Difference between revisions of "AWS Secrets Manager"

From wikieduonline
Jump to navigation Jump to search
Line 27: Line 27:
  
 
=== Audit and Monitor Secrets Usage ===
 
=== Audit and Monitor Secrets Usage ===
* Integration with [[AWS CloudTrail]]: Logs API calls to Secrets Manager.
+
* Integration with [[AWS CloudTrail]]: Logs API calls to Secrets Manager, eg: <code>[[GetSecretValue]]</code>
 
* [[CloudWatch]] integration
 
* [[CloudWatch]] integration
  

Revision as of 09:25, 17 June 2024

wikipedia:AWS Secrets Manager (April 2018) [1]

Secrets rotation featured:

  • Amazon Aurora on Amazon RDS
  • MySQL on Amazon RDS
  • PostgreSQL on Amazon RDS
  • Oracle on Amazon RDS
  • MariaDB on Amazon RDS
  • Microsoft SQL Server on Amazon RDS


Secret Types

Automatic Rotation

  • Granular control: Define custom rotation schedules (e.g., daily, weekly).
  • Integration with AWS Lambda: Automate tasks during rotation, such as notifying admins or updating dependent systems.

Fine-grained Access Control

  • IAM policies: Define granular permissions for different users and applications(e.g., view only vs. read/write).
  • Secret versions: Maintain a history of past versions.

Audit and Monitor Secrets Usage

Related terms

Activities

See also

  • https://aws.amazon.com/about-aws/whats-new/2018/04/introducing-aws-secrets-manager/
  • Advertising: