Questions tagged [aws-secrets-manager]

AWS Secrets Manager helps encrypt, store, and retrieve credentials for your databases and other services. Instead of hardcoding credentials in apps, you can make calls to Secrets Manager to retrieve credentials whenever needed. Secrets Manager helps protect access to IT resources and data by rotating and managing access to secrets.

See also: What Is AWS Secrets Manager? - AWS Secrets Manager

864 questions
9
votes
1 answer

Unknown service: 'secretsmanager' or AWS Secrets Manager service is not in the list of AWS CLI

I was trying to use AWS secrets manager service for storing secret keys. I could store the key in the secrets manager, but while retrieving the key using the code they provide I'm getting this error. UnknownServiceError: Unknown service:…
Neron Joseph
  • 1,675
  • 22
  • 39
8
votes
3 answers

How to retrieve SecretsManager secret in AWS CDK

I'm setting up a Fargate service in AWS using CDK const albFargateService = new ecs_patterns.ApplicationLoadBalancedFargateService( this, 'FargateService', { vpc: ..., taskImageOptions: { image: ..., …
MEMark
  • 1,493
  • 2
  • 22
  • 32
8
votes
1 answer

getSecretValue callback is not working in AWS Lambda

I'm trying to retrieve Secret Value from AWS Secret Manager using aws-sdk for Javascript, I'm using the code snippet provided by Secret Manager, I have included this code in Lambda function, but I can't see any console logs defined inside the…
8
votes
1 answer

`aws secretsmanager list-secrets` command to return secrets and filter them by tag

How do I call the aws secretsmanager list-secrets command and filter secrets by their tags? I don't see examples of this here: https://docs.aws.amazon.com/cli/latest/reference/secretsmanager/list-secrets.html Also, Amazon's docs seem to be wrong. It…
red888
  • 27,709
  • 55
  • 204
  • 392
8
votes
2 answers

Secrets Manage: Fail to rotate the secret, cannot invoke the specified Lambda function

Error: Secrets Manager cannot invoke the specified Lambda function. Ensure that the function policy grants access to the principal secretsmanager.amazonaws.com I'm using Secret Manager to store my key for verifying JWTs. My planned configuration is…
Schalton
  • 2,867
  • 2
  • 32
  • 44
8
votes
2 answers

Python Connect to AWS Aurora Serverless MySQL Using SQLAlchemy

Is there a way to specify my connection with SQLAlchemy to an AWS RDS Aurora Serverless MySQL database instance without a Secrets Manager ARN? I have the database username, password, endpoint, ARN, etc., and ideally I would initialize an engine,…
8
votes
0 answers

Inject AWS Secrets Manager secret into API Gateway integration

I'm maintaining an API Gateway which proves its identity one of its upstream API (HTTP) proxy integrations using an API key in a GET parameter. (Certain limitations prevent a more robust client SSL certificate at this time.) Currently this API key…
Daniel B.
  • 1,650
  • 1
  • 19
  • 40
7
votes
2 answers

Importing secrets in Spring Boot application from AWS Secrets Manager

I stored my MySQL DB credentials in AWS secrets manager using the Credentials for other database option. I want to import these credentials in my application.properties file. Based on a few answers I found in this thread, I did the following: Added…
7
votes
1 answer

Is injecting secrets as environment variables in docker secure? Why does ECS and EKS support it?

I'm having a hard time reconciling some online advice that injecting secrets (usually passwords) as environment variables into docker containers is "not secure" with the native features of AWS ECS and even EKS where secrets stored within AWS Secrets…
Peter McEvoy
  • 2,816
  • 19
  • 24
7
votes
2 answers

VPC Endpoint for AWS Secrets Manager

Route table (in private subnet) won't change by adding VPCE as destination for aws secrets manager. Tried with new SG too (not using default SG). Any idea ?
rahul
  • 3,018
  • 4
  • 29
  • 28
7
votes
1 answer

Receiving error in AWS Secrets manager awscli for: Version "AWSCURRENT" not found when deployed via Terraform

Overview Create a aws_secretsmanager_secret Create a aws_secretsmanager_secret_version Store a uniquely generated string as that above version Use local-exec provisioner to store the actual secured string using bash Reference that string using the…
7
votes
1 answer

AWS Secrets for application.properties with Springboot lambda functions

I have created a Spring boot application where I want to use AWS secrets for application.properties. I am using spring boot 2.2.6.RELEASE and as per the documentation I have added following dependencies in my pom:
7
votes
2 answers

How to store certificate as a secret in AWS secret manager ? How to pass that secret in https call using AWS appSync resolver?

I need to get elements from AWS dynamoDB and thrid party https service and merge those results in AWS appSyn and send back the result as graphQL response Third party service which I am using, expects client side certificate. I am not finding proper…
Bhasam
  • 71
  • 1
  • 1
  • 3
7
votes
7 answers

Manage RDS access with AWS Secrets Manager

I am currently working with Eclipse and the AWS Toolkit for Eclipse. My project already works and it is doing its job, which is to connect to an RDS instance and return JSON objects to API Gateway calls. I just got a new requirement, we are to use…
6
votes
3 answers

AWS Multi Environment Secrets Manager arn keys

AWS Secrets Manager automatically adds a 6 character suffix to any generated secret name. Since the suffix is generated, it will be different across environments (i.e. prod, dev, etc). The suffix is there for a good reason, but what is a best…
TGH
  • 38,769
  • 12
  • 102
  • 135
1 2
3
57 58