Skip to content

Commit 6429d3c

Browse files
authored
Merge branch 'main' into jocorell/new-dafny-cli
2 parents 44d29ac + bf3e1c3 commit 6429d3c

25 files changed

+153
-41
lines changed

.github/workflows/ci_codegen.yml

+1-1
Original file line numberDiff line numberDiff line change
@@ -38,7 +38,7 @@ jobs:
3838
# and to translate version strings such as "nightly-latest"
3939
# to an actual DAFNY_VERSION.
4040
- name: Setup Dafny
41-
uses: dafny-lang/[email protected].0
41+
uses: dafny-lang/[email protected].2
4242
with:
4343
dafny-version: ${{ inputs.dafny }}
4444

.github/workflows/ci_examples_java.yml

+1-1
Original file line numberDiff line numberDiff line change
@@ -53,7 +53,7 @@ jobs:
5353
java-version: ${{ matrix.java-version }}
5454

5555
- name: Setup Dafny
56-
uses: dafny-lang/[email protected].0
56+
uses: dafny-lang/[email protected].2
5757
with:
5858
dafny-version: ${{ inputs.dafny }}
5959

.github/workflows/ci_examples_net.yml

+1-1
Original file line numberDiff line numberDiff line change
@@ -46,7 +46,7 @@ jobs:
4646
dotnet-version: ${{ matrix.dotnet-version }}
4747

4848
- name: Setup Dafny
49-
uses: dafny-lang/[email protected].0
49+
uses: dafny-lang/[email protected].2
5050
with:
5151
dafny-version: ${{ inputs.dafny }}
5252

.github/workflows/ci_test_java.yml

+1-1
Original file line numberDiff line numberDiff line change
@@ -47,7 +47,7 @@ jobs:
4747
submodules: recursive
4848

4949
- name: Setup Dafny
50-
uses: dafny-lang/[email protected].0
50+
uses: dafny-lang/[email protected].2
5151
with:
5252
dafny-version: ${{ inputs.dafny }}
5353

.github/workflows/ci_test_net.yml

+1-1
Original file line numberDiff line numberDiff line change
@@ -47,7 +47,7 @@ jobs:
4747
dotnet-version: ${{ matrix.dotnet-version }}
4848

4949
- name: Setup Dafny
50-
uses: dafny-lang/[email protected].0
50+
uses: dafny-lang/[email protected].2
5151
with:
5252
dafny-version: ${{ inputs.dafny }}
5353

.github/workflows/ci_test_vector_java.yml

+1-1
Original file line numberDiff line numberDiff line change
@@ -56,7 +56,7 @@ jobs:
5656
submodules: recursive
5757

5858
- name: Setup Dafny
59-
uses: dafny-lang/[email protected].0
59+
uses: dafny-lang/[email protected].2
6060
with:
6161
dafny-version: ${{ inputs.dafny }}
6262

.github/workflows/ci_test_vector_net.yml

+1-1
Original file line numberDiff line numberDiff line change
@@ -52,7 +52,7 @@ jobs:
5252
submodules: recursive
5353

5454
- name: Setup Dafny
55-
uses: dafny-lang/[email protected].0
55+
uses: dafny-lang/[email protected].2
5656
with:
5757
dafny-version: ${{ inputs.dafny }}
5858

.github/workflows/library_dafny_verification.yml

+2-2
Original file line numberDiff line numberDiff line change
@@ -52,7 +52,7 @@ jobs:
5252
submodules: recursive
5353

5454
- name: Setup Dafny
55-
uses: dafny-lang/[email protected].0
55+
uses: dafny-lang/[email protected].2
5656
with:
5757
dafny-version: ${{ inputs.dafny }}
5858

@@ -73,7 +73,7 @@ jobs:
7373
# dafny-reportgenerator requires next6
7474
# but only 7.0 is installed on macos-12-large
7575
- name: Setup .NET Core SDK '6.0.x'
76-
uses: actions/setup-dotnet@v3
76+
uses: actions/setup-dotnet@v4
7777
with:
7878
dotnet-version: "6.0.x"
7979

.github/workflows/library_format.yml

+1-1
Original file line numberDiff line numberDiff line change
@@ -37,7 +37,7 @@ jobs:
3737
submodules: recursive
3838

