secrets-manager

Manage AWS Secrets Manager secrets with boto3 and AWS CLI.

Updated Feb 28, 2026
One-click install
npx skills add https://github.com/tjl8787/mycodex-skills --skill secrets-manager-tjl8787
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: secrets-manager
Source: https://github.com/tjl8787/mycodex-skills/tree/main/skills/secrets-manager
Command: npx skills add https://github.com/tjl8787/mycodex-skills --skill secrets-manager-tjl8787

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill provides a secure and automated way to manage sensitive information like API keys, database credentials, and certificates, reducing the risk of exposure and simplifying rotation.

Core Features & Use Cases

  • Secure Storage: Encrypts and stores secrets with versioning.
  • Automated Rotation: Configures automatic rotation for credentials, especially for services like RDS.
  • Application Integration: Provides patterns for retrieving secrets in applications and Lambda functions, including caching and using the Lambda extension.
  • Use Case: Automatically rotate your RDS database password every 30 days without manual intervention, ensuring enhanced security.

Quick Start

Use the secrets-manager skill to create a new secret named 'prod/myapp/database' with the provided JSON string.

Frequently Asked Questions about secrets-manager

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automatically rotate RDS database credentials in AWS?

Automated RDS credential rotation in AWS uses Secrets Manager rotation strategies to schedule updates without manual intervention. It configures Lambda functions to execute the password changes and update the stored secrets automatically every 30 days.

How do I retrieve and cache secrets in Lambda functions?

Retrieving and caching secrets in Lambda functions uses the AWS Lambda extension and boto3 to fetch sensitive values securely. This integration pattern reduces API calls and improves application performance by keeping credentials in local memory.

What IAM permissions are needed for AWS Secrets Manager?

IAM permissions for AWS Secrets Manager require specific policy actions to allow creating, retrieving, and rotating secrets securely. Proper configuration ensures applications and Lambda functions have authorized access without exposing credentials broadly across the account.

Can I use AWS CLI to manage secret creation and retrieval?

Yes, you can use AWS CLI to manage secret creation and retrieval programmatically. The tool supports secure storage operations, allowing you to input JSON strings and fetch encrypted sensitive data directly from your terminal or automation scripts.

Does AWS Secrets Manager work with VPC endpoints?

Yes, AWS Secrets Manager works with VPC endpoints to allow secure secret retrieval without traversing the public internet. This setup ensures encrypted database credentials and API keys remain private within your internal network architecture.