R/sm.R

In daroczig/botor: 'AWS Python SDK' ('boto3') for R

#' The default, fork-safe AWS Systems Manager (SecretManager) client on the top of \code{botor}
#' @return \code{botocore.client.secretsmanager}
#' @export
#' @references \url{https://boto3.amazonaws.com/v1/documentation/api/latest/reference/services/secretsmanager.html}
sm <- function() {
  botor_client('secretsmanager', type = 'client')
}


#' Read AWS System Manager's Secrets Manager via Secret Manager
#' @param path name/path of the key to be read
#' @param key single key or a vector of keys. 
#' @param parse_json logical. Default TRUE
#' @importFrom checkmate assert_flag assert_vector
#' @importFrom jsonlite fromJSON
#' @importFrom logger log_warn
#' @return (optionally decrypted) value
#' @export
sm_get_secret <- function(path, key = NULL, parse_json = TRUE) {
  assert_flag(parse_json)
  assert_vector(key, null.ok = TRUE)

  if (!is.null(key) && parse_json == FALSE) {
    stop('Need to set parse_json=TRUE when extracting keys')
  }

  log_trace("Looking up SecretId %s in AWS Secrets Manager", path)

  resp <- trypy(sm()$get_secret_value(SecretId = path))$SecretString

  if (parse_json) {
    resp <- fromJSON(resp)
  }
  for (k in key) {
    resp <- resp[[k]]
  }
  
  resp
}