Simple tool for getting secrets out of AWS Secrets Manager.
You must have the AWS v2 cli installed on your machine and have it configured for this tool to work.
Returns a list of secrets that match the search term.
$ asm search mySecret
╭──────────────┬─────────────────────╮
│Name │ Description │
├──────────────┼─────────────────────┤
│dev/mySecret │ Development secret │
│prod/mySecret │ Production secret │
╰──────────────┴─────────────────────╯
Returns the ARN of a secret. If more than one secret matches the search term, the user will be prompted to select one.
$ asm get-arn dev/mySecret
arn:aws:secretsmanager:us-west-1:123456789101:secret:dev/mySecret-12345
Returns the secret value of a secret. If more than one secret matches the search term, the user will be prompted to select one.
$ asm get-value dev/mySecret
{
"value1": "json formatted secret",
"value2": "in color too!",
}List all secrets along with their description
$ asm list
╭────────────────┬─────────────────────╮
│Name │ Description │
├────────────────┼─────────────────────┤
│dev/mySecret │ Development secret │
│prod/mySecret │ Production secret │
│dev/extraSecret │ Extra secret item │
│prod/secretItem │ Also secret item │
╰────────────────┴─────────────────────╯Opens the user's preferred text editor and creates a new secret from the editor's contents
$ asm create --description "This is a new secret" dev/mySecretOpens the user's preferred text editor to allow editing the new secret
$ asm edit dev/mySecretDeletes the specified secret. Asks for confirmation
$ asm delete dev/mySecret
Are you sure you want to delete secret '{}' [y/N]? Describes the specified secret.
$ asm describe dev/mySecret{
"ARN": "arn:aws:secretsmanager:us-west-1:123456:secret:dev/mySecret-abc123",
"CreatedDate": "2021-12-21T13:31:05.321000-08:00",
"LastAccessedDate": "2023-01-04T16:00:00-08:00",
"LastChangedDate": "2023-01-05T15:34:45.873000-08:00",
"Name": "dev/mySecret",
"Tags": [],
"VersionIdsToStages": {
"0beef02a-67f4-4e60-bcd9-00b946ef9dbf": [
"AWSCURRENT"
],
"f921c1ea-6bd0-4e19-b35c-788f01b52d67": [
"AWSPREVIOUS"
]
}
}