Merge pull request #3 from movableink/mc/secrets

Add secret retrieval

lib/movable_ink/aws.rb

@@ -73,6 +73,10 @@ def route53
       @route53_client ||= Aws::Route53::Client.new(region: 'us-east-1')
     end
 
+    def ssm
+      @ssm_client ||= Aws::SSM::Client.new(region: 'us-east-1')
+    end
+
     def sns_slack_topic_arn
       run_with_backoff do
         sns.list_topics.topics.select {|topic| topic.topic_arn.include? "slack-aws-alerts"}
@@ -336,5 +340,19 @@ def list_all_r53_resource_record_sets(hosted_zone_id)
         resource_record_sets
       end
     end
+
+    def get_secret(environment: mi_env, role:, attribute:)
+      run_with_backoff do
+        begin
+          resp = ssm.get_parameter(
+                   name: "/#{environment}/#{role}/#{attribute}",
+                   with_decryption: true
+                 )
+          resp.parameter.value
+        rescue Aws::SSM::Errors::ParameterNotFound => e
+          nil
+        end
+      end
+    end
   end
 end

lib/movable_ink/version.rb

@@ -1,5 +1,5 @@
 module MovableInk
   module AWS
-    VERSION = '0.0.7'
+    VERSION = '0.0.8'
   end
 end