Package com.atlassian.secrets.service.aws

Class AWSSecretBackend

java.lang.Object

com.atlassian.secrets.service.aws.AWSSecretBackend

All Implemented Interfaces:

SecretServiceBackend

public class AWSSecretBackend
extends Object
implements SecretServiceBackend

A SecretServiceBackend implementation for storing and retrieving secret data from AWS Secrets manager. The seal(String, String) method will create a secret or update an existing secret. The first parameter is used as the secret ID, the second parameter is used as secret value.

Inversely, unseal(SealedSecret) can be used to retrieve a secret stored in AWS Secrets Manager, where the identifier of the SealedSecret is used as the secret ID. The AWSSecretBackendConfig provided in the constructor is used to specify the region, as well as an option endpoint override or prefix to prepend to all secret IDs. The SecretsManagerClientFactory should only be overridden within automated tests.

Since:

5.0.0

Field Summary

Fields

Modifier and Type	Field	Description
static final String	AWS_FORCE_DELETE_SECRET_SYSTEM_PROP_KEY

Constructor Summary

Constructors

Constructor	Description
AWSSecretBackend(String backendId, AWSSecretBackendConfig config)
AWSSecretBackend(String backendId, AWSSecretBackendConfig config, SecretsManagerClientFactory factory)

Method Summary

Modifier and Type	Method	Description
void	delete(String identifier)
SecretServiceType	getType()
SealedSecret	seal(String identifier, String plainTextToSecure)
String	unseal(SealedSecret sealedSecret)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Details

AWS_FORCE_DELETE_SECRET_SYSTEM_PROP_KEY

public static final String AWS_FORCE_DELETE_SECRET_SYSTEM_PROP_KEY

See Also:

• Constant Field Values

Constructor Details

AWSSecretBackend

public AWSSecretBackend(String backendId,
 AWSSecretBackendConfig config)

AWSSecretBackend

public AWSSecretBackend(String backendId,
 AWSSecretBackendConfig config,
 SecretsManagerClientFactory factory)

Method Details

seal

public SealedSecret seal(String identifier,
 String plainTextToSecure)
                  throws SecretServiceException

Specified by:

seal in interface SecretServiceBackend

Throws:

SecretServiceException

unseal

public String unseal(SealedSecret sealedSecret)
              throws SecretServiceException

Specified by:

unseal in interface SecretServiceBackend

Throws:

SecretServiceException

delete

public void delete(String identifier)
            throws SecretServiceException

Specified by:

delete in interface SecretServiceBackend

Throws:

SecretServiceException

getType

public SecretServiceType getType()

Specified by:

getType in interface SecretServiceBackend