Handles secret storage and rotation in AWS with support for database credentials, API keys, and OAuth tokens. You get automatic rotation for RDS, Redshift, and DocumentDB out of the box, or you can wire up custom Lambda functions for anything else. The version staging system (AWSCURRENT, AWSPENDING, AWSPREVIOUS) lets applications handle rotation gracefully without downtime. Caching is critical here since you'll get throttled fast without it, and the Lambda extension gives you local access at port 2773 to avoid cold start penalties. The hierarchical naming convention (environment/app/type) and tag-based IAM policies make multi-environment setups much cleaner than hardcoding ARNs everywhere.

skills.sh installs
156
GitHub stars
1.2K
last updated
Jun 8, 2026

Install

$ npx -y skills add itsmostafa/aws-agent-skills --skill secrets-manager --agent claude-code

Installs into .claude/skills of the current project.

Files

AWS Secrets Manager

AWS Secrets Manager helps protect access to applications, services, and IT resources. Store, retrieve, and automatically rotate credentials, API keys, and other secrets.

Table of Contents

Core Concepts

Secrets

Encrypted data stored in Secrets Manager. Can contain:

  • Database credentials
  • API keys
  • OAuth tokens
  • Any key-value pairs (up to 64 KB)

Versions

Each secret can have multiple versions:

  • AWSCURRENT: Current active version
  • AWSPENDING: Version being rotated to
  • AWSPREVIOUS: Previous version

Rotation

Automatic credential rotation using Lambda functions. Built-in support for:

  • Amazon RDS
  • Amazon Redshift
  • Amazon DocumentDB
  • Custom secrets

Common Patterns

Create a Secret

AWS CLI:

Sponsors

Details

Repository
github.com/itsmostafa/aws-agent-skills
Categories
AI & Agent Building, Cloud & Infrastructure
License
MIT
First seen
Jun 11, 2026

More from itsmostafa/aws-agent-skills

All 18
1stripe avatarstripe-projectsstripe/agent-toolkitstripe projects156skills.sh installs
2arpitg1304 avatardocker-ros2-developmentarpitg1304/robotics-agent-skills>155skills.sh installs
3awslabs avatarmodel-deploymentawslabs/agent-pluginsGenerates code that deploys fine-tuned models from SageMaker Serverless Model Customization to SageMaker endpoints or Bedrock. Use when the user says "deploy my154skills.sh installs
4adriancooney avatarvoiceadriancooney/agent-voiceStarts a voice conversation with the user via the agent-voice CLI. Use when the user invokes /voice. The user is not looking at the screen — they are listening 153skills.sh installs
5lubusin avatarfrappe-frontend-developmentlubusin/agent-skillsfrappe frontend development152skills.sh installs
6proffesor-for-testing avatarpr-reviewproffesor-for-testing/agentic-qeUse when reviewing a GitHub PR for quality, scope correctness, trust tier compliance, or generating user-friendly review feedback.152skills.sh installs