Rust

AWS Secrets Manager - List Matching Secrets

See more Secrets Examples

List secrets in the AWS Secrets Manager matching one or more wildcarded names for app, service, domain, and username.

Note: This example requires Chilkat v10.1.0 or later.

Rust

// This example requires the Chilkat API to have been previously unlocked.
// See Global Unlock Sample for sample code.

// The bootstrap secret will contain the following information:

// AWS Region
// AWS Access Key
// AWS Secret Key

// See following examples for setting up a bootstrap secret in memory, 
// or in the local manager (Windows Credentials Manager or Apple Keychain)
// Setup Bootstrap Secret in Local Manager
// Setup Bootstrap Secret in Memory
let bootstrap = chilkat::Secrets::new();

// Set the location of the bootstrap secret.
// Can be "local_manager" or "memory", depending on how you setup the bootstrap secret.
// ---------------------------------------------------------------------------------------------
// If your operating system is NOT Windows or MacOS/iOS, then change "local_manager" to "memory"
// You can also, if desired, use "memory" on Windows and MacOS/iOS if your bootstrap secret was previously setup in memory.
// ---------------------------------------------------------------------------------------------
bootstrap.set_location("local_manager");

// Specify the bootstrap secret to be used.
let bs_id = chilkat::JsonObject::new();
let _ = bs_id.update_string("appName", "AWS");
let _ = bs_id.update_string("service", "Example");
let _ = bs_id.update_string("username", "Joe");

// ----------------------------------------------------
let secrets = chilkat::Secrets::new();

// Setup for the AWS Secrets Manager
secrets.set_location("aws_secrets_manager");
if secrets.set_bootstrap_secret(&bs_id, &bootstrap).is_err() {
    println!("{}", secrets.last_error_text());
    return;
}

// Set wildcarded or exact values for appName, service, domain, and username.
// Omit any members where anything is allowed to match, or alternatively specify "*" to match anything.
let json_match = chilkat::JsonObject::new();
let _ = json_match.update_string("appName", "Test*");
// The following lines can be omitted. Not specifying anything for service, domain, or username is the same as "*".
let _ = json_match.update_string("service", "*");
let _ = json_match.update_string("domain", "*");
let _ = json_match.update_string("username", "*");

let results = chilkat::JsonObject::new();
results.set_emit_compact(false);

if secrets.list_secrets(&json_match, &results).is_err() {
    println!("{}", secrets.last_error_text());
    return;
}

println!("{}", results.emit().unwrap_or_default());

// Sample output:

// {
//   "secrets": [
//     {
//       "appName": "Test",
//       "service": "Something",
//       "domain": "Xyz",
//       "username": "Abc",
//       "awsName": "Test/Something/Xyz/Abc"
//     },
//     {
//       "appName": "Test2",
//       "service": "Custom",
//       "domain": "Ocean",
//       "username": "Starfish",
//       "awsName": "Test2/Custom/Ocean/Starfish"
//     }
//   ]
// }

// ---------------------------------------------------------------------------------------
// Here's sample code for parsing the JSON list of secrets.

let mut i = 0;
let num_secrets = results.size_of_array("secrets");
while i < num_secrets {
    results.set_i(i);
    // Note: appName and domain are optional and may not exist in any given secret.
    let _ = results.string_of("secrets[i].appName").unwrap_or_default();
    let _ = results.string_of("secrets[i].service").unwrap_or_default();
    let _ = results.string_of("secrets[i].domain").unwrap_or_default();
    let _ = results.string_of("secrets[i].username").unwrap_or_default();
    // Information field for the raw AWS secret name.
    let _ = results.string_of("secrets[i].awsName").unwrap_or_default();
    i = i + 1;
}