change_db_passwords.yml

---
- include: includes/pre_zappa.yml
- hosts: localhost
  connection: local
  gather_facts: no
  tasks:
    - name: Set Environment Variables on Lambda function
      command: "aws lambda update-function-configuration  --region {{ region  }} --function-name intake-{{ environment_name }}  --environment '{{ lambda_environment|to_json }}'"
      environment:
        AWS_ACCESS_KEY_ID: "{{ lookup('env','AWS_ACCESS_KEY_ID') }}"
        AWS_SECRET_ACCESS_KEY: "{{ lookup('env','AWS_SECRET_ACCESS_KEY') }}"
        PYTHONPATH: "python3.5"

    - name: Create Application User with DB access
      postgresql_user:
        login_host: "{{ database.instance.endpoint }}"
        login_user: "{{ pg_username }}"
        login_password: "{{ pg_password }}"
        db: intake
        name: "{{ pg_app_username }}"
        password: "{{ pg_app_password }}"


    - name: Create Clips User with Privacy Preserving Access
      postgresql_user:
        login_host: "{{ database.instance.endpoint }}"
        login_user: "{{ pg_username }}"
        login_password: "{{ pg_password }}"
        db: intake
        name: "clips"
        password: "{{ pg_clips_password }}"

    - name: Delete Old Key for S3 User for Application
      command: "aws iam delete-access-key --access-key {{ s3_user.user_meta.access_keys[0].access_key_id }} --user-name {{ project_slug }}-s3-user"
      environment:
        AWS_ACCESS_KEY_ID: "{{ lookup('env','AWS_ACCESS_KEY_ID') }}"
        AWS_SECRET_ACCESS_KEY: "{{ lookup('env','AWS_SECRET_ACCESS_KEY') }}"
        PYTHONPATH: "python3.5"