# AWS Secrets Manager

> Manage AWS Secrets Manager secrets -- retrieve, create, and rotate.

- Skill: `thinkfleetai/aws-secrets-manager` (Agent Skill)
- Install (CLI): `npx skillmds@latest add thinkfleetai/aws-secrets-manager`
- Raw SKILL.md: https://api.skillmd.com/api/skills/thinkfleetai/aws-secrets-manager/raw
- Safety review: pending
- Works with: Claude Code, Claude.ai, OpenAI Codex
- Category: DevOps & Infra
- Author: thinkfleetai (https://skillmd.com/u/thinkfleetai)
- Updated: 2026-09-17
- Page: https://skillmd.com/skills/thinkfleetai/aws-secrets-manager

---


# AWS Secrets Manager

Manage application secrets.

## List secrets

```bash
aws secretsmanager list-secrets --query 'SecretList[].{Name:Name,Description:Description,LastChanged:LastChangedDate,RotationEnabled:RotationEnabled}' --output table
```

## Get secret value

```bash
aws secretsmanager get-secret-value --secret-id my-secret | jq '{Name: .Name, Value: .SecretString}'
```

## Get secret (JSON parsed)

```bash
aws secretsmanager get-secret-value --secret-id my-secret --query 'SecretString' --output text | jq .
```

## Create secret

```bash
aws secretsmanager create-secret --name my-new-secret \
  --secret-string '{"username":"admin","password":"s3cret"}' | jq '{ARN, Name, VersionId}'
```

## Update secret

```bash
aws secretsmanager put-secret-value --secret-id my-secret \
  --secret-string '{"username":"admin","password":"n3wpass"}' | jq '{ARN, Name, VersionId}'
```

## Describe secret

```bash
aws secretsmanager describe-secret --secret-id my-secret | jq '{Name, Description, RotationEnabled, LastRotatedDate, Tags}'
```

## Rotate secret

```bash
aws secretsmanager rotate-secret --secret-id my-secret | jq '{ARN, Name, VersionId}'
```

## Delete secret

```bash
aws secretsmanager delete-secret --secret-id my-secret --recovery-window-in-days 7 | jq '{Name, DeletionDate}'
```

## Notes

- Secrets have a recovery window (7-30 days) after deletion; use `--force-delete-without-recovery` to skip.
- Secret values may be plain strings or JSON.
- Always confirm before creating, updating, or deleting secrets.
- Treat retrieved values as sensitive; avoid logging them.