feat: allow custom key names for AWS SES SMTP credentials in Secrets Manager

src/provider/credentials-handler.lambda.ts

@@ -16,6 +16,8 @@ export async function handler(event: OnEventRequest): Promise<OnEventResponse |
     // Create access key
     const username = event.ResourceProperties.UserName;
     const secretId = event.ResourceProperties.SecretId;
+    const userNameSecretKey = event.ResourceProperties.UserNameSecretKey;
+    const passwordSecretKey = event.ResourceProperties.PasswordSecretKey;
     const region = process.env.AWS_DEFAULT_REGION as string;
     const iam = new AWS.IAM();
     const secretsManager = new AWS.SecretsManager();
@@ -36,8 +38,8 @@ export async function handler(event: OnEventRequest): Promise<OnEventResponse |
       .putSecretValue({
         SecretId: secretId,
         SecretString: JSON.stringify({
-          [Credentials.USERNAME]: accessKeyId,
-          [Credentials.PASSWORD]: smtpPassword,
+          [userNameSecretKey || Credentials.USERNAME]: accessKeyId,
+          [passwordSecretKey || Credentials.PASSWORD]: smtpPassword,
         }),
       })
       .promise();

src/ses-smtp-credentials.ts

@@ -18,6 +18,14 @@ export interface SesSmtpCredentialsProps {
    * Optional, an SecretsManager secret to write the AWS SES Smtp credentials to.
    */
   readonly secret?: secretsmanager.ISecret;
+  /**
+   * Optional, the key name to use in the secret to write the username to (defaults to Credentials.USERNAME)
+   */
+  readonly userNameSecretKey?: string;
+  /**
+   * Optional, the key name to use in the secret to write the password to (defaults to Credentials.PASSWORD)
+   */
+  readonly passwordSecretKey?: string;
 }
 
 /**
@@ -93,6 +101,8 @@ export class SesSmtpCredentials extends Construct {
       properties: {
         UserName: user.userName,
         SecretId: this.secret.secretArn,
+        UserNameSecretKey: props.userNameSecretKey,
+        PasswordSecretKey: props.passwordSecretKey,
       },
     } as CustomResourceProps);
     customResource.node.addDependency(user);