aws-secrets-manager

Store and rotate sensitive credentials in AWS Secrets Manager.

Updated Apr 15, 2026

Search Tags:#aws #lambda #secret rotation #secrets manager #iam policies #ecs ecs task secrets #eks external secrets

Ready to run

npx skills add https://github.com/ToanPV90/dotfiles --skill aws-secrets-manager-toanpv90

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: aws-secrets-manager
Source: https://github.com/ToanPV90/dotfiles/tree/main/agents/.agents/skills/aws-secrets-manager
Command: npx skills add https://github.com/ToanPV90/dotfiles --skill aws-secrets-manager-toanpv90

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill solves the problem of securely storing, granting access to, and automatically rotating sensitive credentials without hardcoding them in applications or configs.

Core Features & Use Cases

Secret lifecycle management: Create, read, update, tag, and delete secrets with consistent naming and encryption practices.
Automatic rotation: Enable rotation using an AWS Lambda rotation function with the required create/set/test/finish flow.
Application integration: Fetch secrets via boto3 for apps, wire secrets into ECS task definitions, or use External Secrets Operator in EKS.
Security hardening: Apply least-privilege IAM and optionally add resource-based policies to restrict who can read secrets.

Quick Start

Configure and enable automatic rotation for a secret named myapp/production/database by running the rotation enable and verification steps with AWS Secrets Manager and its rotation Lambda integration.

Frequently Asked Questions about aws-secrets-manager

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I automatically rotate database credentials in AWS without hardcoding them?▼

Automate database credential rotation in AWS by storing secrets in Secrets Manager and configuring a Lambda rotation function to execute the createSecret, setSecret, testSecret, and finishSecret steps securely.

How does Secrets Manager integrate with ECS task definitions and EKS External Secrets Operator?▼

Secrets Manager integrates with ECS by wiring secrets directly into task definitions, and connects to EKS by using the External Secrets Operator to fetch and synchronize credentials for infrastructure workloads.

What IAM policies are needed to enforce least-privilege access for Lambda and ECS secrets?▼

Enforcing least-privilege access requires IAM policies granting specific Secrets Manager API permissions to Lambda and ECS task roles, optionally augmented with resource-based policies to restrict secret retrieval.

Can I use boto3 to fetch and manage TLS material and API keys for my applications?▼

Yes, you can use boto3 to programmatically fetch and manage database credentials, API keys, and TLS material stored in Secrets Manager for your application workloads.

What's the best way to manage the lifecycle of sensitive credentials in AWS environments?▼

Manage the secret lifecycle in AWS by using Secrets Manager to create, read, update, tag, and delete sensitive credentials with consistent naming and encryption practices for application and infrastructure workloads.

Do I need AWS CLI access to configure and verify secret rotation for production databases?▼

Yes, you need AWS CLI access to configure Secrets Manager, enable automatic rotation for production database credentials, and run the verification steps with the rotation Lambda integration.