https://github.com/secondlife/get-secret

CLI to fetch values from AWS Secrets Manager and Parameter Store
https://github.com/secondlife/get-secret

cli

Last synced: 29 days ago
JSON representation

CLI to fetch values from AWS Secrets Manager and Parameter Store

• Host: GitHub
• URL: https://github.com/secondlife/get-secret
• Owner: secondlife
• License: mit
• Created: 2022-02-08T16:23:00.000Z (over 4 years ago)
• Default Branch: main
• Last Pushed: 2026-03-27T22:04:45.000Z (3 months ago)
• Last Synced: 2026-03-28T03:48:04.605Z (3 months ago)
• Topics: cli
• Language: Go
• Homepage:
• Size: 126 KB
• Stars: 0
• Watchers: 2
• Forks: 0
• Open Issues: 0
• Metadata Files:
  • Readme: README.md
  • License: LICENSE

Awesome Lists containing this project

README

          
# get-secret

**get-secret** is a small program that gets secrets from AWS Secrets Manager

and parameters from SSM Parameter Store. It can be useful in containers and

other environments where a self-contained tool for working with AWS secrets

is desired.

## Use

```text

usage: get-secret [--ssm|--secretsmanager] NAME [VERSION]

Fetch values from AWS Secrets Manager and SSM Parameter Store.

positional arguments:

  NAME     secret or parameter name

  VERSION  secret version, used by Secrets Manager only. Default = AWSCURRENT

optional arguments:

  --secretsmanager use AWS Secrets Manager (default)

  --ssm            use SSM Parameter Store

  --conf           load secrets from configuration file ("-" for stdin)

  --env-conf       load secrets from environment variable

  -v               show verbose logging

configuration file example:

  # source_path        destination_path                   owner group    permissions source_service

  /mitra/myapp/secrets /etc/secrets-internal/secrets.json root  www-data 0640

  /mitra/myapp/param   /etc/secrets-internal/param.txt    root  www-data 0640        ssm

```

### Notes

If you are attempting to **get-secret** on a machine with AWS credentials from

the environment, such as when using aws sso or awsume, then you must set

`AWS_SDK_LOAD_CONFIG` to a truthy value for credentials loading to work. See

[sdk-for-go's session documentation][session] for more information.

[session]: https://docs.aws.amazon.com/sdk-for-go/api/aws/session/