Skip to content

Commit

Permalink
Shorten example for readability.
Browse files Browse the repository at this point in the history
  • Loading branch information
itsdalmo committed Jul 19, 2018
1 parent 912b74e commit 8cc46c2
Showing 1 changed file with 3 additions and 6 deletions.
9 changes: 3 additions & 6 deletions README.md
Original file line number Diff line number Diff line change
Expand Up @@ -12,12 +12,9 @@ for this to work, the instance profile (EC2), task role (ECS), or execution role
to retrive the secret values and/or decrypt the secret using KMS.

For instance:
- `SM=sm://example/secrets-manager`:
- Replaces the variable `SM` with the value of `example/secrets-manager` in Secrets manager.
- `SSM=ssm:///example/parameter-store`:
- Replaces the variable `SSM` with the value of `/example/parameter-store` in SSM Parameter store.
- `KMS=kms://<secret>`:
- Replaces the variable `KMS` with the KMS decrypted value of `<secret>`.
- `export SECRETSMANAGER=sm://example/secrets-manager`
- `export PARAMETERSTORE=ssm:///example/parameter-store`
- `export KMSENCRYPTED=kms://<encrypted-secret>`

For information about which credentials are required for these actions:
- Secrets manager: `secretsmanager:GetSecretValue` on the resource. If the secret is encrypted with a non-default KMS key, it also requires `kms:Decrypt` on said key.
Expand Down

0 comments on commit 8cc46c2

Please sign in to comment.