# AWS Secrets Manager API

> AWS Secrets Manager API on Apizie: 22 endpoints (Turns off automatic rotation, and if a rotation is currently in progress, cancels the rotation. If you…, Creates a new secret. A secret can be a password, a set of credentials such as a user name and password, an…, Deletes the resource-based permission policy attached to the secret. To attach a policy to a secret, use…, Deletes a secret and all of its versions. You can specify a recovery window during which you can restore the…, …) returned as clean JSON through one API key. Send your own provider key in the x-upstream-key header. Call it over REST at https://zieapi.vercel.app/v1/cloud:amazonaws-secretsmanager/{endpoint} or from Claude, ChatGPT and Cursor through the Apizie MCP server. Free plan: 1,000 requests a month.

- Project key: `cloud:amazonaws-secretsmanager`
- Category: Cloud
- Status: byok
- Source: https://github.com/mermade/aws2openapi
- Page: https://zieapi.vercel.app/api/cloud/amazonaws-secretsmanager
- OpenAPI: https://zieapi.vercel.app/api/cloud/amazonaws-secretsmanager/openapi.json

Amazon Web Services Secrets Manager Amazon Web Services Secrets Manager provides a service to enable you to store, manage, and retrieve, secrets. This guide provides descriptions of the Secrets Manager API. For more…

## Endpoints

### Turns off automatic rotation, and if a rotation is currently in progress, cancels the rotation. If you…
`POST https://zieapi.vercel.app/v1/cloud:amazonaws-secretsmanager/cancel-rotate-secret` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| body | object | no | JSON request body |

### Creates a new secret. A secret can be a password, a set of credentials such as a user name and password, an…
`POST https://zieapi.vercel.app/v1/cloud:amazonaws-secretsmanager/create-secret` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| body | object | no | JSON request body |

### Deletes the resource-based permission policy attached to the secret. To attach a policy to a secret, use…
`POST https://zieapi.vercel.app/v1/cloud:amazonaws-secretsmanager/delete-resource-policy` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| body | object | no | JSON request body |

### Deletes a secret and all of its versions. You can specify a recovery window during which you can restore the…
`POST https://zieapi.vercel.app/v1/cloud:amazonaws-secretsmanager/delete-secret` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| body | object | no | JSON request body |

### Retrieves the details of a secret. It does not include the encrypted secret value. Secrets Manager only…
`POST https://zieapi.vercel.app/v1/cloud:amazonaws-secretsmanager/describe-secret` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| body | object | no | JSON request body |

### Generates a random password. We recommend that you specify the maximum length and include every character…
`POST https://zieapi.vercel.app/v1/cloud:amazonaws-secretsmanager/get-random-password` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| body | object | no | JSON request body |

### Retrieves the JSON text of the resource-based policy document attached to the secret. For more information…
`POST https://zieapi.vercel.app/v1/cloud:amazonaws-secretsmanager/get-resource-policy` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| body | object | no | JSON request body |

### Retrieves the contents of the encrypted fields SecretString or SecretBinary from the specified version of a…
`POST https://zieapi.vercel.app/v1/cloud:amazonaws-secretsmanager/get-secret-value` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| body | object | no | JSON request body |

### Lists the versions of a secret. Secrets Manager uses staging labels to indicate the different versions of a…
`POST https://zieapi.vercel.app/v1/cloud:amazonaws-secretsmanager/list-secret-version-ids` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| MaxResults | integer | no | Pagination limit |
| NextToken | string | no | Pagination token |
| body | object | no | JSON request body |

### Lists the secrets that are stored by Secrets Manager in the Amazon Web Services account, not including…
`POST https://zieapi.vercel.app/v1/cloud:amazonaws-secretsmanager/list-secrets` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| MaxResults | integer | no | Pagination limit |
| NextToken | string | no | Pagination token |
| body | object | no | JSON request body |

### Attaches a resource-based permission policy to a secret. A resource-based policy is optional. For more…
`POST https://zieapi.vercel.app/v1/cloud:amazonaws-secretsmanager/put-resource-policy` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| body | object | no | JSON request body |

### Creates a new version with a new encrypted secret value and attaches it to the secret. The version can…
`POST https://zieapi.vercel.app/v1/cloud:amazonaws-secretsmanager/put-secret-value` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| body | object | no | JSON request body |

### For a secret that is replicated to other Regions, deletes the secret replicas from the Regions you specify.…
`POST https://zieapi.vercel.app/v1/cloud:amazonaws-secretsmanager/remove-regions-from-replication` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| body | object | no | JSON request body |

### Replicates the secret to a new Regions. See Multi-Region secrets . Secrets Manager generates a CloudTrail…
`POST https://zieapi.vercel.app/v1/cloud:amazonaws-secretsmanager/replicate-secret-to-regions` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| body | object | no | JSON request body |

### Cancels the scheduled deletion of a secret by removing the DeletedDate time stamp. You can access a secret…
`POST https://zieapi.vercel.app/v1/cloud:amazonaws-secretsmanager/restore-secret` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| body | object | no | JSON request body |

### Configures and starts the asynchronous process of rotating the secret. For information about rotation, see…
`POST https://zieapi.vercel.app/v1/cloud:amazonaws-secretsmanager/rotate-secret` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| body | object | no | JSON request body |

### Removes the link between the replica secret and the primary secret and promotes the replica to a primary…
`POST https://zieapi.vercel.app/v1/cloud:amazonaws-secretsmanager/stop-replication-to-replica` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| body | object | no | JSON request body |

### Attaches tags to a secret. Tags consist of a key name and a value. Tags are part of the secret's metadata.…
`POST https://zieapi.vercel.app/v1/cloud:amazonaws-secretsmanager/tag-resource` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| body | object | no | JSON request body |

### Removes specific tags from a secret. This operation is idempotent. If a requested tag is not attached to the…
`POST https://zieapi.vercel.app/v1/cloud:amazonaws-secretsmanager/untag-resource` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| body | object | no | JSON request body |

### Modifies the details of a secret, including metadata and the secret value. To change the secret value, you…
`POST https://zieapi.vercel.app/v1/cloud:amazonaws-secretsmanager/update-secret` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| body | object | no | JSON request body |

### Modifies the staging labels attached to a version of a secret. Secrets Manager uses staging labels to track…
`POST https://zieapi.vercel.app/v1/cloud:amazonaws-secretsmanager/update-secret-version-stage` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| body | object | no | JSON request body |

### Validates that a resource policy does not grant a wide range of principals access to your secret. A…
`POST https://zieapi.vercel.app/v1/cloud:amazonaws-secretsmanager/validate-resource-policy` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| body | object | no | JSON request body |

## Example
```
curl "https://zieapi.vercel.app/v1/cloud:amazonaws-secretsmanager/cancel-rotate-secret" \
  -H "x-api-key: $APIZIE_KEY" \
  -H "x-upstream-key: $PROVIDER_KEY"
```

## FAQ

### How do I call the AWS Secrets Manager API?
Create a free Apizie key, then send POST https://zieapi.vercel.app/v1/cloud:amazonaws-secretsmanager/cancel-rotate-secret with the header x-api-key. Every endpoint returns { project, data, timestamp }.

### Is the AWS Secrets Manager API free on Apizie?
Yes. The Free plan includes 1,000 requests a month at 100 requests a minute, no credit card. AWS Secrets Manager itself also needs your own key from amazonaws.com.

### Can AI agents use the AWS Secrets Manager API?
Yes. Add the Apizie MCP server (https://zieapi.vercel.app/mcp) to Claude, ChatGPT, Cursor or VS Code, then ask in plain language. The agent calls run_scraper with project key cloud:amazonaws-secretsmanager.

### What is the status of the AWS Secrets Manager API?
Needs your own provider key (bring your own key)