Questions tagged [aws-secrets-manager]

AWS Secrets Manager helps encrypt, store, and retrieve credentials for your databases and other services. Instead of hardcoding credentials in apps, you can make calls to Secrets Manager to retrieve credentials whenever needed. Secrets Manager helps protect access to IT resources and data by rotating and managing access to secrets.

See also: What Is AWS Secrets Manager? - AWS Secrets Manager

864 questions
3
votes
1 answer

Fetching AWS SecretManager Secret as Integer Value per CDK

I'm trying to fetch the Secret as integer Value (port number) per CDK in order to create another resource. Basically when I need a String value for String parameters everything is working fine, but when I try to parse the String to int in order to…
3
votes
0 answers

AWX: ansible lookup to access extra environment variables

On my local machine I set the following environment vars: export AWS_ACCESS_KEY='xxxx' export AWS_SECRET_KEY='xxxx' export AWS_REGION='us-east-1' then in a playbook I put this: ... tasks: - name: Get some secrets vars: db_password:…
3
votes
1 answer

Spring boot and AWS Secret Manager - how to feature flaged the listener to set the secrets only on prod but not on test env

I need to integrate my spring boot app with the AWS Secret manager to retrieve the DB credentials from it. It has to work only on prod environment. This is what I did until now com.amazonaws
Jan
  • 31
  • 3
3
votes
0 answers

Call from Lambda to get secret from Secrets Manager is very slow

Recently I've started to use Secrets Manager to read credentials from Lambda, and I noticed that reading a secret from SM takes several seconds. Introducing VPC interface endpoint as described here:…
Alex
  • 47
  • 5
3
votes
1 answer

AWS-CDK: Cross account Resource Access and Resource reference

I have a secret key-value pair in Secrets Manager in Account-1 in us-east-1. This secret is encrypted using a Customer managed KMS key - let's call it KMS-Account-1. All this has been created via console. Now we turn to CDK. We have…
3
votes
1 answer

Reference Secrets Manager Parameters to Secret String

Is there any way to reference parameters in SecretString field in Secrets Manager via CloudFormation? The way I made the script, the !Ref parameter is a text and not a reference to the parameter. AWSTemplateFormatVersion: 2010-09-09 Parameters: …
3
votes
2 answers

How to extract fields from this AWS SecretsManager JSON Object?

I am using AWS Secrets manager to protect the database credits of my REST API. I am using AWS Lambda, API Gateway and RDS (MySQL). Below is how I get them. // Load the AWS SDK var AWS = require('aws-sdk'), region = "us-east-1", secretName =…
PeakGen
  • 21,894
  • 86
  • 261
  • 463
3
votes
1 answer

Glue Job Cross-Account secret access failing despite policies

Note: I have reviewed other questions and believe this is unique because it specifically pertains to cross-account secrets access using a glue job. I am having an issue where a glue job, assuming a service role in one account, is unable to access a…
3
votes
1 answer

How is AWS Secrets Manager used in an Elastic Beanstalk application safe if the AWS_SECRET_KEY has to be stored in the EBS environment vars?

I have the following setup: PHP Laravel application AWS Elastic Beanstalk -> EC2 webserver AWS Secret Manager to store the database password Elastic Beanstalk environment variable to store the AWS_SECRET_KEY TappNetwork/laravel-aws-secrets-manager…
3
votes
0 answers

Getting error Secret version has no stage for rotation of secret while rotating secret in AWS Secret Manager from lambda function

I have created the secter in AWS Secret Manager using single user rotation policy. Now I want to test the generated lambda function. While testing lambda function , I am providing args as shown below: { "Step": "setSecret", "SecretId":…
KCS
  • 2,937
  • 4
  • 22
  • 32
3
votes
1 answer

Resolve secretsmanager when invoking sam template locally

I am trying to invoke a lambda locally with sam local invoke. The function invokes fine but my environment variables for my secrets are not resolving. The secrets resolve as expected when you deploy the function. But I want to avoid my local code…
3
votes
1 answer

Kubernetes: external secrets operator error: InvalidClientTokenId: The security token included in the request is invalid

I am trying out external secrets operator (ESO) by following below: https://github.com/external-secrets/external-secrets https://external-secrets.io/guides-getting-started/ I am using minikube and AWS secrets manager to do this (I also tried it out…
3
votes
3 answers

Access AWS Secrets from React Amplify APP

This May be a stupid question, But is it safe to access AWS Secrets from my React front end app (Hosted on AWS Amplify) In this manner ? These Secrets are obviously not intended to be public so I dont want to use Amplify Env Variables option. If…
3
votes
1 answer

AWS CDK - Possible to access individual (JSON) value within a Secrets Manager secret when specifying secrets for a container?

I'm trying to put together a relatively simple stack on AWS CDK that involves an ApplicationLoadBalancedFargateService from aws-ecs-patterns. My problem involves secrets. I have a secret in Secrets Manager that has several key/values (I think…
3
votes
0 answers

How to integrate AWS secrets into React Application

We are using Terraform for CI/CD. I need to inject secret for password from AWS Secret Manager. How can we read the values into lambda variable so that I can use in .env property file.