可以使用AWS CDK GoLang的GrantRead()方法授予lambda对Secrets Manager的读取权限。示例代码如下:
import (
"github.com/aws/aws-cdk-go/awssecretsmanager"
"github.com/aws/aws-cdk-go/awslambda"
)
// ...
secret := awssecretsmanager.Secret_FromSecretArn(stack, "Secret", "")
fn := awslambda.NewFunction(stack, "MyFunction", &awslambda.FunctionProps{
// ... other props
SecretsManager: &[]awssecretsmanager.ISecret{
secret,
},
})
secret.GrantRead(fn)