alexharv074 / manage_secrets

A shell script wrapper for AWS Secrets Manager

AWS CLI helpers

My collection of AWS CLI helpers. These are all the AWS CLI helpers I have written over the years that I find frequently useful.

Table of contents

1. delete_bucket.sh
   • Overview
   • Installation
   • Usage
     • Help message
     • Delete a bucket
     • Delete a bucket with versions
     • Delete a bucket and all its data and versions
2. manage_secrets.sh
   • Overview
   • Usage
     • Help message
     • List secrets
     • Create a secret
     • Update a secret
     • Get a secret value
     • Rotate a secret
     • Delete a secret
3. License

delete_bucket.sh

Overview

A script to forcefully delete an S3 bucket, optionally including its data and versions.

Installation

To install, just download the script:

▶ curl \
  https://raw.githubusercontent.com/alexharv074/aws-cli-scripts/master/delete_bucket.sh \
    -o /usr/local/bin/delete_bucket.sh

Usage

Help message

▶ bash delete_bucket.sh
Usage: bash delete_bucket.sh [-vd] BUCKET
  -v: also delete versions
  -d: also delete data

Delete a bucket

Assuming you have an empty bucket:

▶ bash delete_bucket.sh mybucket

Delete a bucket with versions

Assuming you have an empty bucket that had versions:

▶ bash delete_bucket.sh -v mybucket

Delete a bucket and all its data and versions

To just delete a bucket and everything in it:

▶ bash delete_bucket.sh -v -d mybucket

manage_secrets.sh

Overview

This is a shell script wrapper for AWS Secrets Manager, exposing commonly-needed options in an easy-to-use interface.

Usage

Help message

▶ manage_secrets.sh -h
Usage: [SECRET_NAME=secret_name] [SECRET_DESC='secret desc'] [SECRET=xxxx] manage_secrets.sh [-hlgcrud]
Lists, creates, updates, rotates, or deletes a secret.

List secrets

▶ manage_secrets.sh -l
[
    "bar",
    "baz"
]

Create a secret

▶ SECRET_DESC='my secret' SECRET_NAME='foo' SECRET='xxx' manage_secrets.sh -c
{
    "ARN": "arn:aws:secretsmanager:ap-southeast-2:901798091585:secret:foo-qs8nQ3",
    "Name": "foo",
    "VersionId": "f1d7b305-5a75-4b75-a07a-da08a0991715"
}

Update a secret

▶ SECRET_NAME='foo' SECRET='yyy' manage_secrets.sh -u

Get a secret value

▶ SECRET_NAME='foo' manage_secrets.sh -g
yyy

Rotate a secret

This presumes you have set up the rotation Lambda.

▶ SECRET_NAME='foo' manage_secrets.sh -r

Delete a secret

▶ SECRET_NAME='foo' manage_secrets.sh -d

License

MIT.