Back to Integrations

AWS Secrets Manager

Reference AWS Secrets Manager secrets in env zero so values are resolved at deploy time

Integration
category

Secret Management

Overview

env zero can pull secrets from AWS Secrets Manager during deployment instead of storing them itself. Reference a secret with a simple placeholder and env zero resolves it at runtime, keeping sensitive values in AWS rather than on the platform.

How it works

With a self-hosted agent that has read access to Secrets Manager, reference secrets using a placeholder in your variables. env zero resolves each one only while a deployment runs, so values never live in env zero's storage.