Move RAM association job to reusable workflow and switch secrets source to AWS Secrets Manager #3004

	---
	name: core-shared-services-deployment

	on:
	push:
	branches:
	- main
	paths:
	- 'terraform/environments/core-shared-services/**'
	- 'terraform/modules/vpc-hub/**'
	- 'terraform/modules/core-monitoring/**'
	- 'terraform/modules/kms/**'
	- '!**.md'
	- '.github/workflows/core-shared-services-deployment.yml'
	- '.github/workflows/reusable_terraform_plan_apply.yml'
	pull_request:
	branches:
	- main
	paths:
	- 'terraform/environments/core-shared-services/**'
	- 'terraform/modules/vpc-hub/**'
	- 'terraform/modules/core-monitoring/**'
	- 'terraform/modules/kms/**'
	- '!**.md'
	- '.github/workflows/core-shared-services-deployment.yml'
	- '.github/workflows/reusable_terraform_plan_apply.yml'
	workflow_run:
	workflows: ["Terraform: New environment"]
	types: [completed]
	branches: [main]
	workflow_dispatch:

	permissions:
	id-token: write # This is required for requesting the JWT
	contents: read # This is required for actions/checkout
	pull-requests: write

	defaults:
	run:
	shell: bash

	jobs:
	core-shared-services-deployment-plan-apply:
	uses: ./.github/workflows/reusable_terraform_plan_apply.yml
	with:
	working-directory: "terraform/environments/core-shared-services"
	environment: "production"
	secrets:
	MODERNISATION_PLATFORM_ACCOUNT_NUMBER: ${{ secrets.MODERNISATION_PLATFORM_ACCOUNT_NUMBER }}
	PASSPHRASE: ${{ secrets.PASSPHRASE }}

Provide feedback