Security, Identity & Compliance
AWS Secrets Manager
Rotate, manage and retrieve secrets centrally.
Official docsOverview
Secrets Manager stores DB credentials, API keys and tokens with automatic rotation, fine-grained IAM access, and encryption via KMS.
When to use it
- RDS rotating credentials
- Storing third-party API keys
- Avoiding secrets in env files
Setup
- Create secret (key/value or JSON).
- Attach rotation Lambda for supported engines.
- Grant apps `secretsmanager:GetSecretValue` on the specific ARN.
How to use
Read
aws secretsmanager get-secret-value --secret-id qa/db/creds --query SecretString --output textQA use cases
- Inject ephemeral test-user credentials into Playwright tests without hardcoding.
