swinton / aws-lambda-playground

aws-lambda-playground's Issues

Replace KMS with Secrets Manager

Rather than encrypting an environment variable and decrypting with KMS, i.e. here:

aws-lambda-playground/index.js

Lines 8 to 9 in 790759a

	// Decrypt token
	const token = await decrypt(process.env.ENCRYPTED_GITHUB_TOKEN, { trim: true });

aws-lambda-playground/lib/decrypt.js

Lines 6 to 13 in 790759a

	try {
	const req = { CiphertextBlob: Buffer.from(encrypted, 'base64'), KeyId: process.env.KMS_KEY_ID };
	const data = await kms.decrypt(req).promise();
	const plain = data.Plaintext.toString('ascii');
	return options.trim ? plain.trim() : plain;
	} catch (err) {
	console.log('Decrypt error:', err);
	throw err;

We might be able to just use SecretsManager directly:

https://docs.aws.amazon.com/AWSJavaScriptSDK/latest/AWS/SecretsManager.html#getSecretValue-property