{"_id":"@varlock/aws-secrets-plugin","_rev":"13-fd7b2f16c7c1bd2bcc30d48325115444","name":"@varlock/aws-secrets-plugin","dist-tags":{"latest":"1.2.3"},"versions":{"0.0.0":{"name":"@varlock/aws-secrets-plugin","version":"0.0.0","author":{"name":"dmno-dev"},"license":"MIT","_id":"@varlock/aws-secrets-plugin@0.0.0","maintainers":[{"name":"philmillman","email":"philmillman@gmail.com"},{"name":"theo","email":"theozero@gmail.com"}],"homepage":"https://github.com/dmno-dev/varlock#readme","bugs":{"url":"https://github.com/dmno-dev/varlock/issues"},"dist":{"shasum":"3a99fab3e112ffc14a08d68b56941cba1e3f9afc","tarball":"https://registry.npmjs.org/@varlock/aws-secrets-plugin/-/aws-secrets-plugin-0.0.0.tgz","fileCount":1,"integrity":"sha512-1E0jZTo8CSZb91LWo1gbAO9xWuXADMoC/1NjxlQ4yM4Wq5v9VR/Be8DncDgWQwAA0DOXL/FZcfRajvgJtS31nQ==","signatures":[{"sig":"MEQCIEQbbGO+F1ZhOYnkg5G/R/B/SIHKw9gvWaKqtGmR6HDqAiAJw6iaTGct5xsfbbS6VuqJS0dceqvaEPdEqtKh7r6TrA==","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":377},"_from":"file:varlock-aws-secrets-plugin-0.0.0.tgz","_npmUser":{"name":"theo","email":"theozero@gmail.com"},"_resolved":"/private/var/folders/tb/sqfkxrfs1mz2n2n_c2rpsthc0000gn/T/68f3c3ab6860ccba3eb02ef4edeee6b3/varlock-aws-secrets-plugin-0.0.0.tgz","_integrity":"sha512-1E0jZTo8CSZb91LWo1gbAO9xWuXADMoC/1NjxlQ4yM4Wq5v9VR/Be8DncDgWQwAA0DOXL/FZcfRajvgJtS31nQ==","repository":{"url":"git+https://github.com/dmno-dev/varlock.git","type":"git","directory":"packages/plugins/aws-secrets"},"_npmVersion":"11.6.2","description":"Varlock plugin to pull data from AWS - supports both Secrets Manager and Parameter Store","directories":{},"_nodeVersion":"25.1.0","_hasShrinkwrap":false,"_npmOperationalInternal":{"tmp":"tmp/aws-secrets-plugin_0.0.0_1770767612375_0.43805880347712045","host":"s3://npm-registry-packages-npm-production"}},"0.0.1":{"name":"@varlock/aws-secrets-plugin","version":"0.0.1","keywords":["varlock","plugin","varlock-plugin","aws","secrets-manager","parameter-store","ssm","env",".env","dotenv","environment variables","env vars","config"],"author":{"name":"dmno-dev"},"license":"MIT","_id":"@varlock/aws-secrets-plugin@0.0.1","maintainers":[{"name":"philmillman","email":"philmillman@gmail.com"},{"name":"theo","email":"theozero@gmail.com"}],"homepage":"https://varlock.dev/plugins/aws-secrets/","bugs":{"url":"https://github.com/dmno-dev/varlock/issues"},"dist":{"shasum":"bfc10a2d002a33070a68412ea863fa8abddc82b6","tarball":"https://registry.npmjs.org/@varlock/aws-secrets-plugin/-/aws-secrets-plugin-0.0.1.tgz","fileCount":6,"integrity":"sha512-TpOk1n2khptbcJOcM4i3yMadg/RTuwohmw8FB9hQudDZlCL4BwWbI70vCTxWlOjsloBTXz3LmTLs9QIjpCUgeA==","signatures":[{"sig":"MEQCIBHOxCGOY38MnoXYntOD6AvMjarq/U2tIMIdCZB+eesTAiBTGM69xBLRHaFLsmqGw60Vreccwua8W8hgM0SDWnC95A==","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"attestations":{"url":"https://registry.npmjs.org/-/npm/v1/attestations/@varlock%2faws-secrets-plugin@0.0.1","provenance":{"predicateType":"https://slsa.dev/provenance/v1"}},"unpackedSize":2888218},"main":"dist/index.js","type":"module","_from":"file:varlock-aws-secrets-plugin-0.0.1.tgz","types":"dist/index.d.ts","engines":{"node":">=22"},"exports":{"./plugin":"./dist/plugin.js"},"scripts":{"dev":"tsup --watch","test":"vitest","build":"tsup"},"_npmUser":{"name":"GitHub Actions","email":"npm-oidc-no-reply@github.com","trustedPublisher":{"id":"github","oidcConfigId":"oidc:ba51c84b-e990-4e53-981f-1489aca80db6"}},"_resolved":"/tmp/d6a122c724dd1f72924262876b84bb51/varlock-aws-secrets-plugin-0.0.1.tgz","_integrity":"sha512-TpOk1n2khptbcJOcM4i3yMadg/RTuwohmw8FB9hQudDZlCL4BwWbI70vCTxWlOjsloBTXz3LmTLs9QIjpCUgeA==","repository":{"url":"git+https://github.com/dmno-dev/varlock.git","type":"git","directory":"packages/plugins/aws-secrets"},"_npmVersion":"11.10.0","description":"Varlock plugin to load secrets from AWS (supports both Secrets Manager and Systems Manager Parameter Store)","directories":{},"_nodeVersion":"22.22.0","_hasShrinkwrap":false,"devDependencies":{"tsup":"^8.5.1","vitest":"^4.0.18","varlock":"^0.2.2","@types/node":"25.2.3","@env-spec/utils":"^0.0.0","@aws-sdk/client-ssm":"^3.700.0","@aws-sdk/credential-providers":"^3.700.0","@aws-sdk/client-secrets-manager":"^3.700.0"},"peerDependencies":{"varlock":"^0.2.2"},"_npmOperationalInternal":{"tmp":"tmp/aws-secrets-plugin_0.0.1_1770921694998_0.7093619202869532","host":"s3://npm-registry-packages-npm-production"}},"0.0.2":{"name":"@varlock/aws-secrets-plugin","version":"0.0.2","keywords":["varlock","plugin","varlock-plugin","aws","secrets-manager","parameter-store","ssm","env",".env","dotenv","environment variables","env vars","config"],"author":{"name":"dmno-dev"},"license":"MIT","_id":"@varlock/aws-secrets-plugin@0.0.2","maintainers":[{"name":"philmillman","email":"philmillman@gmail.com"},{"name":"theo","email":"theozero@gmail.com"}],"homepage":"https://varlock.dev/plugins/aws-secrets/","bugs":{"url":"https://github.com/dmno-dev/varlock/issues"},"dist":{"shasum":"abaa4094bec761722a96997289139ccbc39de433","tarball":"https://registry.npmjs.org/@varlock/aws-secrets-plugin/-/aws-secrets-plugin-0.0.2.tgz","fileCount":5,"integrity":"sha512-otN8ztFrWqyoVJT1baPcJnnlKbcJ7uN3+GEc6s+7Gzuu7JqHLFRfmB25tIM8mm4wqFr17fRMGxSwiKz4NtJitg==","signatures":[{"sig":"MEQCIHPtMdDQYbhFSPTrJVvjEC6AUz5UnkAvlr/vMVfm7Ra2AiAB/WbafWcFveSjZsIx/fCXyM1xDYNpz7xGwBabGsm71Q==","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"attestations":{"url":"https://registry.npmjs.org/-/npm/v1/attestations/@varlock%2faws-secrets-plugin@0.0.2","provenance":{"predicateType":"https://slsa.dev/provenance/v1"}},"unpackedSize":2899174},"main":"dist/index.js","type":"module","types":"dist/index.d.ts","engines":{"node":">=22"},"exports":{"./plugin":"./dist/plugin.js"},"gitHead":"5bb72aa5e01bf2086b18ef5b1a51aa83db8c6307","scripts":{"dev":"tsup --watch","test":"vitest","build":"tsup"},"_npmUser":{"name":"GitHub Actions","email":"npm-oidc-no-reply@github.com","trustedPublisher":{"id":"github","oidcConfigId":"oidc:ba51c84b-e990-4e53-981f-1489aca80db6"}},"repository":{"url":"git+https://github.com/dmno-dev/varlock.git","type":"git","directory":"packages/plugins/aws-secrets"},"_npmVersion":"11.11.0","description":"Varlock