Skip to content

v0.0.2

Choose a tag to compare

@YouSysAdmin YouSysAdmin released this 21 Jul 21:42
· 23 commits to master since this release
8b939f3

Added import of key-value pairs from the AWS SSM service.

# Import all secrets under a path using the default profile
# Region must be set in ~/.aws/config, ~/.aws/credentials or AWS_REGION environment variable
kv import ssm --bucket=mybucket /prod/secrets

# Use a specific AWS profile and region
kv import ssm --bucket=mybucket --profile=dev --region=ca-central-1 /dev/app/config

# Use static access key credentials (profile is ignored)
# Can use a default AWS CLI environment variable
# https://docs.aws.amazon.com/cli/v1/userguide/cli-configure-envvars.html#envvars-set
kv import ssm --bucket=mybucket --key-id=AKIA... --secret-key=... --region=us-west-2 /prod/secure

# Recursively import full key names under a prefix
# e.g., /prod/env/database_password
kv import ssm --bucket=mybucket --recursive /prod/env/

# Recursively import and trim key names
# e.g., /prod/env/database_password => database_password
kv import ssm --bucket=mybucket --recursive --trim-key-name /prod/env/

# Perform a dry-run import without writing data
kv import ssm --bucket=mybucket --dry-run /dev

# Dry-run and show key values for verification
kv import ssm --bucket=mybucket --dry-run --show-values /prod