This service enables you to easily rotate, manage, and retrieve database credentials, API keys, and other secrets throughout their lifecycle.

It’s a service that helps you protect access to your applications, services, and IT resources. Authentication happens when a connection is established.Amazon Web Services introduced AWS Secrets Manager in 2018. Credentials rotation does not impact the already open connections as they are not re-authenticated.integrates with CloudWatch Events to send a notification when it rotates a secret.communicates the clone user information to databases and applications retrieving the database credentials.it uses the provided super database credentials to create a clone user with the same privileges, but with a different password.When Secrets Manager initiates a rotation.

AWS Secrets Manager enables database credential rotation on a schedule.never stores the data key in unencrypted form, and always disposes of the data key immediately after use.uses the plain text data key to decrypt the protected secret data.requests AWS KMS to decrypt the encrypted data key.stores the encrypted data key with the protected secret data.uses this data key for envelope encryption.encrypts a new version of the protected secret data by requesting AWS KMS to generate a new data key from the KMS key.supports private access using VPC Interface endpoints.enables secret replication in multiple AWS regions to support multi-region applications and disaster recovery scenarios.supports IAM and resource-based policies for fine-grained access control to secrets and centralized secret rotation audit for resources in the AWS Cloud, third-party services, and on-premises.supports Lambda functions to extend secret rotation to other types of secrets, including API keys and OAuth tokens.

offers native secret rotation with built-in integration for RDS, Redshift, and DocumentDB.secure secrets by encrypting them with encryption keys managed using AWS KMS.enables you to easily rotate, manage, and retrieve database credentials, API keys, and other secrets throughout their lifecycle.AWS Secrets Manager helps protect secrets needed to access applications, services, and IT resources.AWS Certification Exam Practice Questions AWS Secrets Manager

Aws secret manager rotation