3939
- name: Setup Dafny
40-
uses: dafny-lang/[email protected].0
40+
uses: dafny-lang/[email protected].2
4141
with:
4242
dafny-version: ${{ '4.2.0' }}
4343

.github/workflows/nightly.yml

+12-6
Original file line numberDiff line numberDiff line change
@@ -73,7 +73,7 @@ jobs:
7373
steps:
7474
# We need access to the role that is able to get CI Bot Creds
7575
- name: Configure AWS Credentials for Release
76-
uses: aws-actions/configure-aws-credentials@v2
76+
uses: aws-actions/configure-aws-credentials@v4
7777
with:
7878
aws-region: us-west-2
7979
role-to-assume: arn:aws:iam::587316601012:role/GitHub-CI-CI-Bot-Credential-Access-Role-us-west-2
@@ -90,8 +90,14 @@ jobs:
9090
env:
9191
GH_TOKEN: ${{ env.GITHUB_AWS_CRYPTO_TOOLS_CI_BOT_ESDK_RELEASE_TOKEN }}
9292
run: |
93-
gh issue create \
94-
--repo "dafny-lang/dafny" \
95-
--title "[PRERELEASE REGRESSION] Dafny prerelease regression from ${{ github.repository }}" \
96-
--body "Failure in ${{ github.workflow_ref }}. \
97-
See ${{ github.server_url }}/${{ github.repository }}/actions/runs/${{ github.run_id }}"
93+
id=$(gh search issues -R dafny-lang/dafny --match title "[PRERELEASE REGRESSION] Dafny prerelease regression from ${{ github.repository }}" --json number,state -q '[.[] | select( .state=="open" )][0].number')
94+
if [ -n "$id" ]; then
95+
gh issue comment -R dafny-lang/dafny $id \
96+
-b "Another failure in ${{ github.workflow_ref }}. \
97+
See ${{ github.server_url }}/${{ github.repository }}/actions/runs/${{ github.run_id }}"
98+
else
99+
gh issue create -R dafny-lang/dafny \
100+
-t "[PRERELEASE REGRESSION] Dafny prerelease regression from ${{ github.repository }}" \
101+
-b "Failure in ${{ github.workflow_ref }}. \
102+
See ${{ github.server_url }}/${{ github.repository }}/actions/runs/${{ github.run_id }}"
103+
fi

.github/workflows/test_vector_verification.yml

+2-2
Original file line numberDiff line numberDiff line change
@@ -43,7 +43,7 @@ jobs:
4343
submodules: recursive
4444

4545
- name: Setup Dafny
46-
uses: dafny-lang/[email protected].0
46+
uses: dafny-lang/[email protected].2
4747
with:
4848
dafny-version: ${{ inputs.dafny }}
4949

@@ -64,7 +64,7 @@ jobs:
6464
# dafny-reportgenerator requires next6
6565
# but only 7.0 is installed on macos-12-large
6666
- name: Setup .NET Core SDK '6.0.x'
67-
uses: actions/setup-dotnet@v3
67+
uses: actions/setup-dotnet@v4
6868
with:
6969
dotnet-version: "6.0.x"
7070

CHANGELOG.md

+19
Original file line numberDiff line numberDiff line change
@@ -1,5 +1,24 @@
11
# Changelog
22

