Skip to main content

Set up AWS Secrets Manager

A minimal AWS Python Pulumi program

This example lives in the pulumi/examples repository. Check out just this directory to use it:

Get started with this example
git clone --filter=blob:none --sparse https://github.com/pulumi/examples pulumi-examples
git -C pulumi-examples sparse-checkout set aws-py-secrets-manager
cd pulumi-examples/aws-py-secrets-manager

A simple program that creates an AWS secret and a version under AWS Secrets Manager.

Prerequisites#

  1. Install Pulumi
  2. Configure AWS credentials
  3. Install Python

Deploying the example#

  1. Create a new stack:

    Terminal window
    pulumi stack init dev
  2. Set the AWS region to deploy into:

    Terminal window
    pulumi config set aws:region us-east-1
  3. Install dependencies:

    Terminal window
    python3 -m venv venv
    source venv/bin/activate
    pip install -r requirements.txt
  4. Run pulumi up to preview and deploy changes:

    Terminal window
    pulumi up
    Updating (dev)
    View Live: https://app.pulumi.com/acmecorp/aws-py-secrets-manager/dev/updates/1
    Type Name Status
    + pulumi:pulumi:Stack aws-py-secrets-manager-dev created
    + ├─ aws:secretsmanager:Secret secret_container created
    + └─ aws:secretsmanager:SecretVersion secret_version created
    Outputs:
    secret_id: "arn:aws:secretsmanager:us-east-1:xxxxxxxx:secret:secret_container-d07f0c4-N3OSrw"
    Resources: + 3 created
    Duration: 6s

Cleaning up#

Once you’re finished experimenting, destroy your stack and remove it to avoid incurring any additional cost:

Terminal window
pulumi destroy
pulumi stack rm

Related

The infrastructure as code platform for any cloud.