search

elastic / elastic-serverless-forwarder

Elastic Serverless Forwarder
Other
34 stars 34 forks source link

Support SSM (Systems Manager) parameters #728

Open ltflb-bgdi opened 3 weeks ago

ltflb-bgdi commented 3 weeks ago

Describe the enhancement: There are two ways to store secrets in AWS:

Currently, only aws secrets are supported: config.yaml Deployment

Even though the docu only mentions secrets manager, the name of the parameter ElasticServerlessForwarderSSMSecrets gives the impression that SSM is suppored as well, what seems not to be the case.

It would be very helpful to additionally support ssm parameters as well.

Describe a specific use case for the enhancement or feature: Using credentials stored in ssm parameter store instead of sectets manager

Config example/proposal

Deployment:

parameter:
  ElasticServerlessForwarderSSMParameters: ["arn:aws:ssm:eu-central-1:123456:parameter/es_url"]

config.yaml:

inputs:
  - type: "s3-sqs"
    id: "arn:aws:sqs:%REGION%:%ACCOUNT%:%QUEUENAME%"
    outputs:
      - type: "elasticsearch"
        args:
          elasticsearch_url: "arn:aws:ssm:eu-central-1:123456789:parameter:es_url"