AWS Secrets Manager

Read secrets from AWS Secrets Manager at run time.

Workflow step
AWS
placeholder
Placeholder. This template is not in the library yet. Deploy opens the platform so you can start from your own repository; tell us there if you want this one.
Downloads
Version
Published
License
Maintainer
StackGuardian (proposed)

About

Read secrets from AWS Secrets Manager at run time.

This is a placeholder for a step we are considering. It is not in the library yet. Custom steps run today: any container image can be a workflow step, so you can build this yourself now and tell us if you want it maintained.

Use cases

  • Database passwords and API keys fetched per run.
  • No secrets in variables or repositories.

Inputs

Inputs will be defined with the step. Expect a connection or token (stored as a secret), a target such as a channel or project, and thresholds.

What it creates

How it runs on StackGuardian

Add it to a workflow as a step. It runs in its own container alongside the IaC steps.

Plan
Policy check
Approval
Apply

Approvals happen in StackGuardian. An agent can never approve its own run. Every run keeps its plan, policy results and approver in the audit log.

Pick a template. Deploy it with guardrails.