AWS Secrets Manager
#95 · Level 3 · Modern architecture · SecurityConcept
Section titled “Concept”AWS Secrets Manager safely stores secret information (secrets) such as passwords, API keys and database credentials. Secrets are kept encrypted with a KMS key. While the app runs, it reads the secret from Secrets Manager instead of having the password written in code, and IAM decides who can read it. It can change secrets automatically on a schedule (rotation), such as an RDS database password. This lowers the risk of secret information being scattered in code or files.
Simple example
Section titled “Simple example”A home safe — keeping passwords in the safe instead of writing them on paper and leaving them on the table.
Why it’s needed
Section titled “Why it’s needed”If a password is written inside code, there is a risk of it leaking. Passwords also need to be changed regularly.
Where it’s used
Section titled “Where it’s used”Reading database passwords and API keys for outside services safely while the app runs.
Azure equivalent
Section titled “Azure equivalent”Azure Key Vault (secrets)
Learn more
Section titled “Learn more”For details and the latest information, see the official documentation: