manthanhd/node-aws-secrets

Manage encrypted secrets on S3 using KMS

AWS Secret Manager for Node

Allows download and upload of secrets from AWS S3 and KMS

Usage

Upload secret to S3 via KMS encryption

const SecretsManager = require("aws-secrets-manager");
const secretsManager = new SecretsManager();

var options = {
    secret: 'my-plaintext-secret',
    s3Location: 's3://mybucket/mysecret',
    kmsKeyId: 'my-kms-key-id/arn/alias'
};
secretsManager.set(options)
    .then(function (ciphertextBuffer) {
        // Upload and encryption was successful
        // ciphertextBuffer as Buffer object
        console.log(ciphertextBuffer.toString());
    }).catch(function (err) {
        // If things went wrong
        // err is Error object
        console.error(err);
    });

Access encrypted secret stored on S3

const SecretsManager = require("aws-secrets-manager");
const secretsManager = new SecretsManager();

secretsManager.get("s3://mybucket/myfolder/mysecret")
    .then(function (ciphertext) {
        // Download and decryption was successful
        // ciphertext as Buffer object
        console.log(ciphertext.toString());
    })
    .catch(function (err) {
        // If things went wrong
        // err is Error object
        console.error(err);
    });

Contact

If you have a question/idea/suggestion, I'd like to encourage you to raise an issue with relevant label. I will try to get back to you as soon as I can.

If you are able, I highly encourage people to communicate their ideas over a pull request with code as it is the best and most efficient way to effectively knowledge transfer.

node-aws-secrets's Issues

Allow using of cross account role for operations

Allow encrypting and decrypting of streams

Allow encrypting and decrypting of buffers

Methods should be called `get` and `set` instead of `resolve` and `upload`.

For readability and suitability for the language. Resolve could refer to promises and have other special meaning.

As suggested by @atwright147 (Andrew Wright).