AwsSecretsManager

AWS Secrets Manager helps you to securely encrypt, store, and retrieve credentials for your databases and other services.

Authentication & Identity Management · AWS Secrets Manager

Details

IDAwsSecretsManager
ProviderAmazon
CategoryAuthentication & Identity Management
From Version6.5.0
Docker Imagedemisto/boto3py3:1.0.0.10325753
Supported ModulesAgentix XSIAM

README

AWS Secrets Manager helps you to securely encrypt, store, and retrieve credentials for your databases and other services.
This integration was integrated and tested with version 1.0 of AwsSecretsManager

Configure Aws Secrets Manager in Cortex

Parameter Description Required
AWS Default Region   True
Role Arn   False
Role Session Name   False
Role Session Duration   False
Access Key   False
Secret Key   False
Timeout The time in seconds until a timeout exception is reached. You can specify just the read timeout (for example 60) or also the connect timeout separated from the read timeout with a comma (for example 60,10). If a connect timeout is not specified, a default of 10 second will be used. False
Retries The maximum number of retry attempts when connection or throttling errors are encountered. Set to 0 to disable retries. The default value is 5 and the limit is 10. Note: Increasing the number of retries will increase the execution time. False
Fetches credentials   False
AWS STS Regional Endpoints Sets the AWS_STS_REGIONAL_ENDPOINTS environment variable to specify the AWS STS endpoint resolution logic. By default, this option is set to “legacy” in AWS. Leave empty if the environment variable is already set using server configuration. False
Use system proxy settings   False
Trust any certificate (not secure)   False
Disable sensitive commands Disables the following sensitive commands from running: aws-secrets-manager-secret–value-get. False

Commands

You can execute these commands from the CLI, as part of an automation, or in a playbook.
After you successfully execute a command, a DBot message appears in the War Room with the command details.

aws-secrets-manager-secret-list

Retrieve all secrets.

Base Command

aws-secrets-manager-secret-list

Input

Argument Name Description Required
description Description field to filter by. Optional
name Secret name. Optional
tag_key Tag key to filter by. Optional
tag_value Tag value to filter by. Optional
general_search Search in all possible fields. Optional
sort Direction by which to display the results. Possible values are: Asc, Desc. Optional
limit Number of total results to query. Optional
page Specific page to query. Optional
page_size Number of total results in each page. Optional
roleArn The Amazon Resource Name (ARN) of the role to assume. Optional
roleSessionName An identifier for the assumed role session. Optional
roleSessionDuration The duration, in seconds, of the role session. The value can range from 900 seconds (15 minutes) up to the maximum session duration setting for the role. Optional

Context Output

Path Type Description
AWS.SecretsManager.Secret.ResponseMetadata.HTTPHeaders.content-length String The length of the HTTP header response content.
AWS.SecretsManager.Secret.ResponseMetadata.HTTPHeaders.content-type String The type of the HTTP header response content.
AWS.SecretsManager.Secret.ResponseMetadata.HTTPHeaders.date Date The date of the HTTP header response.
AWS.SecretsManager.Secret.ResponseMetadata.HTTPHeaders.x-amzn-requestid String The ID of the HTTP header Amazon request.
AWS.SecretsManager.Secret.ResponseMetadata.HTTPStatusCode Number The status code in the HTTP header.
AWS.SecretsManager.Secret.ResponseMetadata.RequestId String The ID of the HTTP header response request.
AWS.SecretsManager.Secret.ResponseMetadata.RetryAttempts Number The number of HTTP header response retry attempts.
AWS.SecretsManager.Secret.SecretList.ARN String The secret ARN.
AWS.SecretsManager.Secret.SecretList.CreatedDate Date The date and time this version of the secret was created.
AWS.SecretsManager.Secret.SecretList.LastAccessedDate Date The date the secret was last accessed.
AWS.SecretsManager.Secret.SecretList.LastChangedDate Date The date the secret was last changed.
AWS.SecretsManager.Secret.SecretList.Name String The secret name.
AWS.SecretsManager.Secret.SecretList.SecretVersionsToStages.c88e2176-aca4-4776-a422-c3a0616079bc String The SecretVersionStage staging labels for the provided hash.
AWS.SecretsManager.Secret.SecretList.SecretVersionsToStages.5889c662-13a6-4318-bec3-b234fcae3826 String The SecretVersionStage staging labels for the provided hash.
AWS.SecretsManager.Secret.SecretList.SecretVersionsToStages.f2a389e8-3860-47a0-b4a0-16424ad63a24 String The SecretVersionStage staging labels for the provided hash.
AWS.SecretsManager.Secret.SecretList.Description String The secret description.
AWS.SecretsManager.Secret.SecretList.SecretVersionsToStages.01cba660-28be-45d7-8597-d1ab295b0f35 String The SecretVersionStage staging labels for the provided hash.
AWS.SecretsManager.Secret.SecretList.SecretVersionsToStages.ac32e535-79e7-4188-a732-7f02dbe399f0 String The SecretVersionStage staging labels for the provided hash.

