aws secretsmanager

all

Store, manage, and retrieve secrets.

Examples (8)

Show secrets stored by the secrets manager in the current account

aws secretsmanager list-secrets

List all secrets but only show the secret names and ARNs (easy to view)

aws secretsmanager list-secrets --query 'SecretList[*].{Name: Name, ARN: ARN}'

Create a secret

aws secretsmanager create-secret --name name --description "secret_description" --secret-string 'secret'

Delete a secret (append `--force-delete-without-recovery` to delete immediately without any recovery period)

aws secretsmanager delete-secret --secret-id name|arn

View details of a secret except for secret text

aws secretsmanager describe-secret --secret-id name|arn

Retrieve the value of a secret (to get the latest version of the secret omit `--version-stage`)

aws secretsmanager get-secret-value --secret-id name|arn --version-stage version_of_secret

Rotate the secret immediately using a Lambda function

aws secretsmanager rotate-secret --secret-id name|arn --rotation-lambda-arn arn_of_lambda_function

Rotate the secret automatically every 30 days using a Lambda function

aws secretsmanager rotate-secret --secret-id name|arn --rotation-lambda-arn arn_of_lambda_function --rotation-rules AutomaticallyAfterDays=30