PR Custody

feat(security): decommission github/slack webhook endpoints + secrets

@AgentWrapperdraftchecks n/achecks…session/int-5-decommission-webhooks → next10 files · +3 −858updated 2w ago

▸Description · 2 noise

Why

Part of the Cortex security hardening track. The inbound webhook endpoints are being decommissioned (bugbot-fix auto-trigger was already disabled; watchdog's Slack ingestion is handled on a separate track). Removing them shrinks the attack surface and lets us delete the two secrets whose only job was authenticating these endpoints.

What

Remove POST /webhooks/github (api/routes/webhooks/github.py) — including verify_github_signature / GH_WEBHOOK_SECRET HMAC verification and the Bugbot/Cursor check-run handling.
Remove POST /webhooks/slack (api/routes/webhooks/slack.py) — the Composio trigger passthrough that forwarded events into watchdog.
Delete api/routes/webhooks/ package entirely (__init__.py too).
Remove the dead bugbot-fix trigger path — trigger_bugbot_fix_from_webhook() in api/routes/workflows/bugbot_fix.py (returned None, only ever called by the now-deleted GitHub webhook). The manual POST /workflows/bugbot-fix/run route is kept.
Deregister both routers in api/main.py and drop their exports from api/routes/__init__.py.
Terraform: remove GH_WEBHOOK_SECRET and COMPOSIO_WEBHOOK_SECRET from the secret lists in both doppler-aws-secrets/main.tf and ecs-api/main.tf.
Delete tests/unit/test_github_webhook.py (tested only the removed GitHub webhook module).
Fixed a stale doc comment in common/workflow_labels.py that pointed at the deleted webhook handler.

Dangling-import / reference check

Grepped the whole repo after the edits:

GH_WEBHOOK_SECRET — 0 references remaining.
github_webhook_router, slack_webhook_router, trigger_bugbot_fix_from_webhook, routes.webhooks — 0 references remaining.
COMPOSIO_WEBHOOK_SECRET — remaining references are only in watchdog/config.py and watchdog/server.py (the separate watchdog track), which is intentional (see caveats).

How to Test

make fmt clean; ruff format + import-sort + lint all pass.
App still imports: api/main.py registers all remaining routers with no references to the deleted ones.
POST /webhooks/github and POST /webhooks/slack no longer exist on the API.
POST /workflows/bugbot-fix/run (manual) still works.

Note on make chk: in this AO worktree the path lives under a hidden .agent-orchestrator/ directory, which pyrefly's default **/.[!/.]*/**/* exclude swallows, so the pyrefly check cortex/ step reports "nothing to check" and exits 1 identically on the untouched base commit — it is a worktree-location artifact, not introduced by this change. All ruff checks (which do cover the edited files) pass.

Caveats

Composio triggers and GitHub/Slack webhooks will no longer reach these endpoints — this is intended.
COMPOSIO_WEBHOOK_SECRET is also used by watchdog (watchdog/server.py, watchdog/config.py), which is a separate track. This PR removes it from the Cortex/API deployment surface (terraform secret lists) and the API Slack passthrough, but deliberately does not touch watchdog code. watchdog/config.py has a hardcoded default fallback, so watchdog does not crash without the env injection; its deployment-surface cleanup belongs to the watchdog track.
Doppler value deletion is manual — this PR only removes the secrets from the terraform secret lists, not from Doppler itself.
Cortex is currently at 0 ECS replicas — do not deploy/scale as part of this.
This PR edits shared terraform files (doppler-aws-secrets/main.tf, ecs-api/main.tf). Intended merge order for the hardening series: S1 → S2 → S3 → S4 (this is S2).

Pre-Review Checklist

I have self-reviewed this PR

🤖 Generated with Claude Code

▸ 2 bot/status comments hidden

@github-actions[bot]2w ago

❌ Terraform Plan: Production


Error: Error acquiring the state lock

Error message: operation error DynamoDB: PutItem, https response error
StatusCode: 400, RequestID:
58NCAQ2AOCPKL6EUHH31IJJCAJVV4KQNSO5AEMVJF66Q9ASUAAJG,
ConditionalCheckFailedException: The conditional request failed
Lock Info:
  ID:        20cd48c3-3e1d-d351-506f-72b6f680bb8c
  Path:      composio-integrator-terraform-state/integrator/prod/terraform.tfstate
  Operation: OperationTypePlan
  Who:       runner@runnervmg397c
  Version:   1.7.0
  Created:   2026-05-25 23:55:42.034098937 +0000 UTC
  Info:      


Terraform acquires a state lock to protect the state from being written
by multiple users at the same time. Please resolve the issue above and try
again. For most commands, you can disable locking with the "-lock=false"
flag, but this is not recommended.

⚠️ Production changes will be applied after merge to next branch.

