Implement Secrets

build.gradle

@@ -111,6 +111,7 @@ dependencies {
     implementation 'software.amazon.awssdk:acmpca'
     implementation 'software.amazon.awssdk:dynamodb'
     implementation 'software.amazon.awssdk:neptune'
+    implementation 'software.amazon.awssdk:secretsmanager'
     implementation 'org.json:json:20180813'
 
     gyroDoclet "gyro:gyro-doclet:0.99.0-SNAPSHOT"

examples/secretsmanager/secret.gyro

@@ -0,0 +1,15 @@
+aws::secret secret
+    name: "secret-example"
+    description: "secret-example-description-updated"
+    force-delete-without-recovery: true
+    kms-key: $(aws::kms-key secret-kms-key-example)
+    secret-string: "secret-string-example"
+    tags: {
+        "secret-example-tag" : "secret-example-tag-value"
+    }
+end
+
+aws::kms-key secret-kms-key-example
+    aliases: ["alias/secret1", "alias/secret2"]
+    description: "secret kms key example description"
+end

src/main/java/gyro/aws/secretsmanager/SecretFinder.java

@@ -0,0 +1,82 @@
+/*
+ * Copyright 2020, Perfect Sense, Inc.
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+package gyro.aws.secretsmanager;
+
+import java.util.ArrayList;
+import java.util.List;
+import java.util.Map;
+import java.util.stream.Collectors;
+
+import gyro.aws.AwsFinder;
+import gyro.core.Type;
+import software.amazon.awssdk.services.secretsmanager.SecretsManagerClient;
+import software.amazon.awssdk.services.secretsmanager.model.DescribeSecretResponse;
+import software.amazon.awssdk.services.secretsmanager.model.ResourceNotFoundException;
+import software.amazon.awssdk.services.secretsmanager.model.SecretListEntry;
+
+/**
+ * Query secrets manager.
+ *
+ * Example
+ * -------
+ *
+ * .. code-block:: gyro
+ *
+ * secrets: $(external-query aws::secret { arn: 'secret-arn-example'})
+ */
+@Type("secret")
+public class SecretFinder extends AwsFinder<SecretsManagerClient, DescribeSecretResponse, SecretResource> {
+
+    @Override
+    protected List<DescribeSecretResponse> findAllAws(SecretsManagerClient client) {
+        return client.listSecretsPaginator().stream().flatMap(list ->
+            list.secretList().stream().map(this::convertEntry)).collect(Collectors.toList());
+    }
+
+    @Override
+    protected List<DescribeSecretResponse> findAws(
+        SecretsManagerClient client, Map<String, String> filters) {
+        List<DescribeSecretResponse> list = new ArrayList<>();
+        try {
+
+            list.add(client.describeSecret(r -> r.secretId(filters.get("arn"))));
+        } catch (ResourceNotFoundException ex) {
+            // No resource found
+        }
+
+        return list;
+    }
+
+    private DescribeSecretResponse convertEntry(SecretListEntry entry) {
+        return DescribeSecretResponse.builder()
+            .arn(entry.arn())
+            .deletedDate(entry.deletedDate())
+            .description(entry.description())
+            .kmsKeyId(entry.kmsKeyId())
+            .lastAccessedDate(entry.lastAccessedDate())
+            .lastChangedDate(entry.lastChangedDate())
+            .lastRotatedDate(entry.lastRotatedDate())
+            .name(entry.name())
+            .owningService(entry.owningService())
+            .rotationEnabled(entry.rotationEnabled())
+            .rotationLambdaARN(entry.rotationLambdaARN())
+            .rotationRules(entry.rotationRules())
+            .tags(entry.tags())
+            .versionIdsToStages(entry.secretVersionsToStages())
+            .build();
+    }
+}