Structural shape of an AWS Secrets Manager facade. The plugin never
hard-depends on @aws-sdk/client-secrets-manager; inject this shape, or the
provider lazily loads the SDK and adapts it to this facade.
getSecretValue(secretId: string): Promise<string | null>
Retrieves a secret string by id.
putSecretValue(secretId: string,value: string): Promise<void>
Stores a new value for a secret.
Since 0.5.0
optional
isHealthy(): Promise<boolean>
Optional non-mutating reachability probe (M90b). When the injected
facade exposes it, the provider's health indicator reports real
reachability; when omitted, the indicator reports
reachable: 'unknown' rather than reading a secret as a probe — a
read is not a health check and would alter the plugin's cache and
billing profile.