@github-actions[bot]2w ago

❌ Terraform Plan: Staging

data.terraform_remote_state.prod: Reading...
module.doppler_aws_secrets.doppler_environment.config: Refreshing state... [id=integrator.staging]
module.rds.random_password.master[0]: Refreshing state... [id=none]
module.github_actions_role.data.tls_certificate.github: Reading...
module.doppler_aws_secrets.data.external.env_vars: Reading...
module.rds.random_password.readonly[0]: Refreshing state... [id=none]
module.github_actions_role.data.tls_certificate.github: Read complete after 0s [id=96abb9379db1afc8a8677b8d4e606d3560ca4114]
module.artifacts_bucket.aws_s3_bucket.this: Refreshing state... [id=integrator-artifacts-staging]
module.ecs_api.aws_cloudwatch_log_group.migrations_logs: Refreshing state... [id=/ecs/integrator/staging/migrations]
data.aws_caller_identity.current: Reading...
module.private_subnets.data.aws_vpc.default: Reading...
module.ecs_api.data.aws_ecr_repository.api[0]: Reading...
module.ecs_api.data.aws_ecs_cluster.default: Reading...
module.rds.aws_secretsmanager_secret.readonly_password[0]: Refreshing state... [id=integrator/staging/rds-readonly-password]
data.aws_iam_openid_connect_provider.github: Reading...
data.aws_caller_identity.current: Read complete after 0s [id=256586139593]
module.rds.aws_secretsmanager_secret.master_password[0]: Refreshing state... [id=arn:aws:secretsmanager:us-east-1:256586139593:secret:integrator/staging/rds-master-password-4QWym0]
module.ecs_api.aws_s3_bucket.alb_logs[0]: Refreshing state... [id=integrator-staging-alb-logs]
module.ecs_api.aws_iam_policy.ecs_exec: Refreshing state... [id=arn:aws:iam::256586139593:policy/integrator-staging-api-ecs-exec-policy]
module.doppler_aws_secrets.data.external.env_vars: Read complete after 0s [id=-]
module.ecs_api.aws_iam_role.api_task_execution: Refreshing state... [id=integrator-staging-api-task-execution-role]
module.ecs_api.data.aws_ecs_cluster.default: Read complete after 0s [id=arn:aws:ecs:us-east-1:256586139593:cluster/default]
module.ecs_api.aws_s3_bucket.migrations: Refreshing state... [id=integrator-staging-migrations]
data.aws_iam_openid_connect_provider.github: Read complete after 0s [id=arn:aws:iam::256586139593:oidc-provider/token.actions.githubusercontent.com]
module.ecs_api.data.aws_vpc.selected: Reading...
module.ecs_api.aws_iam_role.migrations_lambda: Refreshing state... [id=integrator-staging-migrations-lambda-role]
module.github_actions_role.data.aws_caller_identity.current: Reading...
module.github_actions_role.data.aws_caller_identity.current: Read complete after 0s [id=256586139593]
module.rds.data.aws_region.current: Reading...
module.rds.data.aws_region.current: Read complete after 0s [id=us-east-1]
module.ai_agent_debugging_role.data.aws_caller_identity.current: Reading...
module.ai_agent_debugging_role.data.aws_caller_identity.current: Read complete after 0s [id=256586139593]
module.bedrock_profiles.data.aws_region.current: Reading...
module.bedrock_profiles.data.aws_region.current: Read complete after 0s [id=us-east-1]
data.aws_vpc.default: Reading...
module.ecs_api.data.aws_elb_service_account.main: Reading...
module.ecs_api.data.aws_elb_service_account.main: Read complete after 0s [id=127311923021]
module.ecs_api.data.aws_ecr_repository.api[0]: Read complete after 0s [id=integrator-api]
module.private_subnets.data.aws_availability_zones.available: Reading...
module.rds.aws_db_parameter_group.main: Refreshing state... [id=integrator-staging-postgres-20251121173128166300000001]
data.terraform_remote_state.prod: Read complete after 1s
module.ecs_api.aws_cloudwatch_log_group.migrations_lambda_logs: Refreshing state... [id=/aws/lambda/integrator-staging-migrations]
module.private_subnets.data.aws_availability_zones.available: Read complete after 1s [id=us-east-1]
module.doppler_aws_secrets.aws_iam_policy.doppler_secrets_manager: Refreshing state... [id=arn:aws:iam::256586139593:policy/integrator-staging-doppler-secrets-manager-policy]
module.ecs_api.data.aws_caller_identity.current: Reading...
module.doppler_aws_secrets.aws_iam_role.doppler_secrets_manager: Refreshing state... [id=integrator-staging-doppler-secrets-manager-role]
module.ecs_api.data.aws_caller_identity.current: Read complete after 0s [id=256586139593]
module.ecs_api.aws_cloudwatch_log_group.api_logs: Refreshing state... [id=/ecs/integrator/staging/api]
module.private_subnets.data.aws_vpc.default: Read complete after 1s [id=vpc-0529dea5160deb846]
module.ecs_api.aws_cloudwatch_log_group.poller_logs: Refreshing state... [id=/ecs/integrator/staging/poller]
module.knowledge_bucket.aws_s3_bucket.this: Refreshing state... [id=integrator-knowledge-staging]
module.ecs_api.aws_iam_role.api_task: Refreshing state... [id=integrator-staging-api-task-role]
module.ecs_api.data.aws_vpc.selected: Read complete after 1s [id=vpc-0529dea5160deb846]
module.rds.aws_secretsmanager_secret_version.readonly_password[0]: Refreshing state... [id=integrator/staging/rds-readonly-password|terraform-20260115132739255000000001]
module.rds.aws_secretsmanager_secret_version.master_password[0]: Refreshing state... [id=arn:aws:secretsmanager:us-east-1:256586139593:secret:integrator/staging/rds-master-password-4QWym0|terraform-20251128130346365300000002]
module.ecs_api.aws_iam_role_policy_attachment.api_task_execution: Refreshing state... [id=integrator-staging-api-task-execution-role-20251121173131958900000005]
module.ecs_api.aws_iam_role_policy_attachment.migrations_lambda_basic: Refreshing state... [id=integrator-staging-migrations-lambda-role-20260204171019948100000001]
module.ai_agent_debugging_role.aws_iam_role.ai_agent_debugging: Refreshing state... [id=integrator-ai-agent-debugging-staging]
module.ecs_api.aws_iam_role_policy_attachment.migrations_lambda_vpc: Refreshing state... [id=integrator-staging-migrations-lambda-role-20260204171019948800000002]
module.ecs_api.aws_iam_policy.bedrock_access: Refreshing state... [id=arn:aws:iam::256586139593:policy/integrator-staging-api-bedrock-access]
data.aws_vpc.default: Read complete after 1s [id=vpc-0529dea5160deb846]
module.artifacts_bucket.aws_s3_bucket_lifecycle_configuration.this: Refreshing state... [id=integrator-artifacts-staging]
module.artifacts_bucket.aws_s3_bucket_server_side_encryption_configuration.this: Refreshing state... [id=integrator-artifacts-staging]
module.artifacts_bucket.aws_s3_bucket_public_access_block.this: Refreshing state... [id=integrator-artifacts-staging]
module.ecs_api.aws_security_group.alb: Refreshing state... [id=sg-0f268d8e0027eaad9]
module.ecs_api.aws_lb_target_group.api: Refreshing state... [id=arn:aws:elasticloadbalancing:us-east-1:256586139593:targetgroup/integrator-staging-api-tg/4ebc38c1a3c18f91]
module.ecs_api.data.aws_subnets.public: Reading...
module.github_actions_role.aws_iam_role.github_actions: Refreshing state... [id=integrator-github-actions-staging]
module.doppler_aws_secrets.doppler_secret.secrets["THERMOS_USERNAME"]: Refreshing state... [id=integrator.staging.THERMOS_USERNAME]
module.doppler_aws_secrets.doppler_secret.secrets["THERMOS_DATABASE"]: Refreshing state... [id=integrator.staging.THERMOS_DATABASE]
module.doppler_aws_secrets.doppler_secret.secrets["DD_API_KEY"]: Refreshing state... [id=integrator.staging.DD_API_KEY]
module.ecs_api.data.aws_subnets.public: Read complete after 0s [id=us-east-1]
module.doppler_aws_secrets.doppler_secret.secrets["THERMOS_PORT"]: Refreshing state... [id=integrator.staging.THERMOS_PORT]
module.doppler_aws_secrets.doppler_secret.secrets["CLICKHOUSE_USERNAME"]: Refreshing state... [id=integrator.staging.CLICKHOUSE_USERNAME]
module.doppler_aws_secrets.doppler_secret.secrets["COMPOSIO_WEBHOOK_SECRET"]: Refreshing state... [id=integrator.staging.COMPOSIO_WEBHOOK_SECRET]
module.doppler_aws_secrets.doppler_secret.secrets["MERCURY_AUTOLOAD"]: Refreshing state... [id=integrator.staging.MERCURY_AUTOLOAD]
module.doppler_aws_secrets.doppler_secret.secrets["PIPEDREAM_PATH"]: Refreshing state... [id=integrator.staging.PIPEDREAM_PATH]
module.doppler_aws_secrets.doppler_secret.secrets["DISABLE_MERCURY_CLEANUP"]: Refreshing state... [id=integrator.staging.DISABLE_MERCURY_CLEANUP]
module.doppler_aws_secrets.doppler_secret.secrets["USE_APOLLO_GET_DOWNLOAD_URL_API"]: Refreshing state... [id=integrator.staging.USE_APOLLO_GET_DOWNLOAD_URL_API]
module.doppler_aws_secrets.doppler_secret.secrets["WATCHDOG_MAX_FIXERS_PER_DAY"]: Refreshing state... [id=integrator.staging.WATCHDOG_MAX_FIXERS_PER_DAY]
module.doppler_aws_secrets.doppler_secret.secrets["ZAPIER_PATH"]: Refreshing state... [id=integrator.staging.ZAPIER_PATH]
module.doppler_aws_secrets.doppler_secret.secrets["GH_WEBHOOK_SECRET"]: Refreshing state... [id=integrator.staging.GH_WEBHOOK_SECRET]
module.doppler_aws_secrets.doppler_secret.secrets["SLACK_BOT_TOKEN"]: Refreshing state... [id=integrator.staging.SLACK_BOT_TOKEN]
module.doppler_aws_secrets.doppler_secret.secrets["KIMI_API_KEY"]: Refreshing state... [id=integrator.staging.KIMI_API_KEY]
module.doppler_aws_secrets.doppler_secret.secrets["BRANDFETCH_API_KEY"]: Refreshing state... [id=integrator.staging.BRANDFETCH_API_KEY]
module.doppler_aws_secrets.doppler_secret.secrets["LINEAR_API_KEY"]: Refreshing state... [id=integrator.staging.LINEAR_API_KEY]
module.doppler_aws_secrets.doppler_secret.secrets["COMPOSIO_TAVILY_API_KEY"]: Refreshing state... [id=integrator.staging.COMPOSIO_TAVILY_API_KEY]
module.doppler_aws_secrets.doppler_secret.secrets["Z_AI_BASE_URL"]: Refreshing state... [id=integrator.staging.Z_AI_BASE_URL]
module.doppler_aws_secrets.doppler_secret.secrets["COMPOSIO_EXA_API_KEY"]: Refreshing state... [id=integrator.staging.COMPOSIO_EXA_API_KEY]
module.doppler_aws_secrets.doppler_secret.secrets["GITHUB_ACCESS_TOKEN"]: Refreshing state... [id=integrator.staging.GITHUB_ACCESS_TOKEN]
module.doppler_aws_secrets.doppler_secret.secrets["PERPLEXITY_API_KEY"]: Refreshing state... [id=integrator.staging.PERPLEXITY_API_KEY]
module.doppler_aws_secrets.doppler_secret.secrets["MINIMAX_API_KEY"]: Refreshing state... [id=integrator.staging.MINIMAX_API_KEY]
module.doppler_aws_secrets.doppler_secret.secrets["TOOLS_DATABASE_URL"]: Refreshing state... [id=integrator.staging.TOOLS_DATABASE_URL]
module.doppler_aws_secrets.doppler_secret.secrets["NOTION_API_KEY"]: Refreshing state... [id=integrator.staging.NOTION_API_KEY]
module.doppler_aws_secrets.doppler_secret.secrets["FIRECRAWL_API_KEY"]: Refreshing state... [id=integrator.staging.FIRECRAWL_API_KEY]
module.doppler_aws_secrets.doppler_secret.secrets["COMPOSIO_YELP_API_KEY"]: Refreshing state... [id=integrator.staging.COMPOSIO_YELP_API_KEY]
module.doppler_aws_secrets.doppler_secret.secrets["COMPOSIO_STAGING_API_KEY"]: Refreshing state... [id=integrator.staging.COMPOSIO_STAGING_API_KEY]
module.doppler_aws_secrets.doppler_secret.secrets["LANGSMITH_API_KEY"]: Refreshing state... [id=integrator.staging.LANGSMITH_API_KEY]
module.doppler_aws_secrets.doppler_secret.secrets["THERMOS_PASSWORD"]: Refreshing state... [id=integrator.staging.THERMOS_PASSWORD]
module.doppler_aws_secrets.doppler_secret.secrets["ENCRYPTION_KEY"]: Refreshing state... [id=integrator.staging.ENCRYPTION_KEY]
module.doppler_aws_secrets.doppler_secret.secrets["COMPOSIO_GEMINI_API_KEY"]: Refreshing state... [id=integrator.staging.COMPOSIO_GEMINI_API_KEY]
module.doppler_aws_secrets.doppler_secret.secrets["ANTHROPIC_API_KEY"]: Refreshing state... [id=integrator.staging.ANTHROPIC_API_KEY]
module.doppler_aws_secrets.doppler_secret.secrets["WATCHDOG_BATCH_POLLER_DISABLED"]: Refreshing state... [id=integrator.staging.WATCHDOG_BATCH_POLLER_DISABLED]
module.doppler_aws_secrets.doppler_secret.secrets["OPENAI_API_KEY"]: Refreshing state... [id=integrator.staging.OPENAI_API_KEY]
module.doppler_aws_secrets.doppler_secret.secrets["PYTHONPATH"]: Refreshing state... [id=integrator.staging.PYTHONPATH]
module.doppler_aws_secrets.doppler_secret.secrets["LANGSMITH_ENDPOINT"]: Refreshing state... [id=integrator.staging.LANGSMITH_ENDPOINT]
module.doppler_aws_secrets.doppler_secret.secrets["LANGSMITH_TRACING"]: Refreshing state... [id=integrator.staging.LANGSMITH_TRACING]
module.doppler_aws_secrets.doppler_secret.secrets["CLICKHOUSE_PASSWORD"]: Refreshing state... [id=integrator.staging.CLICKHOUSE_PASSWORD]
module.doppler_aws_secrets.doppler_secret.secrets["GITHUB_REVIEWER_TOKEN"]: Refreshing state... [id=integrator.staging.GITHUB_REVIEWER_TOKEN]
module.doppler_aws_secrets.doppler_secret.secrets["TWITTER_API_SECRET"]: Refreshing state... [id=integrator.staging.TWITTER_API_SECRET]
module.doppler_aws_secrets.doppler_secret.secrets["COMPOSIO_ADMIN_TOKEN"]: Refreshing state... [id=integrator.staging.COMPOSIO_ADMIN_TOKEN]
module.doppler_aws_secrets.doppler_secret.secrets["HELICONE_API_KEY"]: Refreshing state... [id=integrator.staging.HELICONE_API_KEY]
module.doppler_aws_secrets.doppler_secret.secrets["STATSD_METRICS_FLUSH_WAIT_TIME_SECS"]: Refreshing state... [id=integrator.staging.STATSD_METRICS_FLUSH_WAIT_TIME_SECS]
module.doppler_aws_secrets.doppler_secret.secrets["AZURE_OPENAI_SUBSCRIPTION_KEY"]: Refreshing state... [id=integrator.staging.AZURE_OPENAI_SUBSCRIPTION_KEY]
module.doppler_aws_secrets.doppler_secret.secrets["COMPOSIO_API_KEY"]: Refreshing state... [id=integrator.staging.COMPOSIO_API_KEY]
module.doppler_aws_secrets.doppler_secret.secrets["COMPOSIO_STAGING_ADMIN_TOKEN"]: Refreshing state... [id=integrator.staging.COMPOSIO_STAGING_ADMIN_TOKEN]
module.doppler_aws_secrets.doppler_secret.secrets["APOLLO_URL"]: Refreshing state... [id=integrator.staging.APOLLO_URL]
module.doppler_aws_secrets.doppler_secret.secrets["BACKEND_READONLY_URL"]: Refreshing state... [id=integrator.staging.BACKEND_READONLY_URL]
module.doppler_aws_secrets.doppler_secret.secrets["THERMOS_HOST"]: Refreshing state... [id=integrator.staging.THERMOS_HOST]
module.doppler_aws_secrets.doppler_secret.secrets["Z_AI_API_KEY"]: Refreshing state... [id=integrator.staging.Z_AI_API_KEY]
module.doppler_aws_secrets.doppler_secret.secrets["DEEPSEEK_API_KEY"]: Refreshing state... [id=integrator.staging.DEEPSEEK_API_KEY]
module.doppler_aws_secrets.doppler_secret.secrets["AZURE_OPENAI_ENDPOINT_URL"]: Refreshing state... [id=integrator.staging.AZURE_OPENAI_ENDPOINT_URL]
module.doppler_aws_secrets.doppler_secret.secrets["TEST_CONNECTION_ID"]: Refreshing state... [id=integrator.staging.TEST_CONNECTION_ID]
module.doppler_aws_secrets.doppler_secret.secrets["GROQ_API_KEY"]: Refreshing state... [id=integrator.staging.GROQ_API_KEY]
module.doppler_aws_secrets.doppler_secret.secrets["COMPOSIO_INSTACART_API_KEY"]: Refreshing state... [id=integrator.staging.COMPOSIO_INSTACART_API_KEY]
module.doppler_aws_secrets.doppler_secret.secrets["COMPOSIO_SERPAPI_API_KEY"]: Refreshing state... [id=integrator.staging.COMPOSIO_SERPAPI_API_KEY]
module.doppler_aws_secrets.doppler_secret.secrets["COMPOSIO_SEATGEEK_KEY"]: Refreshing state... [id=integrator.staging.COMPOSIO_SEATGEEK_KEY]
module.doppler_aws_secrets.doppler_secret.secrets["APOLLO_ADMIN_TOKEN"]: Refreshing state... [id=integrator.staging.APOLLO_ADMIN_TOKEN]
module.doppler_aws_secrets.doppler_secret.secrets["DD_APP_KEY"]: Refreshing state... [id=integrator.staging.DD_APP_KEY]
module.doppler_aws_secrets.doppler_secret.secrets["VERCEL_AI_GATEWAY_API_KEY"]: Refreshing state... [id=integrator.staging.VERCEL_AI_GATEWAY_API_KEY]
module.doppler_aws_secrets.doppler_secret.secrets["TWITTER_API_KEY"]: Refreshing state... [id=integrator.staging.TWITTER_API_KEY]
module.doppler_aws_secrets.doppler_secret.secrets["ANCHOR_API_KEY"]: Refreshing state... [id=integrator.staging.ANCHOR_API_KEY]
module.bedrock_profiles.aws_bedrock_inference_profile.haiku: Refreshing state... [id=71dmct7za78p]
module.bedrock_profiles.aws_bedrock_inference_profile.opus: Refreshing state... [id=1zfxsu353ckg]
module.bedrock_profiles.aws_bedrock_inference_profile.sonnet: Refreshing state... [id=tpazg97vdxpe]
module.private_subnets.aws_route_table.private[0]: Refreshing state... [id=rtb-0ca5cea74230b5b23]
module.private_subnets.aws_route_table.private[1]: Refreshing state... [id=rtb-0690155d9202e0219]
module.private_subnets.aws_subnet.private[1]: Refreshing state... [id=subnet-07405a7f6e0e87c13]
module.private_subnets.aws_subnet.private[0]: Refreshing state... [id=subnet-01dbaf7873359f0b3]
module.doppler_aws_secrets.doppler_integration_aws_secrets_manager.integration: Refreshing state... [id=44a390e7-e35d-44e3-a573-6476e776f406]
module.doppler_aws_secrets.aws_iam_role_policy_attachment.doppler_secrets_manager: Refreshing state... [id=integrator-staging-doppler-secrets-manager-role-20251117112527179200000001]
data.aws_subnets.public: Reading...
module.ecs_api.aws_iam_role_policy_attachment.api_ecs_exec: Refreshing state... [id=integrator-staging-api-task-role-20260110152557084500000001]
module.ecs_api.aws_s3_bucket_lifecycle_configuration.alb_logs[0]: Refreshing state... [id=integrator-staging-alb-logs]
module.ecs_api.aws_s3_bucket_server_side_encryption_configuration.alb_logs[0]: Refreshing state... [id=integrator-staging-alb-logs]
module.ecs_api.aws_s3_bucket_public_access_block.alb_logs[0]: Refreshing state... [id=integrator-staging-alb-logs]
module.ecs_api.aws_iam_role_policy_attachment.api_bedrock_access: Refreshing state... [id=integrator-staging-api-task-role-20260204130051288600000001]
module.ecs_api.aws_security_group.api: Refreshing state... [id=sg-06a8634c658cb6242]
data.aws_subnets.public: Read complete after 0s [id=us-east-1]
module.ecs_api.aws_s3_bucket_public_access_block.migrations: Refreshing state... [id=integrator-staging-migrations]
module.github_actions_role.aws_iam_role_policy.cloudwatch_logs: Refreshing state... [id=integrator-github-actions-staging:integrator-github-actions-staging-cloudwatch-logs-policy]
module.github_actions_role.aws_iam_role_policy.lambda: Refreshing state... [id=integrator-github-actions-staging:integrator-github-actions-staging-lambda-policy]
module.github_actions_role.aws_iam_role_policy_attachment.terraform_admin[0]: Refreshing state... [id=integrator-github-actions-staging-20260115154744404400000001]
module.knowledge_bucket.aws_s3_bucket_lifecycle_configuration.this: Refreshing state... [id=integrator-knowledge-staging]
module.knowledge_bucket.aws_s3_bucket_server_side_encryption_configuration.this: Refreshing state... [id=integrator-knowledge-staging]
module.knowledge_bucket.aws_s3_bucket_versioning.this[0]: Refreshing state... [id=integrator-knowledge-staging]
module.knowledge_bucket.aws_s3_bucket_public_access_block.this: Refreshing state... [id=integrator-knowledge-staging]
module.ai_agent_debugging_role.aws_iam_role_policy.vpc_debugging: Refreshing state... [id=integrator-ai-agent-debugging-staging:integrator-ai-agent-debugging-staging-vpc-policy]
module.ai_agent_debugging_role.aws_iam_role_policy.cost_explorer_debugging: Refreshing state... [id=integrator-ai-agent-debugging-staging:integrator-ai-agent-debugging-staging-cost-explorer-policy]
module.ai_agent_debugging_role.aws_iam_role_policy.deny_privilege_escalation: Refreshing state... [id=integrator-ai-agent-debugging-staging:integrator-ai-agent-debugging-staging-deny-privilege-escalation]
module.ai_agent_debugging_role.aws_iam_role_policy.ecr_debugging: Refreshing state... [id=integrator-ai-agent-debugging-staging:integrator-ai-agent-debugging-staging-ecr-policy]
module.ai_agent_debugging_role.aws_iam_role_policy.secrets_manager_debugging: Refreshing state... [id=integrator-ai-agent-debugging-staging:integrator-ai-agent-debugging-staging-secrets-manager-policy]
module.ai_agent_debugging_role.aws_iam_role_policy.cloudwatch_logs_debugging: Refreshing state... [id=integrator-ai-agent-debugging-staging:integrator-ai-agent-debugging-staging-cloudwatch-logs-policy]
module.ai_agent_debugging_role.aws_iam_role_policy.rds_debugging: Refreshing state... [id=integrator-ai-agent-debugging-staging:integrator-ai-agent-debugging-staging-rds-policy]
module.ai_agent_debugging_role.aws_iam_role_policy.alb_debugging: Refreshing state... [id=integrator-ai-agent-debugging-staging:integrator-ai-agent-debugging-staging-alb-policy]
module.ai_agent_debugging_role.aws_iam_role_policy.cloudwatch_metrics_debugging: Refreshing state... [id=integrator-ai-agent-debugging-staging:integrator-ai-agent-debugging-staging-cloudwatch-metrics-policy]
module.ai_agent_debugging_role.aws_iam_role_policy.s3_debugging: Refreshing state... [id=integrator-ai-agent-debugging-staging:integrator-ai-agent-debugging-staging-s3-policy]
module.ai_agent_debugging_role.aws_iam_role_policy.ecs_debugging: Refreshing state... [id=integrator-ai-agent-debugging-staging:integrator-ai-agent-debugging-staging-ecs-policy]
module.ai_agent_debugging_role.aws_iam_role_policy.iam_debugging: Refreshing state... [id=integrator-ai-agent-debugging-staging:integrator-ai-agent-debugging-staging-iam-policy]
module.rds.data.aws_vpc.selected: Reading...
module.private_subnets.aws_route_table_association.private[0]: Refreshing state... [id=rtbassoc-083956d2431aaec0e]
module.private_subnets.aws_route_table_association.private[1]: Refreshing state... [id=rtbassoc-09e0942a52569e671]
module.ecs_api.aws_s3_bucket_policy.alb_logs[0]: Refreshing state... [id=integrator-staging-alb-logs]
github_actions_secret.aws_role_arn: Refreshing state... [id=integrator:AWS_ROLE_ARN_STAGING]
aws_route.private_default_via_prod_nat[0]: Refreshing state... [id=r-rtb-0ca5cea74230b5b231080289494]
aws_route.private_default_via_prod_nat[1]: Refreshing state... [id=r-rtb-0690155d9202e02191080289494]
module.rds.aws_db_subnet_group.main: Refreshing state... [id=integrator-staging-db-subnet-group]
module.ecs_api.aws_lb.api: Refreshing state... [id=arn:aws:elasticloadbalancing:us-east-1:256586139593:loadbalancer/app/integrator-staging-alb/5e4f301bcd0263cb]
github_actions_secret.ecs_security_groups: Refreshing state... [id=integrator:ECS_SECURITY_GROUPS_STAGING]
github_actions_secret.ecs_subnets: Refreshing state... [id=integrator:ECS_SUBNETS_STAGING]
module.ecs_api.aws_lb_listener.http: Refreshing state... [id=arn:aws:elasticloadbalancing:us-east-1:256586139593:listener/app/integrator-staging-alb/5e4f301bcd0263cb/d7549a73fdd1a11a]
module.rds.data.aws_vpc.selected: Read complete after 0s [id=vpc-0529dea5160deb846]
module.rds.aws_security_group.rds: Refreshing state... [id=sg-0c78e576a056ba44a]
module.rds.aws_db_instance.main: Refreshing state... [id=db-I57KURHD3UXFT56QM2OTWRW7TQ]
module.rds.null_resource.create_readonly_user[0]: Refreshing state... [id=3885368352693534014]
module.ecs_api.aws_iam_role_policy.migrations_lambda_access: Refreshing state... [id=integrator-staging-migrations-lambda-role:integrator-staging-migrations-lambda-access]
module.ecs_api.aws_ecs_task_definition.migrations: Refreshing state... [id=integrator-staging-migrations]
module.ecs_api.aws_lambda_function.migrations: Refreshing state... [id=integrator-staging-migrations]
module.ecs_background_runner.aws_iam_role.task: Refreshing state... [id=integrator-staging-ecs-task-role]
module.ecs_background_runner.data.aws_caller_identity.current: Reading...
module.ecs_background_runner.aws_iam_policy.s3_knowledge_access: Refreshing state... [id=arn:aws:iam::256586139593:policy/integrator-staging-s3-knowledge-access]
module.ecs_background_runner.aws_iam_policy.ecs_exec: Refreshing state... [id=arn:aws:iam::256586139593:policy/integrator-staging-ecs-exec-policy]
module.ecs_background_runner.data.aws_ecr_repository.background_runner[0]: Reading...
module.ecs_background_runner.aws_iam_role.task_execution: Refreshing state... [id=integrator-staging-ecs-task-execution-role]
module.ecs_background_runner.data.aws_caller_identity.current: Read complete after 0s [id=256586139593]
module.ecs_background_runner.data.aws_ecs_cluster.default[0]: Reading...
module.ecs_background_runner.aws_cloudwatch_log_group.ecs_task_events: Refreshing state... [id=/aws/events/integrator/staging/ecs-task-state-change]
module.ecs_background_runner.aws_cloudwatch_log_group.task_logs: Refreshing state... [id=/ecs/integrator/staging/background-runner]
module.ecs_background_runner.data.aws_ecs_cluster.default[0]: Read complete after 1s [id=arn:aws:ecs:us-east-1:256586139593:cluster/default]
module.ecs_background_runner.aws_iam_policy.bedrock_access: Refreshing state... [id=arn:aws:iam::256586139593:policy/integrator-staging-bedrock-access]
module.ecs_background_runner.aws_cloudwatch_event_rule.ecs_task_state_change: Refreshing state... [id=integrator-staging-ecs-task-state-change]
module.ecs_background_runner.aws_iam_role_policy_attachment.ecs_exec: Refreshing state... [id=integrator-staging-ecs-task-role-20251121173131775000000004]
module.ecs_background_runner.aws_iam_role_policy_attachment.s3_knowledge_access: Refreshing state... [id=integrator-staging-ecs-task-role-20260110152558095500000002]
module.ecs_background_runner.aws_iam_role_policy_attachment.task_execution: Refreshing state... [id=integrator-staging-ecs-task-execution-role-20251121173130862100000002]
module.ecs_background_runner.aws_iam_role_policy_attachment.bedrock_access: Refreshing state... [id=integrator-staging-ecs-task-role-20260204130051819900000004]
module.ecs_background_runner.aws_cloudwatch_event_target.ecs_task_state_change_logs: Refreshing state... [id=integrator-staging-ecs-task-state-change-LogTaskStateChanges]
module.ecs_background_runner.data.aws_ecr_repository.background_runner[0]: Read complete after 1s [id=integrator-background-runner]
module.github_actions_role.aws_iam_role_policy.ecr: Refreshing state... [id=integrator-github-actions-staging:integrator-github-actions-staging-ecr-policy]