Command example


#### Context Example

```json
{
    "AWS": {
        "SecretsManager": {
            "Secret": {
                "ResponseMetadata": {
                    "HTTPHeaders": {
                        "content-length": "1267",
                        "content-type": "application/x-amz-json-1.1",
                        "date": "Sun, 23 Oct 2022 13:41:30 GMT",
                        "x-amzn-requestid": "615f197f-c54c-4c45-be33-1064ae9652a5"
                    },
                    "HTTPStatusCode": 200,
                    "RequestId": "615f197f-c54c-4c45-be33-1064ae9652a5",
                    "RetryAttempts": 0
                },
                "SecretList": [
                    {
                        "ARN": "arn:aws:secretsmanager:eu-central-1:123456789012:secret:fdff-vnNyyc",
                        "CreatedDate": "2022-09-04T09:10:12",
                        "LastAccessedDate": "2022-10-23T00:00:00",
                        "LastChangedDate": "2022-10-23T13:40:55",
                        "Name": "fdff",
                        "SecretVersionsToStages": {
                            "c88e2176-aca4-4776-a422-c3a0616079bc": [
                                "AWSCURRENT"
                            ]
                        },
                        "Tags": []
                    },
                    {
                        "ARN": "arn:aws:secretsmanager:eu-central-1:123456789012:secret:gmail-oF08mg",
                        "CreatedDate": "2022-08-31T09:47:24",
                        "LastAccessedDate": "2022-10-23T00:00:00",
                        "LastChangedDate": "2022-08-31T09:47:24",
                        "Name": "gmail",
                        "SecretVersionsToStages": {
                            "5889c662-13a6-4318-bec3-b234fcae3826": [
                                "AWSCURRENT"
                            ]
                        },
                        "Tags": []
                    },
                    {
                        "ARN": "arn:aws:secretsmanager:eu-central-1:123456789012:secret:DB_credentials-3ic9K7",
                        "CreatedDate": "2022-08-31T09:45:33",
                        "LastAccessedDate": "2022-10-23T00:00:00",
                        "LastChangedDate": "2022-08-31T09:45:33",
                        "Name": "DB_credentials",
                        "SecretVersionsToStages": {
                            "f2a389e8-3860-47a0-b4a0-16424ad63a24": [
                                "AWSCURRENT"
                            ]
                        },
                        "Tags": []
                    },
                    {
                        "ARN": "arn:aws:secretsmanager:eu-central-1:123456789012:secret:test_account",
                        "CreatedDate": "2022-08-21T13:54:05",
                        "Description": "new description",
                        "LastAccessedDate": "2022-10-23T00:00:00",
                        "LastChangedDate": "2022-09-08T07:14:13",
                        "Name": "test_for_moishy",
                        "SecretVersionsToStages": {
                            "01cba660-28be-45d7-8597-d1ab295b0f35": [
                                "AWSCURRENT"
                            ],
                            "ac32e535-79e7-4188-a732-7f02dbe399f0": [
                                "AWSPREVIOUS"
                            ]
                        },
                        "Tags": []
                    }
                ]
            }
        }
    }
}

Human Readable Output

AWS Secrets List

ARN Description LastAccessedDate Name
arn:aws:secretsmanager:eu-central-1:123456789012:secret:fdff-vnNyyc   2022-10-23T13:40:55 fdff
arn:aws:secretsmanager:eu-central-1:123456789012:secret:gmail-oF08mg   2022-08-31T09:47:24 gmail
arn:aws:secretsmanager:eu-central-1:123456789012:secret:DB_credentials-3ic9K7   2022-08-31T09:45:33 DB_credentials
arn:aws:secretsmanager:eu-central-1:123456789012:secret:test_account new description 2022-09-08T07:14:13 test_for_moishy

aws-secrets-manager-secret–value-get

Retrieve a secret value by key.

Base Command

aws-secrets-manager-secret–value-get

Input

Argument Name Description Required
roleArn The Amazon Resource Name (ARN) of the role to assume. Optional
roleSessionName An identifier for the assumed role session. Optional
