---
title: "Create AWS Secrets Manager Account"
method: POST
path: "/v0/aws-secrets-manager/accounts"
tags: ["AWS Secrets Manager Accounts"]
---

# Create AWS Secrets Manager Account

`POST /v0/aws-secrets-manager/accounts`

Create a new AWS Secrets Manager account connection for the organization.

## Request body

- AwsSecretsManagerAccountPostRequest
  - `name` string — The name of the AWS Secrets Manager account connection
  - `role_arn` string — The IAM role ARN used for cross-account access via STS AssumeRole
  - `external_id` string — Optional external ID for secure cross-account role assumption
  - `description` string, nullable — An optional description of the account connection

## Response `201`

Account created successfully

- AwsSecretsManagerAccountResource
  - `id` integer — The unique identifier of the account connection
  - `name` string — The name of the account connection
  - `description` string, nullable — An optional description
  - `role_arn` string — The IAM role ARN used for cross-account access
  - `has_external_id` boolean — Whether an external ID is configured (value never exposed)
  - `created_at` string, date-time
  - `updated_at` string, date-time

## Other responses

- `400` — Validation error
- `401` — Unauthorized (missing or invalid API key)
- `403` — Forbidden

---

[API](https://skmtc.net/oneschema/apis/templates.md) · [All operations](https://skmtc.net/oneschema/apis/templates/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/oneschema/templates/revisions/40674aa6d4d9/schema)