category: Authentication & Identity Management provider: Amazon commonfields: id: AwsSecretsManager version: -1 sectionorder: - Connect - Collect configuration: - display: AWS Default Region name: defaultRegion options: - us-east-1 - us-east-2 - us-west-1 - us-west-2 - ca-central-1 - eu-west-1 - eu-central-1 - eu-west-2 - ap-northeast-1 - ap-northeast-2 - ap-southeast-1 - ap-southeast-2 - ap-south-1 - sa-east-1 - eu-north-1 - eu-west-3 - us-gov-east-1 - us-gov-west-1 required: true type: 15 section: Connect - display: Role Arn name: roleArn type: 0 required: false section: Connect - display: Role Session Name name: roleSessionName type: 0 required: false section: Connect - display: Role Session Duration name: sessionDuration type: 0 required: false section: Connect - displaypassword: Secret Key name: credentials display: Access Key type: 9 required: false section: Connect - display: Timeout name: timeout additionalinfo: The time in seconds until a timeout exception is reached. You can specify just the read timeout (for example 60) or also the connect timeout separated from the read timeout with a comma (for example 60,10). If a connect timeout is not specified, a default of 10 second will be used. defaultvalue: 60,10 type: 0 required: false section: Connect - display: Retries name: retries defaultvalue: 5 additionalinfo: "The maximum number of retry attempts when connection or throttling errors are encountered. Set to 0 to disable retries. The default value is 5 and the limit is 10. Note: Increasing the number of retries will increase the execution time." type: 0 required: false section: Connect - display: Fetches credentials name: isFetchCredentials defaultvalue: "true" type: 8 required: false section: Connect - display: AWS STS Regional Endpoints additionalinfo: Sets the AWS_STS_REGIONAL_ENDPOINTS environment variable to specify the AWS STS endpoint resolution logic. By default, this option is set to “legacy” in AWS. Leave empty if the environment variable is already set using server configuration. name: sts_regional_endpoint options: - legacy - regional type: 15 section: Connect required: false - display: Use system proxy settings name: proxy type: 8 required: false section: Connect - display: Trust any certificate (not secure) name: insecure type: 8 required: false section: Connect - display: Disable sensitive commands name: disable_sensitive_commands type: 8 additionalinfo: 'Disables the following sensitive commands from running: aws-secrets-manager-secret–value-get.' required: false defaultvalue: "false" section: Connect description: 'AWS Secrets Manager helps you to securely encrypt, store, and retrieve credentials for your databases and other services.' display: 'Aws Secrets Manager' name: AwsSecretsManager script: commands: - arguments: - description: Description field to filter by. name: description - description: Secret name. name: name - description: Tag key to filter by. name: tag_key - description: Tag value to filter by. name: tag_value - description: Search in all possible fields. name: general_search - description: Direction by which to display the results. name: sort auto: PREDEFINED predefined: - Asc - Desc - description: Number of total results to query. name: limit - description: Specific page to query. name: page - description: Number of total results in each page. name: page_size - description: The Amazon Resource Name (ARN) of the role to assume. name: roleArn - description: An identifier for the assumed role session. name: roleSessionName - description: The duration, in seconds, of the role session. The value can range from 900 seconds (15 minutes) up to the maximum session duration setting for the role. name: roleSessionDuration description: Retrieve all secrets. name: aws-secrets-manager-secret-list outputs: - contextPath: AWS.SecretsManager.Secret.ResponseMetadata.HTTPHeaders.content-length description: The length of the HTTP header response content. type: String - contextPath: AWS.SecretsManager.Secret.ResponseMetadata.HTTPHeaders.content-type description: The type of the HTTP header response content. type: String - contextPath: AWS.SecretsManager.Secret.ResponseMetadata.HTTPHeaders.date description: The date of the HTTP header response. type: Date - contextPath: AWS.SecretsManager.Secret.ResponseMetadata.HTTPHeaders.x-amzn-requestid description: The ID of the HTTP header Amazon request. type: String - contextPath: AWS.SecretsManager.Secret.ResponseMetadata.HTTPStatusCode description: The status code in the HTTP header. type: Number - contextPath: AWS.SecretsManager.Secret.ResponseMetadata.RequestId description: The ID of the HTTP header response request. type: String - contextPath: AWS.SecretsManager.Secret.ResponseMetadata.RetryAttempts description: The number of HTTP header response retry attempts. type: Number - contextPath: AWS.SecretsManager.Secret.SecretList.ARN description: The secret ARN. type: String - contextPath: AWS.SecretsManager.Secret.SecretList.CreatedDate description: The date and time this version of the secret was created. type: Date - contextPath: AWS.SecretsManager.Secret.SecretList.LastAccessedDate description: The date the secret was last accessed. type: Date - contextPath: AWS.SecretsManager.Secret.SecretList.LastChangedDate description: The date the secret was last changed. type: Date - contextPath: AWS.SecretsManager.Secret.SecretList.Name description: The secret name. type: String - contextPath: AWS.SecretsManager.Secret.SecretList.SecretVersionsToStages.c88e2176-aca4-4776-a422-c3a0616079bc description: The SecretVersionStage staging labels for the provided hash. type: String - contextPath: AWS.SecretsManager.Secret.SecretList.SecretVersionsToStages.5889c662-13a6-4318-bec3-b234fcae3826 description: The SecretVersionStage staging labels for the provided hash. type: String - contextPath: AWS.SecretsManager.Secret.SecretList.SecretVersionsToStages.f2a389e8-3860-47a0-b4a0-16424ad63a24 description: The SecretVersionStage staging labels for the provided hash. type: String - contextPath: AWS.SecretsManager.Secret.SecretList.Description description: The secret description. type: String - contextPath: AWS.SecretsManager.Secret.SecretList.SecretVersionsToStages.01cba660-28be-45d7-8597-d1ab295b0f35 description: The SecretVersionStage staging labels for the provided hash. type: String - contextPath: AWS.SecretsManager.Secret.SecretList.SecretVersionsToStages.ac32e535-79e7-4188-a732-7f02dbe399f0 description: The SecretVersionStage staging labels for the provided hash. type: String - arguments: - description: The Amazon Resource Name (ARN) of the role to assume. name: roleArn - description: An identifier for the assumed role session. name: roleSessionName - description: The duration, in seconds, of the role session. The value can range from 900 seconds (15 minutes) up to the maximum session duration setting for the role. name: roleSessionDuration - description: The ID of the secret or ARN. name: secret_id required: true - description: The version ID of the secret. name: version_id - description: The version stage of the secret. name: version_stage description: Retrieve a secret value by key. This command can be disabled using the **Disable sensitive commands** parameter. name: aws-secrets-manager-secret–value-get outputs: - contextPath: AWS.SecretsManager.Secret.SecretValue.ARN description: The secret ARN. type: String - contextPath: AWS.SecretsManager.Secret.SecretValue.Name description: The secret name. type: String - contextPath: AWS.SecretsManager.Secret.SecretValue.VersionId description: The secret version ID. type: String - contextPath: AWS.SecretsManager.Secret.SecretValue.SecretString description: The secret value. type: String - contextPath: AWS.SecretsManager.Secret.SecretValue.VersionStages description: A list of all of the staging labels currently attached to this version of the secret. type: String - contextPath: AWS.SecretsManager.Secret.SecretValue.CreatedDate description: The date and time this version of the secret was created. type: Date - contextPath: AWS.SecretsManager.Secret.SecretValue.ResponseMetadata.RequestId description: The ID of the HTTP header response request. type: String - contextPath: AWS.SecretsManager.Secret.SecretValue.ResponseMetadata.HTTPStatusCode description: The status code in the HTTP header. type: Number - contextPath: AWS.SecretsManager.Secret.SecretValue.ResponseMetadata.HTTPHeaders.x-amzn-requestid description: The ID of the HTTP header Amazon request. type: String - contextPath: AWS.SecretsManager.Secret.SecretValue.ResponseMetadata.HTTPHeaders.content-type description: The type of the HTTP header response content. type: String - contextPath: AWS.SecretsManager.Secret.SecretValue.ResponseMetadata.HTTPHeaders.content-length description: The length of the HTTP header response content. type: String - contextPath: AWS.SecretsManager.Secret.SecretValue.ResponseMetadata.HTTPHeaders.date description: The date of the HTTP header response. type: Date - contextPath: AWS.SecretsManager.Secret.SecretValue.ResponseMetadata.RetryAttempts description: The number of HTTP header response retry attempts. type: Number - arguments: - description: The Amazon Resource Name (ARN) of the role to assume. name: roleArn - description: An identifier for the assumed role session. name: roleSessionName - description: The duration, in seconds, of the role session. The value can range from 900 seconds (15 minutes) up to the maximum session duration setting for the role. name: roleSessionDuration - description: The ID of the secret or ARN. name: secret_id required: true - description: Delete with grace period. name: delete_immediately - description: The number of days allowed to restore the secret (default in AWS - 30 days). name: days_of_recovery description: Delete a specific secret. name: aws-secrets-manager-secret–delete - arguments: - description: The Amazon Resource Name (ARN) of the role to assume. name: roleArn - description: An identifier for the assumed role session. name: roleSessionName - description: The duration, in seconds, of the role session. The value can range from 900 seconds (15 minutes) up to the maximum session duration setting for the role. name: roleSessionDuration - description: The ID of the secret or ARN. name: secret_id required: true description: Restore a specific secret after deletion. name: aws-secrets-manager-secret–restore - arguments: - description: The Amazon Resource Name (ARN) of the role to assume. name: roleArn - description: An identifier for the assumed role session. name: roleSessionName - description: The duration, in seconds, of the role session. The value can range from 900 seconds (15 minutes) up to the maximum session duration setting for the role. name: roleSessionDuration - description: The ID of the secret or ARN. name: secret_id required: true description: Get the Secret Manager policy for a specific secret. name: aws-secrets-manager-secret–policy-get outputs: - contextPath: AWS.SecretsManager.Policy.ARN description: The policy ARN. type: String - contextPath: AWS.SecretsManager.Policy.Name description: The policy name. type: String - contextPath: AWS.SecretsManager.Policy.ResponseMetadata.RequestId description: The ID of the HTTP header response request. type: String - contextPath: AWS.SecretsManager.Policy.ResponseMetadata.HTTPStatusCode description: The status code in the HTTP header. type: Number - contextPath: AWS.SecretsManager.Policy.ResponseMetadata.HTTPHeaders.x-amzn-requestid description: The ID of the HTTP header Amazon request. type: String - contextPath: AWS.SecretsManager.Policy.ResponseMetadata.HTTPHeaders.content-type description: The type of the HTTP header response content. type: String - contextPath: AWS.SecretsManager.Policy.ResponseMetadata.HTTPHeaders.content-length description: The length of the HTTP header response content. type: String - contextPath: AWS.SecretsManager.Policy.ResponseMetadata.HTTPHeaders.date description: The date of the HTTP header response. type: Date - contextPath: AWS.SecretsManager.Policy.ResponseMetadata.RetryAttempts description: The number of HTTP header response retry attempts. type: Number script: '-' type: python subtype: python3 dockerimage: demisto/boto3py3:1.0.0.10325753 fromversion: 6.5.0 tests: - No tests (auto formatted)