Note: Objects have changed outside of Terraform

Terraform detected the following changes made outside of Terraform since the
last "terraform apply" which may have affected this plan:

  # module.doppler_aws_secrets.doppler_environment.config has been deleted
  - resource "doppler_environment" "config" {
        id      = "integrator.staging"
        name    = "Staging"
      - slug    = "staging" -> null
        # (1 unchanged attribute hidden)
    }

  # module.doppler_aws_secrets.doppler_integration_aws_secrets_manager.integration has been deleted
  - resource "doppler_integration_aws_secrets_manager" "integration" {
      - id              = "44a390e7-e35d-44e3-a573-6476e776f406" -> null
        name            = "integrator-staging-aws-secrets-manager"
        # (1 unchanged attribute hidden)
    }


Unless you have made equivalent changes to your configuration, or ignored the
relevant attributes using ignore_changes, the following plan may include
actions to undo or respond to these changes.

─────────────────────────────────────────────────────────────────────────────

Terraform used the selected providers to generate the following execution
plan. Resource actions are indicated with the following symbols:
  + create
  ~ update in-place
 <= read (data resources)

Terraform planned the following actions, but then encountered a problem:

  # module.doppler_aws_secrets.data.doppler_secrets.existing will be read during apply
  # (depends on a resource or a module with changes pending)
 <= data "doppler_secrets" "existing" {
      + config  = "staging"
      + id      = (known after apply)
      + map     = (sensitive value)
      + project = "integrator"
    }

  # module.doppler_aws_secrets.doppler_environment.config will be created
  + resource "doppler_environment" "config" {
      + id               = (known after apply)
      + name             = "Staging"
      + personal_configs = false
      + project          = "integrator"
      + slug             = "staging"
    }

  # module.doppler_aws_secrets.doppler_integration_aws_secrets_manager.integration will be created
  + resource "doppler_integration_aws_secrets_manager" "integration" {
      + assume_role_arn = "arn:aws:iam::256586139593:role/integrator-staging-doppler-secrets-manager-role"
      + id              = (known after apply)
      + name            = "integrator-staging-aws-secrets-manager"
    }

  # module.ecs_api.aws_security_group.alb will be updated in-place
  ~ resource "aws_security_group" "alb" {
        id                     = "sg-0f268d8e0027eaad9"
      ~ ingress                = [
          + {
              + cidr_blocks      = [
                  + "0.0.0.0/0",
                ]
              + description      = "HTTP from internet"
              + from_port        = 80
              + ipv6_cidr_blocks = []
              + prefix_list_ids  = []
              + protocol         = "tcp"
              + security_groups  = []
              + self             = false
              + to_port          = 80
            },
          + {
              + cidr_blocks      = [
                  + "0.0.0.0/0",
                ]
              + description      = "HTTPS from internet"
              + from_port        = 443
              + ipv6_cidr_blocks = []
              + prefix_list_ids  = []
              + protocol         = "tcp"
              + security_groups  = []
              + self             = false
              + to_port          = 443
            },
        ]
        name                   = "integrator-staging-alb-sg"
        tags                   = {
            "Environment" = "staging"
            "ManagedBy"   = "Terraform"
            "Name"        = "integrator-staging-alb-sg"
        }
        # (7 unchanged attributes hidden)
    }

Plan: 2 to add, 1 to change, 0 to destroy.

Warning: Argument is deprecated

  with module.datadog_dashboards.datadog_dashboard.cost,
  on ../../modules/datadog-dashboards/cost.tf line 16, in resource "datadog_dashboard" "cost":
  16:     default          = "*"

Use `defaults` instead.

(and 6 more similar warnings elsewhere)

Warning: Doppler Error: Could not find requested environment 'staging'

  with module.doppler_aws_secrets.doppler_environment.config,
  on ../../modules/doppler-aws-secrets/main.tf line 116, in resource "doppler_environment" "config":
 116: resource "doppler_environment" "config" {

Resource was not found, so it was removed from state and is being recreated.

Warning: Doppler Error: Integration not found.

  with module.doppler_aws_secrets.doppler_integration_aws_secrets_manager.integration,
  on ../../modules/doppler-aws-secrets/main.tf line 262, in resource "doppler_integration_aws_secrets_manager" "integration":
 262: resource "doppler_integration_aws_secrets_manager" "integration" {

Resource was not found, so it was removed from state and is being recreated.

Error: 403 Forbidden

  with provider["registry.terraform.io/datadog/datadog"],
  on main.tf line 45, in provider "datadog":
  45: provider "datadog" {


Error: GET https://api.github.com/repos/ComposioHQ/integrator/actions/secrets/AWS_ROLE_ARN_STAGING: 401 Bad credentials []

  with github_actions_secret.aws_role_arn,
  on main.tf line 326, in resource "github_actions_secret" "aws_role_arn":
 326: resource "github_actions_secret" "aws_role_arn" {


Error: GET https://api.github.com/repos/ComposioHQ/integrator/actions/secrets/ECS_SUBNETS_STAGING: 401 Bad credentials []

  with github_actions_secret.ecs_subnets,
  on main.tf line 332, in resource "github_actions_secret" "ecs_subnets":
 332: resource "github_actions_secret" "ecs_subnets" {


Error: GET https://api.github.com/repos/ComposioHQ/integrator/actions/secrets/ECS_SECURITY_GROUPS_STAGING: 401 Bad credentials []

  with github_actions_secret.ecs_security_groups,
  on main.tf line 338, in resource "github_actions_secret" "ecs_security_groups":
 338: resource "github_actions_secret" "ecs_security_groups" {


Error: Doppler Error: This token does not have access to requested config 'staging'

  with module.doppler_aws_secrets.doppler_secret.secrets["DISABLE_MERCURY_CLEANUP"],
  on ../../modules/doppler-aws-secrets/main.tf line 144, in resource "doppler_secret" "secrets":
 144: resource "doppler_secret" "secrets" {


Error: Doppler Error: This token does not have access to requested config 'staging'

  with module.doppler_aws_secrets.doppler_secret.secrets["AZURE_OPENAI_SUBSCRIPTION_KEY"],
  on ../../modules/doppler-aws-secrets/main.tf line 144, in resource "doppler_secret" "secrets":
 144: resource "doppler_secret" "secrets" {


Error: Doppler Error: This token does not have access to requested config 'staging'

  with module.doppler_aws_secrets.doppler_secret.secrets["DEEPSEEK_API_KEY"],
  on ../../modules/doppler-aws-secrets/main.tf line 144, in resource "doppler_secret" "secrets":
 144: resource "doppler_secret" "secrets" {


Error: Doppler Error: This token does not have access to requested config 'staging'

  with module.doppler_aws_secrets.doppler_secret.secrets["THERMOS_PORT"],
  on ../../modules/doppler-aws-secrets/main.tf line 144, in resource "doppler_secret" "secrets":
 144: resource "doppler_secret" "secrets" {


Error: Doppler Error: This token does not have access to requested config 'staging'

  with module.doppler_aws_secrets.doppler_secret.secrets["LANGSMITH_TRACING"],
  on ../../modules/doppler-aws-secrets/main.tf line 144, in resource "doppler_secret" "secrets":
 144: resource "doppler_secret" "secrets" {


Error: Doppler Error: This token does not have access to requested config 'staging'

  with module.doppler_aws_secrets.doppler_secret.secrets["COMPOSIO_STAGING_API_KEY"],
  on ../../modules/doppler-aws-secrets/main.tf line 144, in resource "doppler_secret" "secrets":
 144: resource "doppler_secret" "secrets" {


Error: Doppler Error: This token does not have access to requested config 'staging'

  with module.doppler_aws_secrets.doppler_secret.secrets["ENCRYPTION_KEY"],
  on ../../modules/doppler-aws-secrets/main.tf line 144, in resource "doppler_secret" "secrets":
 144: resource "doppler_secret" "secrets" {


Error: Doppler Error: This token does not have access to requested config 'staging'

  with module.doppler_aws_secrets.doppler_secret.secrets["OPENAI_API_KEY"],
  on ../../modules/doppler-aws-secrets/main.tf line 144, in resource "doppler_secret" "secrets":
 144: resource "doppler_secret" "secrets" {


Error: Doppler Error: This token does not have access to requested config 'staging'

  with module.doppler_aws_secrets.doppler_secret.secrets["COMPOSIO_SEATGEEK_KEY"],
  on ../../modules/doppler-aws-secrets/main.tf line 144, in resource "doppler_secret" "secrets":
 144: resource "doppler_secret" "secrets" {


Error: Doppler Error: This token does not have access to requested config 'staging'

  with module.doppler_aws_secrets.doppler_secret.secrets["TWITTER_API_KEY"],
  on ../../modules/doppler-aws-secrets/main.tf line 144, in resource "doppler_secret" "secrets":
 144: resource "doppler_secret" "secrets" {


Error: Doppler Error: This token does not have access to requested config 'staging'

  with module.doppler_aws_secrets.doppler_secret.secrets["PIPEDREAM_PATH"],
  on ../../modules/doppler-aws-secrets/main.tf line 144, in resource "doppler_secret" "secrets":
 144: resource "doppler_secret" "secrets" {


