ForgeRock / secret-agent

Generate random Kubernetes secrets and optionally store them in a Cloud Secret Manager
Apache License 2.0
17 stars 20 forks source link

AWS Secrets Manager update #256

Closed dnitsch closed 6 months ago

dnitsch commented 7 months ago

Ideally we need to be using the V2 of the AWS SDK to allow for WEB_IDENTITY auth method from the chain.

The current version of the SDK is a bit old and does not support this method.

We should use the DefaultConfig where possible

We should leave the existing method of sourcing secrets for explicit auth with AccessKey/SecretKey - however this should be considered a legacy.

the docs should reflect this change too.

Updating to 1.21 - not doing 1.22 just yet as that could use a bit of time in the wild to ensure any bugs are addressed and minors are released to address.