Re:Using the New AWS Secrets Manager for Serverless
by scarface74 on Wednesday January 09, 2019 @08:45PM
(#18870830)
For secure strings in cloud formation, I use a cloud formation parameter ( - meaning I have to enter the parameter manually and set NoEcho to true. And then set the CF parameter value to the SSM Parameter value.
This is with the help of a lambda backed custom resource
Obviously , this can’t be a part of your CI/CD Pipeline. I run the CloudFormation template manually in the console to enter the parameters and my CI Pipeline can then update the stack when needed.
This is with the help of a lambda backed custom resource
https://svdgraaf.nl/2018/04/13/CloudFormation-ssm-secure-str...
Obviously , this can’t be a part of your CI/CD Pipeline. I run the CloudFormation template manually in the console to enter the parameters and my CI Pipeline can then update the stack when needed.