(Tcl) AWS Secrets Manager - Create Secret

See more AWS Secrets Manager Examples

Creates a new secret. A secret is a set of credentials, such as a user name and password, that you store in an encrypted form in Secrets Manager.

For more information, see https://docs.aws.amazon.com/secretsmanager/latest/apireference/API_CreateSecret.html

Chilkat Tcl Extension Downloads Chilkat Tcl Extension Downloads

load ./chilkat.dll

# This example requires the Chilkat API to have been previously unlocked.
# See Global Unlock Sample for sample code.

# Sends the following sample request.
# Note: Chilkat will automatically add Content-Length, X-Amz-Date, Accept-Encoding, and Authorization

# POST / HTTP/1.1
# Host: secretsmanager.region.domain
# Accept-Encoding: identity
# X-Amz-Target: secretsmanager.CreateSecret
# Content-Type: application/x-amz-json-1.1
# X-Amz-Date: <date>
# Authorization: AWS4-HMAC-SHA256 Credential=<credentials>,SignedHeaders=<headers>, Signature=<signature>
# Content-Length: <payload-size-bytes>
# 
# {
#   "Name": "MyTestDatabaseSecret2",
#   "Description": "My test database secret created with the CLI",
#   "SecretString": "{\"username\":\"david\",\"password\":\"BnQw!XDWgaEeT9XGTT29\"}", "ClientRequestToken": "EXAMPLE1-90ab-cdef-fedc-ba987SECRET1"
# }

set rest [new_CkRest]

# Connect to the Amazon AWS REST server.
# such as https://secretsmanager.us-west-2.amazonaws.com/
set bTls 1
set port 443
set bAutoReconnect 1
set success [CkRest_Connect $rest "secretsmanager.us-west-2.amazonaws.com" $port $bTls $bAutoReconnect]

# Provide AWS credentials for the REST call.
set authAws [new_CkAuthAws]

CkAuthAws_put_AccessKey $authAws "AWS_ACCESS_KEY"
CkAuthAws_put_SecretKey $authAws "AWS_SECRET_KEY"
# the region should match our URL above..
CkAuthAws_put_Region $authAws "us-west-2"
CkAuthAws_put_ServiceName $authAws "secretsmanager"

CkRest_SetAuthAws $rest $authAws

# Use this online tool to generate code from sample JSON:
# Generate Code to Create JSON

set json [new_CkJsonObject]

CkJsonObject_UpdateString $json "Name" "MyTestDatabaseSecret2"
CkJsonObject_UpdateString $json "Description" "My test database secret created with the CLI"
CkJsonObject_UpdateString $json "SecretString" "{\"username\":\"david\",\"password\":\"BnQw!XDWgaEeT9XGTT29\"}"
CkJsonObject_UpdateString $json "ClientRequestToken" "EXAMPLE1-90ab-cdef-fedc-ba987SECRET1"

CkRest_AddHeader $rest "Content-Type" "application/x-amz-json-1.1"
CkRest_AddHeader $rest "X-Amz-Target" "secretsmanager.CreateSecret"

set sbRequestBody [new_CkStringBuilder]

CkJsonObject_EmitSb $json $sbRequestBody
set sbResponseBody [new_CkStringBuilder]

set success [CkRest_FullRequestSb $rest "POST" "/" $sbRequestBody $sbResponseBody]
if {$success != 1} then {
    puts [CkRest_lastErrorText $rest]
    delete_CkRest $rest
    delete_CkAuthAws $authAws
    delete_CkJsonObject $json
    delete_CkStringBuilder $sbRequestBody
    delete_CkStringBuilder $sbResponseBody
    exit
}

set respStatusCode [CkRest_get_ResponseStatusCode $rest]
puts "response status code = $respStatusCode"

set jResp [new_CkJsonObject]

CkJsonObject_put_EmitCompact $jResp 0
CkJsonObject_LoadSb $jResp $sbResponseBody

if {$respStatusCode >= 400} then {
    puts "Response Status Code = $respStatusCode"
    puts "Response Header:"
    puts [CkRest_responseHeader $rest]
    puts "Response Body:"
    puts [CkJsonObject_emit $jResp]
    delete_CkRest $rest
    delete_CkAuthAws $authAws
    delete_CkJsonObject $json
    delete_CkStringBuilder $sbRequestBody
    delete_CkStringBuilder $sbResponseBody
    delete_CkJsonObject $jResp
    exit
}

puts "Response Body:"
puts [CkJsonObject_emit $jResp]

# Sample response body:

# {
#   "ARN": "arn:aws:secretsmanager:us-west-2:954491834127:secret:MyTestDatabaseSecret2-F16Tps",
#   "Name": "MyTestDatabaseSecret2",
#   "VersionId": "EXAMPLE1-90ab-cdef-fedc-ba987SECRET1"
# }

# Use this online tool to generate parsing code from sample JSON: 
# Generate Parsing Code from JSON

set ARN [CkJsonObject_stringOf $jResp "ARN"]
set Name [CkJsonObject_stringOf $jResp "Name"]
set VersionId [CkJsonObject_stringOf $jResp "VersionId"]

delete_CkRest $rest
delete_CkAuthAws $authAws
delete_CkJsonObject $json
delete_CkStringBuilder $sbRequestBody
delete_CkStringBuilder $sbResponseBody
delete_CkJsonObject $jResp