ds-resolve-aws

Documentation

Overview

Command ds-resolve-aws is the AWS Secrets Manager resolver plugin (§12, §37.4). It reads the secret through the `aws` CLI, which must be installed and configured, hashes the value in memory, and returns existence and the hash. The value never leaves this process; the host rejects any reply that carries more. The address is the secret id or ARN.