Skip to main content

Store, manage, and retrieve AWS secrets.

# To show secrets stored by the secrets manager in the current account:
aws secretsmanager list-secrets

# To create a secret:
aws secretsmanager create-secret --name <name> --description "<secret_description>" --secret-string <secret>

# To delete a secret:
aws secretsmanager delete-secret --secret-id <name_or_arn>

# To view details of a secret except for secret text:
aws secretsmanager describe-secret --secret-id <name_or_arn>

# To retrieve the value of a secret (to get the latest version of the secret omit '--version-stage'):
aws secretsmanager get-secret-value --secret-id <name_or_arn> --version-stage <version_of_secret>

# To rotate the secret immediately using a Lambda function:
aws secretsmanager rotate-secret --secret-id <name_or_arn> --rotation-lambda-arn <arn_of_lambda_function>

# To rotate the secret automatically every 30 days using a Lambda function:
aws secretsmanager rotate-secret --secret-id <name_or_arn> --rotation-lambda-arn <arn_of_lambda_function> --rotation-rules AutomaticallyAfterDays=<30>