feat: AWS Secrets Manager support

src/providers/mod.rs

@@ -2,43 +2,42 @@
 //!
 //! Implementations provide storage/backends for secrets and a common
 //! interface used by the CLI.
+pub mod aws_secrets_manager;
 mod git_sync;
 pub mod local;
 
 use crate::providers::local::LocalProvider;
-use anyhow::{Result, anyhow};
+use anyhow::{anyhow, Result};
 use serde::{Deserialize, Serialize};
 use std::fmt::{Display, Formatter};
-use thiserror::Error;
 use validator::{Validate, ValidationErrors};
 
-/// A secret storage backend capable of CRUD and sync, with optional
-/// update and listing
-pub trait SecretProvider {
+/// A secret storage backend capable of CRUD, with optional
+/// update, listing, and sync support.
+#[async_trait::async_trait]
+pub trait SecretProvider: Send + Sync {
     fn name(&self) -> &'static str;
-    fn get_secret(&self, key: &str) -> Result<String>;
-    fn set_secret(&self, key: &str, value: &str) -> Result<()>;
-    fn update_secret(&self, _key: &str, _value: &str) -> Result<()> {
+    async fn get_secret(&self, key: &str) -> Result<String>;
+    async fn set_secret(&self, key: &str, value: &str) -> Result<()>;
+    async fn update_secret(&self, _key: &str, _value: &str) -> Result<()> {
         Err(anyhow!(
             "update secret not supported for provider {}",
             self.name()
         ))
     }
-    fn delete_secret(&self, key: &str) -> Result<()>;
-    fn list_secrets(&self) -> Result<Vec<String>> {
+    async fn delete_secret(&self, key: &str) -> Result<()>;
+    async fn list_secrets(&self) -> Result<Vec<String>> {
         Err(anyhow!(
             "list secrets is not supported for the provider {}",
             self.name()
         ))
     }
-    fn sync(&mut self) -> Result<()>;
-}
-
-/// Errors when parsing a provider identifier.
-#[derive(Debug, Error)]
-pub enum ParseProviderError {
-    #[error("unsupported provider '{0}'")]
-    Unsupported(String),
+    async fn sync(&mut self) -> Result<()> {
+        Err(anyhow!(
+            "sync is not supported for the provider {}",
+            self.name()
+        ))
+    }
 }
 
 /// Registry of built-in providers.
@@ -50,12 +49,17 @@ pub enum SupportedProvider {
         #[serde(flatten)]
         provider_def: LocalProvider,
     },
+    AwsSecretsManager {
+        #[serde(flatten)]
+        provider_def: aws_secrets_manager::AwsSecretsManagerProvider,
+    },
 }
 
 impl Validate for SupportedProvider {
     fn validate(&self) -> Result<(), ValidationErrors> {
         match self {
             SupportedProvider::Local { provider_def } => provider_def.validate(),
+            SupportedProvider::AwsSecretsManager { provider_def } => provider_def.validate(),
         }
     }
 }
@@ -72,6 +76,7 @@ impl Display for SupportedProvider {
     fn fmt(&self, f: &mut Formatter<'_>) -> std::fmt::Result {
         match self {
             SupportedProvider::Local { .. } => write!(f, "local"),
+            SupportedProvider::AwsSecretsManager { .. } => write!(f, "aws_secrets_manager"),
         }
     }
 }