Unable to retrieve a stored AWS Secretss API keys and parameters

0

Hi Everyone, I am new to lamda Function. I have stored my API Key and other parameters for an rest endpoint as key pair values as a secret in AWS Secret Manager. While I need to retreive the key and other parameters to construct the end point, I am unable to even print it. I have added my code below written in Python. The response is coming null along with no error and no information in logs.

import boto3 import base64 from botocore.exceptions import ClientError import json

def get_secret():

secret_name = "aXXXXXXXXXXXXXXXXXXXXXXX2cFVdm"
region_name = "apXXXXXXX1"

session = boto3.session.Session() client = session.client( service_name='secretsmanager', region_name=region_name )

# In this sample we only handle the specific exceptions for the 'GetSecretValue' API.
# See https://docs.aws.amazon.com/secretsmanager/latest/apireference/API_GetSecretValue.html
# We rethrow the exception by default.
get_secret_value_response=""
try:
    get_secret_value_response = client.get_secret_value(
        SecretId=secret_name
    )
    
except ClientError as e:
    if e.response['Error']['Code'] == 'DecryptionFailureException':
        # Secrets Manager can't decrypt the protected secret text using the provided KMS key.
        # Deal with the exception here, and/or rethrow at your discretion.
        raise e
    elif e.response['Error']['Code'] == 'InternalServiceErrorException':
        # An error occurred on the server side.
        # Deal with the exception here, and/or rethrow at your discretion.
        raise e
    elif e.response['Error']['Code'] == 'InvalidParameterException':
        # You provided an invalid value for a parameter.
        # Deal with the exception here, and/or rethrow at your discretion.
        raise e
    elif e.response['Error']['Code'] == 'InvalidRequestException':
        # You provided a parameter value that is not valid for the current state of the resource.
        # Deal with the exception here, and/or rethrow at your discretion.
        raise e
    elif e.response['Error']['Code'] == 'ResourceNotFoundException':
        # We can't find the resource that you asked for.
        # Deal with the exception here, and/or rethrow at your discretion.
        raise e
else:
    # Decrypts secret using the associated KMS key.
    # Depending on whether the secret is a string or binary, one of these fields will be populated.
    if 'SecretString' in get_secret_value_response:
        secret = get_secret_value_response['SecretString']
    else:
        decoded_binary_secret = base64.b64decode(get_secret_value_response['SecretBinary'])
        
# Your code goes here. 
return get_secret_value_response

def lambda_handler(event, context): ms=get_secret(); print(ms)

asked 2 years ago951 views
3 Answers
1

The lambda_handler is missing.

def lambda_handler(event, context):
    get_secret()
answered 2 years ago
  • The Lambda handler was already present in the Code in the Last line. Due to copy paste it may not be viewed properly. Even though Lambda handler was present , I am unable to retrieve the keys.

    def lambda_handler(event, context): ms=get_secret(); print(ms)

0

What is printed?

Is your function attached to a VPC? If so, do you have a NAT Gateway or a VPC Endpoint for Secrets Manager?

profile pictureAWS
EXPERT
Uri
answered 2 years ago
  • No, the function is not connected to any VPC. The Key Values are stored in the secrets manager contains parameters for creating a URL request.

0

Hi everyone, We are trying to access REST end point and execute a GET request to receive JSON files from it. we are using AWS secrets to store the parameter of the request. We have two questions:

a) We are successful to get the result in Function Logs but unable to import the requests module. errorMessage": "name 'requests' is not defined". We even tried to use Pip install in console as from boot import is no more allowed. Is their any workaround.

b) Now if we fire this Getrequest end point from AWS, it will return JSON files, how to handle and store that inside AWS.

Regards

Arun

answered 2 years ago
  • You will need to use Lambda Layers with the packages you need and use that layer as part of your build process

You are not logged in. Log in to post an answer.

A good answer clearly answers the question and provides constructive feedback and encourages professional growth in the question asker.

Guidelines for Answering Questions