ev import
Usage
Description
ev import reads secrets from an external provider and imports them into ev as a new release. This is useful for onboarding an existing project that already has secrets stored elsewhere.
Supported providers:
aws-secrets-manager— import from AWS Secrets Manager
After import, the secrets are stored according to your configured backend. If you are importing from AWS SM and have already set aws-secrets-manager as your backend, the secrets remain in AWS and ev records the metadata. If you are using ev's default backend, values are re-encrypted and stored in ev's database.
Flags
| Flag | Description |
|---|---|
--region | AWS region to read from |
--prefix | Filter secrets by path prefix (e.g. /myapp/prod/) |
--env | Target environment to import into (default: default_env from ev.yaml) |
Examples
Import all secrets under a prefix from AWS SM into the prod environment:
Import dev secrets under a different prefix:
Import into the default environment: