Skip to content
AWS Secrets Manager logo

AWS service for storing and rotating secrets securely

Visit Website
Reviews onG2Capterra
22 reviews tracked·2 press mentions

The Bottom Line

Entry price

From $0.4/mo

Biggest pro

Managed secrets storage

Biggest con

Per-secret pricing adds up

TL;DR - AWS Secrets Manager

  • AWS Secrets Manager helps you securely store and rotate database credentials, API keys, and other secrets
  • It integrates natively with AWS services and supports automatic rotation for RDS and other databases
  • Pricing is $0.40/secret/month plus $0.05 per 10,000 API calls
Pricing: Paid only
Best for: Enterprises & pros
4.6/5 across review platforms

What is AWS Secrets Manager?

Editorial review
Secrets Manager stores sensitive information-API keys, database credentials, certificates-and rotates them automatically. Applications retrieve secrets at runtime instead of baking them into config files. Automatic rotation changes credentials on a schedule without application changes. Audit logs show who accessed what. Encryption at rest and in transit is handled automatically. Production applications that take security seriously use Secrets Manager to keep credentials out of code and configuration files.

Available on: Web

Pros & Cons

Pros

  • Managed secrets storage
  • Automatic rotation
  • Audit logging
  • Integration with AWS services
  • Cross-account access

Cons

  • Per-secret pricing adds up
  • AWS only
  • Less flexible than Vault
  • Rotation setup complex
  • Region-specific

Ratings Across the Web

4.6(22 reviews)

Ratings aggregated from independent review platforms. Learn more

Key Features

Secret storageRotationFine-grained accessAuditAWS integrationEncryption

Pricing Plans

30-day Free Trial

Pricing checked Jul 7, 2026

Most Popular

Per Secret

$0.4/month per secret

Secret storage

  • Automatic rotation
  • Fine-grained policies
  • Audit with CloudTrail
  • Cross-region replication

API Calls

$0.05/per 10,000 calls

Access pricing

  • GetSecretValue
  • All API operations
  • SDK integration

How AWS Secrets Manager's pricing compares

At $0.05/mo, AWS Secrets Manager is the most affordable of its 4 direct competitors.

AWS Secrets Manager
$0.05

Entry paid plan, monthly. Pricing checked Jul 7, 2026.

Reviews

Improve Your Thinking Patterns Using ChatGPT cover
$99Free with your review

Review AWS Secrets Manager, get a free AI guide

Share your experience and we will send you Improve Your Thinking Patterns Using ChatGPT, free.

Write a review
4.6/5

Across 22 verified user reviews on G2, Capterra

Add your hands-on experience using the offer above to help the next buyer.

Best AWS Secrets Manager Alternatives

Top alternatives based on features, pricing, and user needs.

View full list →

Most buyers shortlist 2 or 3 tools before committing. Pull a side-by-side comparison or browse the full alternatives shortlist below.

Explore More

AWS Secrets Manager FAQ

How does AWS Secrets Manager enhance application security?

AWS Secrets Manager improves security by storing sensitive information like API keys and database credentials, preventing them from being hardcoded into application configuration files. Applications retrieve these secrets at runtime, ensuring credentials are not exposed in code. It also provides automatic rotation of credentials on a schedule.

Which teams benefit most from using AWS Secrets Manager?

Teams developing production applications that prioritize security and operate within the AWS ecosystem will find AWS Secrets Manager most beneficial. It helps maintain secure credential management for applications that take security seriously. This service is particularly useful for development and operations teams.

How does AWS Secrets Manager compare to HashiCorp Vault?

AWS Secrets Manager is a managed service within the AWS ecosystem, offering seamless integration with other AWS services and automatic secret rotation. HashiCorp Vault, while also a secrets management solution, is generally considered more flexible in its deployment options and broader cloud compatibility, whereas Secrets Manager is AWS-only.

What kind of sensitive data can be stored in AWS Secrets Manager?

AWS Secrets Manager is designed to store various types of sensitive information, including API keys, database credentials, and certificates. It ensures these secrets are encrypted at rest and in transit, and can be retrieved by applications as needed.

What are the main trade-offs when choosing AWS Secrets Manager?

A primary trade-off for AWS Secrets Manager is its per-secret pricing model, which can accumulate costs as the number of secrets grows. Additionally, it is an AWS-only service, meaning it doesn't support multi-cloud or on-premises environments, and setting up secret rotation can be complex.

How is AWS Secrets Manager priced?

AWS Secrets Manager is a paid product with no permanently free tier. Its pricing model is based on the number of secrets stored and the number of API calls made to retrieve those secrets. This means costs can vary based on usage volume.

Can AWS Secrets Manager automatically rotate credentials?

Yes, AWS Secrets Manager can automatically rotate credentials on a schedule without requiring changes to the application code. This feature helps to regularly update sensitive information like database passwords, enhancing overall security posture. The rotation process is managed by the service.

Guides & Articles