Puppet Task: secretsmanager_aws_get_secret_value
- Defined in:
-
tasks/secretsmanager_aws_get_secret_value.json,
tasks/secretsmanager_aws_get_secret_value.rb
Overview
Retrieves the contents of the encrypted fields SecretString or SecretBinary from the specified version of a secret, whichever contains content. Minimum permissions To run this command, you must have the following permissions: secretsmanager:GetSecretValue kms:Decrypt - required only if you use a customer-managed AWS KMS key to encrypt the secret. You do not need this permission to use the account's default AWS managed CMK for Secrets Manager. Related operations To create a new version of the secret with different encrypted information, use PutSecretValue. To retrieve the non-encrypted details for the secret, use DescribeSecret.