skills.rest
aurainfosec
aurainfosecOFFICIAL
Explore all skills by this author →
WebsiteGitHub

secrets-manager

Store, retrieve, and rotate application credentials in AWS Secrets Manager.

Updated Feb 16, 2026
Search Tags:#aws cli#secret rotation#secrets manager#iam permissions#kms encryption#cloudwatch auditing
One-click install
npx skills add https://github.com/aurainfosec/cloud-review-automation-poc --skill secrets-manager-aurainfosec
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: secrets-manager
Source: https://github.com/aurainfosec/cloud-review-automation-poc/tree/main/skills/secrets-manager
Command: npx skills add https://github.com/aurainfosec/cloud-review-automation-poc --skill secrets-manager-aurainfosec

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

AWS Secrets Manager centralizes protection of sensitive credentials so you can store secrets securely, rotate them automatically, and prevent hard-coded values from spreading across applications.

Core Features & Use Cases

  • Secure Secret Storage: Keeps encrypted credentials and structured key-value data (up to 64 KB) for applications and AWS services.
  • Versioning & Rotation: Manages secret versions using AWSCURRENT/AWSPENDING/AWSPREVIOUS and enables automatic rotation with Lambda.
  • Application Integration: Supports reliable retrieval patterns (including caching and Lambda-based access) for apps, RDS integration, and credential refresh workflows.

Quick Start

Ask for an AWS Secrets Manager setup that creates a secret named prod/myapp/database, retrieves it securely from an application, and configures automatic rotation every 30 days for RDS.

Frequently Asked Questions about secrets-manager

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I rotate AWS Secrets Manager credentials automatically for an RDS database?▼

Configure automatic secret rotation in AWS Secrets Manager by assigning a Lambda function to handle credential updates and setting a rotation schedule, such as every 30 days for RDS databases.

What is the best way to retrieve secrets in AWS Lambda without hard-coding credentials?▼

Retrieve secrets in AWS Lambda by calling AWS Secrets Manager via the AWS CLI or SDK at runtime, eliminating hard-coded credentials and enabling secure application integration with caching.

How does secret versioning work in AWS Secrets Manager?▼

Secret versioning in AWS Secrets Manager works by assigning staging labels like AWSCURRENT, AWSPENDING, and AWSPREVIOUS to track encrypted credential states during rotation workflows.

Do I need IAM permissions and KMS encryption to access secrets in AWS Secrets Manager?▼

Yes, accessing secrets in AWS Secrets Manager requires KMS encryption for secure storage and IAM permissions to enforce least-privilege access patterns via resource policies.

Why does AWS Secrets Manager rotation fail and how do I troubleshoot it?▼

Troubleshoot AWS Secrets Manager rotation failures by checking CloudWatch auditing logs for Lambda errors and verifying that IAM permissions and resource policies allow the rotation workflow.

Can I store structured key-value data in AWS Secrets Manager?▼

Yes, AWS Secrets Manager securely stores encrypted structured key-value data up to 64 KB for applications and AWS services, preventing hard-coded values from spreading.

Related Skills

Explore More Legal & Compliance Skills→
awsaws
2.3k

creating-secrets-using-best-practices

Automate AWS Secrets Manager secret creation with encryption, rotation, and auditing.

Official
Advanced
giuseppe-trisciuogliogiuseppe-trisciuoglio
322

aws-sdk-java-v2-secrets-manager

Store and retrieve AWS Secrets Manager secrets using the Java SDK 2.x.

Community
Intermediate
BAIZ1DBAIZ1D

aws-secrets-rotation

Automate cloud database and API key rotation with AWS Secrets Manager and Lambda.

Community
Advanced
Q16GQ16G
83

secret-detection

Detect hard-coded secrets in code repositories and generate remediation guidance.

Community
Intermediate