BFD-3311: Invalid BCDA, DPC, and AB2D Role ARNs causing EFT deploymen…

…t failures (#2224)
CMSgov · Feb 28, 2024 · 45118ce · 45118ce
1 parent 55703c8
commit 45118ce
Show file tree

Hide file tree

Showing 2 changed files with 7 additions and 7 deletions.
diff --git a/ops/terraform/services/base/values/prod.yaml b/ops/terraform/services/base/values/prod.yaml
@@ -582,7 +582,7 @@ bcda:
       # "bucket_home_dir". Omitting this (by explicitly marking it UNDEFINED), or leaving it empty,
       # will result in no IAM Role being generated for the given peering partner
       bucket_iam_assumer_arns_json: >-
-        <<CIPHER>>AgV4GO5WKpY4TJLBfF25C3NQctwcFChFm5sykT1G7kg0NMoAdAACAAtBcHBsaWNhdGlvbgAGY2lwaGVyABVhd3MtY3J5cHRvLXB1YmxpYy1rZXkAREF6ZkpvRzlaNkpnSm11RDM1NmhYVGZkMldKcmErSTdKSlQ5aHRvZWZRNlVtbVdnUzhJajdIZnRibThxd2pNdzZUUT09AAEAB2F3cy1rbXMAS2Fybjphd3M6a21zOnVzLWVhc3QtMTo1NzczNzM4MzE3MTE6a2V5L21yay1iMjNlYjZmZWVlYmM0MzQ2YTk5YTZhNTliYzU2MWRmMwC4AQIBAHipsbBUtIKaXI95_AIHiGnjDkxfPDRzgqb6WVwMZI7-kwGGiGGrytGV6Nhxo5rTJVFmAAAAfjB8BgkqhkiG9w0BBwagbzBtAgEAMGgGCSqGSIb3DQEHATAeBglghkgBZQMEAS4wEQQMGGqXcpUrHpZlayiwAgEQgDteB-A_vWqymBLlfIAL2du1LfTZ2Xg06RaXS9rtZ-Ec0t1u842f4GrAq--D2u0HHlAzBK8mQrPRLevD4gIAABAARM2wlq55pHzPEyV9vOzzOWtVB6hQUBUo2N1fCRIVPBX1TJm6FuT4ojayCoIXr065_____wAAAAEAAAAAAAAAAAAAAAEAAACysGFmIS0R84bQw4k4wrDw_dCxFxPWXocgtGaHnJTF16plV6AT3Hn1kHFe0UbKsXLELhvs3wRlWLyTY7TfapzmReLGm8enLa3pkLOBpxQXW5JmqOKn2OIZ9ODphhWnvoO6VO9wQwxuyDZdsA5E3n1-Eo2zi87hWKT3r7xQhUfWVtGpEfOpUQOr7PTGHLntUfF5f4mFPmU4m-rVd9ZW-aNcvVNEp2i20g65r0D7f_2c0eBFhJqHMO4lV21sHgRvc1cwWLIAZzBlAjEAr0QnRXvTPqQR2eKvEEJRm_qZBDC-DVVQw-_TyzjT719f9y1H7ZM-Ad8PFBGREfv3AjAoH6fii-cU4ut2px6bVTM9B_iZXRC88TsEacoz2K1l-8VMdd_tM9aD8SlJOkAbRp4=<</CIPHER>>
