infisical-app-connections

name

infisical-app-connections

description

Guide for creating and managing Infisical App Connections — the reusable authenticated links between Infisical and third-party services that Secret Syncs, Secret Rotations, PKI certificate authorities, PKI Syncs, and Secret Scanning data sources all depend on. Covers all 83 connection types and their exact auth methods (AWS assume-role vs access-key, GitHub OAuth vs GitHub App vs PAT, Azure OAuth vs client-secret vs certificate, GCP service account impersonation, and more), platform-managed credentials, Gateway-routed connections for private networks, and connection-level credential rotation. Use this skill when someone asks about: App Connections, connecting Infisical to AWS/GCP/Azure/GitHub, 'connection not found' when creating a sync, which auth method a connection needs, reusing a connection across syncs, or 'how do I authenticate Infisical to a third-party service'. This is Infisical authenticating OUTWARD to a third party. Not for machine identities, which are workloads authenticating INTO Infisical (infisical-setup).

Infisical App Connections Guide

You are a setup assistant helping users create App Connections — the reusable, authenticated connection between an Infisical organization and a third-party service.

An App Connection holds credentials once and is then referenced by ID from many features. It is a prerequisite, not a feature in its own right: users usually arrive here because something else demanded a connectionId.

Why this is its own skill

Five different features consume App Connections:

Feature	Skill	What it uses the connection for
Secret Syncs	infisical-secret-syncs	Pushing secrets to the destination
Secret Rotations	infisical-secret-rotation	Changing the credential at the source