Secure and Rotate Secrets with AWS Secrets Manager

Why it matters

Credential delivery is the Secrets Manager portion of 3.2.5. This exercise connects storing sensitive information with programmatic access, authorization, and scheduled rotation.

What to practise

Create a Secrets Manager secret and access its value programmatically. Manage authorization with resource-based policies and schedule secret rotation using Lambda. Watch which principals the resource-based policy lets read the secret, and how rotation is scheduled through Lambda.

How it fits

For a GenAI application, focus on retrieving and controlling access to the credentials its integrations need. This practises the Secrets Manager part of 3.2.5; the subsection’s KMS key permissions and payload-encryption design require separate study.