Update AWS CLI in Neo4j Enterprise AMI

[frederik_willae]

I'm using the neo4j-enterprise-1-4.1.0-apoc 2020-06-24T10_00_48Z AMI with id ami-0e3c7c3ddaf9cb758, as mentioned for eu-west-1 in the cloudformation template 'neo4j-enterprise-standalone-stack-4.1.0.json'.

This comes with AWS CLI version 1.14.44, which is over 2 years old.

I want to use aws secretsmanager get-secret-value to set the neo4j admin password _without having any trace of the password in environment variables or user data.

Would it be possible to update the Neo4j AMI?
An alternative procedure to achieve the same without AWS Secrets Manager could also be interesting.

Many thanks!

[tomas1]

The only thing I got working was this:
PASSWORD=aws secretsmanager get-secret-value --secret-id neo4jPassword | jq -r .SecretString | jq -r .password

aws cloudformation deploy
--region $AWS_DEFAULT_REGION
--stack-name $STACKNAME
--template-file $SINGLE_TEMPLATE
--parameter-overrides ParameterKey=VolumeSizeGB,ParameterValue=10
ParameterKey=VolumeType,ParameterValue=gp2
ParameterKey=Password,ParameterValue=$PASSWORD
--capabilities CAPABILITY_NAMED_IAM CAPABILITY_AUTO_EXPAND

More info: https://neo4j.com/developer/kb/deploy-aws-cloudformation/