Posted On: Jul 14, 2020
The Amazon Secrets Manager console now supports attaching resource-based policies to your secrets, enabling you to access secrets across Amazon Web Services China Region accounts securely and easily. The Secrets Manager console also uses Zelkova, an automated reasoning engine, to validate and block automatically policies that may grant broad access to your secrets across Amazon Web Services China Region accounts . This integration further raises the security bar for your organization and makes it easier to follow the security best practice of granting least privilege access.
Amazon Secrets Manager enables you to retrieve and manage secrets such as database credentials and API keys throughout their lifecycle. Amazon Secrets Manager also makes it easier to follow the security best practice of using short-term secrets by rotating secrets safely on a schedule that you determine. For example, you can configure Secrets Manager to rotate a database credential daily, turning a typical, long-term secret in to a short-term secret that is rotated automatically. For a list of regions where Secrets Manager is available, see the Amazon Web Services Region table.
To learn more about resource-based policies to manage your secrets, visit the documentation.