steampipe plugin install awssteampipe plugin install aws

Table: aws_secretsmanager_secret

The AWS Secrets Manager Secret resource creates a secret and stores it in Secrets Manager.

Examples

Basic info

select
  name,
  created_date,
  description,
  last_accessed_date
from
  aws_secretsmanager_secret;

List secrets that do not automatically rotate

select
  name,
  created_date,
  description,
  rotation_enabled
from
  aws_secretsmanager_secret
where
  not rotation_enabled;

List secrets that automatically rotate every 7 days

select
  name,
  created_date,
  description,
  rotation_enabled,
  rotation_rules
from
  aws_secretsmanager_secret
where
  rotation_rules -> 'AutomaticallyAfterDays' > '7';

List secrets that are not replicated in other regions

select
  name,
  created_date,
  description,
  replication_status
from
  aws_secretsmanager_secret
where
  replication_status is null;

List policy details for the secrets

select
  name,
  jsonb_pretty(policy) as policy,
  jsonb_pretty(policy_std) as policy_std
from
  aws_secretsmanager_secret;

Control examples

.inspect aws_secretsmanager_secret

AWS Secrets Manager Secret

Name	Type	Description
_ctx	jsonb	Steampipe context in JSON form, e.g. connection_name.
account_id	text	The AWS Account ID in which the resource is located.
akas	jsonb	Array of globally unique identifier strings (also known as) for the resource.
arn	text	The Amazon Resource Name (ARN) of the secret.
created_date	timestamp with time zone	The date and time when a secret was created.
deleted_date	timestamp with time zone	The date and time the deletion of the secret occurred.
description	text	The user-provided description of the secret.
kms_key_id	text	The ARN or alias of the AWS KMS customer master key (CMK) used to encrypt the SecretString and SecretBinary fields in each version of the secret.
last_accessed_date	timestamp with time zone	The last date that this secret was accessed.
last_changed_date	timestamp with time zone	The last date and time that this secret was modified in any way.
last_rotated_date	timestamp with time zone	The most recent date and time that the Secrets Manager rotation process was successfully completed.
name	text	The friendly name of the secret.
owning_service	text	Returns the name of the service that created the secret.
partition	text	The AWS partition in which the resource is located (aws, aws-cn, or aws-us-gov).
policy	jsonb	A JSON-formatted string that describes the permissions that are associated with the attached secret.
policy_std	jsonb	Contains the permissions that are associated with the attached secret in a canonical form for easier searching.
primary_region	text	The Region where Secrets Manager originated the secret.
region	text	The AWS Region in which the resource is located.
replication_status	jsonb	Describes a list of replication status objects as InProgress, Failed or InSync.
rotation_enabled	boolean	Indicates whether automatic, scheduled rotation is enabled for this secret.
rotation_lambda_arn	text	The ARN of an AWS Lambda function invoked by Secrets Manager to rotate and expire the secret either automatically per the schedule or manually by a call to RotateSecret.
rotation_rules	jsonb	A structure that defines the rotation configuration for the secret.
secret_versions_to_stages	jsonb	A list of all of the currently assigned SecretVersionStage staging labels and the SecretVersionId attached to each one.
tags	jsonb	A map of tags for the resource.
tags_src	jsonb	The list of user-defined tags associated with the secret.
title	text	Title of the resource.

turbot/aws

Table: aws_secretsmanager_secret

Examples

Basic info

List secrets that do not automatically rotate

List secrets that automatically rotate every 7 days

List secrets that are not replicated in other regions

List policy details for the secrets

Control examples

.inspect aws_secretsmanager_secret

Steampipe

Resources

Community