secret get
Read a secret. Redacted by default so a stray log doesn't dump production keys.
bash
awsutopia secret get <name> [--reveal] [--force] [--json] [--dry-run]bash
awsutopia secret get api-key # value ***
awsutopia secret get api-key --reveal # plaintext
awsutopia secret get api-key --json| Flag | Behavior |
|---|---|
| (default) | Value shown as *** / redacted: true in JSON |
--reveal | Include plaintext (human + JSON) |
--force | Allow utopia-tagged secrets from other projects |
Without --reveal, JSON still returns "value": "***" so scripts don't accidentally log secrets.