AWS Secrets Manager CLI wrapper

asm.sh

#!/usr/bin/env bash

AWS_REGION=<region>
AWS_PROFILE=<profile>

export AWS_REGION
export AWS_PROFILE

SECRET_PATH="$1"
SECRET_KEY=$2

if [[ "${SECRET_PATH}" =~ /$ ]]; then
    aws secretsmanager list-secrets \
        | jq ".[][].Name | match(\"${SECRET_PATH}.*\"; \"g\") | .string"
    exit 0
fi

if [[ ! -z ${SECRET_KEY} ]]; then
    aws secretsmanager get-secret-value \
        --secret-id "${SECRET_PATH}" \
        | jq ".SecretString | fromjson" \
        | jq -r ".${SECRET_KEY}"
    exit 0
fi

aws secretsmanager get-secret-value \
    --secret-id "${SECRET_PATH}" \
    | jq ".SecretString | fromjson"