vault/examples/providers/aws-ssm.json at main · flowexec/vault · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
{
  "id": "aws-ssm",
  "type": "external",
  "external": {
    "get": {
      "cmd": "aws ssm get-parameter --name /{{key}} --with-decryption --query Parameter.Value --output text",
      "output": "{{output}}"
    },
    "set": {
      "cmd": "aws ssm put-parameter --name /{{key}} --value {{value}} --type SecureString --overwrite"
    },
    "delete": {
      "cmd": "aws ssm delete-parameter --name /{{key}}"
    },
    "list": {
      "cmd": "aws ssm describe-parameters --query Parameters[].Name --output text",
      "output": "{{output}}"
    },
    "listSeparator": "\t",
    "exists": {
      "cmd": "aws ssm get-parameter --name /{{key}}"
    },
    "metadata": {
      "cmd": "aws sts get-caller-identity --output json",
      "output": "Account: {{fromJSON(output)[\"Account\"]}}, User: {{fromJSON(output)[\"Arn\"]}}"
    },
    "environment": {
      "AWS_REGION": "$AWS_REGION",
      "AWS_ACCESS_KEY_ID": "$AWS_ACCESS_KEY_ID",
      "AWS_SECRET_ACCESS_KEY": "$AWS_SECRET_ACCESS_KEY"
    },
    "timeout": "60s"
  }
}