plugin to load secrets from AWS (supports both Secrets Manager and Systems Manager Parameter Store)","directories":{},"_nodeVersion":"22.22.0","_hasShrinkwrap":false,"devDependencies":{"tsup":"catalog:","vitest":"catalog:","varlock":"workspace:^","@types/node":"catalog:","@env-spec/utils":"workspace:^","@aws-sdk/client-ssm":"^3.700.0","@aws-sdk/credential-providers":"^3.700.0","@aws-sdk/client-secrets-manager":"^3.700.0"},"peerDependencies":{"varlock":"workspace:^"},"_npmOperationalInternal":{"tmp":"tmp/aws-secrets-plugin_0.0.2_1772178524664_0.496003798646488","host":"s3://npm-registry-packages-npm-production"}},"0.0.3":{"name":"@varlock/aws-secrets-plugin","version":"0.0.3","keywords":["varlock","plugin","varlock-plugin","aws","secrets-manager","parameter-store","ssm","env",".env","dotenv","environment variables","env vars","config"],"author":{"name":"dmno-dev"},"license":"MIT","_id":"@varlock/aws-secrets-plugin@0.0.3","maintainers":[{"name":"philmillman","email":"philmillman@gmail.com"},{"name":"theo","email":"theozero@gmail.com"}],"homepage":"https://varlock.dev/plugins/aws-secrets/","bugs":{"url":"https://github.com/dmno-dev/varlock/issues"},"dist":{"shasum":"7ff41efdb5aa88f88e3c638f74dce2e944654ed0","tarball":"https://registry.npmjs.org/@varlock/aws-secrets-plugin/-/aws-secrets-plugin-0.0.3.tgz","fileCount":5,"integrity":"sha512-Fj5rn4ff3XbiV83Xf7fViUsu3agr5rZ7rT63YCONrbIoYdlyrbxsavVHZDY5JttLx214z7nmsUKVfXO/0NyYYQ==","signatures":[{"sig":"MEYCIQCdA4BLMPwnFO/1JQx7Oj+Uuf/FtvBlurgasVnnf9fBqwIhAKgL6jINieDAkPGkZbPUAjLlLHzWgYF99/1Y8wStQ+a9","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"attestations":{"url":"https://registry.npmjs.org/-/npm/v1/attestations/@varlock%2faws-secrets-plugin@0.0.3","provenance":{"predicateType":"https://slsa.dev/provenance/v1"}},"unpackedSize":2899162},"main":"dist/index.js","type":"module","types":"dist/index.d.ts","engines":{"node":">=22"},"exports":{"./plugin":"./dist/plugin.js"},"gitHead":"93e32d37c8ca99214a39e931c232aa2cb22a6ddd","scripts":{"dev":"tsup --watch","test":"vitest","build":"tsup"},"_npmUser":{"name":"GitHub Actions","email":"npm-oidc-no-reply@github.com","trustedPublisher":{"id":"github","oidcConfigId":"oidc:ba51c84b-e990-4e53-981f-1489aca80db6"}},"repository":{"url":"git+https://github.com/dmno-dev/varlock.git","type":"git","directory":"packages/plugins/aws-secrets"},"_npmVersion":"11.11.0","description":"Varlock plugin to load secrets from AWS (supports both Secrets Manager and Systems Manager Parameter Store)","directories":{},"_nodeVersion":"22.22.0","_hasShrinkwrap":false,"devDependencies":{"tsup":"^8.5.1","vitest":"^4.0.18","varlock":"^0.4.0","@types/node":"25.3.2","@env-spec/utils":"^0.0.0","@aws-sdk/client-ssm":"^3.700.0","@aws-sdk/credential-providers":"^3.700.0","@aws-sdk/client-secrets-manager":"^3.700.0"},"peerDependencies":{"varlock":"^0.4.0"},"_npmOperationalInternal":{"tmp":"tmp/aws-secrets-plugin_0.0.3_1773107047226_0.09922804684428765","host":"s3://npm-registry-packages-npm-production"}},"0.0.4":{"name":"@varlock/aws-secrets-plugin","version":"0.0.4","keywords":["varlock","plugin","varlock-plugin","aws","secrets-manager","parameter-store","ssm","env",".env","dotenv","environment variables","env vars","config"],"author":{"name":"dmno-dev"},"license":"MIT","_id":"@varlock/aws-secrets-plugin@0.0.4","maintainers":[{"name":"philmillman","email":"philmillman@gmail.com"},{"name":"theo","email":"theozero@gmail.com"}],"homepage":"https://varlock.dev/plugins/aws-secrets/","bugs":{"url":"https://github.com/dmno-dev/varlock/issues"},"dist":{"shasum":"7715fe6978a890c276d127bce1a478c870f9a6ab","tarball":"https://registry.npmjs.org/@varlock/aws-secrets-plugin/-/aws-secrets-plugin-0.0.4.tgz","fileCount":5,"integrity":"sha512-OuX2ECwVuWaSaiFCTLNGq2VWxyXW8R8qDcckHfnT02hA0z/GDW+YdWw49hclkY0L3MIYc/46uw3AFHmBl3y4Yg==","signatures":[{"sig":"MEUCIQDT1rQwmZc6XtxgTI+miapUArrFMkMq0yto6hsrjKdl9wIgLkIW+ZvSGfgYZiZ7lUANujd5AJOsW7h8Mn2XIJvtkw4=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"attestations":{"url":"https://registry.npmjs.org/-/npm/v1/attestations/@varlock%2faws-secrets-plugin@0.0.4","provenance":{"predicateType":"https://slsa.dev/provenance/v1"}},"unpackedSize":2902005},"main":"dist/index.js","type":"module","types":"dist/index.d.ts","engines":{"node":">=22"},"exports":{"./plugin":"./dist/plugin.js"},"gitHead":"9ca3a770d82762e4793f8dceb31d296c4ded8588","scripts":{"dev":"tsup --watch","test":"vitest","build":"tsup"},"_npmUser":{"name":"GitHub Actions","email":"npm-oidc-no-reply@github.com","trustedPublisher":{"id":"github","oidcConfigId":"oidc:ba51c84b-e990-4e53-981f-1489aca80db6"}},"repository":{"url":"git+https://github.com/dmno-dev/varlock.git","type":"git","directory":"packages/plugins/aws-secrets"},"_npmVersion":"11.11.1","description":"Varlock plugin to load secrets from AWS (supports both Secrets Manager and Systems Manager Parameter Store)","directories":{},"_nodeVersion":"22.22.1","_hasShrinkwrap":false,"devDependencies":{"tsup":"^8.5.1","vitest":"^4.0.18","varlock":"^0.5.0","@types/node":"25.3.2","@env-spec/utils":"^0.0.0","@aws-sdk/client-ssm":"^3.700.0","@aws-sdk/credential-providers":"^3.700.0","@aws-sdk/client-secrets-manager":"^3.700.0"},"peerDependencies":{"varlock":"^0.5.0"},"_npmOperationalInternal":{"tmp":"tmp/aws-secrets-plugin_0.0.4_1773453789953_0.07807165684673478","host":"s3://npm-registry-packages-npm-production"}},"0.0.5":{"name":"@varlock/aws-secrets-plugin","version":"0.0.5","keywords":["varlock","plugin","varlock-plugin","aws","secrets-manager","parameter-store","ssm","env",".env","dotenv","environment variables","env