Error: Doppler Error: This token does not have access to requested config 'staging'

  with module.doppler_aws_secrets.doppler_secret.secrets["BRANDFETCH_API_KEY"],
  on ../../modules/doppler-aws-secrets/main.tf line 144, in resource "doppler_secret" "secrets":
 144: resource "doppler_secret" "secrets" {


Error: Doppler Error: This token does not have access to requested config 'staging'

  with module.doppler_aws_secrets.doppler_secret.secrets["FIRECRAWL_API_KEY"],
  on ../../modules/doppler-aws-secrets/main.tf line 144, in resource "doppler_secret" "secrets":
 144: resource "doppler_secret" "secrets" {


Error: Doppler Error: This token does not have access to requested config 'staging'

  with module.doppler_aws_secrets.doppler_secret.secrets["WATCHDOG_BATCH_POLLER_DISABLED"],
  on ../../modules/doppler-aws-secrets/main.tf line 144, in resource "doppler_secret" "secrets":
 144: resource "doppler_secret" "secrets" {


Error: Doppler Error: This token does not have access to requested config 'staging'

  with module.doppler_aws_secrets.doppler_secret.secrets["TWITTER_API_SECRET"],
  on ../../modules/doppler-aws-secrets/main.tf line 144, in resource "doppler_secret" "secrets":
 144: resource "doppler_secret" "secrets" {


Error: Doppler Error: This token does not have access to requested config 'staging'

  with module.doppler_aws_secrets.doppler_secret.secrets["STATSD_METRICS_FLUSH_WAIT_TIME_SECS"],
  on ../../modules/doppler-aws-secrets/main.tf line 144, in resource "doppler_secret" "secrets":
 144: resource "doppler_secret" "secrets" {


Error: Doppler Error: This token does not have access to requested config 'staging'

  with module.doppler_aws_secrets.doppler_secret.secrets["SLACK_BOT_TOKEN"],
  on ../../modules/doppler-aws-secrets/main.tf line 144, in resource "doppler_secret" "secrets":
 144: resource "doppler_secret" "secrets" {


Error: Doppler Error: This token does not have access to requested config 'staging'

  with module.doppler_aws_secrets.doppler_secret.secrets["GH_WEBHOOK_SECRET"],
  on ../../modules/doppler-aws-secrets/main.tf line 144, in resource "doppler_secret" "secrets":
 144: resource "doppler_secret" "secrets" {


Error: Doppler Error: This token does not have access to requested config 'staging'

  with module.doppler_aws_secrets.doppler_secret.secrets["COMPOSIO_API_KEY"],
  on ../../modules/doppler-aws-secrets/main.tf line 144, in resource "doppler_secret" "secrets":
 144: resource "doppler_secret" "secrets" {


Error: Doppler Error: This token does not have access to requested config 'staging'

  with module.doppler_aws_secrets.doppler_secret.secrets["VERCEL_AI_GATEWAY_API_KEY"],
  on ../../modules/doppler-aws-secrets/main.tf line 144, in resource "doppler_secret" "secrets":
 144: resource "doppler_secret" "secrets" {


Error: Doppler Error: This token does not have access to requested config 'staging'

  with module.doppler_aws_secrets.doppler_secret.secrets["DD_APP_KEY"],
  on ../../modules/doppler-aws-secrets/main.tf line 144, in resource "doppler_secret" "secrets":
 144: resource "doppler_secret" "secrets" {


Error: Doppler Error: This token does not have access to requested config 'staging'

  with module.doppler_aws_secrets.doppler_secret.secrets["USE_APOLLO_GET_DOWNLOAD_URL_API"],
  on ../../modules/doppler-aws-secrets/main.tf line 144, in resource "doppler_secret" "secrets":
 144: resource "doppler_secret" "secrets" {


Error: Doppler Error: This token does not have access to requested config 'staging'

  with module.doppler_aws_secrets.doppler_secret.secrets["COMPOSIO_TAVILY_API_KEY"],
  on ../../modules/doppler-aws-secrets/main.tf line 144, in resource "doppler_secret" "secrets":
 144: resource "doppler_secret" "secrets" {


Error: Doppler Error: This token does not have access to requested config 'staging'

  with module.doppler_aws_secrets.doppler_secret.secrets["LANGSMITH_API_KEY"],
  on ../../modules/doppler-aws-secrets/main.tf line 144, in resource "doppler_secret" "secrets":
 144: resource "doppler_secret" "secrets" {


Error: Doppler Error: This token does not have access to requested config 'staging'

  with module.doppler_aws_secrets.doppler_secret.secrets["ANTHROPIC_API_KEY"],
  on ../../modules/doppler-aws-secrets/main.tf line 144, in resource "doppler_secret" "secrets":
 144: resource "doppler_secret" "secrets" {


Error: Doppler Error: This token does not have access to requested config 'staging'

  with module.doppler_aws_secrets.doppler_secret.secrets["GITHUB_REVIEWER_TOKEN"],
  on ../../modules/doppler-aws-secrets/main.tf line 144, in resource "doppler_secret" "secrets":
 144: resource "doppler_secret" "secrets" {


Error: Doppler Error: This token does not have access to requested config 'staging'

  with module.doppler_aws_secrets.doppler_secret.secrets["LANGSMITH_ENDPOINT"],
  on ../../modules/doppler-aws-secrets/main.tf line 144, in resource "doppler_secret" "secrets":
 144: resource "doppler_secret" "secrets" {


Error: Doppler Error: This token does not have access to requested config 'staging'

  with module.doppler_aws_secrets.doppler_secret.secrets["COMPOSIO_ADMIN_TOKEN"],
  on ../../modules/doppler-aws-secrets/main.tf line 144, in resource "doppler_secret" "secrets":
 144: resource "doppler_secret" "secrets" {


Error: Doppler Error: This token does not have access to requested config 'staging'

  with module.doppler_aws_secrets.doppler_secret.secrets["AZURE_OPENAI_ENDPOINT_URL"],
  on ../../modules/doppler-aws-secrets/main.tf line 144, in resource "doppler_secret" "secrets":
 144: resource "doppler_secret" "secrets" {


Error: Doppler Error: This token does not have access to requested config 'staging'

  with module.doppler_aws_secrets.doppler_secret.secrets["COMPOSIO_SERPAPI_API_KEY"],
  on ../../modules/doppler-aws-secrets/main.tf line 144, in resource "doppler_secret" "secrets":
 144: resource "doppler_secret" "secrets" {


Error: Doppler Error: This token does not have access to requested config 'staging'

  with module.doppler_aws_secrets.doppler_secret.secrets["CLICKHOUSE_USERNAME"],
  on ../../modules/doppler-aws-secrets/main.tf line 144, in resource "doppler_secret" "secrets":
 144: resource "doppler_secret" "secrets" {


Error: Doppler Error: This token does not have access to requested config 'staging'

  with module.doppler_aws_secrets.doppler_secret.secrets["KIMI_API_KEY"],
  on ../../modules/doppler-aws-secrets/main.tf line 144, in resource "doppler_secret" "secrets":
 144: resource "doppler_secret" "secrets" {


Error: Doppler Error: This token does not have access to requested config 'staging'

  with module.doppler_aws_secrets.doppler_secret.secrets["COMPOSIO_GEMINI_API_KEY"],
  on ../../modules/doppler-aws-secrets/main.tf line 144, in resource "doppler_secret" "secrets":
 144: resource "doppler_secret" "secrets" {


Error: Doppler Error: This token does not have access to requested config 'staging'

  with module.doppler_aws_secrets.doppler_secret.secrets["APOLLO_URL"],
  on ../../modules/doppler-aws-secrets/main.tf line 144, in resource "doppler_secret" "secrets":
 144: resource "doppler_secret" "secrets" {


Error: Doppler Error: This token does not have access to requested config 'staging'

  with module.doppler_aws_secrets.doppler_secret.secrets["THERMOS_DATABASE"],
  on ../../modules/doppler-aws-secrets/main.tf line 144, in resource "doppler_secret" "secrets":
 144: resource "doppler_secret" "secrets" {


Error: Doppler Error: This token does not have access to requested config 'staging'

  with module.doppler_aws_secrets.doppler_secret.secrets["DD_API_KEY"],
  on ../../modules/doppler-aws-secrets/main.tf line 144, in resource "doppler_secret" "secrets":
 144: resource "doppler_secret" "secrets" {


Error: Doppler Error: This token does not have access to requested config 'staging'

  with module.doppler_aws_secrets.doppler_secret.secrets["MINIMAX_API_KEY"],
  on ../../modules/doppler-aws-secrets/main.tf line 144, in resource "doppler_secret" "secrets":
 144: resource "doppler_secret" "secrets" {


Error: Doppler Error: This token does not have access to requested config 'staging'

  with module.doppler_aws_secrets.doppler_secret.secrets["TEST_CONNECTION_ID"],
  on ../../modules/doppler-aws-secrets/main.tf line 144, in resource "doppler_secret" "secrets":
 144: resource "doppler_secret" "secrets" {


Error: Doppler Error: This token does not have access to requested config 'staging'

  with module.doppler_aws_secrets.doppler_secret.secrets["ANCHOR_API_KEY"],
  on ../../modules/doppler-aws-secrets/main.tf line 144, in resource "doppler_secret" "secrets":
 144: resource "doppler_secret" "secrets" {


Error: Doppler Error: This token does not have access to requested config 'staging'

  with module.doppler_aws_secrets.doppler_secret.secrets["THERMOS_USERNAME"],
  on ../../modules/doppler-aws-secrets/main.tf line 144, in resource "doppler_secret" "secrets":
 144: resource "doppler_secret" "secrets" {


Error: Doppler Error: This token does not have access to requested config 'staging'

  with module.doppler_aws_secrets.doppler_secret.secrets["ZAPIER_PATH"],
  on ../../modules/doppler-aws-secrets/main.tf line 144, in resource "doppler_secret" "secrets":
 144: resource "doppler_secret" "secrets" {


Error: Doppler Error: This token does not have access to requested config 'staging'

  with module.doppler_aws_secrets.doppler_secret.secrets["COMPOSIO_YELP_API_KEY"],
  on ../../modules/doppler-aws-secrets/main.tf line 144, in resource "doppler_secret" "secrets":
 144: resource "doppler_secret" "secrets" {


Error: Doppler Error: This token does not have access to requested config 'staging'

  with module.doppler_aws_secrets.doppler_secret.secrets["THERMOS_PASSWORD"],
  on ../../modules/doppler-aws-secrets/main.tf line 144, in resource "doppler_secret" "secrets":
 144: resource "doppler_secret" "secrets" {


Error: Doppler Error: This token does not have access to requested config 'staging'

  with module.doppler_aws_secrets.doppler_secret.secrets["PYTHONPATH"],
  on ../../modules/doppler-aws-secrets/main.tf line 144, in resource "doppler_secret" "secrets":
 144: resource "doppler_secret" "secrets" {


Error: Doppler Error: This token does not have access to requested config 'staging'

  with module.doppler_aws_secrets.doppler_secret.secrets["Z_AI_API_KEY"],
  on ../../modules/doppler-aws-secrets/main.tf line 144, in resource "doppler_secret" "secrets":
 144: resource "doppler_secret" "secrets" {


Error: Doppler Error: This token does not have access to requested config 'staging'

  with module.doppler_aws_secrets.doppler_secret.secrets["TOOLS_DATABASE_URL"],
  on ../../modules/doppler-aws-secrets/main.tf line 144, in resource "doppler_secret" "secrets":
 144: resource "doppler_secret" "secrets" {


Error: Doppler Error: This token does not have access to requested config 'staging'

  with module.doppler_aws_secrets.doppler_secret.secrets["GITHUB_ACCESS_TOKEN"],
  on ../../modules/doppler-aws-secrets/main.tf line 144, in resource "doppler_secret" "secrets":
 144: resource "doppler_secret" "secrets" {


Error: Doppler Error: This token does not have access to requested config 'staging'

  with module.doppler_aws_secrets.doppler_secret.secrets["PERPLEXITY_API_KEY"],
  on ../../modules/doppler-aws-secrets/main.tf line 144, in resource "doppler_secret" "secrets":
 144: resource "doppler_secret" "secrets" {


Error: Doppler Error: This token does not have access to requested config 'staging'

  with module.doppler_aws_secrets.doppler_secret.secrets["COMPOSIO_WEBHOOK_SECRET"],
  on ../../modules/doppler-aws-secrets/main.tf line 144, in resource "doppler_secret" "secrets":
 144: resource "doppler_secret" "secrets" {


Error: Doppler Error: This token does not have access to requested config 'staging'

  with module.doppler_aws_secrets.doppler_secret.secrets["NOTION_API_KEY"],
  on ../../modules/doppler-aws-secrets/main.tf line 144, in resource "doppler_secret" "secrets":
 144: resource "doppler_secret" "secrets" {


Error: Doppler Error: This token does not have access to requested config 'staging'

  with module.doppler_aws_secrets.doppler_secret.secrets["HELICONE_API_KEY"],
  on ../../modules/doppler-aws-secrets/main.tf line 144, in resource "doppler_secret" "secrets":
 144: resource "doppler_secret" "secrets" {


Error: Doppler Error: This token does not have access to requested config 'staging'

  with module.doppler_aws_secrets.doppler_secret.secrets["LINEAR_API_KEY"],
  on ../../modules/doppler-aws-secrets/main.tf line 144, in resource "doppler_secret" "secrets":
 144: resource "doppler_secret" "secrets" {


Error: Doppler Error: This token does not have access to requested config 'staging'

  with module.doppler_aws_secrets.doppler_secret.secrets["COMPOSIO_EXA_API_KEY"],
  on ../../modules/doppler-aws-secrets/main.tf line 144, in resource "doppler_secret" "secrets":
 144: resource "doppler_secret" "secrets" {


Error: Doppler Error: This token does not have access to requested config 'staging'

  with module.doppler_aws_secrets.doppler_secret.secrets["COMPOSIO_STAGING_ADMIN_TOKEN"],
  on ../../modules/doppler-aws-secrets/main.tf line 144, in resource "doppler_secret" "secrets":
 144: resource "doppler_secret" "secrets" {


Error: Doppler Error: This token does not have access to requested config 'staging'

  with module.doppler_aws_secrets.doppler_secret.secrets["BACKEND_READONLY_URL"],
  on ../../modules/doppler-aws-secrets/main.tf line 144, in resource "doppler_secret" "secrets":
 144: resource "doppler_secret" "secrets" {


Error: Doppler Error: This token does not have access to requested config 'staging'

  with module.doppler_aws_secrets.doppler_secret.secrets["COMPOSIO_INSTACART_API_KEY"],
  on ../../modules/doppler-aws-secrets/main.tf line 144, in resource "doppler_secret" "secrets":
 144: resource "doppler_secret" "secrets" {


