From 74052c7bb79336107b53b7b0999cb27d98c3a403 Mon Sep 17 00:00:00 2001
From: Frank <frank@anoma.ly>
Date: Tue, 2 Jun 2026 09:51:59 -0400
Subject: [PATCH] sync

---
 infra/lake.ts | 6 +++++-
 sst.config.ts | 2 +-
 2 files changed, 6 insertions(+), 2 deletions(-)

diff --git a/infra/lake.ts b/infra/lake.ts
index 4e9489ba0..b7d92cfd4 100644
--- a/infra/lake.ts
+++ b/infra/lake.ts
@@ -198,6 +198,11 @@ export const lakeCatalog = $interpolate`${glueCatalogName}/${tableBucket.name}`
 export const lakeAthenaWorkgroup = athenaWorkgroup
 
 const ingestSecret = new random.RandomPassword("LakeIngestSecret", { length: 32 })
+export const ingestSecretSsm = new aws.ssm.Parameter("LakeIngestSecretSsm", {
+  name: $interpolate`/${$app.name}/${$app.stage}/lake/ingest/secret`,
+  type: "SecureString",
+  value: ingestSecret.result,
+})
 
 const ingestConfig = new sst.Linkable("LakeIngestConfig", {
   properties: {
@@ -268,7 +273,6 @@ export const lakeIngest = new sst.Linkable("LakeIngest", {
     secret: ingestSecret.result,
   },
 })
-export const lakeIngestSecret = new sst.Secret("LakeIngestSecret", ingestSecret.result)
 
 export const lakeQueryPermissions = [
   {
diff --git a/sst.config.ts b/sst.config.ts
index 214c55d53..b245a5132 100644
--- a/sst.config.ts
+++ b/sst.config.ts
@@ -44,7 +44,7 @@ export default $config({
       ...(lake
         ? {
             LakeUrl: lake.lakeIngest.properties.url,
-            LakeSecretName: lake.lakeIngestSecret.name,
+            LakeSecretSsm: lake.ingestSecretSsm.name,
           }
         : {}),
       AwsStage: stage.awsStage,