vars","config"],"author":{"name":"dmno-dev"},"license":"MIT","_id":"@varlock/aws-secrets-plugin@0.0.5","maintainers":[{"name":"philmillman","email":"philmillman@gmail.com"},{"name":"theo","email":"theozero@gmail.com"}],"homepage":"https://varlock.dev/plugins/aws-secrets/","bugs":{"url":"https://github.com/dmno-dev/varlock/issues"},"dist":{"shasum":"32c55edc8e23a2378adcb1300ddd0bf3fb49cd16","tarball":"https://registry.npmjs.org/@varlock/aws-secrets-plugin/-/aws-secrets-plugin-0.0.5.tgz","fileCount":5,"integrity":"sha512-B8au3U/UBtu36/DF6CFslWX5HDP+15e7F6gHOPj28a8MfOSUgJEvUhpM9f/8FMZme1/xc0+TxV2uQq3kiseuhQ==","signatures":[{"sig":"MEUCIQCd8vO6Q/fHvlcNumIlfti4L1zAEMx5y7yeg3RTpkc73wIgIfnHnf0ynrneRRnLlESCMjJcbcar65p47EK5swJimPI=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"attestations":{"url":"https://registry.npmjs.org/-/npm/v1/attestations/@varlock%2faws-secrets-plugin@0.0.5","provenance":{"predicateType":"https://slsa.dev/provenance/v1"}},"unpackedSize":2931598},"main":"dist/index.js","type":"module","types":"dist/index.d.ts","engines":{"node":">=22"},"exports":{"./plugin":"./dist/plugin.cjs"},"gitHead":"6cd925c6b56e646c30d3f95af7a10087a5ef9b4a","scripts":{"dev":"tsup --watch","test":"vitest","build":"tsup"},"_npmUser":{"name":"GitHub Actions","email":"npm-oidc-no-reply@github.com","trustedPublisher":{"id":"github","oidcConfigId":"oidc:ba51c84b-e990-4e53-981f-1489aca80db6"}},"repository":{"url":"git+https://github.com/dmno-dev/varlock.git","type":"git","directory":"packages/plugins/aws-secrets"},"_npmVersion":"11.12.0","description":"Varlock plugin to load secrets from AWS (supports both Secrets Manager and Systems Manager Parameter Store)","directories":{},"_nodeVersion":"22.22.1","_hasShrinkwrap":false,"devDependencies":{"tsup":"^8.5.1","vitest":"^4.0.18","varlock":"^0.6.0","@types/node":"25.3.2","@env-spec/utils":"^0.0.0","@aws-sdk/client-ssm":"^3.700.0","@aws-sdk/credential-providers":"^3.700.0","@aws-sdk/client-secrets-manager":"^3.700.0"},"peerDependencies":{"varlock":"^0.6.0"},"_npmOperationalInternal":{"tmp":"tmp/aws-secrets-plugin_0.0.5_1773906847370_0.9199605785848444","host":"s3://npm-registry-packages-npm-production"}},"0.0.6":{"name":"@varlock/aws-secrets-plugin","version":"0.0.6","keywords":["varlock","plugin","varlock-plugin","aws","secrets-manager","parameter-store","ssm","env",".env","dotenv","environment variables","env vars","config"],"author":{"name":"dmno-dev"},"license":"MIT","_id":"@varlock/aws-secrets-plugin@0.0.6","maintainers":[{"name":"philmillman","email":"philmillman@gmail.com"},{"name":"theo","email":"theozero@gmail.com"}],"homepage":"https://varlock.dev/plugins/aws-secrets/","bugs":{"url":"https://github.com/dmno-dev/varlock/issues"},"dist":{"shasum":"b676c2dd7099ca0fc87ae7dbb5e72cdb0f9b4929","tarball":"https://registry.npmjs.org/@varlock/aws-secrets-plugin/-/aws-secrets-plugin-0.0.6.tgz","fileCount":5,"integrity":"sha512-usmG5CHwXWlZuEEmgEuCU3VDFBE2sywnb5bdhQaiv+sQAmnx4EV5WB1PDaMdPSrfWpfaLwrvV5KyVQsb+1Arkw==","signatures":[{"sig":"MEUCIQDdRAG79hLZvUO84WRjtqLpsHHHNkfvKmPNOmTljqjoRQIgJz0IFf96ES2Fmhfzdw8o1RihE0pifeFo7D9vVBde8Ac=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"attestations":{"url":"https://registry.npmjs.org/-/npm/v1/attestations/@varlock%2faws-secrets-plugin@0.0.6","provenance":{"predicateType":"https://slsa.dev/provenance/v1"}},"unpackedSize":2931790},"main":"dist/index.js","type":"module","types":"dist/index.d.ts","engines":{"node":">=22"},"exports":{"./plugin":"./dist/plugin.cjs"},"gitHead":"47c28f36810bccd1c84bcd1f96b74a6a884f625e","scripts":{"dev":"tsup --watch","test":"vitest","build":"tsup"},"_npmUser":{"name":"GitHub Actions","email":"npm-oidc-no-reply@github.com","trustedPublisher":{"id":"github","oidcConfigId":"oidc:ba51c84b-e990-4e53-981f-1489aca80db6"}},"repository":{"url":"git+https://github.com/dmno-dev/varlock.git","type":"git","directory":"packages/plugins/aws-secrets"},"_npmVersion":"11.12.1","description":"Varlock plugin to load secrets from AWS (supports both Secrets Manager and Systems Manager Parameter Store)","directories":{},"_nodeVersion":"22.22.1","_hasShrinkwrap":false,"devDependencies":{"tsup":"^8.5.1","vitest":"^4.0.18","varlock":"^0.7.0","@types/node":"25.3.2","@env-spec/utils":"^0.0.0","@aws-sdk/client-ssm":"^3.700.0","@aws-sdk/credential-providers":"^3.700.0","@aws-sdk/client-secrets-manager":"^3.700.0"},"peerDependencies":{"varlock":"^0.7.0"},"_npmOperationalInternal":{"tmp":"tmp/aws-secrets-plugin_0.0.6_1774981005070_0.5512314430041971","host":"s3://npm-registry-packages-npm-production"}},"1.0.0":{"name":"@varlock/aws-secrets-plugin","version":"1.0.0","keywords":["varlock","plugin","varlock-plugin","aws","secrets-manager","parameter-store","ssm","env",".env","dotenv","environment variables","env vars","config"],"author":{"name":"dmno-dev"},"license":"MIT","_id":"@varlock/aws-secrets-plugin@1.0.0","maintainers":[{"name":"philmillman","email":"philmillman@gmail.com"},{"name":"theo","email":"theozero@gmail.com"}],"homepage":"https://varlock.dev/plugins/aws-secrets/","bugs":{"url":"https://github.com/dmno-dev/varlock/issues"},"dist":{"shasum":"94034be078fd1a1823b3ac3bb73bc679a5e962a9","tarball":"https://registry.npmjs.org/@varlock/aws-secrets-plugin/-/aws-secrets-plugin-1.0.0.tgz","fileCount":5,"integrity":"sha512-R4+aDm9IjtxPB4N/oIvnnsnfNgOW7xLVGNg6jkInoIwoEp+kWEtvYEhHHnxGeAgKDwr94b+IqajXqX+NsO/WrQ==","signatures":[{"sig":"MEQCICg9wsyKej0iwd1a9WJwa7EROA/DKCisg8dlM2nVqBKdAiA4wzqil8wdXWd0e02WO++FpbZULtJKCFAGD15rztBacQ==","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"attestations":{"url":"https://registry.npmjs.org/-/npm/v1/attestations/@varlock%2faws-secrets-plugin@1.0.0","provenance":{"predicateType":"https://slsa.dev/provenance/v1"}},"unpackedSize":3223363},"main":"dist/index.js","type":"module","_from":"file:/home/runner/work/varlock/varlock/packages/plugins/aws-secrets/varlock-aws-secrets-plugin-1.0.0.tgz","types":"dist/index.d.ts","engines":{"node":">=22"},"exports":{"./plugin":"./dist/plugin.cjs"},"scripts":{"dev":"tsup --watch","test":"vitest","build":"tsup","typecheck":"tsc --noEmit"},"_npmUser":{"name":"GitHub Actions","email":"npm-oidc-no-reply@github.com","trustedPublisher":{"id":"github","oidcConfigId":"oidc:ba51c84b-e990-4e53-981f-1489aca80db6"}},"_resolved":"/home/runner/work/varlock/varlock/packages/plugins/aws-secrets/varlock-aws-secrets-plugin-1.0.0.tgz","_integrity":"sha512-R4+aDm9IjtxPB4N/oIvnnsnfNgOW7xLVGNg6jkInoIwoEp+kWEtvYEhHHnxGeAgKDwr94b+IqajXqX+NsO/WrQ==","repository":{"url":"git+https://github.com/dmno-dev/varlock.git","type":"git","directory":"packages/plugins/aws-secrets"},"_npmVersion":"11.13.0","description":"Varlock