Sample SAM template using various ways to store secrets

samSecrets.js

Resources:
  ApiFunction:
    Type: AWS::Serverless::Function
    Properties:
      Environment:
        Variables:
          # this is a standard lambda env var
          user: "This is a regular env var"
          
          # this is a var loaded from SSM
          userFromSSM: '{{resolve:ssm:username:1}}'
          
          # this is a var loaded from secrets manager
          userFromSecretsManager: !Sub '{{resolve:secretsmanager:${RDSDBSecret}:SecretString:username}}'

  RDSDBSecret:
    Type: AWS::SecretsManager::Secret
    Properties:
      Name: MySecretForRDSProxy
      Description: "This secret has a dynamically generated secret password."
      SecretString: '{"username": "admin",  "password": "somepassword",  "engine": "mysql",  "host":"database-1.cluster-asdfasdfasd.us-east-2.rds.amazonaws.com","port": 3306,"dbClusterIdentifier": "database-1"}'