Prisma

Hi guys, are there any best practices around passing in secrets to Prisma? I am looking into using AWS Secrets Manager to store my DB password.
1) Does Prisma provide out of the box support to read the password from an aws secret, assuming it runs on an instance and has the right permissions to read the secret?
2) If the answer to the above is no, is there a way to run a script that sets up the config file before Prisma starts? We’re running prisma in a k8s cluster using the `prismagraphql/prisma:1.19` docker image. I cannot find the source Dockerfile however and don’t want to reverse-engineer/rely on implementation details that might change

You can mount a PRISMA_CONFIG_PATH to a yml file

<https://www.prisma.io/tutorials/deploy-prisma-to-dokku-ct15/#create-a-new-project-folder>

Maybe use a script to change the content of the config because we do not support AWS Secrets Manager natively

I see, okay, yeah that seems to work. It’ll be a problem when we rotate the password since it won’t be a graceful reconnect, but I guess we’ll have to live with that