🔥(terraform) remove unused AWS provisioning

As everything have now been migrated from AWS to Scaleway, removing all
AWS provisioning and configuration.

Author: wilbrdt

.circleci/config.yml

@@ -209,8 +209,6 @@ jobs:
           DJANGO_AWS_ACCESS_KEY_ID: aws-access-key-id
           DJANGO_AWS_SECRET_ACCESS_KEY: aws-secret-access-key
           DJANGO_SCW_EDGE_SERVICE_DOMAIN: abc.svc.edge.scw.cloud
-          DJANGO_AWS_MEDIALIVE_ROLE_ARN: aws:medialive:arn:role
-          DJANGO_AWS_MEDIAPACKAGE_HARVEST_JOB_ARN: aws:mediapackage:arn:role
           DJANGO_BBB_API_SECRET: bbb-api-secret
     working_directory: ~/marsha/src/backend
     steps:
@@ -290,8 +288,6 @@ jobs:
           DJANGO_AWS_ACCESS_KEY_ID: aws-access-key-id
           DJANGO_AWS_SECRET_ACCESS_KEY: aws-secret-access-key
           DJANGO_SCW_EDGE_SERVICE_DOMAIN: abc.svc.edge.scw.cloud
-          DJANGO_AWS_MEDIALIVE_ROLE_ARN: aws:medialive:arn:role
-          DJANGO_AWS_MEDIAPACKAGE_HARVEST_JOB_ARN: aws:mediapackage:arn:role
           DJANGO_BBB_API_SECRET: bbb-api-secret
           DJANGO_MARKDOWN_ENABLED: 1
       - image: cimg/postgres:16.4
@@ -529,8 +525,6 @@ jobs:
           DJANGO_AWS_ACCESS_KEY_ID: aws-access-key-id
           DJANGO_AWS_SECRET_ACCESS_KEY: aws-secret-access-key
           DJANGO_SCW_EDGE_SERVICE_DOMAIN: abc.svc.edge.scw.cloud
-          DJANGO_AWS_MEDIALIVE_ROLE_ARN: aws:medialive:arn:role
-          DJANGO_AWS_MEDIAPACKAGE_HARVEST_JOB_ARN: aws:mediapackage:arn:role
           DJANGO_BBB_API_SECRET: bbb-api-secret
           DOCKERIZE_VERSION: v0.6.1
           DJANGO_ALLOW_ASYNC_UNSAFE: 1

docs/env.md

@@ -502,107 +502,8 @@ The default region used by the AWS provider. All resources managed by terraform
 
 #### TF_VAR_s3_bucket_unique_suffix
 
-A unique suffix added to all S3 bucket names. You choose this suffix once and can't change it afterwards as it is not allowed to rename a bucket (terraform would delete the current bucket and create a new one. All your data would be lost for ever). This suffix is needed because a bucket name is unique accross all existing AWS accounts: https://docs.aws.amazon.com/AmazonS3/latest/dev/BucketRestrictions.html
+A unique suffix added to all S3 bucket names. You choose this suffix once and can't change it afterwards as it is not allowed to rename a bucket (terraform would delete the current bucket and create a new one. All your data would be lost for ever).
 A suffix can be your company name or any random string. If you don't add this variable, you will not be able to create any s3 bucket in your project.
 
 - Type: string
 - Required: Yes
-
-#### TF_VAR_cloudfront_trusted_signer_id
-
-The ID of the AWS master account (not its access key!) with which we want to sign urls (it is declared in the CloudFront distribution as a signing account).
-
-- Type: string
-- Required: Yes
-- Default: None
-
-#### TF_VAR_update_state_secret
-
-Secret used to sign messages exchanged between the Django backend & AWS lambdas.
-
-Note: should be included in the list of values declared in `DJANGO_UPDATE_STATE_SHARED_SECRETS` for the Django backend deployment with which our deployment's lambdas will communicate.
-
-- Type: string <br> ⚠️ *MUST NOT INCLUDE ANY COMMAS* as the corresponding Django setting is a comma-separated list.
-- Required: Yes
-- Default: None
-
-#### TF_VAR_marsha_base_url
-
-The marsha backend url. This url will be used in the lambda as base url to build all the url called from all lambdas.
-
-Example: `marsha.education`
-
-- Type: string
-- Required: Yes
-- Default: None
-
-#### TF_VAR_update_state_endpoint
-
-The endpoint in Marsha to which our lambdas should POST state updates when they process files.
-
-Example: `/api/update-state`.
-
-- Type: string
-- Required: Yes
-- Default: None
-
-#### TF_VAR_update_state_disable_ssl_validation
-
-Whether SSL certificate validation in requests made by the AWS lambdas should be disabled. This allows Django to run on a domain with a self-signed or otherwise invalid certificate in non-production environments.
-
-- Type: boolean
-- Required: No
-- Default: false
-
-#### TF_VAR_migrations
-
-A list of migrations to execute by the migration lambda without the extension (`.js`). List of migrations are available in `src/aws/lambda-migrate/src/migrations`.
-To execute the migration `0001_encode_timed_text_tracks.js` set this variable with `0001_encode_timed_text_tracks`
-
-Example: ["0001_encode_timed_text_tracks"]
-
-- Type: list of strings
-- Required: No
-- Default: []
-
-#### TF_VAR_lambda_image_name
-
-The [ECR](https://aws.amazon.com/ecr/) image name you want to use. All lambdas are built in one docker image and hosted in this repository
-
-- Type: string
-- Required: Yes
-- Default: None
-
-#### TF_VAR_lambda_image_tag
-
-The lambda docker image tag used by all the lambdas
-
-- Type: string
-- Required: Yes
-- Default: None
-
-#### TF_VAR_ecr_lambda_marsha_arn
-
-The [arn](https://docs.aws.amazon.com/general/latest/gr/aws-arns-and-namespaces.html) associated with the ECR image name.
-This value can be found in the shared_resources terraform output.
-
-- Type: string
-- Required: Yes
-- Default: None
-
-#### TF_VAR_medialive_lambda_name
-
-This variable is used by the medialive routing lambda. This lambda will use the variable to determine on which lambda
-the event should be routed. 
-
-- Type: string
-- Required: Yes
-- Default: marsha-medialive
-
-#### TF_VAR_lambda_convert_memory
-
-This variable allow you to configure the amount of memory allocated for the lambda convert. Depending the environment you are using you would like to increase this value.
-
-- Type: number
-- Required: No
-- Default: 1536

src/aws/Makefile

@@ -38,8 +38,6 @@ output: ## Display Terraform config output
 init: env.d/development ## Initialize Terraform
 init:
 	bin/terraform init
-	bin/shared-resources init
-	bin/shared-resources apply -target aws_ecr_repository.marsha_lambda
 .PHONY: init
 
 help:  ## Show this help

src/aws/bin/shared-resources

@@ -66,7 +66,6 @@ function terraform() {
         -v "${PWD}/:/app" \
         -w "/app" \
         --env-file ./env.d/${MARSHA_TERRAFORM_ENV_FILE} \
-        -e TF_VAR_marsha_base_url="${TUNNEL_URL}" \
         "hashicorp/terraform:${TERRAFORM_VERSION}" \
         "$@"
     fi