+        <<CIPHER>>AgV40FYU35vo1ca3ekLm0Lto1jTn91yPq44xv9vOjDq7PIkAdAACAAtBcHBsaWNhdGlvbgAGY2lwaGVyABVhd3MtY3J5cHRvLXB1YmxpYy1rZXkAREE0Q1QyOStONEw1WS9TVUVmRDlpQ3o2RW5uU0IyeC9HM3BJb2lEMEFGZUhzVTI5YzJ5V0xncEgrWmJTbDJJZHkyUT09AAEAB2F3cy1rbXMAS2Fybjphd3M6a21zOnVzLWVhc3QtMTo1NzczNzM4MzE3MTE6a2V5L21yay1iMjNlYjZmZWVlYmM0MzQ2YTk5YTZhNTliYzU2MWRmMwC4AQIBAHipsbBUtIKaXI95_AIHiGnjDkxfPDRzgqb6WVwMZI7-kwFOrv8qE-UV9ll03_jkAMT1AAAAfjB8BgkqhkiG9w0BBwagbzBtAgEAMGgGCSqGSIb3DQEHATAeBglghkgBZQMEAS4wEQQMH1BXo6JnGlH0A3P1AgEQgDtn6gHdpxa8Wx0u2eB_NAZIdCsoRRKWfcVYYRs6LYPQvpqwB7uIeuw9lR5z7GVBTCzPsBSZl2Eb16-4RgIAABAArtD9JM9hhhUhjkvDSGsPRsExfwV_NuW9T751YzZkRLCBzUdXU8UxFYB41hMl9cHu_____wAAAAEAAAAAAAAAAAAAAAEAAAE0WFK_MFeip3ETvulT0cFzel3ca69BJEgZgpd7ynaghRYm2SfRZoRhFzphoFyIgMjGJPIcKxSwxwMZRolSLcUmj_x-qjquBjOi2ustdkCNy09tfMIGf8oBR2Kr4P4QrSpxJ2pAMJ1K7uX9dt_n2nUsmOqgNN6lpeSPQ9bamLxWr98sPO-uVSZO8YjllRa-HXcWpoZy0rjQxXV2lUDWO0aYpQVYTcAHR4FqQfvXcHH56IsRUTPQu9eWjb0r5qH2soSzBJs26Fv2GmfUDVWToBBlctOj5N2FKbp9MjTP0wvq8DK6NilRoKPwExcpJgPP6NcW49sN9bR0qpqOZHVFde0a5ryNoJ_Lq6yZs9tooaPzrQyN3mUsz7PF8_IqmJM5LDnHhXuGOMVMI9lsWF7zCm-CK8dUjiSOb3ixKSHvDa0jweui6W8HAGcwZQIxAKKiTZeETiC0nqCVlAzpGtBY-AF3cfff4vUWDGMfR1y4H545qhBP-oyTxEzbRqwFAAIwChLW7UDObwLbhluKfEqTKvNsPVTa_89Z0uYX_N2j3HgNP3OneOiAJy1evAjXqlrZ<</CIPHER>>
       inbound:
         # The "directory", or S3 prefix part, that will be concatenated to the peering partner's
         # full home path, where _inbound_ files will be placed when received via the CMS EFT SWEEPS
@@ -611,7 +611,7 @@ dpc:
       # "bucket_home_dir". Omitting this (by explicitly marking it UNDEFINED), or leaving it empty,
       # will result in no IAM Role being generated for the given peering partner
       bucket_iam_assumer_arns_json: >-
-        <<CIPHER>>AgV4hY_SIPJ1qIwq7_cRXvuuhs6AfBE9OkdFQsR7HtMJNo8AdAACAAtBcHBsaWNhdGlvbgAGY2lwaGVyABVhd3MtY3J5cHRvLXB1YmxpYy1rZXkAREFnN3h5VlYrSXIzaUpjRmQweEdtKzV4MzRjdzMwS0ZjT2VwdllXdTh1d2pvWS9GZDl6Z3VZbUc5Ty9oNFQvajNSZz09AAEAB2F3cy1rbXMAS2Fybjphd3M6a21zOnVzLWVhc3QtMTo1NzczNzM4MzE3MTE6a2V5L21yay1iMjNlYjZmZWVlYmM0MzQ2YTk5YTZhNTliYzU2MWRmMwC4AQIBAHipsbBUtIKaXI95_AIHiGnjDkxfPDRzgqb6WVwMZI7-kwHg4KqM80hVOR0ISyrMHJhBAAAAfjB8BgkqhkiG9w0BBwagbzBtAgEAMGgGCSqGSIb3DQEHATAeBglghkgBZQMEAS4wEQQMM3MUiwoZhiFCuHfvAgEQgDtk3gpFch5AAKOXHP-BkiyFt5ZImC_K-Cn6nBrPEDpO5Gx5DAbGQi0g1BOiIdh80uT592dyX-x_tQAYZgIAABAAx0b6oi-1HP8V0Lrm96wbzHkxGeVBK0k_e6k1gWCrLUJr3wGhFfxi-jkjBPU0ITI1_____wAAAAEAAAAAAAAAAAAAAAEAAABuBpvsx07CB5RDa--ArrCgb1Dg19lIztkp25m0_nVzCWL8--bEqKtEAvZjKEZcXsBJs2GwkQZMlpK7q7yQ9Z2MnjZviv08P1gi73ZL9rGEvh_7OkmMMNE72a-dIe7c8mxLFRO5VWzeIJqUkS0Na5rGBHwPyPbWKEkFk1votTDDAGcwZQIxAKVB0RUf7vB5qtMUvSznIOlGkrrIHoQK9BZf2VPB7IQItSZ_mMP0jM2oUMMfgaL1sgIwCzczlB6SO7qq8ZcQPLIVcUCRbFo1pQH-19MkZelDu-Buobn4v2vRmzT8EWf7HsKP<</CIPHER>>
+        <<CIPHER>>AgV4ywVgp4K_Hr67NeXH3qhJm3w3MpMCI-fnaCa84ycuTDIAdAACAAtBcHBsaWNhdGlvbgAGY2lwaGVyABVhd3MtY3J5cHRvLXB1YmxpYy1rZXkAREFxOUZReWFsR0R3NFM3U1BEZERIWmlrQmVDckpWRVBtQURSWXJ1cDM3NUUzYTM3eFd0UlZ1OHVvUUowdHZ5Rk9tZz09AAEAB2F3cy1rbXMAS2Fybjphd3M6a21zOnVzLWVhc3QtMTo1NzczNzM4MzE3MTE6a2V5L21yay1iMjNlYjZmZWVlYmM0MzQ2YTk5YTZhNTliYzU2MWRmMwC4AQIBAHipsbBUtIKaXI95_AIHiGnjDkxfPDRzgqb6WVwMZI7-kwE4Ms5gD-4Ep776J9lxaMgYAAAAfjB8BgkqhkiG9w0BBwagbzBtAgEAMGgGCSqGSIb3DQEHATAeBglghkgBZQMEAS4wEQQMcd12FLyBsG0i23uWAgEQgDupO9lEbpAGvo8EmPx4I71HSqFtXScpyOEueZP8wowsB8DqbjBnTsJajbeSG089pIpudXEWL4cIfnQVdwIAABAAuDuQlR_MNZsIUvH1mjJrvaLikRFkDbx9Gdf9XBTYprjI5vt7UZGpPGaseRwXGWnC_____wAAAAEAAAAAAAAAAAAAAAEAAADWVbkRLj0G8TI7bQsCxdRIsh_DETvdJfX4VxMotIBdu189WXJYoLSjtQw62hyxSkz4yN3CPtzDsxn-wGH4RjVooGOpPq2H8kCvWiBf7FjkaSnEGOOjpQrEr91XfPAjptFpCJpQzX9HmO-RH2dTHoe510S-kAol25665qoKwE65nQJbvmz1zb8X2w5FcNfoP568Dpy051wY3ohAmaeXU_HDq0jveHQ68_c1a7UDUxu_ZF1S3CrRq60QoUXZXKpkYKevvHrFVU41rLxdmGN_wNjTA0FjJ97Nq2h3dizkN7VTHLoz0wyuVSgAZzBlAjEA7mV7nvsqGAaMCLva2nbub93sRQecvD2GpNtLPMNiDbuPHRviytqXKcwtNF3g27KtAjAvKGvYDqoizD5_AydV-zW72hnTwflkdFEzINMsmaWGrUGSmnJb8Dyb15WdDqZpr1w=<</CIPHER>>
       inbound:
         # The "directory", or S3 prefix part, that will be concatenated to the peering partner's
         # full home path, where _inbound_ files will be placed when received via the CMS EFT SWEEPS
@@ -657,7 +657,7 @@ dpc:
