title: Using AWS Secrets Manager with Python (Lambda Console)
body: <p>I am attempting to use Secrets Manager a Lambda function in AWS. Secrets a manager is used to store database credentials to Snowflake (username, password).</p>
  
  <p>I managed to set up a secret in Secrets Manager which contains several key/value pairs (e.g. one for username, another for password).</p>
  
  <p>Now I am trying to refer to these values in my Python function code. AWS documentation kindly provides the following snippet:</p>
  
  <pre><code>import boto3
  import base64
  from botocore.exceptions import ClientError
  
  
  def get_secret():
  
      secret_name = "MY/SECRET/NAME"
      region_name = "us-west-2"
  
      # Create a Secrets Manager client
      session = boto3.session.Session()
      client = session.client(
          service_name='secretsmanager',
          region_name=region_name
      )
  
      # In this sample we only handle the specific exceptions for the 'GetSecretValue' API.
      # See https://docs.aws.amazon.com/secretsmanager/latest/apireference/API_GetSecretValue.html
      # We rethrow the exception by default.
  
      try:
          get_secret_value_response = client.get_secret_value(
              SecretId=secret_name
          )
      except ClientError as e:
          if e.response['Error']['Code'] == 'DecryptionFailureException':
              # Secrets Manager can't decrypt the protected secret text using the provided KMS key.
              # Deal with the exception here, and/or rethrow at your discretion.
              raise e
          elif e.response['Error']['Code'] == 'InternalServiceErrorException':
              # An error occurred on the server side.
              # Deal with the exception here, and/or rethrow at your discretion.
              raise e
          elif e.response['Error']['Code'] == 'InvalidParameterException':
              # You provided an invalid value for a parameter.
              # Deal with the exception here, and/or rethrow at your discretion.
              raise e
          elif e.response['Error']['Code'] == 'InvalidRequestException':
              # You provided a parameter value that is not valid for the current state of the resource.
              # Deal with the exception here, and/or rethrow at your discretion.
              raise e
          elif e.response['Error']['Code'] == 'ResourceNotFoundException':
              # We can't find the resource that you asked for.
              # Deal with the exception here, and/or rethrow at your discretion.
              raise e
      else:
          # Decrypts secret using the associated KMS CMK.
          # Depending on whether the secret is a string or binary, one of these fields will be populated.
          if 'SecretString' in get_secret_value_response:
              secret = get_secret_value_response['SecretString']
          else:
              decoded_binary_secret = base64.b64decode(get_secret_value_response['SecretBinary'])
  
      # Your code goes here.
  </code></pre>
  
  <p>Later in my <code>def lambda_handler(event, context)</code> function, I have the following snippet to establish a connection to my database:</p>
  
  <pre><code>        conn = snowflake.connector.connect(
              user=USERNAME,
              password=PASSWORD,
              account=ACCOUNT,
              warehouse=WAREHOUSE,
              role=ROLE
              )
  </code></pre>
  
  <p>However, I am unable to figure out how to use the <code>get_secret()</code> function to return values for parameters like <code>USERNAME</code> or <code>PASSWORD</code>. </p>
  
  <p>How can this be accomplished? Thank you for the help!</p>