Class: AWSCDK::SecretsManager::Secret
- Inherits:
-
Resource
- Object
- Resource
- AWSCDK::SecretsManager::Secret
- Includes:
- ISecret
- Defined in:
- secrets_manager/secret.rb
Overview
Creates a new secret in AWS SecretsManager.
Direct Known Subclasses
Class Method Summary collapse
-
.from_secret_attributes(scope, id, attrs) ⇒ AWSCDK::SecretsManager::ISecret
Import an existing secret into the Stack.
-
.from_secret_complete_arn(scope, id, secret_complete_arn) ⇒ AWSCDK::SecretsManager::ISecret
Imports a secret by complete ARN.
-
.from_secret_name_v2(scope, id, secret_name) ⇒ AWSCDK::SecretsManager::ISecret
Imports a secret by secret name.
-
.from_secret_partial_arn(scope, id, secret_partial_arn) ⇒ AWSCDK::SecretsManager::ISecret
Imports a secret by partial ARN.
-
.is_secret(x) ⇒ Boolean
Return whether the given object is a Secret.
- .jsii_overridable_methods ⇒ Object
-
.PROPERTY_INJECTION_ID ⇒ String
Uniquely identifies this class.
Instance Method Summary collapse
-
#add_replica_region(region, encryption_key = nil) ⇒ void
Adds a replica region for the secret.
-
#add_rotation_schedule(id, options) ⇒ AWSCDK::SecretsManager::RotationSchedule
Adds a rotation schedule to the secret.
-
#add_to_resource_policy(statement) ⇒ AWSCDK::IAM::AddToResourcePolicyResult
Adds a statement to the IAM resource policy associated with this secret.
-
#apply_cross_stack_reference_strength(strength) ⇒ void
Override the cross-stack reference strength for this resource.
-
#apply_removal_policy(policy) ⇒ void
Apply the given removal policy to this resource.
-
#arn_for_policies ⇒ String
Provides an identifier for this secret for use in IAM policies.
-
#attach(target) ⇒ AWSCDK::SecretsManager::ISecret
Attach a target to this secret.
- #auto_create_policy ⇒ Boolean
-
#cfn_dynamic_reference_key(options = nil) ⇒ String
Returns a key which can be used within an AWS CloudFormation dynamic reference to dynamically load this secret from AWS Secrets Manager.
-
#deny_account_root_delete ⇒ void
Denies the
DeleteSecretaction to all principals within the current account. -
#encryption_key ⇒ AWSCDK::KMS::IKey?
The customer-managed encryption key that is used to encrypt this secret, if any.
-
#env ⇒ AWSCDK::Interfaces::ResourceEnvironment
The environment this resource belongs to.
-
#exclude_characters ⇒ String?
The string of the characters that are excluded in this secret when it is generated.
- #generate_physical_name ⇒ String
-
#get_resource_arn_attribute(arn_attr, arn_components) ⇒ String
Returns an environment-sensitive token that should be used for the resource's "ARN" attribute (e.g.
bucket.bucketArn). -
#get_resource_name_attribute(name_attr) ⇒ String
Returns an environment-sensitive token that should be used for the resource's "name" attribute (e.g.
bucket.bucketName). -
#grant_read(grantee, version_stages = nil) ⇒ AWSCDK::IAM::Grant
[disable-awslint:no-grants].
-
#grant_write(grantee) ⇒ AWSCDK::IAM::Grant
[disable-awslint:no-grants].
-
#initialize(scope, id, props = nil) ⇒ Secret
constructor
A new instance of Secret.
-
#node ⇒ Constructs::Node
The tree node.
-
#physical_name ⇒ String
Returns a string-encoded token that resolves to the physical name that should be passed to the CloudFormation resource.
-
#secret_arn ⇒ String
The ARN of the secret in AWS Secrets Manager.
-
#secret_full_arn ⇒ String?
The full ARN of the secret in AWS Secrets Manager, which is the ARN including the Secrets Manager-supplied 6-character suffix.
-
#secret_name ⇒ String
The name of the secret.
-
#secret_ref ⇒ AWSCDK::Interfaces::AWSSecretsmanager::SecretReference
A reference to a Secret resource.
