https://github.com/cmecca/aws-init
Secure runtime secret injection and init process for containers using AWS Secrets Manager and AWS SSM Parameter Store.
https://github.com/cmecca/aws-init
aws devops docker eks go golang init-containers irsa kubernetes parameter-store secrets-manager ssm
Last synced: 10 months ago
JSON representation
Secure runtime secret injection and init process for containers using AWS Secrets Manager and AWS SSM Parameter Store.
- Host: GitHub
- URL: https://github.com/cmecca/aws-init
- Owner: cmecca
- License: other
- Created: 2025-06-01T02:02:24.000Z (11 months ago)
- Default Branch: main
- Last Pushed: 2025-06-01T23:26:27.000Z (11 months ago)
- Last Synced: 2025-06-02T18:00:25.908Z (11 months ago)
- Topics: aws, devops, docker, eks, go, golang, init-containers, irsa, kubernetes, parameter-store, secrets-manager, ssm
- Language: Go
- Homepage:
- Size: 140 KB
- Stars: 0
- Watchers: 0
- Forks: 0
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
- Contributing: CONTRIBUTING.md
- License: LICENSE
- Security: SECURITY.md
Awesome Lists containing this project
README
# aws-init
A lightweight init process for containers that securely resolves AWS Secrets Manager and AWS SSM Parameter Store values
at runtime.
Full documentation: [pkg.go.dev/cmecca.io/aws-init](https://pkg.go.dev/cmecca.io/aws-init)
## Installation
```shell
go get cmecca.io/aws-init@latest
```
## Usage
```shell
aws-init command [args...]
```
Set environment variables with `aws-secret:` prefixes:
```shell
export DATABASE_URL="aws-secret:myapp/prod#database_url"
export API_KEY="aws-secret:myapp/api"
aws-init python app.py
```
## Flags
- `-v` show version
- `-h` health check
## Secret Formats
**Secrets Manager:**
```shell
SIMPLE_SECRET=aws-secret:myapp/api
JSON_KEY=aws-secret:myapp/config#database_url
```
**Parameter Store:**
```shell
PARAMETER=aws-secret:/aws/reference/secretsmanager/myapp/token
```
## Authentication
Uses standard AWS credential chain (IRSA, instance profile, etc).
## License
See [LICENSE](./LICENSE) for terms.
## Disclaimer
Per the [NOTICE](./NOTICE), this is a personal project developed in my individual capacity. It is not affiliated with or endorsed by Amazon Web Services, Inc.
##
`aws-init` was built with Go 1.23
