Understanding AWS Secrets Manager - AWS Online Tech Talks

For customers with hundreds or thousands of secrets, such as database credentials and API keys, manually rotating and managing access to secrets can be complex to orchestrate and cause application disruptions. AWS Secrets Manager is a secrets management service that helps you protect access to your IT resources by enabling you to easily rotate and manage access to secrets centrally. In this webinar, you will learn about the benefits and key features of AWS Secrets Manager. We will demonstrate how you can use AWS Secrets Manager to rotate secrets safely, manage access to secrets with fine-grained access policies, and secure and audit your secrets centrally.

Learning Objectives:
- How you can rotate secrets safely
- How you can manage access to secrets using fine-grained access policies
- How you can secure and audit secrets centrally Subscribe to AWS Online Tech Talks On AWS:

Follow Amazon Web Services:

☁️ AWS Online Tech Talks cover a wide range of topics and expertise levels through technical deep dives, demos, customer examples, and live Q&A with AWS experts. Builders can choose from bite-sized 15-minute sessions, insightful fireside chats, immersive virtual workshops, interactive office hours, or watch on-demand tech talks at your own pace. Join us to fuel your learning journey with AWS.

#AWS

[pippopeppe]

Pretty good video with the practical examples and so on. I didn't understand when there is a rotation the previous secret remains still usable for a while or it is immediately removed. In the 2nd option what to happen to the application if it doesn't recover quickly the new secret, lost the database connection? Probably I'll find out in the documention

[CandyLemon]

This work is compelling. A book I read with analogous ideas was incredibly eye-opening. "AWS Unleashed: Mastering Amazon Web Services for Software Engineers" by Harrison Quill

[clray]

This makes it so much easier for an attacker who hacked an application and was able to impersonate it to steal all the secrets conveniently through a standardized API rather than having to go looking for them in the

[chriskondiah]

So what I get here is we do a custom glue connection and link it to the jar file secrets manager generates? Then use that connector in either studio or data brew?

[bob]

This was a great walk through thank you!

[velunatarajan]

Where to get Lambda function snippet used for key rotation?

[amanbabbar]

Hi apurv
I tried to implemant your tutorial on how to access secrets across aws accounts by attaching resource based policy but could not able to use it. Let me know the steps of creating iam role with secret key policy for this.

[DevasishGhosh]

At timeline 23:20 - I have a question regarding the python secret manager client side caching library : When the secrets are rotated automatically but in the client side still the older secret is cached will the cached version work?

[johnbrown]

Well done, easy to understand and follow.

[Rohit__Patil]

Can we access secret manager across regions example I wana use keyparamer in one region to another

[technikindia]

How can i limit access to aws secrets manager for the iam users.

[jozejerse]

error: Missing credentials in config, if using AWS_CONFIG_FILE, set AWS_SDK_LOAD_CONFIG=1

[vekien]

This doesn't work unless you have a lot setup existing, you will run into may VPC issues...