Secrets, Revealed with Intention

This Astro frontend demonstrates Chassis frontend secret support end-to-end. Some values are resolved during build and baked into the static HTML. Others are fetched at runtime from a secure Lambda endpoint.

Astro static build Build-time secret Runtime secret Service & frontend references

Build-time seal

Resolved during astro build using Secrets Manager.

Sealed at build time: BDBD1171
Build secret resolved successfully.

Runtime secrets

Resolved live from a Lambda function URL.

Frontend secret
Loading...
Service reference (chassis-web)
Loading...
Frontend reference (catalog-explorer)
Loading...
Waiting for runtime secrets...

How to read this page

What's static vs dynamic.

Static HTML
The seal above is compiled into the site output.
Dynamic fetch
Runtime values are fetched client-side from the Lambda URL.
References
The runtime secrets include one service secret and one frontend secret reference.

Runtime endpoint

Shared with the client via PUBLIC_SECRET_SHOWCASE_API_URL.

https://2q3vsg2t37fkgcqt3o7fg5bd240jzcjw.lambda-url.us-west-2.on.aws/