(PHP Extension) AWS Secrets Manager - Get Secret Value

See more AWS Secrets Manager Examples

Retrieves the contents of the encrypted fields SecretString or SecretBinary from the specified version of a secret, whichever contains content.

For more information, see https://docs.aws.amazon.com/secretsmanager/latest/apireference/API_GetSecretValue.html

Chilkat PHP Downloads PHP Extension for Windows, Linux, MacOS, Alpine Linux, Solaris

<?php

// The version number (9_5_0) should match version of the Chilkat extension used, omitting the micro-version number.
// For example, if using Chilkat v9.5.0.48, then include as shown here:
include("chilkat_9_5_0.php");

// This example requires the Chilkat API to have been previously unlocked.
// See Global Unlock Sample for sample code.

// Sends the following sample request.
// Note: Chilkat will automatically add Content-Length, X-Amz-Date, Accept-Encoding, and Authorization

// POST / HTTP/1.1
// Host: secretsmanager.region.domain
// Accept-Encoding: identity
// X-Amz-Target: secretsmanager.GetSecretValue
// Content-Type: application/x-amz-json-1.1
// X-Amz-Date: <date>
// Authorization: AWS4-HMAC-SHA256 Credential=<credentials>,SignedHeaders=<headers>, Signature=<signature>
// Content-Length: <payload-size-bytes>
// 
// {
//   "SecretId": "MyTestDatabaseSecret",
// }

$rest = new CkRest();

// Connect to the Amazon AWS REST server.
// such as https://secretsmanager.us-west-2.amazonaws.com/
$bTls = true;
$port = 443;
$bAutoReconnect = true;
$success = $rest->Connect('secretsmanager.us-west-2.amazonaws.com',$port,$bTls,$bAutoReconnect);

// Provide AWS credentials for the REST call.
$authAws = new CkAuthAws();
$authAws->put_AccessKey('AWS_ACCESS_KEY');
$authAws->put_SecretKey('AWS_SECRET_KEY');
// the region should match our URL above..
$authAws->put_Region('us-west-2');
$authAws->put_ServiceName('secretsmanager');

$rest->SetAuthAws($authAws);

// Use this online tool to generate code from sample JSON:
// Generate Code to Create JSON

$json = new CkJsonObject();

$json->UpdateString('SecretId','MyTestDatabaseSecret2');

$rest->AddHeader('Content-Type','application/x-amz-json-1.1');
$rest->AddHeader('X-Amz-Target','secretsmanager.GetSecretValue');

$sbRequestBody = new CkStringBuilder();
$json->EmitSb($sbRequestBody);
$sbResponseBody = new CkStringBuilder();
$success = $rest->FullRequestSb('POST','/',$sbRequestBody,$sbResponseBody);
if ($success != true) {
    print $rest->lastErrorText() . "\n";
    exit;
}

$respStatusCode = $rest->get_ResponseStatusCode();
print 'response status code = ' . $respStatusCode . "\n";

$jResp = new CkJsonObject();
$jResp->put_EmitCompact(false);
$jResp->LoadSb($sbResponseBody);

if ($respStatusCode >= 400) {
    print 'Response Status Code = ' . $respStatusCode . "\n";
    print 'Response Header:' . "\n";
    print $rest->responseHeader() . "\n";
    print 'Response Body:' . "\n";
    print $jResp->emit() . "\n";
    exit;
}

print 'Response Body:' . "\n";
print $jResp->emit() . "\n";

// Sample response body:

// {
//   "ARN":"arn:aws:secretsmanager:us-west-2:123456789012:secret:MyTestDatabaseSecret-a1b2c3",
//   "CreatedDate":1.523477145713E9,
//   "Name":"MyTestDatabaseSecret",
//   "SecretString":"{\n  \"username\":\"david\",\n  \"password\":\"BnQw&XDWgaEeT9XGTT29\"\n}\n",
//   "VersionId":"EXAMPLE1-90ab-cdef-fedc-ba987SECRET1"
// }

// Use this online tool to generate parsing code from sample JSON: 
// Generate Parsing Code from JSON

$ARN = $jResp->stringOf('ARN');
$CreatedDate = $jResp->stringOf('CreatedDate');
$Name = $jResp->stringOf('Name');
$SecretString = $jResp->stringOf('SecretString');
$VersionId = $jResp->stringOf('VersionId');

?>