> ## Documentation Index
> Fetch the complete documentation index at: https://docs.dqlabs.ai/llms.txt
> Use this file to discover all available pages before exploring further.

# Setup

> Step-by-step guide to connecting AWS Secrets Manager to Prizm so connector credentials are retrieved at runtime instead of stored in Prizm.

<script type="application/ld+json">
  {`{
            "@context": "https://schema.org",
            "@type": "TechArticle",
            "headline": "AWS Secrets Manager Setup",
            "description": "Step-by-step guide to connecting AWS Secrets Manager to Prizm so connector credentials are retrieved at runtime instead of stored in Prizm.",
            "url": "https://docs.dqlabs.ai/integrations/aws-secret-manager/setup",
            "publisher": {
              "@type": "Organization",
              "name": "DQLabs Inc",
              "logo": "https://media.brand.dev/332adc35-5bc4-4d2b-bf78-256aa4a5e414.svg"
            }
            }`}
</script>

## Connecting AWS Secrets Manager to Prizm

Before starting, complete the [AWS prerequisites](/integrations/aws-secret-manager/prerequisites) to create an IAM user with Secrets Manager read access and generate an Access Key ID and Secret Access Key.

<Steps>
  <Step title="Open Integration settings">
    Navigate to **Organization** → **Integration** and click **Add** to open the channel catalog. Click the **Vault** filter tab, then click the **AWS secrets manager** tile to open the configuration form.

    <Frame>
      <img src="https://mintcdn.com/dqlabs/GiXAkw4MyBAWLJHq/images/image-66.png?fit=max&auto=format&n=GiXAkw4MyBAWLJHq&q=85&s=d4ba8d0ee9283880d0f1a96d081cf105" alt="Image" width="2446" height="1186" data-path="images/image-66.png" />
    </Frame>
  </Step>

  <Step title="Enter a name and optional description">
    Enter a display **Name** for this connection (e.g., `AWS Secrets Manager - Production`). Optionally add a **Description**.
  </Step>

  <Step title="Confirm the authentication type">
    **Authentication Type** is pre-set to **Access Key and Secret Key** — no change needed.
  </Step>

  <Step title="Enter the AWS Region">
    Enter the **Region** where your secrets are stored (e.g., `us-east-1`, `eu-west-1`). Prizm calls the Secrets Manager API endpoint in this region.
  </Step>

  <Step title="Enter the Access Key ID and Secret Access Key">
    Paste the **Access Key ID** and **Secret Access Key** generated during the prerequisites step.
  </Step>

  <Step title="Save the configuration">
    Click **Update Integration**. Prizm validates the credentials by calling the AWS Secrets Manager API and confirms the connection is active.

    <Frame>
      <img src="https://mintcdn.com/dqlabs/GiXAkw4MyBAWLJHq/images/image-66.png?fit=max&auto=format&n=GiXAkw4MyBAWLJHq&q=85&s=d4ba8d0ee9283880d0f1a96d081cf105" alt="Image" width="2446" height="1186" data-path="images/image-66.png" />
    </Frame>
  </Step>
</Steps>

## Configuration reference

| Field                   | Required | Description                                                                  |
| ----------------------- | -------- | ---------------------------------------------------------------------------- |
| **Name**                | Yes      | Display name for this connection (e.g., `AWS Secrets Manager - Production`). |
| **Description**         | No       | Optional description to distinguish this integration from others.            |
| **Authentication Type** | Yes      | Pre-set to **Access Key and Secret Key** — no change needed.                 |
| **Region**              | Yes      | AWS region where your secrets are stored (e.g., `us-east-1`).                |
| **Access Key ID**       | Yes      | AWS IAM access key ID for the user Prizm uses to read secrets.               |
| **Secret Access Key**   | Yes      | AWS IAM secret access key paired with the Access Key ID.                     |

<Note>
  When you rotate the IAM access key, update both the Access Key ID and Secret Access Key in Prizm before deactivating the old key to avoid connector failures.
</Note>