Server Fault
Server Fault

Questions tagged [aws-secrets-manager]

7 questions
16
votes
2 answers

How to set a binary secret value from the CLI for AWS Secrets Manager

How do I set a binary value on a secret in AWS Secrets Manager using the CLI? The docs say: --secret-binary (blob) (Optional) Specifies binary data that you want to encrypt and store in the new version of the secret. To use this parameter in the…
Rich
  • 824
4
votes
1 answer

How to retrieve binary file from aws secrets manager using aws cli

After uploading a binary secret using something like aws secretsmanager create-secret --name my-file-secret --secret-binary fileb://mysecret.file I'm having trouble retrieving the file using the CLI. How can I do this ?
maximede
  • 191
4
votes
2 answers

Create a role to read from AWS Secrets Manager

I use AWS Secrets Manager to store passwords which I need to read from services launched in my EC2 instances. In order to do that one solution that I thought about where creating a role which can access to Secrets Manager and attach it to instances…
Rourich
  • 43
  • 4
2
votes
1 answer

"access to kms is not allowed" error returned when trying to fetch secret from AWS Secrets Manager

An IAM user in our aws account is trying to fetch a particular secret from Secrets Manager via aws cli but they cannot do that although they should have required permissions: aws secretsmanager get-secret-value --secret-id "config/my/secret" This…
Juraj Martinka
  • 620
1
vote
1 answer

What happens when AWS secrets manager rotates a secret

I'm exploring AWS secret manager for an upcoming project. I got a bit confused around the concept of rotating secrets. It seems I can only keep the secret for a specific duration and after that it will rotate. What happens once it gets rotated? Does…
user3360140
  • 293
  • 1
  • 5
  • 15
0
votes
1 answer

Can't install SecretProiderClass CRD in AWS EKS

In my AWS EKS Cluster, I need to access a secret in my AWS SecretManager. To that end, I'm trying to apply a SecretProviderClass that looks like: apiVersion: secrets-store.csi.x-k8s.io/v1 kind: SecretProviderClass metadata: name:…
idbentley
  • 113
0
votes
0 answers

single tenant ecs safe storage of secrets

I have a single tenant setup where I deploy a ECS Fargate cluster/service/task per client. The projects have a remote DB path/credentials, some Rails secrets, and other per client specific secrets. And I'm deploying these via GH Actions. The problem…
MB.
  • 345