Method SaveCredentials

pkg/credentials/aws/secretmanager.go:85–124

SaveCredentials saves credentials. If opts includes WithExistingSecret, upserts at the given path.

(ctx context.Context, orgID string, creds any, opts ...credentials.SaveOption)

// SaveCredentials saves credentials. If opts includes WithExistingSecret, upserts at the given path.
func (m *Manager) SaveCredentials(ctx context.Context, orgID string, creds any, opts ...credentials.SaveOption) (string, error) {
	o := credentials.ApplySaveOptions(opts...)
	secretName := o.SecretName
	if secretName == "" {
		secretName = strings.Join([]string{m.secretPrefix, orgID, uuid.New().String()}, "/")
	}

	// Store the credentials as json key pairs
	c, err := json.Marshal(creds)
	if err != nil {
		return "", fmt.Errorf("marshaling credentials to be stored: %w", err)
	}

	if o.SecretName != "" {
		// Upsert: try to update existing secret first
		_, err = m.client.PutSecretValue(ctx, &secretsmanager.PutSecretValueInput{
			SecretId:     aws.String(secretName),
			SecretString: aws.String(string(c)),
		})
		var notFoundErr *smtypes.ResourceNotFoundException
		if errors.As(err, &notFoundErr) {
			// Secret does not exist yet, create it
			_, err = m.client.CreateSecret(ctx, &secretsmanager.CreateSecretInput{
				Name:         aws.String(secretName),
				SecretString: aws.String(string(c)),
			})
		}
	} else {
		_, err = m.client.CreateSecret(ctx, &secretsmanager.CreateSecretInput{
			Name:         aws.String(secretName),
			SecretString: aws.String(string(c)),
		})
	}

	if err != nil {
		return "", fmt.Errorf("saving secret in AWS: %w", err)
	}

	return secretName, nil
}

func (m *Manager) ReadCredentials(ctx context.Context, secretID string, creds any) error {
	resp, err := m.client.GetSecretValue(ctx, &secretsmanager.GetSecretValueInput{