allow secrets set via env variable

src/vsp/shared/aws_clients.py

@@ -12,11 +12,12 @@ from mypy_boto3_s3 import Client as S3Client
 from mypy_boto3_ssm import Client as SSMClient
 
 from vsp.shared import config, logger_factory
+import os
 
 logger = logger_factory.get_logger(__name__)
 
-USE_ENV_VAR_INSTEAD = False
-def path_to_env_var(path):
+USE_ENV_VAR_INSTEAD = True
+def path_to_env_var(path: str):
     # Remove leading slash and replace other slashes with underscores
     env_var = path.lstrip('/').replace('/', '_').upper()
     return env_var
@@ -275,6 +276,15 @@ def fetch_from_parameter_store(parameter_name: str, is_secret: bool = False) ->
         ParameterNotFoundError: If the parameter is not found.
         ParameterStoreAccessError: If there's an error accessing the Parameter Store.
     """
+    if USE_ENV_VAR_INSTEAD:
+        env_var_name = path_to_env_var(parameter_name)
+        logger.info("Fetching parameter from environment variable", parameter=env_var_name)
+        value = os.environ.get(env_var_name)
+        if value is None:
+            raise ParameterNotFoundError(f"Environment variable '{env_var_name}' not found")
+        return value
+
+
     logger.info("Fetching parameter from Parameter Store", parameter=parameter_name)
     ssm_client = get_ssm_client()
     try: