aws-secrets 0.1.1

Retrieve AWS secrets and interact with Secrets Manager and SSM Parameter Store
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64

#![deny(warnings)]
#![warn(rust_2018_idioms)]

#[macro_use]
extern crate tracing;

mod utils;
use utils::*;

use serde_json::Value;
use structopt::StructOpt;

use aws_secrets::{config_from_env, SSMParamExt, SecretsExt};

#[derive(Debug, StructOpt)]
#[structopt(about = "Retrieve values from AWS Secrets Manager and AWS SSM Parameter Store.")]
struct Opt {
    /// Name of the Secret to retrieve the value of.
    #[structopt(short, long, default_value = "my-dummy-creds")]
    secret_name: String,
    /// Name of the Parameter to retrieve the value of.
    #[structopt(short, long, default_value = "/my/dummy/secure/param")]
    param_name: String,
    /// True to retrieve SSM Parameter without decryption (i.e. if the data type is `String`)
    #[structopt(short, long)]
    no_decrypt: bool,
}

#[tokio::main]
async fn main() -> Result<()> {
    sensible_env_logger::init_timed_local!();

    let Opt {
        secret_name,
        param_name,
        no_decrypt,
    } = Opt::from_args();

    // technically not needed
    let secret_name = secret_name.as_str();
    let param_name = param_name.as_str();

    trace!(profile = ?aws_profile(), "retrieving AWS config.");
    let shared_config = config_from_env().await;

    trace!(secret_name, "retrieving secret.");
    trace!(param_name, "retrieving parameter.");

    let get_param_fn = match no_decrypt {
        true => param_name.get_string(&shared_config),
        false => param_name.get_secure_string(&shared_config),
    };

    // retrieve all secret values concurrently
    let (param_value, secret_value) = tokio::try_join!(
        get_param_fn,
        secret_name.get_secret::<Value>(&shared_config),
    )?;

    trace!(?secret_value, "successfully retrieved the secret.");
    trace!(?param_value, "successfully retrieved the parameter.");

    Ok(())
}