# SecPar

A [Sec]rets Manager and [Par]ameter Store CLI tool that leverages the newly [AWS SDK for Rust](https://github.com/awslabs/aws-sdk-rust) to manage secrets.

[Secrets Manager vs Parameter Store](https://medium.com/awesome-cloud/aws-difference-between-secrets-manager-and-parameter-store-systems-manager-f02686604eae)

## Setup
AWS Rust SDK will try to get the credentials in this order: 

`AWS_ACCESS_KEY_ID/AWS_SECRET_ACCESS_KEY` environment varaibles -> `~/.aws/credentials` -> `~/.aws/config`.

Hence, one way to set credentials for AWS Rust SDK is `~/.aws/credentials`, one example as below:
```console
[default]
aws_access_key_id=<key_id>
aws_secret_access_key=<secret>
region=us-east-1
```
For alternative ways, please refer to the [SDK setup page](https://docs.aws.amazon.com/sdk-for-java/v1/developer-guide/setup-credentials.html)


## Usage Examples

### Secrets Manager
- List all the secrets
```console
cargo run -- sec list
```
- Get specific secret value
```console
cargo run -- sec get --name <secret_name>
```
- Delete specific secret
```console
cargo run -- sec delete --name <secret_name>
```
- Describe specific secret
```console
cargo run -- sec describe --name <secret_name>
```
- Create specific secret
```console
cargo run -- sec create --name <secret_name> --secret <secret_value>
```

### Parameter Store
- List all the parameters
```console
cargo run -- par list
```
- Get specific par value
```console
cargo run -- par get --name <parameter_name>
```
- Delete specific parameter
```console
cargo run -- par delete --name <parameter_name>
```
- Create specific parameter
```console
cargo run -- par create --name <parameter_name> --value <parameter_value>
```
- Create a bulk of parameters
```console
cargo run -- par apply --path <path_to_parameter_spec_file>
```

### Parameter Store Spec Format
For the `par apply` sub-subcommand, the format of the spec file is shown as follow. The spec is in `yaml` format and each parameter entry’s name and value are separated by `:` , a colon symbol:
```yaml
parameters:
  - /secpar/TEST:TEST_VALUE
  - /secpar/qa/SASL_USERNAME:USERNAME
```