# Complete AWS Secrets Manager Example Configuration in this directory creates: - Standard Secrets Manager Secret - Secrets Manager Secret with rotation enabled ## Usage To run this example you need to execute: ```bash $ terraform init $ terraform plan $ terraform apply ``` If you wish to test the rotated secret, after provisioning the resources you can go into the console and under the rotated secret click `Rotate secret immediately`. This will trigger the lambda function to rotate the secret. You can then go to the `Secret value` tab and click `Retrieve secret value` to see the new secret value. After rotating the secret, you can run `terraform plan` and see that there are no detected changes. :warning: Replicated secrets are not cleaned up by Terraform. You will need to manually delete these secrets. Ref: https://github.com/hashicorp/terraform-provider-aws/issues/23316 Note that this example may create resources which will incur monetary charges on your AWS bill. Run `terraform destroy` when you no longer need these resources. ## Requirements | Name | Version | | ---- | ------- | | [terraform](#requirement\_terraform) | >= 1.11 | | [aws](#requirement\_aws) | >= 6.28 | | [random](#requirement\_random) | >= 3.7 | ## Providers | Name | Version | | ---- | ------- | | [aws](#provider\_aws) | >= 6.28 | ## Modules | Name | Source | Version | | ---- | ------ | ------- | | [lambda](#module\_lambda) | terraform-aws-modules/lambda/aws | ~> 8.0 | | [secrets\_manager](#module\_secrets\_manager) | ../.. | n/a | | [secrets\_manager\_disabled](#module\_secrets\_manager\_disabled) | ../.. | n/a | | [secrets\_manager\_external](#module\_secrets\_manager\_external) | ../.. | n/a | | [secrets\_manager\_rotate](#module\_secrets\_manager\_rotate) | ../.. | n/a | ## Resources | Name | Type | | ---- | ---- | | [aws_caller_identity.current](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/data-sources/caller_identity) | data source | | [aws_iam_policy_document.this](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/data-sources/iam_policy_document) | data source | ## Inputs No inputs. ## Outputs | Name | Description | | ---- | ----------- | | [rotate\_secret\_arn](#output\_rotate\_secret\_arn) | The ARN of the secret | | [rotate\_secret\_id](#output\_rotate\_secret\_id) | The ID of the secret | | [rotate\_secret\_replica](#output\_rotate\_secret\_replica) | Attributes of the replica created | | [rotate\_secret\_string](#output\_rotate\_secret\_string) | The secret string | | [rotate\_secret\_version\_id](#output\_rotate\_secret\_version\_id) | The unique identifier of the version of the secret | | [standard\_secret\_arn](#output\_standard\_secret\_arn) | The ARN of the secret | | [standard\_secret\_id](#output\_standard\_secret\_id) | The ID of the secret | | [standard\_secret\_name](#output\_standard\_secret\_name) | The name of the secret | | [standard\_secret\_replica](#output\_standard\_secret\_replica) | Attributes of the replica created | | [standard\_secret\_string](#output\_standard\_secret\_string) | The secret string | | [standard\_secret\_version\_id](#output\_standard\_secret\_version\_id) | The unique identifier of the version of the secret | Apache-2.0 Licensed. See [LICENSE](https://github.com/terraform-aws-modules/terraform-aws-secrets-manager/blob/master/LICENSE).

Changes from upstream