Access a secret version

usingSystem;
usingGoogle.Cloud.SecretManager.V1 ;
publicclassAccessSecretVersionSample
{
publicStringAccessSecretVersion(
stringprojectId="my-project",stringsecretId="my-secret",stringsecretVersionId="123")
{
// Create the client.
SecretManagerServiceClient client=SecretManagerServiceClient .Create ();
// Build the resource name.
SecretVersionName secretVersionName=newSecretVersionName (projectId,secretId,secretVersionId);
// Call the API.
AccessSecretVersionResponse result=client.AccessSecretVersion (secretVersionName);
// Convert the payload to a string. Payloads are bytes by default.
Stringpayload=result.Payload .Data .ToStringUtf8();
returnpayload;
}
}

import(
"context"
"fmt"
"hash/crc32"
"io"
secretmanager"cloud.google.com/go/secretmanager/apiv1"
"cloud.google.com/go/secretmanager/apiv1/secretmanagerpb"
)
// accessSecretVersion accesses the payload for the given secret version if one
// exists. The version can be a version number as a string (e.g. "5") or an
// alias (e.g. "latest").
funcaccessSecretVersion(wio.Writer,namestring)error{
// name := "projects/my-project/secrets/my-secret/versions/5"
// name := "projects/my-project/secrets/my-secret/versions/latest"
// Create the client.
ctx:=context.Background()
client,err:=secretmanager.NewClient (ctx)
iferr!=nil{
returnfmt.Errorf("failed to create secretmanager client: %w",err)
}
deferclient.Close ()
// Build the request.
req:=&secretmanagerpb.AccessSecretVersionRequest{
Name:name,
}
// Call the API.
result,err:=client.AccessSecretVersion(ctx,req)
iferr!=nil{
returnfmt.Errorf("failed to access secret version: %w",err)
}
// Verify the data checksum.
crc32c:=crc32.MakeTable(crc32.Castagnoli)
checksum:=int64(crc32.Checksum(result.Payload.Data,crc32c))
ifchecksum!=*result.Payload.DataCrc32C{
returnfmt.Errorf("Data corruption detected.")
}
// WARNING: Do not print the secret in a production environment - this snippet
// is showing how to access the secret material.
fmt.Fprintf(w,"Plaintext: %s\n",string(result.Payload.Data))
returnnil
}

importcom.google.cloud.secretmanager.v1.AccessSecretVersionResponse ;
importcom.google.cloud.secretmanager.v1.SecretManagerServiceClient ;
importcom.google.cloud.secretmanager.v1.SecretVersionName ;
importjava.io.IOException;
importjava.util.zip.CRC32C;
importjava.util.zip.Checksum;
publicclass AccessSecretVersion{
publicstaticvoidaccessSecretVersion()throwsIOException{
// TODO(developer): Replace these variables before running the sample.
StringprojectId="your-project-id";
StringsecretId="your-secret-id";
StringversionId="your-version-id";
accessSecretVersion(projectId,secretId,versionId);
}
// Access the payload for the given secret version if one exists. The version
// can be a version number as a string (e.g. "5") or an alias (e.g. "latest").
publicstaticvoidaccessSecretVersion(StringprojectId,StringsecretId,StringversionId)
throwsIOException{
// Initialize client that will be used to send requests. This client only needs to be created
// once, and can be reused for multiple requests. After completing all of your requests, call
// the "close" method on the client to safely clean up any remaining background resources.
try(SecretManagerServiceClient client=SecretManagerServiceClient .create()){
SecretVersionName secretVersionName=SecretVersionName .of(projectId,secretId,versionId);
// Access the secret version.
AccessSecretVersionResponse response=client.accessSecretVersion(secretVersionName);
// Verify checksum. The used library is available in Java 9+.
// If using Java 8, you may use the following:
// https://github.com/google/guava/blob/e62d6a0456420d295089a9c319b7593a3eae4a83/guava/src/com/google/common/hash/Hashing.java#L395
byte[]data=response.getPayload ().getData().toByteArray();
Checksumchecksum=newCRC32C();
checksum.update(data,0,data.length);
if(response.getPayload ().getDataCrc32C()!=checksum.getValue()){
System.out.printf("Data corruption detected.");
return;
}
// Print the secret payload.
//
// WARNING: Do not print the secret in a production environment - this
// snippet is showing how to access the secret material.
Stringpayload=response.getPayload ().getData().toStringUtf8();
System.out.printf("Plaintext: %s\n",payload);
}
}
}