-
#secret_value ⇒ AWSCDK::SecretValue
Retrieve the value of the stored secret as a
SecretValue. -
#secret_value_from_json(json_field) ⇒ AWSCDK::SecretValue
Interpret the secret as a JSON object and return a field's value from it as a
SecretValue. -
#stack ⇒ AWSCDK::Stack
The stack in which this resource is defined.
-
#to_string ⇒ String
Returns a string representation of this construct.
-
#with(*mixins) ⇒ Constructs::IConstruct
Applies one or more mixins to this construct.
Constructor Details
#initialize(scope, id, props = nil) ⇒ Secret
Returns a new instance of Secret.
12 13 14 15 16 17 18 |
# File 'secrets_manager/secret.rb', line 12 def initialize(scope, id, props = nil) props = props.is_a?(Hash) ? ::AWSCDK::SecretsManager::SecretProps.new(**props.transform_keys(&:to_sym)) : props Jsii::Type.check_type(scope, JSON.parse(Base64.strict_decode64("eyJmcW4iOiJjb25zdHJ1Y3RzLkNvbnN0cnVjdCJ9")), "scope") Jsii::Type.check_type(id, JSON.parse(Base64.strict_decode64("eyJwcmltaXRpdmUiOiJzdHJpbmcifQ==")), "id") Jsii::Type.check_type(props, JSON.parse(Base64.strict_decode64("eyJmcW4iOiJhd3MtY2RrLWxpYi5hd3Nfc2VjcmV0c21hbmFnZXIuU2VjcmV0UHJvcHMifQ==")), "props") unless props.nil? Jsii::Object.instance_method(:initialize).bind(self).call(scope, id, props) end |
Class Method Details
.from_secret_attributes(scope, id, attrs) ⇒ AWSCDK::SecretsManager::ISecret
Import an existing secret into the Stack.
60 61 62 63 64 65 66 |
# File 'secrets_manager/secret.rb', line 60 def self.from_secret_attributes(scope, id, attrs) Jsii::Type.check_type(scope, JSON.parse(Base64.strict_decode64("eyJmcW4iOiJjb25zdHJ1Y3RzLkNvbnN0cnVjdCJ9")), "scope") Jsii::Type.check_type(id, JSON.parse(Base64.strict_decode64("eyJwcmltaXRpdmUiOiJzdHJpbmcifQ==")), "id") attrs = attrs.is_a?(Hash) ? ::AWSCDK::SecretsManager::SecretAttributes.new(**attrs.transform_keys(&:to_sym)) : attrs Jsii::Type.check_type(attrs, JSON.parse(Base64.strict_decode64("eyJmcW4iOiJhd3MtY2RrLWxpYi5hd3Nfc2VjcmV0c21hbmFnZXIuU2VjcmV0QXR0cmlidXRlcyJ9")), "attrs") Jsii::Kernel.instance.call_static("aws-cdk-lib.aws_secretsmanager.Secret", "fromSecretAttributes", [scope, id, attrs]) end |
.from_secret_complete_arn(scope, id, secret_complete_arn) ⇒ AWSCDK::SecretsManager::ISecret
Imports a secret by complete ARN.
The complete ARN is the ARN with the Secrets Manager-supplied suffix.
76 77 78 79 80 81 |
# File 'secrets_manager/secret.rb', line 76 def self.from_secret_complete_arn(scope, id, secret_complete_arn) Jsii::Type.check_type(scope, JSON.parse(Base64.strict_decode64("eyJmcW4iOiJjb25zdHJ1Y3RzLkNvbnN0cnVjdCJ9")), "scope") Jsii::Type.check_type(id, JSON.parse(Base64.strict_decode64("eyJwcmltaXRpdmUiOiJzdHJpbmcifQ==")), "id") Jsii::Type.check_type(secret_complete_arn, JSON.parse(Base64.strict_decode64("eyJwcmltaXRpdmUiOiJzdHJpbmcifQ==")), "secretCompleteArn") Jsii::Kernel.instance.call_static("aws-cdk-lib.aws_secretsmanager.Secret", "fromSecretCompleteArn", [scope, id, secret_complete_arn]) end |
.from_secret_name_v2(scope, id, secret_name) ⇒ AWSCDK::SecretsManager::ISecret
Imports a secret by secret name.
