/
manage-secrets.go
72 lines (46 loc) · 1.31 KB
/
manage-secrets.go
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
package secrets
import (
"fmt"
"log"
"os"
"github.com/aws/aws-sdk-go/aws"
"github.com/aws/aws-sdk-go/aws/session"
"github.com/aws/aws-sdk-go/service/secretsmanager"
)
func CreateSecret(description, name, secret string) {
session := session.Must(session.NewSession())
svc := secretsmanager.New(session, aws.NewConfig().WithRegion(os.Getenv("aws_region")))
input := &secretsmanager.CreateSecretInput{
Description: aws.String(description),
Name: aws.String(name),
SecretString: aws.String(secret),
}
result, err := svc.CreateSecret(input)
if err != nil {
log.Println(err)
update := &secretsmanager.UpdateSecretInput{
Description: aws.String(description),
SecretId: aws.String(name),
SecretString: aws.String(secret),
}
result, err := svc.UpdateSecret(update)
if err != nil {
log.Fatal(err)
}
fmt.Println(result)
}
fmt.Println(result)
}
func GetSecret(name, versionStage string) string {
session := session.Must(session.NewSession())
svc := secretsmanager.New(session, aws.NewConfig().WithRegion(os.Getenv("aws_region")))
input := &secretsmanager.GetSecretValueInput{
SecretId: aws.String(name),
VersionStage: aws.String(versionStage),
}
result, err := svc.GetSecretValue(input)
if err != nil {
log.Fatal(err)
}
return *result.SecretString
}