thinQmaster Virtual testing partner Adaptive practice exams that find your weak spots and drill them. Every answer explained. From $69
Enroll

thinQmaster

Find your exam

Five questions free, before you decide.

Step 1 · choose a vendor

In one of our camps? Your practice exams come with the tuition — they are on your study page already.

Cloud Computing · Intermediate

AWS Secrets Manager

AWS service for storing, retrieving and automatically rotating secrets such as database credentials and API keys.

Definition

Secrets Manager encrypts secrets with KMS, controls access with IAM and resource policies, audits access with CloudTrail and can rotate secrets automatically using managed rotation or Lambda functions, natively for RDS, Aurora, Redshift and DocumentDB. Secrets can be replicated across regions.

Example

An application fetches its Aurora password from Secrets Manager, which rotates it every 30 days.

Exam tip

Automatic rotation is the differentiator between Secrets Manager and Parameter Store.

Related terms