ActionHero Secrets-Loading Boot Routine

boot.js

const { loadSecrets } = require('./src/lib/secrets');

exports.default = async function BOOT() {
  await loadSecrets('path/to/my/secret');
};

initializer.js

const { secrets } = require('../lib/secrets');

// secrets is a singleton, a constant object that will be filled by the boot sequence with the secret value.
// So if your secret contained { DB_PASS: 'xyz' } you could access this as secrets.DB_PASS

secrets.js

const AWS = require('aws-sdk');

const secretsmanager = new AWS.SecretsManager({ region: 'us-east-1' });

const secrets = {};

async function loadSecrets(SecretId) {
  const value = await secretsmanager.getSecretValue({ SecretId }).promise();
  Object.assign(secrets, JSON.parse(value.SecretString));
}

module.exports = {
  secrets,
  loadSecrets,
};