search

aws / apprunner-roadmap

This is the public roadmap for AWS App Runner.
https://aws.amazon.com/apprunner/
Other
297 stars 14 forks source link

Allow build time secrets injection from AWS Secrets Manager #48

Open heretogo opened 3 years ago

heretogo commented 3 years ago

This is a request to support fetching build time secrets (such as a token to access private libraries) from AWS Secrets Manager and injecting them into the build time environment.

The main alternative I see is to somehow inject the credentials in the build command.

Another solution would be to leverage the instance profile's permissions and then to add some automation in the the Docker entrypoint to fetch the libraries at runtime. This is less ideal because it adds to the service startup time.

It would be nice if this were supported natively in App Runner.

toricls commented 3 years ago

I think #6 is a different request which is for runtime secrets. This one is secrets for build time to fetch private npm packages for example.

jordi-farre commented 3 years ago

I think #6 is a different request which is for runtime secrets. This one is secrets for build time to fetch private npm packages for example.

You are right, sorry for the misunderstood :)

ColeDCrawford commented 2 years ago

I think this is needed for AWS Copilot's "Request Driven Web Services" as well. Feel like this is a major blocker for many people to adopt this service.