Questions tagged [aws-secrets-manager]

AWS Secrets Manager helps encrypt, store, and retrieve credentials for your databases and other services. Instead of hardcoding credentials in apps, you can make calls to Secrets Manager to retrieve credentials whenever needed. Secrets Manager helps protect access to IT resources and data by rotating and managing access to secrets.

See also: What Is AWS Secrets Manager? - AWS Secrets Manager

864 questions
2
votes
1 answer

AWS SAM retrieve secret value from Secret Manager with dynamic referencing

I have been following this official doc from AWS on how to us secrets that are stored in Secret Manager in SAM template.yaml file, and here is what I have done: Environment: Variables: DUMMY_VARIABLE:…
Benjamin
  • 3,499
  • 8
  • 44
  • 77
2
votes
1 answer

【AWS SDK PHP】Unable to access SecretsManager from ECS by IAM role

I have a php application running on ECS Fargate 1.14. aws-sdk-php version is 3. I want to get secret value stored in AWS SecretsManager by IAM Role, not by AWS Access key/ID for a security reason. I set SecretsManagerClient like this. $config = [ …
rfujino
  • 31
  • 4
2
votes
4 answers

Mock Test for AWS Secret Manager - Java

I am trying to test the AWS SecretManager call using Mockito but when I run the program, I am getting the Null Pointer Exception. @ExtendWith(MockitoExtension.class) class XXXX{ String secret = "{ \"client_id\": \"XXXXXX\",\"client_secret\":…
2
votes
0 answers

AWS Secrets Manager Update Multiple Value with Private Key

I am using the AWS CLI to update the secrets but I am having some issues updating multi-string secrets with a Private SSH Key. { "Name": "multi-value-secret-string-with-ssh-key", "VersionId": "red321ds-d3eb-4964-9a8f-7f4ecb375a35", …
Alex
  • 105
  • 1
  • 8
2
votes
1 answer

What is the right syntax for an IAM policy to add to AWS Secret Manager to restrict access by IP

I am creating a Secret in AWS secret manager and I try to put in a policy to restrict access by IP. I do it under the Secret console in [Resource Permissions] section. I keep getting syntax error, but not what is the error. Here is the policy I am…
Itay Moav -Malimovka
  • 52,579
  • 61
  • 190
  • 278
2
votes
1 answer

How to properly use AWS Secrets Manager in a Elastic Beanstalk Deployment on Windows Server

Im trying to pass my applications connectionstring from Secrets Manager into Elastic Beanstalk during deployment. If i remote desktop onto the server i am deploying to, i can run the following command - aws secretsmanager get-secret-value…
2
votes
1 answer

How to use AWS Secrets Manager Caching for Python Lambda?

I am referring the aws-secretsmanager-caching-python documentation and trying to cache the retrieved secret from secrets manager however, for some reason, i am always getting timeout without any helpful errors to troubleshoot this further. I am able…
2
votes
2 answers

Replace variable in AWS cli to update secret manager password

I am newbie in AWS world. I would like to update the secret credentials from aws cli. Below command works perfect for me: aws secretsmanager update-secret --secret-id mysecret --region us-east-1 \ --secret-string…
sam
  • 43
  • 1
  • 4
2
votes
1 answer

Issue when using Terraform to manage credentials that access RDS database

I created a secret via Terraform, the secret is for accessing an RDS database which is also defined in Terraform, and in the secret, I don't want to include username and password, so I created an empty secret then add the credentials manually in AWS…
2
votes
0 answers

Retrieving secret from AWS secrets manager causes issue when decoding JWT

I'm retrieving a secret from AWS Secrets Manager that's used to decode a JWT on a webserver. The program retrieves the secret correctly and I confirm its identical to the one used to encode the jwts. However, the jwt-go library is unable to decode…
Prad
  • 53
  • 3
2
votes
1 answer

Should I use Secrets Manager for storing customers' API keys?

I'm implementing a service that requires me to call my customers' API using their API keys. My customers will provide me with their API keys in their accounts. When I'm calling my customers' API, I have to retrieve their API key before making the…
Carven
  • 14,988
  • 29
  • 118
  • 161
2
votes
1 answer

Spring Cloud Kafka and AWS Secrets 'inputBindingLifecycle' exception

I am trying to integrate our spring cloud kafka apps with aws secrets on spring boot 2.4 and Spring cloud 2020.0.1 Here is my test code: @SpringBootApplication public class DemoApplication { @Value(value = "${secret-property}") private…
2
votes
0 answers

Return credentials from Jenkins shared library

I am working on an integration with Jenkins and AWS Secrets Manager and the plugin does not support arbitrary key-value pair. What I am after is a solution that can parse some data (i.e. the AWS credential) and return a different credential that has…
2
votes
1 answer

upload file into AWS Secrets Manager using Terraform

What specific changes need to be made to the syntax of the example below in order for Terraform to successfully upload the named file into a secret in AWS Secrets Manager? Note that an AWS EC2 instance running Amazon Linux 2 is also created by the…
2
votes
1 answer

Is it possible to set up a multiuser secret rotation in AWS secrets manager with terraform?

... Given the existing capabilities of terraform (v.3.23.0) https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/secretsmanager_secret_rotation Or is it simply not available in terraform yet as of this writing? Obviously, this…
BPS
  • 607
  • 8
  • 29