Secrets manager issues in Spring boot 2.4

From spring-cloud-aws created by jojijohn: spring-cloud/spring-cloud-aws#781

Type: Bug

Component: Secrets Manager

Describe the bug Spring boot 2.4.3 Spring Cloud AWS: 2.3.1

I am facing a couple of issues with Spring Cloud AWS integration for Secrets Manager and Parameter Store. I am planning to store my config in Parameter Store and the secrets in Secrets Manager

1. Even though I have a bootstrap.yml under src/main/resources; it is not being read on startup. I had to move the configs to application.yml to make it work.
2. I put the secrets as plain text in /secret/epdcs/my-app , but that didn’t work. Does only key/value pairs work?
3. When I import "aws-secretsmanager:", the app wouldn’t even start, so I now have to specify the secret keys - "aws-secretsmanager:/secret/epdcs/application;/secret/epdcs/my-app"
4. To connect from my local machine, my understanding is that the cloud.aws.credentials.profile-name and cloud.aws.region.static will be used - but that didn’t work and I had to set the environment variables AWS_PROFILE and AWS_REGION

Sample

This is what I have in my application.yml:

spring:
  application:
    name: my-app
  config:
    import:
      - "aws-parameterstore:"
      - "aws-secretsmanager:/secret/epdcs/application;/secret/epdcs/my-app"
cloud:
  aws:
    stack:
      auto: false
    credentials:
      profile-name: dev
    region:
      static: us-east-1
aws:
  paramstore:
    prefix: /config/epdcs
    region: us-east-1
  secretsmanager:
    prefix: /secret/epdcs
    region: us-east-1

These are the spring-cloud dependencies I have in pom.xml

        <dependency>
            <groupId>io.awspring.cloud</groupId>
            <artifactId>spring-cloud-starter-aws-secrets-manager-config</artifactId>
        </dependency>
        <dependency>
            <groupId>io.awspring.cloud</groupId>
            <artifactId>spring-cloud-starter-aws-parameter-store-config</artifactId>
        </dependency>

and the BOM:

            <dependency>
                <groupId>io.awspring.cloud</groupId>
                <artifactId>spring-cloud-aws-dependencies</artifactId>
                <version>2.3.1</version>
                <type>pom</type>
                <scope>import</scope>
            </dependency>

[Blockost]

I found that defining a property aws.secretsmanager.region in your application.yml lets you define a region without having to add custom code.

All configurable properties can be found in io.awspring.cloud.secretsmanager.AwsSecretsManagerProperties (tested with spring-cloud-aws-secrets-manager-config v2.4.1)

[maciejwalkowiak]

@noshua You need to register custom client for secrets manager. Check this entry in docs https://docs.awspring.io/spring-cloud-aws/docs/3.0.0-SNAPSHOT/reference/html/index.html#customizing-secretsmanagerclient (it’s for 3.0 but same principles apply to 2.4.x)