【发布时间】:2021-06-14 23:26:06
【问题描述】:
以下是我通过 Lambda 函数运行的代码,该函数对其角色具有完整的 SecretsManagerReadWrite 权限:
const { SecretsManagerClient, GetSecretValueCommand } = require('@aws-sdk/client-secrets-manager');
exports.handler = async () => {
const secretsManagerClient = new SecretsManagerClient({
region: 'eu-west-2'
});
const params = {
secretId: 'Realitex/APIAccount'
}
const command = new GetSecretValueCommand(params);
try {
const data = await secretsManagerClient.send(command);
console.log(data);
} catch (error) {
console.log(error, error.stack);
} finally {
console.log("Done getting");
}
}
您可以清楚地看到,我将 secretId 作为参数传递给通过 secrets manager 客户端发送的命令,但是会出现此错误:
2021-03-17T15:20:39.963Z 0bd9bc3a-47ce-4c57-b583-0df9d9d70b34 INFO ValidationException: 1 validation error detected: Value null at 'secretId' failed to satisfy constraint: Member must not be null
at deserializeAws_json1_1GetSecretValueCommandError (/var/task/node_modules/@aws-sdk/client-secrets-manager/dist/cjs/protocols/Aws_json1_1.js:770:41)
at processTicksAndRejections (internal/process/task_queues.js:93:5)
at async /var/task/node_modules/@aws-sdk/middleware-serde/dist/cjs/deserializerMiddleware.js:6:20
at async /var/task/node_modules/@aws-sdk/middleware-signing/dist/cjs/middleware.js:12:24
at async StandardRetryStrategy.retry (/var/task/node_modules/@aws-sdk/middleware-retry/dist/cjs/defaultStrategy.js:56:46)
at async /var/task/node_modules/@aws-sdk/middleware-logger/dist/cjs/loggerMiddleware.js:6:22
at async Runtime.exports.handler (/var/task/index.js:14:18) {
__type: 'ValidationException',
'$fault': 'client',
'$metadata': {
httpStatusCode: 400,
requestId: '7b22cb52-0345-4c49-bd41-33aa3a1be707',
extendedRequestId: undefined,
cfId: undefined,
attempts: 1,
totalRetryDelay: 0
}
}
我不知道它还能在哪里期待成员“secretId”,因为我在初始化 SecretsManager 时尝试将它作为配置参数传递,并且 API V3 的文档也不建议其他任何地方。
任何帮助将不胜感激!
【问题讨论】:
标签: node.js amazon-web-services aws-lambda aws-sdk aws-sdk-nodejs