secrets-manager

1# AWS Secrets Manager
2 
3AWS Secrets Manager helps protect access to applications, services, and IT resources. Store, retrieve, and automatically rotate credentials, API keys, and other secrets.
4 
5## Table of Contents
6 
7- [Core Concepts](#core-concepts)
8- [Common Patterns](#common-patterns)
9- [CLI Reference](#cli-reference)
10- [Best Practices](#best-practices)
11- [Troubleshooting](#troubleshooting)
12- [References](#references)
13 
14## Core Concepts
15 
16### Secrets
17 
18Encrypted data stored in Secrets Manager. Can contain:
19- Database credentials
20- API keys
21- OAuth tokens
22- Any key-value pairs (up to 64 KB)
23 
24### Versions
25 
26Each secret can have multiple versions:
27- **AWSCURRENT**: Current active version
28- **AWSPENDING**: Version being rotated to
29- **AWSPREVIOUS**: Previous version
30 
31### Rotation
32 
33Automatic credential rotation using Lambda functions. Built-in support for:
34- Amazon RDS
35- Amazon Redshift
36- Amazon DocumentDB
37- Custom secrets
38 
39## Common Patterns
40 
41### Create a Secret
42 
43**AWS CLI:**
44 
45```bash
46# Create secret with JSON
47aws secretsmanager create-secret \
48  --name prod/myapp/database \
49  --description "Production database credentials" \
50  --secret-string '{"username":"admin","password":"MySecurePassword123!","host":"mydb.cluster-xyz.us-east-1.rds.amazonaws.com","port":5432,"database":"myapp"}'
51 
52# Create secret with binary data
53aws secretsmanager create-secret \
54  --name prod/myapp/certificate \
55  --secret-binary fileb://certificate.pem
56```
57 
58**boto3:**
59 
60```python
61import boto3
62import json
63…