@x-sls/env 1.0.0

package/package.json

@@ -0,0 +1,13 @@
+{
+  "name": "@x-sls/env",
+  "version": "1.0.0",
+  "main": "src/index.js",
+  "scripts": {
+    "test": "jest",
+    "lint": "eslint src --ext .js",
+    "clean": "rm -rf dist"
+  },
+  "dependencies": {
+    "@aws-sdk/client-ssm": "^3.840.0"
+  }
+}

package/src/index.js

@@ -0,0 +1,42 @@
+const { SSMClient, GetParameterCommand } = require("@aws-sdk/client-ssm");
+const client = new SSMClient();
+
+const SSM_PREFIX = "ssm:";
+const SSM_SECRET_PREFIX = `ssm:x:`;
+
+const lookup = {};
+
+async function getEnv(key) {
+  if (!lookup[key]) {
+    lookup[key] = await resolveEnv(process.env[key]);
+  }
+
+  return lookup[key];
+}
+
+async function resolveEnv(val) {
+  // If this is not an SSM key, return the value as-is
+  if (val.substr(0, SSM_PREFIX.length) !== SSM_PREFIX) {
+    return val;
+  }
+
+  // values with `ssm:x:` prefix are SecureString and need to be decrypted
+  const WithDecryption =
+    val.substr(0, SSM_SECRET_PREFIX.length) === SSM_SECRET_PREFIX;
+  const Name = val.substr(
+    WithDecryption ? SSM_SECRET_PREFIX.length : SSM_PREFIX.length,
+  );
+
+  try {
+    const command = new GetParameterCommand({
+      Name,
+      WithDecryption,
+    });
+    const res = await client.send(command);
+    return res?.Parameter?.Value;
+  } catch (error) {
+    console.error(error);
+  }
+}
+
+module.exports = getEnv;