Is there any funky cool way to setup and use secrets in SST/CDK? Right now we are manually creating SSM params and then just manually passing the SSM paths as envs into functions and accessing the encrypted SSM at runtime (decrypted) from within the lambda. Thought I remember someone theorizing a sst helper to make this less work.

Hey @Dan Van Brunt, yeah we are working on it! Some pseudo code looks like this. • creating the secret

const stripeKey = new sst.Parameter("/path/to/ssm");

• using the secret

new sst.Function(..., {
  parameters: {
    stripeKey
  }
});

• the secrets will show in SST Console, where u can manually set the values • in ur lambda

import { Config } from "@serverless-stack/node";

Config.stripeKey; // this has the decrypted value

@Frank @thdxr how far out is the SST secrets functionality? We are running into this issue right now and working out what our approach should be and whether we need a short term solution until there is a native option in SST.

I put together this prototype: https://github.com/serverless-stack/serverless-stack/tree/master/examples/parameter-prototype

Awesome thanks @thdxr i will have a play