Class: SimplyGenius::Atmos::Providers::Aws::SsmSecretManager

Inherits:
Object
  • Object
show all
Includes:
GemLogger::LoggerSupport
Defined in:
lib/simplygenius/atmos/providers/aws/ssm_secret_manager.rb

Instance Method Summary collapse

Constructor Details

#initialize(provider) ⇒ SsmSecretManager

Returns a new instance of SsmSecretManager.



12
13
14
15
16
 
# File 'lib/simplygenius/atmos/providers/aws/ssm_secret_manager.rb', line 12

def initialize(provider)
  @provider = provider
  @path_prefix = "#{Atmos.config[:secret][:prefix]}"
  @encrypt = Atmos.config[:secret][:encrypt]
end

Instance Method Details

#delete(key) ⇒ Object 



39
40
41
 
# File 'lib/simplygenius/atmos/providers/aws/ssm_secret_manager.rb', line 39

def delete(key)
  client.delete_parameter(name: param_name(key))
end

#get(key) ⇒ Object 



34
35
36
37
 
# File 'lib/simplygenius/atmos/providers/aws/ssm_secret_manager.rb', line 34

def get(key)
  resp = client.get_parameter(name: param_name(key), with_decryption: @encrypt)
  resp.parameter.value
end

#set(key, value, force: false) ⇒ Object 



18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
 
# File 'lib/simplygenius/atmos/providers/aws/ssm_secret_manager.rb', line 18

def set(key, value, force: false)
  opts = {}

  param_name = param_name(key)
  param_type = @encrypt ? "SecureString" : "String"
  param_value = value

  if value.is_a?(Array)
    raise "AWS SSM Parameter Store cannot encrypt lists directly" if @encrypt
    param_type = "StringList"
    param_value = value.join(",")
  end

  client.put_parameter(name: param_name, value: param_value, type: param_type, overwrite: force)
end

#to_h ⇒ Object 



43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
 
# File 'lib/simplygenius/atmos/providers/aws/ssm_secret_manager.rb', line 43

def to_h
  result = {}
  next_token = nil
  loop do
    # max_results can't be greater than 10, which is the default
    resp = client.get_parameters_by_path(path: param_name(""),
                                         next_token: next_token,
                                         recursive: true, with_decryption: @encrypt)
    resp.parameters.each do |p|
      key = p.name.gsub(/^#{param_name("")}/, '')
      result[key] = p.value
    end

    next_token = resp.next_token
    break if next_token.nil?
  end

  return result
end