
Handles secret storage and rotation in AWS with support for database credentials, API keys, and OAuth tokens. You get automatic rotation for RDS, Redshift, and DocumentDB out of the box, or you can wire up custom Lambda functions for anything else. The version staging system (AWSCURRENT, AWSPENDING, AWSPREVIOUS) lets applications handle rotation gracefully without downtime. Caching is critical here since you'll get throttled fast without it, and the Lambda extension gives you local access at port 2773 to avoid cold start penalties. The hierarchical naming convention (environment/app/type) and tag-based IAM policies make multi-environment setups much cleaner than hardcoding ARNs everywhere.
$ npx -y skills add itsmostafa/aws-agent-skills --skill secrets-manager --agent claude-codeInstalls into .claude/skills of the current project.
AWS Secrets Manager helps protect access to applications, services, and IT resources. Store, retrieve, and automatically rotate credentials, API keys, and other secrets.
Encrypted data stored in Secrets Manager. Can contain:
Each secret can have multiple versions:
Automatic credential rotation using Lambda functions. Built-in support for:
AWS CLI:
Sponsors