pub fn pull_secrets(
cfg: &AwsConfig,
get_creds: &impl Fn() -> Result<AwsCredentials, AwsError>,
prefix: Option<&str>,
) -> Result<Vec<(String, String)>, AwsError>Expand description
Pull secrets from AWS Secrets Manager, optionally filtered by prefix.
get_creds is called once per page during listing and once more before
the per-secret fetch phase, so credentials are always fresh even on
large vaults that span multiple ListSecrets pages.
Returns (normalized_key, value) pairs ready to set in the local vault.