clear-skies-aws 1.10.1__py3-none-any.whl → 1.10.2__py3-none-any.whl

{clear_skies_aws-1.10.1.dist-info → clear_skies_aws-1.10.2.dist-info}/METADATA

@@ -1,6 +1,6 @@
 Metadata-Version: 2.3
 Name: clear-skies-aws
-Version: 1.10.1
+Version: 1.10.2
 Summary: clearskies bindings for working in AWS
 License: MIT
 Author: Conor Mancone

{clear_skies_aws-1.10.1.dist-info → clear_skies_aws-1.10.2.dist-info}/RECORD

@@ -59,13 +59,13 @@ clearskies_aws/secrets/additional_configs/iam_db_auth.py,sha256=K6eLjo_D0uSxtCfq
 clearskies_aws/secrets/additional_configs/iam_db_auth_with_ssm.py,sha256=hzvR_WBwSoLcMdGXwhqkvKMKmjXzhZgimPWfm2MWSZQ,3467
 clearskies_aws/secrets/additional_configs/mysql_connection_dynamic_producer_via_ssh_cert_bastion.py,sha256=L2-E8Tm6BDHV-yJJ_M_Lo72jNY7uBaTp8SPrRuekcUE,3776
 clearskies_aws/secrets/additional_configs/mysql_connection_dynamic_producer_via_ssm_bastion.py,sha256=Llvg8uQW8J-qndAlDDtg9TY_Tvu2h9tUzchxxUtaRik,6444
-clearskies_aws/secrets/akeyless_with_ssm_cache.py,sha256=4_ep7P2SXei3hNbLrMhUSmr14GTzK69hkzjIYYU-dA4,1443
+clearskies_aws/secrets/akeyless_with_ssm_cache.py,sha256=MFAnajwO_XtZWMZHxsHFZBZa8V9vQGH0NSK4I6uVaow,1559
 clearskies_aws/secrets/parameter_store.py,sha256=lxBlp_9d2-vVjGNfl5859XzZCcLVMMrZtlJG8lKGVPA,1810
 clearskies_aws/secrets/parameter_store_test.py,sha256=35fTNau4tq_D4elMwyyByIiLesnmn05QhC_X1FVQXsM,763
 clearskies_aws/secrets/secrets_manager.py,sha256=jlpfAFC23EeSpm50L8B-yrXg4IROQq-M_90zzXDp_ak,3056
 clearskies_aws/secrets/secrets_manager_test.py,sha256=__YSe-YRbbE1S1SBvZZFQd3brIX5DPX2_wE9MI_Ezx0,788
 clearskies_aws/web_socket_connection_model.py,sha256=d_Au_Pu7YXBfc7_lbuI7zz4MZ8ZOOwGM0oooppEofcI,1776
-clear_skies_aws-1.10.1.dist-info/LICENSE,sha256=3Ehd0g3YOpCj8sqj0Xjq5qbOtjjgk9qzhhD9YjRQgOA,1053
-clear_skies_aws-1.10.1.dist-info/METADATA,sha256=f3IkhGylUcnIZSITx8j56rD5LJWTEks69c5FTZjGqfI,8784
-clear_skies_aws-1.10.1.dist-info/WHEEL,sha256=fGIA9gx4Qxk2KDKeNJCbOEwSrmLtjWCwzBz351GyrPQ,88
-clear_skies_aws-1.10.1.dist-info/RECORD,,
+clear_skies_aws-1.10.2.dist-info/LICENSE,sha256=3Ehd0g3YOpCj8sqj0Xjq5qbOtjjgk9qzhhD9YjRQgOA,1053
+clear_skies_aws-1.10.2.dist-info/METADATA,sha256=jgygnKXGfTw4rejQAglNblRFraGfcX0VeRcwG7NYGyk,8784
+clear_skies_aws-1.10.2.dist-info/WHEEL,sha256=fGIA9gx4Qxk2KDKeNJCbOEwSrmLtjWCwzBz351GyrPQ,88
+clear_skies_aws-1.10.2.dist-info/RECORD,,

clearskies_aws/secrets/akeyless_with_ssm_cache.py

@@ -1,16 +1,24 @@
+import re
+
 from clearskies.secrets import AKeyless
+
+
 class AkeylessWithSsmCache(AKeyless):
     _boto3 = None
+
     def __init__(self, requests, environment, boto3):
         super().__init__(requests, environment)
         self._boto3 = boto3
-        if not self._environment.get('AWS_REGION', True):
-            raise ValueError("To use parameter store you must use set the 'AWS_REGION' environment variable")
+        if not self._environment.get("AWS_REGION", True):
+            raise ValueError(
+                "To use parameter store you must use set the 'AWS_REGION' environment variable"
+            )
 
     def get(self, path, refresh=False):
-        ssm = self._boto3.client('ssm', region_name='us-east-1')
-        # we have spaces in our akeyless names but parameter store doesn't allow that
-        ssm_name = path.replace(' ', '-')
+        ssm = self._boto3.client("ssm", region_name="us-east-1")
+        # AWS SSM parameter paths only allow a-z, A-Z, 0-9, -, _, ., /, @, and :
+        # Replace any disallowed characters with hyphens
+        ssm_name = re.sub(r"[^a-zA-Z0-9\-_\./@:]", "-", path)
         # if we're not forcing a refresh, then see if it is in paramater store
         if not refresh:
             missing = False
@@ -19,7 +27,7 @@ class AkeylessWithSsmCache(AKeyless):
             except ssm.exceptions.ParameterNotFound:
                 missing = True
             if not missing:
-                value = response['Parameter']['Value']
+                value = response["Parameter"]["Value"]
                 if value:
                     return value
 
@@ -31,7 +39,7 @@ class AkeylessWithSsmCache(AKeyless):
             ssm.put_parameter(
                 Name=ssm_name,
                 Value=value,
-                Type='SecureString',
+                Type="SecureString",
                 Overwrite=True,
             )