SecretsManagerPython3

Secrets Manager Python 3

What is this function?

This function is a Python 3 function that shows how to use Secrets Manager on Greengrass.

NOTE: To use this function you'll need to deploy a secret to secrets manager called "test-secret". There is a sample CloudFormation template that can be deployed manually (it is not deployed by GGP yet) that will create this test secret. To deploy the template run deploy-test-secret-stack.sh to delete the template run delete-test-secret-stack.sh.

NOTE: If the secret in the configuration is deleted the group will not be able to be deployed again until the secret is removed from the configuration or it has been recreated.

What does the output look like?

${AWS_IOT_THING_NAME} is the name of the thing associated with your Core.

Every 5 seconds a message is sent on ${AWS_IOT_THING_NAME}/python3/secrets/manager topic that looks like this:

{
    "group_id": "93f9d28f-ed45-44ce-979f-5e1d7417afb8",
    "message": "Secrets manager function running",
    "secrets": {
        "test-secret": {
            "value": "This is my test secret!"
        }
    },
    "thing_arn": "arn:aws:iot:us-east-1:5xxxxxxxxxx7:thing/my_Core",
    "thing_name": "my_Core"
}

If you change the secret value it will only be updated on the core when the group is redeployed.