# Fetch AWS Secret in playbook

**URL:** <https://forum.ansible.com/t/fetch-aws-secret-in-playbook/34815>\
**Category:** Ansible Project\
**Tags:** aws\
**Created:** [March 20, 2021, 10:30am UTC](https://forum.ansible.com/t/fetch-aws-secret-in-playbook/34815 "2021-03-20T10:30:14Z")\
**Posts on this page:** 6\
**Page:** 1

<div class="post-metadata">

**Author:** ![amkur\_p](https://avatars.discourse-cdn.com/v4/letter/a/9fc29f/32.png) [@amkur\_p](https://forum.ansible.com/u/amkur_p)\
**Post date:** [March 20, 2021, 10:30am UTC](https://forum.ansible.com/t/fetch-aws-secret-in-playbook/34815/1 "2021-03-20T10:30:14Z")

</div>

Hi Community

I wrote the below playbook to fetch an aws secret, but it says syntax error. So can anyone please advise as what might be going wrong ?

Playbook

---

<div class="post-metadata">

**Author:** ![Jorge\_Rua1](https://avatars.discourse-cdn.com/v4/letter/j/a87d85/32.png) [@Jorge\_Rua1](https://forum.ansible.com/u/Jorge_Rua1)\
**Post date:** [March 20, 2021, 10:34am UTC](https://forum.ansible.com/t/fetch-aws-secret-in-playbook/34815/2 "2021-03-20T10:34:23Z")

</div>

Remove the single commas on all arguments otherwise they will be literally interpreted as strings.  
wild: “{{ lookup(aws\_secret=‘DigiCertCA’, bypath=true, region=‘us-east-1’, aws\_access\_key=‘{{dev\_access\_key}}’, aws\_secret\_key=‘{{dev\_secret\_key}}’ )}}”

---

<div class="post-metadata">

**Author:** ![amkur\_p](https://avatars.discourse-cdn.com/v4/letter/a/9fc29f/32.png) [@amkur\_p](https://forum.ansible.com/u/amkur_p)\
**Post date:** [March 20, 2021, 11:03am UTC](https://forum.ansible.com/t/fetch-aws-secret-in-playbook/34815/3 "2021-03-20T11:03:29Z")

</div>

Thank you for your response, that too didnt worked out. Got the templating type error

fatal: [localhost]: FAILED! =\> {  
“msg”: “Unexpected templating type error occurred on ({{ lookup(aws\_secret=‘DigiCertCA’, bypath=true, region=‘us-east-1’, aws\_access\_key=‘{{dev\_access\_key}}’, aws\_secret\_key=‘{{dev\_secret\_key}}’ )}}): \_lookup() takes at least 2 arguments (1 given)”  
}

Playbook

---

<div class="post-metadata">

**Author:** ![racke](https://sea1.discourse-cdn.com/ansible/user_avatar/forum.ansible.com/racke/32/4767_2.png) [@racke](https://forum.ansible.com/u/racke)\
**Post date:** [March 20, 2021, 12:14pm UTC](https://forum.ansible.com/t/fetch-aws-secret-in-playbook/34815/4 "2021-03-20T12:14:00Z")

</div>

> Thank you for your response, that too didnt worked out. Got the templating type error
> 
> fatal: [localhost]: FAILED! =\> {  
> "msg": "Unexpected templating type error occurred on ({{ lookup(aws\_secret='DigiCertCA', bypath=true,  
> region='us-east-1', aws\_access\_key='{{dev\_access\_key}}', aws\_secret\_key='{{dev\_secret\_key}}' )}}): \_lookup() takes at  
> least 2 arguments (1 given)"  
> }

For starters I think "lookup(aws\_secret='DigiCertCA'" is incorrect.

I should be lookup('aws\_secret', ....)

Regards  
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Racke

---

<div class="post-metadata">

**Author:** ![amkur\_p](https://avatars.discourse-cdn.com/v4/letter/a/9fc29f/32.png) [@amkur\_p](https://forum.ansible.com/u/amkur_p)\
**Post date:** [March 20, 2021, 1:07pm UTC](https://forum.ansible.com/t/fetch-aws-secret-in-playbook/34815/5 "2021-03-20T13:07:47Z")

</div>

Thank you Stefan for your response.

That also didnt worked. Got the below error. It is a syntax error.

fatal: [localhost]: FAILED! =\> {  
“msg”: “template error while templating string: expected token ‘,’, got ‘=’. String: {{ lookup(‘aws\_secret’=DigiCertCA, bypath=true, region=‘us-east-1’, aws\_access\_key=‘{{dev\_access\_key}}’, aws\_secret\_key=‘{{dev\_secret\_key}}’ )}}”  
}

Playbook

---

<div class="post-metadata">

**Author:** ![racke](https://sea1.discourse-cdn.com/ansible/user_avatar/forum.ansible.com/racke/32/4767_2.png) [@racke](https://forum.ansible.com/u/racke)\
**Post date:** [March 20, 2021, 1:11pm UTC](https://forum.ansible.com/t/fetch-aws-secret-in-playbook/34815/6 "2021-03-20T13:11:30Z")

</div>

> Thank you Stefan for your response.
> 
> That also didnt worked. Got the below error. It is a syntax error.
> 
> fatal: [localhost]: FAILED! =\> {  
> "msg": "template error while templating string: expected token ',', got '='. String: {{  
> lookup('aws\_secret'=DigiCertCA, bypath=true, region='us-east-1', aws\_access\_key='{{dev\_access\_key}}',  
> aws\_secret\_key='{{dev\_secret\_key}}' )}}"  
> }

That's no surprise really. Please look up at the examples in the documentation and don't try  
to shove random strings to Ansible.

Regards  
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Racke