Secrets Manager integration - Amazon Aurora
Services or capabilities described in Amazon Web Services documentation might vary by Region. To see the differences applicable to the China Regions, see Getting Started with Amazon Web Services in China (PDF).

Secrets Manager integration

With Amazon Secrets Manager, you can replace hard-coded credentials in your code, including database passwords, with an API call to Secrets Manager to retrieve the secret programmatically. For more information about Secrets Manager, see Amazon Secrets Manager User Guide.

You can specify that Amazon Aurora manages the master user password in Secrets Manager for an Aurora DB cluster. Aurora generates the password, stores it in Secrets Manager, and rotates it regularly. For more information, see Password management with Amazon Aurora and Amazon Secrets Manager.

Secrets Manager integration is available for all Aurora DB engines and all versions.

Secrets Manager integration is available in all Amazon Web Services Regions except the following:

  • Amazon GovCloud (US-East)

  • Amazon GovCloud (US-West)

  • China (Beijing)

  • China (Ningxia)