AWS lambda function to use secret manager

Question

created a secret manager key (non-rotational)with plain text option and encrypted. When i tried to get the value in lambda function , I am getting the error as permission denied. Could you please help how to resolve the issue

Adiii · Accepted Answer · 2019-11-08 12:56:04Z

4

You need to assign the role to lambda function to read from the secret manager.

AWS role The following IAM policy allows read access to all resources that you create in AWS Secrets Manager. This policy applies to resources that you have created already and all resources that you create in the future.

{
              "Version": "2012-10-17",
              "Statement": [
                {
                  "Effect": "Allow",
                  "Action": [
                    "secretsmanager:GetResourcePolicy",
                    "secretsmanager:GetSecretValue",
                    "secretsmanager:DescribeSecret",
                    "secretsmanager:ListSecretVersionIds"
                  ],
                  "Resource": ["*"]
                }
              ]
            }

You can find more specific example below iam-policy-examples-asm-secrets

answered Nov 8, 2019 at 12:56

Adiii

61.1k10 gold badges180 silver badges174 bronze badges

Sign up to request clarification or add additional context in comments.

3 Comments

sanjay Over a year ago

Thanks or the help.. I have added the policy in the SAM template

GuilleOjeda Over a year ago

Note that this policy grants access to all secrets. It's a better practice to only grant access to the secrets your application actually needs.

Adiii Over a year ago

@Blueriver yes and normally we do like api-* or prod-* if there is prefix per env or per application

Collectives™ on Stack Overflow

AWS lambda function to use secret manager

1 Answer 1

3 Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

3 Comments

Your Answer

Sign up or log in

Post as a guest

Related