Balaji Mohan Architecting Resilient Multi-Cloud Platforms

resource "aws_dms_replication_task" "financial_migration" {
  replication_task_id      = "vault-secured-dms-task"
  migration_type           = "full-load-and-cdc"
  table_mappings           = file("${path.module}/configs/mappings.json")

  # Vault secret dynamic resolution
  replication_task_settings = jsonencode({
    TargetMetadata = {
      SupportLobs = true
    }
    SecretsManagerAccessRoleArn = data.vault_generic_secret.dms.data["arn"]
  })
}

import alembic.config
from vault_client import fetch_iam_credentials

def apply_day2_migrations(event, context):
    """Automated RDS Day-2 Schema Provisioning Engine"""
    creds = fetch_iam_credentials(role="db_admin_role")
    alembic_args = [
        '-x', f'sqlalchemy.url=postgresql://{creds.user}:{creds.pwd}@{creds.host}/prod',
        'upgrade', 'head'
    ]
    alembic.config.main(argv=alembic_args)
    return {"status": "SCHEMA_PROVISIONED_SUCCESSFULLY"}