secretsmanager

package

Go to main page

Versions in this module

v1

v1.5.0

Aug 24, 2026

v1.4.0

Aug 19, 2026

v1.3.5

Aug 19, 2026

v1.3.4

Aug 18, 2026

v1.3.3

Aug 17, 2026

v1.3.2

Aug 16, 2026

v1.3.1

Aug 16, 2026

Changes in this version

+ var ErrRotationStrategyRequired = errors.New("InvalidRequestException")

type CreateSecretInput

+ Type string

type DescribeSecretOutput

+ ExternalSecretRotationMetadata []ExternalSecretRotationMetadataItem

+ ExternalSecretRotationRoleArn string

+ Type string

+ type ExternalSecretRotationMetadataItem struct

+ Key string

+ Value string

type RotateSecretInput

+ ExternalSecretRotationMetadata []ExternalSecretRotationMetadataItem

+ ExternalSecretRotationRoleArn string

type Secret

+ ExternalSecretRotationMetadata []ExternalSecretRotationMetadataItem

+ ExternalSecretRotationRoleArn string

+ Type string

type SecretListEntry

+ ExternalSecretRotationMetadata []ExternalSecretRotationMetadataItem

+ ExternalSecretRotationRoleArn string

+ PrimaryRegion string

+ Type string

type UpdateSecretInput

+ Type string

v1.3.0

Aug 3, 2026

v1.2.0

Aug 3, 2026

Changes in this version

type InMemoryBackend

+ func (b *InMemoryBackend) BeginRotationTestProbe(ctx context.Context, secretID string) (string, error)

v1.1.4

Jul 20, 2026

v1.1.3

Jul 20, 2026

v1.1.2

Jul 20, 2026

v1.1.1

Jul 20, 2026

v1.1.0

Jul 19, 2026

Changes in this version

+ const DefaultKMSKeyAlias

+ const MockAccountID

+ const MockRegion

+ const StagingLabelCurrent

+ const StagingLabelPrevious

+ var ErrCryptoRandInvalidRange = errors.New("random integer bound must be positive")

+ var ErrInvalidParameter = errors.New("InvalidParameterException")

+ var ErrInvalidPasswordParameters = errors.New("InvalidParameterException")

+ var ErrInvalidSecretName = errors.New("InvalidParameterException")

+ var ErrKMSDecryptionFailed = errors.New("InvalidRequestException")

+ var ErrKMSEncryptionFailed = errors.New("InvalidRequestException")

+ var ErrKMSNotConfigured = errors.New(...)

+ var ErrMalformedPolicyDocument = errors.New("MalformedPolicyDocumentException")

+ var ErrNilAppContext = errors.New("nil AppContext passed to SecretsManager Provider.Init")

+ var ErrPublicPolicyException = errors.New("PublicPolicyException")

+ var ErrSecretAlreadyExists = errors.New("ResourceExistsException")

+ var ErrSecretDeleted = errors.New("InvalidRequestException")

+ var ErrSecretNotFound = errors.New(errResourceNotFoundException)

+ var ErrSecretValueTooLarge = errors.New("InvalidParameterException")

+ var ErrUnknownOperation = errors.New("UnknownOperationException")

+ var ErrVersionNotFound = errors.New(errResourceNotFoundException)

