# AWS Secrets Manager Rotation Calculator AI Agent Connect

> Validate AWS Secrets Manager configurations against operational limits and rotation best practices.

## Overview
- **Category:** security
- **Price:** Free
- **Endpoint:** https://edge.vinkius.com/vk_preview_nt5etFHHZUPmTaLBzagZYMGg2VDP29VqRPu42xUA/ai-agent-connect
- **Tags:** aws, secrets-manager, rotation, compliance, cloud-security

## Description

This MCP server provides a deterministic way to validate AWS Secrets Manager configurations. It ensures your secrets comply with hard AWS limits, such as the 64 KB size constraint, and helps plan rotation schedules. Use `validate_secret_constraints` to check name and size limits, `calculate_rotation_parameters` to verify if rotation frequency and Lambda duration meet high-security standards, and `estimate_resource_usage` to project policy sizes and replication status. It also provides essential guidance on recovery windows and cross-account sharing via RAM.

## Tools

### calculate_rotation_parameters
Determines if the rotation schedule and Lambda configuration meet operational safety and frequency requirements

### estimate_resource_usage
Provides recommendations and estimates for versions, policies, and replication based on the scale of the secrets deployment

### get_lifecycle_and_sharing_guidelines
Returns standard guidance for recovery windows and cross-account sharing limits

### validate_secret_constraints
Checks if the provided secret configuration violates hard AWS limits for size and name length

## Prompt Examples

**Prompt:** 
```
Is my secret named 'prod/api/key' with a size of 50 KB valid?
```

**Response:** 
```
Yes, the secret name and size are within the allowed AWS limits.
```

**Prompt:** 
```
Calculate rotation parameters for a rotation every 2 days and a Lambda duration of 300 seconds.
```

**Response:** 
```
The rotation frequency is not compliant with high-security standards (which require 4 hours or less), but the Lambda duration is within the 900-second limit.
```

**Prompt:** 
```
Estimate resource usage for 50 secrets replicated across 3 regions.
```

**Response:** 
```
The estimated total policy size is 1000 KB. The requested replication is within the 5-region limit.
```

## Frequently Asked Questions

**What is the maximum size for an AWS secret?**
The maximum size for an individual AWS secret is 64 KB. You can use `validate_secret_constraints` to check if your secret size is within this limit.

**How often should I rotate my secrets?**
For high-security standards, rotation should occur every 4 hours or less. The `calculate_rotation_parameters` tool can help you determine if your schedule is compliant.

**How many versions can a secret have?**
While AWS does not enforce a hard limit, it is recommended to stay within 100 versions per secret for better manageability.