org.apache.hadoop.hive.ql.secrets

Class AWSSecretsManagerSecretSource

java.lang.Object

org.apache.hadoop.hive.ql.secrets.AWSSecretsManagerSecretSource

All Implemented Interfaces:

Closeable, AutoCloseable, SecretSource

public class AWSSecretsManagerSecretSource
extends Object
implements SecretSource

Implementation of SecretSource which loads secrets from AWS Secrets Manager. The format of the uri is "aws-sm:///{key-name-or-arn}" It uses aws secrets cache sdk to fetch and refresh the secret, the environment must be setup so that the default client can load the secret else it will fail. It expects the secret fetched to be a json string with "password" as the key for password, this is default for redshift, rds or external database configs. It does not make use of any other fields.

Constructor Summary

Constructors

Constructor and Description
AWSSecretsManagerSecretSource()

Method Summary

Modifier and Type	Method and Description
void	close() Clean the resources in the class.
String	getSecret(URI uri) This load the secret from aws-secrets manager.
String	getURIScheme() The scheme string which this implementation will handle.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

AWSSecretsManagerSecretSource

public AWSSecretsManagerSecretSource()

Method Detail

getURIScheme

public String getURIScheme()

Description copied from interface: SecretSource

The scheme string which this implementation will handle.

Specified by:

getURIScheme in interface SecretSource

Returns:

Fixed string aws-sm.

getSecret

public String getSecret(URI uri)
                 throws IOException

This load the secret from aws-secrets manager.

Specified by:

getSecret in interface SecretSource

Parameters:

uri - The uri should be of format: aws-sm:///{key-arn-or-name}

Returns:

The secret fetched from AWS.

Throws:

IOException

close

public void close()

Clean the resources in the class.

Specified by:

close in interface Closeable

Specified by:

close in interface AutoCloseable