All checks
Medium SecretsManager · regional

Remove unused Secrets Manager secrets

Flags secrets that have not been accessed within 90 days, indicating they may be stale or unused.

service
SecretsManager
severity
Medium
scope
evaluated in every region

How to fix it

To delete inactive Secrets Manager secrets, see Delete an AWS Secrets Manager secret in the AWS Secrets Manager User Guide.

  1. Go to the AWS Secrets Manager console.
  2. Identify secrets that have not been accessed within the specified period.
  3. Delete the unused secrets.

See which of your accounts this check is failing on.

Book a demo