env-secrets-manager

Securely manage environment variables by centralizing credentials with encryption at rest, automated key rotation, and provider integration. This protects secrets from exposure while ensuring applications load validated configurations during local development and cloud deployments.

AWS Secrets Manager and HashiCorp Vault are supported for application secret rotation. The skill integrates directly with these providers to automate credential updates and lifecycle management, ensuring backend services continually access valid, rotated keys.

Automate key rotation and credential updates by configuring the rotation lifecycle settings within your provider integration. This approach automatically refreshes application secrets across environments, eliminating manual updates and reducing the risk of expired credentials.

Loading encrypted secrets from local config files is fully supported during local development. The skill safely loads variables into the application runtime with environment validation, ensuring local workflows mirror cloud deployment security without exposing unencrypted data.

Encryption at rest protects application secrets in storage and config files by encoding the data so it remains unreadable without proper access controls. This secures credentials at rest and provides basic auditing visibility for secret usage and permissions.