AWS Secrets Manager

Collect AWS Secrets Manager secret counts and resource metadata without reading secret contents.

Configuration¶

Install Func¶

We recommend enabling hosted Func under TrueWatch Integrations - Extensions. All prerequisites are installed automatically; continue with the script installation.

To deploy Func yourself, see Deploy Func Yourself

Activate Script¶

Note: Prepare an AWS AK that meets the requirements. For simplicity, you can grant the global read-only permission ReadOnlyAccess directly.

Activate the Hosted Script¶

1. Log in to the TrueWatch console.
2. Click 【Integrations】 and select 【Cloud Account Management】.
3. Click 【Add Cloud Account】, select 【AWS】, and enter the required information. Skip this step if the cloud account has already been configured.
4. Click 【Test】, then click 【Save】 if the test succeeds. If it fails, check the configuration and test again.
5. Find the added cloud account in 【Cloud Account Management】 and click it to open its details page.
6. Click 【Integrations】 on the cloud account details page, find AWS Secrets Manager under Not Installed, and click 【Install】. Complete the installation in the dialog.

Activate the Script Manually¶

1. Log in to the Func console, click 【Script Market】, open the TrueWatch script market, and search for integration_aws_secretsmanager.
2. Click 【Install】 and enter AWS AK ID, AK Secret, and the account name.
3. Click 【Deploy Startup Script】. The system automatically creates the Startup script set and configures the startup script.
4. After activation, find the automatic trigger configuration under 「Management / Automatic Trigger Configuration」. Click 【Execute】 to run it immediately without waiting for the schedule. After a short wait, review the task records and logs.

Verification¶

1. Under 「Management / Automatic Trigger Configuration」, confirm that the task has an automatic trigger configured, and check its records and logs for errors.
2. In TrueWatch, check 「Infrastructure / Custom」 for asset information.
3. In TrueWatch, check 「Metrics」 for the corresponding monitoring data.

Metrics¶

The measurement is aws_secrets_manager. AWS publishes these metrics once per hour.