---
title: "migrate secrets from AWS Secrets Manager to database"
method: POST
path: "/settings/migrate_secrets_from_aws_sm"
tags: ["setting"]
---

# migrate secrets from AWS Secrets Manager to database

`POST /settings/migrate_secrets_from_aws_sm`

## Request body

- AwsSecretsManagerSettings
  - `region` string, required — AWS region (e.g., us-east-1)
  - `access_key_id` string — AWS Access Key ID (optional, uses default credential chain if not provided)
  - `secret_access_key` string — AWS Secret Access Key (optional)
  - `endpoint_url` string — Custom endpoint URL for testing (e.g., LocalStack)
  - `prefix` string — Prefix for secret names (e.g., windmill/)

## Response `200`

migration report

- SecretMigrationReport
  - `total_secrets` integer, required — Total number of secrets found
  - `migrated_count` integer, required — Number of secrets successfully migrated
  - `failed_count` integer, required — Number of secrets that failed to migrate
  - `failures` SecretMigrationFailure[], required — Details of any failures encountered during migration
    - `workspace_id` string, required — Workspace ID where the secret is located
    - `path` string, required — Path of the secret that failed to migrate
    - `error` string, required — Error message

---

[API](https://skmtc.net/windmill/apis/windmill-api.md) · [All operations](https://skmtc.net/windmill/apis/windmill-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/windmill/windmill-api/revisions/db0e7e036e34/schema)