AWS Secrets Manager is a fully managed AWS service that helps you securely store, manage,
and retrieve sensitive information like database credentials, API keys, and other secrets
needed by your applications. You can configure your organization to retrieve sensitive
connection credentials from AWS Secrets Manager instead of directly entering the credentials
in the connection properties.
The Secure Agent can access Secrets Manager using one of the following authentication
methods:
Role-based authentication. If you
use role-based authentication, you need to configure the IAM role that the Secure
Agent uses.
Instance profile authentication. If
you use instance profile authentication, you need to configure and access an
instance profile to the AWS resource that hosts the Secure Agent.
Access key authentication
If the AWS account that hosts your secrets differs from the account that hosts the Secure
Agent, you'll also need to set up both accounts for cross-account access.
To configure your organization to retrieve secrets from AWS Secrets Manager, enable
secret vault in Administrator, select AWS Secrets Manager as the secrets manager, and
configure the connection properties. Then, you can configure connections to retrieve
sensitive credentials from Secrets Manager.