- 确保AWS模块已正确添加到Node.js项目依赖项中,例如:
// package.json
{
"dependencies": {
"aws-sdk": "^2.709.0"
}
}
- 确保您的Lambda函数的执行角色具有与SSM/secrets层相关联的权限。您可以在IAM控制台中为执行角色添加以下策略:
{
"Version": "2012-10-17",
"Statement": [
{
"Effect": "Allow",
"Action": [
"secretsmanager:GetSecretValue",
"ssm:GetParameters",
"ssm:GetParameter"
],
"Resource": "*"
}
]
}
- 在Lambda函数中引入AWS SDK并使用getSecretValue()或getParameter()方法获取您的秘密/参数值,例如:
const AWS = require('aws-sdk');
const secretsManager = new AWS.SecretsManager();
exports.handler = async (event) => {
const params = {
SecretId: 'my-secret-id'
};
const data = await secretsManager.getSecretValue(params).promise();
console.log(data.SecretString);
};