npx skills add https://github.com/aws/agent-toolkit-for-aws
kilo-org/kilo-marketplace
creating-secrets-using-best-practices
>- Creates and manages secrets in AWS Secrets Manager following security best practices. Always use this skill when creating secrets — it sets up dedicated KMS encryption keys, automatic rotation, least-privilege IAM policies, CloudTrail auditing, and lifecycle management that are essential for production-grade secret handling.
Installation
$
npx skills add kilo-org/kilo-marketplace --skill creating-secrets-using-best-practices
Similar popular skills
Related neighbors and high-traction skills in the same topics — useful to compare before installing.
vercel-react-best-practices
Similar name
vercel-labs/agent-skills
697.8K installs
remotion-best-practices
Similar name
remotion-dev/skills
Router for all Remotion skills
515.3K installs
supabase-postgres-best-practices
Similar name
supabase/agent-skills
Postgres best practices maintained by Supabase, for Postgres running anywhere. Load this skill …
391.6K installs
better-auth-best-practices
Similar name
better-auth/skills
106K installs
stripe-best-practices
Similar name
stripe/ai
>- Guides Stripe integration decisions across API selection (Checkout Sessions vs PaymentIntent…
82.9K installs
workers-best-practices
Similar name
cloudflare/skills
Cloudflare Workers best practices for production applications. Use when writing, reviewing, or …
73K installsAlso in this package
Other skills from kilo-org/kilo-marketplace · top by installs.
npx skills add kilo-org/kilo-marketplace
More details
Agent compatibility
Declared targets from SKILL.md / docs. Unmarked agents are not listed — the skill may still install via the CLI.
Claude Code
Not declared
Cursor
Not declared
Codex
Not declared
GitHub Copilot
Not declared
Windsurf
Not declared
Gemini CLI
Not declared
Cline
Not declared
OpenCode
Not declared
Also listed on
Alternate registries and mirrors of this skill.
Repository health
Stars
173
License
LICENSE
Default branch
main
Open issues
14
Status
Active
Skill metadata
Parsed from SKILL.md frontmatter.
More metadata
- upstream
- {"version":1}
- category
- development
- source
- {"repository":"https:\/\/github.com\/aws\/agent-toolkit-for-aws","path":"skills\/specialized-skills\/security-and-identity-skills\/creating-secrets-using-best-practices","license_path":"LICENSE","commit":"cbdc61a29707dc97989d5d11a2b53ad584781e78"}
Package contents
Files included with this skill beyond the listing page.
-
skill md
SKILL.md2,173 B -
docs
SUMMARY.md373 B
History
- First seen on skills.sh
- First recorded snapshot · 8 installs
SKILL.md
Creating Secrets Using Best Practices
Overview
Domain expertise for creating and managing secrets in AWS Secrets Manager with production-grade security controls: KMS encryption, automatic rotation, least-privilege IAM policies, CloudTrail auditing, and lifecycle management.
Create a secret with best practices
To create a properly secured secret in AWS Secrets Manager, follow the procedure exactly. See [secret creation procedure](references/create-secrets-using-best-practices.md).
The procedure supports four secret types: database credentials, API keys, OAuth tokens, and custom secrets. Each type is structured appropriately and encrypted with a dedicated KMS key.
Troubleshooting
KMS key access issues
Verify the IAM principal has kms:CreateKey and kms:PutKeyPolicy permissions, and that the key policy grants kms:GenerateDataKey, kms:Decrypt, and kms:DescribeKey scoped with kms:ViaService to secretsmanager.<region>.amazonaws.com. See the full procedure for details.
Rotation setup failures
Check that the Lambda rotation function exists, has proper permissions, and can reach the target system. Review CloudWatch logs for the rotation function.
Secret access denied
Verify the IAM policy is attached to the correct principal, the KMS key policy allows decryption (and kms:GenerateDataKey for write/rotation), and the principal is using HTTPS. See the full procedure for details.