Low SecretsManager Regional

Secrets Manager secrets should be tagged

Description

Flags AWS Secrets Manager secrets that have no user-defined tags. Tags help associate secrets with their owning team and consuming application; untagged secrets are operationally opaque.


Remediation

Apply at least one user-defined tag to every Secrets Manager secret.

Steps

  1. Open the AWS Secrets Manager console and select the secret.
  2. Choose the Tags tab and select Edit.
  3. Add at least one tag with a non-aws: prefixed key.
  4. Save the changes.