         # A list of objects, following the same format as the above s3 notifications, that lists
         # targets for outbound status notifications generated by the SFTP Outbound Lambda.
         notification_targets_json: >-
-          <<CIPHER>>AgV4lpb7NlCeuUfPr-7baspIC1cAm7MbmrV4qEn4mVScRGkAdAACAAtBcHBsaWNhdGlvbgAGY2lwaGVyABVhd3MtY3J5cHRvLXB1YmxpYy1rZXkAREFwVExSZUdUTTllQ2NhSm5YcDZqZU15RWpVUE5ScGRWOTV3bWRMVUZFby9WVXFPeTV3Y1o4MFcrWU1kSXppeUhVUT09AAEAB2F3cy1rbXMAS2Fybjphd3M6a21zOnVzLWVhc3QtMTo1NzczNzM4MzE3MTE6a2V5L21yay1iMjNlYjZmZWVlYmM0MzQ2YTk5YTZhNTliYzU2MWRmMwC4AQIBAHipsbBUtIKaXI95_AIHiGnjDkxfPDRzgqb6WVwMZI7-kwFMfF5yLHN_1Q3mAAngqLnDAAAAfjB8BgkqhkiG9w0BBwagbzBtAgEAMGgGCSqGSIb3DQEHATAeBglghkgBZQMEAS4wEQQMhi7E7RcIigj3Zn8xAgEQgDtcMbjIog50pU44ezDDBB36xRFspH8fDakW8nY8QXxmhpqrN21hYMH7P9ESvKPaDCTfZCUTvoejvHsE-wIAABAAZjtV3eCIp-jv7lOeJ4dm4CTW4XE1rDcS3B3xd6PNRABW2JDmpPA74saZLlY9Op8z_____wAAAAEAAAAAAAAAAAAAAAEAAAACg2GJxI1t_rcU3yROrV69Q6QAAGcwZQIwCAi-aU0kcBt0tsDSvaGehlaJLe0AJ_2D9WyepbJ157fI4abcF-ofU7g4VzaoGpO6AjEAqaZvYfyN0rdWqfgChHVqunRThJgxmeh-obizgKZu2unOs4coToX_1HLYWe3CkX1i<</CIPHER>>
+          <<CIPHER>>AgV47L2q3uEiaHmytJZx2IVFcLijw_ueY1JIO_oaALerJiwAdAACAAtBcHBsaWNhdGlvbgAGY2lwaGVyABVhd3MtY3J5cHRvLXB1YmxpYy1rZXkAREFqWVNGMElMU3VwSUlsY2swL2grODR6V1NoSG5zK2hSTklNdDQ0YTU3TnM3YnhwRjRTSTMzaEFCM0tHNm15cmRqQT09AAEAB2F3cy1rbXMAS2Fybjphd3M6a21zOnVzLWVhc3QtMTo1NzczNzM4MzE3MTE6a2V5L21yay1iMjNlYjZmZWVlYmM0MzQ2YTk5YTZhNTliYzU2MWRmMwC4AQIBAHipsbBUtIKaXI95_AIHiGnjDkxfPDRzgqb6WVwMZI7-kwHUxl1qdoutovZzf4voTTqvAAAAfjB8BgkqhkiG9w0BBwagbzBtAgEAMGgGCSqGSIb3DQEHATAeBglghkgBZQMEAS4wEQQMweJdOyEMMpxz0z2zAgEQgDusQZo9coUL2kn7I3y0yrqgPnTcScmn6IYHwXWwxs6kIsKwjY70Up9VFgtdXYGRTuL5UMfNUGxVmGxmxAIAABAA2YQLdj7LjoJK1Z9pTEOwwPbA35fSLScb6zYoNP6rM2gdzodTKpmTYpACnbTl5CJl_____wAAAAEAAAAAAAAAAAAAAAEAAAAC8hfBVqHK8db_27JwIvx2SjXEAGcwZQIxAOObDK4NGzmZcFH1Y-iFi4Ild1FB4n0QH8QJRUO_MZhzhYXWdksMRVIgrUw6ocJE3wIwVrqU73yuFo_8nv95QuBulMiWC7-JFMj0tQOeMnTr-RbOKRBiduiikxGJqSijkDha<</CIPHER>>
 ab2d:
   prod:
     eft:
@@ -670,7 +670,7 @@ ab2d:
       # "bucket_home_dir". Omitting this (by explicitly marking it UNDEFINED), or leaving it empty,
       # will result in no IAM Role being generated for the given peering partner
       bucket_iam_assumer_arns_json: >-
