skills.rest
ToanPV90
ToanPV90COMMUNITY
Explore all skills by this author →
GitHub

aws-secrets-manager

Store and rotate sensitive credentials in AWS Secrets Manager.

Updated Apr 15, 2026
Search Tags:#aws#lambda#secret rotation#secrets manager#iam policies#ecs ecs task secrets#eks external secrets
One-click install
npx skills add https://github.com/ToanPV90/dotfiles --skill aws-secrets-manager-toanpv90
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: aws-secrets-manager
Source: https://github.com/ToanPV90/dotfiles/tree/main/agents/.agents/skills/aws-secrets-manager
Command: npx skills add https://github.com/ToanPV90/dotfiles --skill aws-secrets-manager-toanpv90

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill solves the problem of securely storing, granting access to, and automatically rotating sensitive credentials without hardcoding them in applications or configs.

Core Features & Use Cases

  • Secret lifecycle management: Create, read, update, tag, and delete secrets with consistent naming and encryption practices.
  • Automatic rotation: Enable rotation using an AWS Lambda rotation function with the required create/set/test/finish flow.
  • Application integration: Fetch secrets via boto3 for apps, wire secrets into ECS task definitions, or use External Secrets Operator in EKS.
  • Security hardening: Apply least-privilege IAM and optionally add resource-based policies to restrict who can read secrets.

Quick Start

Configure and enable automatic rotation for a secret named myapp/production/database by running the rotation enable and verification steps with AWS Secrets Manager and its rotation Lambda integration.

Frequently Asked Questions about aws-secrets-manager

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automatically rotate database credentials in AWS without hardcoding them?▼

Automate database credential rotation in AWS by storing secrets in Secrets Manager and configuring a Lambda rotation function to execute the createSecret, setSecret, testSecret, and finishSecret steps securely.

How does Secrets Manager integrate with ECS task definitions and EKS External Secrets Operator?▼

Secrets Manager integrates with ECS by wiring secrets directly into task definitions, and connects to EKS by using the External Secrets Operator to fetch and synchronize credentials for infrastructure workloads.

What IAM policies are needed to enforce least-privilege access for Lambda and ECS secrets?▼

Enforcing least-privilege access requires IAM policies granting specific Secrets Manager API permissions to Lambda and ECS task roles, optionally augmented with resource-based policies to restrict secret retrieval.

Can I use boto3 to fetch and manage TLS material and API keys for my applications?▼

Yes, you can use boto3 to programmatically fetch and manage database credentials, API keys, and TLS material stored in Secrets Manager for your application workloads.

What's the best way to manage the lifecycle of sensitive credentials in AWS environments?▼

Manage the secret lifecycle in AWS by using Secrets Manager to create, read, update, tag, and delete sensitive credentials with consistent naming and encryption practices for application and infrastructure workloads.

Do I need AWS CLI access to configure and verify secret rotation for production databases?▼

Yes, you need AWS CLI access to configure Secrets Manager, enable automatic rotation for production database credentials, and run the verification steps with the rotation Lambda integration.

Related Skills

Explore More Software Engineering Skills→
david-2814david-2814
3

secrets-manager

Manage AWS Secrets Manager secrets, rotation, versioning, and cross-account sharing via AWS CLI.

Community
Advanced
dralgorhythmdralgorhythm
111

deploy-aws-ecs

Automate containerized application deployment to AWS ECS/Fargate with ECR and task definitions.

Community
Advanced
balsm-healthbalsm-health
2

securing-aws-lambda-execution-roles

Secure AWS Lambda execution roles with least-privilege IAM policies and permission boundaries.

Official
Advanced
cuoreinpacecuoreinpace

secrets-management

Manage secrets in CI/CD pipelines with Vault and cloud secret managers.

Community
Advanced