AWS secret import source

Use the AWS source to import secret data from AWS Secret Manager into your Vault instance.

Argument reference

Refer to the HCL syntax for arguments common to all source types.

credentials_profile (string: "") - The name of the profile in your credentials file to authenticate with. If not set, Vault uses the default credential provider mechanisms.

Define and configure the my-aws-source-1 AWS source:

source_aws {
  name = "my-aws-source-1"
}

To use AWS import, you must grant the associated AWS identity permissions to read secrets:

"secretsmanager:DescribeSecret",
"secretsmanager:GetSecretValue",
"secretsmanager:BatchGetSecretValue",
"secretsmanager:ListSecrets",