aliyun-secret-manager-client 0.0.2

Alibaba Cloud Secrets Manager Client implementation for Python

The Aliyun Secrets Manager Client for Python enables Python developers to easily work with Aliyun KMS Secrets.

Read this in other languages: 简体中文 <https://github.com/aliyun/aliyun-secretsmanager-client-python/blob/master/README.zh-cn.rst>

• Aliyun Secrets Manager Client Homepage

• Issues

• Release

License

Apache License 2.0

Features

• Provide quick integration capability to gain secret information

• Provide Alibaba secrets cache ( memory cache or encryption file cache )

• Provide tolerated disaster by the secrets with the same secret name and secret data in different regions

• Provide default backoff strategy and user-defined backoff strategy

Requirements

Python 2.7，3.5，3.6，3.7

Install

Install the official release version through PIP (taking Linux as an example):

$ pip install aliyun-secret-manager-client

You can also install the unzipped installer package directly:

$ sudo python setup.py install

Sample Code

Ordinary User Sample Code

• Build Secrets Manager Client by system environment variables (system environment variables setting for details)

secret_cache_client = SecretManagerCacheClientBuilder.new_client()
secret_info = secret_cache_client.get_secret_info("#secretName#")

• Build Secrets Manager Client by the given parameters(accessKey, accessSecret, regionId, etc)

secret_cache_client = SecretManagerCacheClientBuilder.new_cache_client_builder(
        DefaultSecretManagerClientBuilder.standard().with_access_key("#accessKeyId#", "#accessKeySecret#")
            .withRegion("#regionId#").build()).build();
secret_info = secret_cache_client.get_secret_info("#secretName#")

Particular User Sample Code

• Use custom parameters or customized implementation

secret_cache_client = SecretManagerCacheClientBuilder.new_cache_client_builder(
         DefaultSecretManagerClientBuilder.standard().with_access_key("#accessKeyId#", "#accessKeySecret#")
             .with_back_off_strategy(FullJitterBackoffStrategy(3, 2000, 10000))
             .with_region("#regionId#")
             .with_refresh_secret_strategy(FileCacheSecretStoreStrategy("#cacheSecretPath#", True,"#salt#"))
             .with_refresh_secret_strategy(DefaultRefreshSecretStrategy("#ttlName#"))
             .with_cache_stage("#stage#")
             .with_secret_ttl("#secretName#", 1 * 60 * 1000l)
             .build()) \
         .build()
secret_info = secret_cache_client.get_secret_info("#secretName#")