The aws_secrets_manager store enables Spice to read secrets from AWS Secrets Manager by specifying the secret’s name with a selector.
The store reads keys from the secret named in the selector. In the above example my_secret_name must be defined in AWS Secrets Manager, and any keys referenced using ${aws:my_key} will look for a key my_key within my_secret_name.
A complete spicepod definition with a dataset that uses a secret from AWS Secrets Manager.
To use AWS Secrets Manager, an AWS account and a user in IAM Identity Center with the secretsmanager:GetSecretValue permission are required. Read Authentication and access control for AWS Secrets Manager for details.
Use the AWS CLI to configure AWS access:
Check configuration with:
