AWS Secrets Manager

Claim this tool Editor reviewed

AWS service for storing and rotating secrets securely

Security Cloud & Infrastructure Identity & Access

Visit Website

4.6(22 across the web)

PaidVisit Website

Reviews onG2Capterra

22 reviews tracked·2 press mentions

The Bottom Line

Entry price

From $0.4/mo

Biggest pro

Managed secrets storage

Biggest con

Per-secret pricing adds up

TL;DR - AWS Secrets Manager

AWS Secrets Manager helps you securely store and rotate database credentials, API keys, and other secrets
It integrates natively with AWS services and supports automatic rotation for RDS and other databases
Pricing is $0.40/secret/month plus $0.05 per 10,000 API calls

Pricing: Paid only

Best for: Enterprises & pros

4.6/5 across review platforms

What is AWS Secrets Manager?

Editorial review

Secrets Manager stores sensitive information-API keys, database credentials, certificates-and rotates them automatically. Applications retrieve secrets at runtime instead of baking them into config files. Automatic rotation changes credentials on a schedule without application changes. Audit logs show who accessed what. Encryption at rest and in transit is handled automatically. Production applications that take security seriously use Secrets Manager to keep credentials out of code and configuration files.

Available on: Web

LCLouis CorneloupUpdated May 26, 2026 · how we evaluateSourceaws.amazon.com ↗

Pros & Cons

Pros

Managed secrets storage
Automatic rotation
Audit logging
Integration with AWS services
Cross-account access

Cons

Per-secret pricing adds up
AWS only
Less flexible than Vault
Rotation setup complex
Region-specific

Ratings Across the Web

4.6(22 reviews)

AWS Secrets Manager holds an aggregate rating of 4.6 out of 5 from 22 reviews across G2 and Capterra, last checked March 18, 2026.

Ratings aggregated from independent review platforms. Learn more

Key Features

Secret storageRotationFine-grained accessAuditAWS integrationEncryption

Pricing Plans

30-day Free Trial

Pricing checked Aug 26, 2026

Per Secret

$0.4/month per secret

Secret storage

Automatic rotation
Fine-grained policies
Audit with CloudTrail
Cross-region replication

API Calls

$0.05/per 10,000 calls

Access pricing

GetSecretValue
All API operations
SDK integration

Calculate your cost View full pricing

Is AWS Secrets Manager worth the price?

85/100

AWS Secrets Manager offers fair pricing, with a clear per-secret cost of $0.40/month and API calls at $0.05 per 10,000.

This model is transparent and scales well. It's best for organizations that need robust, integrated secret management within the AWS ecosystem.

Hidden Costs & Gotchas

Data transfer out of AWS regions

CloudTrail logging for audit trails

KMS encryption key usage fees

Potential for high API call volume

How AWS Secrets Manager Compares to Competitors

Compared to HashiCorp Vault, AWS Secrets Manager is generally more cost-effective for smaller to medium AWS-native deployments, as Vault often involves self-hosting infrastructure costs or higher enterprise licensing. Azure Key Vault has a similar per-secret and per-transaction model, making it a direct competitor with comparable pricing, often favored by organizations already in the Azure ecosystem.

How AWS Secrets Manager's pricing compares

At $0.05/mo, AWS Secrets Manager is the most affordable of its 4 direct competitors.

AWS Secrets Manager

$0.05

$0.5

$2.99

$18

$21

Entry paid plan, monthly. Pricing checked Aug 26, 2026.

Reviews

Improve Your Thinking Patterns Using ChatGPT cover

$99Free with your review

Review AWS Secrets Manager, get a free AI guide

Share your experience and we will send you Improve Your Thinking Patterns Using ChatGPT, free.

Write a review

4.6/5

Across 22 verified user reviews on G2, Capterra

Add your hands-on experience using the offer above to help the next buyer.

Best AWS Secrets Manager Alternatives

Top alternatives based on features, pricing, and user needs.

View full list →

1PasswordPaid

Securely store passwords, cards, and docs with end-to-end encryption

4.7

CyberArkPaid

Secure every identity across human, machine, and AI with intelligent privilege controls.

3.8

HashiCorp VaultFreemium

Securely store, manage, and encrypt secrets and credentials

4.5

DopplerFreemium

Centralize secrets and env vars with auto-sync and rotation

4.5

InfisicalFreemium

Open-source secret management platform for modern teams

QIZ SecurityPaid

Automate crypto discovery, risk management, and governance

See all security tools →

Still deciding?

Most buyers shortlist 2 or 3 tools before committing. Pull a side-by-side comparison or browse the full alternatives shortlist below.

All AWS Secrets Manager alternatives6+ tools ranked, pricing + verdict per pick AWS Secrets Manager vs 1PasswordHead-to-head: features, pricing, who wins AWS Secrets Manager vs CyberArkHead-to-head: features, pricing, who wins AWS Secrets Manager vs HashiCorp VaultHead-to-head: features, pricing, who wins

Explore More

Best Security Tools Best Cloud & Infrastructure Tools Best Identity & Access Tools

AWS Secrets Manager FAQ

How does AWS Secrets Manager enhance application security?

AWS Secrets Manager improves security by storing sensitive information like API keys and database credentials, preventing them from being hardcoded into application configuration files. Applications retrieve these secrets at runtime, ensuring credentials are not exposed in code. It also provides automatic rotation of credentials on a schedule.

Which teams benefit most from using AWS Secrets Manager?

Teams developing production applications that prioritize security and operate within the AWS ecosystem will find AWS Secrets Manager most beneficial. It helps maintain secure credential management for applications that take security seriously. This service is particularly useful for development and operations teams.

How does AWS Secrets Manager compare to HashiCorp Vault?

AWS Secrets Manager is a managed service within the AWS ecosystem, offering seamless integration with other AWS services and automatic secret rotation. HashiCorp Vault, while also a secrets management solution, is generally considered more flexible in its deployment options and broader cloud compatibility, whereas Secrets Manager is AWS-only.

What kind of sensitive data can be stored in AWS Secrets Manager?

AWS Secrets Manager is designed to store various types of sensitive information, including API keys, database credentials, and certificates. It ensures these secrets are encrypted at rest and in transit, and can be retrieved by applications as needed.

What are the main trade-offs when choosing AWS Secrets Manager?

A primary trade-off for AWS Secrets Manager is its per-secret pricing model, which can accumulate costs as the number of secrets grows. Additionally, it is an AWS-only service, meaning it doesn't support multi-cloud or on-premises environments, and setting up secret rotation can be complex.

How is AWS Secrets Manager priced?

AWS Secrets Manager is a paid product with no permanently free tier. Its pricing model is based on the number of secrets stored and the number of API calls made to retrieve those secrets. This means costs can vary based on usage volume.

Can AWS Secrets Manager automatically rotate credentials?

Yes, AWS Secrets Manager can automatically rotate credentials on a schedule without requiring changes to the application code. This feature helps to regularly update sensitive information like database passwords, enhancing overall security posture. The rotation process is managed by the service.

Source: aws.amazon.com

Guides & Articles

Best Secrets Management Tools in 2026

Features AWS Secrets Manager

Best MCP Gateways & AI Agent Security Tools 2026

Expert guide

Best Deepfake Detection Tools 2026

Expert guide