Secrets Manager

CloudTruth.com 🖥️ CloudTruth App 🧩Integrations
Search…
Secrets Manager
This AWS integration allows you to configure CloudTruth External Parameters from your AWS Secrets Manager.
Adding Integrations
If you already have a CloudTruth AWS integration you can add AWS Secrets Manager by editing the existing account, selecting this integration and adding the Secrets Manager Inline Policy. The Terraform and CloudFormation role setup methods automatically create the Secrets Manager inline policy.
To create a new or additional AWS account click Add AWS Account from the Integrations AWS page to bring up the add account pane. Add a name for the AWS account, your specific AWS account ID and the AWS account role name.‌ CloudTruth allows you to select regions where your resources exist, all US regions are enabled by default. You have the option to provide your own AWS External ID or allow CloudTruth to create one for you.
Check the AWS Secret Manager integration and click Save.​
‌
The AWS account will enter an Integration Error state until the AWS role is configured. If you did not provide an External Id an auto generated External Id will be created to use in the AWS Role Creation.
Configuring the AWS Role
With the provided External ID create your AWS Role.
Setting up an AWS Role
AWS Secret Store Inline Policy
‌Adding an Inline Policy to the AWS Role allows CloudTruth secure access to the selected integration.‌
From the AWS IAM Console select the role that you created for CloudTruth access.
Click Add Inline Policy.​
Click the JSON Tab.​‌
Paste in the following JSON for the AWS Secret Store integration policy and click Review Policy.
1
{
2
    "Version": "2012-10-17",
3
    "Statement": [
4
        {
5
            "Sid": "ListSecrets",
6
            "Effect": "Allow",
7
            "Action": "secretsmanager:ListSecrets",
8
            "Resource": "*"
9
        },
10
        {
11
            "Sid": "SecretAccess",
12
            "Effect": "Allow",
13
            "Action": [
14
                "secretsmanager:GetSecretValue",
15
                "secretsmanager:DescribeSecret"
16
            ],
17
            "Resource": "*"
18
        }
19
    ]
20
}
Copied!
Type in a name for the policy and click Create Policy.​‌​
👏Setup is now complete for both the AWS Role and Policy. After refreshing by clicking "Check Integration Status" the CloudTruth integration will now show as "Connected", and you can begin creating External Parameter values that reference your AWS resources.
Bitbucket Pipelines
Last modified 24d ago
Copy link
Contents
Adding Integrations
Configuring the AWS Role
AWS Secret Store Inline Policy