All services

Security, Identity & Compliance

AWS Secrets Manager

Rotate, manage and retrieve secrets centrally.

Official docs

Overview

Secrets Manager stores DB credentials, API keys and tokens with automatic rotation, fine-grained IAM access, and encryption via KMS.

When to use it

  • RDS rotating credentials
  • Storing third-party API keys
  • Avoiding secrets in env files

Setup

  1. Create secret (key/value or JSON).
  2. Attach rotation Lambda for supported engines.
  3. Grant apps `secretsmanager:GetSecretValue` on the specific ARN.

How to use

Read
aws secretsmanager get-secret-value --secret-id qa/db/creds --query SecretString --output text

QA use cases

  • Inject ephemeral test-user credentials into Playwright tests without hardcoding.