AWS Secrets Manager Terraform: Least-Privilege Access
Summary
The article explains implementing least-privilege access for AWS Secrets Manager when you can't modify the identity policy. It demonstrates attaching a resource-based policy to a secret to tightly control who can read the secret, using VersionStage AWSCURRENT and a deny-by-default posture, and it provides Terraform examples and testing steps, plus security considerations like state exposure.