A lightweight init process for containers that securely resolves AWS Secrets Manager and AWS SSM Parameter Store values at runtime.
Full documentation: pkg.go.dev/cmecca.io/aws-init
go get cmecca.io/aws-init@latest
aws-init command [args...]
Set environment variables with aws-secret:
prefixes:
export DATABASE_URL="aws-secret:myapp/prod#database_url"
export API_KEY="aws-secret:myapp/api"
aws-init python app.py
-v
show version-h
health check
Secrets Manager:
SIMPLE_SECRET=aws-secret:myapp/api
JSON_KEY=aws-secret:myapp/config#database_url
Parameter Store:
PARAMETER=aws-secret:/aws/reference/secretsmanager/myapp/token
Uses standard AWS credential chain (IRSA, instance profile, etc).
See LICENSE for terms.
Per the NOTICE, this is a personal project developed in my individual capacity. It is not affiliated with or endorsed by Amazon Web Services, Inc.
aws-init
was built with Go 1.23