Secrets replication from one account to another

Question

Currently we are getting a Secret from one AWS application team ( via mail)....and we are updating that secret in our Application (On-Premises) for us it's a Password. Once this is done our Application calls will get authorized by the AWS application (based on similar password/secret).

Every 90 days they send one new secret and we update it in our application(manually)....we are currently planning to deploy our application to AWS....when we do this...we want to know is there any way to sync the secret from one AWS application (who are sending us now the secret) with our AWS application.....like whenever they change secret (every 90 days) that secret should get reflect in our secrets manager without manually updating it.

Answer

Hello, Once the application is migrated to AWS, it can retrieve secrets from AWS Secret Manager programmatically. Sample codes to retrieve secrets from applications using Java, Javascript, C#, Python3, Ruby and Go are available in the AWS console under the secrets you have created. Additionally , please visit this page https://docs.aws.amazon.com/secretsmanager/latest/userguide/retrieving-secrets.html to get more details about retrieving secrets automatically through various applications . However, we recommend that you cache your secret values by using client-side caching. Caching secrets improves speed and reduces your costs. You can retrieve based on your rotation schedule and cache at client side and use it.

Secrets replication from one account to another

Relevant content