Uh oh!
There was an error while loading.Please reload this page.
- Notifications
You must be signed in to change notification settings - Fork2
An AWS Secrets Manager Provider for Hush
License
gordalina/hush_aws_secrets_manager
Folders and files
Name | Name | Last commit message | Last commit date | |
---|---|---|---|---|
Repository files navigation
This package provides aHush Provider to resolve Amazon Web Services'sSecrets Manager secrets.
Documentation can be found athttps://hexdocs.pm/hush_aws_secrets_manager.
The package can be installed by addinghush_aws_secrets_manager
to your listof dependencies inmix.exs
:
defdepsdo[{:hush,"~> 1.0"},{:hush_aws_secrets_manager,"~> 1.1"}]end
This module relies onex_aws
to talk to the AWS API. As such you need to configure it, below is an example, but you can read alternative ways of configuring it intheir documentation.
As the provider needs to startex_aws
application, it needs to registered as a provider inhush
, so that it gets loaded during startup.
# config/config.exsaliasHush.Provider.AwsSecretsManagerconfig:ex_aws,access_key_id:[{:system,"AWS_ACCESS_KEY_ID"}],secret_access_key:[{:system,"AWS_SECRET_ACCESS_KEY"}]# ensure hush loads AwsSecretsManager during startupconfig:hush,providers:[AwsSecretsManager]
In order to retrieve secrets from AWS, ensure the service account you use has a similar policy as:
{"Version":"2012-10-17","Statement": [ {"Effect":"Allow","Action":"secretsmanager:GetSecretValue","Resource": ["arn:aws:secretsmanager:<region>:<account>:secret:<secret-name>","arn:aws:secretsmanager:us-east-1:000000000000:secret:config/password-MzBAO2" ] } ]}
The following example reads the password and the pool size for CloudSQL from secret manager into the ecto repo configuration.
# config/prod.exsaliasHush.Provider.AwsSecretsManagerconfig:app,App.Repo,password:{:hush,AwsSecretsManager,"CLOUDSQL_PASSWORD"},pool_size:{:hush,AwsSecretsManager,"ECTO_POOL_SIZE",cast::integer,default:10}
Hush is released under the Apache License 2.0 - see theLICENSE file.
About
An AWS Secrets Manager Provider for Hush
Topics
Resources
License
Uh oh!
There was an error while loading.Please reload this page.
Stars
Watchers
Forks
Sponsor this project
Uh oh!
There was an error while loading.Please reload this page.
Contributors2
Uh oh!
There was an error while loading.Please reload this page.