[lens0021]

The deploy workflow writes each secret to a SecureString parameter under /lambda/<function>/, and the function's environment now holds only <NAME>_PARAMETER. A small secret() helper reads and caches the value, like bounce-handler already does with its token.

Needs femiwiki/infra#1569 applied first, which grants the reads and writes.

---

Generated by Claude Code

[codecov]

Codecov Report

❌ Patch coverage is 98.50746% with 1 line in your changes missing coverage. Please review.
✅ Project coverage is 96.27%. Comparing base (6d121d7) to head (6a79aaf).

Files with missing lines	Patch %	Lines
sns-discord/lambda_function.py	85.71%	1 Missing ⚠️

Additional details and impacted files

@@            Coverage Diff             @@
##             main     #231      +/-   ##
==========================================
+ Coverage   96.05%   96.27%   +0.21%     
==========================================
  Files          10       10              
  Lines        1116     1180      +64     
==========================================
+ Hits         1072     1136      +64     
  Misses         44       44              

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.