View Secrets Manager Secrets from your terminal
orbit lists Secrets Manager Secrets as a dense, sortable table: 10 columns including Secret Name, Description and Last Retrieved, fetched with Secrets Manager:ListSecrets.
Read-only is the default, so browsing is safe against a production account. Start orbit with --write and the mutating actions become reachable: Rotate Secret, Delete Secret, each behind its own confirmation dialog.
brew install doughlass/homebrew-tap/orbit
What the Secrets Manager Secrets table shows
| Column | Source field |
|---|---|
| Secret Name | Name |
| Description | Description |
| Last Retrieved | LastAccessedDate |
| Created On | CreatedDate |
| Deleted On | DeletedDate |
| Last Updated | LastChangedDate |
| Last Rotated | LastRotatedDate |
| Next Rotation | NextRotationDate |
| Managed By | OwningService |
| Type | Type |
Columns with an opt-in flag are hidden by default; press v for the column visibility picker.
Actions on Secrets Manager Secrets
| Key | Action | AWS API | Posture |
|---|---|---|---|
R | Rotate Secret | Secrets Manager:RotateSecret | needs --write |
ctrl+d | Delete Secret | Secrets Manager:DeleteSecret | needs --write |
See how orbit keeps writes behind --write.
IAM permissions for this view
Read-only browsing needs Secrets Manager:ListSecrets
plus the standard Secrets Manager List and Describe permissions for the surrounding views. Write actions map to Secrets Manager:RotateSecret, Secrets Manager:DeleteSecret and are reachable only under --write.
Questions about Secrets Manager Secrets in orbit
What IAM permissions do I need to view Secrets Manager Secrets in orbit?
orbit lists Secrets Manager Secrets with Secrets Manager:ListSecrets, so a policy granting Secrets Manager:ListSecrets is enough for read-only browsing of this view. The mutating actions (Secrets Manager:RotateSecret, Secrets Manager:DeleteSecret) additionally require --write at startup, and their IAM actions.
Is browsing Secrets Manager Secrets safe against a production account?
Read-only is the default. Listing and describing Secrets Manager Secrets performs no mutations. The write actions on this view (Rotate Secret, Delete Secret) are reachable only when orbit is started with --write, each behind its own confirmation.
Related views
SNS Topics
View in the terminal
CloudFront Distributions
View in the terminal
EC2 Instances
View in the terminal
orbit is not affiliated with or endorsed by Amazon Web Services, Inc. AWS is a trademark of Amazon.com, Inc. orbit is MIT licensed.