3+
## [3.6.0](https://github.com/aws/aws-database-encryption-sdk-dynamodb/compare/v3.5.0...v3.6.0) (2024-07-23)
4+
5+
### Features
6+
7+
- allow indirect attribute names with MultiKeyStore ([#1208](https://github.com/aws/aws-database-encryption-sdk-dynamodb/issues/1208)) ([4ab97bc](https://github.com/aws/aws-database-encryption-sdk-dynamodb/commit/4ab97bcc43d0b906e45c487920bc7ef5ba66e505))
8+
9+
### Maintenance
10+
11+
- bump dafny verification version to 4.7 ([#1181](https://github.com/aws/aws-database-encryption-sdk-dynamodb/issues/1181)) ([e7801ec](https://github.com/aws/aws-database-encryption-sdk-dynamodb/commit/e7801ec42b1bb212af68f9dc0c8037eed9876b5c))
12+
- **CI/CD:** use latest conventional-changelog-conventionalcommits ([#1195](https://github.com/aws/aws-database-encryption-sdk-dynamodb/issues/1195)) ([510227e](https://github.com/aws/aws-database-encryption-sdk-dynamodb/commit/510227eabb958ff4a17d55fc2eac83f964d6a945))
13+
- Fix nightly build (aside from verification) ([#1029](https://github.com/aws/aws-database-encryption-sdk-dynamodb/issues/1029)) ([862420e](https://github.com/aws/aws-database-encryption-sdk-dynamodb/commit/862420ef12ef1e764327671d839be451a7579bda))
14+
- **GHA:** add action for testing against MPL HEAD ([#1187](https://github.com/aws/aws-database-encryption-sdk-dynamodb/issues/1187)) ([b2f70ca](https://github.com/aws/aws-database-encryption-sdk-dynamodb/commit/b2f70ca6733ac522f622014ae6c93bd1a1c15d28))
15+
- **GHA:** fix daily ci ([#1194](https://github.com/aws/aws-database-encryption-sdk-dynamodb/issues/1194)) ([a1427e0](https://github.com/aws/aws-database-encryption-sdk-dynamodb/commit/a1427e0f7febc10cddd2eccb08385afb2b964367))
16+
- **MPL:** Bump MPL to 1.5.1 ([#1201](https://github.com/aws/aws-database-encryption-sdk-dynamodb/issues/1201)) ([808a5b4](https://github.com/aws/aws-database-encryption-sdk-dynamodb/commit/808a5b4ad1143ffb8c0bb223fde1e3770c7abe62))
17+
- Sonatype Migration to User Tokens ([#1216](https://github.com/aws/aws-database-encryption-sdk-dynamodb/issues/1216)) ([a3b4ef9](https://github.com/aws/aws-database-encryption-sdk-dynamodb/commit/a3b4ef9aac11f4a1e1048d938d554c669befc0a6))
18+
- Try to update existing issues ([31c6b98](https://github.com/aws/aws-database-encryption-sdk-dynamodb/commit/31c6b9806920d500861154eccca07bd8a5ac4454))
19+
- Try to update existing issues ([4471295](https://github.com/aws/aws-database-encryption-sdk-dynamodb/commit/4471295aa2b7f10e88c3742a41c947d9ad9f4cd2))
20+
- update project.properties to be SNAPSHOT ([#1087](https://github.com/aws/aws-database-encryption-sdk-dynamodb/issues/1087)) ([6f2825e](https://github.com/aws/aws-database-encryption-sdk-dynamodb/commit/6f2825e198c84a5b20d50e49188b5d9004a1b71a))
21+
322
## [3.5.0](https://github.com/aws/aws-database-encryption-sdk-dynamodb/compare/v3.4.0...v3.5.0) (2024-05-30)
423

524
### Features

DynamoDbEncryption/dafny/DynamoDbEncryption/src/FilterExpr.dfy

+1-1
Original file line numberDiff line numberDiff line change
@@ -1533,7 +1533,7 @@ module DynamoDBFilterExpr {
15331533
else
15341534
var name := if names.Some? && attr.value.s in names.value then names.value[attr.value.s] else attr.value.s;
15351535
var keyIdField := bv.keySource.keyLoc.keyName;
1536-
if keyIdField == attr.value.s then
1536+
if keyIdField == name then
15371537
Some(value)
15381538
else
15391539
KeyIdFromPart(bv, keyIdField, attr.value.s, value)

DynamoDbEncryption/dafny/DynamoDbEncryption/test/BeaconTestFixtures.dfy

+37-3
Original file line numberDiff line numberDiff line change
@@ -130,9 +130,9 @@ module BeaconTestFixtures {
130130
var keyStoreConfig := KTypes.KeyStoreConfig(
131131
id := None,
132132
kmsConfiguration := kmsConfig,
133-
logicalKeyStoreName := "foo",
133+
logicalKeyStoreName := "KeyStoreDdbTable",
134134
grantTokens := None,
135-
ddbTableName := "foo",
135+
ddbTableName := "KeyStoreDdbTable",
136136
ddbClient := Some(ddbClient),
137137
kmsClient := Some(kmsClient)
138138
);
@@ -177,6 +177,24 @@ module BeaconTestFixtures {
177177
);
178178
}
179179

