Metadata-Version: 2.1
Name: aws-secret-cdk
Version: 2.0.3
Summary: Package to create a SecretsManager's secret with auto rotation.
Home-page: https://github.com/laimonassutkus/AwsSecretCdk
Author: Laimonas Sutkus
Author-email: laimonas.sutkus@gmail.com
License: GNU GENERAL PUBLIC LICENSE Version 3
Keywords: AWS CDK CloudFormation SecretsManager Infrastructure Cloud DevOps
Platform: UNKNOWN
Classifier: Programming Language :: Python :: 3
Classifier: Programming Language :: Python :: 3.5
Classifier: Programming Language :: Python :: 3.6
Classifier: Programming Language :: Python :: 3.7
Classifier: Programming Language :: Python :: 3.8
Classifier: Operating System :: OS Independent
Description-Content-Type: text/markdown
Requires-Dist: aws-cdk.core
Requires-Dist: aws-cdk.aws-iam
Requires-Dist: aws-cdk.aws-ec2
Requires-Dist: aws-cdk.aws-lambda
Requires-Dist: aws-cdk.aws-rds
Requires-Dist: aws-cdk.aws-secretsmanager
Requires-Dist: aws-cdk.aws-s3-deployment
Requires-Dist: aws-lambda (<3.0.0,>=2.1.2)

## AWS Secret Cdk

An AWS CDK library to manage SecretsManager secrets easily.

#### Description

SecretsManager is a great AWS service to manage your secrets e.g. database
password. It is really easy to create and configure a secret through AWS
console (UI). However it is NOTORIOUSLY difficult to create and manage 
secrets through CloudFormation. You need to create a lambda function, which 
executes secret rotation, ensure correct lambda function permissions and
security groups, correctly configure secrets themselves with correct templates, etc.
All in all, it is really painful. This library tackles this problem. In a 
nutshell, you just provide a database, for which the secret should be applied,
and some other params. And that's it! You're good to go.

#### Assumptions

This Cdk library assumes the following:
- You have knowledge in AWS
- You have knowledge in AWS CloudFormation and AWS CDK for creating infrastructure-as-a-code.

#### How to use

```python
# Suppose you have a stack (core.Stack) or an app (core.App) which are constructs.
from aws_cdk.core import Stack
from aws_cdk.aws_ec2 import Vpc
class MyStack(Stack):
    def __init__(self):
        super().__init__(...)

        # Suppose you have defined a VPC:
        self.vpc = Vpc(...)

        # Suppose you have a database (or a cluster)
        from aws_cdk import aws_rds
        self.database = aws_rds.CfnDBCluster(...)

        # Now simply create a secret with 30 day rotation.
        from aws_secret_cdk.rds_secret import RdsSecret
        from aws_secret_cdk.vpc_parameters import VPCParameters
        self.rds_secret = RdsSecret(
            stack=self,
            prefix='MyResourcesPrefix',
            vpc_parameters=VPCParameters(
                rotation_lambda_vpc=self.vpc,
                rotation_lambda_security_groups=[
                    # Your SG's.
                ],
                rotation_lambda_subnets=self.vpc.private_subnets
            ),
            database=self.database
        )
```


# Release history

#### 2.0.3
Consistent naming.

#### 2.0.2
Add docstrings.

#### 2.0.1
Fix target types and target arns.

#### 2.0.0
General bug fixes. Add permission for KMS key resource. Add secret template.

#### 1.0.9
Add secrets manager as a valid principal to invoke rotation lambda.

#### 1.0.8
Add S3 removal policy.

#### 1.0.7
Don't use managed policies.

#### 1.0.6
Aws Lambda dependency update.

#### 1.0.5
Aws Lambda dependency update.

#### 1.0.4
Dont create Code class instance.

#### 1.0.3
Move packages into main package.

#### 1.0.2
Fix manifest file.

#### 1.0.1
Ensure bucket and bucket deployment has different names.

#### 1.0.0
Initial commit. Add ability to create RDS secret and rotate it every 30 days.


