create_aws_secrets_manager_config

Use this command to create an AWS secrets configuration for your authentication scenario. You can create a configuration using security credentials, IAM role, or IAM instance profile.

This API is available in Guardium V11.3 and later.

REST API syntax

This API is available as a REST service with the POST method. Call this API as follows: 
POST https://[Guardium hostname or IP address]:8443/restAPI/aws_secrets_manager

GuardAPI syntax

create_aws_secrets_manager_config parameter=value

Parameters

Parameter Value type Description
access_key_id String  
auth_type String Required. Valid values:
  • Security-Credentials
  • IAM-Role
  • IAM-Instance-Profile
name String Required.
role_arn String The Role Amazon Resource Name (ARN)
secret_access_key String  
secret_key_password String The Secret key label for the password
secret_key_username String The Secret key label for the username

Examples

Create an AWS secrets configuration using security credentials

grdapi create_aws_secrets_manager_config name="GRDAPI Security-Credentials" auth_type="Security-Credentials" access_key_id="ABCD123" secret_access_key="XYZ321" secret_key_password="password" secret_key_username="username"

Create an AWS secrets configuration using IAM role

grdapi create_aws_secrets_manager_config name="GRDAPI IAM-Role" auth_type="IAM-Role" access_key_id="ABCD123" secret_access_key="XYZ321" role_arn="arn:aws:iam::123456789:role/Name_AWS_Secret_ManagerReadWrite_role" secret_key_password="password" secret_key_username="username"
Create an AWS secrets configuration using IAM instance profile
grdapi create_aws_secrets_manager_config name="GRDAPI IAM-Instance-Profile1"  auth_type="IAM-Instance-Profile1" secret_key_password="password" secret_key_username="username"