Questions tagged [secretsmanager]

34 questions
69
votes
8 answers

How can I extract secrets using GitHub Actions?

I have a fairly basic scenario. I made a dedicated ssh key for this purpose and added it to my repository secrets. Code gets pushed to master GitHub action uploads it to server using ssh by doing echo "${{ secrets.SSH_KEY }}" > key. After that I…
Stan
  • 25,744
  • 53
  • 164
  • 242
16
votes
6 answers

Lambda function can't access Secrets Manager

I wrote a lambda function to access a database so the first step is to get secrets from AWS Secrets Manager. I have a private VPC as well as subnets, NAT Gateway, and security group associated with the lambda function. I also have…
8
votes
5 answers

Could not find 'UserSecretsIdAttribute' on assembly but it exists and correct package is added

I follow this tutorial: https://learn.microsoft.com/en-us/aspnet/core/security/app-secrets?view=aspnetcore-3.1&tabs=windows#access-a-secret To a .NET Core 3.1 project I've added Microsoft.Extensions.Configuration.UserSecrets package, I have clicked…
Yoda
  • 17,363
  • 67
  • 204
  • 344
6
votes
2 answers

Blocking web.config inheritance in a sub-application

We have a legacy .NET solution which has a combination of MVC and WebForms stuff, and some Web API projects as applications under the website root. Obviously these Web API applications will inherit the website's web.config settings. We also have…
awj
  • 7,482
  • 10
  • 66
  • 120
4
votes
0 answers

EF6 CLI tooling unable to read connection string from user secrets .net core

We have a legacy system that utilises EF6. Like many, we have made the move to .Net Core but have found EFCore to be somewhat lacking in all of the functionality we require within our existing system. With this in mind, we are currently using EF6…
jezzipin
  • 4,110
  • 14
  • 50
  • 94
3
votes
2 answers

How to get ConnectionString from Secrets.json in Asp.Net Core 6?

I am new to Asp.Net Core and EF. I am developing a simple CRUD from database-end, using the Secrets.json file to hide my connection string credentials. But I don't know how to reference the file using AddDbContext(). My code so far: public class…
3
votes
2 answers

How to set process.env from a function?

I'm very open to learning if there's a better "best practices" way to do this, but I have some scripts that I run occasionally that edit a database, and so I need to pass the DB password for those scripts. I'm getting the password by calling a…
2
votes
1 answer

The secret value can't be converted to key name and value pairs

I already have a secret created by cloudformation template with the following key/value format: UserPassword: Type: AWS::SecretsManager::Secret Properties: Name: mysecret GenerateSecretString: SecretStringTemplate: '{"username":…
Dalal Alghomlas
  • 339
  • 3
  • 12
2
votes
0 answers

Secret management problems in development

Currently I'm diving into secret management in the development process. My idea is to use a secret management tool like Vault by HashiCorp to store all my secrets. Here is my use case: client created Vimeo API key, which will be stored in Vault. I…
noone
  • 271
  • 4
  • 6
2
votes
0 answers

Secrets Manager resource policy: "This resource policy contains a syntax error"

I want to add Resource Permissions on my Secrets Manager secret and I have this syntax error: This resource policy contains a syntax error Can anyone help me? This is the policy: { "Version": "2012-10-17", "Statement": [ { …
learn.amzn21
  • 43
  • 1
  • 7
2
votes
1 answer

kubernetes external secrets on GKE , Permission error

I install kubernetes external secrets with helm, on GKE. GKE: 1.16.15-gke.6000 on asia-northeast1 helm app version 6.2.0 using Workload Identity as document written For workload identity,the service account I bind as below command…
Ryo
  • 485
  • 1
  • 8
  • 26
2
votes
2 answers

Where to keep the Initial Trust credentials of a Secrets Management tool?

For our product we have decided to implement a Secret Management tool (AWS secrets manager) that will securely store and manage all our secrets such as DB credentials, passwords and API keys etc. In this way the secrets are not stored in code,…
1
vote
0 answers

Google Cloud Service Account and Secret Management Tools

I am using a chamber, a tool for managing secrets. Basically, it populates the environment with the secrets from the specified services and executes the given command. Eg: chamber exec script.sh Will use the env vars defined on chamber inside…
1
vote
1 answer

How to access a key value pair secret from AWS Secrets Manager, in concourse?

I have a concourse environment deployed using bosh. It is configured with AWS Secrets Manager. The pipeline secret template is of the form /concourse/{{.Team}}/{{.Secret}} I have a secret /concourse/team1/general created in AWS Secrets Manager…
1
vote
1 answer

Secrets Manager - rotate secret with lambda in another account

In a project I'm working on, the secrets are stored in a centralized company Secrets Manager, in a specific AWS account (SECRETS_ACCOUNT). Project resources (including lambda functions) are in a project specific account (PROJECT_ACCOUNT). I'm trying…
1
2 3