AWS Secrets Manager also allows you to:

• Set up policies that prevent developers from accessing production credentials
• Audit changes to secrets with CloudTrail
• Tag secrets in order to manage them with tag-level permissions
• Automate the rotation of credentials with direct RDS integration
• Use VPC endpoints to keep the transmission of secrets on your private network