Questions tagged [aws-secrets-manager]

AWS Secrets Manager helps encrypt, store, and retrieve credentials for your databases and other services. Instead of hardcoding credentials in apps, you can make calls to Secrets Manager to retrieve credentials whenever needed. Secrets Manager helps protect access to IT resources and data by rotating and managing access to secrets.

See also: What Is AWS Secrets Manager? - AWS Secrets Manager

864 questions
2
votes
0 answers

React Native & AWS Client STS

I am trying to get cross account credentials for AWS Client Secret Manager by calling main function in the file. I am getting an error saying Error: Credentials Missing I tried everything, except for putting the credentials and storing them on my…
2
votes
1 answer

Secrets Manager Update Secret - Secret String additional JSON Encoding

I am using the AWS CLI to update a JSON secret containing x509 certificates. The payload that I am passing into the --secret-string parameter is the encoding I am expecting, but secretsmanager is performing additional encoding of the newline…
2
votes
1 answer

Use of security group for AWS Secrets Manager endpoint

I need to create an endpoint to access AWS Secrets Manager using CloudFormation for rotating secrets. At Using an AWS Secrets Manager VPC endpoint it says: We recommend that you create a Secrets Manager endpoint in the same VPC so that requests…
2
votes
1 answer

Unexpected ARN format with parameters when trying to retrieve ASM secret

Below is a portion of my cloudformation template for an ECS task. It fetches a secret /rds/rds_secret-D2fBVv which contains a json key-value pair secret like {"password":"1234ABCD","dbname":"my_db"}... TaskDefinitionAPI: Type:…
2
votes
1 answer

correct policy to get secrets on local go app

playing with a small project on AWS: golang app RDS/MySQL database secret manager API gateway and lambda I'm running the go app locally to verify the interaction with the database, but I can't get it to work with the secret manager. using this…
mbmc
  • 5,024
  • 5
  • 25
  • 53
2
votes
1 answer

Attaching resource policy to my lambda function for AWS secrets manager using terraform

I'm trying to attach a lambda permission so that AWS secrets manager can invoke my lambda function to rotate multiple secrets. resource "aws_lambda_permission" "allow_rotate_secrets_permission" { statement_id =…
2
votes
1 answer

Why use AWS Secret Manager instead of environment variables?

https://docs.aws.amazon.com/secretsmanager/latest/userguide/intro.html Secrets Manager enables you to replace hardcoded credentials in your code, including passwords, with an API call to Secrets Manager to retrieve the secret programmatically. This…
2
votes
2 answers

How to create an AWS secret of type other using cdk

I am using python with cdk. I have one stack that creates a dynamo db table with a random name in one account and multiple stacks running in other accounts that need to get that randomly generated table name. Due to the limitation of SSM parameters…
user20358
  • 14,182
  • 36
  • 114
  • 186
2
votes
1 answer

how to Identify if an EKS cluster is using an external secret storage provider

I'm looking for a way to identify through CLI if a given EKS is using an external secret storage provider rather than use kubernetes secrets directly, and if it does, than which provider is being used. Thanks for the help. From what I've learned, it…
kooomix
  • 21
  • 1
2
votes
0 answers

Does AWSSecretsManagerRotationPolicy policy apply to all secrets?

I'm trying to use an AWS lambda function (deployed with SAM) to rotate a secret. Reading AWSSecretsManagerRotationPolicy description says: Gives permission to rotate a secret in AWS Secrets Manager. Source Based on that, this is applied to a…
2
votes
1 answer

serverless redshift - secret manager create

I am trying to create a secret manager for the purpose of using lambda in serverless redshift. The redshift cluster created on the security password type selection screen is not visible, so it cannot be created. Any solution?
2
votes
1 answer

How to setup up AWS secrets manager to store jks file to be used by Lambda service?

So, I have a .jks file that's currently being referred from a protected S3 bucket. How can I store it in AWS secrets manager? Do I need to convert it to any file format so I can add it to the 'Other type of secret' location? I want it to be used by…
AppSensei
  • 8,270
  • 22
  • 71
  • 99
2
votes
0 answers

Amplify Build using Secrets Manager

I am trying to access my Secret Manager values as environment variables in the build of my Amplify application. I have followed AWS documentation and community threads/videos. I have included in my build spec file, amplify.yml, as below per the…
2
votes
0 answers

How to use AWS Secrets Manager to store Heroku Env Vars

I have some secrets stored in AWS Secrets Manager. How can I reference that datastore source as a Heroku Env Var? Ideally, the envvar would update any time it is invoked. Thanks!
cars
  • 421
  • 7
  • 18
2
votes
0 answers

Codebuild: How to send JSON body to a ENV file in buildspec?

I have code that takes in a local test.env.json that is injected into the start of the test. However, now that I am running it through codebuild and using secrets manager, if I don't have a test.env.json file then it will not run correctly. So far I…