plugin to load secrets from AWS (supports both Secrets Manager and Systems Manager Parameter Store)","directories":{},"_nodeVersion":"24.14.1","_hasShrinkwrap":false,"devDependencies":{"tsup":"^8.5.1","vitest":"^4.0.18","varlock":"^1.0.0","@types/node":"25.3.2","@env-spec/utils":"^0.0.0","@aws-sdk/client-ssm":"^3.700.0","@aws-sdk/credential-providers":"^3.700.0","@aws-sdk/client-secrets-manager":"^3.700.0"},"peerDependencies":{"varlock":"^1.0.0"},"_npmOperationalInternal":{"tmp":"tmp/aws-secrets-plugin_1.0.0_1777497460869_0.11134962529354664","host":"s3://npm-registry-packages-npm-production"}},"1.1.0":{"name":"@varlock/aws-secrets-plugin","version":"1.1.0","keywords":["varlock","plugin","varlock-plugin","aws","secrets-manager","parameter-store","ssm","env",".env","dotenv","environment variables","env vars","config"],"author":{"name":"dmno-dev"},"license":"MIT","_id":"@varlock/aws-secrets-plugin@1.1.0","maintainers":[{"name":"philmillman","email":"philmillman@gmail.com"},{"name":"theo","email":"theozero@gmail.com"}],"homepage":"https://varlock.dev/plugins/aws-secrets/","bugs":{"url":"https://github.com/dmno-dev/varlock/issues"},"dist":{"shasum":"2ce8b74795a48851d53be6baa4bbe591f1f7aa28","tarball":"https://registry.npmjs.org/@varlock/aws-secrets-plugin/-/aws-secrets-plugin-1.1.0.tgz","fileCount":5,"integrity":"sha512-hXlpUoMbxnUwYAyfaw4w9Fqligi8XpMdj3LIT7ji8L6SiY8D/zH/8BBWLvkCHMZzlGWffmIIzuaz1NPbsaC82g==","signatures":[{"sig":"MEQCIBTgy3zNBZBrlV38fQHYulIBik3baF4vQCL0YrXFek1OAiBvggRRJO983WfAiy4ZJ1vfSFMFW7DrrmckJD5lM357eQ==","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"attestations":{"url":"https://registry.npmjs.org/-/npm/v1/attestations/@varlock%2faws-secrets-plugin@1.1.0","provenance":{"predicateType":"https://slsa.dev/provenance/v1"}},"unpackedSize":3356519},"main":"dist/index.js","type":"module","_from":"file:/home/runner/work/varlock/varlock/packages/plugins/aws-secrets/varlock-aws-secrets-plugin-1.1.0.tgz","types":"dist/index.d.ts","engines":{"node":">=22"},"exports":{"./plugin":"./dist/plugin.cjs"},"scripts":{"dev":"tsup --watch","test":"vitest","build":"tsup","typecheck":"tsc --noEmit"},"_npmUser":{"name":"GitHub Actions","email":"npm-oidc-no-reply@github.com","trustedPublisher":{"id":"github","oidcConfigId":"oidc:ba51c84b-e990-4e53-981f-1489aca80db6"}},"_resolved":"/home/runner/work/varlock/varlock/packages/plugins/aws-secrets/varlock-aws-secrets-plugin-1.1.0.tgz","_integrity":"sha512-hXlpUoMbxnUwYAyfaw4w9Fqligi8XpMdj3LIT7ji8L6SiY8D/zH/8BBWLvkCHMZzlGWffmIIzuaz1NPbsaC82g==","repository":{"url":"git+https://github.com/dmno-dev/varlock.git","type":"git","directory":"packages/plugins/aws-secrets"},"_npmVersion":"11.13.0","description":"Varlock plugin to load secrets from AWS (supports both Secrets Manager and Systems Manager Parameter Store)","directories":{},"_nodeVersion":"24.14.1","_hasShrinkwrap":false,"devDependencies":{"tsup":"^8.5.1","vitest":"^4.0.18","varlock":"^1.1.0","@types/node":"25.3.2","@env-spec/utils":"^0.0.0","@aws-sdk/client-ssm":"^3.700.0","@aws-sdk/client-sts":"^3.700.0","@aws-sdk/credential-providers":"^3.700.0","@aws-sdk/client-secrets-manager":"^3.700.0"},"peerDependencies":{"varlock":"^1.1.0"},"_npmOperationalInternal":{"tmp":"tmp/aws-secrets-plugin_1.1.0_1778048912315_0.4508836351569636","host":"s3://npm-registry-packages-npm-production"}},"1.2.0":{"name":"@varlock/aws-secrets-plugin","version":"1.2.0","keywords":["varlock","plugin","varlock-plugin","aws","secrets-manager","parameter-store","ssm","env",".env","dotenv","environment variables","env vars","config"],"author":{"name":"dmno-dev"},"license":"MIT","_id":"@varlock/aws-secrets-plugin@1.2.0","maintainers":[{"name":"philmillman","email":"philmillman@gmail.com"},{"name":"theo","email":"theozero@gmail.com"}],"homepage":"https://varlock.dev/plugins/aws-secrets/","bugs":{"url":"https://github.com/dmno-dev/varlock/issues"},"dist":{"shasum":"20f79ae09a7d292e935e19ee0592cd475fbe9336","tarball":"https://registry.npmjs.org/@varlock/aws-secrets-plugin/-/aws-secrets-plugin-1.2.0.tgz","fileCount":5,"integrity":"sha512-TQ9Gn56VwfAPHrd/vTgkSTlkRl/WgHnpqFncYIZEqJ5y/7XQsFcX0VyUuQdFRgxPjudPfGG3aXEzgwDukYPBqw==","signatures":[{"sig":"MEUCIQDjWXyPNjjYBV6HZ3e8bmG6V2Frorx9ZHEGxs1nrG8pcQIgc/7yLPP3JYS4+pLFz7o5Kr6/b9XupZl3ur2lUmijtK4=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"attestations":{"url":"https://registry.npmjs.org/-/npm/v1/attestations/@varlock%2faws-secrets-plugin@1.2.0","provenance":{"predicateType":"https://slsa.dev/provenance/v1"}},"unpackedSize":3363469},"main":"dist/index.js","type":"module","_from":"file:/home/runner/work/varlock/varlock/packages/plugins/aws-secrets/varlock-aws-secrets-plugin-1.2.0.tgz","types":"dist/index.d.ts","engines":{"node":">=22"},"exports":{"./plugin":"./dist/plugin.cjs"},"scripts":{"dev":"tsup --watch","test":"vitest","build":"tsup","typecheck":"tsc --noEmit"},"_npmUser":{"name":"GitHub Actions","email":"npm-oidc-no-reply@github.com","trustedPublisher":{"id":"github","oidcConfigId":"oidc:ba51c84b-e990-4e53-981f-1489aca80db6"}},"_resolved":"/home/runner/work/varlock/varlock/packages/plugins/aws-secrets/varlock-aws-secrets-plugin-1.2.0.tgz","_integrity":"sha512-TQ9Gn56VwfAPHrd/vTgkSTlkRl/WgHnpqFncYIZEqJ5y/7XQsFcX0VyUuQdFRgxPjudPfGG3aXEzgwDukYPBqw==","repository":{"url":"git+https://github.com/dmno-dev/varlock.git","type":"git","directory":"packages/plugins/aws-secrets"},"_npmVersion":"11.16.0","description":"Varlock plugin to load secrets from AWS (supports both Secrets Manager and Systems Manager Parameter Store)","directories":{},"_nodeVersion":"24.16.0","_hasShrinkwrap":false,"devDependencies":{"tsup":"^8.5.1","vitest":"^4.0.18","varlock":"^1.6.0","@types/node":"25.3.2","@env-spec/utils":"^0.0.0","@aws-sdk/client-ssm":"^3.700.0","@aws-sdk/client-sts":"^3.700.0","@aws-sdk/credential-providers":"^3.700.0","@aws-sdk/client-secrets-manager":"^3.700.0"},"peerDependencies":{"varlock":"^1.6.0"},"_npmOperationalInternal":{"tmp":"tmp/aws-secrets-plugin_1.2.0_1781077948312_0.9056286680983223","host":"s3://npm-registry-packages-npm-production"}},"1.2.1":{"name":"@varlock/aws-secrets-plugin","version":"1.2.1","keywords":["varlock","plugin","varlock-plugin","aws","secrets-manager","parameter-store","ssm","env",".env","dotenv","environment