👁 Image
AWSSecretsManager.Provider 1.3.2

AWSSecretsManager.Provider

👁 All Contributors

👁 NuGet version
👁 NuGet Downloads
👁 Build Status

This is a modern, community-maintained fork of Kralizek/AWSSecretsManagerConfigurationExtensions, originally developed by Renato Golia.

It provides a configuration provider for Microsoft.Extensions.Configuration that loads secrets from AWS Secrets Manager.

🚀 What's New in This Fork

• ✅ Targeted to .NET 8 and .NET 9
• ✅ Converted to use System.Text.Json only
• ✅ Refactored structure for better modern SDK usage
• ✅ NEW: Comprehensive logging support with ILogger integration
• ✅ Published as a new NuGet package: AWSSecretsManager.Provider

🔧 Usage

ASP.NET Core Example

public class Program
{
 public static void Main(string[] args)
 {
 CreateHostBuilder(args).Build().Run();
 }

 public static IHostBuilder CreateHostBuilder(string[] args) =>
 Host.CreateDefaultBuilder(args)
 .ConfigureAppConfiguration((context, config) =>
 {
 config.AddSecretsManager(); // 👈 AWS Secrets Manager integration
 })
 .ConfigureWebHostDefaults(webBuilder =>
 {
 webBuilder.UseStartup<Startup>();
 });
}

Console App Example

static void Main(string[] args)
{
 var builder = new ConfigurationBuilder();
 builder.AddSecretsManager();

 var config = builder.Build();
 Console.WriteLine("Secret: " + config["MySecret"]);
}

Your application must have AWS credentials available through the default AWS SDK mechanisms. Learn more here:
👉 AWS SDK Credential Config

📋 Logging Support

The provider includes comprehensive logging support for better observability:

// Using ILoggerFactory (recommended)
using var loggerFactory = LoggerFactory.Create(builder => builder.AddConsole());
builder.Configuration.AddSecretsManager(
 loggerFactory,
 configurator: options => options.PollingInterval = TimeSpan.FromMinutes(5));

// Using explicit ILogger
var logger = loggerFactory.CreateLogger<SecretsManagerConfigurationProvider>();
builder.Configuration.AddSecretsManager(
 logger,
 configurator: options => options.PollingInterval = TimeSpan.FromMinutes(5));

Log Levels:

• Information: Key operations (loading, reloading, polling status)
• Debug: Batch processing details and secret counts
• Trace: Individual secret processing and change detection
• Warning: Polling errors and missing secrets (when ignored)
• Error: Failed operations with full context

Example Log Output:

[Information] Loading secrets from AWS Secrets Manager
[Debug] Fetching 15 secrets in 1 batches
[Information] Successfully loaded 47 configuration keys in 1,234ms
[Information] Starting secret polling with interval 00:05:00

🔒 Configuration Options

This provider supports several customization options, including:

• Credentials: Pass your own credentials if needed.
• Region: Customize the AWS region.
• Filtering: Control which secrets are loaded via filters or explicit allow lists.
• Key generation: Customize how configuration keys are named.
• Version stage: Set version stages for secrets.
• Logging: Full logging support with ILogger integration for observability.
• LocalStack support: Override ServiceUrl for local testing.

📚 Samples

The repository includes comprehensive samples demonstrating different usage patterns:

Each sample includes a detailed README with usage examples, prerequisites, and explanations. See the complete for setup instructions and learning progression.

📦 Installation

dotnet add package AWSSecretsManager.Provider

✅ Building Locally

This repo is built with the standard .NET SDK:

dotnet build
dotnet test

🙌 Acknowledgments

This project is based on the excellent work by Renato Golia and inspired by the broader .NET and AWS developer community.

📄 License

This project is licensed under the .

Contributors ✨

Thanks goes to these wonderful people (emoji key):

<table> <tbody> <tr> <td align="center" valign="top" width="14.28%"><a href="https://github.com/ncipollina"><img src="https://avatars.githubusercontent.com/u/1405469?v=4?s=100" width="100px;" alt="Nick Cipollina"/><br />_{<b>Nick Cipollina</b>}</a><br /><a href="https://github.com/LayeredCraft/aws-secrets-manager-provider/commits?author=ncipollina" title="Code">💻</a></td> <td align="center" valign="top" width="14.28%"><a href="https://github.com/ransagy"><img src="https://avatars.githubusercontent.com/u/6785058?v=4?s=100" width="100px;" alt="Ran Sagy"/><br />_{<b>Ran Sagy</b>}</a><br /><a href="https://github.com/LayeredCraft/aws-secrets-manager-provider/commits?author=ransagy" title="Code">💻</a></td> </tr> </tbody> </table>

This project follows the all-contributors specification. Contributions of any kind welcome!