Settings & secrets reference

Source column: SAM = Lambda environment from the Env mapping of template.yaml; Secret = actionstools/<env>; crm = common/crm; default = fallback in code.

Non-secret

Variable Source prod stage

ENV_NAME

SAM

production

staging

LOG_LEVEL

SAM

ERROR

WARNING

APP_SECRET_ID

SAM

actionstools/prod

actionstools/stage

AWS_SECRETS_MANAGER

SAM

True

True

FLASK_DEBUG_ENABLED

SAM

False

False

WORKER_FUNCTION_NAME

SAM

actionstools-prod-worker

actionstools-stage-worker

EVENT_LOGGER_APP_URL

SAM

https://api.payability.com/eventlogger

https://drkrpkdxe4.execute-api.us-east-1.amazonaws.com/stage

MESSAGING_APP_URL

SAM

https://api.payability.com/messaging

https://argumexh08.execute-api.us-east-1.amazonaws.com/stage

B2BDOCUMENT_API_URL

SAM

http://52.207.166.124:8080/b2bdocument/api

same

PAYABILITY_INTERNAL_API_URL

SAM

https://internal.payability.com/bin/internal/

https://staging.dev.payability.com/database_v2/internal/

AWS_REGION

Lambda

us-east-1

us-east-1

DYNAMODB_TIMEOUT

default

10

10

Secret

Key Source Used for

SLACK_TOKEN

Secret

Slack DMs — Slack. Required.

SENTRY_DSN

Secret

Error reporting — Sentry.

MESSAGING_API_KEY

Secret

MessagingAppClient key for instance 8001. Required.

EVENT_LOGGER_API_KEY

Secret

EventLoggerClient key for instance 8001. Required.

AUTH_JWT_RSA_PUBLIC_KEY

Secret or crm

Must be set for every authenticated route (pyb_flask_utils asserts it), but tokens are validated by the internal API, not with this key.

<instance id> → token

crm

Authorization: Token … instance auth (/settings/<config_key>/).

Code constants (config.py)

Name Value

BASE_PREFIX

/actionstools when ENV_NAME=production, else empty

DEFAULT_INSTANCE_ID

8001

GCI_ID

1 (B2B documents)

INT_SUPER_USER

CRM_ADMIN

TEMPLATES_FOLDER_SETTINGS_KEY

template_folders

NOTIFICATIONS_EMAIL_BLACKLIST

addresses never notified

RESTX_*, SWAGGER_UI_DOC_EXPANSION

flask-restx behaviour

Local-only

Variable Meaning

AWS_SECRETS_MANAGER=False

Skip both secrets; read everything from the environment.

AWS_PROFILE

Credentials for DynamoDB / Secrets Manager.

ACCESS_KEY_ID, SECRET_ACCESS_KEY

With ENV_NAME=local, explicit DynamoDB credentials for flask-dynamo.

X_SESSION_TOKEN

Read by scripts/*.py.