AWS Secrets Manager secrets managed by other AWS services - AWS Secrets Manager

AWS Secrets Manager secrets managed by other AWS services

Some AWS services that store AWS Secrets Manager secrets on your behalf restrict you from updating them or deleting them without a recovery period. These secrets are typically named with a service ID prefix that indicates which service created them. For more information, see:

To find secrets that are managed by other AWS services

  • Do one of the following:

    • In the Secrets Manager console, in the search box, choose Tag key and then enter aws:secretsmanager:owningService.

    • To show the managing service in the list of secrets, choose Preferences ( ), and then in the Preferences dialog box, turn on Managed by.

    • In the AWS CLI, enter the following command:

      aws secretsmanager list-secrets --filter Key="tag-key",Values="aws:secretsmanager:owningService"

For other services that integrate with Secrets Manager, see AWS services that use AWS Secrets Manager secrets.