regent-sdk 0.6.0

Multi-paradigm configuration management system as a library
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108

use serde::de::DeserializeOwned;
#[allow(unused)]
use tracing::{debug, error, info, trace, warn};

use crate::error::RegentError;
use crate::secrets::Secret;
use crate::secrets::SecretProvidingSolution;

use aws_config::SdkConfig as AwsConfig;
use aws_sdk_secretsmanager::Client;

// https://docs.aws.amazon.com/secretsmanager/latest/userguide/retrieving-secrets-rust.html

#[derive(Clone)]
pub struct AwsSecretsManagerProvider {
    aws_client: Client,
}

impl AwsSecretsManagerProvider {
    pub fn from(aws_config: AwsConfig) -> AwsSecretsManagerProvider {
        Self {
            aws_client: Client::new(&aws_config),
        }
    }
}

impl SecretProvidingSolution for AwsSecretsManagerProvider {
    async fn connect(&mut self) -> Result<(), RegentError> {
        match self.aws_client.get_random_password().send().await {
            Ok(_aws_response) => Ok(()),
            Err(details) => {
                error!("Failed to query AWS Secretsmanager : {:?}", details);
                Err(RegentError::FailedToGetSecret(format!(
                    "Failed to query AWS Secretsmanager : {:?}",
                    details
                )))
            }
        }
    }

    async fn get_secret_typed<T: DeserializeOwned>(
        &self,
        secret_reference: &str,
    ) -> Result<Secret<T>, RegentError> {
        match self
            .aws_client
            .get_secret_value()
            .secret_id(secret_reference)
            .send()
            .await
        {
            Ok(aws_response) => match aws_response.secret_string() {
                Some(clear_secret_content) => {
                    match serde_json::from_str::<T>(&clear_secret_content) {
                        Ok(content) => Ok(Secret::from(secret_reference, content)),
                        Err(_parse_details) => Err(RegentError::FailureToParseContent(format!(
                            "Content received from secret provider but failure to parse as {}",
                            std::any::type_name::<T>()
                        ))),
                    }
                }
                None => {
                    error!("Empty response from AWS Secretsmanager");
                    Err(RegentError::FailedToGetSecret(format!(
                        "Empty response from AWS Secretsmanager"
                    )))
                }
            },
            Err(details) => {
                error!("Failed to query AWS Secretsmanager : {:?}", details);
                Err(RegentError::FailedToGetSecret(format!(
                    "Failed to query AWS Secretsmanager : {:?}",
                    details
                )))
            }
        }
    }

    async fn get_secret_raw(&self, secret_reference: &str) -> Result<Secret<String>, RegentError> {
        match self
            .aws_client
            .get_secret_value()
            .secret_id(secret_reference)
            .send()
            .await
        {
            Ok(aws_response) => match aws_response.secret_string() {
                Some(clear_secret_content) => Ok(Secret::from(
                    secret_reference,
                    clear_secret_content.to_string(),
                )),
                None => {
                    error!("Empty response from AWS Secretsmanager");
                    Err(RegentError::FailedToGetSecret(format!(
                        "Empty response from AWS Secretsmanager"
                    )))
                }
            },
            Err(details) => {
                error!("Failed to query AWS Secretsmanager : {:?}", details);
                Err(RegentError::FailedToGetSecret(format!(
                    "Failed to query AWS Secretsmanager : {:?}",
                    details
                )))
            }
        }
    }
}