菜单
开源

getSecret

SecretsManagerClient.getSecret 从 AWS Secrets Manager 下载密钥。

参数类型描述
secretIDstring要检索的密钥的 ARN 或名称。

返回

类型描述
Promise< Secret>一个 Promise,解析后包含一个描述并保存下载密钥的 Secret

示例

JavaScript
import exec from 'k6/execution';

import {
  AWSConfig,
  SecretsManagerClient,
} from 'https://jslib.k6.io/aws/0.13.0/secrets-manager.js';

const awsConfig = new AWSConfig({
  region: __ENV.AWS_REGION,
  accessKeyId: __ENV.AWS_ACCESS_KEY_ID,
  secretAccessKey: __ENV.AWS_SECRET_ACCESS_KEY,
});

const secretsManager = new SecretsManagerClient(awsConfig);
const testSecretName = 'jslib-test-secret';

export default async function () {
  // List the secrets the AWS authentication configuration
  // gives us access to.
  const secrets = await secretsManager.listSecrets();
  if (secrets.filter((s) => s.name === testSecretName).length == 0) {
    exec.test.abort('test secret not found');
  }

  // Let's get our test secret's value and print it.
  const secret = await secretsManager.getSecret(testSecretName);
  console.log(JSON.stringify(secret));
}

一个从 AWS Secrets Manager 下载用户密钥的 k6 脚本