NuGet · #2626 most downloaded on NuGet

Kralizek.Extensions.Configuration.AWSSecretsManager

2.0.012M downloads/moKralizek/AWSSecretsManagerConfigurationExtensions ↗New releases in your daily digest, changelog included.

AWS Secrets Manager configuration provider implementation for Microsoft.Extensions.Configuration.

Last release 4 months ago
25 May 2026
Ships unpredictably
gaps range from 3 weeks to 3.5 years
Some releases are documented
notes for 4 of 14 stable releases
Nothing withdrawn
no release was ever pulled
8 years old
17 releases · first in 2018

Release timeline

17 releases since 2018

Releases

2.0.025 May 2026
Full 2.0 breaking refresh by @Copilot in #104
What's Changed

Full 2.0 breaking refresh by @Copilot in #104

Split AddSecretsManager into three explicit modes: Discovery, KnownSecret, KnownSecrets by @Copilot in #112

feat: add OpenTelemetry distributed tracing and metrics by @Copilot in #113

Add behavioral test coverage for issues #103, #101, #86, #82, #65, #20 by @Copilot in #114

docs: add governance templates and contribution guidelines by @Kralizek in #115

Rework KeyGenerator to use SecretKeyGeneratorContext across all provider modes by @Copilot in #122

Add built-in key mapping options (SecretKeyMappingOptions) by @Copilot in #123

Rework sample directory for 2.0 APIs by @Copilot in #125

New Contributors

@Copilot made their first contribution in #104

Full Changelog: v1.7.0...v2.0.0

Additional notes

Added

Initial release of Kralizek.Extensions.Configuration.AWSSecretsManager (v2.0.0+)
Three explicit loading modes:
- AddSecretsManagerDiscovery: List all secrets via ListSecrets + batch-fetch values
- AddSecretsManagerKnownSecrets: Batch-fetch a fixed set of known secrets
- AddSecretsManagerKnownSecret: Fetch exactly one secret
Configuration options:
- SecretsManagerDiscoveryOptions: Filtering by prefix, name pattern, tags, and custom client-side filters
- SecretsManagerKnownSecretsOptions: Batch operation configuration and duplicate key handling strategies
- SecretsManagerKnownSecretOptions: Single-secret fetch with optional transformation
Duplicate key handling: Strategies for resolving conflicting secret keys (Replace, Skip, ThrowOnDuplicate)
Structured logging: Comprehensive logging via ILogger with semantic events in SecretsManagerLogging
OpenTelemetry integration: Activity tracing and metrics via SecretsManagerTelemetry
Exception handling: MissingSecretValueException for missing or invalid secrets
AWS region support: Configurable RegionEndpoint and AWSOptions
Credential flexibility: Support for IAM roles, profiles, and explicit credentials
Sample applications:
- Sample1–Sample8: Individual demonstrations of Discovery, KnownSecrets, and KnownSecret modes
- SampleWeb: ASP.NET Core integration example
Telemetry capabilities:
- Activity tracing for AWS API calls
- Metrics for call counts, durations, and error rates
- Integration with Application Insights and other observability platforms

Technical Details

Target frameworks:
- netstandard2.0 (for broad compatibility)
- net10.0 (modern .NET runtime)
Dependencies:
- Microsoft.Extensions.Configuration
- AWSSDK.SecretsManager
- Microsoft.Extensions.Logging.Abstractions
API efficiency:
- Discovery mode: Uses ListSecrets + BatchGetSecretValue for optimized multi-secret scenarios
- KnownSecrets mode: Single batch call for fixed secret sets
- KnownSecret mode: Single direct call for individual secrets
AWS API best practices: Respects rate limits and implements exponential backoff (via SDK)

Open source →

1.7.08 Nov 2022

Update README to include EKS by @OliverRC in #69

What's Changed

Update README to include EKS by @OliverRC in #69
Bumped Newtonsoft.Json to 13.0.1 #72
Allow customization of GetSecretValueRequest by @avalara-stephen-hickey #77

New Contributors

@OliverRC made their first contribution in #69
@avalara-stephen-hickey made their first contribution in #77

Full Changelog: v1.6.3...v1.7.0

Open source →

1.6.38 Sept 2021

Added XML comments to properties of SecretsManagerConfigurationProviderOptions #60

Added XML comments to properties of SecretsManagerConfigurationProviderOptions #60

Thanks @devklick for the contribution!

Open source →

1.6.219 May 2021

Fill the name of the SecretListEntry from the GetSecretValueResponse when options.AcceptedSecretArns is specified #54

Fill the name of the SecretListEntry from the GetSecretValueResponse when options.AcceptedSecretArns is specified #54

Thanks to @ycherkes for fixing this issue.

Open source →