Questions tagged [aws-secrets-manager]

AWS Secrets Manager helps encrypt, store, and retrieve credentials for your databases and other services. Instead of hardcoding credentials in apps, you can make calls to Secrets Manager to retrieve credentials whenever needed. Secrets Manager helps protect access to IT resources and data by rotating and managing access to secrets.

See also: What Is AWS Secrets Manager? - AWS Secrets Manager

864 questions
3
votes
1 answer

AWS Secrets Manger - Always Error even when the policy is correct

I have the following resource policy for my AWS Secrets Manager { "Version" : "2012-10-17", "Statement" : [ { "Sid" : "policyForSomething", "Effect" : "Deny", "Condition": { "StringNotEquals": { …
3
votes
1 answer

Securely Get Access Key / Secret from CloudFormation AccessKey Creation

I've created a CloudFormation template that successfully creates an IAM user and an AccessKey and assigns that AccessKey to the IAM user. Right now I am getting the AccessKey's secret by outputting it in the Outputs section of the CloudFormation…
3
votes
1 answer

How does Lambda within subnet access VPC endpoint?

I have a lambda function within a VPC that rotates rds password. When I test lambda function with secret manager vpc endpoint as following: Case 1. Lambda in public subnet - VPC endpoint attach with public subnet => Rotation is OK Case 2. Lambda in…
3
votes
1 answer

JWT key rotation

I have been thinking and searching many different approaches but I am not sure what is the best solution to solve this problem. Imagine you have 50 microservices that communicate via symmetric JWT - shared key. At the moment the jwt is stored on…
Rob
  • 89
  • 6
3
votes
1 answer

How do I access an AWS secret once configured in .NET?

I have been trying to find a way to use ASP .NET Core 2.1 and retrieve secrets from Secret Manager in AWS. I found a great blog post and it appears to compile/run without errors but I cannot for the life of me figure out how to access the…
user68288
  • 702
  • 2
  • 6
  • 27
3
votes
1 answer

AWS Lambda Function Appears to Hang

This is most likely a misunderstanding on my part but here it goes. I have a lambda function. The only thing it is doing at the moment is retrieving a secret from secrets manager. If I run it in an async function in my debugger (cloud9 in this…
3
votes
2 answers

Why does AWS add uid to Secret Store ARN?

I hate it when I'm creating a secret store in AWS and it adds a random uid at the end of the ARN. Example: arn:aws:secretsmanager:us-east-1:xxxxxxxx:secret:secrets-store-development-k8s-klbiCG This messes up Terraform templates and makes me cringe…
Bogdan Polovko
  • 115
  • 1
  • 11
3
votes
1 answer

Resolve secret created with CDK in a Cfn L1 Construct

How can I use an L2 Secret created with Secrets Manager to resolve as an L1 Cfn Property value? from aws_cdk import ( core, aws_secretsmanager as secretsmanager, aws_elasticache as elasticache ) class MyStack(core.Stack): def…
3
votes
0 answers

Can we connect AWS secret Manager directly from frontend application like React?

It might be a very basic question to ask .But as I am very naive to AWS now and has been basically a frontend developer I would like to have some guidance related to fetching secrets from AWS secret manager from a react application. Can we connect…
Payel Dutta
  • 742
  • 10
  • 23
3
votes
1 answer

Terraform Lambda in VPC (Peered with MongoDB Atlas) Connection NAT Gateway

I have built out a Terraform config that deploys a MongoDB atlas cloud cluster, and sets up a VPC peer with my AWS account. The terraform configuration stores the credentials in AWS Secrets Manager. Unfortunately, my Lambda is unable to access the…
3
votes
1 answer

How to get private key from secret manager?

I need to store a Private Key in AWS. Because when I create an ec2 instance from AWS I need to use this primary key to auth in provisioner "remote-exec". I don't want to save in repo AWS. It's a good idea to save a private key in Secret Manager? And…
3
votes
1 answer

Aws secrets manager

I tried writing a hostedlambdarotation property in AWS cloudformation to rotate my credentials after every X days, but the deployment fails stating the following error - "Transform AWS::SecretsManager-2020-07-23 failed with: PostgreSQLSingleUser is…
3
votes
1 answer

Using AWS SecretManager with Fargate: Unable to locate credentials

The scenario: We have a K8s cluster on EKS using Fargate nodes. I am storing our credentials/secrets in AWS SecretManager and want our workers deployed on AWS Fargate to access these secrets directly. The issue: The python code inside the containers…
3
votes
2 answers

What is the best possible way to pass API key for AWS EC2 user data script

I have bash script to run as user data script when launching EC2 instance. For that I need to pass external API access key id and secret key. I don't want to store these keys in my user data scripts as it is visible in plaintext. Is there any way…
hlesnt395
  • 603
  • 10
  • 30
3
votes
2 answers

How to check AWS secretsmanager rotation is completed successfully

Created a secret in AWS secretsmanager, enabled automatic rotation with lambda function. when I trigger rotation for the first time from cli, It's not completed. This is the initial state of secret when updated secret in aws console manually. # aws…