Hi, I'm Ask INFA!
What would you like to know?
ASK INFAPreview
Please to access Ask INFA.

Table of Contents

Search

  1. Preface
  2. Introducing Administrator
  3. Organizations
  4. Metering
  5. General and security settings
  6. Permissions
  7. Schedules
  8. Bundle management
  9. Event monitoring
  10. Troubleshooting security
  11. Licenses

Organization Administration

Organization Administration

AWS Secrets Manager connection properties

AWS Secrets Manager connection properties

If you select AWS Secrets Manager as your secrets manager, configure connection properties such as the authentication type and region. The connection properties vary based on the authentication type.

Role-based authentication

Configure the following properties when you access Secrets Manager using role-based authentication:
Property
Description
Type
Secrets manager type. Choose
AWS Secrets Manager
.
Authentication Type
Authentication type that the Secure Agent should use to access Secrets Manager. For role-based authentication, choose
Role Based Access
.
IAM Role
Amazon Resource Name (ARN) of the IAM role that the Secure Agent should use to access secrets. Typically, the format is:
arn:aws:iam::<account>:role/<role name with path>
The IAM role must be configured as described in IAM role configuration for AWS Secrets Manager. The AWS resource that hosts the Secure Agent needs to have access to this role.
External ID
External ID required to assume the IAM role.
Required for serverless agents.
Region
Region code for the region where your Secrets Manager secrets are hosted, for example,
us-east-2
.
Don't enter a full region name like
US East (Ohio)
.
STS Endpoint
STS endpoint URL if you are using a regional or manually configured endpoint.
For example, if your service endpoint is US West (N. California), enter the following value:
https://secretsmanager.us-west-1.amazonaws.com
If not specified, the global endpoint
https://sts.amazonaws.com
is used.
STS Endpoint Region
Region in which your service endpoint is located, for example,
us-west-1
.
Enter a value for this property if your STS endpoint region differs from your Secrets Manager region. If not specified, the STS endpoint region is assumed to be the same as the Secrets Manager region.

Instance profile authentication

Configure the following properties when you access Secrets Manager using instance profile authentication:
Property
Description
Type
Secrets manager type. Choose
AWS Secrets Manager
.
Authentication Type
Authentication type that the Secure Agent should use to access Secrets Manager. For instance profile authentication, choose
Instance Profile
.
Region
Region code for the region where your Secrets Manager secrets are hosted, for example,
us-east-2
.
Don't enter a full region name like
US East (Ohio)
.

Access key authentication

Configure the following properties when you access Secrets Manager using an access key:
Property
Description
Type
Secrets manager type. Choose
AWS Secrets Manager
.
Authentication Type
Authentication type that the Secure Agent should use to access Secrets Manager. For access key authentication, choose
Access Key
.
Access Key ID
AWS access key ID that the Secure Agent should use to access secrets, for example,
AKIAIOSFODNN7EXAMPLE
.
The access key ID must be associated with an IAM role that is assigned an access policy with the GetSecretValue and ListSecrets permissions.
You need to enter both the access key ID and the secret access key.
Secret Access Key
AWS secret access key that the Secure Agent should use to access secrets, for example
wJalrXUtnFEMI/K7MDENG/bPxRfiCYEXAMPLEKEY
.
You need to enter both the access key ID and the secret access key.
Region
Region code for the region where your Secrets Manager secrets are hosted, for example,
us-east-2
.
Don't enter a full region name like
US East (Ohio)
.
For more information about AWS Secrets Manager properties, see the AWS documentation.

0 COMMENTS

We’d like to hear from you!