aws secretsmanager — Store, manage, and retrieve secrets. More information: <https://docs.aws.amazon.com/cli/latest/refer

How to use the aws secretsmanager command: Store, manage, and retrieve secrets. More information: <https://docs.aws.amazon.com/cli/latest/reference/secretsmanager/>.

aws secretsmanager — Store, manage, and retrieve secrets. More information: <https://docs.aws.amazon.com/cli/latest/reference/secretsmanager/>.

Show secrets stored by the secrets manager in the current account:

aws secretsmanager list-secrets

List all secrets but only show the secret names and ARNs (easy to view):

aws secretsmanager list-secrets --query 'SecretList[*].{Name: Name, ARN: ARN}'

Create a secret:

aws secretsmanager create-secret --name {{name}} --description "{{secret_description}}" --secret-string '{{secret}}'

Delete a secret (append --force-delete-without-recovery to delete immediately without any recovery period):

aws secretsmanager delete-secret --secret-id {{name|arn}}

View details of a secret except for secret text:

aws secretsmanager describe-secret --secret-id {{name|arn}}

Retrieve the value of a secret (to get the latest version of the secret omit --version-stage):

aws secretsmanager get-secret-value --secret-id {{name|arn}} --version-stage {{version_of_secret}}

Rotate the secret immediately using a Lambda function:

aws secretsmanager rotate-secret --secret-id {{name|arn}} --rotation-lambda-arn {{arn_of_lambda_function}}

Rotate the secret automatically every 30 days using a Lambda function:

aws secretsmanager rotate-secret --secret-id {{name|arn}} --rotation-lambda-arn {{arn_of_lambda_function}} --rotation-rules AutomaticallyAfterDays={{30}}

tldr-pages: common/aws secretsmanager