module

Krikri::AwsSecretLookup

Native amazon.aws.aws_secret lookup (Secrets Manager GetSecretValue) - the controller-side counterpart of the signed-Query-API amazon.aws module cluster in PluginHelpers (those run as separate plugin binaries, so the main executable cannot require them; this helper carries the same credential/region contract itself: the AWS_* environment variables and the lookup's own region/access_key/secret_key/ session_token/endpoint_url options, without the boto profile machinery).

Semantics mirror the collection plugin's own run()/get_secret_value (amazon.aws 10.x, GPL, read for parity): one GetSecretValue per term, only truthy values appended, the on_missing/on_denied/on_deleted policies, bypath listing via ListSecrets, the nested dotted-key walk and join concatenation. Errors raise Error with the plugin's own message text (no wrapper prefix) - the dispatchers add the generic "The lookup plugin '<name>' failed: " shape around it.

Class methods

run(terms : Array(String), options : Hash(String, String), warning_sink : Proc(String, Nil) | Nil = nil) : Array(JSON::Any)

Runs the lookup over terms (secret names, possibly nested dotted paths), returning the plugin's result list. Warnings (on_missing/ on_denied/on_deleted = "warn") travel through the optional block.

Source
transport=(proc : Proc(String, String, Tuple(Int32, String)) | Nil) : Nil
Source
transport?
Source

Nested types