Skip to content

Secure runtime secret injection and init process for containers using AWS Secrets Manager and AWS SSM Parameter Store.

License

Notifications You must be signed in to change notification settings

cmecca/aws-init

Repository files navigation

aws-init

A lightweight init process for containers that securely resolves AWS Secrets Manager and AWS SSM Parameter Store values at runtime.

Full documentation: pkg.go.dev/cmecca.io/aws-init

Installation

go get cmecca.io/aws-init@latest

Usage

aws-init command [args...]

Set environment variables with aws-secret: prefixes:

export DATABASE_URL="aws-secret:myapp/prod#database_url"
export API_KEY="aws-secret:myapp/api"
aws-init python app.py

Flags

  • -v show version
  • -h health check

Secret Formats

Secrets Manager:

SIMPLE_SECRET=aws-secret:myapp/api
JSON_KEY=aws-secret:myapp/config#database_url

Parameter Store:

PARAMETER=aws-secret:/aws/reference/secretsmanager/myapp/token

Authentication

Uses standard AWS credential chain (IRSA, instance profile, etc).

License

See LICENSE for terms.

Disclaimer

Per the NOTICE, this is a personal project developed in my individual capacity. It is not affiliated with or endorsed by Amazon Web Services, Inc.

aws-init was built with Go 1.23

aws-init

About

Secure runtime secret injection and init process for containers using AWS Secrets Manager and AWS SSM Parameter Store.

Topics

Resources

License

Security policy

Stars

Watchers

Forks

Packages

No packages published