v1

latestOpenAPI 3.0.0Apache 2.0 License2026-07-1422123151.4 KB

Replicates the secret to a new Regions. See Multi-Region secrets.

Secrets Manager generates a CloudTrail log entry when you call this action. Do not include sensitive information in request parameters because it might be logged. For more information, see Logging Secrets Manager events with CloudTrail.

Required permissions: secretsmanager:ReplicateSecretToRegions. For more information, see IAM policy actions for Secrets Manager and Authentication and access control in Secrets Manager.

post/#X-Amz-Target=secretsmanager.ReplicateSecretToRegions

Headers

X-Amz-Target'secretsmanager.ReplicateSecretToRegions' required

Request body

SecretIdstring required

The ARN or name of the secret to replicate.

ForceOverwriteReplicaSecretboolean

Specifies whether to overwrite a secret with the same name in the destination Region. By default, secrets aren't overwritten.

Response

Success

ARNstring

The ARN of the primary secret.

Example response

{
  "ARN": "arn:aws:secretsmanager:us-west-2:123456789012:secret:MyTestSecret-1a2b3c",
  "ReplicationStatus": [
    {
      "KmsKeyId": "alias/aws/secretsmanager",
      "Region": "eu-west-3",
      "Status": "InProgress"
    }
  ]
}