ministryofjustice / aws-secrets-cache-php

v2.2.0 2026-08-26 10:21 UTC

Requires

• php: ^8.2
• aws/aws-sdk-php: ^3.198
• psr/simple-cache: ^1.0 || ^2.0 || ^3.0

Requires (Dev)

• phpstan/phpstan: ^2.0
• phpunit/phpunit: ^10.5
• squizlabs/php_codesniffer: ^3.10

Unknown License

• cache
• aws
• Secrets Manager

Published on Packagist.org on 2026-09-01 09:07 UTC

README

Reusable helper class to fetch secrets at runtime from AWS Secrets Manager with a cache to reduce duplicate requests.

Requires a pre-configured cache implementing StorageInterface from laminas-cache.

Installation

composer require ministryofjustice/aws-secrets-cache-php

Usage

use Aws\SecretsManager\SecretsManagerClient;
use Laminas\Cache\Storage\StorageInterface;
use MoJ\AwsSecretsCache\AwsSecretsCache;

$storage = /** instanceof StorageInterface */;
$smClient = new SecretsManagerClient([...]);

$secretsCache = new AwsSecretsCache(null, $storage, $smClient);

$mySecret = $secretsCache->getValue('my-secret');

The first parameter optionally defines a namespace that will apply to all secrets retrieved by that instance of the class. The following example would return the secret named namespace/my-secret:

$secretsCache = new AwsSecretsCache('namespace', ...);
$myNamespacedSecret = $secretsCache->getValue('my-secret');

You can use clearCache to remove an item from the underlying cache:

$mySecret = $secretsCache->getValue('my-secret');

$secretsCache->clearCache('my-secret');

$mySecret = $secretsCache->getValue('my-secret'); // Will fetch from AWS again

TTL must be implemented on the storage class, it is not applied by AwsSecretsCache.