roleSessionDuration The duration, in seconds, of the role session. The value can range from 900 seconds (15 minutes) up to the maximum session duration setting for the role. Optional
secret_id The ID of the secret or ARN. Required
version_id The version ID of the secret. Optional
version_stage The version stage of the secret. Optional

Context Output

Path Type Description
AWS.SecretsManager.Secret.SecretValue.ARN String The secret ARN.
AWS.SecretsManager.Secret.SecretValue.Name String The secret name.
AWS.SecretsManager.Secret.SecretValue.VersionId String The secret version ID.
AWS.SecretsManager.Secret.SecretValue.SecretString String The secret value.
AWS.SecretsManager.Secret.SecretValue.VersionStages String A list of all of the staging labels currently attached to this version of the secret.
AWS.SecretsManager.Secret.SecretValue.CreatedDate Date The date and time this version of the secret was created.
AWS.SecretsManager.Secret.SecretValue.ResponseMetadata.RequestId String The ID of the HTTP header response request.
AWS.SecretsManager.Secret.SecretValue.ResponseMetadata.HTTPStatusCode Number The status code in the HTTP header.
AWS.SecretsManager.Secret.SecretValue.ResponseMetadata.HTTPHeaders.x-amzn-requestid String The ID of the HTTP header Amazon request.
AWS.SecretsManager.Secret.SecretValue.ResponseMetadata.HTTPHeaders.content-type String The type of the HTTP header response content.
AWS.SecretsManager.Secret.SecretValue.ResponseMetadata.HTTPHeaders.content-length String The length of the HTTP header response content.
AWS.SecretsManager.Secret.SecretValue.ResponseMetadata.HTTPHeaders.date Date The date of the HTTP header response.
AWS.SecretsManager.Secret.SecretValue.ResponseMetadata.RetryAttempts Number The number of HTTP header response retry attempts.

Command example

!aws-secrets-manager-secret–value-get secret_id="fdff"

Context Example

{
    "AWS": {
        "SecretsManager": {
            "Secret": {
                "SecretValue": {
                    "ARN": "arn:aws:secretsmanager:eu-central-1:123456789012:secret:fdff-vnNyyc",
                    "CreatedDate": "2022-09-04T09:10:13",
                    "Name": "fdff",
                    "ResponseMetadata": {
                        "HTTPHeaders": {
                            "content-length": "271",
                            "content-type": "application/x-amz-json-1.1",
                            "date": "Sun, 23 Oct 2022 13:41:27 GMT",
                            "x-amzn-requestid": "cc592da7-198b-483c-a106-e91bdbe59e30"
                        },
                        "HTTPStatusCode": 200,
                        "RequestId": "cc592da7-198b-483c-a106-e91bdbe59e30",
                        "RetryAttempts": 0
                    },
                    "SecretString": "{\"password\":\"cvcvcv\",\"username\":\"cvcvcv\"}",
                    "VersionId": "c88e2176-aca4-4776-a422-c3a0616079bc",
                    "VersionStages": [
                        "AWSCURRENT"
                    ]
                }
            }
        }
    }
}

Human Readable Output

AWS Get Secret

ARN CreatedDate Name SecretBinary SecretString
arn:aws:secretsmanager:eu-central-1:123456789012:secret:fdff-vnNyyc 2022-09-04T09:10:13 fdff   {“password”:”cvcvcv”,”username”:”cvcvcv”}

aws-secrets-manager-secret–delete

Delete a specific secret.

Base Command

aws-secrets-manager-secret–delete

Input

Argument Name Description Required
roleArn The Amazon Resource Name (ARN) of the role to assume. Optional
roleSessionName An identifier for the assumed role session. Optional
roleSessionDuration The duration, in seconds, of the role session. The value can range from 900 seconds (15 minutes) up to the maximum session duration setting for the role. Optional
secret_id The ID of the secret or ARN. Required
delete_immediately Delete with grace period. Optional
days_of_recovery The number of days allowed to restore the secret (default in AWS - 30 days). Optional

Context Output

There is no context output for this command.

Command example

!aws-secrets-manager-secret–delete secret_id="fdff"

Human Readable Output

The Secret was Deleted

aws-secrets-manager-secret–restore

Restore a specific secret after deletion.

Base Command

aws-secrets-manager-secret–restore

Input

Argument Name Description Required
roleArn The Amazon Resource Name (ARN) of the role to assume. Optional
roleSessionName An identifier for the assumed role session. Optional
