From 3314292a8ba07c6215836808a499c48161ac51a8 Mon Sep 17 00:00:00 2001
From: Sarah Chen <schen@galionsystems.com>
Date: Mon, 8 Dec 2025 11:22:55 -0600
Subject: [PATCH] use ansible-vault for aws credentials (replaces prod.env)

---
 deploy/roles/galion_monitor/tasks/main.yml | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/deploy/roles/galion_monitor/tasks/main.yml b/deploy/roles/galion_monitor/tasks/main.yml
index 2211512..51464fb 100644
--- a/deploy/roles/galion_monitor/tasks/main.yml
+++ b/deploy/roles/galion_monitor/tasks/main.yml
@@ -9,3 +9,9 @@
     src: prometheus.yml.j2
     dest: /etc/prometheus/prometheus.yml
   notify: restart prometheus
+
+- name: Configure AWS credentials from vault
+  template:
+    src: aws_credentials.j2
+    dest: /home/galion/.aws/credentials
+    mode: '0600'