A secret with this name must exist in the same account & region.
Replaces the deprecated from_secret_name.
Please note this method returns ISecret that only contains partial ARN and could lead to AccessDeniedException
when you pass the partial ARN to CLI or SDK to get the secret value. If your secret name ends with a hyphen and
6 characters, you should always use fromSecretCompleteArn() to avoid potential AccessDeniedException.
96 97 98 99 100 101 |
# File 'secrets_manager/secret.rb', line 96 def self.from_secret_name_v2(scope, id, secret_name) Jsii::Type.check_type(scope, JSON.parse(Base64.strict_decode64("eyJmcW4iOiJjb25zdHJ1Y3RzLkNvbnN0cnVjdCJ9")), "scope") Jsii::Type.check_type(id, JSON.parse(Base64.strict_decode64("eyJwcmltaXRpdmUiOiJzdHJpbmcifQ==")), "id") Jsii::Type.check_type(secret_name, JSON.parse(Base64.strict_decode64("eyJwcmltaXRpdmUiOiJzdHJpbmcifQ==")), "secretName") Jsii::Kernel.instance.call_static("aws-cdk-lib.aws_secretsmanager.Secret", "fromSecretNameV2", [scope, id, secret_name]) end |
.from_secret_partial_arn(scope, id, secret_partial_arn) ⇒ AWSCDK::SecretsManager::ISecret
Imports a secret by partial ARN.
The partial ARN is the ARN without the Secrets Manager-supplied suffix.
111 112 113 114 115 116 |
# File 'secrets_manager/secret.rb', line 111 def self.from_secret_partial_arn(scope, id, secret_partial_arn) Jsii::Type.check_type(scope, JSON.parse(Base64.strict_decode64("eyJmcW4iOiJjb25zdHJ1Y3RzLkNvbnN0cnVjdCJ9")), "scope") Jsii::Type.check_type(id, JSON.parse(Base64.strict_decode64("eyJwcmltaXRpdmUiOiJzdHJpbmcifQ==")), "id") Jsii::Type.check_type(secret_partial_arn, JSON.parse(Base64.strict_decode64("eyJwcmltaXRpdmUiOiJzdHJpbmcifQ==")), "secretPartialArn") Jsii::Kernel.instance.call_static("aws-cdk-lib.aws_secretsmanager.Secret", "fromSecretPartialArn", [scope, id, secret_partial_arn]) end |
.is_secret(x) ⇒ Boolean
Return whether the given object is a Secret.
122 123 124 125 |
# File 'secrets_manager/secret.rb', line 122 def self.is_secret(x) Jsii::Type.check_type(x, JSON.parse(Base64.strict_decode64("eyJwcmltaXRpdmUiOiJhbnkifQ==")), "x") Jsii::Kernel.instance.call_static("aws-cdk-lib.aws_secretsmanager.Secret", "isSecret", [x]) end |
.jsii_overridable_methods ⇒ Object
20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 |
# File 'secrets_manager/secret.rb', line 20 def self.jsii_overridable_methods { :node => { kind: :property, name: "node", is_optional: false }, :env => { kind: :property, name: "env", is_optional: false }, :physical_name => { kind: :property, name: "physicalName", is_optional: false }, :stack => { kind: :property, name: "stack", is_optional: false }, :arn_for_policies => { kind: :property, name: "arnForPolicies", is_optional: false }, :auto_create_policy => { kind: :property, name: "autoCreatePolicy", is_optional: false }, :secret_arn => { kind: :property, name: "secretArn", is_optional: false }, :secret_name => { kind: :property, name: "secretName", is_optional: false }, :secret_ref => { kind: :property, name: "secretRef", is_optional: false }, :secret_value => { kind: :property, name: "secretValue", is_optional: false }, :encryption_key => { kind: :property, name: "encryptionKey", is_optional: true }, :exclude_characters => { kind: :property, name: "excludeCharacters", is_optional: true }, :secret_full_arn => { kind: :property, name: "secretFullArn", is_optional: true }, :to_string => { kind: :method, name: "toString", is_optional: false }, :with => { kind: :method, name: "with", is_optional: false }, :apply_cross_stack_reference_strength => { kind: :method, name: "applyCrossStackReferenceStrength", is_optional: false }, :apply_removal_policy => { kind: :method, name: "applyRemovalPolicy", is_optional: false }, :generate_physical_name => { kind: :method, name: "generatePhysicalName", is_optional: false }, :get_resource_arn_attribute => { kind: :method, name: "getResourceArnAttribute", is_optional: false }, :get_resource_name_attribute => { kind: :method, name: "getResourceNameAttribute", is_optional: false }, :add_replica_region => { kind: :method, name: "addReplicaRegion", is_optional: false }, :add_rotation_schedule => { kind: :method, name: "addRotationSchedule", is_optional: false }, :add_to_resource_policy => { kind: :method, name: "addToResourcePolicy", is_optional: false }, :attach => { kind: :method, name: "attach", is_optional: false }, :cfn_dynamic_reference_key => { kind: :method, name: "cfnDynamicReferenceKey", is_optional: false }, :deny_account_root_delete => { kind: :method, name: "denyAccountRootDelete", is_optional: false }, :grant_read => { kind: :method, name: "grantRead", is_optional: false }, :grant_write => { kind: :method, name: "grantWrite", is_optional: false }, :secret_value_from_json => { kind: :method, name: "secretValueFromJson", is_optional: false }, } end |
.PROPERTY_INJECTION_ID ⇒ String
Uniquely identifies this class.
173 174 175 |
# File 'secrets_manager/secret.rb', line 173 def self.PROPERTY_INJECTION_ID() Jsii::Kernel.instance.get_static("aws-cdk-lib.aws_secretsmanager.Secret", "PROPERTY_INJECTION_ID") end |
Instance Method Details
#add_replica_region(region, encryption_key = nil) ⇒ void
This method returns an undefined value.
Adds a replica region for the secret.
348 349 350 351 352 |
# File 'secrets_manager/secret.rb', line 348 def add_replica_region(region, encryption_key = nil) Jsii::Type.check_type(region, JSON.parse(Base64.strict_decode64("eyJwcmltaXRpdmUiOiJzdHJpbmcifQ==")), "region") Jsii::Type.check_type(encryption_key, JSON.parse(Base64.strict_decode64("eyJmcW4iOiJhd3MtY2RrLWxpYi5pbnRlcmZhY2VzLmF3c19rbXMuSUtleVJlZiJ9")), "encryptionKey") unless encryption_key.nil? jsii_call_method("addReplicaRegion", [region, encryption_key]) end |
#add_rotation_schedule(id, options) ⇒ AWSCDK::SecretsManager::RotationSchedule
Adds a rotation schedule to the secret.
359 360 361 362 363 364 |
# File 'secrets_manager/secret.rb', line 359 def add_rotation_schedule(id, ) Jsii::Type.check_type(id, JSON.parse(Base64.strict_decode64("eyJwcmltaXRpdmUiOiJzdHJpbmcifQ==")), "id") = .is_a?(Hash) ? ::AWSCDK::SecretsManager::RotationScheduleOptions.new(**.transform_keys(&:to_sym)) : Jsii::Type.check_type(, JSON.parse(Base64.strict_decode64("eyJmcW4iOiJhd3MtY2RrLWxpYi5hd3Nfc2VjcmV0c21hbmFnZXIuUm90YXRpb25TY2hlZHVsZU9wdGlvbnMifQ==")), "options") jsii_call_method("addRotationSchedule", [id, ]) end |
#add_to_resource_policy(statement) ⇒ AWSCDK::IAM::AddToResourcePolicyResult
Adds a statement to the IAM resource policy associated with this secret.
If this secret was created in this stack, a resource policy will be
automatically created upon the first call to add_to_resource_policy. If
the secret is imported, then this is a no-op.
374 375 376 377 |
# File 'secrets_manager/secret.rb', line 374 def add_to_resource_policy(statement) Jsii::Type.check_type(statement, JSON.parse(Base64.strict_decode64("eyJmcW4iOiJhd3MtY2RrLWxpYi5hd3NfaWFtLlBvbGljeVN0YXRlbWVudCJ9")), "statement") jsii_call_method("addToResourcePolicy", [statement]) end |
#apply_cross_stack_reference_strength(strength) ⇒ void
This method returns an undefined value.
