aws / aws/apprunner-roadmap

Allow build time secrets injection from AWS Secrets Manager

Open
#48 5 comments 90 reactions 0 assignees View on GitHub
Dominant language
No language data
Stars
301
Forks
15
PR merge metrics
No merged PRs in 30d

Description

This is a request to support fetching build time secrets (such as a token to access private libraries) from AWS Secrets Manager and injecting them into the build time environment.

The main alternative I see is to somehow inject the credentials in the build command.

Another solution would be to leverage the instance profile's permissions and then to add some automation in the the Docker entrypoint to fetch the libraries at runtime. This is less ideal because it adds to the service startup time.

It would be nice if this were supported natively in App Runner.

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.