AWS中用于轮换秘钥的SecretsManagerVPC终端节点的替代方案是什么?
创始人
2024-09-28 05:00:31
0

除了使用Secrets Manager VPC终端节点来轮换秘钥外,AWS还提供了其他一些解决方案。以下是几种选择:

  1. 使用AWS Lambda来定期轮换Secrets Manager中的秘钥。以下是一个使用Python编写的Lambda函数示例,该函数将秘钥从当前版本更改为新版本:
import boto3

def lambda_handler(event, context):
    # Create Secrets Manager client
    client = boto3.client('secretsmanager')

    # Get secret value
    get_secret_value_response = client.get_secret_value(
        SecretId='my_secret'
    )
    secret = get_secret_value_response['SecretString']
    print(f"Current value of my_secret is {secret}")

    # Put new secret value
    new_password = 'new_password'
    put_secret_value_response = client.put_secret_value(
        SecretId='my_secret',
        SecretString=new_password,
        VersionStages=['AWSPENDING']
    )
    print(f"Successfully put new value for my_secret with version {put_secret_value_response['VersionId']}")
    
    # Set new version of the secret as the active version
    update_secret_version_stage_response = client.update_secret_version_stage(
        SecretId='my_secret',
        VersionStage='AWSCURRENT',
        MoveToVersionId=put_secret_value_response['VersionId'],
        RemoveFromVersionId=get_secret_value_response['Version']['VersionId'] 
    )
    print(f"Successfully set new version {put_secret_value_response['VersionId']} of my_secret as AWSCURRENT")
  1. 将秘钥存储在AWS Systems Manager Parameter Store中,并使用AWS Lambda定期轮换它。以下是一个将秘钥存储在Parameter Store中并使用Python编写的Lambda函数示例,该函数将秘钥从当前版本更改为新版本:
import boto3

def lambda_handler(event, context):
    # Create SSM client
    client = boto3.client('ssm')

    # Get current value of parameter
    get_parameter_response = client.get_parameter(
        Name='/my_secret',
        WithDecryption=True
    )
    current_secret = get_parameter_response['Parameter']['Value']
    print(f"Current value of my_secret is {current_secret}")

    # Put new value of parameter
    new_secret = 'new_secret'
    put_parameter_response = client.put_parameter(
        Name='/my_secret',
        Value=new_secret,
        Type='SecureString',
        Overwrite=True
    )
    print

相关内容

热门资讯

透视普及!德扑圈透视挂(透视)... 透视普及!德扑圈透视挂(透视)智星菠萝可以辅助吗,教程诀窍(果真有挂)-哔哩哔哩1、智星菠萝可以辅助...
wpk透视是真的吗!hhpok... wpk透视是真的吗!hhpoker可以开挂吗(透视)方法-本来解迷真的有挂wpk透视是真的吗!hhp...
透视曝光!we poker免费... 透视曝光!we poker免费辅助器(透视)德普之星透视辅助软件下载,教程指引(有挂细节)-哔哩哔哩...
wepoker安装教程!拱趴大... wepoker安装教程!拱趴大菠萝十三水透视(透视)器-好像有挂真的是有挂所有人都在同一条线上,像星...
透视教你!wepoker辅助插... 透视教你!wepoker辅助插件功能(透视)wpk有辅助器吗,教程诀窍(确实有挂)-哔哩哔哩1、we...
红龙poker辅助器免费观看!... 红龙poker辅助器免费观看!wepoker科技辅助器(透视)插件-果然解密真的有挂1)红龙poke...
透视解谜!wepoker有没有... 透视解谜!wepoker有没有插件(透视)poker master辅助,教程绝活(了解有挂)-哔哩哔...
wepoker俱乐部辅助!hh... wepoker俱乐部辅助!hhpoker可以开挂吗(透视)脚本-一直解密是有挂1、实时hhpoker...
透视分享!wpk辅助购买(透视... 透视分享!wpk辅助购买(透视)wepoker免费透视脚本,教程步骤(有挂助手)-哔哩哔哩1、wep...
pokerrrr2辅助!pok... pokerrrr2辅助!pokemmo脚本辅助器(透视)攻略-总是了解是有挂pokerrrr2辅助!...