roleSessionDuration The duration, in seconds, of the role session. The value can range from 900 seconds (15 minutes) up to the maximum session duration setting for the role. Optional
secret_id The ID of the secret or ARN. Required

Context Output

There is no context output for this command.

Command example

!aws-secrets-manager-secret–restore secret_id="fdff"

Human Readable Output

the secret was restored successfully

aws-secrets-manager-secret–policy-get

Get the Secret Manager policy for a specific secret.

Base Command

aws-secrets-manager-secret–policy-get

Input

Argument Name Description Required
roleArn The Amazon Resource Name (ARN) of the role to assume. Optional
roleSessionName An identifier for the assumed role session. Optional
roleSessionDuration The duration, in seconds, of the role session. The value can range from 900 seconds (15 minutes) up to the maximum session duration setting for the role. Optional
secret_id The ID of the secret or ARN. Required

Context Output

Path Type Description
AWS.SecretsManager.Policy.ARN String The policy ARN.
AWS.SecretsManager.Policy.Name String The policy name.
AWS.SecretsManager.Policy.ResponseMetadata.RequestId String The ID of the HTTP header response request.
AWS.SecretsManager.Policy.ResponseMetadata.HTTPStatusCode Number The status code in the HTTP header.
AWS.SecretsManager.Policy.ResponseMetadata.HTTPHeaders.x-amzn-requestid String The ID of the HTTP header Amazon request.
AWS.SecretsManager.Policy.ResponseMetadata.HTTPHeaders.content-type String The type of the HTTP header response content.
AWS.SecretsManager.Policy.ResponseMetadata.HTTPHeaders.content-length String The length of the HTTP header response content.
AWS.SecretsManager.Policy.ResponseMetadata.HTTPHeaders.date Date The date of the HTTP header response.
AWS.SecretsManager.Policy.ResponseMetadata.RetryAttempts Number The number of HTTP header response retry attempts.

Command example

!aws-secrets-manager-secret–policy-get secret_id="fdff"

Context Example

{
    "AWS": {
        "SecretsManager": {
            "Policy": {
                "ARN": "arn:aws:secretsmanager:eu-central-1:123456789012:secret:fdff-vnNyyc",
                "Name": "fdff",
                "ResponseMetadata": {
                    "HTTPHeaders": {
                        "content-length": "91",
                        "content-type": "application/x-amz-json-1.1",
                        "date": "Sun, 23 Oct 2022 13:41:28 GMT",
                        "x-amzn-requestid": "b49e5847-387f-44a8-b7c8-a37540e89ad1"
                    },
                    "HTTPStatusCode": 200,
                    "RequestId": "b49e5847-387f-44a8-b7c8-a37540e89ad1",
                    "RetryAttempts": 0
                }
            }
        }
    }
}

Human Readable Output

AWS Secret Policy

ARN Name Policy
arn:aws:secretsmanager:eu-central-1:123456789012:secret:fdff-vnNyyc fdff  

Configuration parameters

  • defaultRegion — AWS Default Region (required)
  • roleArn — Role Arn
  • roleSessionName — Role Session Name
  • sessionDuration — Role Session Duration
  • credentials — Access Key
  • timeout — Timeout
  • retries — Retries
  • isFetchCredentials — Fetches credentials
  • sts_regional_endpoint — AWS STS Regional Endpoints
  • proxy — Use system proxy settings
  • insecure — Trust any certificate (not secure)
  • disable_sensitive_commands — Disable sensitive commands

Commands (5)

  • aws-secrets-manager-secret-list

    Retrieve all secrets.

  • aws-secrets-manager-secret–delete

    Delete a specific secret.

  • aws-secrets-manager-secret–policy-get

    Get the Secret Manager policy for a specific secret.

  • aws-secrets-manager-secret–restore

    Restore a specific secret after deletion.

  • aws-secrets-manager-secret–value-get

    Retrieve a secret value by key. This command can be disabled using the **Disable sensitive commands** parameter.

Source

AwsSecretsManager.py AwsSecretsManager_test.py AwsSecretsManager.yml AwsSecretsManager_description.md command_examples.txt
Download History Raw 
category: Authentication & Identity Management
provider: Amazon
commonfields:
  id: AwsSecretsManager
  version: -1
sectionorder:
- Connect
- Collect
configuration:
- display: AWS Default Region
  name: defaultRegion
  options:
  - us-east-1
  - us-east-2
  - us-west-1
  - us-west-2
  - ca-central-1
  - eu-west-1
  - eu-central-1
  - eu-west-2
