Class AwsSecretsManagerKeyProvider

java.lang.Object

com.kingsrook.qqq.backend.core.crypto.AbstractLookupKeyProvider

com.kingsrook.qqq.backend.core.crypto.AwsSecretsManagerKeyProvider

All Implemented Interfaces:

QKeyProviderInterface

public class AwsSecretsManagerKeyProvider
extends AbstractLookupKeyProvider

Key provider that reads base64 keys from AWS Secrets Manager, through SecretsManagerUtils (so it uses the same SECRETS_MANAGER_* environment configuration). The secret id is (path + name), per SecretsManagerUtils; the keyRef is the name. See AbstractLookupKeyProvider for the version convention. The secret lookup is injectable, for tests.

Field Summary

Fields inherited from class com.kingsrook.qqq.backend.core.crypto.AbstractLookupKeyProvider

DEFAULT_VERSION

Constructor Summary

Constructors

Constructor	Description
AwsSecretsManagerKeyProvider(String path)	Constructor - uses SecretsManagerUtils.
AwsSecretsManagerKeyProvider(String path, BiFunction<String,String,Optional<String>> secretLookup)	Constructor with an injectable (path, name) secret lookup.

Method Summary

Modifier and Type	Method	Description
protected String	describeSource()	Describe the source, for messages (e.g., "environment variable").
protected Optional<String>	lookup(String name)	Look up the (base64) value stored under a name.

Methods inherited from class com.kingsrook.qqq.backend.core.crypto.AbstractLookupKeyProvider

getKey, getKey

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Details

AwsSecretsManagerKeyProvider

public AwsSecretsManagerKeyProvider(String path)

Constructor - uses SecretsManagerUtils.

AwsSecretsManagerKeyProvider

public AwsSecretsManagerKeyProvider(String path,
 BiFunction<String,String,Optional<String>> secretLookup)

Constructor with an injectable (path, name) secret lookup.

Method Details

lookup

protected Optional<String> lookup(String name)

Description copied from class: AbstractLookupKeyProvider

Look up the (base64) value stored under a name. Empty if not found.

Specified by:

lookup in class AbstractLookupKeyProvider

describeSource

protected String describeSource()

Description copied from class: AbstractLookupKeyProvider

Describe the source, for messages (e.g., "environment variable").

Specified by:

describeSource in class AbstractLookupKeyProvider