180+
method GetLotsaBeaconsMulti() returns (output : BeaconVersion)
181+
ensures output.keyStore.ValidState()
182+
ensures fresh(output.keyStore.Modifies)
183+
ensures output.version == 1
184+
{
185+
var store := GetKeyStore();
186+
return BeaconVersion (
187+
version := 1,
188+
keyStore := store,
189+
keySource := multi(MultiKeyStore(keyFieldName := "TheKeyField", cacheTTL := 42)),
190+
standardBeacons := [std2, std4, std6, NameTitleBeacon, NameB, TitleB],
191+
compoundBeacons := Some([NameTitle, YearName, Mixed, JustSigned]),
192+
virtualFields := Some([NameTitleField]),
193+
encryptedParts := None,
194+
signedParts := None
195+
);
196+
}
197+
180198
const EmptyTableConfig := DynamoDbTableEncryptionConfig (
181199
logicalTableName := "Foo",
182200
partitionKeyName := "foo",
@@ -200,7 +218,8 @@ module BeaconTestFixtures {
200218
"Title" := SE.ENCRYPT_AND_SIGN,
201219
"TooBad" := SE.ENCRYPT_AND_SIGN,
202220
"Year" := SE.SIGN_ONLY,
203-
"Date" := SE.SIGN_ONLY
221+
"Date" := SE.SIGN_ONLY,
222+
"TheKeyField" := SE.SIGN_ONLY
204223
]
205224
)
206225

@@ -223,6 +242,21 @@ module BeaconTestFixtures {
223242
return SI.KeySource(client, version.keyStore, SI.LiteralLoc(keys), cache, 0);
224243
}
225244

245+
method GetMultiSource(keyName : string, version : BeaconVersion) returns (output : SI.KeySource)
246+
requires version.keyStore.ValidState()
247+
ensures output.ValidState()
248+
ensures version.keyStore == output.store
249+
ensures fresh(output.client.Modifies)
250+
{
251+
var client :- expect Primitives.AtomicPrimitives();
252+
var mpl :- expect MaterialProviders.MaterialProviders();
253+
var input := MPT.CreateCryptographicMaterialsCacheInput(
254+
cache := MPT.Default(Default := MPT.DefaultCache(entryCapacity := 3))
255+
);
256+
var cache :- expect mpl.CreateCryptographicMaterialsCache(input);
257+
return SI.KeySource(client, version.keyStore, SI.MultiLoc(keyName, false), cache, 0);
258+
}
259+
226260
const SimpleItem : DDB.AttributeMap := map[
227261
"std2" := Std2String,
228262
"std4" := Std4String,

DynamoDbEncryption/dafny/DynamoDbEncryption/test/DDBSupport.dfy

+56
Original file line numberDiff line numberDiff line change
@@ -32,4 +32,60 @@ module TestDDBSupport {
3232
expect newItem == SimpleItem + expectedNew;
3333
}
3434

35+
// DynamoDB String :: cast string to DDB.AttributeValue.S
36+
function method DS(x : string) : DDB.AttributeValue
37+
{
38+
DDB.AttributeValue.S(x)
39+
}
40+
41+
method {:test} TestMulti() {
42+
var version := GetLotsaBeaconsMulti();
43+
var src := GetMultiSource("TheKeyField", version);
44+
var bv :- expect ConvertVersionWithSource(FullTableConfig, version, src);
45+
var search := SI.SearchInfo([bv], 0);
46+
var expressionAttributeValues : map<string, AttributeValue> := map[
47+
":value" := DS("0ad21413-51aa-42e1-9c3d-6a4b1edf7e10")
48+
];
49+
var queryInput := DDB.QueryInput (
50+
TableName := "SomeTable",
51+
ExpressionAttributeValues := Some(expressionAttributeValues),
52+
KeyConditionExpression := Some("TheKeyField = :value")
53+
);
54+
var result :- expect QueryInputForBeacons(Some(search), FullTableConfig.attributeActionsOnEncrypt, queryInput);
55+
56+
// Verify Success with branch key id plus beacon
57+
expressionAttributeValues := map[
58+
":value" := DS("0ad21413-51aa-42e1-9c3d-6a4b1edf7e10"),
59+
":other" := DS("junk")
60+
];
61+
queryInput := DDB.QueryInput (
62+
TableName := "foo",
63+
ExpressionAttributeValues := Some(expressionAttributeValues),
64+
KeyConditionExpression := Some("TheKeyField = :value AND std2 = :other")
65+
);
66+
result :- expect QueryInputForBeacons(Some(search), FullTableConfig.attributeActionsOnEncrypt, queryInput);
67+
68+
// Verify Failure with beacon but no branch key id
69+
queryInput := DDB.QueryInput (
70+
TableName := "foo",
71+
ExpressionAttributeValues := Some(expressionAttributeValues),
72+
KeyConditionExpression := Some("std2 = :other")
73+
);
74+
var result2 := QueryInputForBeacons(Some(search), FullTableConfig.attributeActionsOnEncrypt, queryInput);
75+
expect result2 == Failure(AwsCryptographyDbEncryptionSdkDynamoDbTypes.Error.DynamoDbEncryptionException(
76+
message := "Need KeyId because of beacon std2 but no KeyId found in query"));
77+
78+
// Verify Success, even when field names are indirect via ExpressionAttributeNames
79+
var expressionAttributeNames := map[
80+
"#beacon" := "std2",
81+
"#keyfield" := "TheKeyField"
82+
];
83+
queryInput := DDB.QueryInput (
84+
TableName := "foo",
85+
ExpressionAttributeNames := Some(expressionAttributeNames),
86+
ExpressionAttributeValues := Some(expressionAttributeValues),
87+
KeyConditionExpression := Some("#keyfield = :value AND #beacon = :other")
88+
);
89+
result :- expect QueryInputForBeacons(Some(search), FullTableConfig.attributeActionsOnEncrypt, queryInput);
90+
}
3591
}

