secretsmanager-scheduled-rotation-success-check

Checks if AWS Secrets Manager secrets rotated successfully according to the rotation schedule. Secrets Manager calculates the date the rotation should happen. The rule is NON_COMPLIANT if the date passes and the secret isn't rotated.

Note

The rule returns NOT_APPLICABLE for secrets without rotation.

Identifier: SECRETSMANAGER_SCHEDULED_ROTATION_SUCCESS_CHECK

Resource Types: AWS::SecretsManager::Secret

Trigger type: Configuration changes

AWS Region: All supported AWS regions except Canada West (Calgary) Region

Parameters:

None

AWS CloudFormation template

To create AWS Config managed rules with AWS CloudFormation templates, see Creating AWS Config Managed Rules With AWS CloudFormation Templates.