End of development notice: AWS is discontinuing development of Research and Engineering Studio on AWS (RES). 2026.09 is the final release, supported through September 30, 2027. RES remains open source and keeps running in your account. For more information, see RES end of support.
Secrets management
Research and Engineering Studio maintains the following secrets using AWS Secrets Manager. RES creates secrets automatically during environment creation. Secrets entered by the administrator during environment creation are entered as parameters.
| Secret name | Description | RES generated | Admin entered |
|---|---|---|---|
|
Single Sign-On OAuth2 Client Secret for environment | ✓ | |
|
VDC ClientSecret | ✓ | |
|
VDC ClientId | ✓ | |
|
Self-Signed certificate private key for domain | ✓ | |
|
Self-Signed certificate for domain | ✓ | |
|
cluster-manager ClientSecret | ✓ | |
|
cluster-manager ClientId | ✓ | |
|
Self-Signed certificate private key for domain | ✓ | |
|
Self-Signed certificate for domain | ✓ | |
|
Self-Signed certificate private key for domain | ✓ | |
|
Self-Signed certificate for domain | ✓ | |
|
The Distinguished Name (DN) attribute of the ServiceAccount user. | ✓ |
The following secret ARN values are contained in the
<envname>-cluster-settings
| Key | Source |
|---|---|
identity-provider.cognito.sso_client_secret |
|
vdc.dcv_connection_gateway.certificate.certificate_secret_arn |
stack |
vdc.dcv_connection_gateway.certificate.private_key_secret_arn |
stack |
cluster.load_balancers.internal_alb.certificates.private_key_secret_arn |
stack |
vdc.client_secret |
stack |
cluster.load_balancers.external_alb.certificates.certificate_secret_arn |
stack |
cluster.load_balancers.internal_alb.certificates.certificate_secret_arn |
stack |
cluster.secretsmanager.kms_key_id |
|
cluster.load_balancers.external_alb.certificates.private_key_secret_arn |
stack |
cluster-manager.client_secret |
