Skip to content

create secret

Stash a secret in SSM Parameter Store without pasting it into the console.

bash
awsutopia create secret <name> [--value <secret>] [--dry-run] [--json]

What you'll get

An SSM SecureString at:

text
/utopia/{project}/{env}/{name}

Tagged with utopia:project and utopia:env. Success output never prints the value. Includes a static SSM cost hint (not live Cost Explorer).

bash
awsutopia create secret api-key --value 'replace-me'
awsutopia secret get api-key              # ***
awsutopia secret get api-key --reveal     # plaintext
Arg / flagNotes
name (positional)Short name only (no /)
--valuePrefer this in scripts. Interactive prompt if omitted
--dry-runPlan PutParameter + tags; no write

Safety

  • Create/set success never includes the secret value
  • Prefer --value in CI; some terminals may echo prompts

Working name — your AWS account, your bill.