Questions tagged [aws-secrets-manager]

AWS Secrets Manager helps encrypt, store, and retrieve credentials for your databases and other services. Instead of hardcoding credentials in apps, you can make calls to Secrets Manager to retrieve credentials whenever needed. Secrets Manager helps protect access to IT resources and data by rotating and managing access to secrets.

See also: What Is AWS Secrets Manager? - AWS Secrets Manager

864 questions
5
votes
1 answer

How do I list deleted secrets in AWS Secrets Manager?

Looking at the man page for list-secrets, there is no special options to show deleted or not. It does not list deleted secrets. However, the output definition includes a "DeletedDate" timestamp. The ListSecrets API does not show any option for…
Max Allan
  • 859
  • 1
  • 8
  • 25
5
votes
1 answer

Create secrets in AWS Secrets Manager

I want to use the AWS secrets manager to manage all my secrets for my CDK stacks. Since I would be managing hundreds of secrets, I want to create a CDK stack that would allow me to create these secrets in different environments (and manage them).…
5
votes
1 answer

Is it possible to Store AWS API gateway API keys in secret manager and rotate them

I want to create multiple API keys and distribute among the customers, Once I create an API key and attach it to usage plan I want to save it to secrets manager, Can secret manager apply the rotation policy to the API keys in API gateway or we need…
5
votes
2 answers

Terraform and AWS: modify an existing policy

I have an existing IAM policy attached to a role. Each time a new secret is created in the Secrets Manager, I need to append the new ARN to the policy. Can this be done with Terraform? I've managed to import the policy into the terraform.state file,…
5
votes
1 answer

AWS Secrets Manager Exception AccessDenied

The issue briefly explained: I am getting this AWSSecretsManagerException AccessDenied when my web application makes API calls to AWS Secrets Manager to get secret keys/data. The issue in a little more detail: I have a Web Application war file…
5
votes
3 answers

How to update AWS Secrets Manager via python?

I can't find any documentation on how to upload/update values to the AWS secrets manager. I can only retrieve the values via python. Is there a workaround on this?
Woootiness
  • 1,882
  • 2
  • 15
  • 18
5
votes
3 answers

AWS (ResourceNotFoundException) when calling the GetSecretValue operation: Secrets Manager can't find the specified secret

Having ResourceNotFoundException when using secrets ARN Tried getting secret only using secret name - doesn't work. Tried getting secret using ARN - doesn't work. I've checked my assumed role's policy and SM is set as far as I understand like this…
David Barth
  • 59
  • 1
  • 1
  • 3
5
votes
2 answers

UnrecognizedClientException: The security token included in the request is invalid when calling AWS.SecretsManager

I'm implementing AWS ClientManager to obtain secret variables saved in AWS. I had initial implementation like below: // Load the AWS SDK var AWS = require('aws-sdk'), region = "us-west-2", secretName = "secretName", accessKeyId =…
Mani
  • 2,391
  • 5
  • 37
  • 81
5
votes
2 answers

Referencing Secrets Manager secret in cloudFormation template

i have piece of cloudFormation code "dareMeXDevCloudwatchMissingPayoutsJob": { "Type": "AWS::Events::Rule", "DependsOn": [ "xxx" ], "Properties": { "Description": "xxxxx)", "RoleArn": { …
5
votes
3 answers

Reading a secret using CloudFormation

I am trying to create an AWS stack in CloudFormation having a secret in the JSON. I don't want the value of the secret displayed in the parameters and I don't want my instance (fargate or ec2) to access the secrets manager. I want CloudFormation to…
Alexandre Santos
  • 8,170
  • 10
  • 42
  • 64
5
votes
3 answers

Rotating RDS secrets in AWS with open connections

If secrets are rotated while a connection to RDS is currently open, will that connection still be able to query the database, or will it become inactive?
foobarbaz
  • 508
  • 1
  • 10
  • 27
4
votes
1 answer

"get_secret_value" timeout in lambda in VPC, even though lambda is connected to internet

def get_secret(): secret_name = "--secret-name-here--" region_name = "--region-here--" # Create a Secrets Manager client session = boto3.session.Session() print("B") client = session.client( …
4
votes
2 answers

Env variable from AWS Secrets Manager in Kubernetes

In EKS I am trying to use SecretProviderClass to provide secrets as environment variables to containers. I can see the secret mounted inside the container but no combination of key/names is allowing me to use it as an environment variable. Insode…
jonny
  • 508
  • 5
  • 11
4
votes
0 answers

How to use spring-cloud spring-cloud-starter-aws-secrets-manager-config?

looking for some advice on using spring-cloud-starter-aws-secrets-manager-config 2.4.1 with spring-boot 2.6.8 . Been trying various things without success so any hits, advice or links to examples would be great. Added…
4
votes
1 answer

how to connect an aws api gateway to a private lambda function inside a vpc

I am trying to connect an aws api gateway to a lambda function residing in a VPC then retrieve the secret manager to access a database using python code with boto3. The database and vpc endpoint were created in a private subnet. lambda function def…