Environment variables not updated about serverless-application-model HOT 5 CLOSED

I got you. Thank you.

from serverless-application-model.

As per the CFN service docs for resolving Secrets Manager secrets, you need to do a change to the resource that is referring to the secret manager secrets, so CFN detect the update, and update this resource

see the below paragraph as I quoted from the CFN docs

Updating a secret in Secrets Manager doesn't automatically update the secret in CloudFormation. In order for CloudFormation to update a secretsmanager dynamic reference, you must perform a stack update that updates the resource containing the dynamic reference, either by updating the resource property that contains the secretsmanager dynamic reference, or updating another of the resource's properties.
For example, suppose in your template you specify the MasterPassword property of an AWS::RDS::DBInstance resource to be a secretsmanager dynamic reference, and then create a stack from the template. You later update that secret's value in Secrets Manager, but don't update the AWS::RDS::DBInstance resource in your template. In this case, even if you perform a stack update, the secret value in the MasterPassword property isn't updated, and remains the previous secret value.

My suggestion is to add a dummy environment variable to your lambda function, and to change its value every time you have an update in your secrets, so when you trigger a stack deployment, the lambda function will get updated, and retrieve the new secret values.

ExportFunction:
    Type: AWS::Serverless::Function
    Properties:
      FunctionName: MyFunction
      PackageType: Image
      Architectures:
      - x86_64
      MemorySize: 2048
      Timeout: 60
      Environment:
        Variables:
          DUMMY: 1
          USER:   !Sub '{{resolve:secretsmanager:mysecret:SecretString:user}}'
          PASSWORD:   !Sub '{{resolve:secretsmanager:mysecret:SecretString:password}}'

I tested this approach, and was working fine for me. I tried to change the Secrets values, and then increment the DUMMY environment variable value, and then deploy the updated template, and found the function environment variables got update with the new values.

from serverless-application-model.

Please let us know if this suggestion helps to solve your problem.

from serverless-application-model.

I will close this issue. Please open a new one if you have any more questions.

from serverless-application-model.

This issue is now closed. Comments on closed issues are hard for our team to see.
If you need more assistance, please either tag a team member or open a new issue that references this one.

from serverless-application-model.