com.quorum.tessera.key.vault.aws.AWSKeyVaultService Maven / Gradle / Ivy

Go to download
package com.quorum.tessera.key.vault.aws;

import com.quorum.tessera.key.vault.KeyVaultService;
import com.quorum.tessera.key.vault.SetSecretResponse;
import com.quorum.tessera.key.vault.VaultSecretNotFoundException;
import java.util.Map;
import java.util.Objects;
import software.amazon.awssdk.services.secretsmanager.SecretsManagerClient;
import software.amazon.awssdk.services.secretsmanager.model.*;

public class AWSKeyVaultService implements KeyVaultService {

  protected static final String SECRET_NAME_KEY = "secretName";

  protected static final String SECRET_KEY = "secret";

  private final SecretsManagerClient secretsManager;

  AWSKeyVaultService(SecretsManagerClient secretsManager) {
    this.secretsManager = Objects.requireNonNull(secretsManager);
  }

  @Override
  public String getSecret(Map getSecretData) {
    final String secretName = getSecretData.get(SECRET_NAME_KEY);

    GetSecretValueRequest getSecretValueRequest =
        GetSecretValueRequest.builder().secretId(secretName).build();
    GetSecretValueResponse secretValueResponse;

    try {
      secretValueResponse = secretsManager.getSecretValue(getSecretValueRequest);
    } catch (ResourceNotFoundException e) {
      throw new VaultSecretNotFoundException(
          "The requested secret '" + secretName + "' was not found in AWS Secrets Manager");
    } catch (InvalidRequestException | InvalidParameterException e) {
      throw new AWSSecretsManagerException(e);
    }

    if (secretValueResponse != null && secretValueResponse.secretString() != null) {
      return secretValueResponse.secretString();
    }

    throw new VaultSecretNotFoundException(
        "The requested secret '" + secretName + "' was not found in AWS Secrets Manager");
  }

  @Override
  public SetSecretResponse setSecret(Map setSecretData) {
    final String secretName = setSecretData.get(SECRET_NAME_KEY);
    final String secret = setSecretData.get(SECRET_KEY);

    CreateSecretRequest createSecretRequest =
        CreateSecretRequest.builder().name(secretName).secretString(secret).build();

    CreateSecretResponse r = secretsManager.createSecret(createSecretRequest);

    return new SetSecretResponse(Map.of("version", r.versionId()));
  }
}