Merge pull request #3005 from Infisical/parameter-store-error-message-improvement

Improvement: Add Secret Key to AWS Parameter Store Integreation Sync Error
This commit is contained in:
Scott Wilson
2025-01-17 11:56:31 -08:00
committed by GitHub
@@ -932,6 +932,8 @@ const syncSecretsAWSParameterStore = async ({
logger.info( logger.info(
`getIntegrationSecrets: create secret in AWS SSM for [projectId=${projectId}] [environment=${integration.environment.slug}] [secretPath=${integration.secretPath}]` `getIntegrationSecrets: create secret in AWS SSM for [projectId=${projectId}] [environment=${integration.environment.slug}] [secretPath=${integration.secretPath}]`
); );
try {
await ssm await ssm
.putParameter({ .putParameter({
Name: `${integration.path}${key}`, Name: `${integration.path}${key}`,
@@ -941,6 +943,11 @@ const syncSecretsAWSParameterStore = async ({
Overwrite: true Overwrite: true
}) })
.promise(); .promise();
} catch (error) {
(error as { secretKey: string }).secretKey = key;
throw error;
}
if (metadata.secretAWSTag?.length) { if (metadata.secretAWSTag?.length) {
try { try {
await ssm await ssm
@@ -987,6 +994,7 @@ const syncSecretsAWSParameterStore = async ({
// we ensure that the KMS key configured in the integration is applied for ALL parameters on AWS // we ensure that the KMS key configured in the integration is applied for ALL parameters on AWS
if (secrets[key].value && (shouldUpdateKms || awsParameterStoreSecretsObj[key].Value !== secrets[key].value)) { if (secrets[key].value && (shouldUpdateKms || awsParameterStoreSecretsObj[key].Value !== secrets[key].value)) {
try {
await ssm await ssm
.putParameter({ .putParameter({
Name: `${integration.path}${key}`, Name: `${integration.path}${key}`,
@@ -996,6 +1004,10 @@ const syncSecretsAWSParameterStore = async ({
...(metadata.kmsKeyId && { KeyId: metadata.kmsKeyId }) ...(metadata.kmsKeyId && { KeyId: metadata.kmsKeyId })
}) })
.promise(); .promise();
} catch (error) {
(error as { secretKey: string }).secretKey = key;
throw error;
}
} }
if (awsParameterStoreSecretsObj[key].Name) { if (awsParameterStoreSecretsObj[key].Name) {