-        <<CIPHER>>AgV4ft9ZSUp75Y1jGtJR_dZ-siOfvx6AgwKXpRBrZBLbvUsAdAACAAtBcHBsaWNhdGlvbgAGY2lwaGVyABVhd3MtY3J5cHRvLXB1YmxpYy1rZXkAREErRC8vbkdEQkRnL1RwOVl1L3JNWktvVlM3VDNoenlTb2UzZnBod2xsSld1YWZHZjVqT1dQVzRHSlRxV25aTTVKZz09AAEAB2F3cy1rbXMAS2Fybjphd3M6a21zOnVzLWVhc3QtMTo1NzczNzM4MzE3MTE6a2V5L21yay1iMjNlYjZmZWVlYmM0MzQ2YTk5YTZhNTliYzU2MWRmMwC4AQIBAHipsbBUtIKaXI95_AIHiGnjDkxfPDRzgqb6WVwMZI7-kwF-0Vbge2JK2HkSOGZKesKyAAAAfjB8BgkqhkiG9w0BBwagbzBtAgEAMGgGCSqGSIb3DQEHATAeBglghkgBZQMEAS4wEQQMoAWuBNz4G7jJY5nWAgEQgDtVP1MIhSZ6MrnoG2l2-1iBueaNm83vqYsAH-CrP-1N0InCKqgrxILxNpkjFvPqqYRL09rQNSNcf2T0ZwIAABAAb-SH_IjhSoU6UlvpPAk5FxzmgOnTukp-n5E2a-PCo2RgzuYpYcCDgUJuY2VQXCSh_____wAAAAEAAAAAAAAAAAAAAAEAAABvNTTPJSqpN6TXfUiso2e7mttjC0kpqyTlDYU5j31gC-8S9ivh4lY57ZCg5vWeEr1IG-84qidNavePZ7vgXhHwo7cm3T1iAG9I2E4pCTFesJ5SjaG33Nm87pfgWn5vIbA7oMOOSZFXDQ7rc8g1GH8Tb5fGx8ZkIZ_xfyJMxAnX3gBnMGUCMQCgAITCG2zt4kctQsnM658pFwzntGwIzNqRPbla9TB7OFumO-PoWfS6QLBunouWq6sCMCQsaYsJ_T7V5jTAKjjaHjCi8AeiQ26qwVH6-kS1HWhrT5yXRUrD9AAtts8-SAKFdA==<</CIPHER>>
+        <<CIPHER>>AgV4YN3rGdklmoqNzNAKA7OI9gBIZ0_ev2T_Y0C1aa9mna4AdAACAAtBcHBsaWNhdGlvbgAGY2lwaGVyABVhd3MtY3J5cHRvLXB1YmxpYy1rZXkAREE0cUwwczQ4T3Y4cnJDU0ZhN1h5Y0tEUXFsZUtjK2RCYlhZV2NLODdCNmxvOEdlMVU3NmthVGVDRTFDdyt4TGphZz09AAEAB2F3cy1rbXMAS2Fybjphd3M6a21zOnVzLWVhc3QtMTo1NzczNzM4MzE3MTE6a2V5L21yay1iMjNlYjZmZWVlYmM0MzQ2YTk5YTZhNTliYzU2MWRmMwC4AQIBAHipsbBUtIKaXI95_AIHiGnjDkxfPDRzgqb6WVwMZI7-kwFsyk7MydUNrpnN2q3pWAu1AAAAfjB8BgkqhkiG9w0BBwagbzBtAgEAMGgGCSqGSIb3DQEHATAeBglghkgBZQMEAS4wEQQMX8OKibxQ1R0pOz7BAgEQgDsQVCPsumOksR3HmoE3PLMVOWDUYvM6GcJtL1D4j2ZSZYirW3_RhvK_LviRLImfhhfEAhjHQQCdixJ4zAIAABAAokLt-DszfXmaL_X9pAPZtoxfQYSEc96OO49dQ81B6uCZkh9dlqO4mkQH6yWRRyyU_____wAAAAEAAAAAAAAAAAAAAAEAAADYzJxxrlcKY3KjDwKNzcNrMk_WIYcjqYh37D0HZxZJJ9mdT4AIy37NLdw0s8UyIJM0Obk5bjCst3_Z3GMayT6MssfD-Tbe5VVoJC7xLCvC4z75rWK5nWGmJ83w0lO66v-UvPrgVZ-EMNpeJbVdA7wtTvVT9NQE1nyT32flMmeesFafX21eDOoRA9GKam-JArtPSi9g2NAKjYetjidGDFVyZwF2s2Qbc1j5RQVM3TyODi4QOoeZ3_B2_GocBXABz2jBh3OFJfcREoIq2eUoRugk0tw6ANPjuVhfc1sd6t1pHtceaYl_p5DwMABnMGUCME-LF0YqtYBOHwiOpZwPrH21mfUjhV-CFevNp1V88ynlGEkHfO-Opq1d69kVVcroIgIxAIhV1CSKnpg93iy3tVJThuAqBcv1rELneymn-0GIMgTUjk5Wp_Udak4GVUHmoMPXPw==<</CIPHER>>
       inbound:
         # The "directory", or S3 prefix part, that will be concatenated to the peering partner's
         # full home path, where _inbound_ files will be placed when received via the CMS EFT SWEEPS