awsm-env 0.0.5

A lightweight utility for syncing AWS Secrets Manager secrets to environment variables.
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49

use std::collections::HashMap;

use itertools::Itertools;

use crate::error::{AwsApiError, AwsSdkError, Error};

/// Fetches secrets from AWS Secrets Manager
// All the expects are because the AWS SDK isn't idiomatic
pub async fn fetch_secrets_from_aws(ids: Vec<String>) -> Result<Vec<String>, Error> {
    let config = aws_config::load_from_env().await;
    let client = aws_sdk_secretsmanager::Client::new(&config);

    let mut key_map = HashMap::new();

    for chunk in &ids.clone().into_iter().chunks(20) {
        let secrets = client
            .batch_get_secret_value()
            .set_secret_id_list(Some(chunk.collect()))
            .send()
            .await
            .map_err(AwsSdkError::from)?;

        if let Some(error) = secrets.errors.and_then(|errors| errors.into_iter().next()) {
            return Err(AwsApiError::from(error).into());
        };

        key_map.extend(
            secrets
                .secret_values
                .expect("should have secrets if there were no errors")
                .into_iter()
                .map(|s| {
                    (
                        s.name.expect("should have a name"),
                        s.secret_string.expect("should have a secret string"),
                    )
                }),
        );
    }

    Ok(ids
        .into_iter()
        .map(|s| {
            key_map
                .remove(&s)
                .expect("should have a result at this point")
        })
        .collect())
}