Get Secret

secrets_manager.get_secret_value
ActionAmazon Web Servicesconnection required

Calls the AWS secrets_manager API (SigV4).

Read a secret's current value from AWS Secrets Manager.

Connection

Required
Yes — the node will not save without one
Auth type
API key
Providers
AWS Secrets Manager
Secret shape
{"access_key_id", "secret_access_key"}
Config it needs
region
Resolved by
config.connection_id, else node.connection_id

Configuration

3 fields, 1 required. A dotted path is a nested object and name[] an array of objects — the editor renders the same tree.

FieldTypeRequiredDefaultConstraintsExample
region
AWS region (overrides the connection).
stringNo———
secret_id
Secret name or ARN.
stringYes———
version_stage
Version stage (default AWSCURRENT).
stringNo———

Output

One shape.

result

FieldTypeExample
name
string—
arn
string—
version_id
string—
secret_string
string—
{
  "arn": "",
  "name": "",
  "secret_string": "",
  "version_id": ""
}

Notes

  • The value becomes ordinary step output — do not log it.

Related AWS Secrets Manager nodes

See Get Secret run in a workflow.

In a technical demo we add the AWS Secrets Manager connection, drop the node on the canvas and let Workflow Health pre-flight it before the first real run.