AWS Secrets Manager

• Name: AWS Secrets Manager
• Category: Secret manager

​

Configuration

Configu needs to be authorized to access your AWS Secrets Manager account. By default, Configu uses the standard authentication methods that the AWS SDKs use, if you have the right IAM access credentials, there’s no special action to take. Otherwise, you need to supply SecretsManagerClient Configuration.

​

Limitations

• A secret scheduled for deletion cannot be changed by the Configu Orchestrator. You will need to manually cancel the secret deletion.

​

Usage

​

.configu store declaration

stores:
  my-store:
    type: aws-secrets-manager
    configuration:
      credentials:
        accessKeyId: <access-key-id>
        secretAccessKey: <secret-access-key>
      region: us-east-1

​

CLI examples

​

Upsert command

configu upsert --store "my-store" --set "test" --schema "./start.cfgu.json" \
    -c "GREETING=hey" \
    -c "SUBJECT=configu node.js sdk"

​

Eval and export commands

configu eval --store "my-store" --set "test" --schema "./start.cfgu.json" \
 | configu export

​

Examples

Secrets list after upsert:

Values upserted to the test config set:

​

References

• Integration documentation: https://docs.aws.amazon.com/secretsmanager