/**
 * TODO(developer): Uncomment these variables before running the sample.
 */
// const name = 'projects/my-project/secrets/my-secret/versions/5';
// const name = 'projects/my-project/secrets/my-secret/versions/latest';
// Imports the Secret Manager library
const{SecretManagerServiceClient}=require('@google-cloud/secret-manager');
// Instantiates a client
constclient=newSecretManagerServiceClient ();
asyncfunctionaccessSecretVersion(){
const[version]=awaitclient.accessSecretVersion({
name:name,
});
// Extract the payload as a string.
constpayload=version.payload.data.toString();
// WARNING: Do not print the secret in a production environment - this
// snippet is showing how to access the secret material.
console.info(`Payload: ${payload}`);
}
accessSecretVersion();

// Import the Secret Manager client library.
use Google\Cloud\SecretManager\V1\Client\SecretManagerServiceClient;
use Google\Cloud\SecretManager\V1\AccessSecretVersionRequest;
/**
 * @param string $projectId Your Google Cloud Project ID (e.g. 'my-project')
 * @param string $secretId Your secret ID (e.g. 'my-secret')
 * @param string $versionId Your version ID (e.g. 'latest' or '5');
 */
function access_secret_version(string $projectId, string $secretId, string $versionId): void
{
 // Create the Secret Manager client.
 $client = new SecretManagerServiceClient();
 // Build the resource name of the secret version.
 $name = $client->secretVersionName($projectId, $secretId, $versionId);
 // Build the request.
 $request = AccessSecretVersionRequest::build($name);
 // Access the secret version.
 $response = $client->accessSecretVersion($request);
 // Print the secret payload.
 //
 // WARNING: Do not print the secret in a production environment - this
 // snippet is showing how to access the secret material.
 $payload = $response->getPayload()->getData();
 printf('Plaintext: %s', $payload);
}

fromgoogle.cloudimport secretmanager
importgoogle_crc32c
defaccess_secret_version(
 project_id: str, secret_id: str, version_id: str
) -> secretmanager.AccessSecretVersionResponse:
"""
 Access the payload for the given secret version if one exists. The version
 can be a version number as a string (e.g. "5") or an alias (e.g. "latest").
 """
 # Create the Secret Manager client.
 client = secretmanager.SecretManagerServiceClient()
 # Build the resource name of the secret version.
 name = f"projects/{project_id}/secrets/{secret_id}/versions/{version_id}"
 # Access the secret version.
 response = client.access_secret_version(request={"name": name})
 # Verify payload checksum.
 crc32c = google_crc32c.Checksum()
 crc32c.update(response.payload.data)
 if response.payload.data_crc32c != int(crc32c.hexdigest(), 16):
 print("Data corruption detected.")
 return response
 # Print the secret payload.
 #
 # WARNING: Do not print the secret in a production environment - this
 # snippet is showing how to access the secret material.
 payload = response.payload.data.decode("UTF-8")
 print(f"Plaintext: {payload}")

# project_id = "YOUR-GOOGLE-CLOUD-PROJECT" # (e.g. "my-project")
# secret_id = "YOUR-SECRET-ID" # (e.g. "my-secret")
# version_id = "YOUR-VERSION" # (e.g. "5" or "latest")
# Require the Secret Manager client library.
require"google/cloud/secret_manager"
# Create a Secret Manager client.
client=Google::Cloud::SecretManager .secret_manager_service
# Build the resource name of the secret version.
name=client.secret_version_path(
project:project_id,
secret:secret_id,
secret_version:version_id
)
# Access the secret version.
version=client.access_secret_versionname:name
# Print the secret payload.
#
# WARNING: Do not print the secret in a production environment - this
# snippet is showing how to access the secret material.
payload=version.payload.data
puts"Plaintext: #{payload}"