Error: Doppler Error: This token does not have access to requested config 'staging'

  with module.doppler_aws_secrets.doppler_secret.secrets["APOLLO_ADMIN_TOKEN"],
  on ../../modules/doppler-aws-secrets/main.tf line 144, in resource "doppler_secret" "secrets":
 144: resource "doppler_secret" "secrets" {


Error: Doppler Error: This token does not have access to requested config 'staging'

  with module.doppler_aws_secrets.doppler_secret.secrets["CLICKHOUSE_PASSWORD"],
  on ../../modules/doppler-aws-secrets/main.tf line 144, in resource "doppler_secret" "secrets":
 144: resource "doppler_secret" "secrets" {


Error: Doppler Error: This token does not have access to requested config 'staging'

  with module.doppler_aws_secrets.doppler_secret.secrets["MERCURY_AUTOLOAD"],
  on ../../modules/doppler-aws-secrets/main.tf line 144, in resource "doppler_secret" "secrets":
 144: resource "doppler_secret" "secrets" {


Error: Doppler Error: This token does not have access to requested config 'staging'

  with module.doppler_aws_secrets.doppler_secret.secrets["WATCHDOG_MAX_FIXERS_PER_DAY"],
  on ../../modules/doppler-aws-secrets/main.tf line 144, in resource "doppler_secret" "secrets":
 144: resource "doppler_secret" "secrets" {


Error: Doppler Error: This token does not have access to requested config 'staging'

  with module.doppler_aws_secrets.doppler_secret.secrets["Z_AI_BASE_URL"],
  on ../../modules/doppler-aws-secrets/main.tf line 144, in resource "doppler_secret" "secrets":
 144: resource "doppler_secret" "secrets" {


Error: Doppler Error: This token does not have access to requested config 'staging'

  with module.doppler_aws_secrets.doppler_secret.secrets["THERMOS_HOST"],
  on ../../modules/doppler-aws-secrets/main.tf line 144, in resource "doppler_secret" "secrets":
 144: resource "doppler_secret" "secrets" {


Error: Doppler Error: This token does not have access to requested config 'staging'

  with module.doppler_aws_secrets.doppler_secret.secrets["GROQ_API_KEY"],
  on ../../modules/doppler-aws-secrets/main.tf line 144, in resource "doppler_secret" "secrets":
 144: resource "doppler_secret" "secrets" {

