Skip to content

Conversation

thevilledev
Copy link

@thevilledev thevilledev commented Aug 10, 2025

Description

aws-sdk-go v1 reached EOL at the end of July 2025.

Replace aws-sdk-go v1.44.114 with aws-sdk-go-v2 modules and update AWS Secrets Manager implementation to use v2 patterns with context support and custom interfaces.

Also noting that aws-sdk-go v1 is applicable to the following Go vulnerability reports:

Github CodeQL picks this up in Packer plugin implementations and complains about it.

After this is merged in the project still has an indirect dependency to aws-sdk-go v1. It comes from hashicorp/go-getter and depends on this PR. hashicorp/go-getter#467

Resolved Issues

None.

Rollback Plan

Easy to revert, after which the SDK is back on v1.

Changes to Security Controls

No.

@thevilledev thevilledev requested a review from a team as a code owner August 10, 2025 18:29
aws-sdk-go v1 reached EOL at the end of July 2025.
Replace aws-sdk-go v1.44.114 with aws-sdk-go-v2 modules and
update AWS Secrets Manager implementation to use v2
patterns with context support and custom interfaces.

Signed-off-by: Ville Vesilehto <[email protected]>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant