Skip to content

Commit 49feee5

Browse files
author
AWS
committed
AWS App Runner Update: This release adds support of securely referencing secrets and configuration data that are stored in Secrets Manager and SSM Parameter Store by adding them as environment secrets in your App Runner service.
1 parent 3471acc commit 49feee5

File tree

4 files changed

+77
-46
lines changed

4 files changed

+77
-46
lines changed

‎.changes/next-release/feature-AWSAppRunner-1405742.json

+6
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,6 @@
1+
{
2+
"type": "feature",
3+
"category": "AWS App Runner",
4+
"contributor": "",
5+
"description": "This release adds support of securely referencing secrets and configuration data that are stored in Secrets Manager and SSM Parameter Store by adding them as environment secrets in your App Runner service."
6+
}

‎services/apprunner/src/main/resources/codegen-resources/endpoint-rule-set.json

+1-1
Original file line numberDiff line numberDiff line change
@@ -3,7 +3,7 @@
33
"parameters": {
44
"Region": {
55
"builtIn": "AWS::Region",
6-
"required": false,
6+
"required": true,
77
"documentation": "The AWS region used to dispatch the request.",
88
"type": "String"
99
},

‎services/apprunner/src/main/resources/codegen-resources/endpoint-tests.json

+43-43
Original file line numberDiff line numberDiff line change
@@ -8,9 +8,9 @@
88
}
99
},
1010
"params": {
11+
"Region": "us-west-2",
1112
"UseFIPS": true,
12-
"UseDualStack": true,
13-
"Region": "us-west-2"
13+
"UseDualStack": true
1414
}
1515
},
1616
{
@@ -21,9 +21,9 @@
2121
}
2222
},
2323
"params": {
24+
"Region": "us-west-2",
2425
"UseFIPS": true,
25-
"UseDualStack": false,
26-
"Region": "us-west-2"
26+
"UseDualStack": false
2727
}
2828
},
2929
{
@@ -34,9 +34,9 @@
3434
}
3535
},
3636
"params": {
37+
"Region": "us-west-2",
3738
"UseFIPS": false,
38-
"UseDualStack": true,
39-
"Region": "us-west-2"
39+
"UseDualStack": true
4040
}
4141
},
4242
{
@@ -47,9 +47,9 @@
4747
}
4848
},
4949
"params": {
50+
"Region": "us-west-2",
5051
"UseFIPS": false,
51-
"UseDualStack": false,
52-
"Region": "us-west-2"
52+
"UseDualStack": false
5353
}
5454
},
5555
{
@@ -60,9 +60,9 @@
6060
}
6161
},
6262
"params": {
63+
"Region": "eu-west-1",
6364
"UseFIPS": true,
64-
"UseDualStack": true,
65-
"Region": "eu-west-1"
65+
"UseDualStack": true
6666
}
6767
},
6868
{
@@ -73,9 +73,9 @@
7373
}
7474
},
7575
"params": {
76+
"Region": "eu-west-1",
7677
"UseFIPS": true,
77-
"UseDualStack": false,
78-
"Region": "eu-west-1"
78+
"UseDualStack": false
7979
}
8080
},
8181
{
@@ -86,9 +86,9 @@
8686
}
8787
},
8888
"params": {
89+
"Region": "eu-west-1",
8990
"UseFIPS": false,
90-
"UseDualStack": true,
91-
"Region": "eu-west-1"
91+
"UseDualStack": true
9292
}
9393
},
9494
{
@@ -99,9 +99,9 @@
9999
}
100100
},
101101
"params": {
102+
"Region": "eu-west-1",
102103
"UseFIPS": false,
103-
"UseDualStack": false,
104-
"Region": "eu-west-1"
104+
"UseDualStack": false
105105
}
106106
},
107107
{
@@ -112,9 +112,9 @@
112112
}
113113
},
114114
"params": {
115+
"Region": "ap-northeast-1",
115116
"UseFIPS": true,
116-
"UseDualStack": true,
117-
"Region": "ap-northeast-1"
117+
"UseDualStack": true
118118
}
119119
},
120120
{
@@ -125,9 +125,9 @@
125125
}
126126
},
127127