variables","env vars","config"],"author":{"name":"dmno-dev"},"license":"MIT","_id":"@varlock/aws-secrets-plugin@1.2.1","maintainers":[{"name":"philmillman","email":"philmillman@gmail.com"},{"name":"theo","email":"theozero@gmail.com"}],"homepage":"https://varlock.dev/plugins/aws-secrets/","bugs":{"url":"https://github.com/dmno-dev/varlock/issues"},"dist":{"shasum":"33f18c335d357ebfa40718f410c3834f200c1f97","tarball":"https://registry.npmjs.org/@varlock/aws-secrets-plugin/-/aws-secrets-plugin-1.2.1.tgz","fileCount":5,"integrity":"sha512-346kNxrhkJeODsRNjHEpQ00S2gt1m0jJIGgSDymkRuu61gFuzzCOPJ5nSOAyFZ72qrp9a7SxUMS0P2c9PTsVUQ==","signatures":[{"sig":"MEUCIHXn5mgD3hBMZWTln09HqQQ6OpNgYILAeIwZrCiRWwWuAiEA1TjiRK4u585T0UmaDVgHA6cBP2ZIEQGHOJ858WCX6ro=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"attestations":{"url":"https://registry.npmjs.org/-/npm/v1/attestations/@varlock%2faws-secrets-plugin@1.2.1","provenance":{"predicateType":"https://slsa.dev/provenance/v1"}},"unpackedSize":3364005},"main":"dist/index.js","type":"module","_from":"file:/home/runner/work/varlock/varlock/packages/plugins/aws-secrets/varlock-aws-secrets-plugin-1.2.1.tgz","types":"dist/index.d.ts","engines":{"node":">=22"},"exports":{"./plugin":"./dist/plugin.cjs"},"scripts":{"dev":"tsup --watch","test":"vitest","build":"tsup","typecheck":"tsc --noEmit"},"_npmUser":{"name":"GitHub Actions","email":"npm-oidc-no-reply@github.com","trustedPublisher":{"id":"github","oidcConfigId":"oidc:ba51c84b-e990-4e53-981f-1489aca80db6"}},"_resolved":"/home/runner/work/varlock/varlock/packages/plugins/aws-secrets/varlock-aws-secrets-plugin-1.2.1.tgz","_integrity":"sha512-346kNxrhkJeODsRNjHEpQ00S2gt1m0jJIGgSDymkRuu61gFuzzCOPJ5nSOAyFZ72qrp9a7SxUMS0P2c9PTsVUQ==","repository":{"url":"git+https://github.com/dmno-dev/varlock.git","type":"git","directory":"packages/plugins/aws-secrets"},"_npmVersion":"11.17.0","description":"Varlock plugin to load secrets from AWS (supports both Secrets Manager and Systems Manager Parameter Store)","directories":{},"_nodeVersion":"24.16.0","_hasShrinkwrap":false,"devDependencies":{"tsup":"^8.5.1","vitest":"^4.0.18","varlock":"^1.6.1","@types/node":"25.3.2","@env-spec/utils":"^0.0.0","@aws-sdk/client-ssm":"^3.700.0","@aws-sdk/client-sts":"^3.700.0","@aws-sdk/credential-providers":"^3.700.0","@aws-sdk/client-secrets-manager":"^3.700.0"},"peerDependencies":{"varlock":"^1.6.1"},"_npmOperationalInternal":{"tmp":"tmp/aws-secrets-plugin_1.2.1_1781214789578_0.015511420640718532","host":"s3://npm-registry-packages-npm-production"}},"1.2.2":{"name":"@varlock/aws-secrets-plugin","version":"1.2.2","keywords":["varlock","plugin","varlock-plugin","aws","secrets-manager","parameter-store","ssm","env",".env","dotenv","environment variables","env vars","config"],"author":{"name":"dmno-dev"},"license":"MIT","_id":"@varlock/aws-secrets-plugin@1.2.2","maintainers":[{"name":"philmillman","email":"philmillman@gmail.com"},{"name":"theo","email":"theozero@gmail.com"}],"homepage":"https://varlock.dev/plugins/aws-secrets/","bugs":{"url":"https://github.com/dmno-dev/varlock/issues"},"dist":{"shasum":"6ace12e8aa37589c73e39765757d4449394e6a1f","tarball":"https://registry.npmjs.org/@varlock/aws-secrets-plugin/-/aws-secrets-plugin-1.2.2.tgz","fileCount":5,"integrity":"sha512-j2nO4KlCtDEs3h7QqulpNvnWo4WQui+2kt4lk2GjnfMcwfZ5ACbZlB4eFVGzb0BZEgVrgzP5IENC9QPOAumksQ==","signatures":[{"sig":"MEUCIDSVZXqsEcZt2R4bYmHYWYdfF72xTvcwQ3iOyOd/BwewAiEAhpBfghabd+O9c3R6faBvUnQSmVzz2YGXxuzE8z2uYHQ=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"attestations":{"url":"https://registry.npmjs.org/-/npm/v1/attestations/@varlock%2faws-secrets-plugin@1.2.2","provenance":{"predicateType":"https://slsa.dev/provenance/v1"}},"unpackedSize":3367968},"main":"dist/index.js","type":"module","_from":"file:/home/runner/work/varlock/varlock/packages/plugins/aws-secrets/varlock-aws-secrets-plugin-1.2.2.tgz","types":"dist/index.d.ts","engines":{"node":">=22"},"exports":{"./plugin":"./dist/plugin.cjs"},"scripts":{"dev":"tsup --watch","test":"vitest","build":"tsup","typecheck":"tsc --noEmit"},"_npmUser":{"name":"GitHub Actions","email":"npm-oidc-no-reply@github.com","trustedPublisher":{"id":"github","oidcConfigId":"oidc:ba51c84b-e990-4e53-981f-1489aca80db6"}},"_resolved":"/home/runner/work/varlock/varlock/packages/plugins/aws-secrets/varlock-aws-secrets-plugin-1.2.2.tgz","_integrity":"sha512-j2nO4KlCtDEs3h7QqulpNvnWo4WQui+2kt4lk2GjnfMcwfZ5ACbZlB4eFVGzb0BZEgVrgzP5IENC9QPOAumksQ==","repository":{"url":"git+https://github.com/dmno-dev/varlock.git","type":"git","directory":"packages/plugins/aws-secrets"},"_npmVersion":"11.17.0","description":"Varlock plugin to load secrets from AWS (supports both Secrets Manager and Systems Manager Parameter Store)","directories":{},"_nodeVersion":"24.16.0","_hasShrinkwrap":false,"devDependencies":{"tsup":"^8.5.1","vitest":"^4.0.18","varlock":"^1.8.0","@types/node":"25.3.2","@env-spec/utils":"^0.0.0","@aws-sdk/client-ssm":"^3.700.0","@aws-sdk/client-sts":"^3.700.0","@aws-sdk/credential-providers":"^3.700.0","@aws-sdk/client-secrets-manager":"^3.700.0"},"peerDependencies":{"varlock":"^1.8.0"},"_npmOperationalInternal":{"tmp":"tmp/aws-secrets-plugin_1.2.2_1782284249897_0.6196097424249625","host":"s3://npm-registry-packages-npm-production"}},"1.2.3":{"name":"@varlock/aws-secrets-plugin","description":"Varlock plugin to load secrets from AWS (supports both Secrets Manager and Systems Manager Parameter Store)","version":"1.2.3","type":"module","homepage":"https://varlock.dev/plugins/aws-secrets/","bugs":{"url":"https://github.com/dmno-dev/varlock/issues"},"repository":{"type":"git","url":"git+https://github.com/dmno-dev/varlock.git","directory":"packages/plugins/aws-secrets"},"exports":{"./plugin":"./dist/plugin.cjs"},"scripts":{"dev":"tsdown --watch","build":"tsdown","test":"vitest","typecheck":"tsc --noEmit"},"keywords":["varlock","plugin","varlock-plugin","aws","secrets-manager","parameter-store","ssm","env",".env","dotenv","environment variables","env vars","config"],"author":{"name":"dmno-dev"},"license":"MIT","engines":{"node":">=22"},"peerDependencies":{"varlock":"^1.17.1"},"devDependencies":{"@aws-sdk/client-secrets-manager":"^3.700.0","@aws-sdk/client-ssm":"^3.700.0","@aws-sdk/client-sts":"^3.700.0","@aws-sdk/credential-providers":"^3.700.0","@env-spec/utils":"^0.0.0","@types/node":"25.3.2","tsdown":"^0.22.14","varlock":"^1.17.1","vitest":"^4.0.18"},"_id":"@varlock/aws-secrets-plugin@1.2.3","_integrity":"sha512-pVAorcijo1ksp26cNMzx2/F6tV58CRkfSQLfhbZp3Kjw4S2FIxPucb1Qobv3CJdXINgbeAacq/4kGP1Htmiq4A==","_resolved":"/home/runner/work/varlock/varlock/packages/plugins/aws-secrets/varlock-aws-secrets-plugin-1.2.3.tgz","_from":"file:/home/runner/work/varlock/varlock/packages/plugins/aws-secrets/varlock-aws-secrets-plugin-1.2.3.tgz","_nodeVersion":"24.19.0","_npmVersion":"12.0.2","dist":{"integrity":"sha512-pVAorcijo1ksp26cNMzx2/F6tV58CRkfSQLfhbZp3Kjw4S2FIxPucb1Qobv3CJdXINgbeAacq/4kGP1Htmiq4A==","shasum":"d6776ee4878089fa1b29153c4993d6f771c8cc5c","tarball":"https://registry.npmjs.org/@varlock/aws-secrets-plugin/-/aws-secrets-plugin-1.2.3.tgz","fileCount":32,"unpackedSize":3930030,"attestations":{"url":"https://registry.npmjs.org/-/npm/v1/attestations/@varlock%2faws-secrets-plugin@1.2.3","provenance":{"predicateType":"https://slsa.dev/provenance/v1"}},"signatures":[{"keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U","sig":"MEUCIFR2z3FCmHwzYrnRfGHSb2FejmJxWViawPCxxkHypgmNAiEAhxVVhQbVYDO3CpxBM5lz/N7mOyh3cmnMzEfHx6IRreg="}]},"_npmUser":{"name":"GitHub Actions","email":"npm-oidc-no-reply@github.com","trustedPublisher":{"id":"github","oidcConfigId":"oidc:69bdc315-faaa-4542-ae9b-f537c74b2171"}},"directories":{},"maintainers":[{"name":"philmillman","email":"philmillman@gmail.com"},{"name":"theo","email":"theozero@gmail.com"}],"_npmOperationalInternal":{"host":"s3://npm-registry-packages-npm-production","tmp":"tmp/aws-secrets-plugin_1.2.3_1787637787647_0.26740159729979474"},"_hasShrinkwrap":false}},"time":{"created":"2026-02-10T23:53:32.284Z","modified":"2026-08-25T06:03:08.180Z","0.0.0":"2026-02-10T23:53:32.496Z","0.0.1":"2026-02-12T18:41:35.184Z","0.0.2":"2026-02-27T07:48:44.844Z","0.0.3":"2026-03-10T01:44:07.392Z","0.0.4":"2026-03-14T02:03:10.146Z","0.0.5":"2026-03-19T07:54:07.556Z","0.0.6":"2026-03-31T18:16:45.274Z","1.0.0":"2026-04-29T21:17:41.114Z","1.1.0":"2026-05-06T06:28:32.538Z","1.2.0":"2026-06-10T07:52:28.491Z","1.2.1":"2026-06-11T21:53:09.764Z","1.2.2":"2026-06-24T06:57:30.067Z","1.2.3":"2026-08-25T06:03:07.836Z"},"bugs":{"url":"https://github.com/dmno-dev/varlock/issues"},"author":{"name":"dmno-dev"},"license":"MIT","homepage":"https://varlock.dev/plugins/aws-secrets/","keywords":["varlock","plugin","varlock-plugin","aws","secrets-manager","parameter-store","ssm","env",".env","dotenv","environment variables","env vars","config"],"repository":{"type":"git","url":"git+https://github.com/dmno-dev/varlock.git","directory":"packages/plugins/aws-secrets"},"description":"Varlock plugin to load secrets from AWS (supports both Secrets Manager and Systems Manager Parameter Store)","maintainers":[{"name":"philmillman","email":"philmillman@gmail.com"},{"name":"theo","email":"theozero@gmail.com"}],"readme":"# @varlock/aws-secrets-plugin\n\n[![npm version](https://img.shields.io/npm/v/@varlock/aws-secrets-plugin.svg)](https://npmx.dev/package/@varlock/aws-secrets-plugin) [![GitHub stars](https://img.shields.io/github/stars/dmno-dev/varlock.svg?style=social&label=Star)](https://github.com/dmno-dev/varlock) [![license](https://img.shields.io/npm/l/@varlock/aws-secrets-plugin.svg)](https://github.com/dmno-dev/varlock/blob/main/LICENSE)\n\nThis package is a [Varlock](https://varlock.dev) [plugin](https://varlock.dev/guides/plugins/) that enables loading data from [AWS Secrets Manager](https://aws.amazon.com/secrets-manager/) and [AWS Systems Manager Parameter Store](https://aws.amazon.com/systems-manager/features/#Parameter_Store) into your configuration.\n\n## Features\n\n- **Zero-config authentication** - Automatically uses AWS credentials from your environment\n- **IAM role support** - No credentials needed for AWS-hosted apps (EC2, ECS, Lambda, etc.)\n- **AWS CLI authentication** - Works seamlessly with `aws configure` for local development\n- **Auto-infer secret/parameter names** from environment variable names (uses name as-is)\n- **JSON key extraction** from secrets/parameters using `#` syntax or named `key` parameter\n- **Name prefixing** with `namePrefix` option for organized secret management\n- **OIDC workload identity** - Authenticate from Vercel, GitHub Actions, and other platforms without long-lived credentials\n- Support for named AWS profiles\n- Support for explicit credentials (access key/secret key)\n- Support for temporary credentials (with session tokens)\n- Lazy-initialized AWS SDK clients\n- Comprehensive error handling with helpful tips\n\n## Installation\n\nIf you are in a JavaScript based project and have a package.json file, you can either install the plugin explicitly\n```bash\nnpm install @varlock/aws-secrets-plugin\n```\nAnd then register the plugin without any version number\n```env-spec title=\".env.schema\"\n# @plugin(@varlock/aws-secrets-plugin)\n```\n\nOtherwise just set the explicit version number when you register it\n```env-spec title=\".env.schema\"\n# @plugin(@varlock/aws-secrets-plugin@1.2.3)\n```\n\nSee our [Plugin Guide](https://varlock.dev/guides/plugins/#installation) for more details.\n\n## Setup + Auth\n\nAfter registering the plugin, you must initialize it with the `@initAws` root decorator.\n\n### Automatic auth\n\nFor most use cases, you only need to provide the AWS region:\n\n```env-spec\n# @plugin(@varlock/aws-secrets-plugin)\n# @initAws(region=us-east-1)\n```\n\n**How this works:**\n\n- **Local development:** Run `aws configure` → automatically uses AWS CLI credentials\n- **AWS-hosted apps** (EC2, ECS, Lambda, Fargate): Attach an IAM role → automatically authenticates (no secrets needed!)