index.js

const AWS = require("aws-sdk");
const argv = require("minimist")(process.argv.slice(2));

const {
  secret,
  region = "eu-west-1",
  AWS_ACCESS_KEY_ID: accessKeyId,
  AWS_SECRET_ACCESS_KEY: secretAccessKey,
} = argv;

const SecretId = secret;

const params = { region };
if (accessKeyId) Object.assign(params, { accessKeyId });
if (secretAccessKey) Object.assign(params, { secretAccessKey });

const client = new AWS.SecretsManager(params);

if (!secret) {
  console.error("Missing SECRET_NAME or SECRET_ARN");
  process.exit(1);
}

client.getSecretValue({ SecretId }, (err, data) => {
  if (err) {
    console.error(`${err.name}: ${err.message}`);
    process.exit(1);
  }

  if ("SecretString" in data) {
    try {
      const secrets = JSON.parse(data.SecretString);
      const keys = Object.keys(secrets);
      keys.forEach(k => {
        console.log(`${k}=${secrets[k]}`);
      });
    }
    catch (e) {
      console.error(data.SecretString);
    }
  }

  // secret is a binary
  else {
    let buff = new Buffer(data.SecretBinary, "base64");
    console.log(buff.toString("ascii"));
  }
});