+ func UnixTimeFloat(t time.Time) float64

+ type APIErrorType struct

+ ErrorCode string

+ Message string

+ SecretID string

+ type BatchGetSecretValueFilter struct

+ Key string

+ Values []string

+ type BatchGetSecretValueInput struct

+ Filters []BatchGetSecretValueFilter

+ MaxResults *int32

+ NextToken string

+ SecretIDList []string

+ type BatchGetSecretValueOutput struct

+ Errors []APIErrorType

+ NextToken string

+ SecretValues []SecretValueEntry

+ type CancelRotateSecretInput struct

+ SecretID string

+ type CancelRotateSecretOutput struct

+ ARN string

+ Name string

+ VersionID string

+ type CreateSecretInput struct

+ AddReplicaRegions []ReplicaRegion

+ ClientRequestToken string

+ Description string

+ KmsKeyID string

+ Name string

+ Region string

+ SecretBinary []byte

+ SecretString string

+ Tags []Tag

+ type CreateSecretOutput struct

+ ARN string

+ Name string

+ ReplicationStatus []ReplicationStatusType

+ VersionID string

+ type DeleteResourcePolicyInput struct

+ SecretID string

+ type DeleteResourcePolicyOutput struct

+ ARN string

+ Name string

+ type DeleteSecretInput struct

+ ForceDeleteWithoutRecovery bool

+ RecoveryWindowInDays *int64

+ SecretID string

+ type DeleteSecretOutput struct

+ ARN string

+ DeletionDate float64

+ Name string

+ type DescribeSecretInput struct

+ SecretID string

+ type DescribeSecretOutput struct

+ ARN string

+ CreatedDate *float64

+ DeletedDate *float64

+ Description string

+ KmsKeyID string

+ LastAccessedDate *float64

+ LastChangedDate *float64

+ LastRotatedDate *float64

+ Name string

+ NextRotationDate *float64

+ OwnerAccountID string

+ PrimaryRegion string

+ ReplicationStatus []ReplicationStatusType

+ RotationEnabled bool

+ RotationLambdaARN string

+ RotationRules *RotationRulesType

+ Tags *tags.Tags

+ VersionIDsToStages map[string][]string

+ type ErrorResponse struct

+ Message string

+ Type string

+ type GetRandomPasswordInput struct

+ ExcludeCharacters string

+ ExcludeLowercase bool

+ ExcludeNumbers bool

+ ExcludePunctuation bool

+ ExcludeUppercase bool

+ IncludeSpace bool

+ PasswordLength *int64

+ RequireEachIncludedType bool

+ type GetRandomPasswordOutput struct

+ RandomPassword string

+ type GetResourcePolicyInput struct

+ SecretID string

+ type GetResourcePolicyOutput struct

+ ARN string

+ Name string

+ ResourcePolicy string

+ type GetSecretValueInput struct

+ SecretID string

+ VersionID string

+ VersionStage string

+ type GetSecretValueOutput struct

+ ARN string

+ CreatedDate float64

+ LastAccessedDate *float64

+ Name string

+ SecretBinary []byte

+ SecretString string

+ VersionID string

+ VersionStages []string

+ type Handler struct

+ Backend StorageBackend

+ DefaultRegion string

+ func NewHandler(backend StorageBackend) *Handler

+ func (h *Handler) ChaosOperations() []string

+ func (h *Handler) ChaosRegions() []string

+ func (h *Handler) ChaosServiceName() string

+ func (h *Handler) ExtractOperation(c *echo.Context) string

+ func (h *Handler) ExtractResource(c *echo.Context) string

+ func (h *Handler) GetSupportedOperations() []string

+ func (h *Handler) Handler() echo.HandlerFunc

+ func (h *Handler) MatchPriority() int

+ func (h *Handler) Name() string

+ func (h *Handler) Reset()

+ func (h *Handler) Restore(ctx context.Context, data []byte) error

+ func (h *Handler) RouteMatcher() service.Matcher

+ func (h *Handler) SetLambdaInvoker(invoker LambdaInvoker)

+ func (h *Handler) Shutdown(ctx context.Context)

+ func (h *Handler) Snapshot(ctx context.Context) []byte

+ func (h *Handler) StartWorker(ctx context.Context) error

+ func (h *Handler) WithJanitor(interval ...time.Duration) *Handler

+ type InMemoryBackend struct

+ func NewInMemoryBackend() *InMemoryBackend

+ func NewInMemoryBackendWithConfig(accountID, region string) *InMemoryBackend

+ func NewInMemoryBackendWithContext(svcCtx context.Context, accountID, region string) *InMemoryBackend

+ func (b *InMemoryBackend) AbortRotation(ctx context.Context, secretID, versionID string) error

+ func (b *InMemoryBackend) AccountID() string

+ func (b *InMemoryBackend) AddSecretInternal(s *Secret)

+ func (b *InMemoryBackend) BatchGetSecretValue(ctx context.Context, input *BatchGetSecretValueInput) (*BatchGetSecretValueOutput, error)

+ func (b *InMemoryBackend) CancelRotateSecret(ctx context.Context, input *CancelRotateSecretInput) (*CancelRotateSecretOutput, error)

+ func (b *InMemoryBackend) CreateSecret(ctx context.Context, input *CreateSecretInput) (*CreateSecretOutput, error)

+ func (b *InMemoryBackend) DeleteResourcePolicy(ctx context.Context, input *DeleteResourcePolicyInput) (*DeleteResourcePolicyOutput, error)

