https://pulumi.com logo
Title
b

broad-church-78931

10/13/2020, 5:23 PM
Hi, if defining with Pulumi so that the Secrets Manager to rotate RDS secrets would the lambda functions need to be defined manually,,? Asking because from the AWS console defining the rotation seems to be automated in that parts...
g

gentle-diamond-70147

10/13/2020, 6:04 PM
It's possible the Console is doing some work for you that you will need to explicitly define in your Pulumi app. When trying to replicate a solution from AWS I typically look for the related AWS documentation that shows how to achieve something via the API and that's easier to replicate to Pulumi. If you can share the AWS doc link that describes what you're doing, I can try to point you in the right direction in Pulumi's docs.
g

gentle-diamond-70147

10/13/2020, 9:53 PM
Looking at that I suspect the console is doing what's described at https://docs.aws.amazon.com/secretsmanager/latest/userguide/enable-rotation-rds.html on your behalf. The "Creating a Lambda rotation function using an AWS Serverless Application Repository template" section on that page describes a Cloudformation stack that does the same thing which could be replicated in Pulumi.
b

broad-church-78931

10/14/2020, 12:33 AM
ok, yeah, thanks!