R/secrets_manager.R

In precision-analytics/precisely.aws: Precisely AWS Utilities

#' Retrieves the contents of the encrypted field SecretString from the specified version of a secret
#' using the AWS CLI.
#'
#' @seealso https://docs.aws.amazon.com/cli/latest/reference/secretsmanager/get-secret-value.html
#'
#' @export
#'
#' @param secretId The ARN or the friendly name of the secret.
#' @param versionId The ID of of the version of the secret to retrieve (optional).
#' @param versionStage The staging label attached to the version of the secret to retrieve (optional).
#'
#' @return list of the parsed JSON of the SecretString
#'
#' @importFrom jsonlite fromJSON
precisely.aws.SecretsManager.getSecretValue <- function(secretId, versionId, versionStage) {
  args <- c("secretsmanager", "get-secret-value", "--secret-id", secretId)

  output <- execute_aws_cmd(args)

  jsonOutput <- tryCatch(
    {
      fromJSON(output)
    },
    error = function(cond) {
      stop("failed to parse aws secretsmanager output into json, failing")
    }
  )

  fromJSON(jsonOutput$SecretString)
}