Create and read a secret
Set a secret value (provided, read from a file or generated), read it back, list and describe the secrets of your tenant.
Versions and restore
Each write creates a version; list versions, read an old value back, delete a secret, then restore it with all its versions.
Rotation
Renew the value of a secret on demand or automatically every N days, and understand how your applications receive the new value.
Declare a secret by manifest
Describe a secret in an SSMSecret manifest versioned with your other manifests — value generated by the platform or set afterwards, rotation, deletion with the manifest — without ever putting the value in Git.
Inject a secret into an App
Give a service of an App access to a secret, key by key with env or all at once with envFrom, and understand what happens when the secret does not have a value yet.