SVLS-6128 fix: set right domain and arn by region on secrets manager

bottlecap/src/bin/bottlecap/main.rs

@@ -156,7 +156,13 @@ async fn register(client: &reqwest::Client) -> Result<RegisterResponse> {
 }
 
 fn build_function_arn(account_id: &str, region: &str, function_name: &str) -> String {
-    format!("arn:aws:lambda:{region}:{account_id}:function:{function_name}")
+    let arn_prefix = if region.starts_with("cn-") {
+        "aws-cn"
+    } else {
+        "aws"
+    };
+
+    format!("arn:{arn_prefix}:lambda:{region}:{account_id}:function:{function_name}")
 }
 
 #[tokio::main]

bottlecap/src/secrets/decrypt.rs

@@ -170,10 +170,14 @@ fn build_get_secret_signed_headers(
 ) -> Result<HeaderMap, Box<dyn std::error::Error>> {
     let amz_date = header_values.time.format("%Y%m%dT%H%M%SZ").to_string();
     let date_stamp = header_values.time.format("%Y%m%d").to_string();
-    let host = format!(
-        "{}.{}.amazonaws.com",
-        header_values.service, aws_config.region
-    );
+
+    let domain = if aws_config.region.starts_with("cn-") {
+        "amazonaws.com.cn"
+    } else {
+        "amazonaws.com"
+    };
+
+    let host = format!("{}.{}.{}", header_values.service, aws_config.region, domain);
 
     let canonical_uri = "/";
     let canonical_querystring = "";