How do I configure the system manager to use this library?

[weirdyang]

Which features are involved and what are the settings do I need to configure? There's not much information in the readme

[ashishdhingra]

@weirdyang Good morning. Please advise exactly what you are looking for. As Readme mentions, this library allows you to use AWS Systems Manager's Parameter Store to store keys generated by ASP.NET's Data Protection API. For more details on data protection, please refer:

• ASP.NET Core Data Protection Overview
• Get started with the Data Protection APIs in ASP.NET Core

The library configures SSMXmlRepository by making call to PersistKeysToAWSSystemsManager() and configuring KeyManagementOptions (see example in Use AddOptions to configure custom repository).

Taking below example from Readme, it would use parameter /MyApplication/DataProtection to store keys generated by ASP.NET's Data Protection API:

public void ConfigureServices(IServiceCollection services)
{
    services.AddDataProtection()
        .PersistKeysToAWSSystemsManager("/MyApplication/DataProtection");

    services.AddMvc();
}

The Readme also mentions the below required permissions attached configured AWS credentials, for library to read and store parameters (e.g. /MyApplication/DataProtection) in System Manager Parameter:

{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Sid": "rule1",
            "Effect": "Allow",
            "Action": [
                "ssm:PutParameter",
                "ssm:GetParametersByPath"
            ],
            "Resource": "*"
        }
    ]
}

Thanks,
Ashish

@bot propose-answer

[github-actions[bot]]

Hello! Reopening this discussion to make it searchable.