loading diff…

@github-actions[bot]2w ago

❌ Terraform Plan: Staging

data.terraform_remote_state.prod: Reading...
module.doppler_aws_secrets.doppler_environment.config: Refreshing state... [id=integrator.staging]
module.rds.random_password.master[0]: Refreshing state... [id=none]
module.github_actions_role.data.tls_certificate.github: Reading...
module.doppler_aws_secrets.data.external.env_vars: Reading...
module.rds.random_password.readonly[0]: Refreshing state... [id=none]
module.github_actions_role.data.tls_certificate.github: Read complete after 0s [id=96abb9379db1afc8a8677b8d4e606d3560ca4114]
module.artifacts_bucket.aws_s3_bucket.this: Refreshing state... [id=integrator-artifacts-staging]
module.ecs_api.aws_cloudwatch_log_group.migrations_logs: Refreshing state... [id=/ecs/integrator/staging/migrations]
data.aws_caller_identity.current: Reading...
module.private_subnets.data.aws_vpc.default: Reading...
module.ecs_api.data.aws_ecr_repository.api[0]: Reading...
module.ecs_api.data.aws_ecs_cluster.default: Reading...
module.rds.aws_secretsmanager_secret.readonly_password[0]: Refreshing state... [id=integrator/staging/rds-readonly-password]
data.aws_iam_openid_connect_provider.github: Reading...
data.aws_caller_identity.current: Read complete after 0s [id=256586139593]
module.rds.aws_secretsmanager_secret.master_password[0]: Refreshing state... [id=arn:aws:secretsmanager:us-east-1:256586139593:secret:integrator/staging/rds-master-password-4QWym0]
module.ecs_api.aws_s3_bucket.alb_logs[0]: Refreshing state... [id=integrator-staging-alb-logs]
module.ecs_api.aws_iam_policy.ecs_exec: Refreshing state... [id=arn:aws:iam::256586139593:policy/integrator-staging-api-ecs-exec-policy]
module.doppler_aws_secrets.data.external.env_vars: Read complete after 0s [id=-]
module.ecs_api.aws_iam_role.api_task_execution: Refreshing state... [id=integrator-staging-api-task-execution-role]
module.ecs_api.data.aws_ecs_cluster.default: Read complete after 0s [id=arn:aws:ecs:us-east-1:256586139593:cluster/default]
module.ecs_api.aws_s3_bucket.migrations: Refreshing state... [id=integrator-staging-migrations]
data.aws_iam_openid_connect_provider.github: Read complete after 0s [id=arn:aws:iam::256586139593:oidc-provider/token.actions.githubusercontent.com]
module.ecs_api.data.aws_vpc.selected: Reading...
module.ecs_api.aws_iam_role.migrations_lambda: Refreshing state... [id=integrator-staging-migrations-lambda-role]
module.github_actions_role.data.aws_caller_identity.current: Reading...
module.github_actions_role.data.aws_caller_identity.current: Read complete after 0s [id=256586139593]
module.rds.data.aws_region.current: Reading...
module.rds.data.aws_region.current: Read complete after 0s [id=us-east-1]
module.ai_agent_debugging_role.data.aws_caller_identity.current: Reading...
module.ai_agent_debugging_role.data.aws_caller_identity.current: Read complete after 0s [id=256586139593]
module.bedrock_profiles.data.aws_region.current: Reading...
module.bedrock_profiles.data.aws_region.current: Read complete after 0s [id=us-east-1]
data.aws_vpc.default: Reading...
module.ecs_api.data.aws_elb_service_account.main: Reading...
module.ecs_api.data.aws_elb_service_account.main: Read complete after 0s [id=127311923021]
module.ecs_api.data.aws_ecr_repository.api[0]: Read complete after 0s [id=integrator-api]
module.private_subnets.data.aws_availability_zones.available: Reading...
module.rds.aws_db_parameter_group.main: Refreshing state... [id=integrator-staging-postgres-20251121173128166300000001]
data.terraform_remote_state.prod: Read complete after 1s
module.ecs_api.aws_cloudwatch_log_group.migrations_lambda_logs: Refreshing state... [id=/aws/lambda/integrator-staging-migrations]
module.private_subnets.data.aws_availability_zones.available: Read complete after 1s [id=us-east-1]
module.doppler_aws_secrets.aws_iam_policy.doppler_secrets_manager: Refreshing state... [id=arn:aws:iam::256586139593:policy/integrator-staging-doppler-secrets-manager-policy]
module.ecs_api.data.aws_caller_identity.current: Reading...
module.doppler_aws_secrets.aws_iam_role.doppler_secrets_manager: Refreshing state... [id=integrator-staging-doppler-secrets-manager-role]
module.ecs_api.data.aws_caller_identity.current: Read complete after 0s [id=256586139593]
module.ecs_api.aws_cloudwatch_log_group.api_logs: Refreshing state... [id=/ecs/integrator/staging/api]
module.private_subnets.data.aws_vpc.default: Read complete after 1s [id=vpc-0529dea5160deb846]
module.ecs_api.aws_cloudwatch_log_group.poller_logs: Refreshing state... [id=/ecs/integrator/staging/poller]
module.knowledge_bucket.aws_s3_bucket.this: Refreshing state... [id=integrator-knowledge-staging]
module.ecs_api.aws_iam_role.api_task: Refreshing state... [id=integrator-staging-api-task-role]
module.ecs_api.data.aws_vpc.selected: Read complete after 1s [id=vpc-0529dea5160deb846]
module.rds.aws_secretsmanager_secret_version.readonly_password[0]: Refreshing state... [id=integrator/staging/rds-readonly-password|terraform-20260115132739255000000001]
module.rds.aws_secretsmanager_secret_version.master_password[0]: Refreshing state... [id=arn:aws:secretsmanager:us-east-1:256586139593:secret:integrator/staging/rds-master-password-4QWym0|terraform-20251128130346365300000002]
module.ecs_api.aws_iam_role_policy_attachment.api_task_execution: Refreshing state... [id=integrator-staging-api-task-execution-role-20251121173131958900000005]
module.ecs_api.aws_iam_role_policy_attachment.migrations_lambda_basic: Refreshing state... [id=integrator-staging-migrations-lambda-role-20260204171019948100000001]
module.ai_agent_debugging_role.aws_iam_role.ai_agent_debugging: Refreshing state... [id=integrator-ai-agent-debugging-staging]
module.ecs_api.aws_iam_role_policy_attachment.migrations_lambda_vpc: Refreshing state... [id=integrator-staging-migrations-lambda-role-20260204171019948800000002]
module.ecs_api.aws_iam_policy.bedrock_access: Refreshing state... [id=arn:aws:iam::256586139593:policy/integrator-staging-api-bedrock-access]
data.aws_vpc.default: Read complete after 1s [id=vpc-0529dea5160deb846]
module.artifacts_bucket.aws_s3_bucket_lifecycle_configuration.this: Refreshing state... [id=integrator-artifacts-staging]
module.artifacts_bucket.aws_s3_bucket_server_side_encryption_configuration.this: Refreshing state... [id=integrator-artifacts-staging]
module.artifacts_bucket.aws_s3_bucket_public_access_block.this: Refreshing state... [id=integrator-artifacts-staging]
module.ecs_api.aws_security_group.alb: Refreshing state... [id=sg-0f268d8e0027eaad9]
module.ecs_api.aws_lb_target_group.api: Refreshing state... [id=arn:aws:elasticloadbalancing:us-east-1:256586139593:targetgroup/integrator-staging-api-tg/4ebc38c1a3c18f91]
module.ecs_api.data.aws_subnets.public: Reading...
module.github_actions_role.aws_iam_role.github_actions: Refreshing state... [id=integrator-github-actions-staging]
module.doppler_aws_secrets.doppler_secret.secrets["THERMOS_USERNAME"]: Refreshing state... [id=integrator.staging.THERMOS_USERNAME]
module.doppler_aws_secrets.doppler_secret.secrets["THERMOS_DATABASE"]: Refreshing state... [id=integrator.staging.THERMOS_DATABASE]
module.doppler_aws_secrets.doppler_secret.secrets["DD_API_KEY"]: Refreshing state... [id=integrator.staging.DD_API_KEY]
module.ecs_api.data.aws_subnets.public: Read complete after 0s [id=us-east-1]
module.doppler_aws_secrets.doppler_secret.secrets["THERMOS_PORT"]: Refreshing state... [id=integrator.staging.THERMOS_PORT]
module.doppler_aws_secrets.doppler_secret.secrets["CLICKHOUSE_USERNAME"]: Refreshing state... [id=integrator.staging.CLICKHOUSE_USERNAME]
module.doppler_aws_secrets.doppler_secret.secrets["COMPOSIO_WEBHOOK_SECRET"]: Refreshing state... [id=integrator.staging.COMPOSIO_WEBHOOK_SECRET]
module.doppler_aws_secrets.doppler_secret.secrets["MERCURY_AUTOLOAD"]: Refreshing state... [id=integrator.staging.MERCURY_AUTOLOAD]
module.doppler_aws_secrets.doppler_secret.secrets["PIPEDREAM_PATH"]: Refreshing state... [id=integrator.staging.PIPEDREAM_PATH]
module.doppler_aws_secrets.doppler_secret.secrets["DISABLE_MERCURY_CLEANUP"]: Refreshing state... [id=integrator.staging.DISABLE_MERCURY_CLEANUP]
module.doppler_aws_secrets.doppler_secret.secrets["USE_APOLLO_GET_DOWNLOAD_URL_API"]: Refreshing state... [id=integrator.staging.USE_APOLLO_GET_DOWNLOAD_URL_API]
module.doppler_aws_secrets.doppler_secret.secrets["WATCHDOG_MAX_FIXERS_PER_DAY"]: Refreshing state... [id=integrator.staging.WATCHDOG_MAX_FIXERS_PER_DAY]
module.doppler_aws_secrets.doppler_secret.secrets["ZAPIER_PATH"]: Refreshing state... [id=integrator.staging.ZAPIER_PATH]
module.doppler_aws_secrets.doppler_secret.secrets["GH_WEBHOOK_SECRET"]: Refreshing state... [id=integrator.staging.GH_WEBHOOK_SECRET]
module.doppler_aws_secrets.doppler_secret.secrets["SLACK_BOT_TOKEN"]: Refreshing state... [id=integrator.staging.SLACK_BOT_TOKEN]
module.doppler_aws_secrets.doppler_secret.secrets["KIMI_API_KEY"]: Refreshing state... [id=integrator.staging.KIMI_API_KEY]
module.doppler_aws_secrets.doppler_secret.secrets["BRANDFETCH_API_KEY"]: Refreshing state... [id=integrator.staging.BRANDFETCH_API_KEY]
module.doppler_aws_secrets.doppler_secret.secrets["LINEAR_API_KEY"]: Refreshing state... [id=integrator.staging.LINEAR_API_KEY]
module.doppler_aws_secrets.doppler_secret.secrets["COMPOSIO_TAVILY_API_KEY"]: Refreshing state... [id=integrator.staging.COMPOSIO_TAVILY_API_KEY]
module.doppler_aws_secrets.doppler_secret.secrets["Z_AI_BASE_URL"]: Refreshing state... [id=integrator.staging.Z_AI_BASE_URL]
module.doppler_aws_secrets.doppler_secret.secrets["COMPOSIO_EXA_API_KEY"]: Refreshing state... [id=integrator.staging.COMPOSIO_EXA_API_KEY]
module.doppler_aws_secrets.doppler_secret.secrets["GITHUB_ACCESS_TOKEN"]: Refreshing state... [id=integrator.staging.GITHUB_ACCESS_TOKEN]
module.doppler_aws_secrets.doppler_secret.secrets["PERPLEXITY_API_KEY"]: Refreshing state... [id=integrator.staging.PERPLEXITY_API_KEY]
module.doppler_aws_secrets.doppler_secret.secrets["MINIMAX_API_KEY"]: Refreshing state... [id=integrator.staging.MINIMAX_API_KEY]
module.doppler_aws_secrets.doppler_secret.secrets["TOOLS_DATABASE_URL"]: Refreshing state... [id=integrator.staging.TOOLS_DATABASE_URL]
module.doppler_aws_secrets.doppler_secret.secrets["NOTION_API_KEY"]: Refreshing state... [id=integrator.staging.NOTION_API_KEY]
module.doppler_aws_secrets.doppler_secret.secrets["FIRECRAWL_API_KEY"]: Refreshing state... [id=integrator.staging.FIRECRAWL_API_KEY]
module.doppler_aws_secrets.doppler_secret.secrets["COMPOSIO_YELP_API_KEY"]: Refreshing state... [id=integrator.staging.COMPOSIO_YELP_API_KEY]
module.doppler_aws_secrets.doppler_secret.secrets["COMPOSIO_STAGING_API_KEY"]: Refreshing state... [id=integrator.staging.COMPOSIO_STAGING_API_KEY]
module.doppler_aws_secrets.doppler_secret.secrets["LANGSMITH_API_KEY"]: Refreshing state... [id=integrator.staging.LANGSMITH_API_KEY]
module.doppler_aws_secrets.doppler_secret.secrets["THERMOS_PASSWORD"]: Refreshing state... [id=integrator.staging.THERMOS_PASSWORD]
module.doppler_aws_secrets.doppler_secret.secrets["ENCRYPTION_KEY"]: Refreshing state... [id=integrator.staging.ENCRYPTION_KEY]
module.doppler_aws_secrets.doppler_secret.secrets["COMPOSIO_GEMINI_API_KEY"]: Refreshing state... [id=integrator.staging.COMPOSIO_GEMINI_API_KEY]
module.doppler_aws_secrets.doppler_secret.secrets["ANTHROPIC_API_KEY"]: Refreshing state... [id=integrator.staging.ANTHROPIC_API_KEY]
module.doppler_aws_secrets.doppler_secret.secrets["WATCHDOG_BATCH_POLLER_DISABLED"]: Refreshing state... [id=integrator.staging.WATCHDOG_BATCH_POLLER_DISABLED]
module.doppler_aws_secrets.doppler_secret.secrets["OPENAI_API_KEY"]: Refreshing state... [id=integrator.staging.OPENAI_API_KEY]
module.doppler_aws_secrets.doppler_secret.secrets["PYTHONPATH"]: Refreshing state... [id=integrator.staging.PYTHONPATH]
module.doppler_aws_secrets.doppler_secret.secrets["LANGSMITH_ENDPOINT"]: Refreshing state... [id=integrator.staging.LANGSMITH_ENDPOINT]
module.doppler_aws_secrets.doppler_secret.secrets["LANGSMITH_TRACING"]: Refreshing state... [id=integrator.staging.LANGSMITH_TRACING]
module.doppler_aws_secrets.doppler_secret.secrets["CLICKHOUSE_PASSWORD"]: Refreshing state... [id=integrator.staging.CLICKHOUSE_PASSWORD]
module.doppler_aws_secrets.doppler_secret.secrets["GITHUB_REVIEWER_TOKEN"]: Refreshing state... [id=integrator.staging.GITHUB_REVIEWER_TOKEN]
module.doppler_aws_secrets.doppler_secret.secrets["TWITTER_API_SECRET"]: Refreshing state... [id=integrator.staging.TWITTER_API_SECRET]
module.doppler_aws_secrets.doppler_secret.secrets["COMPOSIO_ADMIN_TOKEN"]: Refreshing state... [id=integrator.staging.COMPOSIO_ADMIN_TOKEN]
module.doppler_aws_secrets.doppler_secret.secrets["HELICONE_API_KEY"]: Refreshing state... [id=integrator.staging.HELICONE_API_KEY]
module.doppler_aws_secrets.doppler_secret.secrets["STATSD_METRICS_FLUSH_WAIT_TIME_SECS"]: Refreshing state... [id=integrator.staging.STATSD_METRICS_FLUSH_WAIT_TIME_SECS]
module.doppler_aws_secrets.doppler_secret.secrets["AZURE_OPENAI_SUBSCRIPTION_KEY"]: Refreshing state... [id=integrator.staging.AZURE_OPENAI_SUBSCRIPTION_KEY]
module.doppler_aws_secrets.doppler_secret.secrets["COMPOSIO_API_KEY"]: Refreshing state... [id=integrator.staging.COMPOSIO_API_KEY]
module.doppler_aws_secrets.doppler_secret.secrets["COMPOSIO_STAGING_ADMIN_TOKEN"]: Refreshing state... [id=integrator.staging.COMPOSIO_STAGING_ADMIN_TOKEN]
module.doppler_aws_secrets.doppler_secret.secrets["APOLLO_URL"]: Refreshing state... [id=integrator.staging.APOLLO_URL]
module.doppler_aws_secrets.doppler_secret.secrets["BACKEND_READONLY_URL"]: Refreshing state... [id=integrator.staging.BACKEND_READONLY_URL]
module.doppler_aws_secrets.doppler_secret.secrets["THERMOS_HOST"]: Refreshing state... [id=integrator.staging.THERMOS_HOST]
module.doppler_aws_secrets.doppler_secret.secrets["Z_AI_API_KEY"]: Refreshing state... [id=integrator.staging.Z_AI_API_KEY]
module.doppler_aws_secrets.doppler_secret.secrets["DEEPSEEK_API_KEY"]: Refreshing state... [id=integrator.staging.DEEPSEEK_API_KEY]
module.doppler_aws_secrets.doppler_secret.secrets["AZURE_OPENAI_ENDPOINT_URL"]: Refreshing state... [id=integrator.staging.AZURE_OPENAI_ENDPOINT_URL]
module.doppler_aws_secrets.doppler_secret.secrets["TEST_CONNECTION_ID"]: Refreshing state... [id=integrator.staging.TEST_CONNECTION_ID]
module.doppler_aws_secrets.doppler_secret.secrets["GROQ_API_KEY"]: Refreshing state... [id=integrator.staging.GROQ_API_KEY]
module.doppler_aws_secrets.doppler_secret.secrets["COMPOSIO_INSTACART_API_KEY"]: Refreshing state... [id=integrator.staging.COMPOSIO_INSTACART_API_KEY]
module.doppler_aws_secrets.doppler_secret.secrets["COMPOSIO_SERPAPI_API_KEY"]: Refreshing state... [id=integrator.staging.COMPOSIO_SERPAPI_API_KEY]
module.doppler_aws_secrets.doppler_secret.secrets["COMPOSIO_SEATGEEK_KEY"]: Refreshing state... [id=integrator.staging.COMPOSIO_SEATGEEK_KEY]
module.doppler_aws_secrets.doppler_secret.secrets["APOLLO_ADMIN_TOKEN"]: Refreshing state... [id=integrator.staging.APOLLO_ADMIN_TOKEN]
module.doppler_aws_secrets.doppler_secret.secrets["DD_APP_KEY"]: Refreshing state... [id=integrator.staging.DD_APP_KEY]
module.doppler_aws_secrets.doppler_secret.secrets["VERCEL_AI_GATEWAY_API_KEY"]: Refreshing state... [id=integrator.staging.VERCEL_AI_GATEWAY_API_KEY]
module.doppler_aws_secrets.doppler_secret.secrets["TWITTER_API_KEY"]: Refreshing state... [id=integrator.staging.TWITTER_API_KEY]
module.doppler_aws_secrets.doppler_secret.secrets["ANCHOR_API_KEY"]: Refreshing state... [id=integrator.staging.ANCHOR_API_KEY]
module.bedrock_profiles.aws_bedrock_inference_profile.haiku: Refreshing state... [id=71dmct7za78p]
module.bedrock_profiles.aws_bedrock_inference_profile.opus: Refreshing state... [id=1zfxsu353ckg]
module.bedrock_profiles.aws_bedrock_inference_profile.sonnet: Refreshing state... [id=tpazg97vdxpe]
module.private_subnets.aws_route_table.private[0]: Refreshing state... [id=rtb-0ca5cea74230b5b23]
module.private_subnets.aws_route_table.private[1]: Refreshing state... [id=rtb-0690155d9202e0219]
module.private_subnets.aws_subnet.private[1]: Refreshing state... [id=subnet-07405a7f6e0e87c13]
module.private_subnets.aws_subnet.private[0]: Refreshing state... [id=subnet-01dbaf7873359f0b3]
module.doppler_aws_secrets.doppler_integration_aws_secrets_manager.integration: Refreshing state... [id=44a390e7-e35d-44e3-a573-6476e776f406]
module.doppler_aws_secrets.aws_iam_role_policy_attachment.doppler_secrets_manager: Refreshing state... [id=integrator-staging-doppler-secrets-manager-role-20251117112527179200000001]
data.aws_subnets.public: Reading...
module.ecs_api.aws_iam_role_policy_attachment.api_ecs_exec: Refreshing state... [id=integrator-staging-api-task-role-20260110152557084500000001]
module.ecs_api.aws_s3_bucket_lifecycle_configuration.alb_logs[0]: Refreshing state... [id=integrator-staging-alb-logs]
module.ecs_api.aws_s3_bucket_server_side_encryption_configuration.alb_logs[0]: Refreshing state... [id=integrator-staging-alb-logs]
module.ecs_api.aws_s3_bucket_public_access_block.alb_logs[0]: Refreshing state... [id=integrator-staging-alb-logs]
module.ecs_api.aws_iam_role_policy_attachment.api_bedrock_access: Refreshing state... [id=integrator-staging-api-task-role-20260204130051288600000001]
module.ecs_api.aws_security_group.api: Refreshing state... [id=sg-06a8634c658cb6242]
data.aws_subnets.public: Read complete after 0s [id=us-east-1]
module.ecs_api.aws_s3_bucket_public_access_block.migrations: Refreshing state... [id=integrator-staging-migrations]
module.github_actions_role.aws_iam_role_policy.cloudwatch_logs: Refreshing state... [id=integrator-github-actions-staging:integrator-github-actions-staging-cloudwatch-logs-policy]
module.github_actions_role.aws_iam_role_policy.lambda: Refreshing state... [id=integrator-github-actions-staging:integrator-github-actions-staging-lambda-policy]
module.github_actions_role.aws_iam_role_policy_attachment.terraform_admin[0]: Refreshing state... [id=integrator-github-actions-staging-20260115154744404400000001]
module.knowledge_bucket.aws_s3_bucket_lifecycle_configuration.this: Refreshing state... [id=integrator-knowledge-staging]
module.knowledge_bucket.aws_s3_bucket_server_side_encryption_configuration.this: Refreshing state... [id=integrator-knowledge-staging]
module.knowledge_bucket.aws_s3_bucket_versioning.this[0]: Refreshing state... [id=integrator-knowledge-staging]
module.knowledge_bucket.aws_s3_bucket_public_access_block.this: Refreshing state... [id=integrator-knowledge-staging]
module.ai_agent_debugging_role.aws_iam_role_policy.vpc_debugging: Refreshing state... [id=integrator-ai-agent-debugging-staging:integrator-ai-agent-debugging-staging-vpc-policy]
module.ai_agent_debugging_role.aws_iam_role_policy.cost_explorer_debugging: Refreshing state... [id=integrator-ai-agent-debugging-staging:integrator-ai-agent-debugging-staging-cost-explorer-policy]
module.ai_agent_debugging_role.aws_iam_role_policy.deny_privilege_escalation: Refreshing state... [id=integrator-ai-agent-debugging-staging:integrator-ai-agent-debugging-staging-deny-privilege-escalation]
module.ai_agent_debugging_role.aws_iam_role_policy.ecr_debugging: Refreshing state... [id=integrator-ai-agent-debugging-staging:integrator-ai-agent-debugging-staging-ecr-policy]
module.ai_agent_debugging_role.aws_iam_role_policy.secrets_manager_debugging: Refreshing state... [id=integrator-ai-agent-debugging-staging:integrator-ai-agent-debugging-staging-secrets-manager-policy]
module.ai_agent_debugging_role.aws_iam_role_policy.cloudwatch_logs_debugging: Refreshing state... [id=integrator-ai-agent-debugging-staging:integrator-ai-agent-debugging-staging-cloudwatch-logs-policy]
module.ai_agent_debugging_role.aws_iam_role_policy.rds_debugging: Refreshing state... [id=integrator-ai-agent-debugging-staging:integrator-ai-agent-debugging-staging-rds-policy]
module.ai_agent_debugging_role.aws_iam_role_policy.alb_debugging: Refreshing state... [id=integrator-ai-agent-debugging-staging:integrator-ai-agent-debugging-staging-alb-policy]
module.ai_agent_debugging_role.aws_iam_role_policy.cloudwatch_metrics_debugging: Refreshing state... [id=integrator-ai-agent-debugging-staging:integrator-ai-agent-debugging-staging-cloudwatch-metrics-policy]
module.ai_agent_debugging_role.aws_iam_role_policy.s3_debugging: Refreshing state... [id=integrator-ai-agent-debugging-staging:integrator-ai-agent-debugging-staging-s3-policy]
module.ai_agent_debugging_role.aws_iam_role_policy.ecs_debugging: Refreshing state... [id=integrator-ai-agent-debugging-staging:integrator-ai-agent-debugging-staging-ecs-policy]
module.ai_agent_debugging_role.aws_iam_role_policy.iam_debugging: Refreshing state... [id=integrator-ai-agent-debugging-staging:integrator-ai-agent-debugging-staging-iam-policy]
module.rds.data.aws_vpc.selected: Reading...
module.private_subnets.aws_route_table_association.private[0]: Refreshing state... [id=rtbassoc-083956d2431aaec0e]
module.private_subnets.aws_route_table_association.private[1]: Refreshing state... [id=rtbassoc-09e0942a52569e671]
module.ecs_api.aws_s3_bucket_policy.alb_logs[0]: Refreshing state... [id=integrator-staging-alb-logs]
github_actions_secret.aws_role_arn: Refreshing state... [id=integrator:AWS_ROLE_ARN_STAGING]
aws_route.private_default_via_prod_nat[0]: Refreshing state... [id=r-rtb-0ca5cea74230b5b231080289494]
aws_route.private_default_via_prod_nat[1]: Refreshing state... [id=r-rtb-0690155d9202e02191080289494]
module.rds.aws_db_subnet_group.main: Refreshing state... [id=integrator-staging-db-subnet-group]
module.ecs_api.aws_lb.api: Refreshing state... [id=arn:aws:elasticloadbalancing:us-east-1:256586139593:loadbalancer/app/integrator-staging-alb/5e4f301bcd0263cb]
github_actions_secret.ecs_security_groups: Refreshing state... [id=integrator:ECS_SECURITY_GROUPS_STAGING]
github_actions_secret.ecs_subnets: Refreshing state... [id=integrator:ECS_SUBNETS_STAGING]
module.ecs_api.aws_lb_listener.http: Refreshing state... [id=arn:aws:elasticloadbalancing:us-east-1:256586139593:listener/app/integrator-staging-alb/5e4f301bcd0263cb/d7549a73fdd1a11a]
module.rds.data.aws_vpc.selected: Read complete after 0s [id=vpc-0529dea5160deb846]
module.rds.aws_security_group.rds: Refreshing state... [id=sg-0c78e576a056ba44a]
module.rds.aws_db_instance.main: Refreshing state... [id=db-I57KURHD3UXFT56QM2OTWRW7TQ]
module.rds.null_resource.create_readonly_user[0]: Refreshing state... [id=3885368352693534014]
module.ecs_api.aws_iam_role_policy.migrations_lambda_access: Refreshing state... [id=integrator-staging-migrations-lambda-role:integrator-staging-migrations-lambda-access]
module.ecs_api.aws_ecs_task_definition.migrations: Refreshing state... [id=integrator-staging-migrations]
module.ecs_api.aws_lambda_function.migrations: Refreshing state... [id=integrator-staging-migrations]
module.ecs_background_runner.aws_iam_role.task: Refreshing state... [id=integrator-staging-ecs-task-role]
module.ecs_background_runner.data.aws_caller_identity.current: Reading...
module.ecs_background_runner.aws_iam_policy.s3_knowledge_access: Refreshing state... [id=arn:aws:iam::256586139593:policy/integrator-staging-s3-knowledge-access]
module.ecs_background_runner.aws_iam_policy.ecs_exec: Refreshing state... [id=arn:aws:iam::256586139593:policy/integrator-staging-ecs-exec-policy]
module.ecs_background_runner.data.aws_ecr_repository.background_runner[0]: Reading...
module.ecs_background_runner.aws_iam_role.task_execution: Refreshing state... [id=integrator-staging-ecs-task-execution-role]
module.ecs_background_runner.data.aws_caller_identity.current: Read complete after 0s [id=256586139593]
module.ecs_background_runner.data.aws_ecs_cluster.default[0]: Reading...
module.ecs_background_runner.aws_cloudwatch_log_group.ecs_task_events: Refreshing state... [id=/aws/events/integrator/staging/ecs-task-state-change]
module.ecs_background_runner.aws_cloudwatch_log_group.task_logs: Refreshing state... [id=/ecs/integrator/staging/background-runner]
module.ecs_background_runner.data.aws_ecs_cluster.default[0]: Read complete after 1s [id=arn:aws:ecs:us-east-1:256586139593:cluster/default]
module.ecs_background_runner.aws_iam_policy.bedrock_access: Refreshing state... [id=arn:aws:iam::256586139593:policy/integrator-staging-bedrock-access]
module.ecs_background_runner.aws_cloudwatch_event_rule.ecs_task_state_change: Refreshing state... [id=integrator-staging-ecs-task-state-change]
module.ecs_background_runner.aws_iam_role_policy_attachment.ecs_exec: Refreshing state... [id=integrator-staging-ecs-task-role-20251121173131775000000004]
module.ecs_background_runner.aws_iam_role_policy_attachment.s3_knowledge_access: Refreshing state... [id=integrator-staging-ecs-task-role-20260110152558095500000002]
module.ecs_background_runner.aws_iam_role_policy_attachment.task_execution: Refreshing state... [id=integrator-staging-ecs-task-execution-role-20251121173130862100000002]
module.ecs_background_runner.aws_iam_role_policy_attachment.bedrock_access: Refreshing state... [id=integrator-staging-ecs-task-role-20260204130051819900000004]
module.ecs_background_runner.aws_cloudwatch_event_target.ecs_task_state_change_logs: Refreshing state... [id=integrator-staging-ecs-task-state-change-LogTaskStateChanges]
module.ecs_background_runner.data.aws_ecr_repository.background_runner[0]: Read complete after 1s [id=integrator-background-runner]
module.github_actions_role.aws_iam_role_policy.ecr: Refreshing state... [id=integrator-github-actions-staging:integrator-github-actions-staging-ecr-policy]

