AWS Secrets Manager introduces safe secrets handling in the Agent Toolkit for AWS

AWS Secrets Manager now offers a secret safety skill as part of the aws-core plugin in the Agent Toolkit for AWS, an open-source repository that equips AI coding agents with tools, knowledge, and guardrails for building on AWS. This skill enables developers to use secrets within agentic workflows without ever exposing secret values to the underlying model or session logs. Previously, developers using AI coding agents could retrieve secrets as plain text without guardrails, bringing sensitive values into agent context. The skill uses a two-layer approach: first, it steers the agent so the model never requests or receives raw secret values-instead prompting the developer to clarify intent and constructing a command that uses the secret rather than retrieving it. Second, a child process resolves secret references to actual values only at execution time, outside the agent process. Together, these layers ensure plaintext secrets never appear in model context, session logs, or agent memory-without disrupting the developer's workflow. The secret safety skill is available today for all agent harnesses supported by the Agent Toolkit for AWS-including Claude Code, Codex, and Cursor-and in all AWS Regions where Secrets Manager is available.