[ 
https://issues.apache.org/jira/browse/NIFI-12061?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

David Handermann resolved NIFI-12061.
-------------------------------------
    Fix Version/s: 2.1.0
       Resolution: Fixed

> AwsSecretsManagerParameterProvider should not require listSecrets permission
> ----------------------------------------------------------------------------
>
>                 Key: NIFI-12061
>                 URL: https://issues.apache.org/jira/browse/NIFI-12061
>             Project: Apache NiFi
>          Issue Type: Improvement
>            Reporter: Greg Solovyev
>            Assignee: Greg Solovyev
>            Priority: Minor
>             Fix For: 2.1.0
>
>          Time Spent: 3h 50m
>  Remaining Estimate: 0h
>
> `AwsSecretsManagerParameterProvider` currently requires listSecrets 
> permission in AWS, which is unnecessary in my use case. In our environment, 
> we run one `AwsSecretsManagerParameterProvider` per customer instance of Nifi 
> and need `AwsSecretsManagerParameterProvider` to have access only to the 
> secret that is dedicated to that customer. Unfortunately, 
> `AwsSecretsManagerParameterProvider` tries to list all account's secrets and 
> match them to name pattern, even when name pattern is a single name.



--
This message was sent by Atlassian Jira
(v8.20.10#820010)

Reply via email to