Override the cross-stack reference strength for this resource.
When set, any cross-stack reference to this resource will use the specified
mechanism instead of the global default determined by the
@aws-cdk/core:defaultCrossStackReferences context key. This is useful for
selectively weakening specific references to avoid the "deadly embrace" problem
without changing the app-wide default.
286 287 288 289 |
# File 'secrets_manager/secret.rb', line 286 def apply_cross_stack_reference_strength(strength) Jsii::Type.check_type(strength, JSON.parse(Base64.strict_decode64("eyJmcW4iOiJhd3MtY2RrLWxpYi5SZWZlcmVuY2VTdHJlbmd0aCJ9")), "strength") jsii_call_method("applyCrossStackReferenceStrength", [strength]) end |
#apply_removal_policy(policy) ⇒ void
This method returns an undefined value.
Apply the given removal policy to this resource.
The Removal Policy controls what happens to this resource when it stops being managed by CloudFormation, either because you've removed it from the CDK application or because you've made a change that requires the resource to be replaced.
The resource can be deleted (RemovalPolicy.DESTROY), or left in your AWS
account for data recovery and cleanup later (RemovalPolicy.RETAIN).
303 304 305 306 |
# File 'secrets_manager/secret.rb', line 303 def apply_removal_policy(policy) Jsii::Type.check_type(policy, JSON.parse(Base64.strict_decode64("eyJmcW4iOiJhd3MtY2RrLWxpYi5SZW1vdmFsUG9saWN5In0=")), "policy") jsii_call_method("applyRemovalPolicy", [policy]) end |
#arn_for_policies ⇒ String
Provides an identifier for this secret for use in IAM policies.
If there is a full ARN, this is just the ARN; if we have a partial ARN -- due to either importing by secret name or partial ARN -- then we need to add a suffix to capture the full ARN's format.
184 185 186 |
# File 'secrets_manager/secret.rb', line 184 def arn_for_policies() jsii_get_property("arnForPolicies") end |
#attach(target) ⇒ AWSCDK::SecretsManager::ISecret
Attach a target to this secret.
383 384 385 386 |
# File 'secrets_manager/secret.rb', line 383 def attach(target) Jsii::Type.check_type(target, JSON.parse(Base64.strict_decode64("eyJmcW4iOiJhd3MtY2RrLWxpYi5hd3Nfc2VjcmV0c21hbmFnZXIuSVNlY3JldEF0dGFjaG1lbnRUYXJnZXQifQ==")), "target") jsii_call_method("attach", [target]) end |
#auto_create_policy ⇒ Boolean
189 190 191 |
# File 'secrets_manager/secret.rb', line 189 def auto_create_policy() jsii_get_property("autoCreatePolicy") end |
#cfn_dynamic_reference_key(options = nil) ⇒ String
Returns a key which can be used within an AWS CloudFormation dynamic reference to dynamically load this secret from AWS Secrets Manager.
393 394 395 396 397 |
# File 'secrets_manager/secret.rb', line 393 def cfn_dynamic_reference_key( = nil) = .is_a?(Hash) ? ::AWSCDK::SecretsManagerSecretOptions.new(**.transform_keys(&:to_sym)) : Jsii::Type.check_type(, JSON.parse(Base64.strict_decode64("eyJmcW4iOiJhd3MtY2RrLWxpYi5TZWNyZXRzTWFuYWdlclNlY3JldE9wdGlvbnMifQ==")), "options") unless .nil? jsii_call_method("cfnDynamicReferenceKey", []) end |
#deny_account_root_delete ⇒ void
This method returns an undefined value.
Denies the DeleteSecret action to all principals within the current account.
402 403 404 |
# File 'secrets_manager/secret.rb', line 402 def deny_account_root_delete() jsii_call_method("denyAccountRootDelete", []) end |
#encryption_key ⇒ AWSCDK::KMS::IKey?
The customer-managed encryption key that is used to encrypt this secret, if any.
