refactor: migrate Secrets Manager secrets to SSM Parameter Store (free tier)

This commit is contained in:
daniel
2026-05-13 12:55:16 -05:00
parent 3a34e61479
commit 74f74ef877
10 changed files with 81 additions and 81 deletions

View File

@@ -19,14 +19,14 @@ class TelegramAdapter:
if self._token is None:
with self._lock:
if self._token is None:
secret_arn = self._secret_arn or os.environ.get(
'TELEGRAM_BOT_TOKEN_SECRET_ARN',
'arn:aws:secretsmanager:us-east-1:495395224548:secret:agent-claw/telegram-bot-token-Oq3in3'
param_name = self._secret_arn or os.environ.get(
'TELEGRAM_BOT_TOKEN_SSM_PARAM',
'/agent-claw/telegram-bot-token'
)
sm = boto3.client('secretsmanager')
self._token = sm.get_secret_value(
SecretId=secret_arn
)['SecretString']
ssm = boto3.client('ssm')
self._token = ssm.get_parameter(
Name=param_name, WithDecryption=True
)['Parameter']['Value']
return self._token
def _api(self, method: str, data: dict) -> dict:

View File

@@ -15,12 +15,12 @@ def _get_brave_key() -> str:
if _brave_key is None:
with _brave_lock:
if _brave_key is None:
secret_arn = os.environ.get(
'BRAVE_API_KEY_SECRET_ARN',
'arn:aws:secretsmanager:us-east-1:495395224548:secret:agent-claw/brave-api-key-uUSgzi'
param_name = os.environ.get(
'BRAVE_API_KEY_SSM_PARAM',
'/agent-claw/brave-api-key'
)
sm = boto3.client('secretsmanager')
_brave_key = sm.get_secret_value(SecretId=secret_arn)['SecretString']
ssm = boto3.client('ssm')
_brave_key = ssm.get_parameter(Name=param_name, WithDecryption=True)['Parameter']['Value']
return _brave_key