Key Features • Installation • How To Use • Contribute • Package
- Python package which easily syncs specifc or all secrets between multiple AWS accounts.
- In destination account, missing secrets are automatically created and existing secrets are updated in-place.
- Supports filtering to replicate specific pattern matching secrets. Defaults to replicate all secrets.
- Supports using custom KMS Encryption key. Defaults to default AWS secrets manager encryption key.
Install package use the package manager pip.
python2
pip install aws-sync
OR
python -m pip install aws-sync
python3
pip3 install aws-sync
OR
python3 -m pip install aws-sync
Facing an issue? Check the Issues section or open a new issue.
python2 run.py
python3 run.py
Facing an issue? Check the Issues section or open a new issue.
Pull requests are welcome. For major changes, please open an issue first to discuss what you would like to change/fix.
How the code works:
- Let's say accountA is source account and accountB is destination account.
- If no environment filter is provided by user, then defaults to replicate all secrets.
- If no Encryption KMS Key ARN is provided by user, then defaults to use the AWS secrets manager default encryption key.
- For secret in accountA, if it is a new secret, then creates a new secret in accountB.
- If secret exists in accountB, then update it's value.
package PyPi project: aws-sync