Add Support for AWS Secrets Manager for ghsecrets tool

[lukaszcl]

This PR introduces significant enhancements to the ghsecrets tool, including support for managing secrets in AWS Secrets Manager alongside GitHub. Key updates include:

• AWS Secrets Manager Integration:

  • Support for creating, updating, and sharing secrets in AWS Secrets Manager.
  • Automatic addition of the testsecrets/ prefix for AWS secrets to ensure consistency and compatibility with GitHub Actions.
  • Ability to share secrets with additional IAM ARNs through the --shared-with flag.
  • Retrieval of secrets with optional Base64 decoding.

• Command Enhancements:

  • Added a get command to retrieve secrets from AWS Secrets Manager.
  • Unified CLI flags for managing secrets across AWS and GitHub backends.
  • Improved error handling with detailed messages for common issues (e.g., expired AWS SSO sessions).

• Documentation Updates:

  • Updated README with detailed installation, usage instructions, and FAQ sections.

Related PRs:

• Extend .github/workflows/run-e2e-tests.yml to support fetching Test Secrets from AWS Secrets Manager .github#805

---

Below is a summarization created by an LLM (gpt-4-0125-preview). Be mindful of hallucinations and verify accuracy.

Why

The changes expand the functionality of ghsecrets tool to support AWS Secrets Manager as a backend for storing secrets, in addition to GitHub. This update also introduces the ability to retrieve secrets from AWS, share secrets with additional AWS IAM principals, and handle AWS SSO sessions. The update aims to make ghsecrets more versatile and useful for managing secrets in different environments.

What

• README.md: Updated documentation to reflect new features and usage instructions for interacting with both GitHub and AWS Secrets Manager.
• go.mod and go.sum: Added dependencies for AWS SDK to interact with AWS services such as Secrets Manager and STS.
• main.go:
  • Added support for setting and retrieving secrets from AWS Secrets Manager.
  • Implemented AWS SSO session handling and error messages.
  • Included flags for specifying AWS profile, secret ID, and IAM principals for sharing secrets.
  • Enhanced error handling and user feedback throughout the tool's commands.

[cl-sonarqube-production]

Quality Gate passed

Issues
2 New issues
0 Fixed issues
0 Accepted issues

Measures
0 Security Hotspots
No data about Coverage
0.0% Duplication on New Code

See analysis details on SonarQube