library(botor) currently has ssm_get_parameter, which can retrieve from both AWS Parameter Store and Secrets Manager (if you know all the details to make that happen)
I wrote two helper fns ssm_get_secrets() and sm_get_secrets() for retrieving secrets in AWS Secrets Manager. Users can specify their secrets in two formats:
xx_get_secrets(path = 'your/secret/key')
xx_get_secrets(path = 'your/secret', key = key)
ssm_get_secrets() uses botocore.client.SSM
Complexities:
Users have to grant permission to both Parameter Store and SecretManager, which is fine when the users use both. It'd be hard to debug when the users use only SecretManager
Users have to remember to enter key in the format of /aws/reference/secretsmanager/your/secret. No big deal and we can certainly make this clear in description.
sm_get_secrets() uses botocore.client.secretsmanager. Function and AWS permission would be cleaner. The only downside is that we need to add more functions
@daroczig
UPDATE (May 21, 2020):
Decide to only add sm_get_secrets() for retrieving secrets from AWS Secret Manager. The function supports retrieving value from json-structured secrets by a key or a vector of keys. Users can also get secrets in raw format (useful when secrets are not json or you simply want unparsed output)
library(botor)
currently hasssm_get_parameter
, which can retrieve from both AWS Parameter Store and Secrets Manager (if you know all the details to make that happen)I wrote two helper fns
ssm_get_secrets()
andsm_get_secrets()
for retrieving secrets in AWS Secrets Manager. Users can specify their secrets in two formats: xx_get_secrets(path = 'your/secret/key') xx_get_secrets(path = 'your/secret', key = key)ssm_get_secrets()
usesbotocore.client.SSM
Complexities:
/aws/reference/secretsmanager/your/secret
. No big deal and we can certainly make this clear in description.sm_get_secrets()
usesbotocore.client.secretsmanager
. Function and AWS permission would be cleaner. The only downside is that we need to add more functions@daroczig
UPDATE (May 21, 2020): Decide to only add
sm_get_secrets()
for retrieving secrets from AWS Secret Manager. The function supports retrieving value from json-structured secrets by a key or a vector of keys. Users can also get secrets in raw format (useful when secrets are not json or you simply want unparsed output)