
Secrets Manager
Handles secret storage and rotation in AWS with support for database credentials, API keys, and OAuth tokens. You get automatic rotation for RDS, Redshift, and DocumentDB out of the box, or you can wire up custom Lambda functions for anything else. The version staging system (AWSCURRENT, AWSPENDING, AWSPREVIOUS) lets applications handle rotation gracefully without downtime. Caching is critical here since you'll get throttled fast without it, and the Lambda extension gives you local access at port 2773 to avoid cold start penalties. The hierarchical naming convention (environment/app/type) and tag-based IAM policies make multi-environment setups much cleaner than hardcoding ARNs everywhere.
- skills.sh installs
- 156
- GitHub stars
- 1.2K
- last updated
- Jun 8, 2026
Install
$ npx -y skills add itsmostafa/aws-agent-skills --skill secrets-manager --agent claude-codeInstalls into .claude/skills of the current project.
Files
AWS Secrets Manager
AWS Secrets Manager helps protect access to applications, services, and IT resources. Store, retrieve, and automatically rotate credentials, API keys, and other secrets.
Table of Contents
Core Concepts
Secrets
Encrypted data stored in Secrets Manager. Can contain:
- Database credentials
- API keys
- OAuth tokens
- Any key-value pairs (up to 64 KB)
Versions
Each secret can have multiple versions:
- AWSCURRENT: Current active version
- AWSPENDING: Version being rotated to
- AWSPREVIOUS: Previous version
Rotation
Automatic credential rotation using Lambda functions. Built-in support for:
- Amazon RDS
- Amazon Redshift
- Amazon DocumentDB
- Custom secrets
Common Patterns
Create a Secret
AWS CLI:
Sponsors
Details
- Repository
- github.com/itsmostafa/aws-agent-skills
- Categories
- AI & Agent Building, Cloud & Infrastructure
- License
- MIT
- First seen
- Jun 11, 2026