Questions tagged [aws-secrets-manager]

AWS Secrets Manager helps encrypt, store, and retrieve credentials for your databases and other services. Instead of hardcoding credentials in apps, you can make calls to Secrets Manager to retrieve credentials whenever needed. Secrets Manager helps protect access to IT resources and data by rotating and managing access to secrets.

See also: What Is AWS Secrets Manager? - AWS Secrets Manager

864 questions
2
votes
3 answers

How can I insure that my retrieval of secrets is secure?

Currently I am using Terraform and Aws Secrets Manager to store and retrieve secrets, and I would like to have some insight if my implementation is secure, and if not how can I make it more secure. Let me illustrate with what I have tried. In…
alt-f4
  • 2,112
  • 17
  • 49
2
votes
2 answers

asm fetching username: authorizationdata is malformed, empty field

Here are the steps I did and got the error every time... Created docker registry in jfrog artifactory and added container there. create access token on jfrog artifactory create secret in aws secret manager side (username: password:). Added Task…
2
votes
1 answer

Best practice - how to pass SES IAM User credentials to an Fargate Task?

I 've got a question regarding the handling of "hardcoded" secrets in AWS. Here is my setup: We are running a Fargate cluster consisting of 3 services. One of the services (The backend) needs credentials to our SES account (mail sending) and S3…
2
votes
2 answers

CloudFormation: Dynamic reference to SecretManager value not working for Resource's Tag Property

I want to store a secret in AWS secrets manager and retrieve it in a CloudFormation template. To test it I just put it in the value of a tag - MainRouteTable: Properties: Tags: - Key: Environment Value: LIVE -…
2
votes
1 answer

How to pass the DB AWS secret into tomcat context.xml?

I have a context.xml where I am connecting to DB. WEB-INF/web.xml ${catalina.base}/conf/web.xml
rakeshh92
  • 885
  • 2
  • 10
  • 18
2
votes
0 answers

AWS SecretsManager password rotation does not work in Rails

We are using AWS SecretsManager (SM) to store a rotating database password for our rails app. However, when SM rotates the password, we get "FATAL: password authentication failed for user". The password is read in database.yml password: '<%=…
2
votes
1 answer

What is the best way to save credentials in lambda?

I need to access some credentials on lambda functions and one way to do that is to put them in environment variables. However, the values of these credentials are visible in the lambda console. I am thinking to put them in secret manager or…
Joey Yi Zhao
  • 37,514
  • 71
  • 268
  • 523
2
votes
1 answer

Query secret value (password) from a JSON string

I need to query the secret value from AWS Secrets Manager within Jenkins: This is part of the pipeline: sec=$(aws secretsmanager get-secret-value \ --secret-id mySecretId \ --query 'SecretString' \ --output text) echo "${sec}" # Result:…
2
votes
1 answer

Is AWS lambda function doing some caching when it retrieves an AWS secret

I noticed that when i updated the secret, it takes sometime before the lambda is able to retrieve the updated secret value. I wonder if there is some caching happening during lambda invocation.
alegria
  • 1,290
  • 14
  • 23
2
votes
1 answer

Fetching keys from AWS Secret Manager

I am trying to fetch my Secret keys and Id( to access aws dynamo db ) from AWS Sceret Manager. What I am able to do: access the dynamo db table with python script locally. access the dynamo db table with python flask local server. (This case it…
2
votes
1 answer

How to get credentials for a RDS read replica?

I have created a read replica for my Production RDS instance, However I don't know where can I see the log-in credentials of the replica. When I go to the secrets manages screen and try to create a new secret the replica instance is not present. And…
2
votes
0 answers

Read from AWS Secret Manager during .net core Startup

I have a .net core 3.1 web application that reads a variable from the AWS secret manager. I successfully make the call to the secret manager from within one of the controllers. But I'd instead like to make this call once during startup, and have…
CorribView
  • 711
  • 1
  • 19
  • 44
2
votes
3 answers

Terraform AWS Provider: SecretsManager can't apply because version was deleted

We have an AWS SecretsManager Secret that was created once. That secret will be updated by an external job every hour. I have the problem that sometimes the terraform plan/apply fails with the following message: AWS Provider 2.48 Error: Error…
2
votes
1 answer

Adding a aws secret from secrets manager to lambda environment variable in the portal UI configuration

So,I want to put the secret from the secretmanager here, but it doesn't seem to convert or get the value. Is there anyway to put it here. Other solution would be to put it in the deploy, or to keep it like this, and have code in my function grab…
Dan Parker
  • 823
  • 1
  • 11
  • 27
2
votes
1 answer

Accessing AWS APIs from within a lambda function?

I'm writing my first lambda function (in Python), and I'm a little confused about how credentials are supposed to work in the lambda environment. I'm trying to retrieve a secret (for Aurora database access) from the aws secrets api, using their…
larsks
  • 277,717
  • 41
  • 399
  • 399