Pull token within run

greg-finley · Mar 25, 2024 · 7df4a9f · 7df4a9f
1 parent 6b47de2
commit 7df4a9f
Showing 1 changed file with 4 additions and 4 deletions.
diff --git a/process_file/main.py b/process_file/main.py
@@ -11,10 +11,6 @@
 mysql_config_str = os.environ["MYSQL_CONFIG"]
 mysql_config_dict = json.loads(mysql_config_str)
 secret_client = secretmanager.SecretManagerServiceClient()
-dropbox_access_token = secret_client.access_secret_version(
-    name="projects/greg-finley/secrets/DROPBOX_ACCESS_TOKEN/versions/latest"
-).payload.data.decode("utf-8")
-dbx = dropbox.Dropbox(dropbox_access_token)
 
 
 mysql_connection = mysql.connector.connect(
@@ -27,6 +23,10 @@
 
 
 def run(event, context):
+    dropbox_access_token = secret_client.access_secret_version(
+        name="projects/greg-finley/secrets/DROPBOX_ACCESS_TOKEN/versions/latest"
+    ).payload.data.decode("utf-8")
+    dbx = dropbox.Dropbox(dropbox_access_token)
     filename = base64.b64decode(event["data"]).decode("utf-8")
     print(f"Processing {filename}...")
     dropbox_file = dbx.files_download("/" + filename)