  - ap-northeast-1
  - ap-northeast-2
  - ap-southeast-1
  - ap-southeast-2
  - ap-south-1
  - sa-east-1
  - eu-north-1
  - eu-west-3
  - us-gov-east-1
  - us-gov-west-1
  required: true
  type: 15
  section: Connect
- display: Role Arn
  name: roleArn
  type: 0
  required: false
  section: Connect
- display: Role Session Name
  name: roleSessionName
  type: 0
  required: false
  section: Connect
- display: Role Session Duration
  name: sessionDuration
  type: 0
  required: false
  section: Connect
- displaypassword: Secret Key
  name: credentials
  display: Access Key
  type: 9
  required: false
  section: Connect
- display: Timeout
  name: timeout
  additionalinfo: The time in seconds until a timeout exception is reached. You can specify just the read timeout (for example 60) or also the connect timeout separated from the read timeout with a comma (for example 60,10). If a connect timeout is not specified, a default of 10 second will be used.
  defaultvalue: 60,10
  type: 0
  required: false
  section: Connect
- display: Retries
  name: retries
  defaultvalue: 5
  additionalinfo: "The maximum number of retry attempts when connection or throttling errors are encountered. Set to 0 to disable retries. The default value is 5 and the limit is 10. Note: Increasing the number of retries will increase the execution time."
  type: 0
  required: false
  section: Connect
- display: Fetches credentials
  name: isFetchCredentials
  defaultvalue: "true"
  type: 8
  required: false
  section: Connect
- display: AWS STS Regional Endpoints
  additionalinfo: Sets the AWS_STS_REGIONAL_ENDPOINTS environment variable to specify the AWS STS endpoint resolution logic. By default, this option is set to “legacy” in AWS. Leave empty if the environment variable is already set using server configuration.
  name: sts_regional_endpoint
  options:
  - legacy
  - regional
  type: 15
  section: Connect
  required: false
- display: Use system proxy settings
  name: proxy
  type: 8
  required: false
  section: Connect
- display: Trust any certificate (not secure)
  name: insecure
  type: 8
  required: false
  section: Connect
- display: Disable sensitive commands
  name: disable_sensitive_commands
  type: 8
  additionalinfo: 'Disables the following sensitive commands from running: aws-secrets-manager-secret–value-get.'
  required: false
  defaultvalue: "false"
  section: Connect
description: 'AWS Secrets Manager helps you to securely encrypt, store, and retrieve credentials for your databases and other services.'
display: 'Aws Secrets Manager'
name: AwsSecretsManager
script:
  commands:
  - arguments:
    - description: Description field to filter by.
      name: description
    - description: Secret name.
      name: name
    - description: Tag key to filter by.
      name: tag_key
    - description: Tag value to filter by.
      name: tag_value
    - description: Search in all possible fields.
      name: general_search
    - description: Direction by which to display the results.
      name: sort
      auto: PREDEFINED
      predefined:
      - Asc
      - Desc
    - description: Number of total results to query.
      name: limit
    - description: Specific page to query.
      name: page
    - description: Number of total results in each page.
      name: page_size
    - description: The Amazon Resource Name (ARN) of the role to assume.
      name: roleArn
    - description: An identifier for the assumed role session.
      name: roleSessionName
    - description: The duration, in seconds, of the role session. The value can range from 900 seconds (15 minutes) up to the maximum session duration setting for the role.
      name: roleSessionDuration
    description: Retrieve all secrets.
    name: aws-secrets-manager-secret-list
    outputs:
    - contextPath: AWS.SecretsManager.Secret.ResponseMetadata.HTTPHeaders.content-length
      description: The length of the HTTP header response content.
      type: String
    - contextPath: AWS.SecretsManager.Secret.ResponseMetadata.HTTPHeaders.content-type
      description: The type of the HTTP header response content.
      type: String
    - contextPath: AWS.SecretsManager.Secret.ResponseMetadata.HTTPHeaders.date
      description: The date of the HTTP header response.
      type: Date
    - contextPath: AWS.SecretsManager.Secret.ResponseMetadata.HTTPHeaders.x-amzn-requestid
      description: The ID of the HTTP header Amazon request.