When not specified, the default KMS key for the account and region is being used.
233 234 235 |
# File 'secrets_manager/secret.rb', line 233 def encryption_key() jsii_get_property("encryptionKey") end |
#env ⇒ AWSCDK::Interfaces::ResourceEnvironment
The environment this resource belongs to.
For resources that are created and managed in a Stack (those created by
creating new class instances like new Role(), new Bucket(), etc.), this
is always the same as the environment of the stack they belong to.
For referenced resources (those obtained from referencing methods like
Role.fromRoleArn(), Bucket.fromBucketName(), etc.), they might be
different than the stack they were imported into.
145 146 147 |
# File 'secrets_manager/secret.rb', line 145 def env() jsii_get_property("env") end |
#exclude_characters ⇒ String?
The string of the characters that are excluded in this secret when it is generated.
240 241 242 |
# File 'secrets_manager/secret.rb', line 240 def exclude_characters() jsii_get_property("excludeCharacters") end |
#generate_physical_name ⇒ String
309 310 311 |
# File 'secrets_manager/secret.rb', line 309 def generate_physical_name() jsii_call_method("generatePhysicalName", []) end |
#get_resource_arn_attribute(arn_attr, arn_components) ⇒ String
Returns an environment-sensitive token that should be used for the resource's "ARN" attribute (e.g. bucket.bucketArn).
Normally, this token will resolve to arn_attr, but if the resource is
referenced across environments, arn_components will be used to synthesize
a concrete ARN with the resource's physical name. Make sure to reference
this.physicalName in arn_components.
323 324 325 326 327 328 |
# File 'secrets_manager/secret.rb', line 323 def get_resource_arn_attribute(arn_attr, arn_components) Jsii::Type.check_type(arn_attr, JSON.parse(Base64.strict_decode64("eyJwcmltaXRpdmUiOiJzdHJpbmcifQ==")), "arnAttr") arn_components = arn_components.is_a?(Hash) ? ::AWSCDK::ARNComponents.new(**arn_components.transform_keys(&:to_sym)) : arn_components Jsii::Type.check_type(arn_components, JSON.parse(Base64.strict_decode64("eyJmcW4iOiJhd3MtY2RrLWxpYi5Bcm5Db21wb25lbnRzIn0=")), "arnComponents") jsii_call_method("getResourceArnAttribute", [arn_attr, arn_components]) end |
#get_resource_name_attribute(name_attr) ⇒ String
Returns an environment-sensitive token that should be used for the resource's "name" attribute (e.g. bucket.bucketName).
Normally, this token will resolve to name_attr, but if the resource is
referenced across environments, it will be resolved to this.physicalName,
which will be a concrete name.
338 339 340 341 |
# File 'secrets_manager/secret.rb', line 338 def get_resource_name_attribute(name_attr) Jsii::Type.check_type(name_attr, JSON.parse(Base64.strict_decode64("eyJwcmltaXRpdmUiOiJzdHJpbmcifQ==")), "nameAttr") jsii_call_method("getResourceNameAttribute", [name_attr]) end |
#grant_read(grantee, version_stages = nil) ⇒ AWSCDK::IAM::Grant
[disable-awslint:no-grants].
411 412 413 414 415 |
# File 'secrets_manager/secret.rb', line 411 def grant_read(grantee, version_stages = nil) Jsii::Type.check_type(grantee, JSON.parse(Base64.strict_decode64("eyJmcW4iOiJhd3MtY2RrLWxpYi5hd3NfaWFtLklHcmFudGFibGUifQ==")), "grantee") Jsii::Type.check_type(version_stages, JSON.parse(Base64.strict_decode64("eyJjb2xsZWN0aW9uIjp7ImVsZW1lbnR0eXBlIjp7InByaW1pdGl2ZSI6InN0cmluZyJ9LCJraW5kIjoiYXJyYXkifX0=")), "versionStages") unless version_stages.nil? jsii_call_method("grantRead", [grantee, version_stages]) end |
#grant_write(grantee) ⇒ AWSCDK::IAM::Grant
[disable-awslint:no-grants].