Note: Objects have changed outside of Terraform

Terraform detected the following changes made outside of Terraform since the
last "terraform apply" which may have affected this plan:

  # module.doppler_aws_secrets.doppler_environment.config has been deleted
  - resource "doppler_environment" "config" {
        id      = "integrator.staging"
        name    = "Staging"
      - slug    = "staging" -> null
        # (1 unchanged attribute hidden)
    }

  # module.doppler_aws_secrets.doppler_integration_aws_secrets_manager.integration has been deleted
  - resource "doppler_integration_aws_secrets_manager" "integration" {
      - id              = "44a390e7-e35d-44e3-a573-6476e776f406" -> null
        name            = "integrator-staging-aws-secrets-manager"
        # (1 unchanged attribute hidden)
    }


Unless you have made equivalent changes to your configuration, or ignored the
relevant attributes using ignore_changes, the following plan may include
actions to undo or respond to these changes.

─────────────────────────────────────────────────────────────────────────────

Terraform used the selected providers to generate the following execution
plan. Resource actions are indicated with the following symbols:
  + create
  ~ update in-place
 <= read (data resources)

Terraform planned the following actions, but then encountered a problem:

  # module.doppler_aws_secrets.data.doppler_secrets.existing will be read during apply
  # (depends on a resource or a module with changes pending)
 <= data "doppler_secrets" "existing" {
      + config  = "staging"
      + id      = (known after apply)
      + map     = (sensitive value)
      + project = "integrator"
    }

  # module.doppler_aws_secrets.doppler_environment.config will be created
  + resource "doppler_environment" "config" {
      + id               = (known after apply)
      + name             = "Staging"
      + personal_configs = false
      + project          = "integrator"
      + slug             = "staging"
    }

  # module.doppler_aws_secrets.doppler_integration_aws_secrets_manager.integration will be created
  + resource "doppler_integration_aws_secrets_manager" "integration" {
      + assume_role_arn = "arn:aws:iam::256586139593:role/integrator-staging-doppler-secrets-manager-role"
      + id              = (known after apply)
      + name            = "integrator-staging-aws-secrets-manager"
    }

  # module.ecs_api.aws_security_group.alb will be updated in-place
  ~ resource "aws_security_group" "alb" {
        id                     = "sg-0f268d8e0027eaad9"
      ~ ingress                = [
          + {
              + cidr_blocks      = [
                  + "0.0.0.0/0",
                ]
              + description      = "HTTP from internet"
              + from_port        = 80
              + ipv6_cidr_blocks = []
              + prefix_list_ids  = []
              + protocol         = "tcp"
              + security_groups  = []
              + self             = false
              + to_port          = 80
            },
          + {
              + cidr_blocks      = [
                  + "0.0.0.0/0",
                ]
              + description      = "HTTPS from internet"
              + from_port        = 443
              + ipv6_cidr_blocks = []
              + prefix_list_ids  = []
              + protocol         = "tcp"
              + security_groups  = []
              + self             = false
              + to_port          = 443
            },
        ]
        name                   = "integrator-staging-alb-sg"
        tags                   = {
            "Environment" = "staging"
            "ManagedBy"   = "Terraform"
            "Name"        = "integrator-staging-alb-sg"
        }
        # (7 unchanged attributes hidden)
    }

Plan: 2 to add, 1 to change, 0 to destroy.

Warning: Argument is deprecated

  with module.datadog_dashboards.datadog_dashboard.cost,
  on ../../modules/datadog-dashboards/cost.tf line 16, in resource "datadog_dashboard" "cost":
  16:     default          = "*"

Use `defaults` instead.

(and 6 more similar warnings elsewhere)

Warning: Doppler Error: Could not find requested environment 'staging'

  with module.doppler_aws_secrets.doppler_environment.config,
  on ../../modules/doppler-aws-secrets/main.tf line 116, in resource "doppler_environment" "config":
 116: resource "doppler_environment" "config" {

Resource was not found, so it was removed from state and is being recreated.

Warning: Doppler Error: Integration not found.

  with module.doppler_aws_secrets.doppler_integration_aws_secrets_manager.integration,
  on ../../modules/doppler-aws-secrets/main.tf line 262, in resource "doppler_integration_aws_secrets_manager" "integration":
 262: resource "doppler_integration_aws_secrets_manager" "integration" {

Resource was not found, so it was removed from state and is being recreated.

Error: 403 Forbidden

  with provider["registry.terraform.io/datadog/datadog"],
  on main.tf line 45, in provider "datadog":
  45: provider "datadog" {


Error: GET https://api.github.com/repos/ComposioHQ/integrator/actions/secrets/AWS_ROLE_ARN_STAGING: 401 Bad credentials []

  with github_actions_secret.aws_role_arn,
  on main.tf line 326, in resource "github_actions_secret" "aws_role_arn":
 326: resource "github_actions_secret" "aws_role_arn" {


Error: GET https://api.github.com/repos/ComposioHQ/integrator/actions/secrets/ECS_SUBNETS_STAGING: 401 Bad credentials []

  with github_actions_secret.ecs_subnets,
  on main.tf line 332, in resource "github_actions_secret" "ecs_subnets":
 332: resource "github_actions_secret" "ecs_subnets" {


Error: GET https://api.github.com/repos/ComposioHQ/integrator/actions/secrets/ECS_SECURITY_GROUPS_STAGING: 401 Bad credentials []

  with github_actions_secret.ecs_security_groups,
  on main.tf line 338, in resource "github_actions_secret" "ecs_security_groups":
 338: resource "github_actions_secret" "ecs_security_groups" {


Error: Doppler Error: This token does not have access to requested config 'staging'

  with module.doppler_aws_secrets.doppler_secret.secrets["DISABLE_MERCURY_CLEANUP"],
  on ../../modules/doppler-aws-secrets/main.tf line 144, in resource "doppler_secret" "secrets":
 144: resource "doppler_secret" "secrets" {


Error: Doppler Error: This token does not have access to requested config 'staging'

  with module.doppler_aws_secrets.doppler_secret.secrets["AZURE_OPENAI_SUBSCRIPTION_KEY"],
  on ../../modules/doppler-aws-secrets/main.tf line 144, in resource "doppler_secret" "secrets":
 144: resource "doppler_secret" "secrets" {


Error: Doppler Error: This token does not have access to requested config 'staging'

  with module.doppler_aws_secrets.doppler_secret.secrets["DEEPSEEK_API_KEY"],
  on ../../modules/doppler-aws-secrets/main.tf line 144, in resource "doppler_secret" "secrets":
 144: resource "doppler_secret" "secrets" {


Error: Doppler Error: This token does not have access to requested config 'staging'

  with module.doppler_aws_secrets.doppler_secret.secrets["THERMOS_PORT"],
  on ../../modules/doppler-aws-secrets/main.tf line 144, in resource "doppler_secret" "secrets":
 144: resource "doppler_secret" "secrets" {


Error: Doppler Error: This token does not have access to requested config 'staging'

  with module.doppler_aws_secrets.doppler_secret.secrets["LANGSMITH_TRACING"],
  on ../../modules/doppler-aws-secrets/main.tf line 144, in resource "doppler_secret" "secrets":
 144: resource "doppler_secret" "secrets" {


Error: Doppler Error: This token does not have access to requested config 'staging'

  with module.doppler_aws_secrets.doppler_secret.secrets["COMPOSIO_STAGING_API_KEY"],
  on ../../modules/doppler-aws-secrets/main.tf line 144, in resource "doppler_secret" "secrets":
 144: resource "doppler_secret" "secrets" {


Error: Doppler Error: This token does not have access to requested config 'staging'

  with module.doppler_aws_secrets.doppler_secret.secrets["ENCRYPTION_KEY"],
  on ../../modules/doppler-aws-secrets/main.tf line 144, in resource "doppler_secret" "secrets":
 144: resource "doppler_secret" "secrets" {


Error: Doppler Error: This token does not have access to requested config 'staging'

  with module.doppler_aws_secrets.doppler_secret.secrets["OPENAI_API_KEY"],
  on ../../modules/doppler-aws-secrets/main.tf line 144, in resource "doppler_secret" "secrets":
 144: resource "doppler_secret" "secrets" {


Error: Doppler Error: This token does not have access to requested config 'staging'

  with module.doppler_aws_secrets.doppler_secret.secrets["COMPOSIO_SEATGEEK_KEY"],
  on ../../modules/doppler-aws-secrets/main.tf line 144, in resource "doppler_secret" "secrets":
 144: resource "doppler_secret" "secrets" {


Error: Doppler Error: This token does not have access to requested config 'staging'

  with module.doppler_aws_secrets.doppler_secret.secrets["TWITTER_API_KEY"],
  on ../../modules/doppler-aws-secrets/main.tf line 144, in resource "doppler_secret" "secrets":
 144: resource "doppler_secret" "secrets" {


Error: Doppler Error: This token does not have access to requested config 'staging'

  with module.doppler_aws_secrets.doppler_secret.secrets["PIPEDREAM_PATH"],
  on ../../modules/doppler-aws-secrets/main.tf line 144, in resource "doppler_secret" "secrets":
 144: resource "doppler_secret" "secrets" {


Error: Doppler Error: This token does not have access to requested config 'staging'

  with module.doppler_aws_secrets.doppler_secret.secrets["BRANDFETCH_API_KEY"],
  on ../../modules/doppler-aws-secrets/main.tf line 144, in resource "doppler_secret" "secrets":
 144: resource "doppler_secret" "secrets" {


Error: Doppler Error: This token does not have access to requested config 'staging'

  with module.doppler_aws_secrets.doppler_secret.secrets["FIRECRAWL_API_KEY"],
  on ../../modules/doppler-aws-secrets/main.tf line 144, in resource "doppler_secret" "secrets":
 144: resource "doppler_secret" "secrets" {


Error: Doppler Error: This token does not have access to requested config 'staging'

  with module.doppler_aws_secrets.doppler_secret.secrets["WATCHDOG_BATCH_POLLER_DISABLED"],
  on ../../modules/doppler-aws-secrets/main.tf line 144, in resource "doppler_secret" "secrets":
 144: resource "doppler_secret" "secrets" {


Error: Doppler Error: This token does not have access to requested config 'staging'

  with module.doppler_aws_secrets.doppler_secret.secrets["TWITTER_API_SECRET"],
  on ../../modules/doppler-aws-secrets/main.tf line 144, in resource "doppler_secret" "secrets":
 144: resource "doppler_secret" "secrets" {


Error: Doppler Error: This token does not have access to requested config 'staging'

  with module.doppler_aws_secrets.doppler_secret.secrets["STATSD_METRICS_FLUSH_WAIT_TIME_SECS"],
  on ../../modules/doppler-aws-secrets/main.tf line 144, in resource "doppler_secret" "secrets":
 144: resource "doppler_secret" "secrets" {


Error: Doppler Error: This token does not have access to requested config 'staging'

  with module.doppler_aws_secrets.doppler_secret.secrets["SLACK_BOT_TOKEN"],
  on ../../modules/doppler-aws-secrets/main.tf line 144, in resource "doppler_secret" "secrets":
 144: resource "doppler_secret" "secrets" {


Error: Doppler Error: This token does not have access to requested config 'staging'

  with module.doppler_aws_secrets.doppler_secret.secrets["GH_WEBHOOK_SECRET"],
  on ../../modules/doppler-aws-secrets/main.tf line 144, in resource "doppler_secret" "secrets":
 144: resource "doppler_secret" "secrets" {