\n- **Works everywhere** with zero configuration beyond the region!\n\n### Explicit credentials (For non-AWS environments)\n\nIf you're deploying outside of AWS (e.g., Azure, GCP, on-premises), wire up IAM credentials:\n\n```env-spec\n# @plugin(@varlock/aws-secrets-plugin)\n# @initAws(\n#   region=us-east-1,\n#   accessKeyId=$AWS_ACCESS_KEY_ID,\n#   secretAccessKey=$AWS_SECRET_ACCESS_KEY\n# )\n# ---\n\n# @type=awsAccessKey\nAWS_ACCESS_KEY_ID=\n\n# @type=awsSecretKey @sensitive @internal\nAWS_SECRET_ACCESS_KEY=\n```\n\nYou would then need to inject these env vars using your CI/CD system.\n\n> `@internal` keeps this credential out of your app's environment — varlock only uses it to fetch your secrets. If you need the credential at runtime for other purposes (e.g. via the AWS SDK), set `@internal=false` to keep it injected.\n\n### OIDC workload identity (For Vercel, GitHub Actions, etc.)\n\nIf you're deploying on a platform that supports OIDC, you can authenticate without any long-lived credentials:\n\n```env-spec\n# @plugin(@varlock/aws-secrets-plugin)\n# @initAws(region=us-east-1, oidcRoleArn=\"arn:aws:iam::123456789012:role/varlock-oidc-role\")\n```\n\nThe plugin auto-detects the OIDC token from your platform and exchanges it for temporary AWS credentials via STS. You just need to create an IAM role with a trust policy for your platform's OIDC provider.\n\nSee the [OIDC Workload Identity guide](https://varlock.dev/guides/oidc/) for full setup instructions.\n\n### Authentication Priority\n\nThe plugin tries authentication methods in this order:\n1. **Explicit credentials** - If `accessKeyId` and `secretAccessKey` are provided\n2. **OIDC** - If `oidcRoleArn` is provided, exchanges a platform OIDC token for temporary AWS credentials\n3. **Named profile** - If `profile` is specified, uses credentials from `~/.aws/credentials`\n4. **Default AWS credential chain** - Environment variables → `~/.aws/credentials` → IAM roles\n\n### Using Named Profiles\n\nUse a specific profile from your `~/.aws/credentials` file:\n\n```env-spec\n# @initAws(region=us-east-1, profile=production)\n```\n\n### Multiple instances\n\nIf you need to connect to multiple instances with different settings, you can register multiple named instances:\n\n```env-spec\n# @initAws(id=us, region=us-east-1)\n# @initAws(id=eu, region=eu-west-1, profile=eu-prod)\n```\n\nOr use functions to populate in values:\n\n```env-spec\n# @initAws(region=\"${AWS_REGION}\")\n```\n\n## Reading secrets and parameters\n\nThis plugin introduces two functions: `awsSecret()` for AWS Secrets Manager and `awsParam()` for Parameter Store.\n\n```env-spec title=\".env.schema\"\n# @plugin(@varlock/aws-secrets-plugin)\n# @initAws(region=us-east-1)\n# ---\n\n# Auto-infer secret names (DATABASE_URL -> \"DATABASE_URL\")\nDATABASE_URL=awsSecret()\nAPI_KEY=awsSecret()\n\n# Explicit secret names\nSTRIPE_KEY=awsSecret(\"payments/stripe-secret-key\")\n\n# Referring to a single key in items holding key/value pairs\n# If \"database-creds\" contains: {\"host\": \"db.example.com\", \"password\": \"secret\"}\nDB_HOST=awsSecret(\"database-creds#host\")\nDB_PASSWORD=awsSecret(\"database-creds#password\")\n\n# Or use named \"key\" parameter\nDB_PORT=awsSecret(\"database-creds\", key=\"port\")\n\n# Parameters from Parameter Store\nAPP_CONFIG=awsParam(\"/prod/app/config\")\nFEATURE_FLAGS=awsParam(\"/prod/features\")\n\n# Auto-infer parameter names too\nDATABASE_HOST=awsParam()\n\n# If using multiple instances\nUS_DATABASE_URL=awsSecret(us, \"db-connection\")\nEU_DATABASE_URL=awsSecret(eu, \"db-connection\")\n```\n\n### Name Prefixing\n\nUse `namePrefix` to automatically prefix all secret/parameter names:\n\n```env-spec\n# @initAws(region=us-east-1, namePrefix=\"prod/api/\")\n# ---\n\n# Fetches \"prod/api/DATABASE_URL\"\nDATABASE_URL=awsSecret()\n\n# Fetches \"prod/api/stripe-key\"\nSTRIPE_KEY=awsSecret(\"stripe-key\")\n```\n\nYou can even use dynamic prefixes:\n\n```env-spec\n# @initAws(region=us-east-1, namePrefix=\"${ENV}/\")\n# In prod: fetches \"prod/DATABASE_URL\"\n# In dev: fetches \"dev/DATABASE_URL\"\nDATABASE_URL=awsSecret()\n```\n\n---\n\n## Reference\n\n### Root decorators\n\n#### `@initAws()`\n\nInitialize an AWS plugin instance.\n\n**Parameters:**\n\n- `region: string` (required) - AWS region (e.g., `us-east-1`, `eu-west-1`)\n- `namePrefix?: string` - Prefix automatically prepended to all secret/parameter names\n- `accessKeyId?: string` - AWS access key ID for explicit authentication\n- `secretAccessKey?: string` - AWS secret access key for explicit authentication\n- `sessionToken?: string` - AWS session token for temporary credentials\n- `profile?: string` - Named profile from `~/.aws/credentials`\n- `oidcRoleArn?: string` - ARN of IAM role to assume via OIDC (enables workload identity federation)\n- `oidcSessionName?: string` - Session name for the OIDC assumed role (defaults to `varlock-session`)\n- `oidcToken?: string` - Explicit OIDC JWT token (auto-detected from platform if not provided)\n- `cacheTtl?: string | number` - Cache resolved values from `awsSecret()` / `awsParam()` for the provided TTL (`\"5m\"`, `\"1h\"`, `\"1d\"`, or `\"forever\"` to cache until manually cleared); set to `false` (or an empty string) to disable caching\n- `id?: string` - Instance identifier for multiple instances (defaults to `_default`)\n\n### Functions\n\n#### `awsSecret()`\n\nFetch a secret from AWS Secrets Manager.\n\n**Signatures:**\n\n- `awsSecret()` - Auto-infers secret name from variable name (uses name as-is)\n- `awsSecret(secretId)` - Fetch by explicit secret name/ID\n- `awsSecret(secretId, key=\"jsonKey\")` - Fetch and extract JSON key\n- `awsSecret(instanceId, secretId)` - Fetch from a specific instance\n\n**Secret ID Formats:**\n\n- Name: `\"my-secret\"`\n- Name with JSON key: `\"my-secret#password\"` (shorthand for key extraction)\n- ARN: `\"arn:aws:secretsmanager:us-east-1:123456789012:secret:my-secret-AbCdEf\"`\n\n#### `awsParam()`\n\nFetch a parameter from AWS Systems Manager Parameter Store.