421 422 423 424 |
# File 'secrets_manager/secret.rb', line 421 def grant_write(grantee) Jsii::Type.check_type(grantee, JSON.parse(Base64.strict_decode64("eyJmcW4iOiJhd3MtY2RrLWxpYi5hd3NfaWFtLklHcmFudGFibGUifQ==")), "grantee") jsii_call_method("grantWrite", [grantee]) end |
#node ⇒ Constructs::Node
The tree node.
130 131 132 |
# File 'secrets_manager/secret.rb', line 130 def node() jsii_get_property("node") end |
#physical_name ⇒ String
Returns a string-encoded token that resolves to the physical name that should be passed to the CloudFormation resource.
This value will resolve to one of the following:
- a concrete value (e.g.
"my-awesome-bucket") undefined, when a name should be generated by CloudFormation- a concrete name generated automatically during synthesis, in cross-environment scenarios.
159 160 161 |
# File 'secrets_manager/secret.rb', line 159 def physical_name() jsii_get_property("physicalName") end |
#secret_arn ⇒ String
The ARN of the secret in AWS Secrets Manager.
Will return the full ARN if available, otherwise a partial arn.
For secrets imported by the deprecated from_secret_name, it will return the secret_name.
199 200 201 |
# File 'secrets_manager/secret.rb', line 199 def secret_arn() jsii_get_property("secretArn") end |
#secret_full_arn ⇒ String?
The full ARN of the secret in AWS Secrets Manager, which is the ARN including the Secrets Manager-supplied 6-character suffix.
This is equal to secret_arn in most cases, but is undefined when a full ARN is not available (e.g., secrets imported by name).
249 250 251 |
# File 'secrets_manager/secret.rb', line 249 def secret_full_arn() jsii_get_property("secretFullArn") end |
#secret_name ⇒ String
The name of the secret.
For "owned" secrets, this will be the full resource name (secret name + suffix), unless the '@aws-cdk/aws-secretsmanager:parseOwnedSecretName' feature flag is set.
209 210 211 |
# File 'secrets_manager/secret.rb', line 209 def secret_name() jsii_get_property("secretName") end |
#secret_ref ⇒ AWSCDK::Interfaces::AWSSecretsmanager::SecretReference
A reference to a Secret resource.
216 217 218 |
# File 'secrets_manager/secret.rb', line 216 def secret_ref() jsii_get_property("secretRef") end |
#secret_value ⇒ AWSCDK::SecretValue
Retrieve the value of the stored secret as a SecretValue.
223 224 225 |
# File 'secrets_manager/secret.rb', line 223 def secret_value() jsii_get_property("secretValue") end |
#secret_value_from_json(json_field) ⇒ AWSCDK::SecretValue
Interpret the secret as a JSON object and return a field's value from it as a SecretValue.
430 431 432 433 |
# File 'secrets_manager/secret.rb', line 430 def secret_value_from_json(json_field) Jsii::Type.check_type(json_field, JSON.parse(Base64.strict_decode64("eyJwcmltaXRpdmUiOiJzdHJpbmcifQ==")), "jsonField") jsii_call_method("secretValueFromJson", [json_field]) end |
#stack ⇒ AWSCDK::Stack
The stack in which this resource is defined.
166 167 168 |
# File 'secrets_manager/secret.rb', line 166 def stack() jsii_get_property("stack") end |
#to_string ⇒ String
Returns a string representation of this construct.
256 257 258 |
# File 'secrets_manager/secret.rb', line 256 def to_string() jsii_call_method("toString", []) end |
#with(*mixins) ⇒ Constructs::IConstruct
Applies one or more mixins to this construct.
Mixins are applied in order. The list of constructs is captured at the
start of the call, so constructs added by a mixin will not be visited.
Use multiple with() calls if subsequent mixins should apply to added
constructs.
269 270 271 272 273 274 |
# File 'secrets_manager/secret.rb', line 269 def with(*mixins) mixins.each_with_index do |item, index| Jsii::Type.check_type(item, JSON.parse(Base64.strict_decode64("eyJmcW4iOiJjb25zdHJ1Y3RzLklNaXhpbiJ9")), "mixins[#{index}]") end jsii_call_method("with", [*mixins]) end |