Status | |
---|---|
Stability | alpha |
Distributions | contrib |
Issues | |
Code Owners | @driverpt, @atoulme |
This package provides a confmap.Provider
implementation for Amazon Secrets
Manager (secretsmanager
) that allows the Collector the ability to read data
stored in AWS Secrets Manager.
- Just use the placeholders with the following pattern
${secretsmanager:<arn or name>}
- Make sure you have the
secretsmanager:GetSecretValue
in the OTEL Collector Role - If your secret is a json string, you can get the value for a json key using the following pattern
${secretsmanager:<arn or name>#json-key}
- You can also specify a default value by using the following pattern
${secretsmanager:<arn or name>:-<default>}
- The default value is used when the ARN or name is empty or the json key is not found
Prerequisites:
- Need to set up access keys from IAM console (aws_access_key_id and aws_secret_access_key) with permission to access Amazon Secrets Manager
- For details, can take a look at https://aws.github.io/aws-sdk-go-v2/docs/configuring-sdk/