I am using python with cdk. I have one stack that creates a dynamo db table with a random name in one account and multiple stacks running in other accounts that need to get that randomly generated table name. Due…
I several lambda functions on my account to be able to access a secret. (I cannot use identity policies, don't ask why) I am following this example from the official documentation so I am creating this resource based policy {…
I am attaching the following resource policy to an SM secret { "Version" : "2012-10-17", "Id" : "AllowAccessToSecretValue", "Statement" : [ { "Sid" : "AllowLambdaAccess", "Effect" : "Allow", "Principal" : { "Service" : "lambda.amazonaws.com" }, "Action" : [ "secretsmanager:GetSecretValue", "secretsmanager:UpdateSecret"…
Thank you in advance for any help! My company uses multiple AWS accounts to separate region and "global" functionality/storage. We've recently switched to using MQTT IoT Rules and have run tests with regional Kafka vs a global Kafka instance for…
So I used cloudformation to generate an RDS DB instance and AWS Secrets Manager Secret and they are tied together as shown in the cloudformation config below: "MyDBInstance": { "Type": "AWS::RDS::DBInstance", "Properties": { "AllocatedStorage": 20, "DBInstanceClass": "db.t2.micro", "Engine": "mysql", "DBSubnetGroupName":…
I'm on Spring boot and this is scenario:- When I update (or rotate) my secrets, how does aws secret manager notify the application that is using the secrets? I know I can fetch secret as done here. I know if…
I am creating a Lambda extension to get secret values from secret manager using as a template: https://github.com/hariohmprasath/aws-lambda-extensions I have zipped the files into the following structure. extension.zip --> extensions --> secret-extension --> secret-extension --> node_modules --> extensions-api.js --> index.js…
I have an AWS Amplify App and I am storing secrets in the AWS System Manager parameter store. According to the documentation, I followed this syntax /amplify/{your_app_id}/{your_backend_environment_name}/{your_parameter_name} and created this parameter /amplify/abcdefgh1234/dev/MY_PARAM. How do I use MY_PARAM in amplify.yaml? When…