[AppRunner] Add env vars

AppRunner/main.tf

@@ -28,8 +28,11 @@ resource "aws_apprunner_service" "this" {
     image_repository {
       image_identifier      = var.image_identifier
       image_repository_type = var.image_repository_type
+
       image_configuration {
-        port = var.port
+        port                          = var.port
+        runtime_environment_variables = var.runtime_environment_variables
+        runtime_environment_secrets   = var.runtime_environment_secrets
       }
     }
     auto_deployments_enabled = var.auto_deployments_enabled

AppRunner/project.json

@@ -1,3 +1,3 @@
 {
-  "version": "1.0.1"
-}
+  "version": "1.0.2"
+}

AppRunner/variables.tf

@@ -23,6 +23,18 @@ variable "port" {
   default     = "8080"
 }
 
+variable "runtime_environment_variables" {
+  type        = map(string)
+  description = "Environment variables for the running service (key-value). Non-sensitive only; for secrets use runtime_environment_secrets."
+  default     = {}
+}
+
+variable "runtime_environment_secrets" {
+  type        = map(string)
+  description = "Secrets for the running service: map of env var name to Secrets Manager secret ARN or SSM Parameter Store parameter ARN."
+  default     = {}
+}
+
 ###
 # App Runner - Access role (for private ECR)
 ###