macOS Keychain environment variables

.zshrc

# If you use bash, this technique isn't really zsh specific. Adapt as needed.
source ~/keychain-env.sh

# AWS configuration example, after doing:
# $  keychain-env-add AWS_ACCESS_KEY_ID
#    and
# $  keychain-env-add AWS_SECRET_ACCESS_KEY

export AWS_ACCESS_KEY_ID=$(keychain-env-get AWS_ACCESS_KEY_ID);
export AWS_SECRET_ACCESS_KEY=$(keychain-env-get AWS_SECRET_ACCESS_KEY);

keychain-env.sh

### Functions for setting and getting environment variables from the macOS keychain ###
### Adapted from https://www.netmeister.org/blog/keychain-passwords.html ###

# Use: keychain-env-add SECRET_ENV_VAR
function keychain-env-add () {
    if [ -z "$1" ] ; then
        print "Missing environment variable name"
        return 0
    fi
        read -s "?Enter Value for ${1}: " secret
        # Note: if using bash, use `-p` to indicate a prompt string, rather than the leading `?`
    ( [ -n "$1" ] && [ -n "$secret" ] ) || return 1
    security add-generic-password -U -a ${USER} -D "environment variable" -s "${1}" -w "${secret}"
}

# Use: keychain-env-get SECRET_ENV_VAR
function keychain-env-get () {
    security find-generic-password -w -a ${USER} -D "environment variable" -s "${1}"
}

# Use: keychain-env-delete SECRET_ENV_VAR
function keychain-env-delete () {
    security delete-generic-password -a ${USER} -D "environment variable" -l "${1}" 1>/dev/null
}