diff --git a/DevOps/AWS/AWS_Lambda/Code_examples/Fetch_from_Secrets_Manager.md b/DevOps/AWS/AWS_Lambda/Code_examples/Fetch_from_Secrets_Manager.md index 2914009..ecafe83 100644 --- a/DevOps/AWS/AWS_Lambda/Code_examples/Fetch_from_Secrets_Manager.md +++ b/DevOps/AWS/AWS_Lambda/Code_examples/Fetch_from_Secrets_Manager.md @@ -32,8 +32,18 @@ type SomeCredentials = { }; ``` -// TODO: Add example of deferring to local env var - ## Python -// TODO: Add Python example +```py +import json +import boto3 + +def get_secret(): + python_env = os.environ.get("PYTHON_ENV", "local") + """In production, source creds from SecretsManager""" + if python_env == "production": + secrets_manager = boto3.client("secretsmanager") + response = secrets_manager.get_secret_value(SecretId=os.environ["SECRET_ARN"]) + secret_values = json.loads(response["SecretString"]) + return secret_values["GOOGLE_CREDS"] +```