      type: String
    - contextPath: AWS.SecretsManager.Secret.ResponseMetadata.HTTPStatusCode
      description: The status code in the HTTP header.
      type: Number
    - contextPath: AWS.SecretsManager.Secret.ResponseMetadata.RequestId
      description: The ID of the HTTP header response request.
      type: String
    - contextPath: AWS.SecretsManager.Secret.ResponseMetadata.RetryAttempts
      description: The number of HTTP header response retry attempts.
      type: Number
    - contextPath: AWS.SecretsManager.Secret.SecretList.ARN
      description: The secret ARN.
      type: String
    - contextPath: AWS.SecretsManager.Secret.SecretList.CreatedDate
      description: The date and time this version of the secret was created.
      type: Date
    - contextPath: AWS.SecretsManager.Secret.SecretList.LastAccessedDate
      description: The date the secret was last accessed.
      type: Date
    - contextPath: AWS.SecretsManager.Secret.SecretList.LastChangedDate
      description: The date the secret was last changed.
      type: Date
    - contextPath: AWS.SecretsManager.Secret.SecretList.Name
      description: The secret name.
      type: String
    - contextPath: AWS.SecretsManager.Secret.SecretList.SecretVersionsToStages.c88e2176-aca4-4776-a422-c3a0616079bc
      description: The SecretVersionStage staging labels for the provided hash.
      type: String
    - contextPath: AWS.SecretsManager.Secret.SecretList.SecretVersionsToStages.5889c662-13a6-4318-bec3-b234fcae3826
      description: The SecretVersionStage staging labels for the provided hash.
      type: String
    - contextPath: AWS.SecretsManager.Secret.SecretList.SecretVersionsToStages.f2a389e8-3860-47a0-b4a0-16424ad63a24
      description: The SecretVersionStage staging labels for the provided hash.
      type: String
    - contextPath: AWS.SecretsManager.Secret.SecretList.Description
      description: The secret description.
      type: String
    - contextPath: AWS.SecretsManager.Secret.SecretList.SecretVersionsToStages.01cba660-28be-45d7-8597-d1ab295b0f35
      description: The SecretVersionStage staging labels for the provided hash.
      type: String
    - contextPath: AWS.SecretsManager.Secret.SecretList.SecretVersionsToStages.ac32e535-79e7-4188-a732-7f02dbe399f0
      description: The SecretVersionStage staging labels for the provided hash.
      type: String
  - arguments:
    - description: The Amazon Resource Name (ARN) of the role to assume.
      name: roleArn
    - description: An identifier for the assumed role session.
      name: roleSessionName
    - description: The duration, in seconds, of the role session. The value can range from 900 seconds (15 minutes) up to the maximum session duration setting for the role.
      name: roleSessionDuration
    - description: The ID of the secret or ARN.
      name: secret_id
      required: true
    - description: The version ID of the secret.
      name: version_id
    - description: The version stage of the secret.
      name: version_stage
    description: Retrieve a secret value by key. This command can be disabled using the **Disable sensitive commands** parameter.
    name: aws-secrets-manager-secret–value-get
    outputs:
    - contextPath: AWS.SecretsManager.Secret.SecretValue.ARN
      description: The secret ARN.
      type: String
    - contextPath: AWS.SecretsManager.Secret.SecretValue.Name
      description: The secret name.
      type: String
    - contextPath: AWS.SecretsManager.Secret.SecretValue.VersionId
      description: The secret version ID.
      type: String
    - contextPath: AWS.SecretsManager.Secret.SecretValue.SecretString
      description: The secret value.
      type: String
    - contextPath: AWS.SecretsManager.Secret.SecretValue.VersionStages
      description: A list of all of the staging labels currently attached to this version of the secret.
      type: String
    - contextPath: AWS.SecretsManager.Secret.SecretValue.CreatedDate
      description: The date and time this version of the secret was created.
      type: Date
    - contextPath: AWS.SecretsManager.Secret.SecretValue.ResponseMetadata.RequestId
      description: The ID of the HTTP header response request.
      type: String
    - contextPath: AWS.SecretsManager.Secret.SecretValue.ResponseMetadata.HTTPStatusCode
      description: The status code in the HTTP header.
      type: Number
