Greg Solovyev created NIFI-12061:
------------------------------------

             Summary: AwsSecretsManagerParameterProvider should not require 
listSecrets permission
                 Key: NIFI-12061
                 URL: https://issues.apache.org/jira/browse/NIFI-12061
             Project: Apache NiFi
          Issue Type: Improvement
    Affects Versions: 1.23.2
            Reporter: Greg Solovyev
            Assignee: Greg Solovyev


`AwsSecretsManagerParameterProvider` currently requires listSecrets permission 
in AWS, which is unnecessary in my use case. In our environment, we run one 
`AwsSecretsManagerParameterProvider` per customer instance of Nifi and need 
`AwsSecretsManagerParameterProvider` to have access only to the secret that is 
dedicated to that customer. Unfortunately, `AwsSecretsManagerParameterProvider` 
tries to list all account's secrets and match them to name pattern, even when 
name pattern is a single name.



--
This message was sent by Atlassian Jira
(v8.20.10#820010)

Reply via email to