Skip to content

Add support for Secrets Manager #7

Merged
andyalm merged 12 commits intomainfrom
claude/add-aws-secrets-manager-gY0ZZ
Mar 1, 2026
Merged

Add support for Secrets Manager #7
andyalm merged 12 commits intomainfrom
claude/add-aws-secrets-manager-gY0ZZ

Conversation

@andyalm
Copy link
Owner

@andyalm andyalm commented Mar 1, 2026

  • Adds a new Secrets Manager service to MountAws, enabling users to browse, read, and write AWS secrets through the virtual filesystem at aws:///secretsmanager/secrets/...
  • Secrets with / in their names are automatically organized into a virtual folder hierarchy for intuitive navigation
  • Supports Get-Content/Set-Content for raw secret values, and Get-ItemProperty/Set-ItemProperty for individual keys within JSON-formatted secrets

claude and others added 12 commits February 28, 2026 18:58
Adds a new SecretsManager service that lets users browse and retrieve
secrets via the aws: drive. JSON secrets are navigable as containers
where each top-level key becomes a child item accessible via Get-Content.

Filesystem hierarchy:
  aws:/<profile>/<region>/secretsmanager/secrets/<secret-name>/<json-key>

https://claude.ai/code/session_01QhMmDXjkSLNqcz11WmUwMT
For secrets containing JSON objects, Get-ItemProperty returns the
key-value pairs as PowerShell properties and Set-ItemProperty updates
individual keys in the JSON without replacing the entire secret.

https://claude.ai/code/session_01QhMmDXjkSLNqcz11WmUwMT
Enable writing secret values via Set-Content at both levels:
- SecretHandler: replaces the entire secret string
- SecretValueHandler: updates an individual JSON key within the secret

https://claude.ai/code/session_01QhMmDXjkSLNqcz11WmUwMT
Secrets with "/" in their names (e.g., entsvc/aigenmodel/bria-attribution)
are now browsable as a folder hierarchy under the secrets container. Uses
the ItemNavigator pattern (same as CloudWatch log groups) with MapRegex
routing to capture multi-segment secret paths.

- SecretNavigator splits secret names into virtual folders and leaf secrets
- SecretFolderItem represents intermediate path segments as containers
- SecretHandler handles folders, secrets, and JSON keys via API probing
- SecretValueHandler removed (logic merged into SecretHandler)
- SecretItem.ItemName now uses last segment only (not full name)

https://claude.ai/code/session_01QhMmDXjkSLNqcz11WmUwMT
Secret values are no longer exposed as navigable child items. Instead,
use Get-Content/Set-Content for raw values and Get/Set-ItemProperty
for individual JSON keys. This removes the three-way dispatch complexity
and extra API calls from SecretHandler.

- SecretItem.IsContainer = false (secrets are leaf nodes)
- SecretPath extends TypedItemPath, Routes uses MapRecursive
- SecretHandler simplified to two-way folder/secret dispatch
- SecretValueItem deleted
- SecretValue item type removed

https://claude.ai/code/session_01QhMmDXjkSLNqcz11WmUwMT
Covers path hierarchy, browsing, reading/writing secret values
with Get-Content/Set-Content, and JSON property access with
Get-ItemProperty/Set-ItemProperty.

https://claude.ai/code/session_01QhMmDXjkSLNqcz11WmUwMT
@andyalm andyalm merged commit 747fef3 into main Mar 1, 2026
1 check passed
@andyalm andyalm deleted the claude/add-aws-secrets-manager-gY0ZZ branch March 1, 2026 18:53
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants