All checks
Medium SecretsManager · regional

Secrets Manager secrets should be rotated within a specified number of days

Flags secrets that have not been rotated within the last 90 days.

service
SecretsManager
severity
Medium
scope
evaluated in every region

How to fix it

To ensure secrets are rotated within the specified period, configure automatic rotation and set a rotation schedule that occurs at least every 90 days.

  1. Go to the AWS Secrets Manager console.
  2. Select the secret and enable automatic rotation.
  3. Choose and configure an AWS Lambda function for rotation.
  4. Set a rotation schedule that occurs at least every 90 days.

See which of your accounts this check is failing on.

Book a demo