secrets-cache 0.2.0

Cache secrets locally from AWS Secrets Manager and other secret stores.

Secrets Cache

Cache secrets locally from AWS Secrets Manager and other secret stores, with optional local caching for development or Lambda-friendly usage.

• PyPI package: https://pypi.org/project/secrets-cache/
• Free software: MIT License
• Documentation: https://secrets-cache.readthedocs.io.

Installation

Install the base package (minimal, Lambda-friendly):

pip install secrets-cache[lambda]

Install with local cache support (TOML) for testing / development:

pip install secrets-cache[local]

Install with CLI support:

pip install secrets-cache[cli]

You can also combine extras:

pip install "secrets-cache[local,cli]"

Usage

from secrets_cache import get_secret, get_param

# Get a secret from AWS Secrets Manager
my_secret = get_secret("my-secret-name", region="us-east-1")

# Get a parameter from AWS SSM Parameter Store
my_param = get_param("/my/parameter/name", region="us-east-1")

Notes:

• By default, secrets are cached in memory to reduce repeated AWS calls.
• If local extra is installed, secrets are also stored in ~/.secrets_cache.toml for local caching.
• Module-level caches persist across warm AWS Lambda invocations, so repeated calls in the same container are very fast.

Features

• Fetch secrets and parameters from AWS Secrets Manager / SSM.
• Module-level caching for in-process efficiency.
• Optional TOML caching for development.
• Lambda-friendly usage without extra dependencies.
• Easy to extend to other secret stores in the future.

Getting Started: AWS Lambda

When running in AWS Lambda, you usually don’t want file-based caching. Use the lambda extra:

pip install secrets-cache[lambda]

Example Lambda handler

import json
from secrets_cache import get_secret, get_param

def lambda_handler(event, context):
    # Get a secret from AWS Secrets Manager
    db_password = get_secret("my-db-password", region="us-east-1")

    # Get a parameter from AWS SSM Parameter Store
    api_key = get_param("/my/api/key", region="us-east-1")

    # Do something with your secrets
    return {
        "statusCode": 200,
        "body": json.dumps({
            "db_password_length": len(db_password),
            "api_key_length": len(api_key)
        })
    }

Notes for Lambda

• Module-level caching ensures repeated calls in the same container are very fast.
• No TOML or local file access is required — perfect for ephemeral Lambda environments.
• Secrets are cached in memory only, and each new container start fetches them from AWS.
• If you want local development caching, install the local extra:

pip install secrets-cache[local]

This enables optional ~/.secrets_cache.toml caching for local testing.

Credits

Created with Cookiecutter and the rnag/cookiecutter-pypackage template.