How are we doing? Please help us improve AWS. Take our short survey

Questions tagged [aws-secrets-manager]

AWS Secrets Manager helps encrypt, store, and retrieve credentials for your databases and other services. Instead of hardcoding credentials in apps, you can make calls to Secrets Manager to retrieve credentials whenever needed. Secrets Manager helps protect access to IT resources and data by rotating and managing access to secrets.

Filter by
Sorted by
Tagged with
0 votes
0 answers
22 views

Spring Cloud Config Server - AWS Secret Manager

I have an application used with spring cloud config server. SpringBoot 3.0.12 - Spring Cloud 2022.0.4 This application is used from other services at startup to read configuration properties. In these ...
Salvatore Bernardo's user avatar
1 vote
1 answer
31 views

Launch Jupyter ECS Fargate with password stored in AWS Secrets manager

I have successfully managed to run a Jupyter Lab on ECS by using Terraform. I want to protect the setup by using a password stored in AWS secrets manager. The point is that the parameter NotebookApp....
Leonardo's user avatar
  • 9,657
0 votes
2 answers
40 views

is secret-id of a secret manger secret in AWS globally unique?

aws secretsmanager get-secret-value --secret-id ${secretId} --profile ${customProfile} the above fails without the --region option but the below works without the region option aws s3api get-bucket-...
aijax's user avatar
  • 47
0 votes
0 answers
75 views

secretsmanager rotate-secret race conditions checking AWSPENDING is complete

I am trying to implement some type of polling mechanism that checks if an AWS Lambda password rotation has actually completed: From what I understand, a password rotation is completed if: The ...
jipot's user avatar
  • 180
0 votes
0 answers
39 views

environment variable values are not being used in the database connection

I am facing an issue with my Laravel application deployment on AWS ECS. The deployment process involves Jenkins, AWS ECR, and ECS. The new task is created, but there's an "Access Denied" ...
Spiral's user avatar
  • 1
-1 votes
0 answers
11 views

AWSSecretsManagerMSSQLDriver stops working when I add aws-java-sdk library asi dependendency

I use AWSSecretsManagerMSSQLDriver 1.0.6 to connect to aws RDS db. Everything works fine. But when I try to add aws-java-sdk library, that I need to connect to Redshift db via redshift-jdbc42, the app ...
Jareth's user avatar
  • 1
0 votes
0 answers
31 views

AWS Java SDK V2 and aws-secretsmanager-jdbc incompatibility?

I have a Java application that uses some V2 dependencies to manage our AWS environment. Than, these are my other aws dependencies <dependency> <groupId>software.amazon.awssdk</...
MarioC's user avatar
  • 3,024
0 votes
0 answers
57 views

RDS Access Denied in ECS Fargate through Secret Manager

I am facing an issue with my Laravel application deployment on AWS ECS. The deployment process involves Jenkins, AWS ECR, and ECS. The new task is created, but there's an "Access Denied" ...
Spiral's user avatar
  • 1
0 votes
1 answer
28 views

Ruby AWS SDK secretsmanager 'undefined method `[]' for nil:NilClass (NoMethodError)'

I'm trying to use the AWS SecretsManager SDK in Ruby and I'm getting the following error: .rbenv/versions/3.2.2/lib/ruby/gems/3.2.0/gems/aws-sdk-core-3.186.0/lib/aws-sdk-core/ini_parser.rb:28:in `...
Alvaro's user avatar
  • 41
-1 votes
0 answers
23 views

Can we pass secret name as shared/non-prod/xyz-secret in secretRef in deployment.yaml

I am trying to use a common secret between multiple teams and thinking if there's a way to escape the forward slash '/' in the secret-name 'shared/non-prod/xyz-secret' as it is giving me following ...
Sanyam Grover's user avatar
-1 votes
2 answers
70 views

Secret manager access denied issue with boto3

I have a usecase to use the secret from A in all other accounts in that organization. I have provided permission for secret for organization and encrypted the secret with kms key . I have a role ...
Linuxuser's user avatar
0 votes
0 answers
22 views

How to retrieve the secrets from AWS Secrets manager and use in buildconfig.properties in android?

