AWS Secrets Manager
A service that stores, rotates, and retrieves secrets like database credentials and API keys.
AWS Secrets Manager is a managed service that securely stores and retrieves sensitive values such as database passwords, API keys, and OAuth tokens, keeping them out of application source code and configuration files. It encrypts secrets at rest using AWS KMS and controls access through IAM policies. The most exam-relevant distinction is between Secrets Manager and AWS Systems Manager Parameter Store: both can store secrets, but only Secrets Manager offers built-in automatic rotation, invoking a Lambda function on a configurable schedule to rotate credentials. Parameter Store can hold encrypted SecureString values for free, while Secrets Manager charges per secret but adds native rotation.
PlayPrepHQ study notes are written and reviewed against primary exam sources. How we create & review content →