"params": {
128+
"Region": "ap-northeast-1",
128129
"UseFIPS": true,
129-
"UseDualStack": false,
130-
"Region": "ap-northeast-1"
130+
"UseDualStack": false
131131
}
132132
},
133133
{
@@ -138,9 +138,9 @@
138138
}
139139
},
140140
"params": {
141+
"Region": "ap-northeast-1",
141142
"UseFIPS": false,
142-
"UseDualStack": true,
143-
"Region": "ap-northeast-1"
143+
"UseDualStack": true
144144
}
145145
},
146146
{
@@ -151,9 +151,9 @@
151151
}
152152
},
153153
"params": {
154+
"Region": "ap-northeast-1",
154155
"UseFIPS": false,
155-
"UseDualStack": false,
156-
"Region": "ap-northeast-1"
156+
"UseDualStack": false
157157
}
158158
},
159159
{
@@ -164,9 +164,9 @@
164164
}
165165
},
166166
"params": {
167+
"Region": "us-east-1",
167168
"UseFIPS": true,
168-
"UseDualStack": true,
169-
"Region": "us-east-1"
169+
"UseDualStack": true
170170
}
171171
},
172172
{
@@ -177,9 +177,9 @@
177177
}
178178
},
179179
"params": {
180+
"Region": "us-east-1",
180181
"UseFIPS": true,
181-
"UseDualStack": false,
182-
"Region": "us-east-1"
182+
"UseDualStack": false
183183
}
184184
},
185185
{
@@ -190,9 +190,9 @@
190190
}
191191
},
192192
"params": {
193+
"Region": "us-east-1",
193194
"UseFIPS": false,
194-
"UseDualStack": true,
195-
"Region": "us-east-1"
195+
"UseDualStack": true
196196
}
197197
},
198198
{
@@ -203,9 +203,9 @@
203203
}
204204
},
205205
"params": {
206+
"Region": "us-east-1",
206207
"UseFIPS": false,
207-
"UseDualStack": false,
208-
"Region": "us-east-1"
208+
"UseDualStack": false
209209
}
210210
},
211211
{
@@ -216,9 +216,9 @@
216216
}
217217
},
218218
"params": {
219+
"Region": "us-east-2",
219220
"UseFIPS": true,
220-
"UseDualStack": true,
221-
"Region": "us-east-2"
221+
"UseDualStack": true
222222
}
223223
},
224224
{
@@ -229,9 +229,9 @@
229229
}
230230
},
231231
"params": {
232+
"Region": "us-east-2",
232233
"UseFIPS": true,
233-
"UseDualStack": false,
234-
"Region": "us-east-2"
234+
"UseDualStack": false
235235
}
236236
},
237237
{
@@ -242,9 +242,9 @@
242242
}
243243
},
244244
"params": {
245+
"Region": "us-east-2",
245246
"UseFIPS": false,
246-
"UseDualStack": true,
247-
"Region": "us-east-2"
247+
"UseDualStack": true
248248
}
249249
},
250250
{
@@ -255,9 +255,9 @@
255255
}
256256
},
257257
"params": {
258+
"Region": "us-east-2",
258259
"UseFIPS": false,
259-
"UseDualStack": false,
260-
"Region": "us-east-2"
260+
"UseDualStack": false
261261
}
262262
},
263263
{
@@ -268,9 +268,9 @@
268268
}
269269
},
270270
"params": {
271+
"Region": "us-east-1",
271272
"UseFIPS": false,
272273
"UseDualStack": false,
273-
"Region": "us-east-1",
274274
"Endpoint": "https://example.com"
275275
}
276276
},
@@ -280,9 +280,9 @@
280280
"error": "Invalid Configuration: FIPS and custom endpoint are not supported"
281281
},
282282
"params": {
283+
"Region": "us-east-1",
283284
"UseFIPS": true,
284285
"UseDualStack": false,
285-
"Region": "us-east-1",
286286
"Endpoint": "https://example.com"
287287
}
288288
},
@@ -292,9 +292,9 @@
292292
"error": "Invalid Configuration: Dualstack and custom endpoint are not supported"
293293
},
294294
"params": {
295+
"Region": "us-east-1",
295296
"UseFIPS": false,
296297
"UseDualStack": true,
297-
"Region": "us-east-1",
298298
"Endpoint": "https://example.com"
299299
}
300300
}

‎services/apprunner/src/main/resources/codegen-resources/service-2.json

+27-2
Original file line numberDiff line numberDiff line change
@@ -786,7 +786,11 @@
786786
},
787787
"RuntimeEnvironmentVariables":{
788788
"shape":"RuntimeEnvironmentVariables",
789-
"documentation":"<p>The environment variables that are available to your running App Runner service. An array of key-value pairs. Keys with a prefix of <code>AWSAPPRUNNER</code> are reserved for system use and aren't valid.</p>"
789+
"documentation":"<p>The environment variables that are available to your running App Runner service. An array of key-value pairs.</p>"
790+
},
791+
"RuntimeEnvironmentSecrets":{
792+
"shape":"RuntimeEnvironmentSecrets",
793+
"documentation":"<p>An array of key-value pairs representing the secrets and parameters that get referenced to your service as an environment variable. The supported values are either the full Amazon Resource Name (ARN) of the Secrets Manager secret or the full ARN of the parameter in the Amazon Web Services Systems Manager Parameter Store.</p> <note> <ul> <li> <p> If the Amazon Web Services Systems Manager Parameter Store parameter exists in the same Amazon Web Services Region as the service that you're launching, you can use either the full ARN or name of the secret. If the parameter exists in a different Region, then the full ARN must be specified. </p> </li> <li> <p> Currently, cross account referencing of Amazon Web Services Systems Manager Parameter Store parameter is not supported. </p> </li> </ul> </note>"
790794
}
791795
},
792796
"documentation":"<p>Describes the basic configuration needed for building and running an App Runner service. This type doesn't support the full set of possible configuration options. Fur full configuration capabilities, use a <code>apprunner.yaml</code> file in the source code repository.</p>"
@@ -1606,7 +1610,7 @@
16061610
"members":{
16071611
"RuntimeEnvironmentVariables":{
16081612
"shape":"RuntimeEnvironmentVariables",
1609-
"documentation":"<p>Environment variables that are available to your running App Runner service. An array of key-value pairs. Keys with a prefix of <code>AWSAPPRUNNER</code> are reserved for system use and aren't valid.</p>"
1613+
"documentation":"<p>Environment variables that are available to your running App Runner service. An array of key-value pairs.</p>"
16101614
},
16111615
"StartCommand":{
16121616
"shape":"StartCommand",
@@ -1615,6 +1619,10 @@
16151619
"Port":{
16161620
"shape":"String",
16171621
"documentation":"<p>The port that your application listens to in the container.</p> <p>Default: <code>8080</code> </p>"
1622+
},
1623+
"RuntimeEnvironmentSecrets":{
1624+
"shape":"RuntimeEnvironmentSecrets",
1625+
"documentation":"<p>An array of key-value pairs representing the secrets and parameters that get referenced to your service as an environment variable. The supported values are either the full Amazon Resource Name (ARN) of the Secrets Manager secret or the full ARN of the parameter in the Amazon Web Services Systems Manager Parameter Store.</p> <note> <ul> <li> <p> If the Amazon Web Services Systems Manager Parameter Store parameter exists in the same Amazon Web Services Region as the service that you're launching, you can use either the full ARN or name of the secret. If the parameter exists in a different Region, then the full ARN must be specified. </p> </li> <li> <p> Currently, cross account referencing of Amazon Web Services Systems Manager Parameter Store parameter is not supported. </p> </li> </ul> </note>"
16181626
}
16191627
},
16201628
"documentation":"<p>Describes the configuration that App Runner uses to run an App Runner service using an image pulled from a source image repository.</p>"
@@ -2229,6 +2237,23 @@
22292237
"RUBY_31"
22302238
]
22312239
},
2240+
"RuntimeEnvironmentSecrets":{
2241+
"type":"map",
2242+
"key":{"shape":"RuntimeEnvironmentSecretsName"},
2243+
"value":{"shape":"RuntimeEnvironmentSecretsValue"}
2244+
},
2245+
"RuntimeEnvironmentSecretsName":{
2246+
"type":"string",
2247+
"max":2048,
2248+
"min":1,
2249+
"sensitive":true
2250+
},
2251+
"RuntimeEnvironmentSecretsValue":{
2252+
"type":"string",
2253+
"max":2048,
2254+
"min":1,
2255+
"sensitive":true
2256+
},
22322257
"RuntimeEnvironmentVariables":{
22332258
"type":"map",
22342259
"key":{"shape":"RuntimeEnvironmentVariablesKey"},

0 commit comments

Comments
 (0)