Secrets, Revealed with Intention

This Astro frontend demonstrates Chassis frontend secret support end-to-end. Some values are resolved during build and baked into the static HTML. Others are fetched at runtime from a secure Lambda endpoint.

Astro static build Build-time secret Runtime secret Service & frontend references

Build-time seal

Resolved during astro build using Secrets Manager.

Sealed at build time: BDBD1171

Build secret resolved successfully.

Runtime secrets

Resolved live from a Lambda function URL.

Frontend secret

Service reference (chassis-web)

Frontend reference (catalog-explorer)

Waiting for runtime secrets...

How to read this page

What's static vs dynamic.

Static HTML

The seal above is compiled into the site output.

Dynamic fetch

Runtime values are fetched client-side from the Lambda URL.

References

The runtime secrets include one service secret and one frontend secret reference.

Runtime endpoint

Shared with the client via PUBLIC_SECRET_SHOWCASE_API_URL.

https://2q3vsg2t37fkgcqt3o7fg5bd240jzcjw.lambda-url.us-west-2.on.aws/