github.com/aquasecurity/trivy-iac@v0.8.1-0.20240127024015-3d8e412cf0ab/internal/adapters/cloudformation/aws/ssm/secret.go (about)

     1  package ssm
     2  
     3  import (
     4  	"github.com/aquasecurity/defsec/pkg/providers/aws/ssm"
     5  	"github.com/aquasecurity/trivy-iac/pkg/scanners/cloudformation/parser"
     6  )
     7  
     8  func getSecrets(ctx parser.FileContext) (secrets []ssm.Secret) {
     9  	for _, r := range ctx.GetResourcesByType("AWS::SecretsManager::Secret") {
    10  		secret := ssm.Secret{
    11  			Metadata: r.Metadata(),
    12  			KMSKeyID: r.GetStringProperty("KmsKeyId"),
    13  		}
    14  
    15  		secrets = append(secrets, secret)
    16  	}
    17  	return secrets
    18  }