added vpc endpoint to access secrets manager

live/core/vpc.tf

@@ -11,6 +11,7 @@ module "vpc" {
   tags               = module.label.tags
   enable_nat_gateway = true
   single_nat_gateway = true
+  region             = var.region
 }
 
 output "ssm_parameter_vpc_id" {

modules/vpc/endpoints.tf

@@ -0,0 +1,8 @@
+resource "aws_vpc_endpoint" "secrets_manager" {
+  vpc_id = module.vpc.vpc_id
+
+  service_name = "com.amazonaws.${var.region}.secretsmanager"
+
+  security_group_ids = [module.app_security_group.security_group_id]  # You can specify security groups if needed
+  subnet_ids         = module.vpc.private_subnets  # Associate with private subnets
+}

modules/vpc/variables.tf

@@ -33,3 +33,9 @@ variable "tags" {
   type        = map(any)
   default     = {}
 }
+
+variable "region" {
+  description = "AWS region"
+  type        = string
+  default     = "us-west-2"
+}