AWS CDK Reference

Appearance

v2.274.0

SecretAttributes Struct ​

Attributes required to import an existing secret into the Stack.

One ARN format (secretArn, secretCompleteArn, secretPartialArn) must be provided.

Source
aws-secretsmanager/lib/secret.ts

Example ​

ts
const userpool = new cognito.UserPool(this, 'Pool');
const secret = secretsmanager.Secret.fromSecretAttributes(this, "CognitoClientSecret", {
    secretCompleteArn: "arn:aws:secretsmanager:xxx:xxx:secret:xxx-xxx"
}).secretValue

const provider = new cognito.UserPoolIdentityProviderGoogle(this, 'Google', {
  clientId: 'amzn-client-id',
  clientSecretValue: secret,
  userPool: userpool,
});

Properties ​

encryptionKeyIKeyencryption_keyIKeyencryptionKeyIKeyEncryptionKeyIKeyEncryptionKeyIKey#
The encryption key that is used to encrypt the secret, unless the default SecretsManager key is used.
secretCompleteArnstringsecret_complete_arnstrsecretCompleteArnStringSecretCompleteArnstringSecretCompleteArn*string#
The complete ARN of the secret in SecretsManager.

This is the ARN including the Secrets Manager 6-character suffix. Cannot be used with secretArn or secretPartialArn.

secretPartialArnstringsecret_partial_arnstrsecretPartialArnStringSecretPartialArnstringSecretPartialArn*string#
The partial ARN of the secret in SecretsManager.

This is the ARN without the Secrets Manager 6-character suffix. Cannot be used with secretArn or secretCompleteArn.