+ func (b *InMemoryBackend) DeleteSecret(ctx context.Context, input *DeleteSecretInput) (*DeleteSecretOutput, error)

+ func (b *InMemoryBackend) DescribeSecret(ctx context.Context, input *DescribeSecretInput) (*DescribeSecretOutput, error)

+ func (b *InMemoryBackend) FinishRotation(ctx context.Context, secretID, versionID string) error

+ func (b *InMemoryBackend) GetRandomPassword(input *GetRandomPasswordInput) (*GetRandomPasswordOutput, error)

+ func (b *InMemoryBackend) GetResourcePolicy(ctx context.Context, input *GetResourcePolicyInput) (*GetResourcePolicyOutput, error)

+ func (b *InMemoryBackend) GetSecretValue(ctx context.Context, input *GetSecretValueInput) (*GetSecretValueOutput, error)

+ func (b *InMemoryBackend) ListAll() []SecretListEntry

+ func (b *InMemoryBackend) ListSecretVersionIDs(ctx context.Context, input *ListSecretVersionIDsInput) (*ListSecretVersionIDsOutput, error)

+ func (b *InMemoryBackend) ListSecrets(ctx context.Context, input *ListSecretsInput) (*ListSecretsOutput, error)

+ func (b *InMemoryBackend) PutResourcePolicy(ctx context.Context, input *PutResourcePolicyInput) (*PutResourcePolicyOutput, error)

+ func (b *InMemoryBackend) PutSecretValue(ctx context.Context, input *PutSecretValueInput) (*PutSecretValueOutput, error)

+ func (b *InMemoryBackend) Region() string

+ func (b *InMemoryBackend) RemoveRegionsFromReplication(ctx context.Context, input *RemoveRegionsFromReplicationInput) (*RemoveRegionsFromReplicationOutput, error)

+ func (b *InMemoryBackend) ReplicateSecretToRegions(ctx context.Context, input *ReplicateSecretToRegionsInput) (*ReplicateSecretToRegionsOutput, error)

+ func (b *InMemoryBackend) Reset()

+ func (b *InMemoryBackend) Restore(ctx context.Context, data []byte) error

+ func (b *InMemoryBackend) RestoreSecret(ctx context.Context, input *RestoreSecretInput) (*RestoreSecretOutput, error)

+ func (b *InMemoryBackend) RotateSecret(ctx context.Context, input *RotateSecretInput) (*RotateSecretOutput, error)

+ func (b *InMemoryBackend) SetKMSEncryptor(e KMSEncryptor)

+ func (b *InMemoryBackend) SetLambdaInvoker(invoker LambdaInvoker)

+ func (b *InMemoryBackend) Snapshot(ctx context.Context) []byte

+ func (b *InMemoryBackend) StopReplicationToReplica(ctx context.Context, input *StopReplicationToReplicaInput) (*StopReplicationToReplicaOutput, error)

+ func (b *InMemoryBackend) StopRotationScheduler()

+ func (b *InMemoryBackend) TagResource(ctx context.Context, input *TagResourceInput) error

+ func (b *InMemoryBackend) TagSecretByARN(_ context.Context, secretARN string, newTags map[string]string) error

+ func (b *InMemoryBackend) TaggedSecrets(_ context.Context) []TaggedSecretInfo

+ func (b *InMemoryBackend) UntagResource(ctx context.Context, input *UntagResourceInput) error

+ func (b *InMemoryBackend) UntagSecretByARN(_ context.Context, secretARN string, tagKeys []string) error

+ func (b *InMemoryBackend) UpdateSecret(ctx context.Context, input *UpdateSecretInput) (*UpdateSecretOutput, error)

+ func (b *InMemoryBackend) UpdateSecretVersionStage(ctx context.Context, input *UpdateSecretVersionStageInput) (*UpdateSecretVersionStageOutput, error)

+ func (b *InMemoryBackend) ValidateResourcePolicy(ctx context.Context, input *ValidateResourcePolicyInput) (*ValidateResourcePolicyOutput, error)

+ type Janitor struct

+ Backend *InMemoryBackend

+ Interval time.Duration

+ TaskTimeout time.Duration

+ func NewJanitor(backend *InMemoryBackend, interval time.Duration) *Janitor

+ func (j *Janitor) Run(ctx context.Context)

+ func (j *Janitor) SweepOnce(ctx context.Context)

+ type KMSEncryptor interface

+ Decrypt func(ctx context.Context, ciphertext []byte) ([]byte, error)

+ Encrypt func(ctx context.Context, keyID string, plaintext []byte) ([]byte, error)

+ type LambdaInvoker interface

+ InvokeFunction func(ctx context.Context, name, invocationType string, payload []byte) ([]byte, int, error)

+ type ListSecretVersionIDsInput struct

+ IncludeDeprecated bool

+ MaxResults *int64

+ NextToken string

+ SecretID string

+ type ListSecretVersionIDsOutput struct

+ ARN string

+ Name string

+ NextToken string

+ Versions []SecretVersionEntry

+ type ListSecretsInput struct

+ Filters []SecretFilter

+ IncludePlannedDeletion bool

+ MaxResults *int64

+ NextToken string

+ SortBy string

+ SortOrder string

+ type ListSecretsOutput struct

+ NextToken string

+ SecretList []SecretListEntry

+ type PolicyValidationException struct

+ CheckName string

+ ErrorMessage string

+ type Provider struct

+ func (p *Provider) Init(ctx *service.AppContext) (service.Registerable, error)

+ func (p *Provider) Name() string

+ type PutResourcePolicyInput struct

+ BlockPublicPolicy *bool

+ ResourcePolicy string

+ SecretID string

+ type PutResourcePolicyOutput struct

+ ARN string

+ Name string

+ type PutSecretValueInput struct

+ ClientRequestToken string

+ SecretBinary []byte

+ SecretID string

+ SecretString string

+ VersionStages []string

+ type PutSecretValueOutput struct

+ ARN string

+ Name string

+ VersionID string

+ VersionStages []string

+ type RemoveRegionsFromReplicationInput struct

+ RemoveReplicaRegions []string

+ SecretID string

+ type RemoveRegionsFromReplicationOutput struct

+ ARN string

+ ReplicationStatus []ReplicationStatusType

+ type ReplicaRegion struct

+ KmsKeyID string

+ Region string

+ type ReplicateSecretToRegionsInput struct

+ AddReplicaRegions []ReplicaRegion

+ ForceOverwriteReplicaSecret bool

+ SecretID string

+ type ReplicateSecretToRegionsOutput struct

+ ARN string

+ ReplicationStatus []ReplicationStatusType

+ type ReplicationStatusType struct

+ KmsKeyID string

+ Region string

+ Status string

+ StatusMessage string

+ type RestoreSecretInput struct

+ SecretID string

+ type RestoreSecretOutput struct

+ ARN string

+ Name string

+ type RotateSecretInput struct

+ ClientRequestToken string

+ RotateImmediately *bool

+ RotationLambdaARN string

+ RotationRules *RotationRulesType

+ SecretID string

+ type RotateSecretOutput struct

+ ARN string

+ Name string

+ VersionID string

+ type RotationRulesType struct

+ AutomaticallyAfterDays *int64

+ Duration string

+ ScheduleExpression string

+ type Secret struct

+ ARN string

+ CreatedDate *float64

+ CurrentVersionID string

+ DeletedDate *float64

+ Description string

+ KmsKeyID string

+ LastAccessedDate *float64

+ LastChangedDate *float64

+ LastRotatedDate *float64

+ Name string

+ RotationEnabled bool

+ RotationLambdaARN string

+ RotationRules *RotationRulesType

+ ScheduledDeletionDate *float64

+ Tags *tags.Tags

+ Versions map[string]*SecretVersion

+ type SecretFilter struct

+ Key string

+ Values []string

+ type SecretListEntry struct

+ ARN string

+ CreatedDate *float64

+ DeletedDate *float64

+ Description string

+ KmsKeyID string

+ LastAccessedDate *float64

+ LastChangedDate *float64

+ LastRotatedDate *float64

+ Name string

+ NextRotationDate *float64

+ RotationEnabled bool

+ RotationLambdaARN string

+ RotationRules *RotationRulesType

+ SecretVersionsToStages map[string][]string

+ Tags *tags.Tags

+ type SecretValueEntry struct

+ ARN string

+ CreatedDate float64

+ Name string

+ SecretBinary []byte

+ SecretString string

+ VersionID string

+ VersionStages []string

+ type SecretVersion struct

+ Ciphertext []byte

+ CreatedDate float64

+ KmsKeyIDs []string

+ LastAccessedDate *float64

+ SecretBinary []byte

+ SecretString string

+ StagingLabels []string

+ VersionID string

+ WasString bool

+ type SecretVersionEntry struct

+ CreatedDate float64

+ KmsKeyIDs []string

+ LastAccessedDate *float64

+ StagingLabels []string

+ VersionID string

+ type StopReplicationToReplicaInput struct

+ SecretID string

+ type StopReplicationToReplicaOutput struct

+ ARN string

+ type StorageBackend interface

+ BatchGetSecretValue func(ctx context.Context, input *BatchGetSecretValueInput) (*BatchGetSecretValueOutput, error)

