aws-secret
Adaptavist/aws-secret/module
Secrets module This module needs to be used in conjunction with pipe-secret-generator when used in shared AWS accounts or secret-generator) when used in deadicated AWS account. This module wraps a CloudFomation stack which calls a common secret generation Lambda (created by pipe-secret-generator or secret-generator) to generate random secret values. Because the secret has been populated using a Lambda there is minimal chance of leakage. This module also supports importing existing secrets. How it works pipe-secret-generator or secret-generator creates a Lambda which processes the required events for a CloudFormation [custom resource] (https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/template-custom-resources-lambda.html), the custom resource events which follow a CRUD like op
| Name | Type | Description | Default |
|---|---|---|---|
| stage | string | required | |
| tags | map(string) | required | |
| secret_ssm_path | string | required | |
| respect_initial_value | bool | true | |
| secret_lambda_function_name | string | "ssm-secret-generator" | |
| regions | list(string) | [] | |
| name_suffix | string | suffix for stack name if needed for avoiding conflicts | "" |
| secret_length | number | 60 |