aws-sync  

Key Features • Installation • How To Use • Contribute • Package

Key Features

• Python package which easily syncs specifc or all secrets between multiple AWS accounts.
• In destination account, missing secrets are automatically created and existing secrets are updated in-place.
• Supports filtering to replicate specific pattern matching secrets. Defaults to replicate all secrets.
• Supports using custom KMS Encryption key. Defaults to default AWS secrets manager encryption key.

Installation

Install package use the package manager pip.

python2

pip install aws-sync

OR

python -m pip install aws-sync

python3

pip3 install aws-sync

OR

python3 -m pip install aws-sync

Facing an issue? Check the Issues section or open a new issue.

How To Use

python2 run.py

python3 run.py

Facing an issue? Check the Issues section or open a new issue.

Contributing

Pull requests are welcome. For major changes, please open an issue first to discuss what you would like to change/fix.

Package

How the code works:

- Let's say accountA is source account and accountB is destination account.
- If no environment filter is provided by user, then defaults to replicate all secrets.
- If no Encryption KMS Key ARN is provided by user, then defaults to use the AWS secrets manager default encryption key.
- For secret in accountA, if it is a new secret, then creates a new secret in accountB.
- If secret exists in accountB, then update it's value.

package PyPi project: aws-sync

License

MIT