text: # Copyright 2010-2018 Amazon.com, Inc. or its affiliates. All Rights Reserved.
  #
  # This file is licensed under the Apache License, Version 2.0 (the "License").
  # You may not use this file except in compliance with the License. A copy of the
  # License is located at
  #
  # http://aws.amazon.com/apache2.0/
  #
  # This file is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS
  # OF ANY KIND, either express or implied. See the License for the specific
  # language governing permissions and limitations under the License.
  #
  # ABOUT THIS PYTHON SAMPLE: This sample is part of the AWS Secrets Manager Console
  # Retrieve a Secret Value with AWS SDK for Python
  #
  # Use this code snippet in your app.
  # If you need more information about configurations or implementing the sample code, visit the AWS docs:   
  # https://aws.amazon.com/developers/getting-started/python/
  
  import boto3
  import base64
  from botocore.exceptions import ClientError
  
  
  def get_secret():
  
      secret_name = "<<{{MySecretName}}>>"
      region_name = "<<{{MyRegionName}}>>"
  
      # Create a Secrets Manager client
      session = boto3.session.Session()
      client = session.client(
          service_name='secretsmanager',
          region_name=region_name
      )
  
      # In this sample we only handle the specific exceptions for the 'GetSecretValue' API.
      # See https://docs.aws.amazon.com/secretsmanager/latest/apireference/API_GetSecretValue.html
      # We rethrow the exception by default.
  
      try:
          get_secret_value_response = client.get_secret_value(
              SecretId=secret_name
          )
      except ClientError as e:
          if e.response['Error']['Code'] == 'DecryptionFailureException':
              # Secrets Manager can't decrypt the protected secret text using the provided KMS key.
              # Deal with the exception here, and/or rethrow at your discretion.
              raise e
          elif e.response['Error']['Code'] == 'InternalServiceErrorException':
              # An error occurred on the server side.
              # Deal with the exception here, and/or rethrow at your discretion.
              raise e
          elif e.response['Error']['Code'] == 'InvalidParameterException':
              # You provided an invalid value for a parameter.
              # Deal with the exception here, and/or rethrow at your discretion.
              raise e
          elif e.response['Error']['Code'] == 'InvalidRequestException':
              # You provided a parameter value that is not valid for the current state of the resource.
              # Deal with the exception here, and/or rethrow at your discretion.
              raise e
          elif e.response['Error']['Code'] == 'ResourceNotFoundException':
              # We can't find the resource that you asked for.
              # Deal with the exception here, and/or rethrow at your discretion.
              raise e
      else:
          # Decrypts secret using the associated KMS CMK.
          # Depending on whether the secret is a string or binary, one of these fields will be populated.
          if 'SecretString' in get_secret_value_response:
              secret = get_secret_value_response['SecretString']
          else:
              decoded_binary_secret = base64.b64decode(get_secret_value_response['SecretBinary'])
              
      # Your code goes here.  
  
  #snippet-comment:[These are tags for the AWS doc team's sample catalog. Do not remove.]
  #snippet-sourcedescription:[secrets_manager.py demonstrates how to retrieve a secret from AWS Secrets Manager.]
  #snippet-keyword:[Python]
  #snippet-keyword:[AWS SDK for Python (Boto3)]
  #snippet-keyword:[Code Sample]
  #snippet-keyword:[AWS Secrets Manager]
  #snippet-service:[secretsmanager]
  #snippet-sourcetype:[full-example]
  #snippet-sourcedate:[2018-09-25]
  #snippet-sourceauthor:[jschwarzwalder (AWS)]
  
  