一、secret manager

1、创建 secretsmanager
➜  ~ aws secretsmanager create-secret --name storage-aws-security-bulletin --description "storage the aws bulletin vulnerability information" --secret-string '{"vul": "vul-test-123"}' --region us-west-2 --profile=security-3697>1.txt&&cat 1.txt
{
    "ARN": "arn:aws:secretsmanager:us-west-2:121444773697:secret:storage-aws-security-bulletin-D7r1O9",
    "Name": "storage-aws-security-bulletin",
    "VersionId": "30866c46-4e36-4d56-b52d-acebb8842064"
}
➜  ~           


2、获取 secret manager 信息

aws secretsmanager get-secret-value --secret-id storage-aws-security-bulletin --region=us-west-2 --profile=security-3697>1.txt&&cat 1.txt

3、更新 secret manager 信息
aws secretsmanager update-secret --secret-id storage-aws-security-bulletin --secret-string '{"vul": "ccccccccccccccccccc"}' --region=us-west-2 --profile=security-3697>1.txt&&cat 1.txt


二、相关的 lambda permission
{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Sid": "AllowSecretsManagerCRUD",
      "Effect": "Allow",
      "Action": [
        "secretsmanager:CreateSecret",
        "secretsmanager:GetSecretValue",
        "secretsmanager:UpdateSecret"
      ],
      "Resource": "arn:aws:secretsmanager:us-west-2:121444773697:secret:storage-aws-security-bulletin-D7r1O9"
    }
  ]
}