heroku_config_to_sescrets_manager.py

# Script to get all config vars in a Heroku app and transfer to a new AWS Secrets Manager
# To get Heroku Auth Token:
# $ heroku auth:token
# Usage:
# python to_secrets.py

import boto3
import heroku3
import json

heroku_token = input("Enter Heroku Auth Token: ")
heroku_conn =  heroku3.from_key(heroku_token)
heroku_app = input("Enter Heroku App: ")
secrets_manager_client = boto3.client("secretsmanager")


def get_heroku_app():
    return heroku_conn.apps()[heroku_app]


def create_new_secret():
    secret_name = input("Enter the name of the new secret: ")
    app = get_heroku_app()
    config = app.config().__dict__
    exported_config = dict()

    for k,v in config["_ConfigVars__data"].items():
        if k.startswith("HEROKU") is False:
            exported_config[k] = v

    response = secrets_manager_client.create_secret(
        Name = secret_name,
        SecretString = "{}".format(json.dumps(exported_config))
    )

    print(response)

create_new_secret()