    - contextPath: AWS.SecretsManager.Secret.SecretValue.ResponseMetadata.HTTPHeaders.x-amzn-requestid
      description: The ID of the HTTP header Amazon request.
      type: String
    - contextPath: AWS.SecretsManager.Secret.SecretValue.ResponseMetadata.HTTPHeaders.content-type
      description: The type of the HTTP header response content.
      type: String
    - contextPath: AWS.SecretsManager.Secret.SecretValue.ResponseMetadata.HTTPHeaders.content-length
      description: The length of the HTTP header response content.
      type: String
    - contextPath: AWS.SecretsManager.Secret.SecretValue.ResponseMetadata.HTTPHeaders.date
      description: The date of the HTTP header response.
      type: Date
    - contextPath: AWS.SecretsManager.Secret.SecretValue.ResponseMetadata.RetryAttempts
      description: The number of HTTP header response retry attempts.
      type: Number
  - arguments:
    - description: The Amazon Resource Name (ARN) of the role to assume.
      name: roleArn
    - description: An identifier for the assumed role session.
      name: roleSessionName
    - description: The duration, in seconds, of the role session. The value can range from 900 seconds (15 minutes) up to the maximum session duration setting for the role.
      name: roleSessionDuration
    - description: The ID of the secret or ARN.
      name: secret_id
      required: true
    - description: Delete with grace period.
      name: delete_immediately
    - description: The number of days allowed to restore the secret (default in AWS - 30 days).
      name: days_of_recovery
    description: Delete a specific secret.
    name: aws-secrets-manager-secret–delete
  - arguments:
    - description: The Amazon Resource Name (ARN) of the role to assume.
      name: roleArn
    - description: An identifier for the assumed role session.
      name: roleSessionName
    - description: The duration, in seconds, of the role session. The value can range from 900 seconds (15 minutes) up to the maximum session duration setting for the role.
      name: roleSessionDuration
    - description: The ID of the secret or ARN.
      name: secret_id
      required: true
    description: Restore a specific secret after deletion.
    name: aws-secrets-manager-secret–restore
  - arguments:
    - description: The Amazon Resource Name (ARN) of the role to assume.
      name: roleArn
    - description: An identifier for the assumed role session.
      name: roleSessionName
    - description: The duration, in seconds, of the role session. The value can range from 900 seconds (15 minutes) up to the maximum session duration setting for the role.
      name: roleSessionDuration
    - description: The ID of the secret or ARN.
      name: secret_id
      required: true
    description: Get the Secret Manager policy for a specific secret.
    name: aws-secrets-manager-secret–policy-get
    outputs:
    - contextPath: AWS.SecretsManager.Policy.ARN
      description: The policy ARN.
      type: String
    - contextPath: AWS.SecretsManager.Policy.Name
      description: The policy name.
      type: String
    - contextPath: AWS.SecretsManager.Policy.ResponseMetadata.RequestId
      description: The ID of the HTTP header response request.
      type: String
    - contextPath: AWS.SecretsManager.Policy.ResponseMetadata.HTTPStatusCode
      description: The status code in the HTTP header.
      type: Number
    - contextPath: AWS.SecretsManager.Policy.ResponseMetadata.HTTPHeaders.x-amzn-requestid
      description: The ID of the HTTP header Amazon request.
      type: String
    - contextPath: AWS.SecretsManager.Policy.ResponseMetadata.HTTPHeaders.content-type
      description: The type of the HTTP header response content.
      type: String
    - contextPath: AWS.SecretsManager.Policy.ResponseMetadata.HTTPHeaders.content-length
      description: The length of the HTTP header response content.
      type: String
    - contextPath: AWS.SecretsManager.Policy.ResponseMetadata.HTTPHeaders.date
      description: The date of the HTTP header response.
      type: Date
    - contextPath: AWS.SecretsManager.Policy.ResponseMetadata.RetryAttempts
      description: The number of HTTP header response retry attempts.
      type: Number
  script: '-'
  type: python
  subtype: python3
  dockerimage: demisto/boto3py3:1.0.0.10325753
fromversion: 6.5.0
tests:
- No tests (auto formatted)