DynamoDbEncryption/runtimes/java/build.gradle.kts

+1-1
Original file line numberDiff line numberDiff line change
@@ -83,7 +83,7 @@ dependencies {
8383
implementation("software.amazon.smithy.dafny:conversion:${smithyDafnyJavaConversionVersion}")
8484
implementation("software.amazon.cryptography:aws-cryptographic-material-providers:${mplVersion}")
8585

86-
implementation(platform("software.amazon.awssdk:bom:2.24.2"))
86+
implementation(platform("software.amazon.awssdk:bom:2.26.25"))
8787
implementation("software.amazon.awssdk:dynamodb")
8888
implementation("software.amazon.awssdk:dynamodb-enhanced")
8989
implementation("software.amazon.awssdk:kms")

DynamoDbEncryption/runtimes/net/AssemblyInfo.cs

+1-1
Original file line numberDiff line numberDiff line change
@@ -3,5 +3,5 @@
33
[assembly: AssemblyTitle("AWS.Cryptography.DbEncryptionSDK.DynamoDb")]
44

55
// This should be kept in sync with the version number in MPL.csproj
6-
[assembly: AssemblyVersion("3.5.0")]
6+
[assembly: AssemblyVersion("3.6.0")]
77

DynamoDbEncryption/runtimes/net/DynamoDbEncryption.csproj

+2-2
Original file line numberDiff line numberDiff line change
@@ -5,7 +5,7 @@
55
<GenerateAssemblyInfo>false</GenerateAssemblyInfo>
66
<IsPackable>true</IsPackable>
77

8-
<Version>3.5.0</Version>
8+
<Version>3.6.0</Version>
99

1010
<AssemblyName>AWS.Cryptography.DbEncryptionSDK.DynamoDb</AssemblyName>
1111
<PackageId>AWS.Cryptography.DbEncryptionSDK.DynamoDb</PackageId>
@@ -58,7 +58,7 @@
5858

5959
<ItemGroup>
6060
<PackageReference Include="AWSSDK.DynamoDBv2" Version="3.7.303.14"/>
61-
<PackageReference Include="AWSSDK.Core" Version="3.7.304.7"/>
61+
<PackageReference Include="AWSSDK.Core" Version="3.7.304.16"/>
6262
<PackageReference Include="DafnyRuntime" Version="$(DafnyVersion)" />
6363
<ProjectReference Include="../../../submodules/MaterialProviders/AwsCryptographicMaterialProviders/runtimes/net/MPL.csproj"/>
6464
<!--

Makefile

+1-1
Original file line numberDiff line numberDiff line change
@@ -77,7 +77,7 @@ generate_properties_file:
7777
";
7878

7979
setup_semantic_release:
80-
npm i --no-save semantic-release @semantic-release/changelog semantic-release-replace-plugin conventional-changelog-conventionalcommits@7.0.2 @semantic-release/git
80+
npm i --no-save semantic-release @semantic-release/changelog semantic-release-replace-plugin conventional-changelog-conventionalcommits @semantic-release/git
8181

