diff --git a/pages/common/aws-secretsmanager.md b/pages/common/aws-secretsmanager.md new file mode 100644 index 0000000000..9f1f9d5712 --- /dev/null +++ b/pages/common/aws-secretsmanager.md @@ -0,0 +1,32 @@ +# aws secretsmanager + +> Store, manage, and retrieve secrets. +> More information: . + +- Show secrets stored by the secrets manager in the current account: + +`aws secretsmanager list-secrets` + +- Create a secret: + +`aws secretsmanager create-secret --name {{name}} --description "{{secret_description}}" --secret-string {{secret}}` + +- Delete a secret: + +`aws secretsmanager delete-secret --secret-id {{name_or_arn}}` + +- View details of a secret except for secret text: + +`aws secretsmanager describe-secret --secret-id {{name_or_arn}}` + +- Retrieve the value of a secret (to get the latest version of the secret omit `--version-stage`): + +`aws secretsmanager get-secret-value --secret-id {{name_or_arn}} --version-stage {{version_of_secret}}` + +- Rotate the secret immediately using a Lambda function: + +`aws secretsmanager rotate-secret --secret-id {{name_or_arn}} --rotation-lambda-arn {{arn_of_lambda_function}}` + +- Rotate the secret automatically every 30 days using a Lambda function: + +`aws secretsmanager rotate-secret --secret-id {{name_or_arn}} --rotation-lambda-arn {{arn_of_lambda_function}} --rotation-rules AutomaticallyAfterDays={{30}}`