Class: AWSCDK::ECS::CfnDaemonTaskDefinition::SecretProperty

Inherits:
Jsii::Struct
  • Object
show all
Defined in:
ecs/cfn_daemon_task_definition.rb

Overview

An object representing the secret to expose to your container.

Secrets can be exposed to a container in the following ways:

  • To inject sensitive data into your containers as environment variables, use the secrets container definition parameter.
  • To reference sensitive information in the log configuration of a container, use the secret_options container definition parameter.

For more information, see Specifying sensitive data in the Amazon Elastic Container Service Developer Guide.

Instance Attribute Summary collapse

Class Method Summary collapse

Instance Method Summary collapse

Constructor Details

#initialize(name:, value_from:) ⇒ SecretProperty

Returns a new instance of SecretProperty.

Parameters:

  • name (String)

    The name of the secret.

  • value_from (String)

    The secret to expose to the container.



1851
1852
1853
1854
1855
1856
# File 'ecs/cfn_daemon_task_definition.rb', line 1851

def initialize(name:, value_from:)
  @name = name
  Jsii::Type.check_type(@name, JSON.parse(Base64.strict_decode64("eyJwcmltaXRpdmUiOiJzdHJpbmcifQ==")), "name")
  @value_from = value_from
  Jsii::Type.check_type(@value_from, JSON.parse(Base64.strict_decode64("eyJwcmltaXRpdmUiOiJzdHJpbmcifQ==")), "valueFrom")
end

Instance Attribute Details

#nameString (readonly)

The name of the secret.



1862
1863
1864
# File 'ecs/cfn_daemon_task_definition.rb', line 1862

def name
  @name
end

#value_fromString (readonly)

The secret to expose to the container.

The supported values are either the full ARN of the ASMlong secret or the full ARN of the parameter in the SSM Parameter Store. For information about the require IAMlong permissions, see Required IAM permissions for Amazon ECS secrets (for Secrets Manager) or Required IAM permissions for Amazon ECS secrets (for Systems Manager Parameter store) in the Amazon Elastic Container Service Developer Guide. If the SSM Parameter Store parameter exists in the same Region as the task you're launching, then you can use either the full ARN or name of the parameter. If the parameter exists in a different Region, then the full ARN must be specified.



1871
1872
1873
# File 'ecs/cfn_daemon_task_definition.rb', line 1871

def value_from
  @value_from
end

Class Method Details

.jsii_propertiesObject



1873
1874
1875
1876
1877
1878
# File 'ecs/cfn_daemon_task_definition.rb', line 1873

def self.jsii_properties
  {
    :name => "name",
    :value_from => "valueFrom",
  }
end

Instance Method Details

#to_jsiiObject



1880
1881
1882
1883
1884
1885
1886
1887
# File 'ecs/cfn_daemon_task_definition.rb', line 1880

def to_jsii
  result = {}
  result.merge!({
    "name" => @name,
    "valueFrom" => @value_from,
  })
  result.compact
end