diff --git a/backend/src/services/secret-sync/aws-parameter-store/aws-parameter-store-sync-fns.ts b/backend/src/services/secret-sync/aws-parameter-store/aws-parameter-store-sync-fns.ts index d51340408..680dd4256 100644 --- a/backend/src/services/secret-sync/aws-parameter-store/aws-parameter-store-sync-fns.ts +++ b/backend/src/services/secret-sync/aws-parameter-store/aws-parameter-store-sync-fns.ts @@ -38,6 +38,10 @@ const sleep = async () => const getFullPath = ({ path, keySchema, environment }: { path: string; keySchema?: string; environment: string }) => { if (!keySchema || !keySchema.includes("/")) return path; + if (keySchema.startsWith("/")) { + throw new SecretSyncError({ message: `Key schema cannot contain leading '/'`, shouldRetry: false }); + } + const keySchemaSegments = handlebars .compile(keySchema)({ environment,