secretresolver

func Resolve ¶

func Resolve(ctx context.Context, value string) (string, error)

Resolve resolves a value that may be a plain string, an SSM parameter path, or an ARN pointing to either Secrets Manager or SSM Parameter Store.

func ResolveParameter ¶

func ResolveParameter(ctx context.Context, paramName string) (string, error)

func ResolveSecret ¶

func ResolveSecret(ctx context.Context, secretArn string) (json.RawMessage, error)

ResolveSecret fetches a secret from AWS Secrets Manager using an extended ARN format:

arn:aws:secretsmanager:region:account_id:secret:secret-name:json-key:version-stage:version-id

If json-key is provided, the secret is parsed as a JSON map and the value at that key is returned as a json.RawMessage. If json-key is omitted, the raw secret value is returned. Version-stage and version-id are optional and fall back to Secrets Manager defaults (AWSCURRENT) when not specified.