ansible / ansible/awx-plugins

How to get a specific specific key from the AWS Secret Manager external credentials

Open
#118 0 comments 0 reactions 0 assignees View on GitHub
Dominant language
Python
Stars
9
Forks
41
Avg merge
8d 14h
Merged PRs (30d)
2

Description

When getting secrets from AWS Secret Manager we get the whole secrets which can have multiple key/value pairs. How can we get a specific key
https://github.com/ansible/awx-plugins/blob/21173c4ed168cae31923d957365f1b83f0386946/src/awx_plugins/credentials/aws_secretsmanager.py#L36

For Hashi Vault we can get to a secret key https://github.com/ansible/awx-plugins/blob/21173c4ed168cae31923d957365f1b83f0386946/src/awx_plugins/credentials/hashivault.py#L207

Are we missing this in AWS Secret Manager?

Contributor guide

Open the contributing guide

Research direction

Start with src/awx_plugins/credentials/aws_secretsmanager.py at the linked line and compare its secret retrieval with src/awx_plugins/credentials/hashivault.py around line 207. Trace how external credential values are selected, then verify that AWS Secrets Manager credentials can return one requested key from a multi-key secret rather than the whole secret.

Written by the indexing model from the issue text.

Assessment

Tech stack
aws, python
Domain
cloud, security
Issue type
Feature
Difficulty
3/5
Estimated time
1-2 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
48/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.