Amazon Secrets Manager

Amazon Secrets Manager Secrets API

Operations for managing secrets.

GitHub OpenAPI
Business capability
Identity & Access Management BC-620.20

Operations 10

Each operation below carries the questions people ask an LLM about it and the instructions they give an agent to run it. Generated by API Evangelist overlay

POST / Store a new secret · Amazon Secrets Manager Create Secret #
Ask an LLM
“How do I store a new API key or database password in AWS Secrets Manager?”
“Can I encrypt a brand-new secret with my own KMS key instead of the default?”
Tell an agent
Create a secret named {Name} holding {SecretString}.
Create a new secret {Name} described as {Description}, encrypted with KMS key {KmsKeyId}.
POST /#GetSecretValue Retrieve a secret's value · Amazon Secrets Manager Get Secret Value #
Ask an LLM
“How do I read the actual password stored inside a secret?”
“Can I fetch the value of an earlier version of a secret by its staging label?”
Tell an agent
Get the decrypted value of secret {SecretId}.
Fetch the secret value of {SecretId} at staging label {VersionStage}.
POST /#PutSecretValue Add a new version of a secret's value · Amazon Secrets Manager Put Secret Value #
Ask an LLM
“How do I store a new value for an existing secret as a fresh version?”
“Can I attach staging labels to a new secret version when I save it?”
Tell an agent
Put a new version with value {SecretString} on secret {SecretId}.
Save a new version of secret {SecretId} and label it {VersionStages}.
POST /#UpdateSecret Update a secret's details · Amazon Secrets Manager Update Secret #
Ask an LLM
“How can I change the description of a secret I already created?”
“Can I switch an existing secret to a different KMS encryption key?”
Tell an agent
Change the description of secret {SecretId} to {Description}.
Re-encrypt existing secret {SecretId} with KMS key {KmsKeyId}.
POST /#DeleteSecret Delete a secret · Amazon Secrets Manager Delete Secret #
Ask an LLM
“How do I delete a secret and all of its versions?”
“What is the shortest recovery window before a deleted secret is gone for good?”
Tell an agent destructive · confirm first
Delete secret {SecretId} with a {RecoveryWindowInDays}-day recovery window.
Permanently delete secret {SecretId} right away without recovery.
POST /#ListSecrets List secrets in the account · Amazon Secrets Manager List Secrets #
Ask an LLM
“Which secrets are stored in my AWS account?”
“Can I filter the secrets list and sort it in a particular order?”
Tell an agent
List all my secrets.
List up to {MaxResults} secrets matching filters {Filters}.
POST /#DescribeSecret View a secret's metadata · Amazon Secrets Manager Describe Secret #
Ask an LLM
“What rotation settings and tags does a particular secret have?”
“Can I see a secret's details without exposing its encrypted value?”
Tell an agent
Describe secret {SecretId}.
Show the metadata for secret {SecretId}, not its value.
POST /#RestoreSecret Restore a secret scheduled for deletion · Amazon Secrets Manager Restore Secret #
Ask an LLM
“How do I undo the deletion of a secret during its recovery window?”
“Can I get back a secret I marked for deletion by mistake?”
Tell an agent
Restore secret {SecretId} and cancel its scheduled deletion.
Bring back deleted secret {SecretId}.
POST /#CreateSecret Create Secret #
POST /#ReplicateSecretToRegions Replicate Secret To Regions #

Documentation

📖
Documentation
https://docs.aws.amazon.com/secretsmanager/latest/apireference/

Specifications

⚙
OpenAPI
https://artifacts.apis.io/amazon-secrets-manager/openapi/amazon-secrets-manager-secrets-api-openapi.yml

Schemas & Data

📊
JSONSchema
https://artifacts.apis.io/amazon-secrets-manager/json-schema/amazon-secrets-manager-secret-schema.json
📊
JSONSchema
https://artifacts.apis.io/amazon-secrets-manager/json-schema/amazon-secrets-manager-secret-value-schema.json
📊
JSONSchema
https://artifacts.apis.io/amazon-secrets-manager/json-schema/amazon-secrets-manager-rotation-rules-schema.json

Work with this as data

Every API here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for apis

7 MCP tools reach this
  • find_apisBrowse and filter every API in the catalog.
  • get_api_artifactsOne API's artifacts, grouped by type.
  • get_openapiThe primary OpenAPI for this API.
  • find_similar_apisAPIs that look like this one.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This API 
curl "https://apis.io/api/v1/apis/amazon-secrets-manager:amazon-secrets-manager-secrets-api"
All apis 
curl "https://apis.io/api/v1/apis?limit=25"

Calls without X-API-Key need no key. Calls with it need a paid plan — get a key.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.

OpenAPI Specification

amazon-secrets-manager-secrets-api-openapi.yml Raw ↑ 
openapi: 3.2.0
info:
  title: Amazon Manager Secrets API
  version: '2017-10-17'
  description: 'Operations tagged Secrets across 2 of this provider''s published API definitions: amazon-secrets-manager-openapi.yml, amazon-secrets-manager-secrets-api-openapi.yml. Each path carries the servers of the definition it was published in.'
servers:
- url: https://secretsmanager.amazonaws.com
  description: Amazon Secrets Manager API
- url: https://secretsmanager.{region}.amazonaws.com
  variables:
    region:
      default: us-east-1
tags:


# --- truncated at 32 KB (35 KB total) ---
# Full source: https://artifacts.apis.io/amazon-secrets-manager/openapi/amazon-secrets-manager-secrets-api-openapi.yml