aws

type SecretsManagerConfig struct {
	// SecretID is the ARN or name of the secret in AWS Secrets Manager (required)
	SecretID string `json:"secret_id" yaml:"secret_id"`
	// Region is the AWS region where the secret is stored (optional)
	Region string `json:"region,omitempty" yaml:"region,omitempty"`
	// Endpoint is a custom endpoint URL for AWS Secrets Manager (optional, for local testing)
	Endpoint string `json:"endpoint,omitempty" yaml:"endpoint,omitempty"`

	// RoleArn is the ARN of the IAM role to assume using SSO JWT (optional)
	// When set with SSO tokens, triggers AssumeRoleWithWebIdentity authentication
	RoleArn string `json:"role_arn,omitempty" yaml:"role_arn,omitempty"`
	// SessionName is the name for the assumed role session (optional, defaults to "sstart-session")
	SessionName string `json:"session_name,omitempty" yaml:"session_name,omitempty"`
	// Duration is the session duration in seconds (optional, defaults to 3600)
	Duration int32 `json:"duration,omitempty" yaml:"duration,omitempty"`

	// Internal: SSO tokens injected by the collector
	SSOAccessToken string `json:"-" yaml:"-"`
	SSOIDToken     string `json:"-" yaml:"-"`
}

type SecretsManagerProvider struct {
	// contains filtered or unexported fields
}