8282
run_semantic_release:
8383
npx semantic-release --no-ci

TestVectors/runtimes/java/build.gradle.kts

+4-6
Original file line numberDiff line numberDiff line change
@@ -28,8 +28,7 @@ var dafnyRuntimeJavaVersion = props.getProperty("dafnyRuntimeJavaVersion")
2828
var smithyDafnyJavaConversionVersion = props.getProperty("smithyDafnyJavaConversionVersion")
2929

3030
group = "software.amazon.cryptography"
31-
// change to ${mplVersion} for next MPL update
32-
version = "1.0-SNAPSHOT"
31+
version = "${mplVersion}"
3332
description = "TestVectorsDynamoDbEncryption"
3433

3534
java {
@@ -91,13 +90,12 @@ dependencies {
9190
implementation("software.amazon.smithy.dafny:conversion:${smithyDafnyJavaConversionVersion}")
9291
implementation("software.amazon.cryptography:aws-cryptographic-material-providers:${mplVersion}")
9392
implementation("software.amazon.cryptography:aws-database-encryption-sdk-dynamodb:${ddbecVersion}")
94-
// change to ${mplVersion} for next MPL update
95-
implementation("software.amazon.cryptography:TestAwsCryptographicMaterialProviders:1.0-SNAPSHOT")
93+
implementation("software.amazon.cryptography:TestAwsCryptographicMaterialProviders:${mplVersion}")
9694

97-
implementation(platform("software.amazon.awssdk:bom:2.24.2"))
95+
implementation(platform("software.amazon.awssdk:bom:2.26.25"))
9896
implementation("software.amazon.awssdk:dynamodb")
9997
implementation("software.amazon.awssdk:dynamodb-enhanced")
100-
implementation("software.amazon.awssdk:core:2.24.7")
98+
implementation("software.amazon.awssdk:core:2.26.25")
10199
implementation("software.amazon.awssdk:kms")
102100
testImplementation("com.amazonaws:DynamoDBLocal:2.+")
103101
// This is where we gather the SQLLite files to copy over

TestVectors/runtimes/net/DbEsdkTestVectors.csproj

+1-2
Original file line numberDiff line numberDiff line change
@@ -8,11 +8,10 @@
88
<LangVersion>10</LangVersion>
99
<TargetFramework>net6.0</TargetFramework>
1010
<EnableDefaultCompileItems>false</EnableDefaultCompileItems>
11+
<StartupObject>DbEsdkTestVectors.Program</StartupObject>
1112
</PropertyGroup>
1213

1314
<ItemGroup>
14-
<PackageReference Include="AWSSDK.DynamoDBv2" Version="3.7.303.14"/>
15-
<PackageReference Include="AWSSDK.Core" Version="3.7.304.7"/>
1615
<ProjectReference Include="../../../DynamoDbEncryption/runtimes/net/DynamoDbEncryption.csproj" />
1716
<ProjectReference Include="../../../submodules/MaterialProviders/TestVectorsAwsCryptographicMaterialProviders/runtimes/net/TestVectors.csproj" />
1817
<Compile Include="*.cs"/>

cfn/CB-Staging.yml

+1-1
Original file line numberDiff line numberDiff line change
@@ -238,7 +238,7 @@ Resources:
238238
"arn:aws:secretsmanager:us-west-2:${AWS::AccountId}:secret:Maven-GPG-Keys-CI-Credentials-eBrSNB",
239239
"arn:aws:secretsmanager:us-west-2:${AWS::AccountId}:secret:Maven-GPG-Keys-Release-haLIjZ",
240240
"arn:aws:secretsmanager:us-west-2:${AWS::AccountId}:secret:Maven-GPG-Keys-Release-Credentials-WgJanS",
241-
"arn:aws:secretsmanager:us-west-2:${AWS::AccountId}:secret:Sonatype-Team-Account-0tWvZm",
241+
"arn:aws:secretsmanager:us-west-2:${AWS::AccountId}:secret:Sonatype-User-Token-zK61bM",
242242
"arn:aws:secretsmanager:us-west-2:${AWS::AccountId}:secret:Github/aws-crypto-tools-ci-bot-AGUB3U"
243243
],
244244
"Action": "secretsmanager:GetSecretValue"

0 commit comments

Comments
 (0)