\n\n**Signatures:**\n\n- `awsParam()` - Auto-infers parameter name from variable name (uses name as-is)\n- `awsParam(parameterName)` - Fetch by explicit parameter name/path\n- `awsParam(parameterName, key=\"jsonKey\")` - Fetch and extract JSON key\n- `awsParam(instanceId, parameterName)` - Fetch from a specific instance\n\n**Parameter Formats:**\n\n- Simple: `\"MyParameter\"`\n- Path: `\"/prod/app/database-url\"`\n- Hierarchical: `\"/team/service/env/config\"`\n- With JSON key: `\"/prod/db/creds#password\"`\n\n### Data Types\n\n- `awsAccessKey` - AWS access key ID (20-character alphanumeric)\n- `awsSecretKey` - AWS secret access key (40 characters, sensitive)\n\n---\n\n## AWS Setup\n\n### Required IAM Permissions\n\n#### For AWS Secrets Manager\n\n```json\n{\n  \"Version\": \"2012-10-17\",\n  \"Statement\": [\n    {\n      \"Effect\": \"Allow\",\n      \"Action\": [\"secretsmanager:GetSecretValue\"],\n      \"Resource\": \"arn:aws:secretsmanager:*:*:secret:*\"\n    }\n  ]\n}\n```\n\n#### For AWS Systems Manager Parameter Store\n\n```json\n{\n  \"Version\": \"2012-10-17\",\n  \"Statement\": [\n    {\n      \"Effect\": \"Allow\",\n      \"Action\": [\"ssm:GetParameter\"],\n      \"Resource\": \"arn:aws:ssm:*:*:parameter/*\"\n    }\n  ]\n}\n```\n\n### Attach IAM Role (Recommended for AWS-hosted apps)\n\nIAM roles are the AWS-native way to authenticate - no credentials needed!\n\n**For EC2 instances:**\n\n```bash\n# Create role with trust policy for EC2\naws iam create-role \\\n  --role-name varlock-secrets-reader \\\n  --assume-role-policy-document '{\n    \"Version\": \"2012-10-17\",\n    \"Statement\": [{\n      \"Effect\": \"Allow\",\n      \"Principal\": {\"Service\": \"ec2.amazonaws.com\"},\n      \"Action\": \"sts:AssumeRole\"\n    }]\n  }'\n\n# Attach permissions\naws iam put-role-policy \\\n  --role-name varlock-secrets-reader \\\n  --policy-name secrets-access \\\n  --policy-document file://policy.json\n\n# Create and attach instance profile\naws iam create-instance-profile --instance-profile-name varlock-secrets-reader\naws iam add-role-to-instance-profile \\\n  --instance-profile-name varlock-secrets-reader \\\n  --role-name varlock-secrets-reader\n\n# Attach to EC2 instance\naws ec2 associate-iam-instance-profile \\\n  --instance-id i-1234567890abcdef0 \\\n  --iam-instance-profile Name=varlock-secrets-reader\n```\n\n**For ECS tasks:**\n\n```bash\n# Create role with trust policy for ECS\naws iam create-role \\\n  --role-name varlock-ecs-task-role \\\n  --assume-role-policy-document '{\n    \"Version\": \"2012-10-17\",\n    \"Statement\": [{\n      \"Effect\": \"Allow\",\n      \"Principal\": {\"Service\": \"ecs-tasks.amazonaws.com\"},\n      \"Action\": \"sts:AssumeRole\"\n    }]\n  }'\n\n# Attach permissions\naws iam put-role-policy \\\n  --role-name varlock-ecs-task-role \\\n  --policy-name secrets-access \\\n  --policy-document file://policy.json\n\n# Reference in task definition\n# \"taskRoleArn\": \"arn:aws:iam::123456789012:role/varlock-ecs-task-role\"\n```\n\n**For Lambda functions:**\n\n```bash\n# Create role with trust policy for Lambda\naws iam create-role \\\n  --role-name varlock-lambda-role \\\n  --assume-role-policy-document '{\n    \"Version\": \"2012-10-17\",\n    \"Statement\": [{\n      \"Effect\": \"Allow\",\n      \"Principal\": {\"Service\": \"lambda.amazonaws.com\"},\n      \"Action\": \"sts:AssumeRole\"\n    }]\n  }'\n\n# Attach permissions\naws iam put-role-policy \\\n  --role-name varlock-lambda-role \\\n  --policy-name secrets-access \\\n  --policy-document file://policy.json\n\n# Attach to Lambda function\naws lambda update-function-configuration \\\n  --function-name my-function \\\n  --role arn:aws:iam::123456789012:role/varlock-lambda-role\n```\n\nThat's it! Your app will now automatically authenticate using the IAM role.\n\n### Create IAM User (For non-AWS environments)\n\n```bash\n# Create IAM user\naws iam create-user --user-name varlock-secrets-reader\n\n# Attach policy\naws iam put-user-policy \\\n  --user-name varlock-secrets-reader \\\n  --policy-name secrets-access \\\n  --policy-document file://policy.json\n\n# Create access key\naws iam create-access-key --user-name varlock-secrets-reader\n```\n\nSave the `AccessKeyId` and `SecretAccessKey` from the output - you'll need them for non-AWS deployments.\n\n### Configure AWS CLI\n\nFor local development:\n\n```bash\naws configure\n# AWS Access Key ID: [your key]\n# AWS Secret Access Key: [your secret]\n# Default region name: us-east-1\n# Default output format: json\n```\n\nOr manually create `~/.aws/credentials`:\n\n```ini\n[default]\naws_access_key_id = AKIAIOSFODNN7EXAMPLE\naws_secret_access_key = wJalrXUtnFEMI/K7MDENG/bPxRfiCYEXAMPLEKEY\n\n[production]\naws_access_key_id = AKIAI44QH8DHBEXAMPLE\naws_secret_access_key = je7MtGbClwBF/2Zp9Utk/h3yCo8nvbEXAMPLEKEY\n```\n\n## Troubleshooting\n\n### Secret not found\n- Verify the secret exists: `aws secretsmanager list-secrets --query 'SecretList[?Name==\\`my-secret\\`]'`\n- Check you're using the correct region: `aws secretsmanager get-secret-value --secret-id my-secret --region us-east-1`\n\n### Parameter not found\n- Verify the parameter exists: `aws ssm describe-parameters --parameter-filters \"Key=Name,Values=/my/param\"`\n- Check you're using the correct region\n\n### Permission denied\n- Check your IAM permissions: `aws iam get-user-policy --user-name varlock-secrets-reader --policy-name secrets-access`\n- For IAM roles on EC2: `aws sts get-caller-identity` (run from the instance to see what role is attached)\n- Ensure the IAM policy includes the required actions (`secretsmanager:GetSecretValue` and/or `ssm:GetParameter`)\n\n### Authentication failed\n- **Local dev:** Run `aws configure` or ensure `AWS_ACCESS_KEY_ID` and `AWS_SECRET_ACCESS_KEY` are set\n- **AWS-hosted apps:** Verify IAM role is attached and has the required permissions\n- **Other environments:** Verify credentials are correct and properly injected\n- Test credentials: `aws sts get-caller-identity`\n","readmeFilename":"README.md"}