+ CancelRotateSecret func(ctx context.Context, input *CancelRotateSecretInput) (*CancelRotateSecretOutput, error)

+ CreateSecret func(ctx context.Context, input *CreateSecretInput) (*CreateSecretOutput, error)

+ DeleteResourcePolicy func(ctx context.Context, input *DeleteResourcePolicyInput) (*DeleteResourcePolicyOutput, error)

+ DeleteSecret func(ctx context.Context, input *DeleteSecretInput) (*DeleteSecretOutput, error)

+ DescribeSecret func(ctx context.Context, input *DescribeSecretInput) (*DescribeSecretOutput, error)

+ GetRandomPassword func(input *GetRandomPasswordInput) (*GetRandomPasswordOutput, error)

+ GetResourcePolicy func(ctx context.Context, input *GetResourcePolicyInput) (*GetResourcePolicyOutput, error)

+ GetSecretValue func(ctx context.Context, input *GetSecretValueInput) (*GetSecretValueOutput, error)

+ ListAll func() []SecretListEntry

+ ListSecretVersionIDs func(ctx context.Context, input *ListSecretVersionIDsInput) (*ListSecretVersionIDsOutput, error)

+ ListSecrets func(ctx context.Context, input *ListSecretsInput) (*ListSecretsOutput, error)

+ PutResourcePolicy func(ctx context.Context, input *PutResourcePolicyInput) (*PutResourcePolicyOutput, error)

+ PutSecretValue func(ctx context.Context, input *PutSecretValueInput) (*PutSecretValueOutput, error)

+ RemoveRegionsFromReplication func(ctx context.Context, input *RemoveRegionsFromReplicationInput) (*RemoveRegionsFromReplicationOutput, error)

+ ReplicateSecretToRegions func(ctx context.Context, input *ReplicateSecretToRegionsInput) (*ReplicateSecretToRegionsOutput, error)

+ RestoreSecret func(ctx context.Context, input *RestoreSecretInput) (*RestoreSecretOutput, error)

+ RotateSecret func(ctx context.Context, input *RotateSecretInput) (*RotateSecretOutput, error)

+ StopReplicationToReplica func(ctx context.Context, input *StopReplicationToReplicaInput) (*StopReplicationToReplicaOutput, error)

+ TagResource func(ctx context.Context, input *TagResourceInput) error

+ UntagResource func(ctx context.Context, input *UntagResourceInput) error

+ UpdateSecret func(ctx context.Context, input *UpdateSecretInput) (*UpdateSecretOutput, error)

+ UpdateSecretVersionStage func(ctx context.Context, input *UpdateSecretVersionStageInput) (*UpdateSecretVersionStageOutput, error)

+ ValidateResourcePolicy func(ctx context.Context, input *ValidateResourcePolicyInput) (*ValidateResourcePolicyOutput, error)

+ type Tag struct

+ Key string

+ Value string

+ type TagResourceInput struct

+ SecretID string

+ Tags []Tag

+ type TaggedSecretInfo struct

+ ARN string

+ Tags map[string]string

+ type UntagResourceInput struct

+ SecretID string

+ TagKeys []string

+ type UpdateSecretInput struct

+ ClientRequestToken string

+ Description string

+ KmsKeyID string

+ SecretBinary []byte

+ SecretID string

+ SecretString string

+ type UpdateSecretOutput struct

+ ARN string

+ Name string

+ VersionID string

+ type UpdateSecretVersionStageInput struct

+ MoveToVersionID string

+ RemoveFromVersionID string

+ SecretID string

+ VersionStage string

+ type UpdateSecretVersionStageOutput struct

+ ARN string

+ Name string

+ type ValidateResourcePolicyInput struct

+ ResourcePolicy string

+ SecretID string

+ type ValidateResourcePolicyOutput struct

+ PolicyValidationPassed bool

+ ValidationErrors []PolicyValidationException

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL