aws / aws/containers-roadmap

Ability to create secret values from parts

Open
#2,665 0 comments 1 reaction 0 assignees View on GitHub
Dominant language
Shell
Stars
5.4k
Forks
334
PR merge metrics
No merged PRs in 30d

Description

Some open source containers require the DSN to be a single string:

```
POSTGRES_URI=postgres://foo:SECRET@host
```

But this is not possible to achieve from a single RDS cluster secret, which is a key-value JSON.

It'd be great if the `Secrets.[].ValueFrom` could support this functionality and allow crafting a secret environment variable value out of parts.

Thanks.

Contributor guide

Open the contributing guide

Research direction

No files, tests, or entry points are identified in the issue. Start by determining which AWS container service owns Secrets[].ValueFrom and how RDS cluster secrets are exposed; done means a secret environment variable can be composed from JSON secret parts into a single DSN.

Written by the indexing model from the issue text.

Assessment

Tech stack
aws, postgresql
Domain
cloud, security
Issue type
Feature
Difficulty
5/5
Estimated time
Over a week
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.