Secrets management

Generally Available: External key management for Azure Key Vault Managed HSM

External key management for Azure Key Vault Managed HSM is now generally available in all Azure public regions.

AWS Transfer Family now supports AWS Secrets Manager storage for SFTP server host keys

AWS Transfer Family now lets you store SFTP server host keys in AWS Secrets Manager in your own AWS account. This gives you greater control over your server identity and helps simplify server migrations and failover.

AWS Secrets Manager adds managed external secrets support for Databricks and Twilio

AWS Secrets Manager now extends its managed external secrets capability to include Databricks and Twilio, enabling you to automatically rotate the credentials that your data pipelines and messaging applications use to call these services.

Retirement: Azure Key Vault Secrets Provider Extension for Azure Arc enabled Kubernetes clusters

The Azure Key Vault Secrets Provider Extension for Azure Arc-enabled Kubernetes will be retired on October 9, 2027. Customers currently using the extension should plan to migrate to the Azure Key Vault Secret Store Extension before the retirement date.

Improve your secrets security posture with actionable recommendations in the AWS Secrets Manager console

AWS Secrets Manager now integrates with the AWS Recommended Actions framework to surface contextual, actionable suggestions for your secrets directly in the Secrets Manager console.

Parameter Manager supports CRC32C checksums to verify data integrity when you add or access parameter versions.

For more information, see Data integrity assurance.

Generally Available: Azure Developer CLI (azd) Extension Framework

The Azure Developer CLI (azd) Extension Framework is now generally available. The framework enables developers, teams, and partners to extend Azure Developer CLI with custom capabilities that support their preferred application development workflows.

Parameter Manager supports using tags to group and organize parameters and conditionally manage access control using Identity and Access Management (IAM)…

Parameter Manager supports using tags to group and organize parameters and conditionally manage access control using Identity and Access Management (IAM) policies.

AWS Workload Credentials Provider is now available as a one-click install for Linux and Windows

Today, AWS Secrets Manager announces one-click installation for the AWS Workload Credentials Provider (AWCP) on Amazon Linux and Windows, reducing setup from a multi-step build-from-source process to a single command.

AWS Secrets Manager adds managed external secrets support for Cisco Security Platform and Netskope

AWS Secrets Manager now extends its managed external secrets capability to include Cisco Security Platform API keys and Netskope API tokens, enabling you to automatically rotate these third-party credentials directly from the AWS console without writing any custom rotation code.

AWS Secrets Manager adds managed external secrets support for Jenkins and SonarQube

AWS Secrets Manager now extends its managed external secrets capability to include Jenkins API Tokens and SonarQube Tokens, enabling you to automatically rotate these third-party credentials directly from the AWS console without writing any custom rotation code.

Public Preview: Symmetric keys on Azure Key Vault Premium

We’re announcing post-quantum resilient symmetric keys on Azure Key Vault Premium are now available in public preview.

AWS Secrets Manager now publishes secret update notifications to Amazon EventBridge

AWS Secrets Manager now automatically publishes events to Amazon EventBridge whenever your secret values change, enabling you to build event-driven workflows that respond in real time to secret updates.

AWS Secrets Manager adds managed external secrets support for Paddle and GitLab

AWS Secrets Manager now extends its managed external secrets capability to include Paddle API Keys and GitLab Access Tokens.

AWS Secrets Manager introduces safe secrets handling in the Agent Toolkit for AWS

AWS Secrets Manager now offers a secret safety skill as part of the aws-core plugin in the Agent Toolkit for AWS, an open-source repository that equips AI coding agents with tools, knowledge, and guardrails for building on AWS.

AWS announces AWS Workload Credentials Provider

AWS announces AWS Workload Credentials Provider, a lightweight client-side provider that automates deployment of exported certificates from AWS Certificate Manager (ACM) and local caching of secrets from AWS Secrets Manager across AWS and non-AWS workloads.

Amazon Bedrock AgentCore Identity now allows you to bring your own secrets with AWS Secrets Manager

Amazon Bedrock AgentCore Identity now allows customers the ability to reference existing AWS Secrets Manager secret ARNs directly in AgentCore Identity Credential Providers.

AWS Secrets Manager adds managed external secrets support for Datadog vended keys and Snowflake Programmatic Access Tokens

AWS Secrets Manager now extends its managed external secrets capability to include Datadog Keys and Snowflake Programmatic Access Tokens (PATs).

Introducing pre-fetching and IAM role assumption for AWS Secrets Manager Agent

AWS Secrets Manager Agent now supports two new capabilities: pre-fetching secrets at startup and assuming an IAM role to retrieve secrets.

AWS Secrets Manager extends managed external secrets to MongoDB Atlas and Confluent Cloud

AWS Secrets Manager now supports managed external secrets for MongoDB Atlas and Confluent Cloud.