/
data_source_aws_secretsmanager_secret.go
139 lines (124 loc) · 3.42 KB
/
data_source_aws_secretsmanager_secret.go
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
package aws
import (
"errors"
"fmt"
"log"
"github.com/aws/aws-sdk-go/aws"
"github.com/aws/aws-sdk-go/service/secretsmanager"
"github.com/hashicorp/terraform/helper/schema"
"github.com/hashicorp/terraform/helper/structure"
)
func dataSourceAwsSecretsManagerSecret() *schema.Resource {
return &schema.Resource{
Read: dataSourceAwsSecretsManagerSecretRead,
Schema: map[string]*schema.Schema{
"arn": {
Type: schema.TypeString,
Optional: true,
Computed: true,
ValidateFunc: validateArn,
},
"description": {
Type: schema.TypeString,
Computed: true,
},
"kms_key_id": {
Type: schema.TypeString,
Computed: true,
},
"name": {
Type: schema.TypeString,
Optional: true,
Computed: true,
},
"policy": {
Type: schema.TypeString,
Computed: true,
},
"rotation_enabled": {
Type: schema.TypeBool,
Computed: true,
},
"rotation_lambda_arn": {
Type: schema.TypeString,
Computed: true,
},
"rotation_rules": {
Type: schema.TypeList,
Computed: true,
Elem: &schema.Resource{
Schema: map[string]*schema.Schema{
"automatically_after_days": {
Type: schema.TypeInt,
Computed: true,
},
},
},
},
"tags": {
Type: schema.TypeMap,
Computed: true,
},
},
}
}
func dataSourceAwsSecretsManagerSecretRead(d *schema.ResourceData, meta interface{}) error {
conn := meta.(*AWSClient).secretsmanagerconn
var secretID string
if v, ok := d.GetOk("arn"); ok {
secretID = v.(string)
}
if v, ok := d.GetOk("name"); ok {
if secretID != "" {
return errors.New("specify only arn or name")
}
secretID = v.(string)
}
if secretID == "" {
return errors.New("must specify either arn or name")
}
input := &secretsmanager.DescribeSecretInput{
SecretId: aws.String(secretID),
}
log.Printf("[DEBUG] Reading Secrets Manager Secret: %s", input)
output, err := conn.DescribeSecret(input)
if err != nil {
if isAWSErr(err, secretsmanager.ErrCodeResourceNotFoundException, "") {
return fmt.Errorf("Secrets Manager Secret %q not found", secretID)
}
return fmt.Errorf("error reading Secrets Manager Secret: %s", err)
}
if output.ARN == nil {
return fmt.Errorf("Secrets Manager Secret %q not found", secretID)
}
d.SetId(aws.StringValue(output.ARN))
d.Set("arn", output.ARN)
d.Set("description", output.Description)
d.Set("kms_key_id", output.KmsKeyId)
d.Set("name", output.Name)
d.Set("rotation_enabled", output.RotationEnabled)
d.Set("rotation_lambda_arn", output.RotationLambdaARN)
d.Set("policy", "")
pIn := &secretsmanager.GetResourcePolicyInput{
SecretId: aws.String(d.Id()),
}
log.Printf("[DEBUG] Reading Secrets Manager Secret policy: %s", pIn)
pOut, err := conn.GetResourcePolicy(pIn)
if err != nil {
return fmt.Errorf("error reading Secrets Manager Secret policy: %s", err)
}
if pOut != nil && pOut.ResourcePolicy != nil {
policy, err := structure.NormalizeJsonString(aws.StringValue(pOut.ResourcePolicy))
if err != nil {
return fmt.Errorf("policy contains an invalid JSON: %s", err)
}
d.Set("policy", policy)
}
if err := d.Set("rotation_rules", flattenSecretsManagerRotationRules(output.RotationRules)); err != nil {
return fmt.Errorf("error setting rotation_rules: %s", err)
}
if err := d.Set("tags", tagsToMapSecretsManager(output.Tags)); err != nil {
return fmt.Errorf("error setting tags: %s", err)
}
return nil
}