secpar 0.3.0

A tool that leverages AWS Rust SDK for Secrets Manager & Parameter Store
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131

use clap::{Args, Parser, Subcommand};

/// secpar CLI
#[derive(Debug, Parser)]
#[command(name = "secpar", version, about)]
pub struct Cli {
    #[command(flatten)]
    pub global: GlobalOpts,
    #[command(subcommand)]
    pub command: Command,
}

/// Global options shared across commands
#[derive(Debug, Args)]
pub struct GlobalOpts {
    /// AWS region (overrides AWS_REGION/AWS_DEFAULT_REGION)
    #[arg(long, env = "AWS_REGION", default_value = "us-east-1")]
    pub region: String,
    /// AWS profile name
    #[arg(long, env = "AWS_PROFILE")]
    pub profile: Option<String>,
}

/// top level commands
#[derive(Debug, Subcommand)]
pub enum Command {
    /// Secrets Manager Command
    #[command(name = "sec")]
    Secret {
        #[command(subcommand)]
        command: SecCommand,
    },
    /// Parameter Store Command
    #[command(name = "par")]
    Parameter {
        #[command(subcommand)]
        command: ParCommand,
    },
    /// Show the current AWS environment (region, profile, endpoint)
    #[command(name = "env")]
    Env,
}

/// subcommands for secrets manager command
#[derive(Debug, Subcommand)]
pub enum SecCommand {
    /// list existing secrets
    List {},
    /// get specific secret by name (omit --name to select interactively)
    Get {
        /// the secret name
        #[arg(long)]
        name: Option<String>,
    },
    /// describe specific secret by name (omit --name to select interactively)
    Describe {
        /// the secret name
        #[arg(long)]
        name: Option<String>,
    },
    /// create a secret
    Create {
        /// the secret name
        #[arg(long)]
        name: String,
        /// the secret value
        #[arg(long)]
        secret: String,
        /// skip confirmation prompt
        #[arg(long, short = 'y', default_value_t = false)]
        yes: bool,
    },
    /// apply all secrets defined in a spec file
    Apply {
        #[arg(long, default_value = "./templates/secrets_template.yaml")]
        path: std::path::PathBuf,
        /// skip confirmation prompt
        #[arg(long, short = 'y', default_value_t = false)]
        yes: bool,
    },
    /// delete specific secret by name (omit --name to select interactively)
    Delete {
        /// the secret name
        #[arg(long)]
        name: Option<String>,
        /// skip the 7-day recovery window and delete immediately
        #[arg(long, default_value_t = false)]
        force: bool,
    },
}

#[derive(Debug, Subcommand)]
pub enum ParCommand {
    /// list existing parameters
    List {},
    /// get specific parameter by name (omit --name to select interactively)
    Get {
        /// the parameter name
        #[arg(long)]
        name: Option<String>,
    },
    /// create a parameter
    Create {
        /// the parameter name
        #[arg(long)]
        name: String,
        /// the parameter value
        #[arg(long)]
        value: String,
        /// skip confirmation prompt
        #[arg(long, short = 'y', default_value_t = false)]
        yes: bool,
    },
    /// delete specific parameter by name (omit --name to select interactively)
    Delete {
        /// the parameter name
        #[arg(long)]
        name: Option<String>,
        /// skip confirmation prompt
        #[arg(long, short = 'y', default_value_t = false)]
        yes: bool,
    },
    /// apply all the parameters in the spec file
    Apply {
        #[arg(long, default_value = "./templates/parameter_store_template.yaml")]
        path: std::path::PathBuf,
        /// skip confirmation prompt
        #[arg(long, short = 'y', default_value_t = false)]
        yes: bool,
    },
}