aws_secretsmanager_describe_secret
Retrieve metadata about AWS Secrets Manager secrets, including rotation settings, replication status, and tags, without exposing the secret value itself.
Instructions
Get metadata about a secret (rotation, replication, tags) without retrieving the value.
Input Schema
TableJSON Schema
| Name | Required | Description | Default |
|---|---|---|---|
| profile | No | AWS profile name from ~/.aws/config (e.g., 'default', 'production') | |
| region | No | AWS region override (e.g., 'us-east-1', 'sa-east-1') | |
| sensitive_access_token | No | Out-of-band approval token configured in AWS_MCP_SENSITIVE_ACCESS_TOKEN. Required for operations that can return decrypted or secret values. | |
| sensitive_access_reason | No | Short human reason for retrieving sensitive data. Required for auditability. | |
| sensitive_access_acknowledged | No | Must be true to confirm that the response may contain secret or decrypted data. | |
| secret_id | Yes | Secret name or ARN |