I have added some secret keys of my app in AWS Secrets Manager. Now I need to retrieve them in buildConfig properties of android (Kotlin), through which the values of the secret keys will be generated ...
Siva's user avatar
  • 1
0 votes
0 answers
37 views

How to set a pre-exiting password for an aws_db_instance resource, from a secure SSoT container while keeping it out of the state file?

I'm trying to find a solution for setting the master user password of an aws_db_instance from a pre-existing secret (which is currently in an existing Secrets Manager resource). If I use password = ...
Tar's user avatar
  • 8,659
0 votes
2 answers
62 views

Can I store a multi-level secrets JSON in AWS Secrets Manager?

Suppose I wanted to store something like: { "service_name": { "prod": "SECRET1", "dev": "SECRET2" } } Can I store such JSON ...
yuvalm2's user avatar
  • 905
0 votes
0 answers
36 views

CDK - Secure Method to Include Necessary Secrets in API Gateway Event Target

I have the following API Gateway EventBus event target defined in CDK: const key = cdk.aws_secretsmanager.Secret.fromSecretCompleteArn( this, 'key', process.env.key, ...
Sa'id Kharboutli's user avatar
1 vote
0 answers
25 views

Why does SecretManager not have service role wheareas it has interactions with many services?

I'm working on AWS service role. And i was wondering why secretsmanager doesn't have service role... I thought it was the case, for instance secretsmanager has interaction with lambda, kms AWS config,...
Zokulko's user avatar
  • 219
0 votes
2 answers
77 views

Create an Eventbridge rule from a Cloudtrail event in order to trigger a Lambda

I am trying to have a Lambda to trigger when a secret in aws Secrets Manager is rotated. So I am trying to use Cloudtrail for this. I am trying to follow this AWS documentation The documentation doesn'...
polo's user avatar
  • 165
0 votes
1 answer
31 views

How do I obtain my stored secrets with PHP on an EC2 launch template

I've read a lot about how to use SecretsManager and AWS Credentials properly to access my secrets via an attached instance role and a profile in /.aws/credentials containing my AWS credentials. But ...
FroddeB's user avatar
  • 23
0 votes
0 answers
123 views

How to fetch AWS secret from secret manager and use the value from key/value pair in subsequent step of GitHub Action

I have the secrets in my AWS secret manager, which I am fetching in my GitHub Action workflow through aws-cli. This returns me with the key/value pair in GITHUB_ENV/GITHUB_OUTPUT from which I retrieve ...
DumbCoder's user avatar
0 votes
0 answers
17 views

Concourse Pipeline Not Retrieving Configuration Values from AWS Secrets Manager

I'm experiencing a problem where my Concourse pipeline isn't picking up configuration values from AWS Secrets Manager. I have set up everything according to the documentation, and the necessary IAM ...
Vizeet Srivastava's user avatar
0 votes
1 answer
78 views

How to add/delete keys to an existing Secret in AWS SecretsManager with CloudFormation

Here is my CloudFormation (CFN) template that creates the secret named MySecret in AWS SecretsManager. Resources: MySecret: Type: "AWS::SecretsManager::Secret" Properties: ...
Rafiq's user avatar
  • 1,402
0 votes
1 answer
108 views

Ignore change for data source in Terraform?

I use terraform to provision an RDS database. After the database is created, I use local-exec block to overwrite its master-password inside the database itself, as in the secret store. My problem is ...
lony's user avatar
  • 6,965
0 votes
1 answer
49 views

AWS Local Lambda trying to connect to remote host via Secrets Manager?

tl;dr - When I run a local Lambda does it try to connect to remote RDS using the values from Secrets Manager (host for instance is a remote URL)? Expectation was that everything was emulated in Docker ...
AutoM8R's user avatar
  • 3,020
0 votes
1 answer
89 views

How to Seamlessly Integrate AWS Amplify with AWS CDK for Resource Sharing?

