cfn_nag icon indicating copy to clipboard operation
cfn_nag copied to clipboard

Secrets Manager Secret should explicitly specify KmsKeyId

Open medtog opened this issue 3 years ago • 0 comments

Hello, I am using dynamic references to retrieve a username and a password stored in AWS Secrets Manager: UserName: '{{resolve:secretsmanager:FSxSecret:SecretString:username}}' Password: '{{resolve:secretsmanager:FSxSecret:SecretString:password}}' My pipeline failed with the following error: "Secrets Manager Secret should explicitly specify KmsKeyId. Besides control of the key this will allow the secret to be shared cross-account" I don't want to share any Secret with any other account. I added the KmsKeyId property to my code and the pipeline is still failing. Any idea please ?

medtog avatar May 22 '22 11:05 medtog