This section describes how to enable AWS Secrets Manager after Kyvos deployment to securely store and manage credentials used by Kyvos services.

If your cluster was deployed without AWS Secrets Manager, you can enable it later through the Kyvos Manager.

Prerequisites

The following steps for configuring Secret Manager apply only to External Compute (EMR).

1. Go to the EMR Configuration page on Kyvos Manager.

2. On the Secrets fields, provide your Secret Manager. 

3. In the HCatalog Library Path, add the path /usr/share/aws/aws-java-sdk/aws-java-sdk-secretsmanager-*.jar 

4. Click the Apply button from the top-right of the page to update the EMR configuration.

5. Restart Analytical Servers from the Actions menu on the Dashboard page.

Enabling Secrets Manager on AWS post deployment

Ensure that the following steps are identical for both External Compute and Kyvos Native.

1. Go to Manage Credentials > Switch Secret Store, and select the Migrate Password to Secrets Manager checkbox.

2. Click the Apply button from the top-right of the page.

3. Restart Analytical Servers from the Actions menu on the Dashboard page.