services
• INFRA tickets:
  • https://ava-labs.atlassian.net/browse/INFRA-3496
  • https://ava-labs.atlassian.net/browse/INFRA-3531
  • https://ava-labs.atlassian.net/browse/INFRA-3546

Screenshots/Videos

Testing

you will only need to test the local flow. try to run yarn envs and see if your .env files are updated correctly.

CI flow successful run https://github.com/ava-labs/avalanche-wallet-apps/actions/runs/8014659292

Checklist

Please check all that apply (if applicable)

• I have performed a self-review of my code
• I have verified the code works
• I have added/updated necessary unit tests
• I have updated the documentation

[ruijialin-avalabs]

👍