(PowerShell) AWS Secrets Manager - Get Secret Value

See more AWS Secrets Manager Examples

Retrieves the contents of the encrypted fields SecretString or SecretBinary from the specified version of a secret, whichever contains content.

For more information, see https://docs.aws.amazon.com/secretsmanager/latest/apireference/API_GetSecretValue.html

Chilkat .NET Downloads Chilkat .NET Assemblies

Add-Type -Path "C:\chilkat\ChilkatDotNet47-9.5.0-x64\ChilkatDotNet47.dll"

# This example requires the Chilkat API to have been previously unlocked.
# See Global Unlock Sample for sample code.

# Sends the following sample request.
# Note: Chilkat will automatically add Content-Length, X-Amz-Date, Accept-Encoding, and Authorization

# POST / HTTP/1.1
# Host: secretsmanager.region.domain
# Accept-Encoding: identity
# X-Amz-Target: secretsmanager.GetSecretValue
# Content-Type: application/x-amz-json-1.1
# X-Amz-Date: <date>
# Authorization: AWS4-HMAC-SHA256 Credential=<credentials>,SignedHeaders=<headers>, Signature=<signature>
# Content-Length: <payload-size-bytes>
# 
# {
#   "SecretId": "MyTestDatabaseSecret",
# }

$rest = New-Object Chilkat.Rest

# Connect to the Amazon AWS REST server.
# such as https://secretsmanager.us-west-2.amazonaws.com/
$bTls = $true
$port = 443
$bAutoReconnect = $true
$success = $rest.Connect("secretsmanager.us-west-2.amazonaws.com",$port,$bTls,$bAutoReconnect)

# Provide AWS credentials for the REST call.
$authAws = New-Object Chilkat.AuthAws
$authAws.AccessKey = "AWS_ACCESS_KEY"
$authAws.SecretKey = "AWS_SECRET_KEY"
# the region should match our URL above..
$authAws.Region = "us-west-2"
$authAws.ServiceName = "secretsmanager"

$rest.SetAuthAws($authAws)

# Use this online tool to generate code from sample JSON:
# Generate Code to Create JSON

$json = New-Object Chilkat.JsonObject

$json.UpdateString("SecretId","MyTestDatabaseSecret2")

$rest.AddHeader("Content-Type","application/x-amz-json-1.1")
$rest.AddHeader("X-Amz-Target","secretsmanager.GetSecretValue")

$sbRequestBody = New-Object Chilkat.StringBuilder
$json.EmitSb($sbRequestBody)
$sbResponseBody = New-Object Chilkat.StringBuilder
$success = $rest.FullRequestSb("POST","/",$sbRequestBody,$sbResponseBody)
if ($success -ne $true) {
    $($rest.LastErrorText)
    exit
}

$respStatusCode = $rest.ResponseStatusCode
$("response status code = " + $respStatusCode)

$jResp = New-Object Chilkat.JsonObject
$jResp.EmitCompact = $false
$jResp.LoadSb($sbResponseBody)

if ($respStatusCode -ge 400) {
    $("Response Status Code = " + $respStatusCode)
    $("Response Header:")
    $($rest.ResponseHeader)
    $("Response Body:")
    $($jResp.Emit())
    exit
}

$("Response Body:")
$($jResp.Emit())

# Sample response body:

# {
#   "ARN":"arn:aws:secretsmanager:us-west-2:123456789012:secret:MyTestDatabaseSecret-a1b2c3",
#   "CreatedDate":1.523477145713E9,
#   "Name":"MyTestDatabaseSecret",
#   "SecretString":"{\n  \"username\":\"david\",\n  \"password\":\"BnQw&XDWgaEeT9XGTT29\"\n}\n",
#   "VersionId":"EXAMPLE1-90ab-cdef-fedc-ba987SECRET1"
# }

# Use this online tool to generate parsing code from sample JSON: 
# Generate Parsing Code from JSON

$ARN = $jResp.StringOf("ARN")
$CreatedDate = $jResp.StringOf("CreatedDate")
$Name = $jResp.StringOf("Name")
$SecretString = $jResp.StringOf("SecretString")
$VersionId = $jResp.StringOf("VersionId")