generated: '2026-06-20'
method: searched
source: https://docs.aws.amazon.com/cli/latest/reference/secretsmanager/
description: >-
  The AWS CLI exposes Amazon Secrets Manager as the "aws secretsmanager" command
  group — one subcommand per API operation. The CLI binary is catalogued in
  packages/ (installed as the aws CLI); this artifact captures its command surface.
name: aws secretsmanager
binary: aws
docs: https://docs.aws.amazon.com/cli/latest/reference/secretsmanager/
install:
  - method: bundled-installer
    detail: AWS CLI v2 official installer (macOS pkg, Windows MSI, Linux zip).
    url: https://docs.aws.amazon.com/cli/latest/userguide/getting-started-install.html
  - method: homebrew
    command: brew install awscli
  - method: pip
    command: pip install awscli
configuration:
  detail: >-
    Runs under the caller's configured AWS credentials/profile (aws configure)
    and Region; every call is SigV4-signed automatically.
commands:
  - group: secrets
    commands:
      - create-secret
      - get-secret-value
      - batch-get-secret-value
      - put-secret-value
      - update-secret
      - delete-secret
      - restore-secret
      - describe-secret
      - list-secrets
      - list-secret-version-ids
      - update-secret-version-stage
  - group: rotation
    commands:
      - rotate-secret
      - cancel-rotate-secret
      - get-random-password
  - group: tags
    commands:
      - tag-resource
      - untag-resource
  - group: policy
    commands:
      - get-resource-policy
      - put-resource-policy
      - delete-resource-policy
      - validate-resource-policy
  - group: replication
    commands:
      - replicate-secret-to-regions
      - remove-regions-from-replication
      - stop-replication-to-replica
key_flows:
  - name: Retrieve a secret value
    command: aws secretsmanager get-secret-value --secret-id MySecret
  - name: Create a secret
    command: aws secretsmanager create-secret --name MySecret --secret-string '{"user":"admin"}'
  - name: Generate a random password
    command: aws secretsmanager get-random-password --password-length 32