AWS Secrets Manager

Secret storage on AWS: create, read, rotate, and replicate secrets and their policies

Signs in with: AWS access keys
Runs on: Cloud or On-Prem Worker
Operations: 23
Ready-made triggers: 0

Connect AWS Secrets Manager

In Neblex open Connect › Connections and click New Connection.
Search for AWS Secrets Manager and give the connection a clear name.
Fill in the fields. Secret values are encrypted and never shown again.
Click Test, then Create Connection.

Field	What to enter
Access key IDRequiredSecret	The access key ID of an IAM user or role session.
Secret access keyRequiredSecret	The secret access key that belongs to the access key ID.
Session tokenOptionalSecret	Only for temporary credentials (an assumed role or federated session).
RegionRequired	The AWS Region of the secrets, for example us-east-1.Example: `us-east-1`

Use it in a flow

Open a flow, open the node library and search for AWS Secrets Manager.
Drag it onto the canvas and choose an Operation and your connection.
Map the operation's fields from earlier steps, or click Map with Matt.
Use Test this step to see what it returns, then save.

To start a flow from AWS Secrets Manager without a ready-made trigger: a Poll for changes trigger can check one of its list operations on a schedule and pass on only what is new; if AWS Secrets Manager can send webhooks, a Webhook trigger receives them at its own URL.

Operations

23 operations in 6 groups. Each one is a step you can add to a flow.

Replication3

Remove regions from replication`removeRegionsFromReplication`	POST	For a secret that is replicated to other Regions, deletes the secret replicas from the Regions you specify.
Replicate secret to regions`replicateSecretToRegions`	POST	Replicates the secret to a new Regions.
Stop replication to replica`stopReplicationToReplica`	POST	Removes the link between the replica secret and the primary secret and promotes the replica to a primary secret in the replica Region.

Resource policies4

Delete resource policy`deleteResourcePolicy`	POST	Deletes the resource-based permission policy attached to the secret.
Get resource policy`getResourcePolicy`	POST	Retrieves the JSON text of the resource-based policy document attached to the secret.
Put resource policy`putResourcePolicy`	POST	Attaches a resource-based permission policy to a secret.
Validate resource policy`validateResourcePolicy`	POST	Validates that a resource policy does not grant a wide range of principals access to your secret.

Rotation2

Cancel rotate secret`cancelRotateSecret`	POST	Turns off automatic rotation, and if a rotation is currently in progress, cancels the rotation.
Rotate secret`rotateSecret`	POST	Configures and starts the asynchronous process of rotating the secret.

Secret values4

Batch get secret value`batchGetSecretValue`	POST	Retrieves the contents of the encrypted fields SecretString or SecretBinary for up to 20 secrets.
Get random password`getRandomPassword`	POST	Generates a random password.
Get secret value`getSecretValue`	POST	Retrieves the contents of the encrypted fields SecretString or SecretBinary from the specified version of a secret, whichever contains content.
Put secret value`putSecretValue`	POST	Creates a new version of your secret by creating a new encrypted value and attaching it to the secret.

Secrets8

Create secret`createSecret`	POST	Creates a new secret.
Delete secret`deleteSecret`	POST	Deletes a secret and all of its versions.
Describe secret`describeSecret`	POST	Retrieves the details of a secret.
List secret version ids`listSecretVersionIds`	POST	Lists the versions of a secret.
List secrets`listSecrets`	POST	Lists the secrets that are stored by Secrets Manager in the Amazon Web Services account, not including secrets that are marked for deletion.
Restore secret`restoreSecret`	POST	Cancels the scheduled deletion of a secret by removing the DeletedDate time stamp.
Update secret`updateSecret`	POST	Modifies the details of a secret, including metadata and the secret value.
Update secret version stage`updateSecretVersionStage`	POST	Modifies the staging labels attached to a version of a secret.

Tags2

Tag resource`tagResource`	POST	Attaches tags to a secret.
Untag resource`untagResource`	POST	Removes specific tags from a secret.