I'm working on a project that involves both AWS Amplify for frontend hosting and authentication and AWS CDK for backend resource management. I've come across a challenge where I need to share resource ...
Luke's user avatar
  • 871
0 votes
2 answers
50 views

Retrieve all my AWS Secret Manager in my Fargate Container

I'm using AWS ECS service to run my Docker containers (4 containers) Also used Secret Manager for storing and retrieve Environment Variables. I would like to pass my secret manager ARN. So the ...
Docker Issues's user avatar
0 votes
1 answer
85 views

How I can trigger a Lambda function each time I update AWS Secrets Manager?

I'm using AWS Secrets Manager, and I have also a Lambda function. How do I trigger my Lambda function each time I add/edit/delete (update) a secret in AWS Secrets Manager?
Docker Issues's user avatar
0 votes
0 answers
21 views

intuitlib.exceptions.AuthClientError: HTTP status 400, error message: b'{"error":"invalid_grant"}'

Authorization using Oauth 2.0 for the quickbooks service works, access updates and refresh tokens also work (Every 40 minutes). The problem is that it can work for 2 weeks or 3, but at one point the ...
Tallman's user avatar
0 votes
0 answers
69 views

Secret Manager Integration with EKS

--- apiVersion: apps/v1 kind: Deployment metadata: name: profile-deployment namespace: tsc-sandbox-deployments labels: app: smoothie svc: profile spec: replicas: 2 selector: ...
Deepali Verma's user avatar
0 votes
1 answer
35 views

"No key data found" when getting PGP private key from AWS Secrets Manager

I'm having some trouble getting a decryption tool to work on production. I'm using PGPainless in Java to decrypt documents using a preset private key and key passphrase. To test locally, I'm using a ...
tlhinman's user avatar
0 votes
1 answer
78 views

AWS Lambda Layer magical credentials

I have deployed a lambda layer in one account (Account A) and granted access to the rest of the organization, including numerous other accounts, as follows: aws lambda add-layer-version-permission \ ...
varontron's user avatar
  • 1,132
0 votes
1 answer
47 views

Is it possible to reference other secrets in AWS Secrets Manager?

I have 2 different secrets repositories in AWS Secrets Manager. Let's call them secrets-A and secrets-B, which are used by 2 different microservices which we'll call micro-A and micro-B. micro-A and ...
user1205577's user avatar
  • 2,400
-1 votes
1 answer
157 views

Unable to get IAM security credentials from EC2 Instance Metadata Service for .Net Core

I have a Windows service and I'm successfully able to get my AWS Credentials from the profile that is setup locally on the server. However for the ASP.NET core API application that I have setup it ...
Tom Kurian's user avatar
0 votes
0 answers
67 views

AWS Elastic Beanstalk not resolving secret from Secrets Manager

I'm following the instructions from https://docs.aws.amazon.com/elasticbeanstalk/latest/dg/single-container-docker-configuration.html#docker-configuration.remote-repo to inject secrets from Secrets ...
kierans's user avatar
  • 2,034
0 votes
0 answers
76 views

AWS CDK ECS DockerImageAsset cannot Access Token

I'm sorry for asking this and for my bad English, We have code in .cdk/lib/app.ts like this who before work fine for years : const image = new DockerImageAsset(this, "Image", { ...
Dejah's user avatar
  • 1
1 vote
1 answer
104 views

External-secret error AccessDeniedException for cross AWS Account secret manager

Describe the bug Trying to fetch the secret in AWS Account 1 (in which AWS EKS and ESO are installed ) from AWS Account 2 (in which the secret resists) but I faced this error: Warning UpdateFailed ...
Majid Faridi's user avatar
0 votes
1 answer
60 views

Failed to rotate AWS secret even though lambda test event passes?

I created a lambda for a secret rotation, quite simple: import os import boto3 import json def lambda_handler(event, context): new_secret = os.urandom(32).hex() secret_arn = event['SecretId'...
sneedster's user avatar
0 votes
0 answers
83 views

aws lightsail containers access to AWS Secret Manager

With AWS Lightsail containers, how do I securely provide access to secret environment variables such as API secret keys? When I create a deployment in AWS Lightsail containers, there is an option to ...
Sihoon Kim's user avatar
  • 1,589
0 votes
0 answers
99 views

SecretsManagerClient timeout when runing locally using lambda-local

I am using below code to retrieve from Secrets Manager. This is timingout when run locally using lambda-local let response = await client.send( new GetSecretValueCommand({ ...
ravthiru's user avatar
  • 9,038
0 votes
0 answers
21 views

AWSPENDING exists but throws ResourceNotFoundException on getSecret

While implementing a Lambda function to support auto-rotation for AWS secrets, I noticed a strange behaviour. Whenever the Secrets Managers triggers the rotation, it creates a new version AWSPENDING ...
Anish's user avatar
  • 167
1 vote
1 answer
125 views

How to pass a secrets manager value in HTTP header of an api gateway

I have a token saved in Secrets Manager and I need to set it in the Authorization var HTTP header. Is this possible? I tried to retrieve it using a lambda but not find a way to call my lambda to set ...
lkz's user avatar
  • 11
0 votes
1 answer
63 views

Python Lambda Function to check replication status on Secrets Manager

I am trying to write a Lambda Function in Python to check Secrets in Secrets Manager to see if Replication is turned on. I have the following Python Script: import boto3 def lambda_handler(event, ...
brianbelden's user avatar
0 votes
0 answers
53 views

AWS CloudFormation Secret Manager dynamic reference won't return the value

I have a very stupid situation. This is my very simple CF template AWSTemplateFormatVersion: 2010-09-09 Resources: MyIAMUser: Type: AWS::IAM::User Properties: UserName: '{{resolve:...
Fed.Ushel's user avatar
0 votes
1 answer
578 views

How do I use CDK to create an RDS with master credentials managed by AWS Secrets Manager

How do I create RDS with reference to Secrets Manager with CDK such as My script as below creates a string but not a dynamic reference to the Secrets: const masterSecret = new cdk....
RichardKang's user avatar
1 vote
0 answers
44 views

spring cloud secret management point to localstack

We're using spring cloud secret management to fetch secrets in AWS and use it our spring application (from property). For our development set up, we don't want to fetch the value of those properties ...
len's user avatar
  • 436
0 votes
1 answer
320 views

Why can I not access AWS Secrets Manager from ECS when instance role has permissions?

I have an ECS task definition that points at an image I am running. The task definition's Task Execution role includes the following permissions... { "Version": "2012-10-17", ...
Jackie's user avatar
  • 22.3k
1 vote
0 answers
402 views

Lambda function invoked before secrets extension initialized

I have been trying to use AWS secrets lambda extension to cache secrets from secrets manager. I have been following AWS doc for the implementation. If I fetch secrets without adding the cache layer, I ...
Abhijeet's user avatar
  • 196
0 votes
0 answers
142 views

Secret Manager for React JS application

What is best way to manage client side secrets of React JS application. I am mostly getting below options when search- .env file- I am already using it and want to use more secure option. Secret ...
Jayashri Shinde's user avatar
0 votes
0 answers
55 views

Micronaut Framework - Connect to AWS secret manager is failed when calling from AWS lambda

I have stored values in AWS secret manager using secret name : config/awsservices/db. I want to fetch these values using Micronaut framework. below the the configuration - bootstrap.yml micronaut: ...
vishal's user avatar
  • 319
1 vote
1 answer
349 views

Error: "botocore.exceptions.NoCredentialsError: Unable to locate credentials" when doing Docker build

I'm trying to get the secret from AWS like so: import boto3 import os mysql_secret = os.environ['MYSQL_SECRET'] def get_secret(): region_name = "us-west-2" # Create a Secrets ...
Raksha's user avatar
  • 1,609
1 vote
1 answer
250 views

In CloudFormation how can I link RDS and Secrets Manager so I don't have to hardcode the password?

I'm doing a personal project and trying to not hard code a database password into a cloudformation template. This is what I have so far: RDSPassword: Type: AWS::SecretsManager::Secret ...
MikeMac's user avatar
  • 47

1
2 3 4 5
18