
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
dotenv-into-aws-secrets-manager
Advanced tools
Export .env keys and values into AWS Secrets Manager with a single command. This assumes you have an AWS account with your credentials stored locally in your root directory i.e. ~/.aws
This package requires a local installation of Node.js and AWS CLI. Make sure you configure your AWS account with the CLI. Link to AWS docs
To install this package in your Node.js project, run the following command:
npm i dotenv-into-aws-secrets-manager
Before using the package, please place in your project root directory a '.env' file that you would like to export into AWS Secrets Manager. The following is an exmaple of the contents of .env:
API_KEY=MadeUPapikEY
API_SECRET=madeUPaPisEcRet
Add the following line to .gitignore. DO NOT forget this step if you want to keep your environment variables safe.
# generated JSON file with environment variables
envVariables.json
You can use the package directly in your command line to perform CRUD operations on your Secrets.
Create a new Secret in your AWS account's Secrets Manager with given secret name and description.
npx dotenv-into-aws-secrets-manager create YourSecretName "Secret Description"
Get key-value pairs stored in your Secret with secret name.
npx dotenv-into-aws-secrets-manager get YourSecretName
Update key-value pairs in your Secret (with the contents of .env) with secret name.
npx dotenv-into-aws-secrets-manager update YourSecretName
Delete a Secret and all of its' contents with secret name.
npx dotenv-into-aws-secrets-manager delete YourSecretName
Once you execute the command, two things will happen:
(1) An envVariables.json file with your keys and values will be generated.
(2) Your keys and values will be stored inside AWS Secrets Manager in your AWS account.
Note: Please be sure to add your generated envVariables.json file in your .gitignore file.

FAQs
Export .env keys and values into AWS Secrets Manager.
We found that dotenv-into-aws-secrets-manager demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.