Error: Doppler Error: This token does not have access to requested config 'staging'

  with module.doppler_aws_secrets.doppler_secret.secrets["COMPOSIO_API_KEY"],
  on ../../modules/doppler-aws-secrets/main.tf line 144, in resource "doppler_secret" "secrets":
 144: resource "doppler_secret" "secrets" {


Error: Doppler Error: This token does not have access to requested config 'staging'

  with module.doppler_aws_secrets.doppler_secret.secrets["VERCEL_AI_GATEWAY_API_KEY"],
  on ../../modules/doppler-aws-secrets/main.tf line 144, in resource "doppler_secret" "secrets":
 144: resource "doppler_secret" "secrets" {


Error: Doppler Error: This token does not have access to requested config 'staging'

  with module.doppler_aws_secrets.doppler_secret.secrets["DD_APP_KEY"],
  on ../../modules/doppler-aws-secrets/main.tf line 144, in resource "doppler_secret" "secrets":
 144: resource "doppler_secret" "secrets" {


Error: Doppler Error: This token does not have access to requested config 'staging'

  with module.doppler_aws_secrets.doppler_secret.secrets["USE_APOLLO_GET_DOWNLOAD_URL_API"],
  on ../../modules/doppler-aws-secrets/main.tf line 144, in resource "doppler_secret" "secrets":
 144: resource "doppler_secret" "secrets" {


Error: Doppler Error: This token does not have access to requested config 'staging'

  with module.doppler_aws_secrets.doppler_secret.secrets["COMPOSIO_TAVILY_API_KEY"],
  on ../../modules/doppler-aws-secrets/main.tf line 144, in resource "doppler_secret" "secrets":
 144: resource "doppler_secret" "secrets" {


Error: Doppler Error: This token does not have access to requested config 'staging'

  with module.doppler_aws_secrets.doppler_secret.secrets["LANGSMITH_API_KEY"],
  on ../../modules/doppler-aws-secrets/main.tf line 144, in resource "doppler_secret" "secrets":
 144: resource "doppler_secret" "secrets" {


Error: Doppler Error: This token does not have access to requested config 'staging'

  with module.doppler_aws_secrets.doppler_secret.secrets["ANTHROPIC_API_KEY"],
  on ../../modules/doppler-aws-secrets/main.tf line 144, in resource "doppler_secret" "secrets":
 144: resource "doppler_secret" "secrets" {


Error: Doppler Error: This token does not have access to requested config 'staging'

  with module.doppler_aws_secrets.doppler_secret.secrets["GITHUB_REVIEWER_TOKEN"],
  on ../../modules/doppler-aws-secrets/main.tf line 144, in resource "doppler_secret" "secrets":
 144: resource "doppler_secret" "secrets" {


Error: Doppler Error: This token does not have access to requested config 'staging'

  with module.doppler_aws_secrets.doppler_secret.secrets["LANGSMITH_ENDPOINT"],
  on ../../modules/doppler-aws-secrets/main.tf line 144, in resource "doppler_secret" "secrets":
 144: resource "doppler_secret" "secrets" {


Error: Doppler Error: This token does not have access to requested config 'staging'

  with module.doppler_aws_secrets.doppler_secret.secrets["COMPOSIO_ADMIN_TOKEN"],
  on ../../modules/doppler-aws-secrets/main.tf line 144, in resource "doppler_secret" "secrets":
 144: resource "doppler_secret" "secrets" {


Error: Doppler Error: This token does not have access to requested config 'staging'

  with module.doppler_aws_secrets.doppler_secret.secrets["AZURE_OPENAI_ENDPOINT_URL"],
  on ../../modules/doppler-aws-secrets/main.tf line 144, in resource "doppler_secret" "secrets":
 144: resource "doppler_secret" "secrets" {


Error: Doppler Error: This token does not have access to requested config 'staging'

  with module.doppler_aws_secrets.doppler_secret.secrets["COMPOSIO_SERPAPI_API_KEY"],
  on ../../modules/doppler-aws-secrets/main.tf line 144, in resource "doppler_secret" "secrets":
 144: resource "doppler_secret" "secrets" {


Error: Doppler Error: This token does not have access to requested config 'staging'

  with module.doppler_aws_secrets.doppler_secret.secrets["CLICKHOUSE_USERNAME"],
  on ../../modules/doppler-aws-secrets/main.tf line 144, in resource "doppler_secret" "secrets":
 144: resource "doppler_secret" "secrets" {


Error: Doppler Error: This token does not have access to requested config 'staging'

  with module.doppler_aws_secrets.doppler_secret.secrets["KIMI_API_KEY"],
  on ../../modules/doppler-aws-secrets/main.tf line 144, in resource "doppler_secret" "secrets":
 144: resource "doppler_secret" "secrets" {


Error: Doppler Error: This token does not have access to requested config 'staging'

  with module.doppler_aws_secrets.doppler_secret.secrets["COMPOSIO_GEMINI_API_KEY"],
  on ../../modules/doppler-aws-secrets/main.tf line 144, in resource "doppler_secret" "secrets":
 144: resource "doppler_secret" "secrets" {


Error: Doppler Error: This token does not have access to requested config 'staging'

  with module.doppler_aws_secrets.doppler_secret.secrets["APOLLO_URL"],
  on ../../modules/doppler-aws-secrets/main.tf line 144, in resource "doppler_secret" "secrets":
 144: resource "doppler_secret" "secrets" {


Error: Doppler Error: This token does not have access to requested config 'staging'

  with module.doppler_aws_secrets.doppler_secret.secrets["THERMOS_DATABASE"],
  on ../../modules/doppler-aws-secrets/main.tf line 144, in resource "doppler_secret" "secrets":
 144: resource "doppler_secret" "secrets" {


Error: Doppler Error: This token does not have access to requested config 'staging'

  with module.doppler_aws_secrets.doppler_secret.secrets["DD_API_KEY"],
  on ../../modules/doppler-aws-secrets/main.tf line 144, in resource "doppler_secret" "secrets":
 144: resource "doppler_secret" "secrets" {


Error: Doppler Error: This token does not have access to requested config 'staging'

  with module.doppler_aws_secrets.doppler_secret.secrets["MINIMAX_API_KEY"],
  on ../../modules/doppler-aws-secrets/main.tf line 144, in resource "doppler_secret" "secrets":
 144: resource "doppler_secret" "secrets" {


Error: Doppler Error: This token does not have access to requested config 'staging'

  with module.doppler_aws_secrets.doppler_secret.secrets["TEST_CONNECTION_ID"],
  on ../../modules/doppler-aws-secrets/main.tf line 144, in resource "doppler_secret" "secrets":
 144: resource "doppler_secret" "secrets" {


Error: Doppler Error: This token does not have access to requested config 'staging'

  with module.doppler_aws_secrets.doppler_secret.secrets["ANCHOR_API_KEY"],
  on ../../modules/doppler-aws-secrets/main.tf line 144, in resource "doppler_secret" "secrets":
 144: resource "doppler_secret" "secrets" {


Error: Doppler Error: This token does not have access to requested config 'staging'

  with module.doppler_aws_secrets.doppler_secret.secrets["THERMOS_USERNAME"],
  on ../../modules/doppler-aws-secrets/main.tf line 144, in resource "doppler_secret" "secrets":
 144: resource "doppler_secret" "secrets" {


Error: Doppler Error: This token does not have access to requested config 'staging'

  with module.doppler_aws_secrets.doppler_secret.secrets["ZAPIER_PATH"],
  on ../../modules/doppler-aws-secrets/main.tf line 144, in resource "doppler_secret" "secrets":
 144: resource "doppler_secret" "secrets" {


Error: Doppler Error: This token does not have access to requested config 'staging'

  with module.doppler_aws_secrets.doppler_secret.secrets["COMPOSIO_YELP_API_KEY"],
  on ../../modules/doppler-aws-secrets/main.tf line 144, in resource "doppler_secret" "secrets":
 144: resource "doppler_secret" "secrets" {


Error: Doppler Error: This token does not have access to requested config 'staging'

  with module.doppler_aws_secrets.doppler_secret.secrets["THERMOS_PASSWORD"],
  on ../../modules/doppler-aws-secrets/main.tf line 144, in resource "doppler_secret" "secrets":
 144: resource "doppler_secret" "secrets" {


Error: Doppler Error: This token does not have access to requested config 'staging'

  with module.doppler_aws_secrets.doppler_secret.secrets["PYTHONPATH"],
  on ../../modules/doppler-aws-secrets/main.tf line 144, in resource "doppler_secret" "secrets":
 144: resource "doppler_secret" "secrets" {


Error: Doppler Error: This token does not have access to requested config 'staging'

  with module.doppler_aws_secrets.doppler_secret.secrets["Z_AI_API_KEY"],
  on ../../modules/doppler-aws-secrets/main.tf line 144, in resource "doppler_secret" "secrets":
 144: resource "doppler_secret" "secrets" {


Error: Doppler Error: This token does not have access to requested config 'staging'

  with module.doppler_aws_secrets.doppler_secret.secrets["TOOLS_DATABASE_URL"],
  on ../../modules/doppler-aws-secrets/main.tf line 144, in resource "doppler_secret" "secrets":
 144: resource "doppler_secret" "secrets" {


Error: Doppler Error: This token does not have access to requested config 'staging'

  with module.doppler_aws_secrets.doppler_secret.secrets["GITHUB_ACCESS_TOKEN"],
  on ../../modules/doppler-aws-secrets/main.tf line 144, in resource "doppler_secret" "secrets":
 144: resource "doppler_secret" "secrets" {


Error: Doppler Error: This token does not have access to requested config 'staging'

  with module.doppler_aws_secrets.doppler_secret.secrets["PERPLEXITY_API_KEY"],
  on ../../modules/doppler-aws-secrets/main.tf line 144, in resource "doppler_secret" "secrets":
 144: resource "doppler_secret" "secrets" {


Error: Doppler Error: This token does not have access to requested config 'staging'

  with module.doppler_aws_secrets.doppler_secret.secrets["COMPOSIO_WEBHOOK_SECRET"],
  on ../../modules/doppler-aws-secrets/main.tf line 144, in resource "doppler_secret" "secrets":
 144: resource "doppler_secret" "secrets" {


Error: Doppler Error: This token does not have access to requested config 'staging'

  with module.doppler_aws_secrets.doppler_secret.secrets["NOTION_API_KEY"],
  on ../../modules/doppler-aws-secrets/main.tf line 144, in resource "doppler_secret" "secrets":
 144: resource "doppler_secret" "secrets" {


Error: Doppler Error: This token does not have access to requested config 'staging'

  with module.doppler_aws_secrets.doppler_secret.secrets["HELICONE_API_KEY"],
  on ../../modules/doppler-aws-secrets/main.tf line 144, in resource "doppler_secret" "secrets":
 144: resource "doppler_secret" "secrets" {


Error: Doppler Error: This token does not have access to requested config 'staging'

  with module.doppler_aws_secrets.doppler_secret.secrets["LINEAR_API_KEY"],
  on ../../modules/doppler-aws-secrets/main.tf line 144, in resource "doppler_secret" "secrets":
 144: resource "doppler_secret" "secrets" {


Error: Doppler Error: This token does not have access to requested config 'staging'

  with module.doppler_aws_secrets.doppler_secret.secrets["COMPOSIO_EXA_API_KEY"],
  on ../../modules/doppler-aws-secrets/main.tf line 144, in resource "doppler_secret" "secrets":
 144: resource "doppler_secret" "secrets" {


Error: Doppler Error: This token does not have access to requested config 'staging'

  with module.doppler_aws_secrets.doppler_secret.secrets["COMPOSIO_STAGING_ADMIN_TOKEN"],
  on ../../modules/doppler-aws-secrets/main.tf line 144, in resource "doppler_secret" "secrets":
 144: resource "doppler_secret" "secrets" {


Error: Doppler Error: This token does not have access to requested config 'staging'

  with module.doppler_aws_secrets.doppler_secret.secrets["BACKEND_READONLY_URL"],
  on ../../modules/doppler-aws-secrets/main.tf line 144, in resource "doppler_secret" "secrets":
 144: resource "doppler_secret" "secrets" {


Error: Doppler Error: This token does not have access to requested config 'staging'

  with module.doppler_aws_secrets.doppler_secret.secrets["COMPOSIO_INSTACART_API_KEY"],
  on ../../modules/doppler-aws-secrets/main.tf line 144, in resource "doppler_secret" "secrets":
 144: resource "doppler_secret" "secrets" {


Error: Doppler Error: This token does not have access to requested config 'staging'

  with module.doppler_aws_secrets.doppler_secret.secrets["APOLLO_ADMIN_TOKEN"],
  on ../../modules/doppler-aws-secrets/main.tf line 144, in resource "doppler_secret" "secrets":
 144: resource "doppler_secret" "secrets" {


Error: Doppler Error: This token does not have access to requested config 'staging'

  with module.doppler_aws_secrets.doppler_secret.secrets["CLICKHOUSE_PASSWORD"],
  on ../../modules/doppler-aws-secrets/main.tf line 144, in resource "doppler_secret" "secrets":
 144: resource "doppler_secret" "secrets" {


Error: Doppler Error: This token does not have access to requested config 'staging'

  with module.doppler_aws_secrets.doppler_secret.secrets["MERCURY_AUTOLOAD"],
  on ../../modules/doppler-aws-secrets/main.tf line 144, in resource "doppler_secret" "secrets":
 144: resource "doppler_secret" "secrets" {


Error: Doppler Error: This token does not have access to requested config 'staging'

  with module.doppler_aws_secrets.doppler_secret.secrets["WATCHDOG_MAX_FIXERS_PER_DAY"],
  on ../../modules/doppler-aws-secrets/main.tf line 144, in resource "doppler_secret" "secrets":
 144: resource "doppler_secret" "secrets" {


Error: Doppler Error: This token does not have access to requested config 'staging'

  with module.doppler_aws_secrets.doppler_secret.secrets["Z_AI_BASE_URL"],
  on ../../modules/doppler-aws-secrets/main.tf line 144, in resource "doppler_secret" "secrets":
 144: resource "doppler_secret" "secrets" {


Error: Doppler Error: This token does not have access to requested config 'staging'

  with module.doppler_aws_secrets.doppler_secret.secrets["THERMOS_HOST"],
  on ../../modules/doppler-aws-secrets/main.tf line 144, in resource "doppler_secret" "secrets":
 144: resource "doppler_secret" "secrets" {


Error: Doppler Error: This token does not have access to requested config 'staging'

  with module.doppler_aws_secrets.doppler_secret.secrets["GROQ_API_KEY"],
  on ../../modules/doppler-aws-secrets/main.tf line 144, in resource "doppler_secret" "secrets":
 144: resource "doppler_secret" "secrets" {