Organization Administration

Back Next

AWS Secrets Manager connection properties

If you select AWS Secrets Manager as your secrets manager, configure connection properties such as the authentication type and region. The connection properties vary based on whether you use role-based authentication or an access key.

To use role-based authentication, the Secure Agent must be installed in an EC2 instance.

Role-based authentication

Configure the following properties when you access Secrets Manager using role-based authentication:

Property	Description
Type	Secrets manager type. Choose AWS Secrets Manager .
Authentication Type	Authentication type that the Secure Agent should use to access Secrets Manager. For role-based authentication, choose Role Based Access .
IAM Role	Amazon Resource Name (ARN) of the IAM role that the Secure Agent should use to access secrets. Typically, the format is: arn:aws:iam::<account>:role/<role-name-with-path> The IAM role that you specify must be assigned an access policy with the GetSecretValue and ListSecrets permissions. For more information about setting up IAM roles on EC2, see the AWS documentation.
External ID	External ID required to assume the IAM role.
Region	Region code for the region where your Secrets Manager secrets are hosted, for example, us-east-2 . Don't enter a full region name like US East (Ohio) .

Access key authentication

Configure the following properties when you access Secrets Manager using an access key:

Property	Description
Type	Secrets manager type. Choose AWS Secrets Manager .
Authentication Type	Authentication type that the Secure Agent should use to access Secrets Manager. For access key authentication, choose Access Key .
Access Key ID	AWS access key ID that the Secure Agent should use to access secrets, for example, AKIAIOSFODNN7EXAMPLE . The access key ID must be associated with an IAM role that is assigned an access policy with the GetSecretValue and ListSecrets permissions. You need to enter both the access key ID and the secret access key.
Secret Access Key	AWS secret access key that the Secure Agent should use to access secrets, for example wJalrXUtnFEMI/K7MDENG/bPxRfiCYEXAMPLEKEY . You need to enter both the access key ID and the secret access key.
Region	Region code for the region where your Secrets Manager secrets are hosted, for example, us-east-2 . Don't enter a full region name like US East (Ohio) .